last executing test programs: 10.478191385s ago: executing program 2 (id=63): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) close(r0) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x4, 0x8, 0x400000000000, 0x8000}, {0x0, 0x100000000, 0xe, 0x9}, {0x8d73, 0xa97c, 0x1ff, 0x5}, {0x800, 0x3, 0x8, 0x9}], 0x4, 0x20, 0x3, 0x3}) clock_nanosleep(0x4, 0x1, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x3, 0x3, 0xec, 0x1, 0x5}}) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r1, r0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x31}, @multicast1, 0x0, "c23f331a0c8956a326504aa8a01f7c0c0f08e927a8b9df905e50e1817afddb79", 0x4, 0x8000, 0x7, 0x77}, 0x3c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000280)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x724e80, &(0x7f00000002c0)={@align=0x3, {0x800, 0x3, 0xc, 0x6}}, 0x383af05a, &(0x7f0000000300), &(0x7f0000000340)=0x2}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000003c0)={@local}) ioctl(r1, 0x1000000, &(0x7f0000000400)="8b979c4aca00c420ffc18631c58cd62dc34bd0cf17564a0b6a3aa83d2888da10728e85a334306530110531b0608155ffe6bd00b4538065de732d7383f269f3cb0988169a0bab0bc70c07126b4b5aa8e850fba97c9c4d2cff54dbf90c67ff9aca86aa109e79a4d2324a140818e4a867d3724f5b5e317afc80ef14bdfc2e2edc15ba05c8371dae5eaffaee784cfacce6a8b4aeec39aab5b1065137ffaaa08adde7ecfd369d9a91449474c7141e38d644baad8b0c3a58719a56d9d954c932c3a4be205a7e7d11c3ab1d35241dc0aa70") ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x68, 0x57, 0x7535, 0x4, @remote, @empty, 0x20, 0x20, 0x1, 0x9a98}}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000600)={@broadcast, @local, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x4da4, 0x6, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop, @ssrr={0x89, 0x17, 0x18, [@loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0x7c, 0x0, 0xc, [0x8]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x198, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "34a00201fa0b249baf36b277359fca87b04a736d8f96de21907b63d33ecb8fce3980b9be1eb5d7ce59d8cb397ea778a3f1cff8b23c56af2919d7ba1c1f7916a65e3bd16531e9027d5977da03d40e7225baafad3b34807f5618bb9f9f1efba4cbb9b4b57c2321585beeb02fabde9b03805556e3444957a8531039f3b0b34b"}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "d8f33a47fa030adf0d9ac1d423fe6f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '].\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x54e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) clock_settime(0x5, &(0x7f00000009c0)={r7, r8+60000000}) clock_settime(0x2, &(0x7f0000000a00)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000bc0), 0x8, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) r13 = getegid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000d80)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$netlink(r9, &(0x7f0000000f40)={&(0x7f0000000a40)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc, &(0x7f0000000b80)=[{&(0x7f0000000a80)={0xa8, 0x18, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@generic="dd7e1058482c1c5e7be1894bbae70c1f4a77adbd8483f3ff4abc7e84309e6b83c14c65166bf669dc5a9fb08e0b573bced230b847ffab1c737e5150129dcf513c8fbd082a5773721ce782c7995979e9e53e1d995e8f4837d3f5b44c3aec8c981ad754b645e32c0a3608665c4b79d6d6ecee313e8cb513440d8773bb441097bd883111f8ca2aff4737e4b0bbd9c0755dce67632966e4eb"]}, 0xa8}, {&(0x7f0000000b40)={0x20, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x10, 0xe, 0x0, 0x1, [@typed={0xc, 0xdf, 0x0, 0x0, @u64=0x4}]}]}, 0x20}], 0x2, &(0x7f0000000e80)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r3, r0, r10, r2, r3, r3]}}, @rights={{0x38, 0x1, 0x1, [r3, r11, r1, r0, r0, r0, r3, r1, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, 0xffffffffffffffff}}}], 0xc0, 0x880}, 0x40000) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000f80)={0xb000, 0x0, 0x8}) 10.447943276s ago: executing program 2 (id=64): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x4, 0x8073004, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) close(r0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407006e070000000000000002000300030000004800000038000000fcffffff0e00000000002000090005"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 10.415367647s ago: executing program 2 (id=65): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x101102, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa098) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0xcd1c4000) syz_usb_connect(0x2, 0x697, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xbd, 0x12, 0xc5, 0x10, 0x4113, 0x400, 0x614e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x685, 0x3, 0x7, 0x1, 0xc0, 0x94, "", [{{0x9, 0x4, 0x64, 0xe, 0xc, 0x5c, 0x4b, 0xcd, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x1c}, [@processing_unit={0xa, 0x24, 0x7, 0x5, 0x6, 0x1, "2493dd"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0xff, "e3"}]}], [{{0x9, 0x5, 0xd, 0xc, 0x3bf, 0x9, 0x4, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xff, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x5b7d}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0xaa, 0x10, 0x88, [@generic={0xa7, 0x0, "f2c6b62199a326f9a1c7477f5a650c7456c5461a181004c8a156cceda4a89f1e4afd00a7959a0f58e4e3f9406d2ea3a523cd7f41b2577f69a1669d9cbcafe535fbb10fc04713d2c7c56b54bd3a7711bb426856877709fef9e666f04c184fb52fb6827ad85cb74156ae4f2bf687ccdff57e8891712f08541cff02ecb248717ac6f11eff46606a0457c2094ff3fe722ac10eba1819bb4f926ba112fe9f35dc906349fdb6a539"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5c, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x5, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xa}]}}, {{0x9, 0x5, 0x2, 0x20, 0x20, 0x10, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xea, 0x4, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x3, 0x0, [@generic={0x9d, 0x23, "f05431a5e3fa93de8f6fe64532ac3504cd5cf03f563c54a5672e7ca8a287af0362d21cbf7e6a7c71cec5f76170eb79da52bdcfc58924dbaf780b88269aa12019630c38792bed8b6baad742f81083e41596f2fbbe0afda744288a06e8e5571f41028dc95c0cf81ae75b4d9feb372657474e2df2e18891ec54fed875d2ce47d7fb225179bcb1d1932a6ca18c7b4cda30481d186a961b9046d48c9079"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x5e, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x3, 0xd, 0x26}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0xdb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xc, 0x3, 0xe2}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x81, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x841}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc6, 0xa}]}}]}}, {{0x9, 0x4, 0x25, 0xa, 0xe, 0x5e, 0x9d, 0x65, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x9, 0xfe}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x60, 0x4, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x9, 0x1, 0xfd}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x2, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x8e55c4c66f552e33, 0x9, 0x9}]}}, {{0x9, 0x5, 0x3, 0x11, 0x8, 0x0, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x401}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x6, 0xc5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x88}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0x4033abca497c1a74, 0x4, 0x8, 0x5, 0xff, 0x84, [@generic={0x59, 0x18, "91e52c7ec0d7d7098bac87ebe1e72f0311c68cbd89b5eb45e4290591bb0c2766532a2aa0dbe69464706790f6dc08c1ce5ad437c590991194e7519f6f28e8d8b07fa7f4bd2d2ffd2afa82417d7c15eaaa18aa48cda21b45"}, @generic={0x36, 0x0, "dae185101535cb00cddd6afd6057eb1a1cc751c82bd186516789e5536278ea7087095c6e4d071e90b064bc91613c2fd02d1bc119"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x40, 0x81, 0x2, [@generic={0xcb, 0x21, "50f431b5ce182e54a95eb1ba2e8acf34a75aca3f1ee8691adbc7890fbbfc5e7fd520618f52e948feee3c83b51dd40fd627be3e21c46f57a8648258ce47f4ad3d5077717b22b9069325d89531a3912bfab33897aa222ee751213b26e7263f7df28333eef1b986696615d018d4977c15f6582fbe668b826e59ecee28bdfb16dac398f1da8809657ecf0eb47b01904b956f93b45eaa38d55ed680afc8e05d10626164b8714724ed3a5c38fdbe2aeaa028739d8241118a2e9ae1431065a0138a0dfbdcdbd3c9915930c6fc"}, @generic={0x38, 0x30, "ec4348095f8ab9d483dce0caa1db1463a121864fccf39d09915b6989b011f132c39ccf5d9ea351221a9475c58ef7e1dd128c67dea946"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x24, 0x7, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x4, 0x57, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x2, 0x2, 0x5, [@generic={0x83, 0xb, "99001f1250c74da09af2420b11941bd0868a40b1375cf71c60684866d4b3076366493e26eb9c22769829b3415eb00e950f35120f7aefbcac2e88b8341aed0eeba3522f54f14b23c5bb48e0d6e50c9da213fd1db295ed0c6db04086a8ee7e636cd1afd152278b9b34c1d3a131f48c24525b6c30e1100a61c941090fc8cbd697a51f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x1, 0x2, 0xb}}, {{0x9, 0x5, 0x89, 0x0, 0x3ff, 0x12, 0x0, 0xfd, [@generic={0x76, 0x24, "76665a4b5c2115fbc6319fab0929b1e1801a390d6c789c2d36f8eb44a6f9456541a8997ce90960e6eedd723aa3ae11f745947c83ccabc77c665b62bf7fbd4adfece967103f03d156b8c651e1395359f14bfa98599bde4feaa85cf5a4252a78de880244ba1174b8a83bbade3b12e9a63f3164fa60"}, @generic={0x8f, 0x1, "9e21fcdc5dd998bb061c3b9952c4f5cc3e3b5b099f808c0b81dc352aab57616b87703ef4db155022363f1635521e36a0874083fc94418fb891ba29a99e1a712a308e08ec438bd696af09057c499dad4208d633066264442067c4ccf7f91f509ed5d015fe8f00b46cf70b246c68bdbacc546cda47233fad2534ed7281bde40c6f41c6b47e892d731b3417624501"}]}}]}}, {{0x9, 0x4, 0x95, 0xfc, 0x0, 0xe0, 0x5f, 0x96, 0x5, [@generic={0x4f, 0x11, "60efa02f834a9df32520c9d569dfc843a3e216bdbce0dd0f71a3f6ad3f635ab001ce7c234b8b4d80f1cf622fbf5ec9136034c4b479dd71b9ab0ec7e4a4e3625e0800633e66489bf7b2fab8d69c"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ef693d350b"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0xca, 0xb4, 0x3adf, 0x7f}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x1, 0xf8, 0x1, 0x7, 0x2}, @dmm={0x7, 0x24, 0x14, 0x10, 0x401}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x45c, 0x3, 0x7, 0x401, 0xc6}]}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x201, 0x3d, 0x84, 0xa8, 0x20, 0x1}, 0x29, &(0x7f0000000a00)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0xd4, 0x6, 0x7ffffff, 0xf00, 0x1, [0xc000, 0xffc000, 0xff00, 0xc0, 0xff3f0f, 0xff3fc0]}]}, 0x2, [{0x102, &(0x7f0000000a40)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xf0ff}}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="15ca60ac578d2cb1450146d54d12bd3bbd03abf70f876dc30cd4b49e6692", 0x1e) 8.518493623s ago: executing program 2 (id=73): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000040)={@desc={0xffff8000, 0x0, @desc2}}) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x0, 0x900, 0x1, 0x2000008}) 8.461022124s ago: executing program 2 (id=74): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x6}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000780)=0x208) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000007c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1a7) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) r4 = open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000700)={0x1000, 0x10ffff, 0xfffffffd}) pipe2$9p(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREADDIR(r5, &(0x7f0000000840)={0x28, 0x29, 0x2, {0xfffffffe, [{{0x4, 0x1}, 0xf, 0x4, 0x5, './dev'}]}}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000740)={@desc={0x1, 0x0, @desc2}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0xa0402, 0x0) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, r6, &(0x7f0000000340)="a3", 0x1, 0xe3}]) write(r6, &(0x7f00000003c0)="b0", 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000400)={'veth1\x00', &(0x7f0000000440)=@ethtool_cmd={0xa, 0xc, 0x8, 0x7, 0x2, 0xc, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0xe5, 0x1, [0x9, 0xfffffda0]}}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) 8.399230636s ago: executing program 2 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000000)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x8, 0x7, 0x7ffffff9}, 0x10) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700400001000000", 0x18) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) write(r3, &(0x7f0000000000)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x8, 0x7, 0x7ffffff9}, 0x10) (async) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700400001000000", 0x18) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) 8.081276303s ago: executing program 0 (id=78): r0 = gettid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r1, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.933250627s ago: executing program 0 (id=80): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socketpair(0x1f, 0x2, 0x1, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='2\n', 0x2) 7.889736078s ago: executing program 0 (id=81): unshare(0x62040200) gettid() (async) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = inotify_init() read(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e24, @private=0xa010102}}) 7.773181051s ago: executing program 0 (id=82): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x50, 0x37, 0xfc, 0x1}, {0x28, 0x1, 0xb6, 0x7fff}, {0x6, 0x6, 0x0, 0x1057c}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='bfq', 0x3) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x1057c) 7.717114352s ago: executing program 0 (id=83): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000001240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x38, 0x30, 0x30, 0x61, 0x30, 0x61, 0x30, 0x30, 0x30, 0x36, 0x30, 0x33]}, &(0x7f0000000300)={0x0, "00112233445566778899aabbccddeeff00112233445566028899aabbccddeeff00020000000000000000aabbccddeeff00112233445566778899aa92ccddeeff", 0x1b}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x34, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x31, 0x30, 0x36]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) (async, rerun: 64) add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, r0) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x30, 0x65, 0x61, 0x30, 0x61, 0x64, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x7, 0x30, 0x32]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x31, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') pread64(r1, &(0x7f00000013c0)=""/102385, 0x18ff1, 0x41e) (async) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x36, 0x30, 0x64, 0x66, 0x30, 0x30, 0x30, 0x30, 0x2, 0x66]}, &(0x7f0000000f00)={0x0, "00112233445566778899aabbccddeeff00112233b53dd18a92f5bd0bccddeeff001122334455bae15cbe15f1ededeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f80), &(0x7f0000000fc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001000)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x800000, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000d80)=0x29) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000dc0)=0x7f) add_key$fscrypt_v1(&(0x7f0000001080), &(0x7f00000010c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async, rerun: 32) add_key$user(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x2}, &(0x7f0000001200)='c', 0x1, r0) (rerun: 32) 7.716806322s ago: executing program 0 (id=84): r0 = socket$inet_tcp(0x2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r1, &(0x7f00000022c0)={0x2, 0x7, 0x0, 0x5}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x41f4, &(0x7f0000002300)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3}, &(0x7f0000002380)=0x0, &(0x7f00000023c0), &(0x7f0000002400)) syz_ublk_add_dev(0xffffffffffffffff, r3, r2, 0x0, &(0x7f0000002440)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000024c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000002500)=0x0) write(0xffffffffffffffff, &(0x7f0000002900)="1c0000001800077bab092500090007000a07000000000006000036", 0x1b) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)=ANY=[@ANYBLOB="0a00fc9ba5c7cc8b411e00000000"], 0x1c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002840)={0x1, &(0x7f0000002880)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x401c2103, &(0x7f00000028c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000002540)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000025c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) listen(r9, 0x2400000) mount$9p_tcp(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', &(0x7f00000001c0), 0x8010, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) close(0x3) chdir(&(0x7f0000001240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a0, &(0x7f0000002a00)={'syzkaller0\x00'}) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x400, 0x0) 4.020647312s ago: executing program 1 (id=100): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000500)={{}, {0x5}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="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", 0x159, 0x0, &(0x7f0000000380)={0x2, 0x141, {0x0, 0xc, 0xf9, "b8f13ab71b5a2b32da3d4d651dcc9f783bed59b57ef78a1820107e357d9d9a9bc7e977eae5c424db2c602450166f835df7377d4c91e5f4a827f7e5af03692eb1cb6d8305ccd79a2297c8c506da7a2cc57b17a9ddc047afc5e875239f59c6d64cf4444d7a1ce8061b4337c1783218c2bd8b65a23088e17dd276605c3eea927dae7a012aa3fa93c74806525a6de73b284e6681ef1a1242fcf49e36bc4924516a27887ccbf08aa1a67a7bf61ff4f944d715a4e01bf375c8177c763e684239036f67fffac5f4298ba6bc4fd0ec12eeea9d5a3cac84d67dbd640a33cb8ebb233a3c042b1f403234d08f706f8cf1bb39fbb04aea52d6d39e72f784c4", 0x3b, "df1c83de41f52828cccf28b8c3e8b3fe25eb43dfb4bc3801843de0f6d154ba9fea3a629cbb37688a477e473b6a598543a19fb0e3b433f7caa158cd"}, 0x20, "ce902d8a3f78f81c4307549bde012ec168e5a452a707154a4483824eaf5d2972"}, 0x16d}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e854988b147043022effffb3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002b80)={0x24, 0x0, &(0x7f0000002a80)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000002b00)=ANY=[@ANYBLOB='\x00\"\x00\x00\x00'], 0x0}, &(0x7f0000002d40)={0x2c, 0x0, 0x0, &(0x7f0000002c80)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) 2.787325432s ago: executing program 3 (id=104): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={0x1, 0x1, 0xc9a, 0x9, 0x8, 0x9}) fcntl$setstatus(r0, 0x4, 0x8e000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10020, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000400)={0x0, 0xfb89, 0x1, 0x202, 0x40000090}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 2.597608846s ago: executing program 3 (id=105): r0 = open(0x0, 0x60840, 0x2) fcntl$setlease(r0, 0x400, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_print_times', 0x40901, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1}, 0x6e) (async) listen(r1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x0) (async) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb7, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@typed={0x4}, @nested={0x14, 0x6, 0x0, 0x1, [@nested={0x10, 0x147, 0x0, 0x1, [@typed={0x4, 0x34}, @typed={0x8, 0x7a, 0x0, 0x0, @binary="7e8359e8"}]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="bf74a7df"]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0022180000000501e70025ff0904a10109fe913b858508950159309102c0"], 0x0}, 0x0) 2.141117348s ago: executing program 1 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}}) 2.103355278s ago: executing program 1 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x28) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x81c0, 0x80000001) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000680)={0x1, 0x0, [{0x40000080}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x11d) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x20400, 0x20) (async) r4 = syz_socket_connect_nvme_tcp() recvmsg(r4, &(0x7f0000000640)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/113, 0x71}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/181, 0xb5}], 0x4, &(0x7f0000000600)=""/17, 0x11}, 0x12000) setxattr$security_capability(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x3) fdatasync(r3) 2.00648134s ago: executing program 1 (id=108): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x3e, "", [{{0x9, 0x4, 0x0, 0x9, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x81, 0x2}}}}}]}}]}}, 0x0) r1 = syz_create_resource$futex(&(0x7f0000000000)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000080)=0x1) clock_gettime(0x0, &(0x7f00000000c0)) r3 = syz_create_resource$futex(&(0x7f0000000100)=0x1) futex(r1, 0x3, 0x420a, 0x0, r3, 0x2) futex(r1, 0x5, 0x1, 0x0, r2, 0x3000020) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x7) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0x24, 0x28, {0x28, 0x24, "7f799d6653fb22f808eadc3ab7907e015adec3e1c5a72561ea2faebed8bbc95a27fe344bf301"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 944.935606ms ago: executing program 3 (id=109): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random}) 943.469246ms ago: executing program 3 (id=110): iopl(0x3) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) (rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x33, 0x8) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000180), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000b00)=0x3, 0x15) syz_clone3(&(0x7f0000000b40)={0x23800000, &(0x7f0000000bc0), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@l2={0x1f, 0x924, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xa}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="a467c9306a23e0c91acdb83a26bac402ec15a3046de0cd33ca04f87607b4a8141abfcd95a14da98f77c074053db0c7cdc7321a85899817376b247b1b958361d5af79f1eea6fa6ff4729584db958cae484c610114accfec542e5c6d699fa489ef1f3bbee9ee9037be5bb8a82fecd854d9a630f42d499eacd588b356c8b511be75c4297bf90936f42f50e2ffef237fb81fb7a70da564f76e4922f647406b85e4f248fe0dd0aaff524bde7afac329de7071a97178ec78b3aefafd9264e014e4918a938594100834", 0xc6}], 0x1, &(0x7f0000000440)=[{0x100, 0x108, 0x8, "7fc4df716a30880d339de27d6149f7f8187a1d14ec65f845cc95e1fb2db6b0b2699221da8728f806674629212d135b892c5a4dce348a2b2675b6b50eef4f1738854c81127bb52bb1878466e347f538feede979763358b20d18a7d0ae10c556ddb84cba05290eb4e8fe8ee65fb86e7a4696c419532af61535af6528162b58967fadd7da72fb386c5ed3289f9a94f665490b08bb60bcaa927cca98646d78041010f2b69e6d7021353840099e8aceabcfe5033034390ebc8cfbd6aafe798dd8efa4c47b35ab8ff1661d12707d64104d9d9589ae0699fa9295f81f89cff0b48299c98a7e6b8e747d6b9d575478"}, {0x70, 0x109, 0xaee8, "b25da5191cce532208bc4fd508b86440c5e58389224f10dd773cb57304c54cf5c28d286e3fe6ef09d8adeba124c1ab64e9150cf35766c740950d5e7944e6d2e2045092effcd1b6ad423fa61df182e96eb4c72a1d0634f9bfd9156aa956"}], 0x170}}], 0x1, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x8, &(0x7f0000000c00)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 385.67734ms ago: executing program 1 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, 0x0}], 0x1, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000700)="ea9c00ae08660f6837660f3823aa0030b883008ee0f30fbdefea95fa1001b8f8008ed80f00d8360fb26bf60f076626660f2a4a3c", 0x34}], 0x1, 0x24, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000340)={0x2080}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x60, r7, 0x1, 0x0, 0x25dfdbff, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x20008000) r8 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) read$FUSE(r8, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x8900, 0x1, 0x3}, 0x18) openat$incfs(r9, &(0x7f0000000480)='.log\x00', 0x80240, 0x88) 281.206553ms ago: executing program 1 (id=112): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000002080)={0x0, 0xffff, 0x0, 0x0, 0x0}) write$FUSE_LK(r0, &(0x7f0000002100)={0x28, 0x0, r1, {{0x5899, 0x85, 0x1, r3}}}, 0x28) r4 = syz_ublk_setup_io_uring(0x1195, &(0x7f0000002140)={0x0, 0xec91, 0x1000, 0x3, 0x2db}, &(0x7f00000021c0)=0x0, &(0x7f0000002200), &(0x7f0000002240)) syz_io_uring_setup(0x1f4a, &(0x7f0000002280)={0x0, 0x2fd9, 0x0, 0x2, 0x162}, &(0x7f0000002300), &(0x7f0000002340)=0x0, &(0x7f0000002380)) r7 = mmap$IORING_OFF_SQES(0x0, 0xffff, 0x1000004, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f00000023c0)=@ublk_end_user_recovery_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207511, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0, r2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000002440)={"96092167d38c796f9f35fd10d9194c60", 0x0, 0x0, {0x1, 0xc35}, {0x8001, 0x263}, 0x200, [0x0, 0x2, 0x9, 0xfffffffffffffffc, 0x2, 0x0, 0x3, 0xee3, 0xfffffffffffffffe, 0x1, 0x2, 0xc9ee, 0x4, 0x6, 0x0, 0x2]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000025c0)={{r0}, r9, 0x10, @inherit={0x70, &(0x7f0000002540)={0x1, 0x5, 0x3, 0x8, {0x1, 0x7fff, 0x5, 0x9, 0x8}, [0xb, 0x9c1, 0x2, 0x28e723a7, 0x0]}}, @subvolid=0x2}) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) poll(&(0x7f00000035c0)=[{r10, 0xc}, {r8, 0x8}, {r4, 0x100}], 0x3, 0xff) pselect6(0x40, &(0x7f0000003600)={0x154, 0x4, 0x8, 0x9, 0x5, 0x6, 0x1000, 0x8}, &(0x7f0000003640)={0xfffffffffffffff8, 0x1, 0xd, 0x54, 0xce95, 0x9, 0x4, 0x6}, &(0x7f0000003680)={0x9, 0x5, 0x8e, 0x6, 0x9, 0xff, 0x8, 0x95}, &(0x7f00000036c0)={0x77359400}, &(0x7f0000003740)={&(0x7f0000003700)={[0xc]}, 0x8}) socket$inet6(0xa, 0xa, 0x6) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000003780), 0x2, 0x0) write$selinux_load(r11, &(0x7f00000037c0)={0xf97cff8c, 0x8, 'SE Linux', "6da711b7154a0fffea0df0f498e859c659e5198573b44034514d5ea3b3df0fef93b5a96ca098aa0006fd7e631353e4d461771f6b5cf2f18f308189dd454c7069a7d2debaef747dc26b247aae22b802de50c9be0436f9638cdeb6a4a6cc35f975aced13aa8eb8a41091f7acd5e8db"}, 0x7e) r12 = open$dir(&(0x7f0000003840)='./file0\x00', 0x0, 0xc4) openat(r12, &(0x7f0000003880)='./file0\x00', 0x0, 0x18) r13 = dup(r10) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000003900)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000003a00)=0xe8) sendmsg$netlink(r13, &(0x7f0000003b40)={&(0x7f00000038c0)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b00)=[{&(0x7f0000003a40)={0xb0, 0x10, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x4, 0x4c}, @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@mcast2}, @generic="41586163838bbb2c326a19d12d0971c330a0fc5c3dccd1d4514b5bc128cffde1dbfff242db6d82c42f7e726db55b52e8ed9f40c2153837cb8f5382a6c76b11758f2116d64503e79739855d031c355fb8ff454beb266293db4c53e3f262a53440442c2c261301b977e56c818d58bde698e4f68e2f37f30a2be257", @nested={0x4, 0x10b}, @typed={0x8, 0xf2, 0x0, 0x0, @uid=r14}]}, 0xb0}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r15, 0x6, 0x1f, &(0x7f0000003b80)="e085ac0f83fbbc1ebd245811b5a4a9114e67661722969d101b5f", 0x1a) getsockopt$inet_tcp_buf(r13, 0x6, 0xf, &(0x7f0000003bc0)=""/115, &(0x7f0000003c40)=0x73) syz_open_dev$mouse(&(0x7f0000003c80), 0xffff, 0x238000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r13, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x1c, 0x3, 0x3, 0x401, 0x0, 0x0, {0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000003e40)={&(0x7f0000003dc0)=[{0xffff, 0x7, 0x40, 0x5}, {0x1, 0x9, 0xfffffffffffffffc, 0x3ff}, {0x1000, 0x0, 0x1, 0x7fff}, {0xab, 0x6, 0x9, 0x5}], 0x4, 0x20, 0xeb1, 0x4}) clock_gettime(0x3, &(0x7f0000003e80)) recvmmsg(r10, &(0x7f000000c380)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003ec0)=""/98, 0x62}, {&(0x7f0000003f40)=""/113, 0x71}, {&(0x7f0000003fc0)=""/99, 0x63}, {&(0x7f0000004040)=""/240, 0xf0}, {&(0x7f0000004140)=""/112, 0x70}, {&(0x7f00000041c0)=""/35, 0x23}], 0x6, &(0x7f0000004280)=""/161, 0xa1}, 0x7fffffff}, {{&(0x7f0000004340)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000005780)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/232, 0xe8}, {&(0x7f00000054c0)=""/84, 0x54}, {&(0x7f0000005540)=""/92, 0x5c}, {&(0x7f00000055c0)=""/151, 0x97}, {&(0x7f0000005680)=""/168, 0xa8}, {&(0x7f0000005740)=""/45, 0x2d}], 0x7, &(0x7f0000005800)=""/6, 0x6}, 0x80}, {{&(0x7f0000005840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006a80)=[{&(0x7f00000058c0)=""/251, 0xfb}, {&(0x7f00000059c0)=""/97, 0x61}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/53, 0x35}], 0x4, &(0x7f0000006ac0)=""/161, 0xa1}, 0x8}, {{0x0, 0x0, &(0x7f0000007b80)=[{&(0x7f0000006b80)=""/4096, 0x1000}], 0x1, &(0x7f0000007bc0)=""/4096, 0x1000}, 0x400}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008bc0)=""/137, 0x89}, {&(0x7f0000008c80)=""/28, 0x1c}], 0x2, &(0x7f0000008d00)=""/250, 0xfa}, 0x4}, {{&(0x7f0000008e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f000000a040)=[{&(0x7f0000008e80)=""/96, 0x60}, {&(0x7f0000008f00)=""/231, 0xe7}, {&(0x7f0000009000)=""/34, 0x22}, {&(0x7f0000009040)=""/4096, 0x1000}], 0x4, &(0x7f000000a080)=""/4096, 0x1000}, 0x8}, {{&(0x7f000000b080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f000000b340)=[{&(0x7f000000b100)=""/92, 0x5c}, {&(0x7f000000b180)=""/254, 0xfe}, {&(0x7f000000b280)=""/179, 0xb3}], 0x3, &(0x7f000000b380)=""/4096, 0x1000}, 0xe}], 0x7, 0x122, &(0x7f000000c540)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) 1.14259ms ago: executing program 3 (id=113): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(r3, &(0x7f00000005c0)='./tracing/uprobe_events\x00', 0x102) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/uprobe_events\x00', 0x82003, 0x0) 0s ago: executing program 3 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000c00000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="48c7c00200010048c7c1020001004831d20f01c1f4", 0x15}], 0x1, 0x0, 0x0, 0x0) socket(0x2c, 0x3, 0xbe76) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff"], 0x310) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000000000104"], 0x76) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 23.112052][ T36] audit: type=1400 audit(1792415778.530:62): avc: denied { rlimitinh } for pid=276 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.115081][ T36] audit: type=1400 audit(1792415778.530:63): avc: denied { siginh } for pid=276 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 30.848317][ T36] audit: type=1400 audit(1792415786.270:64): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.852262][ T288] cgroup: Unknown subsys name 'net' [ 30.871129][ T36] audit: type=1400 audit(1792415786.280:65): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.899507][ T36] audit: type=1400 audit(1792415786.310:66): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.900426][ T288] cgroup: Unknown subsys name 'devices' [ 31.021086][ T288] cgroup: Unknown subsys name 'hugetlb' [ 31.026779][ T288] cgroup: Unknown subsys name 'rlimit' [ 31.143362][ T36] audit: type=1400 audit(1792415786.570:67): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.166825][ T36] audit: type=1400 audit(1792415786.570:68): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.192112][ T36] audit: type=1400 audit(1792415786.570:69): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.231609][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.240730][ T36] audit: type=1400 audit(1792415786.670:70): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 31.268295][ T36] audit: type=1400 audit(1792415786.670:71): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.296032][ T36] audit: type=1400 audit(1792415786.730:72): avc: denied { read } for pid=288 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.324720][ T36] audit: type=1400 audit(1792415786.730:73): avc: denied { open } for pid=288 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.325418][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.294610][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.301824][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.309100][ T297] bridge_slave_0: entered allmulticast mode [ 32.315443][ T297] bridge_slave_0: entered promiscuous mode [ 32.327519][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.334958][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.342225][ T297] bridge_slave_1: entered allmulticast mode [ 32.348903][ T297] bridge_slave_1: entered promiscuous mode [ 32.378101][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.385216][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.392444][ T296] bridge_slave_0: entered allmulticast mode [ 32.398960][ T296] bridge_slave_0: entered promiscuous mode [ 32.416457][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.423878][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.431149][ T296] bridge_slave_1: entered allmulticast mode [ 32.437602][ T296] bridge_slave_1: entered promiscuous mode [ 32.467318][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.474466][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.481644][ T298] bridge_slave_0: entered allmulticast mode [ 32.488392][ T298] bridge_slave_0: entered promiscuous mode [ 32.497999][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.505109][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.512292][ T298] bridge_slave_1: entered allmulticast mode [ 32.519239][ T298] bridge_slave_1: entered promiscuous mode [ 32.528896][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.536150][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.543643][ T295] bridge_slave_0: entered allmulticast mode [ 32.549980][ T295] bridge_slave_0: entered promiscuous mode [ 32.557013][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.564236][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.571418][ T295] bridge_slave_1: entered allmulticast mode [ 32.578134][ T295] bridge_slave_1: entered promiscuous mode [ 32.703224][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.710521][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.718305][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.725631][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.748289][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.755413][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.762838][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.770172][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.816524][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.824702][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.832439][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.840253][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.854545][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.861678][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.881300][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.889064][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.942831][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.949944][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.960537][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.968896][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.005469][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.013633][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.021825][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.029740][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.050715][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.059367][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.067752][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.075767][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.117474][ T297] veth0_vlan: entered promiscuous mode [ 33.146112][ T296] veth0_vlan: entered promiscuous mode [ 33.153176][ T295] veth0_vlan: entered promiscuous mode [ 33.170949][ T297] veth1_macvtap: entered promiscuous mode [ 33.187623][ T298] veth0_vlan: entered promiscuous mode [ 33.197074][ T295] veth1_macvtap: entered promiscuous mode [ 33.207831][ T296] veth1_macvtap: entered promiscuous mode [ 33.245604][ T298] veth1_macvtap: entered promiscuous mode [ 33.262722][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.364849][ T329] type: 653514241 invalid [ 33.370529][ T332] type: 653514241 invalid [ 33.470192][ T344] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6'. [ 33.547686][ T354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.568819][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.753791][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.781885][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.795830][ T9] usb 4-1: config 1 has no interface number 0 [ 33.806368][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 33.819204][ T9] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 33.832697][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.846359][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.855381][ T9] usb 4-1: Product: syz [ 33.861704][ T9] usb 4-1: Manufacturer: syz [ 33.866889][ T9] usb 4-1: SerialNumber: syz [ 34.229364][ T402] incfs: Options parsing error. -22 [ 34.234934][ T402] incfs: mount failed -22 [ 34.282972][ T314] tipc: Started in network mode [ 34.288047][ T314] tipc: Node identity ac14142f, cluster identity 4711 [ 34.295627][ T314] tipc: New replicast peer: 255.255.255.255 [ 34.308309][ T314] tipc: Enabled bearer , priority 10 [ 34.322523][ T314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.331806][ T314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.398386][ T416] netlink: 5 bytes leftover after parsing attributes in process `syz.0.14'. [ 34.618688][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.706666][ T422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=422 comm=syz.2.17 [ 34.759102][ T9] cdc_ncm 4-1:1.1: bind() failure [ 34.778937][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 34.790198][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.808775][ T10] usb 2-1: config 0 has no interface number 0 [ 34.815110][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 34.831867][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.848707][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.856776][ T10] usb 2-1: Product: syz [ 34.874110][ T425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 34.878809][ T10] usb 2-1: Manufacturer: syz [ 34.887618][ T10] usb 2-1: SerialNumber: syz [ 34.899578][ T10] usb 2-1: config 0 descriptor?? [ 34.909248][ T10] smsc75xx v1.0.0 [ 34.914177][ T427] FAULT_INJECTION: forcing a failure. [ 34.914177][ T427] name failslab, interval 1, probability 0, space 0, times 1 [ 34.932989][ T427] CPU: 1 UID: 0 PID: 427 Comm: syz.2.18 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 34.933031][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.933064][ T427] Call Trace: [ 34.933072][ T427] [ 34.933082][ T427] __dump_stack+0x21/0x30 [ 34.933130][ T427] dump_stack_lvl+0x140/0x1c0 [ 34.933170][ T427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.933215][ T427] ? update_cfs_group+0x127/0x250 [ 34.933245][ T427] dump_stack+0x19/0x20 [ 34.933285][ T427] should_fail_ex+0x3c2/0x510 [ 34.933313][ T427] should_failslab+0xac/0x100 [ 34.933344][ T427] kmem_cache_alloc_noprof+0x42/0x410 [ 34.933381][ T427] ? vm_area_dup+0x3f/0x560 [ 34.933417][ T427] ? xfd_validate_state+0x68/0x140 [ 34.933458][ T427] vm_area_dup+0x3f/0x560 [ 34.933490][ T427] ? __split_vma+0x1b8/0xc10 [ 34.933528][ T427] __split_vma+0x1ce/0xc10 [ 34.933570][ T427] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 34.933613][ T427] ? mas_find+0x415/0x620 [ 34.933646][ T427] vms_gather_munmap_vmas+0x446/0xd90 [ 34.933692][ T427] mmap_region+0x621/0x1d10 [ 34.933733][ T427] ? __cfi_mmap_region+0x10/0x10 [ 34.933784][ T427] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 34.933824][ T427] ? __kasan_check_read+0x15/0x20 [ 34.933864][ T427] ? __get_unmapped_area+0x406/0x470 [ 34.933901][ T427] ? shmem_mapping+0x11/0x50 [ 34.933939][ T427] do_mmap+0xa47/0x1370 [ 34.933976][ T427] ? __cfi_do_mmap+0x10/0x10 [ 34.934013][ T427] ? __kasan_check_write+0x18/0x20 [ 34.934047][ T427] ? down_write_killable+0xee/0x2d0 [ 34.934086][ T427] ? __cfi_down_write_killable+0x10/0x10 [ 34.934121][ T427] ? do_futex+0x32a/0x510 [ 34.934154][ T427] vm_mmap_pgoff+0x367/0x4b0 [ 34.934190][ T427] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 34.934227][ T427] ? __fget_files+0x2bc/0x330 [ 34.934254][ T427] ksys_mmap_pgoff+0x165/0x1e0 [ 34.934292][ T427] __x64_sys_mmap+0x121/0x140 [ 34.934321][ T427] x64_sys_call+0x13bf/0x2ee0 [ 34.934349][ T427] do_syscall_64+0x57/0xf0 [ 34.934377][ T427] ? clear_bhb_loop+0x50/0xa0 [ 34.934413][ T427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.934445][ T427] RIP: 0033:0x7fb63119e559 [ 34.934475][ T427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.934499][ T427] RSP: 002b:00007fb63205c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 34.934539][ T427] RAX: ffffffffffffffda RBX: 00007fb631426180 RCX: 00007fb63119e559 [ 34.934563][ T427] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000000000 [ 34.934582][ T427] RBP: 00007fb631235ab8 R08: 0000000000000087 R09: 0000000000000000 [ 34.934600][ T427] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 34.934616][ T427] R13: 00007fb631426218 R14: 00007fb631426180 R15: 00007fff80fac108 [ 34.934643][ T427] [ 35.226315][ T429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.235009][ T429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.247275][ T314] option changes via remount are deprecated (pid=313 comm=syz.3.4) [ 35.292138][ T45] usb 4-1: USB disconnect, device number 2 [ 35.348743][ T9] tipc: Node number set to 2886997039 [ 35.451431][ T436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.462822][ T435] overlay: ./file0 is not a directory [ 35.595184][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.662037][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 35.674546][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.685161][ T456] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 35.905596][ T478] kvm: MWAIT instruction emulated as NOP! [ 36.088706][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.241481][ T45] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 36.250631][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.258740][ T45] usb 4-1: Product: syz [ 36.263057][ T45] usb 4-1: Manufacturer: syz [ 36.267688][ T45] usb 4-1: SerialNumber: syz [ 36.274252][ T45] ums-karma 4-1:1.0: USB Mass Storage device detected [ 36.282235][ T45] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 36.282235][ T45] Please send a copy of this message to and [ 36.476035][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.484708][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.844641][ T36] kauditd_printk_skb: 132 callbacks suppressed [ 36.844665][ T36] audit: type=1400 audit(1792415792.270:206): avc: denied { write } for pid=474 comm="syz.3.35" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.618717][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.619558][ T452] Bluetooth: hci0: command 0x1003 tx timeout [ 38.095751][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 38.107233][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 38.117008][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 38.126776][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 38.136391][ T10] usb 2-1: USB disconnect, device number 2 [ 38.910562][ T45] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 38.920081][ T45] usb 4-1: USB disconnect, device number 3 [ 49.705763][ T36] audit: type=1400 audit(1792415805.130:207): avc: denied { map } for pid=494 comm="syz.1.39" path="socket:[5400]" dev="sockfs" ino=5400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 49.736637][ T500] Unsupported ieee802154 address type: 0 [ 49.742697][ T36] audit: type=1400 audit(1792415805.160:208): avc: denied { bind } for pid=495 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.762339][ T500] Unsupported ieee802154 address type: 0 [ 49.768052][ T500] Unsupported ieee802154 address type: 0 [ 49.775316][ T499] binder: Unknown parameter '0x0000000000000004' [ 49.781961][ T498] binder: Unknown parameter '0x0000000000000004' [ 49.788843][ T36] audit: type=1400 audit(1792415805.200:209): avc: denied { ioctl } for pid=497 comm="syz.0.38" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.818833][ T500] Unsupported ieee802154 address type: 0 [ 49.836172][ T36] audit: type=1400 audit(1792415805.200:210): avc: denied { remount } for pid=497 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.848923][ T500] Unsupported ieee802154 address type: 0 [ 49.875531][ T36] audit: type=1400 audit(1792415805.250:211): avc: denied { ioctl } for pid=495 comm="syz.2.40" path="socket:[4712]" dev="sockfs" ino=4712 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.883264][ T500] Unsupported ieee802154 address type: 0 [ 49.908681][ T507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 49.918318][ T500] Unsupported ieee802154 address type: 0 [ 49.925795][ T500] Unsupported ieee802154 address type: 0 [ 49.931983][ T500] Unsupported ieee802154 address type: 0 [ 49.937791][ T500] Unsupported ieee802154 address type: 0 [ 49.948190][ T36] audit: type=1400 audit(1792415805.250:212): avc: denied { write } for pid=505 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.962063][ T500] Unsupported ieee802154 address type: 0 [ 49.986172][ T500] Unsupported ieee802154 address type: 0 [ 49.990730][ T36] audit: type=1400 audit(1792415805.330:213): avc: denied { ioctl } for pid=505 comm="syz.3.41" path="socket:[5482]" dev="sockfs" ino=5482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.998965][ T500] Unsupported ieee802154 address type: 0 [ 50.025852][ T517] rust_binder: 516:517 no such ref 0 [ 50.049533][ T500] Unsupported ieee802154 address type: 0 [ 50.053400][ T519] rust_binder: 516:519 got transaction to invalid handle 1 [ 50.062079][ T500] Unsupported ieee802154 address type: 0 [ 50.062604][ T519] rust_binder: 516:519 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:952 [ 50.068319][ T500] Unsupported ieee802154 address type: 0 [ 50.087587][ T36] audit: type=1400 audit(1792415805.360:214): avc: denied { listen } for pid=513 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.096450][ T500] Unsupported ieee802154 address type: 0 [ 50.107724][ T36] audit: type=1400 audit(1792415805.470:215): avc: denied { mount } for pid=521 comm="syz.3.46" name="/" dev="ramfs" ino=5493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.136215][ T500] Unsupported ieee802154 address type: 0 [ 50.141802][ T520] rust_binder: 516:520 got reply transaction with no transaction stack [ 50.146033][ T500] Unsupported ieee802154 address type: 0 [ 50.159963][ T520] rust_binder: 516:520 transaction reply to 0:0 failed EINVAL, code 1 size 72-24 line thread.rs:1547 [ 50.166580][ T500] Unsupported ieee802154 address type: 0 [ 50.177217][ T500] Unsupported ieee802154 address type: 0 [ 50.177701][ T36] audit: type=1400 audit(1792415805.470:216): avc: denied { mounton } for pid=521 comm="syz.3.46" path="/5/file0" dev="ramfs" ino=5493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 50.184337][ T500] Unsupported ieee802154 address type: 0 [ 50.211057][ T500] Unsupported ieee802154 address type: 0 [ 50.216765][ T500] Unsupported ieee802154 address type: 0 [ 50.222493][ T500] Unsupported ieee802154 address type: 0 [ 50.228181][ T500] Unsupported ieee802154 address type: 0 [ 50.233923][ T500] Unsupported ieee802154 address type: 0 [ 50.240315][ T500] Unsupported ieee802154 address type: 0 [ 50.246063][ T500] Unsupported ieee802154 address type: 0 [ 50.251835][ T500] Unsupported ieee802154 address type: 0 [ 50.258145][ T500] Unsupported ieee802154 address type: 0 [ 50.263883][ T500] Unsupported ieee802154 address type: 0 [ 50.269770][ T493] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 50.270692][ T500] Unsupported ieee802154 address type: 0 [ 50.282839][ T530] cgroup2: Unknown parameter 'euid<00000000000000000000' [ 50.283426][ T500] Unsupported ieee802154 address type: 0 [ 50.295983][ T500] Unsupported ieee802154 address type: 0 [ 50.301702][ T500] Unsupported ieee802154 address type: 0 [ 50.307375][ T500] Unsupported ieee802154 address type: 0 [ 50.313130][ T500] Unsupported ieee802154 address type: 0 [ 50.318948][ T500] Unsupported ieee802154 address type: 0 [ 50.324605][ T500] Unsupported ieee802154 address type: 0 [ 50.330331][ T500] Unsupported ieee802154 address type: 0 [ 50.336003][ T500] Unsupported ieee802154 address type: 0 [ 50.341713][ T500] Unsupported ieee802154 address type: 0 [ 50.347572][ T500] Unsupported ieee802154 address type: 0 [ 50.353287][ T500] Unsupported ieee802154 address type: 0 [ 50.358982][ T500] Unsupported ieee802154 address type: 0 [ 50.364945][ T500] Unsupported ieee802154 address type: 0 [ 50.370757][ T500] Unsupported ieee802154 address type: 0 [ 50.376538][ T500] Unsupported ieee802154 address type: 0 [ 50.382254][ T500] Unsupported ieee802154 address type: 0 [ 50.388018][ T500] Unsupported ieee802154 address type: 0 [ 50.393834][ T500] Unsupported ieee802154 address type: 0 [ 50.399530][ T500] Unsupported ieee802154 address type: 0 [ 50.405199][ T500] Unsupported ieee802154 address type: 0 [ 50.410916][ T500] Unsupported ieee802154 address type: 0 [ 50.417196][ T500] Unsupported ieee802154 address type: 0 [ 50.423254][ T500] Unsupported ieee802154 address type: 0 [ 50.428842][ T493] usb 1-1: Using ep0 maxpacket: 8 [ 50.431790][ T493] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 50.434208][ T500] Unsupported ieee802154 address type: 0 [ 50.434227][ T500] Unsupported ieee802154 address type: 0 [ 50.434240][ T500] Unsupported ieee802154 address type: 0 [ 50.444270][ T493] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 50.448293][ T500] Unsupported ieee802154 address type: 0 [ 50.448310][ T500] Unsupported ieee802154 address type: 0 [ 50.454866][ T493] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.459988][ T500] Unsupported ieee802154 address type: 0 [ 50.468882][ T493] usb 1-1: config 0 has no interface number 0 [ 50.473946][ T500] Unsupported ieee802154 address type: 0 [ 50.482420][ T493] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 50.489682][ T500] Unsupported ieee802154 address type: 0 [ 50.495950][ T493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.530621][ T493] usb 1-1: Product: syz [ 50.535003][ T493] usb 1-1: Manufacturer: syz [ 50.539680][ T493] usb 1-1: SerialNumber: syz [ 50.545353][ T493] usb 1-1: config 0 descriptor?? [ 50.767091][ T493] usb 1-1: USB disconnect, device number 2 [ 50.834601][ T316] rust_binder: 516: undelivered TRANSACTION_ERROR: 29201 [ 50.847408][ T489] rust_binder: 516: undelivered TRANSACTION_ERROR: 29201 [ 50.854968][ T81] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 51.020216][ T81] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.028058][ T81] usb 3-1: can't read configurations, error -61 [ 51.158763][ T81] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 51.228742][ T489] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 51.310642][ T81] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.318347][ T81] usb 3-1: can't read configurations, error -61 [ 51.325039][ T81] usb usb3-port1: attempt power cycle [ 51.358749][ T489] usb 2-1: device descriptor read/64, error -71 [ 51.568849][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.576635][ T559] bridge_slave_0: default FDB implementation only supports local addresses [ 51.598705][ T489] usb 2-1: device descriptor read/64, error -71 [ 51.678766][ T81] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 51.700524][ T81] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.708168][ T81] usb 3-1: can't read configurations, error -61 [ 51.838830][ T489] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 51.846502][ T81] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 51.870792][ T81] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.878450][ T81] usb 3-1: can't read configurations, error -61 [ 51.884917][ T81] usb usb3-port1: unable to enumerate USB device [ 51.918734][ T493] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.978718][ T489] usb 2-1: device descriptor read/64, error -71 [ 52.070379][ T493] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 52.080433][ T493] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 52.090339][ T493] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.101503][ T493] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 52.111393][ T493] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 52.120777][ T493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.129836][ T565] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 52.137358][ T565] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 52.145397][ T493] pl2303 4-1:1.0: pl2303 converter detected [ 52.152465][ T493] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 52.228767][ T489] usb 2-1: device descriptor read/64, error -71 [ 52.258783][ T316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.338824][ T489] usb usb2-port1: attempt power cycle [ 52.409777][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.420816][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.430885][ T316] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 52.440190][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.448886][ T565] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 52.457332][ T565] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 52.457370][ T316] usb 1-1: config 0 descriptor?? [ 52.466228][ T565] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 52.478493][ T565] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 52.486649][ T565] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 52.494664][ T10] usb 4-1: USB disconnect, device number 4 [ 52.503173][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 52.511483][ T10] pl2303 4-1:1.0: device disconnected [ 52.688733][ T489] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.709810][ T489] usb 2-1: device descriptor read/8, error -71 [ 52.839834][ T489] usb 2-1: device descriptor read/8, error -71 [ 52.880307][ T316] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 52.888563][ T316] playstation 0003:054C:0DF2.0001: item fetching failed at offset 2/5 [ 52.897056][ T316] playstation 0003:054C:0DF2.0001: Parse failed [ 52.903428][ T316] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 53.081317][ T316] usb 1-1: USB disconnect, device number 3 [ 53.118725][ T489] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 53.330464][ T489] usb 2-1: device descriptor read/8, error -71 [ 53.459780][ T489] usb 2-1: device descriptor read/8, error -71 [ 53.568839][ T489] usb usb2-port1: unable to enumerate USB device [ 53.835077][ T583] process 'syz.2.64' launched './file0' with NULL argv: empty string added [ 54.038687][ T489] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 54.118785][ T31] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 54.173025][ T603] overlay: Unknown parameter 'fsmagic' [ 54.180042][ T603] overlay: Unknown parameter 'fsmagic' [ 54.198660][ T489] usb 1-1: Using ep0 maxpacket: 16 [ 54.199210][ T607] FAULT_INJECTION: forcing a failure. [ 54.199210][ T607] name failslab, interval 1, probability 0, space 0, times 0 [ 54.205495][ T489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.216773][ T607] CPU: 0 UID: 0 PID: 607 Comm: syz.1.71 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 54.216860][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.216903][ T607] Call Trace: [ 54.216925][ T607] [ 54.216954][ T607] __dump_stack+0x21/0x30 [ 54.217068][ T607] dump_stack_lvl+0x140/0x1c0 [ 54.217166][ T607] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.217256][ T607] ? avc_has_perm_noaudit+0x289/0x360 [ 54.217322][ T607] dump_stack+0x19/0x20 [ 54.217410][ T607] should_fail_ex+0x3c2/0x510 [ 54.217484][ T607] should_failslab+0xac/0x100 [ 54.217549][ T607] __kmalloc_node_noprof+0x69/0x500 [ 54.217643][ T607] ? __cfi_do_futex+0x10/0x10 [ 54.217708][ T607] ? __kvmalloc_node_noprof+0x128/0x300 [ 54.217812][ T607] __kvmalloc_node_noprof+0x128/0x300 [ 54.217889][ T607] ? __cfi_mutex_unlock+0x10/0x10 [ 54.218002][ T607] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 54.218109][ T607] ? security_capable+0x44/0x130 [ 54.218224][ T607] __se_sys_setgroups+0x10b/0x540 [ 54.218298][ T607] ? __kasan_check_write+0x18/0x20 [ 54.218377][ T607] ? fpregs_restore_userregs+0x11c/0x260 [ 54.218464][ T607] __x64_sys_setgroups+0x5f/0x80 [ 54.218548][ T607] x64_sys_call+0x2644/0x2ee0 [ 54.218608][ T607] do_syscall_64+0x57/0xf0 [ 54.218662][ T607] ? clear_bhb_loop+0x50/0xa0 [ 54.218744][ T607] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.218818][ T607] RIP: 0033:0x7f981259e559 [ 54.218870][ T607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.218921][ T607] RSP: 002b:00007f98133fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 54.218978][ T607] RAX: ffffffffffffffda RBX: 00007f9812825fa0 RCX: 00007f981259e559 [ 54.219030][ T607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.219063][ T607] RBP: 00007f9812635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 54.219105][ T607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.219139][ T607] R13: 00007f9812826038 R14: 00007f9812825fa0 R15: 00007ffcf3c078d8 [ 54.219192][ T607] [ 54.408784][ T316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 54.410672][ T489] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.464886][ T489] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.474798][ T489] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 54.487944][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 54.495871][ T489] usb 1-1: config 0 interface 0 has no altsetting 0 [ 54.503096][ T489] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 54.512379][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.521173][ T31] usb 3-1: config 7 has an invalid interface number: 100 but max is 2 [ 54.531951][ T31] usb 3-1: config 7 has an invalid interface number: 37 but max is 2 [ 54.540917][ T31] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 54.551614][ T489] usb 1-1: config 0 descriptor?? [ 54.556852][ T31] usb 3-1: config 7 has an invalid interface number: 149 but max is 2 [ 54.565479][ T31] usb 3-1: config 7 has no interface number 0 [ 54.573547][ T31] usb 3-1: config 7 has no interface number 1 [ 54.579497][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 54.579906][ T31] usb 3-1: config 7 has no interface number 2 [ 54.593476][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0xD has invalid maxpacket 959, setting to 64 [ 54.594767][ T316] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 54.604712][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0x4 has an invalid bInterval 170, changing to 4 [ 54.627774][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 54.639465][ T31] usb 3-1: config 7 interface 100 altsetting 14 has a duplicate endpoint with address 0x2, skipping [ 54.644873][ T316] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 54.651663][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 54.658788][ T316] usb 4-1: can't read configurations, error -61 [ 54.670562][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0xF has an invalid bInterval 94, changing to 4 [ 54.687150][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0xF has invalid maxpacket 1024, setting to 1023 [ 54.699125][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 54.710603][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 54.721958][ T31] usb 3-1: config 7 interface 100 altsetting 14 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 54.733159][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 54.744035][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 54.756147][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 54.770074][ T31] usb 3-1: config 7 interface 37 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 54.779051][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 54.781746][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 54.801596][ T31] usb 3-1: config 7 interface 37 altsetting 10 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 54.809027][ T316] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 54.813250][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 54.832416][ T31] usb 3-1: config 7 interface 37 altsetting 10 has an endpoint descriptor with address 0x74, changing to 0x4 [ 54.844127][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 54.855057][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 54.866141][ T31] usb 3-1: config 7 interface 37 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 54.877065][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 54.887838][ T31] usb 3-1: config 7 interface 37 altsetting 10 has a duplicate endpoint with address 0x89, skipping [ 54.898736][ T31] usb 3-1: config 7 interface 100 has no altsetting 0 [ 54.905864][ T31] usb 3-1: config 7 interface 37 has no altsetting 0 [ 54.912747][ T31] usb 3-1: config 7 interface 149 has no altsetting 0 [ 54.920234][ T31] usb 3-1: language id specifier not provided by device, defaulting to English [ 54.930610][ T31] usb 3-1: New USB device found, idVendor=4113, idProduct=0400, bcdDevice=61.4e [ 54.939784][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.948190][ T31] usb 3-1: Product: syz [ 54.952190][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 54.953094][ T31] usb 3-1: Manufacturer:  [ 54.966034][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 54.969414][ T31] usb 3-1: SerialNumber: syz [ 54.982552][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 54.993010][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.996849][ T585] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 55.008925][ T316] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 55.022524][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.029773][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 55.039703][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.039779][ T316] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 55.041373][ T489] logitech-djreceiver 0003:046D:C53A.0002: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 55.047831][ T316] usb 4-1: can't read configurations, error -61 [ 55.087291][ T10] usb 2-1: config 0 descriptor?? [ 55.092824][ T609] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 55.102386][ T316] usb usb4-port1: attempt power cycle [ 55.220388][ T578] tipc: Started in network mode [ 55.225540][ T578] tipc: Node identity 4, cluster identity 4711 [ 55.231838][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 55.231857][ T36] audit: type=1400 audit(1792415810.650:251): avc: denied { write } for pid=584 comm="syz.2.65" path="socket:[5700]" dev="sockfs" ino=5700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.239816][ T578] tipc: Node number set to 4 [ 55.274553][ T31] usb 3-1: USB disconnect, device number 6 [ 55.431239][ T555] usb 1-1: USB disconnect, device number 4 [ 55.440933][ T316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 55.469081][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 55.474702][ T316] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 55.483892][ T316] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 55.492036][ T316] usb 4-1: can't read configurations, error -61 [ 55.504679][ T10] microsoft 0003:045E:00E3.0003: ignoring exceeding usage max [ 55.519265][ T10] microsoft 0003:045E:00E3.0003: No inputs registered, leaving [ 55.528449][ T10] microsoft 0003:045E:00E3.0003: hidraw0: USB HID v0.10 Joystick [HID 045e:00e3] on usb-dummy_hcd.1-1/input0 [ 55.544001][ T10] microsoft 0003:045E:00E3.0003: no inputs found [ 55.551730][ T10] microsoft 0003:045E:00E3.0003: could not initialize ff, continuing anyway [ 55.628726][ T316] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.659354][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 55.665405][ T316] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 55.674636][ T316] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 55.682900][ T316] usb 4-1: can't read configurations, error -61 [ 55.689374][ T316] usb usb4-port1: unable to enumerate USB device [ 55.707970][ T609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.716695][ T609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.726133][ T609] Zero length message leads to an empty skb [ 55.732596][ T555] usb 2-1: USB disconnect, device number 7 [ 55.915375][ T36] audit: type=1400 audit(1792415811.340:252): avc: denied { rmdir } for pid=298 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.965935][ T36] audit: type=1400 audit(1792415811.390:253): avc: denied { bind } for pid=620 comm="syz.0.76" lport=124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.986261][ T36] audit: type=1400 audit(1792415811.390:254): avc: denied { name_bind } for pid=620 comm="syz.0.76" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.007647][ T36] audit: type=1400 audit(1792415811.390:255): avc: denied { node_bind } for pid=620 comm="syz.0.76" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 56.032235][ T36] audit: type=1400 audit(1792415811.390:256): avc: denied { shutdown } for pid=620 comm="syz.0.76" laddr=172.20.20.170 lport=124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.365431][ T634] syz.0.80 (634): drop_caches: 2 [ 56.467246][ T36] audit: type=1400 audit(1792415811.890:257): avc: denied { read } for pid=635 comm="syz.0.81" path="socket:[6283]" dev="sockfs" ino=6283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.488951][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 56.650312][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 56.662933][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 56.674674][ T31] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 56.684351][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.698691][ T31] usb 2-1: Product: syz [ 56.703558][ T31] usb 2-1: Manufacturer: syz [ 56.708356][ T31] usb 2-1: SerialNumber: syz [ 56.714220][ T31] usb 2-1: config 0 descriptor?? [ 56.719679][ T631] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.727184][ T631] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.953376][ T631] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.961217][ T631] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.170773][ T31] Error reading MAC address [ 57.191531][ T31] usb 2-1: USB disconnect, device number 8 [ 57.356411][ T36] audit: type=1400 audit(1792415812.780:258): avc: denied { setattr } for pid=298 comm="syz-executor" path="/30/mnt/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 57.404943][ T36] audit: type=1400 audit(1792415812.830:259): avc: denied { create } for pid=654 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.431439][ T656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.445091][ T655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.497596][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 57.507311][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 57.518086][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 57.693598][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 57.711050][ T660] netlink: 'syz.1.88': attribute type 2 has an invalid length. [ 57.728897][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 57.888711][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 57.897824][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 57.913786][ T10] usb 4-1: config 0 has no interface number 0 [ 57.922386][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 57.932550][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.940788][ T10] usb 4-1: Product: syz [ 57.945097][ T10] usb 4-1: Manufacturer: syz [ 57.950365][ T10] usb 4-1: SerialNumber: syz [ 57.959110][ T10] usb 4-1: config 0 descriptor?? [ 57.964540][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 57.975679][ T10] smsc95xx v2.0.0 [ 57.980846][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 58.776469][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 58.976253][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 58.985296][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 58.998993][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 59.007617][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 59.016617][ T112] udevd[112]: could not touch /run/udev/queue: No such file or directory [ 59.032455][ T10] usb 4-1: USB disconnect, device number 9 [ 59.560041][ T692] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 59.712793][ T694] netlink: 9 bytes leftover after parsing attributes in process `syz.1.96'. [ 59.722279][ T694] gretap0: entered promiscuous mode [ 59.729609][ T694] netlink: 5 bytes leftover after parsing attributes in process `syz.1.96'. [ 59.738854][ T694] 0ªî{X¹¦: renamed from gretap0 [ 59.745351][ T694] 0ªî{X¹¦: left promiscuous mode [ 59.750920][ T694] 0ªî{X¹¦: entered allmulticast mode [ 59.757290][ T694] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 59.828362][ T36] audit: type=1400 audit(1792415815.250:260): avc: denied { write } for pid=696 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.111416][ T699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 60.401379][ T707] tipc: Enabling of bearer rejected, failed to enable media [ 60.414949][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 60.414966][ T36] audit: type=1400 audit(1792415815.840:265): avc: denied { remount } for pid=706 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.443654][ T707] input: syz0 as /devices/virtual/input/input5 [ 60.453543][ T36] audit: type=1400 audit(1792415815.880:266): avc: denied { read } for pid=97 comm="acpid" name="event3" dev="devtmpfs" ino=473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.476252][ T555] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 60.486493][ T36] audit: type=1400 audit(1792415815.880:267): avc: denied { open } for pid=97 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.510566][ T36] audit: type=1400 audit(1792415815.880:268): avc: denied { ioctl } for pid=97 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=473 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.678686][ T555] usb 2-1: Using ep0 maxpacket: 16 [ 60.685170][ T555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.696556][ T555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.706738][ T555] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.719987][ T555] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.729337][ T555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.742714][ T555] usb 2-1: config 0 descriptor?? [ 61.154401][ T555] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 61.166506][ T555] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 61.317406][ T36] audit: type=1400 audit(1792415816.740:269): avc: denied { ioctl } for pid=709 comm="syz.3.102" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 61.319068][ T710] bridge0: port 3(veth1_macvtap) entered blocking state [ 61.350315][ T710] bridge0: port 3(veth1_macvtap) entered disabled state [ 61.357378][ T710] veth1_macvtap: entered allmulticast mode [ 61.363400][ T555] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 61.365637][ T710] veth1_macvtap: left allmulticast mode [ 61.380183][ T555] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 61.390924][ T555] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 61.409695][ T711] udevd[711]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 61.421545][ T555] microsoft 0003:045E:07DA.0004: no inputs found [ 61.432442][ T555] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 61.568024][ T555] usb 2-1: USB disconnect, device number 9 [ 61.918793][ T81] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.080099][ T81] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.098661][ T81] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.128702][ T81] usb 4-1: config 0 interface 0 has no altsetting 0 [ 62.135642][ T81] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 62.145297][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.155028][ T81] usb 4-1: config 0 descriptor?? [ 62.518737][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 62.562819][ T81] belkin 0003:050D:3201.0005: unknown global tag 0xe [ 62.570558][ T81] belkin 0003:050D:3201.0005: item 0 4 1 14 parsing failed [ 62.578033][ T81] belkin 0003:050D:3201.0005: parse failed [ 62.584669][ T81] belkin 0003:050D:3201.0005: probe with driver belkin failed with error -22 [ 62.668702][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 62.680766][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 62.691721][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.702984][ T10] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 62.716339][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.723229][ T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 62.732565][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.748957][ T10] usb 2-1: config 0 descriptor?? [ 62.771020][ T9] usb 4-1: USB disconnect, device number 10 [ 63.157946][ T10] holtek_kbd 0003:04D9:A055.0006: item fetching failed at offset 7/37 [ 63.171526][ T10] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22 [ 63.318426][ T36] audit: type=1400 audit(1792415818.740:270): avc: denied { bind } for pid=733 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.338580][ T36] audit: type=1400 audit(1792415818.770:271): avc: denied { setopt } for pid=733 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.359068][ T36] audit: type=1400 audit(1792415818.770:272): avc: denied { listen } for pid=733 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.381377][ T9] usb 2-1: USB disconnect, device number 10 [ 63.393189][ T36] audit: type=1400 audit(1792415818.790:273): avc: denied { connect } for pid=733 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.422698][ T36] audit: type=1400 audit(1792415818.790:274): avc: denied { accept } for pid=733 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.912965][ T742] tipc: Enabling of bearer rejected, failed to enable media [ 64.007698][ T745] SELinux: policydb version -1223579795 does not match my version range 15-33 [ 64.016947][ T745] SELinux: failed to load policy [ 64.241451][ T748] x_tables: unsorted entry at hook 1 [ 64.421520][ T753] fuse: Unknown parameter '' [ 64.738704][ T555] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 64.888721][ T555] usb 4-1: device descriptor read/64, error -71 [ 64.977060][ T764] syz.1.120: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 64.993255][ T764] CPU: 1 UID: 0 PID: 764 Comm: syz.1.120 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 64.993293][ T764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.993310][ T764] Call Trace: [ 64.993318][ T764] [ 64.993327][ T764] __dump_stack+0x21/0x30 [ 64.993371][ T764] dump_stack_lvl+0x140/0x1c0 [ 64.993410][ T764] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.993448][ T764] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 64.993474][ T764] dump_stack+0x19/0x20 [ 64.993509][ T764] warn_alloc+0x1e7/0x2c0 [ 64.993537][ T764] ? stack_depot_save_flags+0x399/0x800 [ 64.993575][ T764] ? __cfi_warn_alloc+0x10/0x10 [ 64.993603][ T764] ? kasan_save_track+0x3e/0x80 [ 64.993638][ T764] ? kasan_save_alloc_info+0x3a/0x50 [ 64.993670][ T764] ? xsk_init_queue+0xb2/0x120 [ 64.993694][ T764] ? xsk_setsockopt+0x411/0x760 [ 64.993718][ T764] ? do_sock_setsockopt+0x27c/0x410 [ 64.993748][ T764] ? __x64_sys_setsockopt+0x18c/0x220 [ 64.993778][ T764] ? x64_sys_call+0x2adc/0x2ee0 [ 64.993802][ T764] ? do_syscall_64+0x57/0xf0 [ 64.993824][ T764] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.993855][ T764] __vmalloc_node_range_noprof+0x136/0x1300 [ 64.993892][ T764] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 64.993925][ T764] ? kasan_save_alloc_info+0x3a/0x50 [ 64.993956][ T764] ? __kasan_kmalloc+0x96/0xb0 [ 64.993977][ T764] ? __kmalloc_cache_noprof+0x23c/0x470 [ 64.994014][ T764] vmalloc_user_noprof+0x77/0x90 [ 64.994044][ T764] ? xskq_create+0xdb/0x290 [ 64.994069][ T764] xskq_create+0xdb/0x290 [ 64.994095][ T764] xsk_init_queue+0xb2/0x120 [ 64.994121][ T764] xsk_setsockopt+0x411/0x760 [ 64.994146][ T764] ? __cfi_xsk_setsockopt+0x10/0x10 [ 64.994170][ T764] ? do_futex+0x32a/0x510 [ 64.994196][ T764] ? errseq_sample+0x48/0x70 [ 64.994226][ T764] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 64.994263][ T764] ? security_socket_setsockopt+0x3d/0x100 [ 64.994291][ T764] ? __cfi_xsk_setsockopt+0x10/0x10 [ 64.994316][ T764] do_sock_setsockopt+0x27c/0x410 [ 64.994347][ T764] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 64.994377][ T764] ? __fget_files+0x2bc/0x330 [ 64.994402][ T764] __x64_sys_setsockopt+0x18c/0x220 [ 64.994433][ T764] x64_sys_call+0x2adc/0x2ee0 [ 64.994458][ T764] do_syscall_64+0x57/0xf0 [ 64.994479][ T764] ? clear_bhb_loop+0x50/0xa0 [ 64.994510][ T764] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.994539][ T764] RIP: 0033:0x7f981259e559 [ 64.994571][ T764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.994592][ T764] RSP: 002b:00007f98133fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.994620][ T764] RAX: ffffffffffffffda RBX: 00007f9812825fa0 RCX: 00007f981259e559 [ 64.994636][ T764] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 64.994651][ T764] RBP: 00007f9812635ab8 R08: 0000000000000029 R09: 0000000000000000 [ 64.994667][ T764] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 64.994684][ T764] R13: 00007f9812826038 R14: 00007f9812825fa0 R15: 00007ffcf3c078d8 [ 64.994707][ T764] [ 64.994727][ T764] Mem-Info: [ 65.316831][ T764] active_anon:9849 inactive_anon:0 isolated_anon:0 [ 65.316831][ T764] active_file:5920 inactive_file:2262 isolated_file:0 [ 65.316831][ T764] unevictable:0 dirty:166 writeback:0 [ 65.316831][ T764] slab_reclaimable:3444 slab_unreclaimable:77723 [ 65.316831][ T764] mapped:24968 shmem:3546 pagetables:840 [ 65.316831][ T764] sec_pagetables:0 bounce:0 [ 65.316831][ T764] kernel_misc_reclaimable:0 [ 65.316831][ T764] free:1529403 free_pcp:1786 free_cma:0 [ 65.364549][ T764] Node 0 active_anon:39396kB inactive_anon:0kB active_file:23680kB inactive_file:9048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99872kB dirty:664kB writeback:0kB shmem:14184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4416kB pagetables:3360kB sec_pagetables:0kB all_unreclaimable? no [ 65.397806][ T764] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955032kB mlocked:0kB bounce:0kB free_pcp:5060kB local_pcp:0kB free_cma:0kB [ 65.429283][ T764] lowmem_reserve[]: 0 3920 3920 [ 65.434326][ T764] Normal free:3171008kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39396kB inactive_anon:0kB active_file:23680kB inactive_file:9048kB unevictable:0kB writepending:664kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:340kB local_pcp:64kB free_cma:0kB [ 65.466493][ T764] lowmem_reserve[]: 0 0 0 [ 65.470967][ T764] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 65.486590][ T764] Normal: 886*4kB (UME) 897*8kB (UME) 785*16kB (UME) 123*32kB (UME) 67*64kB (UME) 25*128kB (UME) 36*256kB (UME) 19*512kB (UME) 7*1024kB (M) 5*2048kB (UM) 757*4096kB (M) = 3171728kB [ 65.505362][ T764] 11726 total pagecache pages [ 65.510498][ T764] 0 pages in swap cache [ 65.514714][ T764] Free swap = 124440kB [ 65.519029][ T555] usb 4-1: device descriptor read/64, error -71 [ 65.525452][ T764] Total swap = 124996kB [ 65.529738][ T764] 2097051 pages RAM [ 65.540659][ T764] 0 pages HighMem/MovableOnly [ 65.545590][ T764] 354583 pages reserved [ 65.549942][ T764] 0 pages cma reserved [ 65.556999][ T764] Memory allocations: [ 65.561428][ T764] 0 B 0 init/main.c:1477 func:do_initcalls [ 65.569237][ T764] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 65.577456][ T764] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 65.585283][ T764] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 65.593373][ T764] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 65.601439][ T764] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 65.610158][ T764] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 65.620042][ T764] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 65.628008][ T764] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 65.637580][ T764] 0 B 0 init/initramfs.c:101 func:find_link [ 65.673620][ T766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 65.683425][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 65.683442][ T36] audit: type=1400 audit(1792415821.120:284): avc: denied { mounton } for pid=765 comm="syz.1.121" path="/35/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=6835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 65.732546][ T36] audit: type=1400 audit(1792415821.160:285): avc: denied { read write } for pid=765 comm="syz.1.121" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 65.737813][ T81] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 65.778681][ T555] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 65.787093][ T36] audit: type=1400 audit(1792415821.160:286): avc: denied { open } for pid=765 comm="syz.1.121" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 65.809657][ T81] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.825696][ T767] udevd[767]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 65.921812][ T36] audit: type=1400 audit(1792415821.340:287): avc: denied { write } for pid=765 comm="syz.1.121" name="hidraw0" dev="devtmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.947510][ T766] hid-generic 0000:0000:0000.0007: pid 766 passed too large report [ 65.968886][ T555] usb 4-1: device descriptor read/64, error -71 [ 66.208720][ T555] usb 4-1: device descriptor read/64, error -71 [ 66.318814][ T555] usb usb4-port1: attempt power cycle [ 66.658783][ T555] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 66.689937][ T555] usb 4-1: device descriptor read/8, error -71 [ 66.820064][ T555] usb 4-1: device descriptor read/8, error -71 [ 67.058753][ T555] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 67.081389][ T555] usb 4-1: device descriptor read/8, error -71 [ 67.210007][ T555] usb 4-1: device descriptor read/8, error -71 [ 67.318819][ T555] usb usb4-port1: unable to enumerate USB device SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 71.528707][ T36] audit: type=1400 audit(1792415826.950:288): avc: denied { write } for pid=288 comm="syz-executor" path="pipe:[2403]" dev="pipefs" ino=2403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 71.681802][ T700] bridge_slave_1: left allmulticast mode [ 71.687512][ T700] bridge_slave_1: left promiscuous mode [ 71.693509][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.702483][ T700] bridge_slave_0: left allmulticast mode [ 71.708166][ T700] bridge_slave_0: left promiscuous mode [ 71.714289][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.790135][ T700] tipc: Disabling bearer [ 71.795578][ T700] tipc: Left network mode [ 71.801260][ T700] veth1_macvtap: left promiscuous mode [ 71.806825][ T700] veth0_vlan: left promiscuous mode [ 72.020126][ T700] bridge_slave_1: left allmulticast mode [ 72.025819][ T700] bridge_slave_1: left promiscuous mode [ 72.031535][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.039185][ T700] bridge_slave_0: left allmulticast mode [ 72.044847][ T700] bridge_slave_0: left promiscuous mode [ 72.050681][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.058577][ T700] bridge_slave_1: left allmulticast mode [ 72.064497][ T700] bridge_slave_1: left promiscuous mode [ 72.070365][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.077980][ T700] bridge_slave_0: left allmulticast mode [ 72.083836][ T700] bridge_slave_0: left promiscuous mode [ 72.089543][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.232506][ T700] veth1_macvtap: left promiscuous mode [ 72.238073][ T700] veth0_vlan: left promiscuous mode [ 72.243610][ T700] veth1_macvtap: left promiscuous mode [ 72.249239][ T700] veth0_vlan: left promiscuous mode