last executing test programs: 3.305811733s ago: executing program 2 (id=141): syz_open_procfs(0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x35, 0x97020000, [{0x40000000}]}) 3.281878243s ago: executing program 2 (id=142): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000008700000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) 3.193804246s ago: executing program 2 (id=143): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f0100000000000000020007241400000000042413"], 0x0) eventfd(0xe0f) 3.000901423s ago: executing program 3 (id=150): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x408b02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="8f"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x881) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@private0, 0x4e23, 0x4, 0x4e23, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x41, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0x3}, 0x7, 0x40000000, 0x0, 0x0, 0x2, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044840}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) getxattr(&(0x7f0000000280)='./cgroup/pids.max\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00', &(0x7f0000000300)=""/46, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="130823bd700001dcdf25fb000000480006802b000100030000003c00040067636d2861657329000052501cc9a6af5f51000000000000000000000000000000000000c41248ad000000001400000078d9403689a0256bcd794a17ff7b0d56b0a9ad2b"], 0x5c}, 0x1, 0x0, 0x0, 0x20048011}, 0x20008000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x98, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 2.994807693s ago: executing program 3 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x4}) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x42, {0x42, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f559626a783e67fb727c92ee21989daa31d1541fcd8a55de280f7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x2020480) r3 = socket(0x18, 0x1, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x2, 0x4, 0x7, 0x0, 0x3}) getsockopt$inet_int(r3, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x4}) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x42, {0x42, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f559626a783e67fb727c92ee21989daa31d1541fcd8a55de280f7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) unshare(0x2020480) (async) socket(0x18, 0x1, 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x100) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x2, 0x4, 0x7, 0x0, 0x3}) (async) getsockopt$inet_int(r3, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6) (async) 1.796270972s ago: executing program 3 (id=154): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x8000, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x201, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x96, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x4, 0x9, 0x8, 0x3fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f6, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x6, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x1, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.5317302s ago: executing program 0 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1000f, 0xdfdf, 0x10015, 0x80, 0x9, 0x2, 0xcf, 0xfffffffffffffffd, 0x0, 0x7ffffffffffffffc, 0x1, 0x9, 0x5, 0x4, 0xfffffffffffffffd], 0x0, 0x1119c4}) ioctl$KVM_RUN(r3, 0xae80, 0x300000000000000) 1.410342444s ago: executing program 0 (id=158): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan1\x00', @random="0100c3201000"}) r1 = syz_socket_connect_nvme_tcp() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xac, 0x0, 0x1, 0x401, 0x0, 0x2f000000, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xac}}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) close(r1) 1.345772876s ago: executing program 0 (id=159): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000200)=0x2, 0x4) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000001035121082400001020301090269000301092007080b00020108200009040000000101200009240108000a090002090401000001022000090401010101020200090501090800"], 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x2b) fcntl$setlease(r1, 0x400, 0x1) sendto$packet(r1, &(0x7f0000000000)="b11bf46602411d5a6a6bdd3c20f185a8c413a4bac0d4df9324eb764149e11533a2fc3bd6bd8040e900e4719b473ac445903c2e3e493aa0422b70168229d00542e91d433e1ac93ae74e7f04c5e2c7c7066eec2a18a90199111021a855f3d49e9f60d9b19e0d2a95b24622ca71f949797cfd68d8337a07ef84a4c639d79acb89642daf9b7842663d8284fafacd6c5662ed8fab879c8d9881b8405c2b40a2ef952fd8fb0e2ff351acb9528a3ea00f206921caa4ceb89c536074dae039e46be086d90d28aef6d8261893733155bee98c47768053ef58", 0xd4, 0x4000000, 0x0, 0x0) 843.522422ms ago: executing program 3 (id=160): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 574.610011ms ago: executing program 1 (id=161): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r8, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x62, 0x80, 0x2, 0x88, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c53, 0x8, 0x0, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85f6, 0x10000, 0x1, 0xf6, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaeef, 0x8000, 0x0, 0x73, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x0, 0x0, 0x165, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x4, 0xf61, 0x0, &(0x7f0000000dc0)=@buf_4k="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"}}, &(0x7f0000001e40)) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 514.998283ms ago: executing program 1 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0xe006, [{0x6e0, 0x0, 0x9}]}) 459.183725ms ago: executing program 3 (id=163): unshare(0x24020400) r0 = syz_ublk_setup_io_uring(0x29c8, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4000000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x0, 0x3000000}}, &(0x7f0000000280)) 385.586957ms ago: executing program 3 (id=164): socket(0xa, 0x3, 0x3a) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x6) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x57, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f010000000000000000e105240700000009"], 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f0000000600)=0x1801, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xe8041, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_udp_int(r9, 0x11, 0xb, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r11, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="66ba4200ecf20f2c1765430f01f26644d87b00407807f30fa7e0c4c1696cd5440f79b20088000065360f0866b8f1000f00d0", 0x32}], 0x1, 0x3, &(0x7f00000002c0)=[@cstype0={0x4, 0xa}], 0x1) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000240)={0x0, 0x4, 0x50000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a5f88a8ffffffffffffcd1008a2dc5886dd694f920600383a0000000000000000000000ffffe0000002ff020000000000000000000000000001040090780000"], 0x72) 381.068487ms ago: executing program 1 (id=165): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x1, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4000000, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x7, 0x2, 0x2, 0x2, 0x7, 0x1, 0x802, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x80, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x44, 0x3, 0xd, 0x7, 0x10601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x6, 0x1, 0x6, 0x9, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xd, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x3, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x20003, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x6, 0x3, 0x1ff, 0x2000803, 0xf7ffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x3, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000012"], 0x28}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe4}, 0x2c90224929df06d3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 315.292769ms ago: executing program 1 (id=166): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x5) r2 = syz_pidfd_open(r1, 0x0) fstat(r2, &(0x7f0000000100)) 257.666921ms ago: executing program 1 (id=167): mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX]) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 257.100261ms ago: executing program 1 (id=168): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x8000, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x201, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x96, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x4, 0x9, 0x8, 0x3fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f6, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x6, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x1, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 251.052331ms ago: executing program 2 (id=169): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @local, 0x5}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="8ab75fbd", 0x4}], 0x1}}], 0x1, 0xeffdffff) 234.142612ms ago: executing program 2 (id=170): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x6, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000001200010a00000000000000000700"], 0xbc}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r5, 0x0, 0x21, 0x0, &(0x7f0000000e80)) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000000000), 0x0, 0x4000040) 165.624484ms ago: executing program 2 (id=171): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 101.793176ms ago: executing program 0 (id=172): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r8, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 53.181978ms ago: executing program 0 (id=173): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r8, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x62, 0x80, 0x2, 0x88, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c53, 0x8, 0x0, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85f6, 0x10000, 0x1, 0xf6, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaeef, 0x8000, 0x0, 0x73, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x0, 0x0, 0x165, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x4, 0xf61, 0x0, &(0x7f0000000dc0)=@buf_4k="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"}}, &(0x7f0000001e40)) 0s ago: executing program 0 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 18.949093][ T36] audit: type=1400 audit(1780065713.280:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.950348][ T286] cgroup: Unknown subsys name 'net' [ 18.952384][ T36] audit: type=1400 audit(1780065713.280:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.956198][ T36] audit: type=1400 audit(1780065713.290:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.956354][ T286] cgroup: Unknown subsys name 'devices' [ 19.042150][ T286] cgroup: Unknown subsys name 'hugetlb' [ 19.047771][ T286] cgroup: Unknown subsys name 'rlimit' [ 19.160584][ T36] audit: type=1400 audit(1780065713.500:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.184086][ T36] audit: type=1400 audit(1780065713.500:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.193126][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.209272][ T36] audit: type=1400 audit(1780065713.500:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.240660][ T36] audit: type=1400 audit(1780065713.550:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.266363][ T36] audit: type=1400 audit(1780065713.550:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.269441][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.292760][ T36] audit: type=1400 audit(1780065713.600:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.326952][ T36] audit: type=1400 audit(1780065713.600:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.021097][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.028183][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.048104][ T293] bridge_slave_0: entered allmulticast mode [ 20.054752][ T293] bridge_slave_0: entered promiscuous mode [ 20.061484][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.070305][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.077411][ T293] bridge_slave_1: entered allmulticast mode [ 20.083860][ T293] bridge_slave_1: entered promiscuous mode [ 20.184834][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.192009][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.199077][ T297] bridge_slave_0: entered allmulticast mode [ 20.205380][ T297] bridge_slave_0: entered promiscuous mode [ 20.213317][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.220501][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.227584][ T297] bridge_slave_1: entered allmulticast mode [ 20.233802][ T297] bridge_slave_1: entered promiscuous mode [ 20.282197][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.289255][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.296501][ T298] bridge_slave_0: entered allmulticast mode [ 20.302744][ T298] bridge_slave_0: entered promiscuous mode [ 20.309251][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.316323][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.323440][ T298] bridge_slave_1: entered allmulticast mode [ 20.329573][ T298] bridge_slave_1: entered promiscuous mode [ 20.382411][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.389464][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.396770][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.403875][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.415518][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.422623][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.429674][ T299] bridge_slave_0: entered allmulticast mode [ 20.436062][ T299] bridge_slave_0: entered promiscuous mode [ 20.442696][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.449727][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.456982][ T299] bridge_slave_1: entered allmulticast mode [ 20.463178][ T299] bridge_slave_1: entered promiscuous mode [ 20.491467][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.498537][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.505820][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.512851][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.585596][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.592658][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.599881][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.606921][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.620739][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.628062][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.636023][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.643693][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.650897][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.671662][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.678702][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.693804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.700866][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.715072][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.722150][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.739450][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.746514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.754611][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.761644][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.792442][ T297] veth0_vlan: entered promiscuous mode [ 20.818857][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.825951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.839333][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.846412][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.855914][ T298] veth0_vlan: entered promiscuous mode [ 20.863320][ T293] veth0_vlan: entered promiscuous mode [ 20.871505][ T297] veth1_macvtap: entered promiscuous mode [ 20.888093][ T293] veth1_macvtap: entered promiscuous mode [ 20.901469][ T298] veth1_macvtap: entered promiscuous mode [ 20.944170][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 20.964607][ T299] veth0_vlan: entered promiscuous mode [ 20.976683][ T299] veth1_macvtap: entered promiscuous mode [ 21.107264][ T329] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.114211][ T331] SELinux: policydb version -59011125 does not match my version range 15-33 [ 21.146226][ T331] SELinux: failed to load policy [ 21.241886][ T331] fuse: Bad value for 'fd' [ 21.327001][ T343] process 'syz.3.11' launched './file0' with NULL argv: empty string added [ 21.496884][ T356] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 21.921773][ T408] rust_binder: 22: no such ref 1 [ 21.926900][ T408] rust_binder: Write failure EINVAL in pid:22 [ 22.288996][ T418] syz_tun: entered allmulticast mode [ 22.326744][ T418] FAULT_INJECTION: forcing a failure. [ 22.326744][ T418] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 22.358428][ T418] CPU: 1 UID: 0 PID: 418 Comm: syz.0.27 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 22.358464][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 22.358483][ T418] Call Trace: [ 22.358490][ T418] [ 22.358498][ T418] __dump_stack+0x21/0x30 [ 22.358534][ T418] dump_stack_lvl+0x140/0x1c0 [ 22.358557][ T418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 22.358580][ T418] ? _parse_integer+0x2e/0x40 [ 22.358603][ T418] ? kstrtoull+0x13b/0x1e0 [ 22.358626][ T418] dump_stack+0x19/0x20 [ 22.358647][ T418] should_fail_ex+0x3d7/0x530 [ 22.358665][ T418] should_fail+0xf/0x20 [ 22.358681][ T418] should_fail_usercopy+0x1e/0x30 [ 22.358699][ T418] _copy_from_user+0x20/0xa0 [ 22.358718][ T418] ___sys_sendmsg+0x1c7/0x370 [ 22.358737][ T418] ? __sys_sendmsg+0x2a0/0x2a0 [ 22.358753][ T418] ? proc_fail_nth_write+0x184/0x220 [ 22.358777][ T418] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 22.358805][ T418] __x64_sys_sendmsg+0x1fb/0x2d0 [ 22.358822][ T418] ? fput+0x1a4/0x240 [ 22.358843][ T418] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 22.358860][ T418] ? ksys_write+0x1f3/0x260 [ 22.358879][ T418] ? __kasan_check_read+0x15/0x20 [ 22.358898][ T418] x64_sys_call+0x2a4c/0x2ee0 [ 22.358915][ T418] do_syscall_64+0x57/0xf0 [ 22.358933][ T418] ? clear_bhb_loop+0x50/0xa0 [ 22.358955][ T418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 22.358974][ T418] RIP: 0033:0x7f7cf519ce59 [ 22.358995][ T418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.359009][ T418] RSP: 002b:00007f7cf5fd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 22.359036][ T418] RAX: ffffffffffffffda RBX: 00007f7cf5415fa0 RCX: 00007f7cf519ce59 [ 22.359050][ T418] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000006 [ 22.359062][ T418] RBP: 00007f7cf5fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 22.359074][ T418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 22.359085][ T418] R13: 00007f7cf5416038 R14: 00007f7cf5415fa0 R15: 00007ffef4dc55a8 [ 22.359101][ T418] [ 22.624353][ T422] syz_tun: entered allmulticast mode [ 22.634881][ T422] syz_tun (unregistering): left allmulticast mode [ 23.039644][ T452] syzkaller1: entered promiscuous mode [ 23.070248][ T452] syzkaller1: entered allmulticast mode [ 23.350520][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.510232][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 23.523229][ T9] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 23.552187][ T9] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 23.580629][ T9] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 23.599969][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=29 [ 23.616536][ T9] usb 4-1: Product: syz [ 23.625622][ T9] usb 4-1: Manufacturer: syz [ 23.640262][ T9] usb 4-1: SerialNumber: syz [ 23.740248][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.854856][ T9] usb 4-1: USB disconnect, device number 2 [ 23.927935][ T65] usb 3-1: device descriptor read/64, error -71 [ 24.070261][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.150284][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.180287][ T65] usb 3-1: device descriptor read/64, error -71 [ 24.221366][ T31] usb 1-1: config 120 has an invalid interface number: 125 but max is 0 [ 24.229750][ T31] usb 1-1: config 120 has no interface number 0 [ 24.236055][ T31] usb 1-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 24.247303][ T31] usb 1-1: config 120 interface 125 has no altsetting 0 [ 24.255624][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 24.264706][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.272926][ T31] usb 1-1: Product: syz [ 24.277095][ T31] usb 1-1: Manufacturer: syz [ 24.281788][ T31] usb 1-1: SerialNumber: syz [ 24.287238][ T481] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 24.300347][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 24.306568][ T45] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 24.316804][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 24.325822][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 24.335033][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.343586][ T45] usb 2-1: config 0 descriptor?? [ 24.420336][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.495813][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 24.495829][ T36] audit: type=1400 audit(1780065718.830:157): avc: denied { write } for pid=480 comm="syz.0.51" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 24.580243][ T65] usb 3-1: device descriptor read/64, error -71 [ 24.641040][ T31] ums-usbat 1-1:120.125: USB Mass Storage device detected [ 24.693497][ T31] usb 1-1: USB disconnect, device number 2 [ 24.830245][ T65] usb 3-1: device descriptor read/64, error -71 [ 24.941804][ T65] usb usb3-port1: attempt power cycle [ 24.978694][ T36] audit: type=1400 audit(1780065719.310:158): avc: denied { read } for pid=517 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.039566][ T36] audit: type=1400 audit(1780065719.370:159): avc: denied { ioctl } for pid=520 comm="syz.3.59" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6172 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.245418][ T36] audit: type=1400 audit(1780065719.580:160): avc: denied { append } for pid=528 comm="syz.0.62" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 25.261949][ T531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 25.292361][ T36] audit: type=1400 audit(1780065719.580:161): avc: denied { read } for pid=528 comm="syz.0.62" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.315185][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.324742][ T36] audit: type=1400 audit(1780065719.580:162): avc: denied { open } for pid=528 comm="syz.0.62" path="net:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.348422][ T36] audit: type=1400 audit(1780065719.580:163): avc: denied { create } for pid=528 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.373618][ T36] audit: type=1400 audit(1780065719.580:164): avc: denied { ioctl } for pid=528 comm="syz.0.62" path="socket:[6325]" dev="sockfs" ino=6325 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.410442][ T65] usb 3-1: device descriptor read/8, error -71 [ 25.416971][ T36] audit: type=1400 audit(1780065719.580:165): avc: denied { setopt } for pid=528 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.436570][ T36] audit: type=1400 audit(1780065719.710:166): avc: denied { read } for pid=483 comm="syz.1.52" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 25.519464][ T539] fuse: Unknown parameter '000000000000000000000130x0000000000000007 ' [ 25.542131][ T65] usb 3-1: device descriptor read/8, error -71 [ 25.780229][ T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 25.821675][ T65] usb 3-1: device descriptor read/8, error -71 [ 25.961940][ T65] usb 3-1: device descriptor read/8, error -71 [ 26.080775][ T65] usb usb3-port1: unable to enumerate USB device [ 26.497256][ T579] netlink: 300 bytes leftover after parsing attributes in process `syz.2.81'. [ 26.853068][ T599] syz_tun: entered allmulticast mode [ 26.865703][ T599] FAULT_INJECTION: forcing a failure. [ 26.865703][ T599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 26.894435][ T599] CPU: 0 UID: 0 PID: 599 Comm: syz.3.89 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 26.894471][ T599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 26.894483][ T599] Call Trace: [ 26.894488][ T599] [ 26.894494][ T599] __dump_stack+0x21/0x30 [ 26.894525][ T599] dump_stack_lvl+0x140/0x1c0 [ 26.894549][ T599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.894575][ T599] dump_stack+0x19/0x20 [ 26.894599][ T599] should_fail_ex+0x3d7/0x530 [ 26.894627][ T599] should_fail+0xf/0x20 [ 26.894643][ T599] should_fail_usercopy+0x1e/0x30 [ 26.894662][ T599] _copy_from_iter+0x1a9/0x1510 [ 26.894683][ T599] ? kmalloc_reserve+0xcf/0x4f0 [ 26.894706][ T599] ? __virt_addr_valid+0x2a6/0x380 [ 26.894730][ T599] ? __cfi__copy_from_iter+0x10/0x10 [ 26.894750][ T599] ? __check_object_size+0x527/0x830 [ 26.894771][ T599] ? __cfi___check_object_size+0x10/0x10 [ 26.894789][ T599] ? skb_put+0x112/0x1f0 [ 26.894812][ T599] netlink_sendmsg+0x68e/0xb10 [ 26.894832][ T599] ? __cfi_netlink_sendmsg+0x10/0x10 [ 26.894850][ T599] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 26.894869][ T599] ? security_socket_sendmsg+0x3d/0x100 [ 26.894899][ T599] ? __cfi_netlink_sendmsg+0x10/0x10 [ 26.894916][ T599] ____sys_sendmsg+0x9de/0xa30 [ 26.894934][ T599] ? __import_iovec+0x5ad/0x7c0 [ 26.894956][ T599] ? __sys_sendmsg_sock+0x50/0x50 [ 26.894974][ T599] ? import_iovec+0x80/0xb0 [ 26.894997][ T599] ___sys_sendmsg+0x2a6/0x370 [ 26.895015][ T599] ? __sys_sendmsg+0x2a0/0x2a0 [ 26.895032][ T599] ? proc_fail_nth_write+0x184/0x220 [ 26.895057][ T599] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 26.895087][ T599] __x64_sys_sendmsg+0x1fb/0x2d0 [ 26.895111][ T599] ? fput+0x1a4/0x240 [ 26.895134][ T599] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 26.895152][ T599] ? ksys_write+0x1f3/0x260 [ 26.895172][ T599] ? __kasan_check_read+0x15/0x20 [ 26.895191][ T599] x64_sys_call+0x2a4c/0x2ee0 [ 26.895210][ T599] do_syscall_64+0x57/0xf0 [ 26.895229][ T599] ? clear_bhb_loop+0x50/0xa0 [ 26.895252][ T599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.895272][ T599] RIP: 0033:0x7f8c01b9ce59 [ 26.895294][ T599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.895308][ T599] RSP: 002b:00007f8c02a4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 26.895330][ T599] RAX: ffffffffffffffda RBX: 00007f8c01e15fa0 RCX: 00007f8c01b9ce59 [ 26.895344][ T599] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000006 [ 26.895356][ T599] RBP: 00007f8c02a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 26.895367][ T599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.895380][ T599] R13: 00007f8c01e16038 R14: 00007f8c01e15fa0 R15: 00007ffd41aef2f8 [ 26.895395][ T599] [ 27.235112][ T65] usb 2-1: USB disconnect, device number 2 [ 27.289631][ T610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45551 sclass=netlink_route_socket pid=610 comm=syz.0.94 [ 27.680236][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.680656][ T632] netlink: 300 bytes leftover after parsing attributes in process `syz.2.103'. [ 27.801252][ T636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 27.840230][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 27.840291][ T486] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.854071][ T65] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 27.862452][ T65] usb 2-1: config 179 has no interface number 0 [ 27.868789][ T65] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 27.880079][ T65] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 27.891536][ T65] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 27.902830][ T65] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 27.916196][ T65] usb 2-1: config 179 interface 65 has no altsetting 0 [ 27.923322][ T65] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 27.932443][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.951294][ T65] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input4 [ 28.000430][ T95] input input4: unable to receive magic message: -110 [ 28.010622][ T95] input input4: unable to receive magic message: -32 [ 28.020366][ T486] usb 1-1: Using ep0 maxpacket: 32 [ 28.030066][ T95] input input4: unable to receive magic message: -32 [ 28.038048][ T486] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 28.046499][ T486] usb 1-1: config 0 has no interface number 0 [ 28.052965][ T486] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 28.064894][ T486] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 28.074299][ T486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.082529][ T486] usb 1-1: Product: syz [ 28.090469][ T486] usb 1-1: Manufacturer: syz [ 28.095127][ T486] usb 1-1: SerialNumber: syz [ 28.107139][ T486] usb 1-1: config 0 descriptor?? [ 28.113841][ T628] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 28.153828][ T644] syz_tun (unregistering): left allmulticast mode [ 28.324332][ T628] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 28.430977][ T657] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 28.957250][ T486] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 28.967528][ T486] asix 1-1:0.188: probe with driver asix failed with error -71 [ 28.976194][ T486] usb 1-1: USB disconnect, device number 3 [ 29.402175][ T676] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.118' resets device [ 29.413479][ T676] usb usb9: usbfs: process 676 (syz.3.118) did not claim interface 0 before use [ 29.533804][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 29.533822][ T36] audit: type=1400 audit(1780065723.870:186): avc: denied { mount } for pid=683 comm="syz.0.121" name="/" dev="configfs" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 29.573864][ T36] audit: type=1400 audit(1780065723.910:187): avc: denied { write } for pid=685 comm="syz.0.122" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.597113][ T36] audit: type=1400 audit(1780065723.910:188): avc: denied { map } for pid=685 comm="syz.0.122" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.624087][ T36] audit: type=1400 audit(1780065723.910:189): avc: denied { execute } for pid=685 comm="syz.0.122" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.647271][ T36] audit: type=1400 audit(1780065723.960:190): avc: denied { ioctl } for pid=685 comm="syz.0.122" path="socket:[7309]" dev="sockfs" ino=7309 ioctlcmd=0x45c0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.701634][ T36] audit: type=1400 audit(1780065724.040:191): avc: denied { create } for pid=690 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.735372][ T36] audit: type=1400 audit(1780065724.060:192): avc: denied { ioctl } for pid=690 comm="syz.3.124" path="socket:[7515]" dev="sockfs" ino=7515 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.774222][ T36] audit: type=1400 audit(1780065724.060:193): avc: denied { create } for pid=690 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.795746][ T36] audit: type=1400 audit(1780065724.060:194): avc: denied { getopt } for pid=690 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.799773][ T697] capability: warning: `syz.0.126' uses 32-bit capabilities (legacy support in use) [ 29.821539][ T36] audit: type=1400 audit(1780065724.060:195): avc: denied { getopt } for pid=690 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.120217][ T466] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.271567][ T466] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.281158][ T466] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.294060][ T466] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 30.313025][ T466] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 30.335603][ T466] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 30.355130][ T486] usb 2-1: USB disconnect, device number 3 [ 30.361013][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 30.362523][ T466] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 30.375651][ T486] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 30.415057][ T466] usb 1-1: config 1 interface 1 has no altsetting 0 [ 30.427823][ T466] usb 1-1: string descriptor 0 read error: -22 [ 30.434148][ T466] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 30.452930][ T466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.585963][ T711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 30.673839][ T715] netlink: 300 bytes leftover after parsing attributes in process `syz.2.133'. [ 30.686578][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.697533][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.209235][ T746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 31.228852][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 31.281288][ T749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.145'. [ 31.316567][ T701] netlink: 'syz.0.128': attribute type 17 has an invalid length. [ 31.470223][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.620225][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 31.626909][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.647496][ T65] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 31.680429][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.688499][ T65] usb 3-1: Product: syz [ 31.700245][ T466] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 31.720210][ T65] usb 3-1: Manufacturer: syz [ 31.724851][ T65] usb 3-1: SerialNumber: syz [ 31.732705][ T65] usb 3-1: config 0 descriptor?? [ 31.739012][ T65] usb 3-1: bad CDC descriptors [ 31.744057][ T65] usb 3-1: unsupported MDLM descriptors [ 31.861291][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.872531][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 31.883569][ T466] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.896445][ T466] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 31.905512][ T466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.914126][ T466] usb 4-1: config 0 descriptor?? [ 31.919330][ T767] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 32.328495][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x4 [ 32.335906][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 32.343250][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 32.350580][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 32.357869][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 32.365198][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 32.372523][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 32.379812][ T466] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 32.387913][ T466] gt683r_led 0003:1770:FF00.0001: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 32.529800][ T784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.538335][ T784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.591766][ T466] usb 4-1: USB disconnect, device number 3 [ 32.599785][ T9] gt683r_led 0003:1770:FF00.0001: failed to send set report request: -19 [ 32.896964][ T31] usb 1-1: USB disconnect, device number 4 [ 32.960357][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.110222][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 33.116661][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.123797][ T65] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 33.133132][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.143151][ T65] usb 2-1: config 0 descriptor?? [ 33.354997][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 33.362548][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.374442][ T65] usb 2-1: USB disconnect, device number 4 [ 33.390260][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.550320][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 33.556710][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.566842][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.576267][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 33.588589][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 33.597949][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.606536][ T31] usb 1-1: Product: syz [ 33.610749][ T31] usb 1-1: Manufacturer: syz [ 33.615460][ T31] usb 1-1: SerialNumber: syz [ 33.826258][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.833264][ T31] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 33.848293][ T31] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 33.857635][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.876551][ T31] usb 1-1: USB disconnect, device number 5 [ 33.887275][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.182657][ T9] usb 3-1: USB disconnect, device number 6 [ 34.260253][ T466] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.410259][ T466] usb 4-1: Using ep0 maxpacket: 16 [ 34.421355][ T466] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.442736][ T12] ------------[ cut here ]------------ [ 34.448255][ T12] WARNING: CPU: 0 PID: 12 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 34.458766][ T12] Modules linked in: [ 34.462704][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 34.474299][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.484396][ T12] Workqueue: iou_exit io_ring_exit_work [ 34.489973][ T12] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 34.496376][ T12] Code: 5d e9 c5 1a 55 02 cc e8 6f 4d 32 fe 0f 0b eb e3 e8 66 4d 32 fe 0f 0b eb da e8 5d 4d 32 fe 0f 0b e9 4d fe ff ff e8 51 4d 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 34.516072][ T12] RSP: 0018:ffffc900000c7990 EFLAGS: 00010293 [ 34.522206][ T12] RAX: ffffffff8355797f RBX: 1ffff11021c67c05 RCX: ffff888102653900 [ 34.530241][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 34.538240][ T12] RBP: ffffc900000c79e0 R08: 0000000000000003 R09: 0000000000000004 [ 34.546666][ T12] R10: 0000000000000000 R11: ffffffff83556960 R12: ffff888116844c00 [ 34.554799][ T12] R13: ffff88810e33e000 R14: ffff888115508400 R15: ffff888115508410 [ 34.562829][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.571928][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.578542][ T12] CR2: 00007f7cf5f456b8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 34.586573][ T12] Call Trace: [ 34.589869][ T12] [ 34.592840][ T12] ? _raw_spin_unlock+0x45/0x60 [ 34.597706][ T12] ublk_ch_uring_cmd+0x6f/0xa0 [ 34.602702][ T12] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 34.608714][ T12] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 34.614665][ T12] ? io_uring_cancel_generic+0x6eb/0x6eb [ 34.620356][ T12] ? __cfi___switch_to+0x10/0x10 [ 34.625319][ T12] ? kthread_data+0x54/0xc0 [ 34.629846][ T12] io_ring_exit_work+0x23c/0x83b [ 34.634866][ T12] ? _raw_spin_unlock+0x45/0x60 [ 34.639745][ T12] ? __cfi_io_ring_exit_work+0x10/0x10 [ 34.645360][ T12] process_scheduled_works+0x7d4/0x1020 [ 34.650962][ T12] worker_thread+0xc51/0x1370 [ 34.655667][ T12] kthread+0x2c9/0x370 [ 34.659758][ T12] ? __cfi_worker_thread+0x10/0x10 [ 34.664936][ T12] ? __cfi_kthread+0x10/0x10 [ 34.669545][ T12] ret_from_fork+0x67/0xa0 [ 34.674019][ T12] ? __cfi_kthread+0x10/0x10 [ 34.678620][ T12] ret_from_fork_asm+0x1a/0x30 [ 34.683466][ T12] [ 34.686494][ T12] ---[ end trace 0000000000000000 ]--- [ 34.692202][ T466] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 34.706495][ T466] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.715640][ T466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 34.723664][ T466] usb 4-1: SerialNumber: syz [ 34.950211][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 34.950232][ T36] audit: type=1400 audit(1780065729.280:209): avc: denied { name_bind } for pid=821 comm="syz.3.164" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 35.091942][ T31] usb 4-1: USB disconnect, device number 4