last executing test programs: 4.045635621s ago: executing program 1 (id=22): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000009c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xa) getpeername$packet(r0, 0x0, &(0x7f0000002d00)) 4.041766961s ago: executing program 1 (id=24): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x5) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x1, 0x13c, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12a, 0x2, 0x1, 0x1, 0x10, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4d, 0x7fd9, 0xe, 0x9}, {0x6, 0x24, 0x1a, 0xfff8, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x3ff}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x5, 0x0, 0x80, 0x5, 0xda}, @mdlm_detail={0xba, 0x24, 0x13, 0x8, "26cbf39c2bdd29e17c2b2006424e0c58c2f021cc6df5e697ae60d0600f69442ca4e9fd872ba2d27358b5e494f87b1fc1852100df2a59f7236565eeb90264277c15811a0d17de0cdc336bd0dd8759a76312bbb9d1f6191e16f250864f1f11fef60880109a3292065aaf3d34f66466ce1eaa76fe5f046fa87ca4073be12f91798ef16fc2b261c144abe182da3b4884a5c012760b15da9e641cbca49934ede1ebc3e615b9d9574b005cb8cc339ff7e5e6ece6bae57124fa"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x8, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfb, 0x40, 0xc}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x300, 0x45, 0x1, 0x7, 0x20, 0xc3}, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "2261289ac454801f86ecb71dc2f6aeb8"}]}, 0x4, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x429}}, {0xbf, &(0x7f00000008c0)=@string={0xbf, 0x3, "736f24705a59902a67052d096e86630891fa3131e2325ce7307e5ffe360b6093dc0c68644f6363c13f0af7401266cfb17176eb6f1482fd836782c2468ae0d2354ca8468d4fae7f02a1bc585f4dfceb5c3f5ba15a8fe0abaf98a59934db293864ccba80a11a1c62d68cd1acc84d6b07f13995f39bdf5a8d6872be0c8755d3e52d2b4844b172834b187139d5df0af93985f4b740c0b690db0f952a10c7d7ea97d09c2ca741521b9aacf59549137d076b42b5fdb8b2c5a240c2e75a55227e"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x100a}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="201005080000f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="ff01cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x40, 0x1, 0x4, ')gur'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="40080001"], 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r4) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000cc0)={0x20, 0x16, 0x7, "66c6e2d83befa6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) sync_file_range(r5, 0x2, 0x1, 0x7) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) connect$can_bcm(r6, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500000001090000ffffffe7c0745ac92f625eaed2ff000000005eb9a24dd04fe9049a1e120c7fbe71bd162f7e4cbde45c779f6cd343e4a6"], 0x80}}, 0x0) 3.138697293s ago: executing program 3 (id=26): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = getpgid(0x0) write$cgroup_pid(r1, &(0x7f0000000280)=r2, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 2.56548159s ago: executing program 3 (id=27): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x9, 0x14, 0xd, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x8, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000003, 0xffff0000, 0x3f92, 0x1000, 0x80000000, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x40000003, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x8a, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000006, 0x2010, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c09}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218294513"}, 0x28) r6 = dup(r3) syz_ublk_setup_queues(r6, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.160917849s ago: executing program 0 (id=31): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/211, 0xd3}, 0x12020) (async, rerun: 32) r2 = epoll_create(0x4) (async, rerun: 32) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)={0x2}) (async) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) (async) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080), 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x5}) (async) epoll_pwait(r2, &(0x7f00000029c0)=[{}], 0x1, 0x3, 0x0, 0x0) 2.160716599s ago: executing program 0 (id=32): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000040)={0x0, 0x55a9, 0x10, 0x800001, 0xa4, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) shutdown(r2, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.025273426s ago: executing program 3 (id=33): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000002, 0xc66c0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aafc020000000000000000000000000000fffe0008000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ff010000000000000000000000000001ff010000000000000000000000000001ff020000000000000000000000000001ffffffff0000000000000000000000006c0100000000000006000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.013086166s ago: executing program 3 (id=34): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000540)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000580)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x60}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) 1.860566613s ago: executing program 0 (id=35): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x4, 0x8, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0x7ff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0xfffffffc, 0xa7, 0x1000, 0x0, 0x200b39d, 0x8001, 0x3ff, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x1, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000010, 0x9, 0x9, 0x5, 0x0, 0xb, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x6ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x102, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x4, 0xfffffff9, 0x4, 0x9, 0xb, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4008085) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000053e859c5079282ee000000000001000001040002000800054000000008080005400000001a04000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0xfff, 0xfffffffffffffffe, 0x40100000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x9, 0xffffffffffffffff, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffffffffffffffff) r6 = dup(r5) recvmsg$unix(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/202, 0xca}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/49, 0x31}], 0x5}, 0x40000001) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup(r1) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') getdents64(r9, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 1.860207623s ago: executing program 0 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="02030a0004000000253663d03ddbdfe3919472000d0004d2000004d200ff00007ede6e"], 0x20}}, 0x80) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80000, &(0x7f00000000c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@permit_directio}, {@euid_lt={'euid<', r0}}], 0x2f}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)=0x10000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xe1, 0xec000000, 0xcd}]}) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./dev\x00', 0x52b102, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, 0x0) getdents64(r7, &(0x7f0000000580)=""/174, 0xff56) 1.71187384s ago: executing program 0 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e19, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x2, 0x4, 0xfffffffffffffffe, 0x72f], 0x0, 0x8340}) setns(0xc9, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x4d, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3, 0x2}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}}], 0x1, 0x2401c4c5) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet6(r5, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4d0, 0x0, 0x1}]}) 1.164967646s ago: executing program 3 (id=39): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(r3, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/49, 0x31) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000100)='./file0/file0\x00', 0x0) sendmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004c801) 1.038651032s ago: executing program 2 (id=40): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) getpeername$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x14c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2516c593c2dc30a0}, 0x800) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x378}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5da, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.032507772s ago: executing program 3 (id=41): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x4}]}, 0x10) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0x10, 0x6, "8a0b216d32de"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$midi(0x3, 0x3e, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xf7, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x8, [], [{{0x9, 0x5, 0x4, 0x3, 0x200, 0xc, 0x4, 0xfd, {0x4}}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x2, 0x1, 0x2, {0x4}}}]}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400002"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="200d45000000450ae272dcf49e0f0b9f80bfbb6a133861064676bc1c321f61ca7f723fa65f903a80f0cb71612f9df3ff4eb0c4498496265b9894650b487dd5af3d552b1f9201b64c0396a2"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x11, 0x25, "1f1af1550cc9cccfaf88ef058ccfb920d7ebb6d798a2c9b6f9495f1e4f02b58f311b07d7c6"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "87c3"}, &(0x7f0000000300)={0x20, 0x82, 0x2, "4118"}, &(0x7f0000000340)={0x20, 0x83, 0x1, 'D'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, '_f'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "f352aa"}}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) write$char_usb(r3, &(0x7f0000000480)="d710", 0x2) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="4005010001002f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64) 1.016692982s ago: executing program 2 (id=42): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x100000, &(0x7f00000000c0)='/[\x00') (async) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x100000, &(0x7f00000000c0)='/[\x00') syz_clone3(&(0x7f0000000740)={0x84000000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 965.570085ms ago: executing program 1 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x31, 0x4, 0x0, {0x3, 0x2, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_macvtap\x00', 0x400}) 939.806366ms ago: executing program 1 (id=44): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}]}, 0x58}, 0x1, 0x7}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd2(0x2, 0x80800) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800050001000000", 0x34) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x24704, 0x20000, 0x10002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x139}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x100, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 910.609658ms ago: executing program 2 (id=45): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000001040)=0x40, 0x4) 841.254451ms ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$security_selinux(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x3) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x0, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f00000008c0)=ANY=[], 0x0, 0x0) 840.997111ms ago: executing program 2 (id=47): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000540)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000580)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x60}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) 692.888888ms ago: executing program 1 (id=48): syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x4050, 0xfffd, 0x0, 0x7, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0xa0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1b406a, 0x0, &(0x7f0000000540)) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r5, &(0x7f0000000280)={0x0, 0x309d, 0x0, 0xfffffffa, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53a8, 0x40, 0x9000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x15c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 155.331643ms ago: executing program 1 (id=49): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) tkill(r1, 0x13) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 16.36318ms ago: executing program 0 (id=50): mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000580)={[{@rlog_pages={'rlog_pages', 0x3d, 0xfffffffffffff001}}]}) 0s ago: executing program 2 (id=51): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) write(r1, &(0x7f0000000280)="707265765f73746174652e66756e6374696f6e203d3d78d0d00ee6bb0a04", 0x1e) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000300)=""/104, 0x68}], 0x2) kernel console output (not intermixed with test programs): [ 20.731708][ T36] audit: type=1400 audit(1789356270.320:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.734440][ T36] audit: type=1400 audit(1789356270.320:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 27.534843][ T36] audit: type=1400 audit(1789356277.130:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.535870][ T286] cgroup: Unknown subsys name 'net' [ 27.557526][ T36] audit: type=1400 audit(1789356277.130:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.584811][ T36] audit: type=1400 audit(1789356277.170:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.584966][ T286] cgroup: Unknown subsys name 'devices' [ 27.711308][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.717130][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.808856][ T36] audit: type=1400 audit(1789356277.400:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.832053][ T36] audit: type=1400 audit(1789356277.410:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.856761][ T36] audit: type=1400 audit(1789356277.410:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.885289][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.894064][ T36] audit: type=1400 audit(1789356277.490:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.919555][ T36] audit: type=1400 audit(1789356277.490:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.983373][ T36] audit: type=1400 audit(1789356277.590:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.009043][ T36] audit: type=1400 audit(1789356277.590:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.009286][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.798775][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.805913][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.813152][ T293] bridge_slave_0: entered allmulticast mode [ 28.819330][ T293] bridge_slave_0: entered promiscuous mode [ 28.826751][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.833803][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.840905][ T293] bridge_slave_1: entered allmulticast mode [ 28.847025][ T293] bridge_slave_1: entered promiscuous mode [ 28.878984][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.886157][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.893379][ T296] bridge_slave_0: entered allmulticast mode [ 28.899650][ T296] bridge_slave_0: entered promiscuous mode [ 28.907270][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.914323][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.921367][ T296] bridge_slave_1: entered allmulticast mode [ 28.927578][ T296] bridge_slave_1: entered promiscuous mode [ 28.984877][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.991950][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.999060][ T294] bridge_slave_0: entered allmulticast mode [ 29.005272][ T294] bridge_slave_0: entered promiscuous mode [ 29.013980][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.021070][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.028095][ T294] bridge_slave_1: entered allmulticast mode [ 29.034264][ T294] bridge_slave_1: entered promiscuous mode [ 29.064429][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.071531][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.078592][ T295] bridge_slave_0: entered allmulticast mode [ 29.084948][ T295] bridge_slave_0: entered promiscuous mode [ 29.091357][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.098379][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.105443][ T295] bridge_slave_1: entered allmulticast mode [ 29.111677][ T295] bridge_slave_1: entered promiscuous mode [ 29.210344][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.217390][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.224666][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.231683][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.249776][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.256817][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.264081][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.271115][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.280162][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.287220][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.294489][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.301509][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.333479][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.341182][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.348537][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.356277][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.363646][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.370910][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.381342][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.388366][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.402646][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.409687][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.419144][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.426191][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.442484][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.449530][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.457100][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.464144][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.472064][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.479086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.503496][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.510541][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.527033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.534068][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.552187][ T295] veth0_vlan: entered promiscuous mode [ 29.571765][ T293] veth0_vlan: entered promiscuous mode [ 29.581585][ T294] veth0_vlan: entered promiscuous mode [ 29.598633][ T293] veth1_macvtap: entered promiscuous mode [ 29.612401][ T295] veth1_macvtap: entered promiscuous mode [ 29.621438][ T294] veth1_macvtap: entered promiscuous mode [ 29.640065][ T296] veth0_vlan: entered promiscuous mode [ 29.664337][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.691245][ T296] veth1_macvtap: entered promiscuous mode [ 29.730145][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.822870][ T325] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 29.989613][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.009629][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.139593][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 30.145827][ T311] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.155605][ T311] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.168485][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.169507][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 30.175132][ T311] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 30.182043][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 30.189202][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.201654][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.209544][ T311] usb 2-1: config 0 descriptor?? [ 30.224228][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 30.235579][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.244477][ T10] usb 1-1: config 0 descriptor?? [ 30.451004][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 30.457059][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.468104][ T311] usb 2-1: USB disconnect, device number 2 [ 30.654111][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.661595][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.668540][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.675740][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.683080][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.690163][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.697184][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.706855][ T10] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 30.714825][ T10] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 30.849661][ T62] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 30.900379][ T10] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 30.910050][ T10] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 30.918082][ T10] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 30.925554][ T10] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 30.935684][ T10] usb 1-1: USB disconnect, device number 2 [ 31.031059][ T62] usb 3-1: not running at top speed; connect to a high speed hub [ 31.039561][ T62] usb 3-1: config 192 has an invalid interface number: 74 but max is 0 [ 31.047827][ T62] usb 3-1: config 192 has no interface number 0 [ 31.055581][ T62] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=8e.1f [ 31.065326][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.073438][ T62] usb 3-1: Product: syz [ 31.077581][ T62] usb 3-1: Manufacturer: syz [ 31.082177][ T62] usb 3-1: SerialNumber: syz [ 31.109612][ T333] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.219522][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.269625][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 31.275974][ T333] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 31.284188][ T333] usb 4-1: config 1 has no interface number 0 [ 31.290442][ T333] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 31.290539][ T332] netlink: 'syz.2.7': attribute type 27 has an invalid length. [ 31.300386][ T333] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 31.318150][ T333] usb 4-1: config 1 interface 105 has no altsetting 0 [ 31.330533][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.330590][ T333] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 31.339124][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.349239][ T333] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 31.366609][ T333] usb 4-1: Product: syz [ 31.371323][ T333] usb 4-1: Manufacturer: syz [ 31.375066][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.377491][ T333] usb 4-1: SerialNumber: syz [ 31.384606][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.389339][ T62] usb 3-1: USB disconnect, device number 2 [ 31.401568][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 31.408091][ T338] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.413639][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 31.420808][ T338] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.430784][ T45] usb 2-1: Product: syz [ 31.444588][ T45] usb 2-1: Manufacturer: syz [ 31.451451][ T45] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 31.842780][ T338] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.850237][ T338] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 32.258273][ T333] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 32.269567][ T333] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 32.282535][ T333] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5a:f5:a2:3c:59:6d [ 32.387225][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 32.492284][ T338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.519527][ T10] usb 3-1: device descriptor read/64, error -71 [ 32.769524][ T10] usb 3-1: device descriptor read/64, error -71 [ 33.009514][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 33.139515][ T10] usb 3-1: device descriptor read/64, error -71 [ 33.379511][ T10] usb 3-1: device descriptor read/64, error -71 [ 33.489637][ T10] usb usb3-port1: attempt power cycle [ 33.549505][ T352] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.679535][ T352] usb 1-1: device descriptor read/64, error -71 [ 33.829528][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.850539][ T10] usb 3-1: device descriptor read/8, error -71 [ 33.919573][ T352] usb 1-1: device descriptor read/64, error -71 [ 33.980563][ T10] usb 3-1: device descriptor read/8, error -71 [ 33.990847][ T45] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 34.002256][ T45] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 34.012084][ T45] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 34.019369][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 34.019382][ T36] audit: type=1400 audit(1789356283.620:124): avc: denied { mounton } for pid=388 comm="syz.1.18" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 34.048623][ T36] audit: type=1400 audit(1789356283.620:125): avc: denied { create } for pid=388 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.070575][ T45] usb 2-1: USB disconnect, device number 3 [ 34.089509][ T36] audit: type=1400 audit(1789356283.620:126): avc: denied { create } for pid=388 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 34.109756][ T36] audit: type=1400 audit(1789356283.620:127): avc: denied { setopt } for pid=388 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.129056][ T36] audit: type=1400 audit(1789356283.630:128): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.148952][ T36] audit: type=1400 audit(1789356283.680:129): avc: denied { bind } for pid=393 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.168663][ T36] audit: type=1400 audit(1789356283.680:130): avc: denied { name_bind } for pid=393 comm="syz.1.19" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.169506][ T352] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.249522][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 34.270507][ T10] usb 3-1: device descriptor read/8, error -71 [ 34.339518][ T352] usb 1-1: device descriptor read/64, error -71 [ 34.400561][ T10] usb 3-1: device descriptor read/8, error -71 [ 34.509605][ T10] usb usb3-port1: unable to enumerate USB device [ 34.599541][ T352] usb 1-1: device descriptor read/64, error -71 [ 34.710038][ T352] usb usb1-port1: attempt power cycle [ 35.049525][ T352] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.070508][ T352] usb 1-1: device descriptor read/8, error -71 [ 35.200572][ T352] usb 1-1: device descriptor read/8, error -71 [ 35.439568][ T352] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.460484][ T352] usb 1-1: device descriptor read/8, error -71 [ 35.600458][ T352] usb 1-1: device descriptor read/8, error -71 [ 35.709584][ T352] usb usb1-port1: unable to enumerate USB device [ 36.383554][ T36] audit: type=1400 audit(1789356285.980:131): avc: denied { mounton } for pid=398 comm="syz.0.20" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.405648][ T36] audit: type=1400 audit(1789356285.980:132): avc: denied { unlink } for pid=398 comm="syz.0.20" name="#1" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.427559][ T36] audit: type=1400 audit(1789356285.980:133): avc: denied { mount } for pid=398 comm="syz.0.20" name="/" dev="overlay" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.459596][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -110 [ 36.468071][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -32 [ 36.476248][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 36.484424][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 36.492607][ T149] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -32 [ 36.500686][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 36.508843][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -32 [ 36.520917][ T399] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.20'. [ 36.610965][ T333] usb 4-1: USB disconnect, device number 2 [ 36.623514][ T333] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 36.634927][ T333] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 36.642967][ T333] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 36.651077][ T333] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 36.659057][ T333] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 36.710422][ T333] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.719845][ T333] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.729204][ T333] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 36.799524][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.809535][ T352] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.817044][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.929539][ T10] usb 2-1: device descriptor read/64, error -71 [ 36.979531][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 36.984624][ T352] usb 1-1: Using ep0 maxpacket: 32 [ 36.990755][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 37.001929][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 37.014774][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 37.024080][ T352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.032088][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.040620][ T352] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 37.051793][ T45] usb 3-1: config 0 descriptor?? [ 37.058876][ T352] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 37.067990][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.075992][ T352] usb 1-1: Product: syz [ 37.080171][ T352] usb 1-1: Manufacturer: syz [ 37.084762][ T352] usb 1-1: SerialNumber: syz [ 37.169512][ T10] usb 2-1: device descriptor read/64, error -71 [ 37.409515][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.464362][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.471841][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.479091][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.486538][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.493842][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.501006][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.508075][ T352] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.514816][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.521829][ T45] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 37.529445][ T45] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 37.549513][ T10] usb 2-1: device descriptor read/64, error -71 [ 37.701309][ T45] lenovo 0003:17EF:6047.0002: Failed to switch F7/9/11 mode: -71 [ 37.709860][ T45] lenovo 0003:17EF:6047.0002: Failed to switch middle button: -71 [ 37.718326][ T45] lenovo 0003:17EF:6047.0002: Fn-lock setting failed: -71 [ 37.727308][ T45] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 37.741778][ T45] usb 3-1: USB disconnect, device number 7 [ 37.799541][ T10] usb 2-1: device descriptor read/64, error -71 [ 37.909472][ T352] usb 1-1: USB disconnect, device number 7 [ 37.909596][ T10] usb usb2-port1: attempt power cycle [ 38.018779][ T431] input: syz0 as /devices/virtual/input/input4 [ 38.269536][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.291354][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.297738][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 38.400267][ T443] fuseblk: Invalid rootmode [ 38.424752][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.669507][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.701684][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.721569][ T471] ======================================================= [ 38.721569][ T471] WARNING: The mand mount option has been deprecated and [ 38.721569][ T471] and is ignored by this kernel. Remove the mand [ 38.721569][ T471] option from the mount to silence this warning. [ 38.721569][ T471] ======================================================= [ 38.775319][ T471] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 38.831138][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.949521][ T10] usb usb2-port1: unable to enumerate USB device [ 39.169509][ T352] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.319538][ T352] usb 1-1: Using ep0 maxpacket: 8 [ 39.325977][ T352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 39.337270][ T352] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.350211][ T352] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 39.362047][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.363747][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 39.363761][ T36] audit: type=1400 audit(1789356288.960:180): avc: denied { connect } for pid=475 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.373228][ T352] usb 1-1: config 0 descriptor?? [ 39.389505][ T36] audit: type=1400 audit(1789356288.970:181): avc: denied { connect } for pid=475 comm="syz.2.38" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.428165][ T36] audit: type=1400 audit(1789356289.020:182): avc: denied { read } for pid=475 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.456939][ T36] audit: type=1400 audit(1789356289.050:183): avc: denied { create } for pid=478 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.476719][ T36] audit: type=1400 audit(1789356289.080:184): avc: denied { connect } for pid=478 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.496087][ T36] audit: type=1400 audit(1789356289.080:185): avc: denied { mount } for pid=478 comm="syz.3.39" name="/" dev="ramfs" ino=5421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.518668][ T36] audit: type=1400 audit(1789356289.080:186): avc: denied { write } for pid=475 comm="syz.2.38" path="socket:[5409]" dev="sockfs" ino=5409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.541493][ T36] audit: type=1400 audit(1789356289.080:187): avc: denied { write } for pid=478 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.564689][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.578836][ T36] audit: type=1400 audit(1789356289.160:188): avc: denied { unlink } for pid=483 comm="syz.2.40" name="#3" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.579182][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.618369][ T36] audit: type=1400 audit(1789356289.210:189): avc: denied { mount } for pid=485 comm="syz.1.43" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.739306][ T502] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 39.799511][ T339] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.816526][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.824929][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.832056][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.839065][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.848041][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.863424][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.870450][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.877408][ T352] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 39.884981][ T352] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 39.949502][ T339] usb 4-1: device descriptor read/64, error -71 [ 40.032421][ T352] lenovo 0003:17EF:6047.0003: Failed to switch F7/9/11 mode: -71 [ 40.040432][ T352] lenovo 0003:17EF:6047.0003: Failed to switch middle button: -71 [ 40.048418][ T352] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 40.055778][ T352] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 40.067076][ T352] usb 1-1: USB disconnect, device number 8 [ 40.199547][ T339] usb 4-1: device descriptor read/64, error -71 [ 40.439540][ T339] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.569502][ T339] usb 4-1: device descriptor read/64, error -71 [ 40.605550][ T513] ------------[ cut here ]------------ [ 40.611132][ T513] WARNING: CPU: 0 PID: 513 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 40.620730][ T513] Modules linked in: [ 40.624659][ T513] CPU: 0 UID: 0 PID: 513 Comm: syz.0.50 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 40.633171][ T387] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 40.636070][ T513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.653396][ T513] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 40.655197][ T387] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.659399][ T513] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 15 d0 0b 06 00 0f 85 c2 00 00 00 c6 05 08 d0 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 40.688571][ T513] RSP: 0018:ffffc9000de47880 EFLAGS: 00010246 [ 40.694660][ T513] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 40.702653][ T513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000de47938 [ 40.710658][ T513] RBP: ffffc9000de479a8 R08: ffffc9000de47937 R09: 0000000000000000 [ 40.718638][ T513] R10: ffffc9000de47920 R11: fffff52001bc8f27 R12: ffffc9000de478c0 [ 40.726653][ T513] R13: dffffc0000000000 R14: 1ffff92001bc8f14 R15: 0000000000000000 [ 40.734647][ T513] FS: 00007f83e6dfc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.743603][ T513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.750207][ T513] CR2: 0000200000001000 CR3: 0000000118464000 CR4: 00000000003526b0 [ 40.758187][ T513] Call Trace: [ 40.761489][ T513] [ 40.764422][ T513] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.770517][ T513] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.776262][ T513] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 40.782028][ T513] ___kmalloc_large_node+0x81/0x220 [ 40.787216][ T513] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 40.792910][ T513] __kmalloc_large_node_noprof+0x1e/0xd0 [ 40.798528][ T513] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 40.804194][ T513] __kmalloc_noprof+0x326/0x510 [ 40.809044][ T513] ? __cfi_lockref_get+0x10/0x10 [ 40.814034][ T513] incfs_realloc_mount_info+0xa7/0x4c0 [ 40.819528][ T513] ? incfs_add_sysfs_node+0x118/0x230 [ 40.824893][ T513] ? __kasan_check_write+0x18/0x20 [ 40.830038][ T513] incfs_alloc_mount_info+0x478/0x5f0 [ 40.835407][ T513] incfs_mount_fs+0x3ca/0x970 [ 40.840098][ T513] ? __cfi_incfs_mount_fs+0x10/0x10 [ 40.845292][ T513] ? selinux_capable+0x38/0x50 [ 40.850067][ T513] legacy_get_tree+0x106/0x1b0 [ 40.854828][ T513] ? __cfi_incfs_mount_fs+0x10/0x10 [ 40.860164][ T513] vfs_get_tree+0x9e/0x290 [ 40.864590][ T513] do_new_mount+0x251/0xb40 [ 40.869073][ T513] ? security_capable+0x44/0x130 [ 40.874084][ T513] path_mount+0x66a/0xff0 [ 40.878410][ T513] ? putname+0x113/0x150 [ 40.882653][ T513] __se_sys_mount+0x2bf/0x480 [ 40.887324][ T513] ? __x64_sys_mount+0xf0/0xf0 [ 40.892092][ T513] __x64_sys_mount+0xc3/0xf0 [ 40.896703][ T513] x64_sys_call+0x2021/0x2ee0 [ 40.901400][ T513] do_syscall_64+0x57/0xf0 [ 40.905812][ T513] ? clear_bhb_loop+0x50/0xa0 [ 40.910495][ T513] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.916387][ T513] RIP: 0033:0x7f83e5f9e159 [ 40.920832][ T513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.940453][ T513] RSP: 002b:00007f83e6dfc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.948854][ T513] RAX: ffffffffffffffda RBX: 00007f83e6225fa0 RCX: 00007f83e5f9e159 [ 40.956844][ T513] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 40.965298][ T513] RBP: 00007f83e603503b R08: 0000200000000580 R09: 0000000000000000 [ 40.973299][ T513] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 40.981284][ T513] R13: 00007f83e6226038 R14: 00007f83e6225fa0 R15: 00007ffc0c8ca108 [ 40.989246][ T513] [ 40.992277][ T513] ---[ end trace 0000000000000000 ]--- [ 40.997952][ T513] incfs: Error allocating mount info. -12 [ 41.004137][ T513] incfs: mount failed -12 [ 41.119562][ T339] usb 4-1: device descriptor read/64, error -71 [ 41.229615][ T339] usb usb4-port1: attempt power cycle [ 41.579531][ T339] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.600477][ T339] usb 4-1: device descriptor read/8, error -71 [ 41.730549][ T339] usb 4-1: device descriptor read/8, error -71 [ 41.969537][ T339] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.990488][ T339] usb 4-1: device descriptor read/8, error -71 [ 42.120559][ T339] usb 4-1: device descriptor read/8, error -71 [ 42.229607][ T339] usb usb4-port1: unable to enumerate USB device