last executing test programs: 3.553695353s ago: executing program 3 (id=4): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={r1, 0x0, "375b3f0b14e9cd577966da683573a9d1dc2841ff8870294914dc4c176a903b3b5c03c429e77e64e769f275a52b3b81db0898adc191bd7a322113f1518b3b9485b88dbe846988d1feb21bbdfd3f9edb9a75399c48163b428898d4e9d3e9f18c7afba955c9605aca110697d039f652b593ee51b11e498982f4b5a22bb2ed03f7c95bce37ea220d82d122bcc381b4ae28a697ac25dc9f9b87afcfa74bf5b885523cd0e4bafc8069ac29766694e8aee75a6c16a8e6691e49906e08402c8509bb3df0181b3e2935d3781d32fde0a156bedd43f1b62f5856dcb3429aab1ddb479d495aee5068278dc79693049f33681ed16701380b6b885c1a2793a824a9590864445a", "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"}) process_vm_writev(0x0, &(0x7f00000051c0)=[{&(0x7f0000004e40)=""/168, 0xa8}], 0x1, &(0x7f0000006300)=[{&(0x7f0000005240)=""/76, 0x4c}], 0x1, 0x0) syz_usb_connect$midi(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120110030000002099045c1040000102030109022d00010170e90509040000010103200f072403010200070724030365000509050202000206"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') 3.542934014s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140)=0x4, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r1 = socket$inet(0x2, 0xa, 0x5) r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xd) fchdir(r3) setsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000180)={0x6, 0x401, 0x8, 0x7, 0x9}) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40802, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xce5, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0xfd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0x158}}], 0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r9, 0xc1086201, 0x0) accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800) ioctl$XFS_IOC_DIOINFO(r9, 0x800c581e, &(0x7f0000000100)) 3.525889865s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./trace/error_log\x00', 0xc) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8008, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}}}}}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x41401, 0x155) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a001501"], 0x1c}], 0x1}, 0x4000080) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x102) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80143, 0x0) pread64(r6, &(0x7f00000000c0)=""/23, 0x17, 0x1) syz_usb_connect$uac1(0x2, 0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020732b23004000010203010902700003010480810904000000010100000a240100000a000201020904010000010200000904010101010200000924020105035403000324010405011009050109d0"], 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r7, &(0x7f0000000280)="686973743a6b6599fb3d", 0xa) 3.435477869s ago: executing program 0 (id=5): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040880) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e2405"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e2405"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa3, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x0, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3c, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xfe, 0x40, 0x0, 0x8, 0x4}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "2eec339e87cca9d3b5f03ce368741b90"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x446}}, {0xdb, &(0x7f0000000340)=@string={0xdb, 0x3, "59e434509f9aca3784e33cbe6463bf75f7835aaa2e3ba6442b22e0a12b7eafc615b0ed273db51476c32838c5d990fbf2b79e94353d1c0afc55c28c183f33889caf4e77eb9e4f6fae280991c3954323622e9bd86705a56327550705aad9eec291454c82d85ba8596cc3eebf5beb8992d2cf33b6d277888077b54bc50e0b01f3f8d5e4bd64340ca2142421ff17712dfd540a8e6de2da1bd824ec500659fd639dab315d8957ead83bddaf72d3c4b3ae1ab3983658726a274d9b9e864bf94629740ce2f6bcf56d4848a60f8c56643f761d4e81c74fc367871c74c1"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41a}}]}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x2, 0x86, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x90}}}, &(0x7f00000006c0)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x2, 0x86, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x90}}}, &(0x7f00000006c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/address_bits', 0x62000, 0x140) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) (async) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x99, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x99, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f00000003c0)={0x0, 0xcd5e, 0x10000, 0x1, 0x257}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r7, r8, &(0x7f00000003c0)={0x0, 0xcd5e, 0x10000, 0x1, 0x257}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) r9 = syz_io_uring_setup(0x6599, &(0x7f00000007c0)={0x0, 0x3113, 0x270, 0x3, 0x3dd}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000bc0)={0x33, r0, 'id1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r13, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_ublk_setup_queues(r3, r4, &(0x7f0000000740)={0x0, 0x9aaa, 0x40, 0x0, 0x27, 0x0, r5}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3030, 0x400, 0x0, 0x2d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe938, 0x400, 0x3, 0x36d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1544, 0x40000, 0x1, 0x2b7, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf7c, 0x400, 0x1, 0x83, 0x0, r10}}], 0x4, &(0x7f0000002880)={0x2e, 0x7, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6d27}, 0x0, 0x0, '\x00', {0x0, 0x765, 0x0, &(0x7f0000001880)=@buf_1k="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"}}, &(0x7f0000002900)) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x74, 0x14, 0x1, 0x4, 0x25dfdbfe, {0xa}, [@typed={0x4}, @nested={0x48, 0x8, 0x0, 0x1, [@nested={0x42, 0x147, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x3ff}, @generic="19636f7a4d7a8e5cc3f82d56982dcb2f9ba1e6833f2f1ad01d9bad8383bd6d713484453fbd3c6815506b22e59374ee7d56d5"]}]}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x74, 0x14, 0x1, 0x4, 0x25dfdbfe, {0xa}, [@typed={0x4}, @nested={0x48, 0x8, 0x0, 0x1, [@nested={0x42, 0x147, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x3ff}, @generic="19636f7a4d7a8e5cc3f82d56982dcb2f9ba1e6833f2f1ad01d9bad8383bd6d713484453fbd3c6815506b22e59374ee7d56d5"]}]}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) sendmsg$inet6(r1, &(0x7f0000001840)={&(0x7f00000000c0)={0xa, 0x2, 0x9, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)}, 0x20040810) 2.204282326s ago: executing program 3 (id=6): close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r1) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0x6}, {0xfff1, 0xffff}, {0xfff2, 0x10}}}, 0x24}}, 0x490d0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x18c) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x355a03, 0x24) r9 = openat$incfs(r8, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x40106726, &(0x7f00000000c0)) sendmsg$can_raw(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) r10 = socket$packet(0x11, 0x6, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000009c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880043054803", 0x1a, 0x40810, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x1c4}, 0x1, 0x0, 0x0, 0x20}, 0x8004) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) exit(0x3) 1.356130637s ago: executing program 3 (id=9): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0xfffffffe, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r3, 0x4}, 0x0, &(0x7f0000005840)="00000002", 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0x7fffffff, 0x40000000000180, 0x2, 0x5, 0xf2, 0x8000d, 0x7fffffffffffe, 0xcd3, 0x9, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x10, 0x7, 0x2, 0x81, 0x2, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x7, 0x9}, [{0x6474e551, 0xfffffff7, 0x2, 0x9, 0x41000101, 0x400005, 0xb, 0xa}]}, 0x78) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@empty, @in=@rand_addr=0x64010101, 0x4e20, 0xfd95, 0x4e27, 0x394, 0x2, 0xa0, 0xa0, 0x3b}, {0x9ea, 0x53, 0xffff, 0x7, 0x1, 0xfffffffffffffeff, 0x8, 0xfffffffffffffffe}, {0x100000000006, 0x4, 0xc, 0x9}, 0x3, 0x6e6bc0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@private1, 0x4d2, 0x6c}, 0xd1f73d412a0c3327, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1, 0xf8a3eceea9e5829a, 0xfb, 0x392daa26, 0x1000, 0x721}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) socket$netlink(0x10, 0x3, 0x2) 1.289366409s ago: executing program 2 (id=11): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/126, &(0x7f0000000100)=0x7e) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) 1.232344622s ago: executing program 2 (id=12): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @local, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x7c000f, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.121533047s ago: executing program 2 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140)=0x4, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r1 = socket$inet(0x2, 0xa, 0x5) r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xd) fchdir(r3) setsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000180)={0x6, 0x401, 0x8, 0x7, 0x9}) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40802, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xce5, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0xfd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0x158}}], 0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r9, 0xc1086201, 0x0) accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800) ioctl$XFS_IOC_DIOINFO(r9, 0x800c581e, &(0x7f0000000100)) 1.06883417s ago: executing program 2 (id=14): mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) creat(&(0x7f00000000c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f00000072c0)='./file0/file2\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file1\x00') 1.000215313s ago: executing program 2 (id=15): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x0) 996.104593ms ago: executing program 2 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg(r1, &(0x7f0000001c40)={&(0x7f00000004c0)=@generic={0x1e, "61a1d5b8e9cd13b0f22a9836479c07725ad8c950c6ae5a233ed2c4b47520854bbc9c8a59dfa301e04dfc3fe042c768ee1feffb3f2f19b91db92b49caa71ff3c37b1fb7e56da04d9490486fa713e785a9420281f6b808049487c818f6012223737d69a62701c8b9ebe4cafa3b53ef1917c9a8f75cddd337d76c3c6185d039"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="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", 0xfe}], 0x1, &(0x7f0000000a80)=[{0x50, 0x3a, 0x100, "6dd77a11882edc7586d19e82e7c7c88470a3c86eba536441a424d2fea52d9f8b3f4f14f048dfaa506681a8a5ee9f3201f6dd19160619b2de22deb6a12d"}, {0x78, 0x1, 0x2, "4f17ee70cb723f25308355d33872de53b111cc57922ce40001682d4c57c3f22bd79934a47db58e3da86a2ffd8564f0822babf200e608019006f4f09fe68d5d65e9080d2cb92424e2b89af035b754c9a4979fdde765c179d346e3eb518106a0cc16bc7eeba7"}, {0x1010, 0x29, 0x1, "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"}, {0xc0, 0x1, 0x6, "648e5144cd32d1eb602cad3d7c0a1c9959faecbd2bfe5752f417633fedc5d33954f13f4c822e4b0815164d44b0767c48d805f149453e7b5804f60ac78eb40bc084848180e45d27105acfc93f939de50874a3025c9ee38fbc84acafb8d58ecfbddb118fec6479b307751e9ce7c44e45f588f66c13aec3e61e2b2cdfe4b55ea20b80d8dac840bfbbf1258abf65d043b1fd41ac83d5742692576568b94e99d17d66ef016c70c89abb76c76a0ba0a2"}], 0x1198}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000000080)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac2(0x2, 0xab, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x3, 0x60, 0xf8, {0x8, 0xb, 0x1, 0x2, 0x1, 0xc, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xa, 0x29, 0x9}, [@input_terminal={0x10, 0x24, 0x2, 0x6, 0x100, 0x1, 0xb, 0x3d, 0x2, 0x0, 0x54, 0x8}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x201, 0x6, 0x3, 0xa9, 0xfffffff9, 0xf, 0x9, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x8, 0x0, 0x5, 0x4, 0x8, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x6, 0x74, {0x8, 0x25, 0x1, 0x4, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x8, 0x10, {0x8, 0x25, 0x1, 0x1, 0x3, 0x7f, 0x4}}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCNOTTY(r6, 0x5422) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x7, 0x0, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x12}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) 436.33177ms ago: executing program 1 (id=17): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000300)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x80080000, 0x0, 0x1f, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) getpgid(r2) write$tcp_congestion(r3, &(0x7f0000000000)='dctcp\x00', 0x6) syz_open_procfs(r2, &(0x7f0000000040)='environ\x00') 396.943041ms ago: executing program 0 (id=18): socket(0x26, 0x1, 0x200000) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket(0x2, 0x3, 0x4) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x400009, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="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", 0xff9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000024000000000000000000000000000000cbffac1e0001"], 0x2c}], 0x1}, 0x4000) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f00000000c0)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/55, 0x0, 0x1ff8}) 340.387754ms ago: executing program 1 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60000600) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000880)=""/285, 0x11d}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000080)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x60, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008894}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x60000600) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) (async) socket(0x10, 0x803, 0x0) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000880)=""/285, 0x11d}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000080)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x60, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008894}, 0x0) (async) 266.465948ms ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x182034, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000900ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x20, 0xf, 0x6, "9ae99e000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x40, 0x11, 0x4, "cc016743"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r5, &(0x7f0000000100)='1\x00', 0x2) syz_clone(0x28042000, 0x0, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x20900, 0x16a, 0x19}, 0x31) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x100) syz_usb_control_io$rtl8150(r0, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x20, 0xc, 0xc8, {0xc8, 0x2, "cda420bb93a33ac10fc12e560b86f9e4994663c8f6f9c83efd6f31521cff2081807d2949e4548331bbab57947769203f14004ee84fe3a3a5f7a319a2c04b32db49b9df55ceaee299f805bd891597f4f1d7089215f12dc7737b41aab181f9bbcfff233e844b4b474a7625974fc1835efa8a8710c3ae7c625b33d48deacbf6a46e9ce4ef737099baa04f69ca63702da34b040d75f1eac1bae95d5d4567a0ebc70cf23fcddc624dc1bf2145de91d3df21492d34010a7a8d29f621dbb1dfd27f445fb3c5632dde31"}}, &(0x7f0000000400)={0x0, 0x3, 0x11, @string={0x11, 0x3, "39dddbd7719bea3a1e7c7ae54884eb"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0x9, "d9fedc66bb6aa7b632"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0xc0, 0x5, 0x5, "4795e20e21"}, &(0x7f0000000600)=ANY=[@ANYBLOB="40050400000031805918"]}) 142.812423ms ago: executing program 1 (id=21): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x3}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x82, 0x0}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) 0s ago: executing program 1 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000100)={@void, @val={0x1, 0x3, 0x1e, 0x3, 0x14, 0x6}, @ipv6=@tcp={0x6, 0x6, "f7cb6e", 0x14, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x81, 0x0, 0x4f3}}}}}, 0x46) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) mknod(0x0, 0x836fac3ed7542db, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="c4e32d7acf28650f405a00f20f32670f2169f30f09c43df13d3b0c0fc79b060000001e33c6c7c73e0f47d7c166bafbacac40", 0x32}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 13.979515][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 13.979533][ T36] audit: type=1400 audit(1790157659.190:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.984187][ T36] audit: type=1400 audit(1790157659.190:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.988546][ T36] audit: type=1400 audit(1790157659.200:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[2940]" dev="pipefs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.992018][ T36] audit: type=1400 audit(1790157659.200:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.994875][ T36] audit: type=1400 audit(1790157659.200:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 21.527617][ T36] audit: type=1400 audit(1790157666.740:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.530915][ T287] cgroup: Unknown subsys name 'net' [ 21.550288][ T36] audit: type=1400 audit(1790157666.740:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.577631][ T36] audit: type=1400 audit(1790157666.770:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.578099][ T287] cgroup: Unknown subsys name 'devices' [ 21.697233][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.702868][ T287] cgroup: Unknown subsys name 'rlimit' [ 21.819240][ T36] audit: type=1400 audit(1790157667.030:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.842442][ T36] audit: type=1400 audit(1790157667.030:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.867379][ T36] audit: type=1400 audit(1790157667.030:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.891951][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.900768][ T36] audit: type=1400 audit(1790157667.110:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.926403][ T36] audit: type=1400 audit(1790157667.110:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.960930][ T36] audit: type=1400 audit(1790157667.170:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.986538][ T36] audit: type=1400 audit(1790157667.170:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.987216][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.816405][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.823490][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.830670][ T294] bridge_slave_0: entered allmulticast mode [ 22.837218][ T294] bridge_slave_0: entered promiscuous mode [ 22.843768][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.850893][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.858040][ T294] bridge_slave_1: entered allmulticast mode [ 22.864301][ T294] bridge_slave_1: entered promiscuous mode [ 22.955596][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.962669][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.969837][ T295] bridge_slave_0: entered allmulticast mode [ 22.976100][ T295] bridge_slave_0: entered promiscuous mode [ 22.990245][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.997520][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.004595][ T295] bridge_slave_1: entered allmulticast mode [ 23.011030][ T295] bridge_slave_1: entered promiscuous mode [ 23.042787][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.049931][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.057163][ T300] bridge_slave_0: entered allmulticast mode [ 23.063416][ T300] bridge_slave_0: entered promiscuous mode [ 23.072731][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.079841][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.086961][ T300] bridge_slave_1: entered allmulticast mode [ 23.093212][ T300] bridge_slave_1: entered promiscuous mode [ 23.102405][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.109568][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.116695][ T296] bridge_slave_0: entered allmulticast mode [ 23.122943][ T296] bridge_slave_0: entered promiscuous mode [ 23.132360][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.139446][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.146588][ T296] bridge_slave_1: entered allmulticast mode [ 23.152849][ T296] bridge_slave_1: entered promiscuous mode [ 23.253619][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.260709][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.268059][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.275118][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.323229][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.330330][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.337665][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.344711][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.369358][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.376456][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.383736][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.390836][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.410833][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.417962][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.425284][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.432340][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.465679][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.473093][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.480712][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.488472][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.496036][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.503361][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.511029][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.518525][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.533137][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.540233][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.549430][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.556518][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.570545][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.577636][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.604588][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.611701][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.619628][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.626697][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.634450][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.641559][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.649875][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.656969][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.664511][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.671610][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.723198][ T294] veth0_vlan: entered promiscuous mode [ 23.730821][ T295] veth0_vlan: entered promiscuous mode [ 23.746078][ T296] veth0_vlan: entered promiscuous mode [ 23.761872][ T295] veth1_macvtap: entered promiscuous mode [ 23.779428][ T296] veth1_macvtap: entered promiscuous mode [ 23.786430][ T294] veth1_macvtap: entered promiscuous mode [ 23.796879][ T300] veth0_vlan: entered promiscuous mode [ 23.821548][ T300] veth1_macvtap: entered promiscuous mode [ 23.862469][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.940337][ T323] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 23.952852][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.022209][ T328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.032058][ T328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.041641][ T328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.053210][ T328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.185306][ T320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.195231][ T46] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.265452][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.335254][ T320] usb 4-1: Using ep0 maxpacket: 32 [ 24.342164][ T320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.351011][ T320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.361598][ T46] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 24.369801][ T46] usb 3-1: config 0 has no interface number 0 [ 24.376049][ T46] usb 3-1: config 0 interface 41 has no altsetting 0 [ 24.384204][ T320] usb 4-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 24.393373][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.401422][ T46] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 24.405173][ T10] usb 1-1: device descriptor read/64, error -71 [ 24.411164][ T320] usb 4-1: Product: syz [ 24.420984][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.428557][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.436667][ T320] usb 4-1: Manufacturer: syz [ 24.441328][ T320] usb 4-1: SerialNumber: syz [ 24.446154][ T46] usb 3-1: Product: syz [ 24.450357][ T46] usb 3-1: Manufacturer: syz [ 24.454944][ T46] usb 3-1: SerialNumber: syz [ 24.461536][ T46] usb 3-1: config 0 descriptor?? [ 24.606176][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.616396][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 24.625427][ T31] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 24.636455][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 24.647628][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8400, setting to 1023 [ 24.659028][ T31] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.665167][ T10] usb 1-1: device descriptor read/64, error -71 [ 24.682370][ T31] usb 2-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 24.691566][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.700196][ T31] usb 2-1: Product: syz [ 24.705584][ T31] usb 2-1: Manufacturer: syz [ 24.706063][ T320] usb 4-1: USB disconnect, device number 2 [ 24.717116][ T31] usb 2-1: SerialNumber: syz [ 24.813548][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.915117][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 25.045203][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.078207][ T46] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 25.087946][ T46] usb 3-1: USB disconnect, device number 2 [ 25.204800][ T337] Zero length message leads to an empty skb [ 25.285332][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.395516][ T10] usb usb1-port1: attempt power cycle [ 25.735463][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 25.756326][ T10] usb 1-1: device descriptor read/8, error -71 [ 25.886495][ T10] usb 1-1: device descriptor read/8, error -71 [ 26.125138][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 26.146178][ T10] usb 1-1: device descriptor read/8, error -71 [ 26.227587][ T356] kvm: kvm [355]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 26.236687][ T356] kvm: kvm [355]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 26.276166][ T10] usb 1-1: device descriptor read/8, error -71 [ 26.296654][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.385385][ T10] usb usb1-port1: unable to enumerate USB device [ 26.446266][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.457626][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.466741][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.475640][ T9] usb 4-1: config 0 descriptor?? [ 26.665105][ T320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.683562][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 26.689606][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 26.698447][ T9] usb 4-1: USB disconnect, device number 3 [ 26.816622][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 26.824267][ T320] usb 3-1: can't read configurations, error -61 [ 26.950553][ T31] usb 2-1: 1:1 : invalid UAC_AS_GENERAL desc [ 26.956775][ T320] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.965176][ T31] usb 2-1: 0:2 : does not exist [ 26.972966][ T31] usb 2-1: USB disconnect, device number 2 [ 26.982108][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 26.982140][ T36] audit: type=1400 audit(1790157672.200:150): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.019822][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.057391][ T36] audit: type=1400 audit(1790157672.270:151): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.086523][ T36] audit: type=1400 audit(1790157672.290:152): avc: denied { create } for pid=369 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 27.109767][ T36] audit: type=1400 audit(1790157672.320:153): avc: denied { name_bind } for pid=369 comm="syz.0.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.115413][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.132277][ T36] audit: type=1400 audit(1790157672.320:154): avc: denied { node_bind } for pid=369 comm="syz.0.18" saddr=10.1.1.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.170650][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 27.178669][ T320] usb 3-1: can't read configurations, error -61 [ 27.185178][ T320] usb usb3-port1: attempt power cycle [ 27.197161][ T36] audit: type=1400 audit(1790157672.320:155): avc: denied { connect } for pid=369 comm="syz.0.18" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.220208][ T36] audit: type=1400 audit(1790157672.320:156): avc: denied { name_bind } for pid=369 comm="syz.0.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.241794][ T36] audit: type=1400 audit(1790157672.320:157): avc: denied { ioctl } for pid=369 comm="syz.0.18" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.306182][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.317490][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 27.328257][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.340544][ T36] audit: type=1400 audit(1790157672.550:158): avc: denied { create } for pid=382 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.341824][ T46] usb 4-1: config 0 descriptor?? [ 27.375082][ T36] audit: type=1400 audit(1790157672.580:159): avc: denied { bind } for pid=382 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.445119][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 27.535993][ T320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.588415][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 27.596254][ T320] usb 3-1: can't read configurations, error -61 [ 27.615475][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 27.621928][ T31] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 27.630556][ T31] usb 1-1: config 1 has no interface number 0 [ 27.637136][ T31] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 27.651890][ T31] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 27.667782][ T31] usb 1-1: config 1 interface 105 has no altsetting 0 [ 27.680890][ T31] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 27.693820][ T31] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 27.706631][ T31] usb 1-1: Product: syz [ 27.710863][ T31] usb 1-1: Manufacturer: syz [ 27.725358][ T31] usb 1-1: SerialNumber: syz [ 27.733316][ T376] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 27.745110][ T320] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 27.758752][ T376] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 27.778817][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 27.786615][ T320] usb 3-1: can't read configurations, error -61 [ 27.795425][ T320] usb usb3-port1: unable to enumerate USB device [ 27.978223][ T376] netlink: 'syz.0.20': attribute type 9 has an invalid length. [ 27.986000][ T376] netlink: 'syz.0.20': attribute type 2 has an invalid length. [ 28.175513][ T46] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 28.183545][ T46] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input4 [ 28.205210][ T376] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.212431][ T376] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.227703][ C1] ------------[ cut here ]------------ [ 28.233229][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 28.241848][ C1] index 21762 is out of range for type 'const int[34]' [ 28.248747][ C1] CPU: 1 UID: 0 PID: 386 Comm: syz.1.22 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 28.248784][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.248809][ C1] Call Trace: [ 28.248817][ C1] [ 28.248827][ C1] __dump_stack+0x21/0x30 [ 28.248879][ C1] dump_stack_lvl+0x140/0x1c0 [ 28.248925][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.248959][ C1] ? kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 28.248996][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 28.249020][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.249051][ C1] dump_stack+0x19/0x20 [ 28.249084][ C1] ubsan_epilogue+0xe/0x40 [ 28.249105][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 28.249151][ C1] aiptek_irq+0x208d/0x2a00 [ 28.249193][ C1] ? _raw_spin_unlock+0x45/0x60 [ 28.249220][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 28.249245][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 28.249270][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 28.249293][ C1] dummy_timer+0xa3f/0x4900 [ 28.249330][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 28.249356][ C1] ? timerqueue_del+0xd7/0x130 [ 28.249407][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 28.249446][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 28.249471][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 28.249511][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 28.249545][ C1] ? read_tsc+0xd/0x20 [ 28.249577][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 28.249608][ C1] hrtimer_run_softirq+0x159/0x560 [ 28.249630][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 28.249664][ C1] handle_softirqs+0x1ad/0x620 [ 28.249690][ C1] __irq_exit_rcu+0x47/0xb0 [ 28.249713][ C1] irq_exit_rcu+0xd/0x30 [ 28.249736][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 28.249767][ C1] [ 28.249775][ C1] [ 28.249783][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 28.249815][ C1] RIP: 0010:kvm_faultin_pfn+0x695/0x1620 [ 28.249843][ C1] Code: 00 00 41 80 3e 01 0f 85 73 02 00 00 e8 a4 9d 5e 00 e9 82 03 00 00 e8 9a 9d 5e 00 b8 02 00 00 00 e9 b7 fe ff ff e8 8b 9d 5e 00 19 04 00 00 e8 81 9d 5e 00 48 8b 5c 24 08 48 83 c3 78 48 89 d8 [ 28.249863][ C1] RSP: 0018:ffffc9000da570a0 EFLAGS: 00000246 [ 28.249905][ C1] RAX: ffffffff8128dd05 RBX: ffffc9000da41000 RCX: 0000000000080000 [ 28.249924][ C1] RDX: ffffc90002ed7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 28.249941][ C1] RBP: ffffc9000da571f8 R08: ffffc9000da57190 R09: 0000000000000001 [ 28.249959][ C1] R10: ffffc9000da572e0 R11: fffff52001b4ae5b R12: ffffc9000da572c0 [ 28.249977][ C1] R13: ffffc9000da572d8 R14: 7ff0000000000002 R15: ffffc9000da572b7 [ 28.249996][ C1] ? kvm_faultin_pfn+0x695/0x1620 [ 28.250025][ C1] ? fast_page_fault+0x1170/0x1170 [ 28.250047][ C1] ? __kvm_mmu_topup_memory_cache+0x449/0x7e0 [ 28.250084][ C1] ? get_guest_cr3+0xc0/0xc0 [ 28.250106][ C1] ? __cfi___switch_to+0x10/0x10 [ 28.250143][ C1] kvm_tdp_page_fault+0x204/0x320 [ 28.250172][ C1] kvm_mmu_do_page_fault+0x2bf/0x640 [ 28.250203][ C1] ? kvm_arch_async_page_ready+0x480/0x480 [ 28.250245][ C1] ? __sched_text_start+0x10/0x10 [ 28.250272][ C1] kvm_mmu_page_fault+0x150/0x9a0 [ 28.250302][ C1] handle_ept_violation+0x256/0x450 [ 28.250329][ C1] ? vmx_vcpu_run+0x1116/0x1f70 [ 28.250367][ C1] ? __cfi_handle_ept_violation+0x10/0x10 [ 28.250394][ C1] vmx_handle_exit+0x1376/0x1c00 [ 28.250427][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 28.250453][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 28.250485][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 28.250513][ C1] vcpu_run+0x4c14/0x7830 [ 28.250543][ C1] ? __kasan_check_write+0x18/0x20 [ 28.250585][ C1] ? signal_pending+0xc0/0xc0 [ 28.250616][ C1] ? __kasan_check_write+0x18/0x20 [ 28.250640][ C1] ? xfd_validate_state+0x68/0x140 [ 28.250674][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 28.250701][ C1] ? __kasan_check_write+0x18/0x20 [ 28.250724][ C1] ? fpregs_mark_activate+0x68/0x160 [ 28.250752][ C1] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 28.250780][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 28.250809][ C1] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 28.250841][ C1] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 28.250877][ C1] ? ioctl_has_perm+0x1bc/0x500 [ 28.250913][ C1] ? __asan_memcpy+0x5a/0x80 [ 28.250937][ C1] ? ioctl_has_perm+0x408/0x500 [ 28.250960][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 28.250983][ C1] ? __kasan_check_write+0x18/0x20 [ 28.251005][ C1] ? mutex_lock_killable+0x97/0x1d0 [ 28.251033][ C1] ? __cfi_mutex_lock_killable+0x10/0x10 [ 28.251061][ C1] kvm_vcpu_ioctl+0xa43/0x1000 [ 28.251084][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 28.251104][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 28.251126][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.251149][ C1] ? __kasan_check_write+0x18/0x20 [ 28.251172][ C1] ? recalc_sigpending+0x16c/0x1d0 [ 28.251200][ C1] ? __kasan_check_write+0x18/0x20 [ 28.251220][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 28.251240][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 28.251262][ C1] ? __fget_files+0x2bc/0x330 [ 28.251290][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.251319][ C1] ? security_file_ioctl+0x3e/0x110 [ 28.251341][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 28.251361][ C1] __se_sys_ioctl+0x126/0x1b0 [ 28.251389][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 28.251417][ C1] x64_sys_call+0x1878/0x2ee0 [ 28.251438][ C1] do_syscall_64+0x57/0xf0 [ 28.251459][ C1] ? clear_bhb_loop+0x50/0xa0 [ 28.251487][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.251514][ C1] RIP: 0033:0x7f116739e159 [ 28.251543][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.251561][ C1] RSP: 002b:00007f11682f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.251584][ C1] RAX: ffffffffffffffda RBX: 00007f1167626090 RCX: 00007f116739e159 [ 28.251601][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 28.251615][ C1] RBP: 00007f116743506b R08: 0000000000000000 R09: 0000000000000000 [ 28.251629][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.251641][ C1] R13: 00007f1167626128 R14: 00007f1167626090 R15: 00007ffce08a61a8 [ 28.251660][ C1] [ 28.251667][ C1] ---[ end trace ]--- [ 28.540910][ T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.543355][ C1] ------------[ cut here ]------------ [ 28.543367][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 28.551772][ T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.554222][ C1] index 21763 is out of range for type 'const int[34]' [ 28.906604][ C1] CPU: 1 UID: 0 PID: 386 Comm: syz.1.22 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 28.906628][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.906639][ C1] Call Trace: [ 28.906645][ C1] [ 28.906651][ C1] __dump_stack+0x21/0x30 [ 28.906678][ C1] dump_stack_lvl+0x140/0x1c0 [ 28.906702][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.906725][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 28.906743][ C1] dump_stack+0x19/0x20 [ 28.906765][ C1] ubsan_epilogue+0xe/0x40 [ 28.906779][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 28.906825][ C1] aiptek_irq+0x1f3c/0x2a00 [ 28.906863][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 28.906899][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 28.906918][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 28.906934][ C1] dummy_timer+0xa3f/0x4900 [ 28.906960][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 28.906978][ C1] ? timerqueue_del+0xd7/0x130 [ 28.907002][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 28.907027][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 28.907044][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 28.907071][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 28.907095][ C1] ? read_tsc+0xd/0x20 [ 28.907118][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 28.907139][ C1] hrtimer_run_softirq+0x159/0x560 [ 28.907154][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 28.907179][ C1] handle_softirqs+0x1ad/0x620 [ 28.907197][ C1] __irq_exit_rcu+0x47/0xb0 [ 28.907213][ C1] irq_exit_rcu+0xd/0x30 [ 28.907227][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 28.907249][ C1] [ 28.907254][ C1] [ 28.907260][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 28.907287][ C1] RIP: 0010:kvm_faultin_pfn+0x695/0x1620 [ 28.907306][ C1] Code: 00 00 41 80 3e 01 0f 85 73 02 00 00 e8 a4 9d 5e 00 e9 82 03 00 00 e8 9a 9d 5e 00 b8 02 00 00 00 e9 b7 fe ff ff e8 8b 9d 5e 00 19 04 00 00 e8 81 9d 5e 00 48 8b 5c 24 08 48 83 c3 78 48 89 d8 [ 28.907340][ C1] RSP: 0018:ffffc9000da570a0 EFLAGS: 00000246 [ 28.907355][ C1] RAX: ffffffff8128dd05 RBX: ffffc9000da41000 RCX: 0000000000080000 [ 28.907368][ C1] RDX: ffffc90002ed7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 28.907379][ C1] RBP: ffffc9000da571f8 R08: ffffc9000da57190 R09: 0000000000000001 [ 28.907390][ C1] R10: ffffc9000da572e0 R11: fffff52001b4ae5b R12: ffffc9000da572c0 [ 28.907402][ C1] R13: ffffc9000da572d8 R14: 7ff0000000000002 R15: ffffc9000da572b7 [ 28.907416][ C1] ? kvm_faultin_pfn+0x695/0x1620 [ 28.907434][ C1] ? fast_page_fault+0x1170/0x1170 [ 28.907449][ C1] ? __kvm_mmu_topup_memory_cache+0x449/0x7e0 [ 28.907475][ C1] ? get_guest_cr3+0xc0/0xc0 [ 28.907489][ C1] ? __cfi___switch_to+0x10/0x10 [ 28.907515][ C1] kvm_tdp_page_fault+0x204/0x320 [ 28.907537][ C1] kvm_mmu_do_page_fault+0x2bf/0x640 [ 28.907557][ C1] ? kvm_arch_async_page_ready+0x480/0x480 [ 28.907579][ C1] ? __sched_text_start+0x10/0x10 [ 28.907597][ C1] kvm_mmu_page_fault+0x150/0x9a0 [ 28.907618][ C1] handle_ept_violation+0x256/0x450 [ 28.907636][ C1] ? vmx_vcpu_run+0x1116/0x1f70 [ 28.907667][ C1] ? __cfi_handle_ept_violation+0x10/0x10 [ 28.907686][ C1] vmx_handle_exit+0x1376/0x1c00 [ 28.907710][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 28.907728][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 28.907749][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 28.907768][ C1] vcpu_run+0x4c14/0x7830 [ 28.907790][ C1] ? __kasan_check_write+0x18/0x20 [ 28.907819][ C1] ? signal_pending+0xc0/0xc0 [ 28.907842][ C1] ? __kasan_check_write+0x18/0x20 [ 28.907858][ C1] ? xfd_validate_state+0x68/0x140 [ 28.907881][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 28.907900][ C1] ? __kasan_check_write+0x18/0x20 [ 28.907941][ C1] ? fpregs_mark_activate+0x68/0x160 [ 28.907970][ C1] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 28.908004][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 28.908024][ C1] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 28.908048][ C1] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 28.908073][ C1] ? ioctl_has_perm+0x1bc/0x500 [ 28.908091][ C1] ? __asan_memcpy+0x5a/0x80 [ 28.908107][ C1] ? ioctl_has_perm+0x408/0x500 [ 28.908124][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 28.908141][ C1] ? __kasan_check_write+0x18/0x20 [ 28.908157][ C1] ? mutex_lock_killable+0x97/0x1d0 [ 28.908177][ C1] ? __cfi_mutex_lock_killable+0x10/0x10 [ 28.908200][ C1] kvm_vcpu_ioctl+0xa43/0x1000 [ 28.908217][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 28.908232][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 28.908247][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.908262][ C1] ? __kasan_check_write+0x18/0x20 [ 28.908278][ C1] ? recalc_sigpending+0x16c/0x1d0 [ 28.908297][ C1] ? __kasan_check_write+0x18/0x20 [ 28.908313][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 28.908334][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 28.908351][ C1] ? __fget_files+0x2bc/0x330 [ 28.908372][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.908394][ C1] ? security_file_ioctl+0x3e/0x110 [ 28.908410][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 28.908425][ C1] __se_sys_ioctl+0x126/0x1b0 [ 28.908446][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 28.908467][ C1] x64_sys_call+0x1878/0x2ee0 [ 28.908482][ C1] do_syscall_64+0x57/0xf0 [ 28.908496][ C1] ? clear_bhb_loop+0x50/0xa0 [ 28.908517][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.908536][ C1] RIP: 0033:0x7f116739e159 [ 28.908549][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.908562][ C1] RSP: 002b:00007f11682f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.908578][ C1] RAX: ffffffffffffffda RBX: 00007f1167626090 RCX: 00007f116739e159 [ 28.908590][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 28.908600][ C1] RBP: 00007f116743506b R08: 0000000000000000 R09: 0000000000000000 [ 28.908610][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.908619][ C1] R13: 00007f1167626128 R14: 00007f1167626090 R15: 00007ffce08a61a8 [ 28.908633][ C1] [ 28.908639][ C1] ---[ end trace ]--- [ 29.510357][ T392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.519191][ T392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.529122][ T31] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 29.540485][ T31] aqc111 1-1:1.105: probe with driver aqc111 failed with error -32 [ 29.552005][ T392] rust_binder: 364:392 error while translating object: ENOENT [ 29.560863][ T392] rust_binder: Failure in copy_transaction_data: ENOENT [ 29.560910][ T392] rust_binder: 364:392 transaction call to 364:0 failed ENOENT, code 0 size 96-24 [ 29.823648][ T31] usb 4-1: USB disconnect, device number 4 [ 29.829569][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 30.286568][ T347] usb 1-1: USB disconnect, device number 6 [ 30.597169][ T347] rust_binder: 364: undelivered TRANSACTION_ERROR: 29201