last executing test programs: 21.685305652s ago: executing program 1 (id=34): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f00000023c0)=0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000002700)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @random="79aff76a8787"}, 0x8, {0x2, 0x4e24, @multicast1}, 'ip6_vti0\x00'}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8) close(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000000000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002540)={0x0, &(0x7f0000002580)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x32, @arbitrary=0x4}}, @nested_load_syzos={0x136, 0x38, {0x0, 0x5, [@uexit={0x0, 0x18, 0x27}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x47, 0x80000001, 0x3, 0x1}}, @in_dx={0x69, 0x20, {0x5a78, 0x1}}, @wr_drn={0x68, 0x20, {0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x3, 0xfffffffffffffff1}}], 0x108}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000026c0)=@arm64={0x1, 0x0, 0xe, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = memfd_create(&(0x7f0000000280)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x18, 0x0, &(0x7f0000002480)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/bus/input/devices\x00', 0x0, 0x0) pipe2(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8880) write$cgroup_int(r9, &(0x7f0000002440)=0x8000000000ce82, 0x12) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) read$FUSE(r8, &(0x7f0000002780)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x8, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 20.071295708s ago: executing program 1 (id=41): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'netdevsim0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[], 0x31) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r5, &(0x7f0000000200), 0xffffffffffffff94, 0x1, 0x0, 0x55) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000240)=0xfffffff4, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000b, 0x402c032, 0xffffffffffffffff, 0x0) shutdown(r5, 0x1) ppoll(&(0x7f0000000280)=[{r5, 0x9}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x4, 0x4) setsockopt$sock_int(r1, 0x1, 0x4c, &(0x7f0000000040)=0x1633, 0x4) 19.187216718s ago: executing program 1 (id=47): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "c462c1ab9d7e8047ed11063bc637b67b5edaa69aff5b61b38d11ea2b12bb38de69e1db94403b032951e26435f818275accd5dafae269684e7f138b5dffcf8e15", 0x2f}, 0x48, 0xfffffffffffffffa) keyctl$search(0xa, r0, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x2}, r1) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="22072a4200c45b70d86c96ab34ed597a90b4439f37e0a5087e18f7195b19efbda3cca2d83ca4038f08832d7da6873811f4597eb4bafb78805dbc26d4905f06086e3016a835a345c108652582789a0605d119c2c5b3ff2e3607e814158374e8f985b5ad683a89b393410485f7e149226010e74cae8fc3e267295d4eacb6", 0x7d, 0xffffffffffffffff) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x35, 0x1}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) r2 = request_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='fscrypt:', r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r1, 0x1) add_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000500)={r0, 0xcf, 0x44}, 0x0, &(0x7f0000000540)="097ae4ef9c6ef6d4a98bb6568470e80a2a547ddb4619cf7e90b4d7eeecef7e1d4856f32d7f11a475a67e3619fe6149edf99ea2943396ee772d7048e5facf10759edc0fa0d0807e3c623dca65535b7a3ff1bb0ea098c736ca6b08718b7138b1611fc08abd27ddaa6a883775fc9cd091a8d3385564ea893dfc3d0903a21bf4e03dbf29357183155ae9edb1c23701c9cb665c7029ad83ec8e13a91a78608fd9de7af460c24d731d1129ba2c79fc51f66f39672b8645793ed3a4d8259391762e520e1c95fad76eb0ceab688952f415aea5", &(0x7f0000000640)=""/68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000002180)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002140)={&(0x7f0000000740)={0x1a00, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x340, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x328, 0xe, 0x0, 0x1, [{0xc9, 0x0, "fff32b4554ffd2520825aba3d10731c42ae98d5ca9327c0c760e2b2eb3309999c85e05098dc637dc75ab7a60a5ca8c4978dfb97a0f7fd1ad92f9bb246f3b9eeb50b988703aea087a1c575bcd71b27976c0f8416a146ae489514303cdb180a93b83c1fd5f55b743918b72d2fdb58f89ffdb0458d4e98aeecf35bcfd826c28ce325c08593c371b3552ad79268059d1d4ae9f96b8779f8dadfedf7f43a4be9bea4791a5645af631aa7d4c57aa546116f18d7ec941e78a223bae2d510354aab42fdbfecc9b32e8"}, {0x13, 0x0, "2e9b6f61fffe7d37cdf2eb495e164b"}, {0xa, 0x0, "3475a5f463b0"}, {0x97, 0x0, "b52bc35c353fe3c2ac1567d6624ad9a3e25c5264485c275c25d427f75f92d0f4234d64ae4fde36107a6584b232e9abe60131864cf0158fb4a9ca22120bb768f10daa3aa0b5b00c7d822e0f8372b6d34a6c7f24ec5b2111b961e9e4ce8d5b17c661784cd846298bdbced6d1c72e17878bc0cd014ba8cc78d80ae53a09b7ff17203fba303ef966a40b93369c3b6557131109af34"}, {0x5f, 0x0, "56444a90f82b87966b86698bddb4406b0d6a79fcc2d95c3057e4aeb7cfcd717f313f8baff4f197881c7c80aec13d053c71e224832ca22e92a6419705234ef3564a2f9e57b3d0bf9abb64ad6e2314bfb5dd479093aa2dd32f7c38e8"}, {0xf9, 0x0, "ed71351d728ed7541e69d0219c97aba3f8028045f2b9dfeb6260944daf2955916831b3aba345797de8a5c4d3b084475b65b166dc534f4b2dec22981c6a120eb2f33f96ea6e18db3a2daa9f4025dab9b8238d5f63896fd59ca181a85ba0290f7184c7e4967bb78cb6ad242f95dd08cbcbe5c6e7aeedcf991f8bcd755dd40b297e06142bd0998120ac37649e097c6cf66266668e6d86c376264b6d6d61d7922e03109cc4627341cdbe8b6954ffc8c96dbb14d053c961a5bd80528ff5a52ac804f9f37ea563053df5b38b25556131468e69c09b54f6947e43da8cea2d0158fdc1c639d038dbc6bd2da165a4f6268e222af8af1e192846"}, {0x42, 0x0, "d0d53d5570c70e197fabc8fdda4d55fd91b99c97fde7ad6410c2cb716e5798c3276b0be328500853f9b1f070063795b6c1ab3e3ca71ed34fbcd5e75172ca"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0xd8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x49}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SRF={0x50, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_SERVICE_INFO={0x49, 0xb, "d37b8cc9b6818d70fe2daa1f984ffba40cf5ab9e8295bc282668fc0854fdd50c9e32dacf37509ae0761b6b7d813cf9af1153cd19710201caae897dc17d3288154184242d32"}]}, @NL80211_ATTR_NAN_FUNC={0x218, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "111f9a332cd625541f03ad782dbbe5f93293f14e72a76fa6a6eb2e2f2eab728dc3415f5b872b457410943793445079586d5e7db7b5049d6f20d9820a014a4f3d1f3f79b09b1977fbb4af65ec5cb18d07f01654ed3997418c5ad24214d8d439fc395fcaa106ea11968cecb0df050be7d749be0fe27a753476957e95cc7dfed669d8c4452d8cec0209fa8a560579e1af4b2255937816b69beea4fd385d6e4533b8eca468968da68db0bd99f7ec6dfb3d47f833aae7fb95de559b39001a2096ed6b230c85fedd682acf6bd1e9f0021e00b896ff19f0c2387fdfff995ba0a499a93f8827925290c211b7104d6c01f7a7f4778d76b5fbd7eb1a7e7ad8b9588865e6"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7f}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xfc, 0xd, 0x0, 0x1, [{0xc4, 0x0, "68526f534a08232a4210679aedf2ac21846c0004e9c8fd8a5078da33f3424e5ee93424fded1155550be2c777cf0fdd777246316c5533657047ccaa4d0ae801ec451bae07f0caae0feaa4a90f7e92ff24537f6451d7c67f4d56633b4c277651e7483870002850678f3ef60e5bbeb9da36afbf80237271ea87e018b2cdc1c60c8652bbe4577c3437dedc7f165d96f048131139e6e738371ddc447654d3e84c747a06e768323748629b1735ad594f22bdbd17becbafb5fa8dc3390e78778d1985ef"}, {0x34, 0x0, "e4c747313911f850c66a39d70bf654ba82c257cc8bf171e78b232f460a693376a91b60477a40ab66a747305a46c88692"}]}]}, @NL80211_ATTR_NAN_FUNC={0x1020, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7f}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1008, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x390, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x350, 0xe, 0x0, 0x1, [{0x92, 0x0, "459829ac117b01c9854fcb256ad6164c8a2fcea159c6442fcd404de5f0c5f647bf86d4bb1c5bb952f93ceccb84be7539a97c3d4ffc44f9d5ee4a7061666351649ef20150fb764836d771a5e5a3e327c08d1060794373663962b23b1c5694f6785a67e078eec1bcc6c6fd41863840426a30b7632b79283b86a09bb86dd143afee17997694e5563caecc8d233a0dc5"}, {0x5, 0x0, "ba"}, {0xb9, 0x0, "bf4a88841da31aa2832cb579ccab1d72b3825ef286a15b2660b2fac4151f9d31fa7a8779fa0d59978fe39f2f8b18b50000b289f823fa381a533ae39c3346f426916d9af9799577890bc96119c554cae85fe71babc6775eceb5ceccb89349da29f9060c7922eabe030b4b83bf7326d381402bab4f8e24e59d0f2ead81f21696cc9230fa4dec9ce09c9847e01a143463bbfc8a2736523a88fb9068ad3bf8115f15d1bf4151c4f41f24e5ebc64adfc740c2a0c58fdcfc"}, {0x53, 0x0, "57ea46925f5d6e7450e3d2fb03fc76cb64913c77749a4725b2a7d0cf8358791d85ee2f0e8550921c3b6cfc7fb9515377757d347186b89571d9a34965fab3e4fa923b64345174b259c5fddfc1a6644e"}, {0x4}, {0xc5, 0x0, "50c88f2875efd7ab32a94c6342e151f89e60fb90f770bd77a4563b2a7494d4f6944873710e46b0f8f42cefd00db53b76ac19dfda876253c0ed32e64b0e3190d99e2dc3bdac5cce43d1e4343b342408785c206fa6e7136676b2e157ea55be3e4ac486a3b836659e112c358b5825121e0b19dcbcd569e08b7aa62b9b0514d658f86027a9ca65d06cfa9b2d9f71d32a95e2eb2b9ff618524690a211389f913b40deac63c9f9223528e3f018bd353845707217a48a5fdf336a60d3eb1018ae2993de26"}, {0xce, 0x0, "18252ad56b44b5e72c16789e188e0a2d3439e0a88108c13c5ea0fae13528358ea373b9760a60d129f7d73cf4ad04ecb434f608839b0cc31a97fda824a04fb7c4c8e403b353927ea93230564740e9905567c66cee70126183688938e0cb2b485a9c379fe0dcdbc52d01a53a44368b0b85da964f30dbbb5e30f0493c74740f68891dae9be93c9c0a58b914f642486641d81248107d01a6efb682fbfefd7b95069a0d2a8cd17e88e4cf45b745d1e03b471905ce9d45eb8b59d89c172e1315d628a4c327aeed1fc296827151"}, {0x4}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SRF={0x10, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}]}]}, 0x1a00}, 0x1, 0x0, 0x0, 0x24000800}, 0x4080) r5 = dup2(r3, r3) ioctl$DM_DEV_SET_GEOMETRY(r5, 0xc138fd0f, &(0x7f00000021c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x201, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, {0x268, 0x20, 0x3f, 0x20, 0x26, 0x20, 0x357}}) ioctl$KVM_CAP_VM_TYPES(r5, 0x4068aea3, &(0x7f0000002380)={0xeb, 0x0, 0x3}) r6 = open(&(0x7f0000002440)='./file0\x00', 0x10000, 0x5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002400), r6) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000002480)={{&(0x7f0000ff5000/0x9000)=nil, 0x9000}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x6c, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x58ce}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000002600)='.dead\x00', &(0x7f0000002640)=@keyring={'key_or_keyring:', r2}) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000027c0)={&(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000026c0)=""/238, 0xee}) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x10, 0x3fb, 0x100, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x20000015) openat(r5, &(0x7f0000002900)='./file0\x00', 0x300140, 0xf4) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000002940)={0x9}) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000002d00)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002cc0)={&(0x7f00000029c0)={0x300, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "460937d8aebe14961cb5d1a8ed13d46ba82213bf87c450a09b44a3959dbc67c3f9f314f827c34da05c20b4558c728ae5ac26b62b1f1f0889d97d7b603fc1f2cb4f3fe426a1b718d6bd84f00ea6e7dde061b0225b924f312a2d50b4d31d40bfb29f532174d73e8fe02010618f84326ca94100af5e3936dcac0b4ecdb6fc7d7bccae65a5ad7335d37d2ef13806e1c07a2762840b7af93979"}, @TIPC_NLA_NODE_ID={0x89, 0x3, "5746a23eadeb0114251604108e2e90112e3b3ecd03a1c1c20dccc71cf4911cb35430deb722dd6047c9f857e19138d1465971bb837406d740def82b30dd92394b1c87843fa1e17917a6c7b190daa625f4461596c13756e3d946b4424df03f930389cc866f0db11b9564f8756b94cdf1ff19b09d5723de3e9283362d4af17b698fa9134cefdf"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "efc5c9274cde3532b27d066a5dea4587be5851ac0b2076f18fbde1bf31d1"}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @local, 0x2}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x28040001}, 0x20004010) r9 = getpid() ptrace(0x11, r9) 19.126774774s ago: executing program 1 (id=48): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x201b, 0x10200004}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='8', 0x1) fchown(r4, 0xee00, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0xffffffd3) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = dup2(r6, r6) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x14e174135c0b86de) r8 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_clone3(&(0x7f00000002c0)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) connect$inet(r8, &(0x7f00000003c0)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f00000006c0)="cf", 0x1}, {&(0x7f0000000700)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000740)="8a", 0x1}, {&(0x7f0000000780)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="ce90bfdb", 0x68}, {&(0x7f0000000900)="f2e659", 0x3}, {&(0x7f0000000940)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a00)="e1", 0x1}, {&(0x7f0000000a40)="fa", 0x1}, {&(0x7f0000000a80)="d8", 0x1}, {&(0x7f0000000ac0)="f2964dd1", 0x4}, {&(0x7f0000000b00)="b8a2f6", 0x3}, {&(0x7f0000000b40)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000c00)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="87", 0x1}, {&(0x7f0000000cc0)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000d00)=0x7fffffff, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000240)={@id={0x2, 0x0, @b}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.003756157s ago: executing program 1 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004840), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000048c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.711328897s ago: executing program 1 (id=52): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) memfd_create(&(0x7f0000000100)='E\x02\x00\x00\x00\x11n.D-\x00'/22, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101482, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000040)={r0, 0x0, 0x1, 0x4, 0x1000, 0xe}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000280)) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f00000000c0)={0x6, 0x8000000002, 0x1, 0x7}) socket(0x1a, 0x800, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) recvmsg$unix(r0, &(0x7f00000018c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/29, 0x1d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/126, 0x7e}], 0x8, &(0x7f0000001800)}, 0x40) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020) write$P9_RGETLOCK(r4, &(0x7f0000003940)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000240)) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10) listen(r2, 0x89) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2900000006000000000000000000000000000001000000000200"/41], 0x29) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) 18.709320627s ago: executing program 32 (id=52): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) memfd_create(&(0x7f0000000100)='E\x02\x00\x00\x00\x11n.D-\x00'/22, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101482, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000040)={r0, 0x0, 0x1, 0x4, 0x1000, 0xe}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000280)) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f00000000c0)={0x6, 0x8000000002, 0x1, 0x7}) socket(0x1a, 0x800, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) recvmsg$unix(r0, &(0x7f00000018c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/29, 0x1d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/126, 0x7e}], 0x8, &(0x7f0000001800)}, 0x40) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020) write$P9_RGETLOCK(r4, &(0x7f0000003940)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000240)) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10) listen(r2, 0x89) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2900000006000000000000000000000000000001000000000200"/41], 0x29) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) 11.609812423s ago: executing program 3 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000600)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x4000000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4041005}, 0x4000) openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) setns(0xc9, 0x0) r2 = gettid() tkill(r2, 0x4) rt_sigqueueinfo(r2, 0x20, &(0x7f0000000100)={0x2d, 0xb68, 0xf}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r3, &(0x7f0000000080)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 11.318000833s ago: executing program 3 (id=102): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xc0000102, 0x1000}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xc0000103, 0x1}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xc0000102, 0x2000}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xc0000103, 0x2}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x2, 0xc0000102}}, @nested_vmlaunch={0x12f, 0x18}], 0x151}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b4"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000003c0)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000480)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f00000004c0)='./file2\x00', 0x101) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) r9 = openat$kvm(0x0, &(0x7f00000005c0), 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) write(r10, &(0x7f00000016c0)="600000001000e3ff0100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280022802400010020a1070000000000000000000000000000e8a011abc0c53d00"/99, 0x63) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$x86(r12, &(0x7f0000000600)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000000640)=@svm={0x5, 0x1, 0x1080, {0x10000, 0x6}, {"793142fa49e4285c3cded736d128e860c14f3a91bb990fde155823c31dd34a33b7fedac4a0364850ccd5cfe0fb23d0a5226c0fc32e732dccb8dfa3dfe57b2cfee54d2f8c147ba3af381940f95cfd71a43c6372a341062e9471516b6bb500a3489b63155d3841a3ffa13c48c0c5117ce207fc31102baa1d0e27ae3ba47b755b84b49c805167255fc0c81e40961a65d429011906c2cfd1d719f231d6f3c952e8fb7b3061af9b5b080d0e3a253fdbfa9967b32366a420fa447c746b3fa7f77d4a39870b30c606a5bb81739eb94baae9e96c4d41fabe31a6a7ff99896666aadd43f0a375e92eebed38b22c382d688c36d3c086b3637508f4ad668801e825706eb429dc9a56bfe422bd835d05cc88bc74a83ff0ad03e4681eafa0b99ab05b54cf32bdf6df4a8470e38b652e6bebf2dcb844ef086ee6afff2805a50193d68409f9f5b538692453df5e263cc0c4dbb123a365457ff9e6d7b14029cf4513b76224817fe2718d411d6c3114eb46175feb57cc843b663cbca095487f725010844270a20b4d7c86382b07d9ae8b1f70877caa358e30831f9f800b89f87dc7fa340f78b22565fc7a46641ea73e668a06b7f301ed6c9f06088a0a100af5a957be3ee3796cb9e2c50172bbc7e3eaca0a39df055c79723d156ad562f484e7b21a14c3b7f2b40910f0efa552c8dfe5db24f7358938bb8d60b780b1fe926959ec2f96532dd5a2f67b50965ff9abde1a92f87626c771e80df4393f5e04145f7881e4a1a442a786fb9351fdbf4bb2abacb2190b0fe55b4e509d412908655306b919696953906085012407fecc790113804a838af7d657b3579ee16839a10bc54e9d3f6d94bc902f63df76c1f32fbbd99d66ae1c49898a0de24131ab1efcb77c0f294369db7cbea2ff3b3941005cd6dd994c481ff07f6640482dba8c49669e35a6676ac3506df7d733747db3acb4fcae38309707f4910de95661c96f1e886a4c3cb0b7f5716cf3a43507031c65c24cb40a97e5a07f03f5f54fc0dff6119d65e5f1127945de5a7bb7fe26d995bc3c885445b0d05babdd1cc6dd0a29f7b17423a0f8d80cfaeaffdb21b60990192f4d5a9a77672754d62f276f09aa9fb73a80f4ef5b8ffd371d1d44bc2294ff6a0665a9d0e1eb1f9ded4e2c90f249d44bbcf0f15aaa453b8071b9c39f3ef3122a57f4538bb9e65197d1e0c6344588d86b74d46dae7a084b6caf68440cdc343938281ec3c848aca30cf65131386f538d79a65b4d6b7957005f789e58bdcbd8207c308fe042e13e952f5cb834039107aa20f10085db829bdf1ea3fa785bf68096dfdf29c4c572672b467473105d1cb26e638a5df4267e7e444e6919128dccc8ef0a8d8bb97e3782c716e1c93877df9c43bfbdfb0bcb265aa769e3efa60042cb46172118761470108201c1888f0ae881467916c7c680d10cab056b2390412cda85705bcf1c620682dec4edebec48c0bd111b2340584f43ce2565384f9be051cfab11730263deba65c8dc3d7997b7f937ffd5ccfae99182fc00e255df0335a1e338799e84cfd735ce3d7109aa7450fff673c429e95eac78e97da5c4a782bdaf961e38651fb28840727f7133215052011673973d3d7d3c492d4e474e9ed72ccbc1504cc55806f91d93621045d4eca85a0c0229e28395995c4ba7e8bfbd3d36289906769af21305260625d6f5fbaed0fad7e9d080eaee1363b1d4c00205a3733d927461934537928c2c9b8ed7f326f4cefd740d064407c9a87beca393a06b38b319de441b94d8a4176f7a98e94930ee2dfd57907dc04e1d7cdbd3d26eb95fc37e6534f22d1275ffb16813a096780de7a3f54aa4f8c61c5812be785031e090224fc3da77dd70f462e6286ea5692e44eaa130c5bdaed8e755f034aba637b93195ded3cdbb11554e2f425258abc072a5e140cadae9eec124c7af42c92871e5cc2b59900fa3128384d5139f3e53d4ec168c674f4e59b9590f0d173eaa9c8f78dd73e700807afde70d5f2769cb3b967a2fca75a00d0d3cb6b2b13f5913d4c908732b9c6d375a1d350f4f80aee279c986f183be01047b4a08a18d0e7172d53e39078b04331011ee44b337c006becb11333d13c6ca0b1abde0b0b0e98d8c132c30b1f2cdef79a59ce687e9083dab485bc7a3fc405d39cf44a0705b40f78e1e9261a5266fc4dd36b94286c084a82148467e177b76edc9bf502238f47df5b77db9a905d9b09200d72fb24554dbdad55a1969586fbe93829872e83b1abd8d9251940f2e87b5e748e7d625ed586573356d2fc6c31917244de383d8d5203bee58c3cf51b3d1bcc63a36b90b242b4a8e07b7145e2e8ce96bab33e36ad2c8a3390576a270cd685b1360c15b1d37ca73e01ae8152630d7abe6d64d74e6798f5c284c201a99b0d0adad1aab910b8ee8807dcb1d7f3e5872210f3160447ce18738fd54a6204b44a119dc39699afd90e2008de3a6f68f8c08a178cb4e4e6c80fd640e4d0c69e86009d41716d173c4dace444b9dd1e719d90bfed0185b293280e334af256b0699fdcc9647d3d4c258a6966265cd831940319ffe58945d21a856e9715968244deaf2550eeb4f5c0587b4c42018838f70e09dd3d624a0071c377cedd0c77d68fa85a20b889dd89e2c4b8d538a38257b9bc4fe5c840d78c6a8244369343945a3268e8a427f4b177af6f9d786884f8eee3bdc3857c7076a33fdd66436e9c3de3897a4817d50c3e289a3d7cdb9f012de6fa4e75b6e9921d00f9a437228fe1e8651a147bb0eab79a2e8a2c316bbe2b4d40d92bf7bf09b8897096db6d33e2b49a53c034b69b20230b343e3c851f4267651289336d8abf06835f2c2aa0ba820ab29721fd402730922f2c8355bcba8672f49e38798b2d6aae124538725751a27582066d95a447578352a3690388101921629eff2f71dbccd9bc21edc64e6b407d43b0cbc21cc36d30e6a82a1d4df16ef2f247a588bfdb9201a060c3db6389e51ac2bb0bf21d26bc250ca3deea320842a7b10d92f9e82e368c26c1c3f9ca6cd4a1856b8dd40ea6d20614331082ee4c71155818c223e0a012f480b689c2eed547c40cc489740b6e8eac7de99e6422a3f10be1df8a2f0133f11d35c5572def28a478364727fd36e1156e108a735879cd89b338bb6186460d233f85c25c078e351aa3a77a35e469137b6d5bf511591e11ecc3200b99b31d7521dae6396aeb690f42e2cedf399609f33be51299110fa747f883b943f984facae5adf6f67afaeeb28d0b350647d38696084c58db65f160ef697f3759fa532cd6684aa966eb272bfbafee6bd493b3699369807045d1c6d46e642eb7b329b48296dae9e5cb9ee22d144253d3c8e63b895d2d137eb79d118847ce9ef7e13ca982dd13bdbacf36f6e87553450e616732d6a182b3c962f75e5320833189b70f90fe0e9c6b5bf64da5f1856217a7ace76159318ec7ea510ef51f30e6d00cf3d2935148c0d8acefad16330fa078e27177d44fb9cdde97188a0ff327dc26dffff377d2ff31ecea7b1cb78f0d011e1d7b244a3a6e01e4b73531f97ff6ca13929b37f969d593f2109bc2779c7cae1ab6a985e1caf2816ff37066e7b6f81070c9b92dbf4cf38548f60c3d48223729e0f8d3587545e5827fcc8122ac56acedca4c0e224f82904e81ccffa6c325539403d3078ea0ee4d09638ee79370467e630500e518013e1899fcefac708281566926b5d9a079ebc3390a0679215baca38746f20c427168f3fb4f68a739f4732acd40a56576e0e0da60766123d2cf16f196c5d3fd80e90e938b3ee5b72935b993add6f245891c545b3f731376139b976088646f4d25a74ceb333f28be2c628ef45bb98b18e5efca1d7ddd7c7bc9ef1e75a75176857b5ff28645e4a06b02447cd7d951925dc4022eb50556100b0e0af400225936dfaf14fa4d62929b30f810cec7bac6e82c0f4357f87201dbaf0fe52b9d889ffa40c88715cc0fb7254a9e56105b7046b7f1a654905261a5d36954b705bbea629c5a59ae82791518422888a0d17140854481f29b530e0daa76de48b4e51226c40f7cbaac261017eface9c2fc8f995131e44a8b21f46a0dbc85f0ac27ca79ea226abf6eab44c16130007164000e29becc4d39efc9076130541ace989ad3dca9f4aa9fb8a3b7592509dd5c4afecab6eff29a67b0ea7c7823fb84b78e0da41db2558a1c0a1ba33f45254ea26830bfe9b45c2d4588bef479fea1e6c5cfa4aa5d93439ab7b278ccdddb289cb362b25461bab5c2edb84201853a1f4797b955750019630891fec200bb10514c6da0ff805617da062e40f84689154ce39a260741b597c7bababf608c28c12ef188c532f4dc066b0162251840e39aa6dfbf5a918dec825036ab697953c23f4c20e020e3c416ca07edc0a4941c845dcc4d741208a7ab84e3207c7b6c60e6f01e364955e531932cdd6d955e859eb7801b5013d179f4900a1aeb01f9c81589b303b8c348ce5ee45ad2f5b334a480c7312db1232dcaacfbf3fada7f79726945f2fd43b191cdfe77d07cfc394096e0b0bca3e170cc917d2dbbf0e7b268ef0316650397f53a0f641d34783f3a95e5deec395b9e600e14e44720a6687fc6e1a2ffb9575910ba42df779e38b911a8a3432d543c4c7f7279b3eb379eb343d6c6d58cb41fd670dd72f912d70ba891ae532d303e23d76009485008ca77173bc59de389b84e0b100cb50bad6f22d0a0aa897dfa064d9acb67d3b89c3d8ce07cc2179e86c83b11d1f3c779573e14ae0aad883e69185f573efb14e3e67000e78cd59ee17f16f8fd3594e0c062626d0f2fbfd354e2f8dbcd463e8172ba23172e362c7441ae6ea565fe79e1d574e6b21c91668a1a772f966d1d7a5e8a3956f72d5f61b71da5df835639d40f3bfd81387cdd0adc7066f079db9c7676e0153befe9b6d576b70890699db46d4c2ace5f903b62d46d5900c2faf4441d04894e3faf379dd5dab7401c49dd02701c3e93037dd04848de52e343c425f1bb9e1f796c48d861b55ffc78272188976e3d30a3edd206643e533f097838d7548e7180bb686127b2ad518262657cd64fa0b9321464e7ccafeaba17e23b9f03dac4a7029ef0f9ea931967674912a2f10d8dbc456351f07aa8ced39cd8a61fd2db3768c782ba46a6acccbe434eba64ccf82e7b7afbb0762f38852c17f6cc0a93234ce696682a2d27be804c0c2601fa648279235d89253489435e6d57ec453e54b08ff7ce57c52d6d761aba5c59c340868df14e65544134c7c1e37e3b7b621cf768427baac0d0a1b4f8397bc3707536b32171a80a0cf2a985483c742e3713f07d6f2e61ec24e94aa2253ae9e70c148bbe4d126bf8d41125526c426691e87dcd6cfadd2d08229dedfd49baa22445d09785b7cfaa05fff6688219089610b92c18925528db6aec94c5847f533179940d103e1153e28ec533a7abbd988c3dcbce03ecd45484f052bacd6783819da9c13994bfce1d942e90c7aa1b83366c84bb856f12638731a78d020544416fa45050e87c90a04e307bae9e62e854ffe9fe717291c4c6408e843572d7a1f4c668b5c034c71a9fd84883f59b0acdc2380e361263acc5cc6621bf8b1615b15b6aecf4101767105887f94f0c7c73381b0e492364b91a7f71a2d524d55528c1ad50c4fd52646f528c5912de1d3ddfc164db9e6ebc5c327ce1a2f4623d2410efa1bc8e129cec89eef75103e6d2e6f5dc08bf556116a27199389b9ca54fdb4e74c413600c717bc407410a091a896b1abaf8263b0914bfac240c3eafcf41efe01f579fbfaea112b9cd0f9143a9ca8cc03858dcac424c8f015"}}) ioctl$KVM_GET_NESTED_STATE(r13, 0xc080aebe, &(0x7f00000026c0)=@svm={0x2, 0x1, 0x1080, {0xffff1000}, {"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"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r14 = syz_open_dev$ublk_bdev(&(0x7f0000000500), 0x0, 0x400402) pread64$ublk_bdev(r14, &(0x7f0000000540)=""/106, 0x6a, 0x400000) 11.002581485s ago: executing program 3 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) nanosleep(0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.851381221s ago: executing program 3 (id=104): mkdir(&(0x7f0000000080)='./dev\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2000800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x1c5e42, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000", @ANYRES32, @ANYBLOB="000000dec4"], 0x18, 0x4040010}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448f0, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0xf02, 0xf0, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40) r4 = socket$unix(0x1, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0x440) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x800}, @void, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_request={0x11, 0x0, 0x0, 0x5}}}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 10.752263361s ago: executing program 3 (id=105): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff4001221800090581"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000dc0)=0x201, 0xa) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x32877000) unshare(0x24040400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x20004006) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x7709, &(0x7f0000000e00)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xbc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?\xd8\xe2\xb2\xb1n\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg@\x90\x14>2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x00\xe8\xb3r\f\xed-V\x89\f\xa9\xb8\x911\x8b\xb6Yp\xfe#S') syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, &(0x7f0000000600)={0x20, 0x6, 0xbe, {0xbe, 0x21, "8b483cbd2f8af0f9f278da4c6c48349a418bec7ed1dcbed6d8a55bdce22e19d0f272a4f252bc03dab577c729551a76b3ae0940bd68e476d1fe9d1e8b562876bb6f60236265badc359fa3c91ac1007cd90fa97bb1bc4f49e918022b92bd7c69f56386d3187f79e0c6389a357762475903c32dc00be1ca4289341b3354b142c080759167148c82b60f5b76cbdfe5491577226394db64a4c2abb2b7b48d1a44b9d52dff6e9194ddf30452a6e75f9ed9ea4851a77a210bf00c2b1aa446c2"}}, &(0x7f0000000700)={0x0, 0x3, 0x95, @string={0x95, 0x3, "97b49ebb9de73eb8f7015225af1d916c9f7d90d762c3e29318680ba83b15de40e8658717954859483b6e1d06898b438ff9f60b10bded40b81ea9b9ef8fa684d0fef7ccdd84ebe79025ce14b4c777a6fea63c33c61fb90255a1113dd9bf5ea0940da21de245cee4a8e513988b6e6c89e7b04ae5626852599c825fb64ca959f2b23ff18c05047b53bd654d14f60d087e1f2d6e39"}}, &(0x7f00000007c0)={0x0, 0x22, 0x24, {[@local=@item_012={0x2, 0x2, 0x6, "4387"}, @global=@item_4={0x3, 0x1, 0x0, "66a9b476"}, @global=@item_4={0x3, 0x1, 0x9, "5709bb1e"}, @local=@item_012={0x2, 0x2, 0x7, "b8e7"}, @local=@item_012={0x2, 0x2, 0x3, "031f"}, @main=@item_4={0x3, 0x0, 0xa, "066a123b"}, @local=@item_4={0x3, 0x2, 0x8, "2c2da29d"}, @local=@item_4={0x3, 0x2, 0x3, "08e1f57b"}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_012={0x0, 0x1, 0x9}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xf2c}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)={0x20, 0x6, 0x82, "8f6255357723b96f4f2ce1e140fc25f56840a03f046f7cc946dafa31be273ca2771a89657e06e96781185bd4c18fcab62dbe74f54fe774729745a404593145d66d14b8ac7491f1dcf72dc84f130ac5bbdb80cf874a26dc252b46b5a933fb89100b63e6839ba9c8d0c8c430d31edf93c75bea9dc447d10e9c974b7c6a9188228e85fa"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1}, &(0x7f00000009c0)={0x20, 0x1, 0xd9, "0b9c06327fb9b277df46ac68f00bb7c45ec4385ca670755cbbd00f105f2e08cfb097e980ca38bf7add2ddc1d467a3081821bcf8a118ebd5c5fb12f298922912870b126a2c797ce73b8766b294e7eb6123a0748b8a988880af86589eb32e0bd36aae3d398298b540b9014371f7b62d82f3f68d1cd863a6062b5dd04bb23f5faf8f121f732287b755f56aecbbbcb884ecd708a4c914b2f8a20100902b865bbebd35715d6264dbdbee169d43d0af252fb6a33be95d7b9317b8cdaa3ede01937712d3cf42c4df5cdda2d4b153452db579abfb1e6908c758bdeface"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00f7180000000505000000ff0906a1014fd221c275082af8111f8102c0c0452087d848dda35e"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000001380)={0x60, 0x23, 0x56, {0x56, 0x4, "0635057c1fcec96e651e2128682418bb275d9171e4da2160dcb6cbea74cb5b980e843ebfdb9694fb6121a5ee88654503f83a07cd517d2a4fb0b0fa1870c4bcb17ddb152fb822219ceacd659b4b000000009cc600"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "b4794431b328734da35de280294db925e8f1092e061b3ab6b7e29b9001fc44ca7fd78b5ee6f4f963f31fd0c9dd3bfd5f2dd830d17c3b4679da0f1bc1dc12ad6178a7f475cdf76c04c4fff1a159940daa4f09b6a01ef832c8bc1aac40d8ff2174fc86913052edfff0f26d61052d12af9d804fa087b084ec17abe7038c34ad251a9f7a32577644990173beeda72479c52d511452210a7aba75e1fa18b217a3735b01be0383c5"}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@main=@item_012={0x1, 0x0, 0xa, ']'}, @main=@item_4={0x3, 0x0, 0xa, "d86dfe23"}, @main=@item_4={0x3, 0x0, 0xc, "b4b5caff"}, @global=@item_4={0x3, 0x1, 0x7, "fd96d038"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6c, 0x1, {0x22, 0xa36}}}}, &(0x7f00000005c0)={0xfffffea7, &(0x7f0000000340)={0x20, 0x14, 0xd1, "d04835595d9b1ac9421aee45a4c435d159ae67250ede0dc848c345d7366815bd346b6cbb2d2b0197f79f0a4e9c36f9816031225d84a44c6d61bf2a015acb5df8c804a84e5ecd012faf1080b8c8fc1877cebed4d4baf3a0c41740384a57fa94dd2a2b3ab39d7dced974b88ff451ead7510954e5b87e2d1af3f709f02e115caf99638d53156bfacc17306473f226d20c6e3dae8c3d7016bdd8406f169556c1cce8ee22533e7cfe90e74c479c96dcec66aff66bb7df0863bd0d16f4726148875f6c57422cdf86bf6c213e3d87381daa57f517"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x1, 0xb5, "bc1802f5c1621b43a2b725bdab7b13119cb394c056ae0bbff25eda769c1f04b6a451eabbd7c28f47afa6ec40ff97886dbaf89212e9e8c76ba8bb553cb8e57fac62fa95dc19fa31aabf7245f363e299f63362ae388a70460baf60d3bf5bad867d5ad413c506ae1921cdab33b74be71ebdd20e5f7791e4a44f7aefad608d701506f072c439729ab2d947aa34f4b28e898dbc5178cf97951da61b9299a181fe7ff1f38cc00cc7530f2e1737c288c8ba7042a393c68072"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1}}) 10.604506126s ago: executing program 3 (id=106): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file7/file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22, 0x8, @mcast1, 0xba12}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0300080001000000000014000000451800161400e000fe0190780a010100ac1414aa04009078000000004606fffe006804f00c2f00dde0000002ac1414bb890fedac14ac1414bbe00000027f000001861a00000003020205020110f04ef89f9be42907c7b5a12347ce0703968606ffffffff000000"], 0x82) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r4, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x88040, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x3a01, 0x17e) fcntl$setlease(r5, 0x400, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000be0e0040ef0ec4720000000000010901090400080800000300092100000001221800090581030004000000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x2, 0x1, 0x0, "309c"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0xb, "a6"}, @local=@item_012={0x1, 0x2, 0x7, "04"}, @main=@item_012={0x2, 0x0, 0xa, "df03"}, @local=@item_4={0x3, 0x2, 0x9, "e5baec3f"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @main=@item_012={0x1, 0x0, 0xc, "c8"}]}}, 0x0}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x1002831, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file7/file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x3) 10.540954112s ago: executing program 33 (id=106): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file7/file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22, 0x8, @mcast1, 0xba12}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0300080001000000000014000000451800161400e000fe0190780a010100ac1414aa04009078000000004606fffe006804f00c2f00dde0000002ac1414bb890fedac14ac1414bbe00000027f000001861a00000003020205020110f04ef89f9be42907c7b5a12347ce0703968606ffffffff000000"], 0x82) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r4, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x88040, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x3a01, 0x17e) fcntl$setlease(r5, 0x400, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000be0e0040ef0ec4720000000000010901090400080800000300092100000001221800090581030004000000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x2, 0x1, 0x0, "309c"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0xb, "a6"}, @local=@item_012={0x1, 0x2, 0x7, "04"}, @main=@item_012={0x2, 0x0, 0xa, "df03"}, @local=@item_4={0x3, 0x2, 0x9, "e5baec3f"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @main=@item_012={0x1, 0x0, 0xc, "c8"}]}}, 0x0}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x1002831, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file7/file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x3) 3.449263428s ago: executing program 4 (id=149): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x9, 0xc, 0x6, 0x2, 0x7}) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 3.375241825s ago: executing program 4 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000280), 0x2000011a) write(r3, &(0x7f00000002c0)="b4", 0x1) recvmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000001500)=[@text64={0x40, &(0x7f0000001540)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa80001, &(0x7f00000015c0)={[{@xino_off}, {@nfs_export_off}, {@index_off}, {@redirect_dir_on}, {@volatile}, {@xino_off}, {@xino_off}, {@metacopy_off}, {@index_on}, {@xino_off}, {@userxattr}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@uuid_null}], [{@measure}, {@measure}, {@uid_eq={'uid', 0x3d, r5}}, {@obj_user={'obj_user', 0x3d, '+%)'}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r5}}]}) 3.175251336s ago: executing program 4 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)) setresuid(0xee01, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) shutdown(r3, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000400), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) io_pgetevents(r8, 0x2, 0x0, 0x0, 0x0, 0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0, 0x0) r9 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r9, 0x2, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) setreuid(0x0, 0xee01) 2.64726907s ago: executing program 2 (id=159): openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x20) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) faccessat2(r0, &(0x7f0000000080)='\x00', 0x2, 0x1000) capset(&(0x7f0000004b80)={0x20080522}, &(0x7f0000004bc0)={0x0, 0x0, 0xfffffffc}) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x6, 0x741) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x6, 0x741) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000100)={0x5, "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"}) fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) (async) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) fsmount(r3, 0x0, 0x6) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) 2.64672892s ago: executing program 2 (id=160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x22052, r0, 0x0) (async) fsopen(&(0x7f0000000040)='ext3\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) lsm_list_modules(0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xffffffed]}, 0x0, 0x8) (async) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x7, &(0x7f0000000440)={0x200c, 0x3, 0x4}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8954, &(0x7f0000000700)={{0x2, 0x10, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x4e24, @broadcast}, 'lo\x00'}) r7 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0xfffffffffffffffc]}, 0x8) read(r7, &(0x7f0000000580)=""/377, 0x179) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) sched_getparam(r4, &(0x7f0000000500)) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.230592312s ago: executing program 4 (id=161): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x91, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000640)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000700)={0x0}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x1, 0x27e, 0x0, 0x0, 0x1000, 0x80, r6, 0x0, 0x40}}}, &(0x7f0000000540)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$x86(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc04, 0x3}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r15, 0xae80, 0x0) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1000000, 0x10000002}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x0, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x0, 0x35c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x3, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2c, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e2e, @private=0x8010102}}}, 0x108) 1.719301865s ago: executing program 2 (id=166): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61783d30303094f477727bee5ecc5627fe0268177e933a3030302e30312c74746174733d676c6f62616c2c00", @ANYRES16, @ANYRES64=r0, @ANYRESDEC=0x0]) 1.718967395s ago: executing program 2 (id=167): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000000)={0x10000a, 0xe4, 0x40000}, 0x20) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x2000, 0x0, 0x118}, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f00000004c0)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 1.639871703s ago: executing program 5 (id=169): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000000c0)={&(0x7f0000000100)={0x1, 0x81, 0x800, {}, {}, {}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x6, 0x0, 0x0, "d53314139ed306a4204e76f298a849e62ffc4e23090cff0cc9fe148daf6554806e355e7c7c2ea0649df097211543996d44aaf8309ceb82a4c5c6c100ebc85515"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3, 0x944, 0xffffffff, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x2f, 0x3, 0x0, 0x0, "f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x48051) r2 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xa2f, 0x1}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xc0000102, 0x2000}}, @nested_vmlaunch={0x12f, 0x18}], 0xa8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.499275117s ago: executing program 5 (id=170): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1], 0x8) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x20) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x149442, 0x40) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x2000, 0x0, 0x118, 0x0, r1}, &(0x7f0000000080), &(0x7f00000004c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) 1.340238323s ago: executing program 4 (id=171): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x208, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffff8, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6cf73991}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdea7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xee70}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000015c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f00000003c0)={0x11b8, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "809c35e3042f8ab18a12e6a015d53a1cb0bf6ffa6754aa35c61def56e4cc08e92a11ad7cbc3121e608a7d2d58accc5f19296d8a96dbb19d20e331db580147a259eda146afa4b81c4524f10060df3cf2dfdd529b5a91cf95d3fac4abbd5d2f286d41ad703a0fd4c3b9b11161b123a9bf4e6ce97fe59d95316a917c7523a8cf7923015a63c21f2634bcf97f48b04416da8a036ae4b86ecec1cb5e771982b72126fcd444f9ce7471cdb752d1399dbe45a1a5683e7bf42a62e5832af24ad20353a69edc2bb9fbd6b91ae93b3d07cb1a080b7589fb1d3c07afb43a0617c11fb903e491ace5a391e2f273171b1c157c6467e41a2a2a4115bedf53e407bd60194bacbf330d8ef82d3a40ba217c517074e7183c6249861d3e6d4a8a1333d2774b5b419ff94076a2e7f94f66710e969c598ecaf53e86357a55bc69b6bd76d3b5c2fd71f97d9000e8840c98376482d6fdd776973df4a1f182d8f924d8d3dfa57a266c079a6369005f2ed247f6b2d9871dcb894a4fb391285b1466dec2113e4c6657acfdce9594d3ecb5c77bac867da643e55d9d076af8fbedc3b7f42c9751aa6a29787fffc87da50fd058f72ff19c4ca41938f2f9fc8cd30b22bacfbf5e5c9005d2bec60326f932405a6aadffd2b402d53c9573f3181fe510b03fd675eda4e6169be98af412f874dd70c168756e9caa948542775696591f4d9872729f932f2466a94aa71d146d4124cc095731b749fc5d36f1b2ae6c83534c143999e9683dffac768b56adc7c010470d384dbc11402e9ab44c26c24259222bcaaea155e58008325f4d927b09bd744e2039406f184de525394d951de3c9a4ef80419e71d239dc2e45a4b8ff47b7f021d5d1943d79f249a6c77a0dc2a65a58a6d47985945891cef56a9c07ece0ce78f41e26853f4c9e6ba503240c06e7f32f6ab867549c9fc848fe553d0ff6f51c3fab927bd4494188621b49667b4fcd1b090fa19feecb1ab637fa014851604b99fd1d1af77e89707fce51398c7e0470107917edffac18815f39267e0c0e96f46273b73fe674836f6ceda66aa2b415077ded3d3c3f8333d3d5a62d5bb679743adb42edc20a4029e27468b214eeec5c7552e9454f3efeea6cb984de509a98418a983d4f12dd5483249545cac67e96dc37c2dd4c4eacec77c239114e53c830b87f280cb41ecd11b87101a584a6b721ac9523fe9a0d0f9d2476c5adfe60d5fcd81b72c1c219d0fbbffe33ba51056de12b48ddd52e9f106ba7715c6994f21919f7131d0d40a013eff6a2ef3e2874358136632648dea077dd32a620442ea2851d79a6f8eba377509ec92f76c62074ec6b0498e6af1894b744a818f6f2887750f0deb8cd7a37e1e986a1a4a1d403734b88050163f50173e9b99fb7cce6160e274b03a943fd2edf599c228627a31e841b03799ff050376f34030bd509d7171eda927c82ac8dbd86336f84d01089cf565eb065f11dd665a891c9ae86828a4b60dae21355b7a333bffd2ec19e6f9ec163d48db0517fb8ed7ef94332281aabd1a44172a9d4bc905e1db7224b046cdda680cb1ed7018e759536915cb4e795684ecf5dc44619e648caa35431546e7312d4f02384695b6ebee60bb3ca53edfde030dc6c1ba8eb5914d256dcdc7cf79ff72dd128db5c503548c7ff4169c576bb218d6616a09af3e7746917e0e6f5708b457d6c379301434bd86be505d270f2fb951bd52ddbb2cc991874fa28f4ceaa62adc9f27523973911744eb1677ddf3373973e9f8b2878c37a680337f919062e1371f93a0a3e3306c8beb58633f62bfadf25f84b9401f885cf9be2b3437d54844715207d8a2a5f979bac2f4d74fe7a3b181a8b07b7befc0ffe2af16d271b3a2e44d3b3c7eeef6223cecf81335c05b020c7960ccd726b8222c526e8d3e37ca2af15b1167458667a27b1f9cc9da0eb0620ba9a295cfa4f59a2547c37af86bb3f2940478d2dbbba4998f33b97f9923eae1df341736f88651ef188add1b35036eef933c8b6bf6348536bc8a5538f43549eb608ee4ae611e14a845cf967851109dac72c4fd84497b345bee2818178b5155dbb2e89b653690fbe74151df23cd0b5d0a4bd5caa79b659148091b7b78555d0662b03f7afd31c7c36b436521452916e20ce71ac1b6420c18baf0c59188b152bcf267232147e4773d53be27c261624fd1592b10f9ad4b6a8aadf24e8309a07eb964b76cf8c817e58d32d01d38e08c416a31c0f1b9dc68fbcb06ff50f9edb16b6c2f7045ad1eb12e288b620edaeeadf8e9bd7c3e62a17c0ec0b82730c961cd6ff51bc763ccfe106d4e926a56f7ffffd25cb16aa79f0780d60406788ca14d9692531c1a38bb8681fcf0ff14c36eb852863dd1dacb4a547fd48b68eaa762ccaf6926f09a5056cf8221d1d000c16b31aa18e590b83af7f1604e8e2d909f22ff8d1c5e1703f6b1f3608dddd3c07ad34d5ba0973d0de0379d9d7c26b2d22fb19a5f734a3ce94ee2906955f447d95741e8451c2c8061231d8c8be78cc7c0cfe5165cc66e4dbffff022214bbb57323756109620aac4a7befae4c1148c721145e512be8a5f01137ccd4c8b0796533f799d2699ec685f8e940c201a51581e4914084f586a35a26b34dbb18ff08803ac8084787e42ce4e6690d94ec1955e94164e663d2d0fb797b0dcc31ce29b961db2e65bfd99a2b7398c1a6aa5a1b667c84d2d4ace4fe7760d3313571a836f9603e827a273be4a34386956753974771f2cec0cd6a479ad884a4a3b98217b38f6b8ba5934a1047a93184cabb89c56eac34cef9d8b453f5a7af0395bcfc79555e8b47454191b6b410ef31c7cc88cae05276c067afa6c714581767125173024ee6c3f3db04ae69ece63dd7874b9d9c4ee8cb0d12f8f351e8f088c0e45d17eaa9f8fd29657483626fa73e012bd833a9e56a7a97f4a4fe161ecfc5dad42243075bdfccdc3f068b31d1b95aad6de2468b11c4fa06fbaf2f2839f4f199f08913de7debd9b846a5a32653b771cbc2ceb1dbea8aa79c93e0835cb3a35357288d7bdc5ffe91dbbd8afc98dff69e2a7a9890f866d49896b35f0fb7c52066fa685e2828a2ee837e6860dd710ba1837feedf0c0164f769654e11454df2b7aa57e177427689c03813ac7fa839c626b0588addd14303bf11ee984bb0210fa955b7b19aac80aa47d2da3e79c8a179c0ce598d963509d9a5b614015a1b0adbf5d292cd7024a899e043b3075334cf3ae165c42bc7a9604af5656e69f7cfa50c5bffd2ecf443cfa96bf8d723c60394e031fc1c7053732cd39cc1f72b956d652851176d6c3b0e4c77b2967245298aa82f9290a3de4e0c1ad9c6fcefc758bc82768587ef9b96e8dbea56428f7b0a3380fb01fb03dbc951c2474a57d6b6a80b7f8d388361cad4f0c6979ffddb11f4e9e5676ffdcf46c6c99d25171fa62a1ea6d53ec007d5f75f514161dc08903095c89e8e4b29503b2a5fdd4e24d314cefd56641455c836bda9f7fb19f532316d8599396ad79e135576535bdc73119cfa105289354f91be14bcabfb0c758a304448155a4c8342275e6be4b7f716dca5aedb6ec728da940f9f0f4e6c0349e4388e28960fbe2f7c77fa11177c2a8cbf1470719acf97cf86197daddf5cffb6811b01b418174e3dd0ba9e66c9a26bee2ae2afd82a094c8f4591d97cccc87b6ed41738cd4c21761782df29f4f5feaeee830e21ebf0aef04709b30541504b019dbac7e465c2a978a45d0f2b293337b4b55355787e6c1c7183d2ef60f3b3fbcb4463cd4b4a0a7b16bb39af39fe7ed6210237f270001af8b53d3ac1f189de256cf1f34ebcb550889e897d75b83dea63165be3044f5fbdf2837fe529e95f08cdb917ed29ca6213ba1b86119b056f75d285c181c611e0d25cecbe3ec690d152b35a6e4edf17f6b9228fd36a1c46a5a502dfa50c4d9f440fea7ab37daa75768487a67a9545068c5c6a68ac4a82de9b00a3536caf2259d36688b758775dff3c97a14c52a05b8428bb50f6581810e74ef0e31c01951956c1d517b093e582553af773fa4ec8695c7889a3ca0ae8c3280e76a66e3172d57153c8181758ba405f5e9d9fdee2918a5156bb3b80660b257aaeb19b40670c14bfb40acef578874a036ef8eca3bd8c872b7c034c5e7d904342d41087989d4b9f52b8af32cc3e28a5ea484ae688c7847d2bfab83a8b55d1191ffd94a7ec59e1ba976947c70e1669091ca109c4c958eb5e0e82e0b8f48e83b0e33b21500810fe93c1d5d190f2aef7dc6ff6260d62739ca3bafbd649bcda8d759d6a6e77da6a1478edcedbe7f297b9516b97f716eed8454cd357e29e25a413b8c4d553d2bc898f54326ce060b030e3082cc6962aa8859e1ca7f31cd160556bdcc4529874145defaa7be6b1f09098062cdd834a0d58a631e9617c1c11aaf2bb33fe39f2ee8ac6e46744bb3fa28e5e0a87c2766a79f0427a010e0753764783c0b46176dab82c8e07120bec1642fb167f88d359fba151d1821dc8c7cb48fcd63325a0cd1164cace902c5f45855fdb940f69b00f9c9bf66cb4845c9eda154a5f0d529ad036e9d51bc5a6691c99b8718508e66a604896459711c6205a02b07b6b2594324fe8ce8a2cae63dc7a9f523cc76de4a4a726ec947bde39dddc40f85c3c5e21daeedc571f9a760ca3d5f49b76f7ac7eff6b8fcb79cdb8c12e3e576a61700d618f460b0d62c1ec849c915a760e1acdfd07dda30cea99b359c646270be6d1cbf867a2991bec2a4baffd8a4ff99f9f1bfcae1705e2e2632d0791251931d40aa45cd2829619a254e3d13d615696d518ad30ba82c1a969200bfaf39125a85ed8e0e922d319cde69f74c3d464901adecee1bff10918170acce99b4ab74d0c9b033766d7c43d17b2f6eae8dfadef8bece2588850a8410ba38337fc94d8f94f5ab467377836b60acd694225d824b6e17e049f6ca1387015dc76a616fd14582a1e8cba73851c0b890d41bbd18a2b29083902a539032b3c8c7c06a3d9efdfb6fddfdd1aa0b8b53ebf89e00b30f28d0f1d2674d2387a25c5551e941792076c108fe15800bc6c94137c255b88503a66056580da892a12991ad4665e2feb078d5a4ef491cbb128292dbb2dd93d752fa7e719aadebe2bfe9db00b9f78de06abd3c3fcd41d14b9571c9ee05cf6dc1ac66d0d0bd98d6c0ff4c99984f1e791c7291fff8c3ae8c162160e557e22f8744e57e3f1e5d941d11dafb8fdc25384ac1cb6f14600703a9bb602897d3c74ea6755720cb7dd94a13004fa21d185bde4d05c54ebcf8a7ea82656c25396cbd287fa7cb7d47b77ad654c29add2a0a65d376a402d3bab0e753eb900e37be09c93e388a1f3136743409e058dcd80cd5d5a9f5f84a9557415de6c285606149ff75b1c32f31f653f8291ef46dab05551252c3e6467dfcca2496c33c77d18a11faa70d43a70bea1149214ea3e6b1ca53a59034721a8ba4d2680c0a66ebb79fb6794f114b1fc65a6df9716627670585f05c2270c131b4170904345f900990acaf4cf96058581ec906f3ae4808c1414e6d808be15c80a592dd77e8bd6fefb55ffd70c46ee7c3e6873960d96f8d5c94fb91b4017d6423a947eefe8b7953a48b038d4e9fcaf34a9a6f6ead59f9c3739cd187c6f9fa1f2088a8b4e8be848fe0287904b83ea91c61dcdbb7294a31be8d0d983fcfffbee72ee0ddd7cca408e4e6f0cc7a09745d20b4eb4cd4679cd66feaa09fb92fb598d7ed369301002468804ed520a98704445782f2288d160f836e488fe4710338a8308d7dc08a49a46f916bf0176601e9e6e544c8c86be104e0b9078a588b6fc1116eb3"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb08}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xee, 0x3, "1dc1c94bf6431032f25971e9fa2323d1598408db6b828318abed0200353ada79cedfd104082f53cf8a838530d543665f2605e8358590501018460d43d5a66d973bbb2c28a9f62aa0df26d644919455b61e27b988ac765c128e660347452cab5d07d6af3cef2a4459e566bf8d9567bbcb865979718094448e2dc21154d7b8c68ef3dcd47bd8d748dfeef3f022fe8602cdad20fb3561c119bfe27fa89f41bf1eeb24ffacdb6b4591cf123873807e5c0e2e0d0111db4a3768cff0f3380466524a1dd1ae21340192e8da6dc9512f2cb74ffc0ac578041ff8322c491a22ccd55f8ae81883785334ef70c73f49"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x49, 0x3, "d3b34447598d6fa43c1f147f923bbabcbe58686add2ffde980e070b9f269ebb0bc38476bc3ace16aa0ce23a99e9fa8f954a2bde7a90e79e1e564df28f353ac150599de2816"}]}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x20000004}, 0x17079355193ae437) (async) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000015c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f00000003c0)={0x11b8, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb08}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xee, 0x3, "1dc1c94bf6431032f25971e9fa2323d1598408db6b828318abed0200353ada79cedfd104082f53cf8a838530d543665f2605e8358590501018460d43d5a66d973bbb2c28a9f62aa0df26d644919455b61e27b988ac765c128e660347452cab5d07d6af3cef2a4459e566bf8d9567bbcb865979718094448e2dc21154d7b8c68ef3dcd47bd8d748dfeef3f022fe8602cdad20fb3561c119bfe27fa89f41bf1eeb24ffacdb6b4591cf123873807e5c0e2e0d0111db4a3768cff0f3380466524a1dd1ae21340192e8da6dc9512f2cb74ffc0ac578041ff8322c491a22ccd55f8ae81883785334ef70c73f49"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x49, 0x3, "d3b34447598d6fa43c1f147f923bbabcbe58686add2ffde980e070b9f269ebb0bc38476bc3ace16aa0ce23a99e9fa8f954a2bde7a90e79e1e564df28f353ac150599de2816"}]}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x20000004}, 0x17079355193ae437) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xf8, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x810}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe243}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x7, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfde, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xf8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001800)={0x4, &(0x7f00000017c0)=[{0x9, 0xa, 0x7, 0x8001}, {0x800, 0x92, 0x20, 0x10000}, {0x2e2e, 0x4, 0x86, 0xfa}, {0xb3, 0x2, 0x6, 0x7fffffff}]}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001940)={'ip6_vti0\x00', &(0x7f00000018c0)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xe6, 0x6, 0x30, @remote, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7, 0x7, 0x4, 0x100}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x60, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x51080}, 0x24040811) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x60, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x51080}, 0x24040811) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001b40)={0x0, &(0x7f0000001a80)=[@nested_amd_inject_event={0x180, 0x38, {0x3, 0x13, 0x5, 0x200, 0x1}}, @nested_load_syzos={0x136, 0x38, {0x0, 0x2, [@nested_create_vm={0x12d, 0x18}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}], 0x90}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_ublk_setup_io_uring(0x3489, &(0x7f0000001b80)={0x0, 0xe79d, 0x20, 0x2, 0x1ef}, &(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)) (async) r6 = syz_ublk_setup_io_uring(0x3489, &(0x7f0000001b80)={0x0, 0xe79d, 0x20, 0x2, 0x1ef}, &(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)) syz_ublk_setup_io_uring(0x7bc0, &(0x7f0000001cc0)={0x0, 0xdbb4, 0x0, 0x3, 0x3a2, 0x0, r6}, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)) mknodat$md(0xffffffffffffff9c, &(0x7f0000001e00)='./md1\x00', 0x6180, 0x0) (async) mknodat$md(0xffffffffffffff9c, &(0x7f0000001e00)='./md1\x00', 0x6180, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001e40)={"64580d0c1159ee322edbe24904f885b9", 0x0, 0x0, {0x0, 0x8}, {0xd, 0x3}, 0x7, [0xd, 0x4, 0x7, 0x2, 0x7fffffffffffffff, 0x2, 0x9, 0x8000000, 0x3, 0x8000000000000001, 0x4, 0x4, 0x7fffffff, 0x3, 0xe4ec, 0x1de3]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000001f40)=r7) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002100)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001fc0)={0xf4, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf4}}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x54, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002280)) r9 = openat$md_node(0xffffffffffffff9c, &(0x7f00000022c0)='./md1\x00', 0x141003, 0x0) r10 = add_key(&(0x7f0000002400)='.request_key_auth\x00', &(0x7f0000002440)={'syz', 0x1}, &(0x7f0000002480)="324876114e09760eb56e76690491488d17d8da9d70ca7bcf7c877322e8cca2bfbd4f9bf245b58f0cfa1ef96a30a9c2fbefb10f9d3e50bc41f0aa7a1a05a8ea6690b762bc1293b70aca05b4e40a0ce2ae642e08273d3b8f5c19a7644fe580353286811ad373cd08d3b7af46ec134118cf11cdc967842e8748886c0d426e75698ede74311ace0d5b6eab776d8c773609ada93c222a9613545d3b097e5c511d5d16f60f762f6897166ce25ccc16096afb2de329388fe1c989930f91f795d3ce636c925fde2a1079e8e4ac", 0xc9, 0xfffffffffffffffc) r11 = add_key(&(0x7f0000002300)='cifs.idmap\x00', &(0x7f0000002340)={'syz', 0x0}, &(0x7f0000002380)="3a00afa99b172928bd280ead56811c62d2abd91a08ed17f2e21e6e0e8e99741a0c0d179b1b0894f5b72e06aedaa184a03cdb3f0f2a02a0469bc519a51ab0c9fd9e193459b13ca5bdd15c5d2e30ded746e6cd6c8ed112e52f59f8766147033c13", 0x60, r10) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000002600)={0x1, 0x5, 0x6e, &(0x7f0000002580)=""/110}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000002600)={0x1, 0x5, 0x6e, &(0x7f0000002580)=""/110}) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x30, r1, 0x70a, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000002740), 0x210400, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002740), 0x210400, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000002780)={0x8, 'erspan0\x00', {'bond_slave_0\x00'}, 0x10}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000002780)={0x8, 'erspan0\x00', {'bond_slave_0\x00'}, 0x10}) keyctl$dh_compute(0x17, &(0x7f00000027c0)={r11, 0x0, r11}, &(0x7f0000002800)=""/226, 0xe2, &(0x7f0000002940)={&(0x7f0000002900)={'vmac64(blowfish-asm)\x00'}}) 1.323034425s ago: executing program 4 (id=172): setpgid(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x20, 0xd, 0x25, {0x25, 0x9, "86dca30dbf62f74e5413b5a9a662f3024196ff6db3e89b5170eaae8a2cc94a9db94ccb"}}, &(0x7f0000000140)={0x0, 0x3, 0x19, @string={0x19, 0x3, "34c6cab60a415840f0c657bf8fd15de7f3fe7ec19333c7"}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "ff18dad7"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0xdd3}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x30, 0xc4, "5951b5b31453aed375f1bb5e0f2257a51b65e7be5b36286a59fc4264007bf0d78f7a494c28f9e2d9061d79fd361ee7ad08f4e49b0959fa2f87399196f795fbe22273963f1859c9fcbcfabd237dfb15e64f9bccb940982f233703495d2af51ecd6e1c610fef4fd1f70d1569a9dcadd4708f280d0c3069de18d9a1c28327d79dd347f1bc6f089f026610b8c2d4d9e82b1c7c2a46f17ed993dfa0b3a92e354e4e794de600222f8876d4dfb00f216402e296896da28b457e9c79562342d8bf775d96b1aebaf2"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x1, 0x5, "cc973e1522"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x96}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)="3db06f43e61edc023510e36d7300", 0xe) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x4, 0x80) openat(r3, &(0x7f00000002c0)='./dev\x00', 0xa8000, 0xc6) 1.115325747s ago: executing program 2 (id=173): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x21e0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x800, 0xfffffffd, 0x230, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x0, 0x8091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x0, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.114802716s ago: executing program 2 (id=174): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x32877000) unshare(0x24040400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x20004006) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x7709, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, &(0x7f0000000600)={0x20, 0x6, 0xbe, {0xbe, 0x21, "8b483cbd2f8af0f9f278da4c6c48349a418bec7ed1dcbed6d8a55bdce22e19d0f272a4f252bc03dab577c729551a76b3ae0940bd68e476d1fe9d1e8b562876bb6f60236265badc359fa3c91ac1007cd90fa97bb1bc4f49e918022b92bd7c69f56386d3187f79e0c6389a357762475903c32dc00be1ca4289341b3354b142c080759167148c82b60f5b76cbdfe5491577226394db64a4c2abb2b7b48d1a44b9d52dff6e9194ddf30452a6e75f9ed9ea4851a77a210bf00c2b1aa446c2"}}, &(0x7f0000000700)={0x0, 0x3, 0x95, @string={0x95, 0x3, "97b49ebb9de73eb8f7015225af1d916c9f7d90d762c3e29318680ba83b15de40e8658717954859483b6e1d06898b438ff9f60b10bded40b81ea9b9ef8fa684d0fef7ccdd84ebe79025ce14b4c777a6fea63c33c61fb90255a1113dd9bf5ea0940da21de245cee4a8e513988b6e6c89e7b04ae5626852599c825fb64ca959f2b23ff18c05047b53bd654d14f60d087e1f2d6e39"}}, &(0x7f00000007c0)={0x0, 0x22, 0x24, {[@local=@item_012={0x2, 0x2, 0x6, "4387"}, @global=@item_4={0x3, 0x1, 0x0, "66a9b476"}, @global=@item_4={0x3, 0x1, 0x9, "5709bb1e"}, @local=@item_012={0x2, 0x2, 0x7, "b8e7"}, @local=@item_012={0x2, 0x2, 0x3, "031f"}, @main=@item_4={0x3, 0x0, 0xa, "066a123b"}, @local=@item_4={0x3, 0x2, 0x8, "2c2da29d"}, @local=@item_4={0x3, 0x2, 0x3, "08e1f57b"}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_012={0x0, 0x1, 0x9}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xf2c}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)={0x20, 0x6, 0x82, "8f6255357723b96f4f2ce1e140fc25f56840a03f046f7cc946dafa31be273ca2771a89657e06e96781185bd4c18fcab62dbe74f54fe774729745a404593145d66d14b8ac7491f1dcf72dc84f130ac5bbdb80cf874a26dc252b46b5a933fb89100b63e6839ba9c8d0c8c430d31edf93c75bea9dc447d10e9c974b7c6a9188228e85fa"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1}, &(0x7f00000009c0)={0x20, 0x1, 0xd9, "0b9c06327fb9b277df46ac68f00bb7c45ec4385ca670755cbbd00f105f2e08cfb097e980ca38bf7add2ddc1d467a3081821bcf8a118ebd5c5fb12f298922912870b126a2c797ce73b8766b294e7eb6123a0748b8a988880af86589eb32e0bd36aae3d398298b540b9014371f7b62d82f3f68d1cd863a6062b5dd04bb23f5faf8f121f732287b755f56aecbbbcb884ecd708a4c914b2f8a20100902b865bbebd35715d6264dbdbee169d43d0af252fb6a33be95d7b9317b8cdaa3ede01937712d3cf42c4df5cdda2d4b153452db579abfb1e6908c758bdeface"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00f7180000000505000000ff0906a1014fd221c275082af8111f8102c0c0452087d848dda35e"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000001380)={0x60, 0x23, 0x56, {0x56, 0x4, "0635057c1fcec96e651e2128682418bb275d9171e4da2160dcb6cbea74cb5b980e843ebfdb9694fb6121a5ee88654503f83a07cd517d2a4fb0b0fa1870c4bcb17ddb152fb822219ceacd659b4b000000009cc600"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "b4794431b328734da35de280294db925e8f1092e061b3ab6b7e29b9001fc44ca7fd78b5ee6f4f963f31fd0c9dd3bfd5f2dd830d17c3b4679da0f1bc1dc12ad6178a7f475cdf76c04c4fff1a159940daa4f09b6a01ef832c8bc1aac40d8ff2174fc86913052edfff0f26d61052d12af9d804fa087b084ec17abe7038c34ad251a9f7a32577644990173beeda72479c52d511452210a7aba75e1fa18b217a3735b01be0383c5"}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@main=@item_012={0x1, 0x0, 0xa, ']'}, @main=@item_4={0x3, 0x0, 0xa, "d86dfe23"}, @main=@item_4={0x3, 0x0, 0xc, "b4b5caff"}, @global=@item_4={0x3, 0x1, 0x7, "fd96d038"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6c, 0x1, {0x22, 0xa36}}}}, &(0x7f00000005c0)={0xfffffea7, &(0x7f0000000340)={0x20, 0x14, 0xd1, "d04835595d9b1ac9421aee45a4c435d159ae67250ede0dc848c345d7366815bd346b6cbb2d2b0197f79f0a4e9c36f9816031225d84a44c6d61bf2a015acb5df8c804a84e5ecd012faf1080b8c8fc1877cebed4d4baf3a0c41740384a57fa94dd2a2b3ab39d7dced974b88ff451ead7510954e5b87e2d1af3f709f02e115caf99638d53156bfacc17306473f226d20c6e3dae8c3d7016bdd8406f169556c1cce8ee22533e7cfe90e74c479c96dcec66aff66bb7df0863bd0d16f4726148875f6c57422cdf86bf6c213e3d87381daa57f517"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x1, 0xb5, "bc1802f5c1621b43a2b725bdab7b13119cb394c056ae0bbff25eda769c1f04b6a451eabbd7c28f47afa6ec40ff97886dbaf89212e9e8c76ba8bb553cb8e57fac62fa95dc19fa31aabf7245f363e299f63362ae388a70460baf60d3bf5bad867d5ad413c506ae1921cdab33b74be71ebdd20e5f7791e4a44f7aefad608d701506f072c439729ab2d947aa34f4b28e898dbc5178cf97951da61b9299a181fe7ff1f38cc00cc7530f2e1737c288c8ba7042a393c68072"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1}}) 982.96076ms ago: executing program 5 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x1214040, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000700)={&(0x7f0000000740)={0xa, 0x4e1e, 0x80003, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x60}, 0x2400c1c0) (async) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000600)=0xc) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000640)={@empty}, 0x14) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x41}) (async, rerun: 32) write$tun(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="010530000a002800060000006000"], 0x64) (async, rerun: 32) lseek(r2, 0x4, 0x1) (async, rerun: 64) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) (async) listen(r6, 0x3) (async) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000040), 0x4) 887.15765ms ago: executing program 5 (id=176): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file2\x00', 0x6000, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) (async) r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x20000007c, 0x0) (rerun: 32) r5 = dup3(r3, r4, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendto$packet(r1, &(0x7f00000000c0)='\t', 0x5e0, 0x4c0d5, &(0x7f0000000100)={0x11, 0x8100, r2, 0x1, 0x81, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r6 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', &(0x7f0000000640), 0x100) (async, rerun: 32) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) (rerun: 32) 886.83301ms ago: executing program 5 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40002) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x3}]}) 849.219274ms ago: executing program 5 (id=178): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000340)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000480)=""/95) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000)=0x101, 0x4) 299.2716ms ago: executing program 0 (id=183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0007000977e8e9a87b48aaaaaaaaaa368100400008004519001c0067000007119078ac141443ac141426733aaca7cad0802fa9ba22fc916f624612f34d1afff19efc46819e4180ab2eaede695e2289995f51a7b2514403"], 0x32) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002e000000101000000020000"], 0x14) 199.26593ms ago: executing program 0 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x80002) dup3(r2, r1, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x101, 0x1}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 119.257418ms ago: executing program 0 (id=185): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x41, 0x0) (async) landlock_restrict_self(r0, 0x12) r2 = socket$netlink(0x10, 0x3, 0xb) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000000800030002081000418e00000004fcff", 0x58}], 0x1) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x6, &(0x7f0000000340)={&(0x7f0000000380)=""/120, 0x78}) (async, rerun: 64) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000400)={0x0}) (async, rerun: 64) openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0xb5) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000009b80), 0x149202, 0x0) ioctl$FICLONE(r4, 0x4020940d, r4) 108.43626ms ago: executing program 0 (id=186): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) 11.327109ms ago: executing program 0 (id=187): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000003, 0xec000000, 0xbac1}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) openat2(r4, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x11}, 0x18) 0s ago: executing program 0 (id=188): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x6901, &(0x7f0000000100)={0x0, 0x0, 0x400}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x104}}}, &(0x7f0000000400)=0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0xc2cc2) fallocate(r8, 0x20, 0x40, 0x7) r9 = syz_open_dev$ublk_chdev(&(0x7f0000000440), r5, 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0xbc15, 0x0, 0x1, 0x17e, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x41e8, 0x200, 0x1, 0x7a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3ee, 0x80, 0x0, 0x275, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x383d, 0x404b, 0x2, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8cf0, 0x4000, 0x0, 0x1e6, 0x0, r1}}], 0x4, &(0x7f0000000780)={0x2e, 0x10, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7e2}, 0x0, r6, '\x00', {0x1, 0x68, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 22.762415][ T36] audit: type=1400 audit(1793844687.130:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.785404][ T36] audit: type=1400 audit(1793844687.160:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.786336][ T286] cgroup: Unknown subsys name 'net' [ 22.813199][ T36] audit: type=1400 audit(1793844687.180:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.813315][ T286] cgroup: Unknown subsys name 'devices' [ 22.950829][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.956453][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.118644][ T36] audit: type=1400 audit(1793844687.480:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.135795][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.141884][ T36] audit: type=1400 audit(1793844687.480:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.164534][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.175038][ T36] audit: type=1400 audit(1793844687.480:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.208155][ T36] audit: type=1400 audit(1793844687.520:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.233600][ T36] audit: type=1400 audit(1793844687.520:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.259155][ T36] audit: type=1400 audit(1793844687.530:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.284663][ T36] audit: type=1400 audit(1793844687.530:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.986012][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.993462][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.000594][ T293] bridge_slave_0: entered allmulticast mode [ 24.007015][ T293] bridge_slave_0: entered promiscuous mode [ 24.013549][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.020625][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.027703][ T293] bridge_slave_1: entered allmulticast mode [ 24.033965][ T293] bridge_slave_1: entered promiscuous mode [ 24.149244][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.156281][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.163405][ T298] bridge_slave_0: entered allmulticast mode [ 24.169747][ T298] bridge_slave_0: entered promiscuous mode [ 24.180827][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.187872][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.195130][ T298] bridge_slave_1: entered allmulticast mode [ 24.201313][ T298] bridge_slave_1: entered promiscuous mode [ 24.214441][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.221527][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.228587][ T299] bridge_slave_0: entered allmulticast mode [ 24.234854][ T299] bridge_slave_0: entered promiscuous mode [ 24.241346][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.248380][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.255496][ T299] bridge_slave_1: entered allmulticast mode [ 24.261770][ T299] bridge_slave_1: entered promiscuous mode [ 24.278463][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.285532][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.292867][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.299934][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.330335][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.337381][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.344512][ T297] bridge_slave_0: entered allmulticast mode [ 24.350675][ T297] bridge_slave_0: entered promiscuous mode [ 24.357002][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.364215][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.371313][ T297] bridge_slave_1: entered allmulticast mode [ 24.377453][ T297] bridge_slave_1: entered promiscuous mode [ 24.419306][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.426665][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.462436][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.469524][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.502823][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.509873][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.586212][ T293] veth0_vlan: entered promiscuous mode [ 24.616944][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.624020][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.631715][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.638767][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.646511][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.653564][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.661311][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.668350][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.683801][ T293] veth1_macvtap: entered promiscuous mode [ 24.692548][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.699623][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.713289][ T298] veth0_vlan: entered promiscuous mode [ 24.727891][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.734961][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.751405][ T299] veth0_vlan: entered promiscuous mode [ 24.768754][ T298] veth1_macvtap: entered promiscuous mode [ 24.781483][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.786780][ T299] veth1_macvtap: entered promiscuous mode [ 24.821488][ T297] veth0_vlan: entered promiscuous mode [ 24.832574][ T314] FAULT_INJECTION: forcing a failure. [ 24.832574][ T314] name failslab, interval 1, probability 0, space 0, times 1 [ 24.847159][ T314] CPU: 1 UID: 0 PID: 314 Comm: syz.1.2 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 24.847195][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.847217][ T314] Call Trace: [ 24.847223][ T314] [ 24.847232][ T314] __dump_stack+0x21/0x30 [ 24.847258][ T314] dump_stack_lvl+0x140/0x1c0 [ 24.847277][ T314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.847298][ T314] dump_stack+0x19/0x20 [ 24.847316][ T314] should_fail_ex+0x3c2/0x510 [ 24.847344][ T314] should_failslab+0xac/0x100 [ 24.847365][ T314] __kmalloc_cache_noprof+0x41/0x470 [ 24.847392][ T314] ? __kasan_kmalloc+0x96/0xb0 [ 24.847412][ T314] ? legacy_init_fs_context+0x62/0x160 [ 24.847445][ T314] legacy_init_fs_context+0x62/0x160 [ 24.847469][ T314] alloc_fs_context+0x5c4/0x800 [ 24.847491][ T314] fs_context_for_mount+0x26/0x40 [ 24.847514][ T314] do_new_mount+0x116/0xb40 [ 24.847540][ T314] ? security_capable+0x44/0x130 [ 24.847562][ T314] path_mount+0x66a/0xff0 [ 24.847587][ T314] ? putname+0x113/0x150 [ 24.847607][ T314] __se_sys_mount+0x2bf/0x480 [ 24.847625][ T314] ? __x64_sys_mount+0xf0/0xf0 [ 24.847643][ T314] ? __kasan_check_write+0x18/0x20 [ 24.847668][ T314] ? fpregs_restore_userregs+0x11c/0x260 [ 24.847695][ T314] __x64_sys_mount+0xc3/0xf0 [ 24.847712][ T314] x64_sys_call+0x2021/0x2ee0 [ 24.847732][ T314] do_syscall_64+0x57/0xf0 [ 24.847752][ T314] ? clear_bhb_loop+0x50/0xa0 [ 24.847778][ T314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.847801][ T314] RIP: 0033:0x7f718939fb19 [ 24.847822][ T314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.847838][ T314] RSP: 002b:00007f718a25d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.847862][ T314] RAX: ffffffffffffffda RBX: 00007f7189625fa0 RCX: 00007f718939fb19 [ 24.847878][ T314] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 24.847891][ T314] RBP: 00007f7189437b70 R08: 0000000000000000 R09: 0000000000000000 [ 24.847904][ T314] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 24.847915][ T314] R13: 00007f7189626038 R14: 00007f7189625fa0 R15: 00007fffd060d6b8 [ 24.847931][ T314] [ 24.851703][ T314] ./dev/sda1: Can't lookup blockdev [ 24.937014][ T322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6'. [ 25.092075][ T297] veth1_macvtap: entered promiscuous mode [ 25.143803][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.339176][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.352636][ T343] kvm: kvm [342]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x5 [ 25.362518][ T343] kvm: kvm [342]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x5 [ 25.376412][ T343] kvm: kvm [342]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x5 [ 25.391106][ T343] kvm: kvm [342]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x5 [ 25.399796][ T343] kvm: kvm [342]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x5 [ 25.409929][ T343] kvm_intel: kvm [342]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x5 [ 25.510303][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 25.516440][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.526877][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.536513][ T66] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 25.545672][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.553695][ T66] usb 1-1: SerialNumber: syz [ 25.560786][ T66] usb 1-1: 0:2 : does not exist [ 25.573627][ T356] ÿÿÿÿÿÿ: renamed from veth0_vlan (while UP) [ 26.369074][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.530069][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.541047][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.551087][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 26.560194][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.568773][ T31] usb 3-1: config 0 descriptor?? [ 26.759042][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.819027][ T300] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.889012][ T66] usb 4-1: device descriptor read/64, error -71 [ 26.970295][ T300] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.979030][ T300] usb 2-1: not running at top speed; connect to a high speed hub [ 26.987934][ T31] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 26.999530][ T300] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 27.012389][ T300] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 27.022798][ T300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.030898][ T300] usb 2-1: Product: syz [ 27.035069][ T300] usb 2-1: Manufacturer: syz [ 27.039760][ T300] usb 2-1: SerialNumber: syz [ 27.129013][ T66] usb 4-1: device descriptor read/64, error -71 [ 27.236175][ T31] usb 3-1: USB disconnect, device number 2 [ 27.248909][ T300] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.256441][ T300] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 27.265301][ T300] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 27.274268][ T300] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 27.284232][ T300] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 27.292705][ T300] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 27.300483][ T300] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 27.310595][ T300] usb 2-1: failed to enable PITCH for EP 0x82 [ 27.319979][ T300] usb 2-1: USB disconnect, device number 2 [ 27.335227][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 27.389050][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.519016][ T66] usb 4-1: device descriptor read/64, error -71 [ 27.759129][ T66] usb 4-1: device descriptor read/64, error -71 [ 27.773405][ T382] ======================================================= [ 27.773405][ T382] WARNING: The mand mount option has been deprecated and [ 27.773405][ T382] and is ignored by this kernel. Remove the mand [ 27.773405][ T382] option from the mount to silence this warning. [ 27.773405][ T382] ======================================================= [ 27.808596][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 27.808610][ T36] audit: type=1400 audit(1793844692.170:140): avc: denied { write } for pid=380 comm="syz.2.19" name="ram0" dev="devtmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.837835][ T36] audit: type=1400 audit(1793844692.170:141): avc: denied { read } for pid=380 comm="syz.2.19" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.860204][ T36] audit: type=1400 audit(1793844692.170:142): avc: denied { open } for pid=380 comm="syz.2.19" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.889124][ T66] usb usb4-port1: attempt power cycle [ 28.009426][ T9] usb 1-1: USB disconnect, device number 2 [ 28.019043][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 28.021393][ T36] audit: type=1400 audit(1793844692.390:143): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.039024][ T328] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.059911][ T36] audit: type=1400 audit(1793844692.430:144): avc: denied { mount } for pid=386 comm="syz.0.21" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.170657][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.178767][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 28.187386][ T10] usb 2-1: config 8 has an invalid interface number: 154 but max is 0 [ 28.195610][ T10] usb 2-1: config 8 has no interface number 0 [ 28.201765][ T10] usb 2-1: config 8 interface 154 has no altsetting 0 [ 28.209814][ T328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.217544][ T10] usb 2-1: New USB device found, idVendor=a2f1, idProduct=e50d, bcdDevice=e4.00 [ 28.226695][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.234832][ T66] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.242405][ T10] usb 2-1: Product: syz [ 28.246578][ T10] usb 2-1: Manufacturer: syz [ 28.251271][ T328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.261453][ T328] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 28.272361][ T10] usb 2-1: SerialNumber: syz [ 28.279221][ T328] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 28.288267][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.296355][ T328] usb 3-1: Product: syz [ 28.300582][ T328] usb 3-1: Manufacturer: syz [ 28.305276][ T328] usb 3-1: SerialNumber: syz [ 28.310535][ T66] usb 4-1: device descriptor read/8, error -71 [ 28.440560][ T66] usb 4-1: device descriptor read/8, error -71 [ 28.479614][ T36] audit: type=1400 audit(1793844692.850:145): avc: denied { read write } for pid=379 comm="syz.1.20" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.502693][ T36] audit: type=1400 audit(1793844692.850:146): avc: denied { open } for pid=379 comm="syz.1.20" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.525699][ T36] audit: type=1400 audit(1793844692.850:147): avc: denied { mounton } for pid=379 comm="syz.1.20" path="/7/file0" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 28.526583][ T383] rust_binder: Error in use_page_slow: ESRCH [ 28.548406][ T36] audit: type=1400 audit(1793844692.880:148): avc: denied { ioctl } for pid=380 comm="syz.2.19" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.554440][ T383] rust_binder: use_range failure ESRCH [ 28.579644][ T36] audit: type=1400 audit(1793844692.880:149): avc: denied { set_context_mgr } for pid=380 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.585421][ T382] rust_binder: Error in use_page_slow: ESRCH [ 28.604424][ T383] rust_binder: 380:383 transaction call to 380:0 failed ESRCH, code 2 size 0-0 line process.rs:1128 [ 28.610619][ T382] rust_binder: use_range failure ESRCH [ 28.627216][ T382] rust_binder: 380:382 transaction async to 380:0 failed ESRCH, code 4294967295 size 0-0 line process.rs:1128 [ 28.639995][ T374] rust_binder: 380: undelivered TRANSACTION_ERROR: 29201 [ 28.646319][ T9] rust_binder: 380: undelivered TRANSACTION_ERROR: 29201 [ 28.656522][ T328] usb 3-1: Can't get UAC3 power state for id 10 [ 28.663989][ T328] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 28.673597][ T328] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 28.692730][ T328] usb 3-1: USB disconnect, device number 3 [ 28.704408][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.720170][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.749916][ T66] usb 4-1: device descriptor read/8, error -71 [ 28.880005][ T66] usb 4-1: device descriptor read/8, error -71 [ 28.889091][ T374] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.989083][ T66] usb usb4-port1: unable to enumerate USB device [ 29.039012][ T374] usb 1-1: Using ep0 maxpacket: 32 [ 29.045246][ T374] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 29.053499][ T374] usb 1-1: config 0 has no interface number 0 [ 29.059641][ T374] usb 1-1: config 0 interface 184 has no altsetting 0 [ 29.067769][ T374] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 29.076864][ T374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.084884][ T374] usb 1-1: Product: syz [ 29.089107][ T374] usb 1-1: Manufacturer: syz [ 29.093706][ T374] usb 1-1: SerialNumber: syz [ 29.098997][ T374] usb 1-1: config 0 descriptor?? [ 29.104751][ T374] smsc75xx v1.0.0 [ 29.468996][ T300] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.506792][ T374] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 29.517745][ T374] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.599011][ T300] usb 3-1: device descriptor read/64, error -71 [ 29.749417][ T374] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 29.760274][ T374] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 29.769907][ T374] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 29.779538][ T374] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 29.839003][ T300] usb 3-1: device descriptor read/64, error -71 [ 30.079006][ T300] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.209003][ T300] usb 3-1: device descriptor read/64, error -71 [ 30.449001][ T300] usb 3-1: device descriptor read/64, error -71 [ 30.515176][ T419] capability: warning: `syz.3.29' uses deprecated v2 capabilities in a way that may be insecure [ 30.559125][ T300] usb usb3-port1: attempt power cycle [ 30.676769][ T433] FAULT_INJECTION: forcing a failure. [ 30.676769][ T433] name failslab, interval 1, probability 0, space 0, times 0 [ 30.689468][ T433] CPU: 0 UID: 0 PID: 433 Comm: syz.3.33 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 30.689501][ T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.689514][ T433] Call Trace: [ 30.689521][ T433] [ 30.689527][ T433] __dump_stack+0x21/0x30 [ 30.689543][ T433] dump_stack_lvl+0x140/0x1c0 [ 30.689553][ T433] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.689564][ T433] dump_stack+0x19/0x20 [ 30.689574][ T433] should_fail_ex+0x3c2/0x510 [ 30.689593][ T433] should_failslab+0xac/0x100 [ 30.689604][ T433] __kmalloc_cache_noprof+0x41/0x470 [ 30.689619][ T433] ? tipc_sub_subscribe+0x13f/0x7a0 [ 30.689631][ T433] tipc_sub_subscribe+0x13f/0x7a0 [ 30.689641][ T433] tipc_conn_rcv_sub+0x196/0x3e0 [ 30.689654][ T433] tipc_topsrv_kern_subscr+0x237/0x360 [ 30.689667][ T433] ? __cfi_tipc_topsrv_kern_subscr+0x10/0x10 [ 30.689681][ T433] ? __asan_memset+0x39/0x50 [ 30.689694][ T433] tipc_group_create+0x3be/0x640 [ 30.689708][ T433] tipc_sk_join+0x243/0x9f0 [ 30.689720][ T433] ? __cfi_lock_sock_nested+0x10/0x10 [ 30.689730][ T433] ? __tipc_sendstream+0x11b0/0x11b0 [ 30.689749][ T433] ? __kasan_check_write+0x18/0x20 [ 30.689763][ T433] tipc_setsockopt+0x73f/0x9a0 [ 30.689776][ T433] ? __cfi_tipc_setsockopt+0x10/0x10 [ 30.689788][ T433] ? do_futex+0x32a/0x510 [ 30.689800][ T433] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 30.689811][ T433] ? security_socket_setsockopt+0x3d/0x100 [ 30.689825][ T433] ? __cfi_tipc_setsockopt+0x10/0x10 [ 30.689838][ T433] do_sock_setsockopt+0x27c/0x410 [ 30.689851][ T433] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 30.689864][ T433] ? __fget_files+0x2bc/0x330 [ 30.689875][ T433] __x64_sys_setsockopt+0x18c/0x220 [ 30.689888][ T433] x64_sys_call+0x2adc/0x2ee0 [ 30.689899][ T433] do_syscall_64+0x57/0xf0 [ 30.689909][ T433] ? clear_bhb_loop+0x50/0xa0 [ 30.689922][ T433] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.689935][ T433] RIP: 0033:0x7fcb18d9fb19 [ 30.689945][ T433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.689954][ T433] RSP: 002b:00007fcb19cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 30.689966][ T433] RAX: ffffffffffffffda RBX: 00007fcb19025fa0 RCX: 00007fcb18d9fb19 [ 30.689974][ T433] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 30.689980][ T433] RBP: 00007fcb18e37b70 R08: 000000000000002e R09: 0000000000000000 [ 30.689987][ T433] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 30.689993][ T433] R13: 00007fcb19026038 R14: 00007fcb19025fa0 R15: 00007ffdee9d79a8 [ 30.690001][ T433] [ 30.690014][ T433] tipc: Subscription rejected, no memory [ 30.909021][ T300] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.913896][ T10] usb-storage 2-1:8.154: USB Mass Storage device detected [ 30.950082][ T300] usb 3-1: device descriptor read/8, error -71 [ 30.981087][ T374] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.014246][ T10] usb 2-1: USB disconnect, device number 3 [ 31.110060][ T300] usb 3-1: device descriptor read/8, error -71 [ 31.140019][ T374] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.154284][ T374] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 31.163390][ T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.171428][ T374] usb 4-1: Product: syz [ 31.175596][ T374] usb 4-1: Manufacturer: syz [ 31.180224][ T374] usb 4-1: SerialNumber: syz [ 31.187115][ T374] rtl8150 4-1:1.0: couldn't find required endpoints [ 31.194016][ T374] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 31.309032][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.349259][ T300] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 31.370037][ T300] usb 3-1: device descriptor read/8, error -71 [ 31.389975][ T374] usb 4-1: USB disconnect, device number 6 [ 31.459043][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 31.465271][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.476361][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.486258][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.499116][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 31.500224][ T300] usb 3-1: device descriptor read/8, error -71 [ 31.508177][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.523216][ T10] usb 2-1: config 0 descriptor?? [ 31.619116][ T300] usb usb3-port1: unable to enumerate USB device [ 31.671149][ T374] usb 1-1: USB disconnect, device number 3 [ 31.938755][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 31.944746][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.953858][ T10] usb 2-1: USB disconnect, device number 4 [ 32.009029][ T374] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.149010][ T300] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.160080][ T374] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.170211][ T374] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.179784][ T374] usb 1-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 32.188930][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.196971][ T374] usb 1-1: SerialNumber: syz [ 32.310090][ T300] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.320118][ T300] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.333254][ T300] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.339911][ T300] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 32.349257][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.364928][ T300] usb 4-1: config 0 descriptor?? [ 32.405009][ T374] usb 1-1: 0:2 : does not exist [ 32.415360][ T374] usb 1-1: USB disconnect, device number 4 [ 32.431498][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.592537][ T465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 32.609584][ T448] usb usb1: usbfs: process 448 (syz.3.37) did not claim interface 1 before use [ 32.620438][ T465] dummy1: entered promiscuous mode [ 32.625585][ T465] dummy1: entered allmulticast mode [ 32.676924][ T448] device-mapper: table: 252:0: crypt: Device size is not multiple of sector_size feature (-EINVAL) [ 32.687844][ T448] device-mapper: ioctl: error adding target to table [ 32.895805][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 32.895821][ T36] audit: type=1400 audit(1793844697.260:206): avc: denied { write } for pid=447 comm="syz.3.37" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.900502][ T448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.927623][ T36] audit: type=1400 audit(1793844697.290:207): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.931489][ T448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.950826][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 32.965613][ T448] cgroup: Need name or subsystem set [ 32.970251][ T36] audit: type=1400 audit(1793844697.330:208): avc: denied { mounton } for pid=447 comm="syz.3.37" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 32.975530][ T300] usbhid 4-1:0.0: can't add hid device: -71 [ 33.000497][ T300] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.012356][ T300] usb 4-1: USB disconnect, device number 7 [ 33.139023][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 33.145219][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.155659][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.165453][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.178252][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.184899][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 33.194112][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.202859][ T10] usb 3-1: config 0 descriptor?? [ 33.208742][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 33.249065][ T328] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.409020][ T328] usb 1-1: Using ep0 maxpacket: 32 [ 33.415548][ T328] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.429591][ T328] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.439374][ T36] audit: type=1400 audit(1793844697.800:209): avc: denied { getopt } for pid=480 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.440755][ T328] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.469813][ T328] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 33.478903][ T328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.486950][ T328] usb 1-1: Product: syz [ 33.491142][ T328] usb 1-1: Manufacturer: syz [ 33.495747][ T328] usb 1-1: SerialNumber: syz [ 33.502367][ T328] usb 1-1: selecting invalid altsetting 1 [ 33.563090][ T36] audit: type=1400 audit(1793844697.930:210): avc: denied { read } for pid=293 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.584738][ T36] audit: type=1400 audit(1793844697.930:211): avc: denied { open } for pid=293 comm="syz-executor" path="/11/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.607512][ T36] audit: type=1400 audit(1793844697.930:212): avc: denied { write } for pid=293 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.628220][ T489] Zero length message leads to an empty skb [ 33.629273][ T36] audit: type=1400 audit(1793844697.930:213): avc: denied { setattr } for pid=293 comm="syz-executor" path="/11/tracing/instances" dev="tracefs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.658889][ T36] audit: type=1400 audit(1793844697.990:214): avc: denied { create } for pid=485 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.678958][ T36] audit: type=1400 audit(1793844697.990:215): avc: denied { write } for pid=485 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.702673][ T328] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 33.714161][ T328] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.725976][ T328] usb 1-1: USB disconnect, device number 5 [ 33.733970][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.789858][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.799103][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.905952][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.913061][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.920167][ T492] bridge_slave_0: entered allmulticast mode [ 33.926357][ T492] bridge_slave_0: entered promiscuous mode [ 33.933523][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.940701][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.947961][ T492] bridge_slave_1: entered allmulticast mode [ 33.954282][ T492] bridge_slave_1: entered promiscuous mode [ 33.990449][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.997510][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.004791][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.012030][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.031098][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.038423][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.047748][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.054844][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.063862][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.070943][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.094693][ T492] veth0_vlan: entered promiscuous mode [ 34.105467][ T492] veth1_macvtap: entered promiscuous mode [ 34.320887][ T505] cgroup: fork rejected by pids controller in /syz4 [ 34.369590][ T328] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 34.500379][ T374] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.518993][ T328] usb 5-1: device descriptor read/64, error -71 [ 34.658998][ T374] usb 1-1: Using ep0 maxpacket: 32 [ 34.665297][ T374] usb 1-1: config 6 has an invalid interface number: 4 but max is 0 [ 34.673653][ T374] usb 1-1: config 6 has no interface number 0 [ 34.679987][ T374] usb 1-1: config 6 interface 4 has no altsetting 0 [ 34.688131][ T374] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=f2.cf [ 34.698610][ T374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.706881][ T374] usb 1-1: Product: syz [ 34.714507][ T374] usb 1-1: Manufacturer: syz [ 34.719260][ T374] usb 1-1: SerialNumber: syz [ 34.769032][ T328] usb 5-1: device descriptor read/64, error -71 [ 34.939628][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.950111][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.960552][ T374] usb_ehset_test 1-1:6.4: probe with driver usb_ehset_test failed with error -32 [ 34.975216][ T374] usb 1-1: USB disconnect, device number 6 [ 35.009014][ T328] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 35.159241][ T328] usb 5-1: device descriptor read/64, error -71 [ 35.409006][ T328] usb 5-1: device descriptor read/64, error -71 [ 35.479027][ T385] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 35.519234][ T328] usb usb5-port1: attempt power cycle [ 35.629028][ T385] usb 4-1: device descriptor read/64, error -71 [ 35.651068][ T300] usb 3-1: USB disconnect, device number 8 [ 35.739240][ T374] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 35.859032][ T328] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 35.879014][ T385] usb 4-1: device descriptor read/64, error -71 [ 35.890290][ T374] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 35.901433][ T374] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.914760][ T374] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.914824][ T328] usb 5-1: device descriptor read/8, error -71 [ 35.921751][ T374] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 35.938354][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.948839][ T374] usb 1-1: config 0 descriptor?? [ 35.956979][ T588] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 36.060111][ T328] usb 5-1: device descriptor read/8, error -71 [ 36.099029][ T300] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 36.119043][ T385] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 36.250167][ T300] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 36.258586][ T300] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 36.267075][ T300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.269018][ T385] usb 4-1: device descriptor read/64, error -71 [ 36.277696][ T300] usb 3-1: config 0 has no interface number 0 [ 36.290079][ T300] usb 3-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.303498][ T300] usb 3-1: config 0 interface 200 has no altsetting 0 [ 36.309023][ T328] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 36.312108][ T300] usb 3-1: New USB device found, idVendor=0b57, idProduct=812a, bcdDevice=6d.39 [ 36.327174][ T300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.335472][ T300] usb 3-1: Product: syz [ 36.339931][ T300] usb 3-1: Manufacturer: syz [ 36.344658][ T300] usb 3-1: SerialNumber: syz [ 36.349436][ T328] usb 5-1: device descriptor read/8, error -71 [ 36.351813][ T300] usb 3-1: config 0 descriptor?? [ 36.367027][ T588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.377056][ T588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.390505][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.397896][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.405465][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.413049][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.420463][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.427793][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.435210][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.442704][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.450060][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.457366][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.464794][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.472471][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.479838][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.487151][ T374] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 36.489640][ T328] usb 5-1: device descriptor read/8, error -71 [ 36.494678][ T374] zydacron 0003:13EC:0006.0002: unbalanced collection at end of report description [ 36.510500][ T374] zydacron 0003:13EC:0006.0002: parse failed [ 36.516618][ T374] zydacron 0003:13EC:0006.0002: probe with driver zydacron failed with error -22 [ 36.539052][ T385] usb 4-1: device descriptor read/64, error -71 [ 36.555178][ T311] bridge_slave_1: left allmulticast mode [ 36.561468][ T311] bridge_slave_1: left promiscuous mode [ 36.567243][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.576533][ T300] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 36.584473][ T311] bridge_slave_0: left allmulticast mode [ 36.593823][ T300] usb 3-1: USB disconnect, device number 9 [ 36.599972][ T311] bridge_slave_0: left promiscuous mode [ 36.600080][ T9] usb 1-1: USB disconnect, device number 7 [ 36.607278][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.619473][ T328] usb usb5-port1: unable to enumerate USB device [ 36.649227][ T385] usb usb4-port1: attempt power cycle [ 36.751409][ T311] veth1_macvtap: left promiscuous mode [ 36.757095][ T311] veth0_vlan: left promiscuous mode [ 37.009010][ T385] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 37.039988][ T385] usb 4-1: device descriptor read/8, error -71 [ 37.170070][ T385] usb 4-1: device descriptor read/8, error -71 [ 37.227941][ T612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26112 sclass=netlink_route_socket pid=612 comm=syz.4.68 [ 37.419049][ T385] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 37.439041][ T328] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.447477][ T385] usb 4-1: device descriptor read/8, error -71 [ 37.559014][ T300] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 37.580121][ T385] usb 4-1: device descriptor read/8, error -71 [ 37.599027][ T328] usb 1-1: Using ep0 maxpacket: 16 [ 37.605164][ T328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.618065][ T328] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.627958][ T328] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 37.640814][ T328] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.647407][ T328] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 37.656488][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.665094][ T328] usb 1-1: config 0 descriptor?? [ 37.672261][ T328] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 37.689100][ T385] usb usb4-port1: unable to enumerate USB device [ 37.709015][ T300] usb 3-1: device descriptor read/64, error -71 [ 37.949005][ T300] usb 3-1: device descriptor read/64, error -71 [ 38.189043][ T300] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 38.223603][ T639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.232288][ T639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.279108][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 38.279124][ T36] audit: type=1400 audit(1793844702.650:230): avc: denied { read } for pid=640 comm="syz.3.78" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.307630][ T36] audit: type=1400 audit(1793844702.650:231): avc: denied { open } for pid=640 comm="syz.3.78" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.319029][ T300] usb 3-1: device descriptor read/64, error -71 [ 38.330482][ T36] audit: type=1400 audit(1793844702.660:232): avc: denied { ioctl } for pid=640 comm="syz.3.78" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.360949][ T36] audit: type=1400 audit(1793844702.660:233): avc: denied { getopt } for pid=640 comm="syz.3.78" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.381122][ T36] audit: type=1400 audit(1793844702.740:234): avc: denied { nlmsg_write } for pid=642 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.390133][ T651] process 'syz.4.80' launched './file0' with NULL argv: empty string added [ 38.410416][ T36] audit: type=1400 audit(1793844702.780:235): avc: denied { transition } for pid=650 comm="syz.4.80" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 38.433259][ T36] audit: type=1400 audit(1793844702.780:236): avc: denied { entrypoint } for pid=650 comm="syz.4.80" path="/8/file0" dev="tmpfs" ino=60 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.452946][ T653] device-mapper: table: 252:1: crypt: Error decoding and setting key (-EINVAL) [ 38.456213][ T36] audit: type=1400 audit(1793844702.780:237): avc: denied { noatsecure } for pid=650 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 38.465482][ T653] device-mapper: ioctl: error adding target to table [ 38.494401][ T36] audit: type=1400 audit(1793844702.860:238): avc: denied { create } for pid=656 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.562134][ T36] audit: type=1400 audit(1793844702.930:239): avc: denied { mounton } for pid=667 comm="syz.4.83" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 38.619053][ T300] usb 3-1: device descriptor read/64, error -71 [ 38.729111][ T300] usb usb3-port1: attempt power cycle [ 38.839014][ T328] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 38.990154][ T328] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.000387][ T328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.011327][ T328] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.024169][ T328] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 39.033465][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.069061][ T300] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 39.090171][ T300] usb 3-1: device descriptor read/8, error -71 [ 39.157432][ T676] fuse: Unknown parameter 'fe' [ 39.183722][ T681] rust_binder: 680:681 got transaction with invalid offset [ 39.191345][ T681] rust_binder: 680:681 transaction call to 680:0 failed EINVAL, code 2 size 72-24 line thread.rs:1239 [ 39.202931][ T10] rust_binder: 680: undelivered TRANSACTION_ERROR: 29201 [ 39.230414][ T300] usb 3-1: device descriptor read/8, error -71 [ 39.444289][ T328] usbhid 4-1:1.0: can't add hid device: -71 [ 39.454441][ T328] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 39.469038][ T300] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 39.469420][ T328] usb 4-1: USB disconnect, device number 12 [ 39.510368][ T300] usb 3-1: device descriptor read/8, error -71 [ 39.650168][ T300] usb 3-1: device descriptor read/8, error -71 [ 39.759112][ T300] usb usb3-port1: unable to enumerate USB device [ 40.217345][ T328] usb 1-1: USB disconnect, device number 8 [ 40.719062][ T300] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 40.869011][ T300] usb 3-1: Using ep0 maxpacket: 16 [ 40.875255][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.880037][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.886273][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.906516][ T300] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.917887][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.919448][ T300] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.936107][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.944890][ T300] usb 3-1: config 0 descriptor?? [ 41.109251][ T328] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 41.269002][ T328] usb 5-1: Using ep0 maxpacket: 32 [ 41.275449][ T328] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.283795][ T328] usb 5-1: config 0 has no interface number 0 [ 41.291706][ T328] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.301046][ T328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.309248][ T328] usb 5-1: Product: syz [ 41.313562][ T328] usb 5-1: Manufacturer: syz [ 41.318308][ T328] usb 5-1: SerialNumber: syz [ 41.323208][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.331652][ T328] usb 5-1: config 0 descriptor?? [ 41.341258][ T328] smsc95xx v2.0.0 [ 41.355089][ T948] veth0_to_batadv: entered promiscuous mode [ 41.361121][ T948] veth0_to_batadv: entered allmulticast mode [ 41.374569][ T300] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 41.381920][ T300] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 41.389419][ T300] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 41.396681][ T300] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 41.403980][ T300] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 41.406875][ T960] kvm: emulating exchange as write [ 41.413812][ T300] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 41.429703][ T300] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 41.443590][ T300] microsoft 0003:045E:07DA.0003: no inputs found [ 41.450009][ T300] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 41.500163][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.514466][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 41.523735][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.531851][ T10] usb 1-1: Product: syz [ 41.536042][ T10] usb 1-1: Manufacturer: syz [ 41.537447][ T953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.542634][ T10] usb 1-1: SerialNumber: syz [ 41.555835][ T953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.564984][ T10] rtl8150 1-1:1.0: couldn't find required endpoints [ 41.570204][ T953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.573337][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 41.582321][ T953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.597733][ T953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.614349][ T953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.624417][ T300] usb 3-1: USB disconnect, device number 14 [ 41.630793][ T953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.640102][ T953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.771326][ T958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.780120][ T958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.793321][ T958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 41.818471][ T958] SELinux: Context .†� is not valid (left unmapped). [ 41.883258][ T300] usb 1-1: USB disconnect, device number 9 [ 41.964955][ T13] bridge_slave_1: left allmulticast mode [ 41.972896][ T13] bridge_slave_1: left promiscuous mode [ 41.978722][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.986629][ T13] bridge_slave_0: left allmulticast mode [ 41.998978][ T13] bridge_slave_0: left promiscuous mode [ 42.004717][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.134500][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.142089][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.149689][ T971] bridge_slave_0: entered allmulticast mode [ 42.156215][ T971] bridge_slave_0: entered promiscuous mode [ 42.163302][ T13] veth1_macvtap: left promiscuous mode [ 42.168835][ T13] ÿÿÿÿÿÿ: left promiscuous mode [ 42.210708][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.218314][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.225445][ T971] bridge_slave_1: entered allmulticast mode [ 42.232610][ T971] bridge_slave_1: entered promiscuous mode [ 42.284578][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.291632][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.298880][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.305920][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.328532][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.337641][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.347423][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.354487][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.369898][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.376988][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.416311][ T971] veth0_vlan: entered promiscuous mode [ 42.431346][ T971] veth1_macvtap: entered promiscuous mode [ 42.483441][ T995] netlink: 16 bytes leftover after parsing attributes in process `syz.5.107'. [ 42.499593][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 42.679012][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 42.685434][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.699061][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.708838][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 42.723091][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 42.732331][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.741812][ T10] usb 3-1: config 0 descriptor?? [ 42.889039][ T300] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.039113][ T300] usb 6-1: Using ep0 maxpacket: 32 [ 43.045545][ T300] usb 6-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 43.057792][ T300] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 43.067313][ T300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.075560][ T300] usb 6-1: Product: syz [ 43.080117][ T300] usb 6-1: Manufacturer: syz [ 43.084843][ T300] usb 6-1: SerialNumber: syz [ 43.099374][ T300] usb 6-1: config 0 descriptor?? [ 43.107229][ T300] usb 6-1: bad CDC descriptors [ 43.112896][ T300] usb 6-1: unsupported MDLM descriptors [ 43.307125][ T300] usb 6-1: USB disconnect, device number 2 [ 43.410520][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 43.416529][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 43.425375][ T10] usb 3-1: USB disconnect, device number 15 [ 43.589171][ T385] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 43.738993][ T385] usb 1-1: Using ep0 maxpacket: 16 [ 43.745201][ T385] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.756189][ T385] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.767216][ T385] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.777012][ T385] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 43.789862][ T385] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.796475][ T385] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 43.805569][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.814175][ T385] usb 1-1: config 0 descriptor?? [ 43.826720][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 43.826737][ T36] audit: type=1400 audit(1793844708.190:269): avc: denied { map } for pid=1013 comm="syz.5.115" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.839582][ T1016] WARNING! power/level is deprecated; use power/control instead [ 43.863791][ T328] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 43.877085][ T328] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 43.886329][ T36] audit: type=1400 audit(1793844708.230:270): avc: denied { setopt } for pid=1015 comm="syz.5.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.906922][ T328] usb 5-1: USB disconnect, device number 6 [ 43.916397][ T36] audit: type=1400 audit(1793844708.250:271): avc: denied { read } for pid=1015 comm="syz.5.116" path="socket:[6475]" dev="sockfs" ino=6475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.171488][ T36] audit: type=1400 audit(1793844708.540:272): avc: denied { name_bind } for pid=1033 comm="syz.4.119" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.173003][ T1035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.218999][ T36] audit: type=1400 audit(1793844708.540:273): avc: denied { bind } for pid=1033 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.276945][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.289527][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.303631][ T385] hid (null): invalid report_count 515574103 [ 44.310823][ T385] logitech-djreceiver 0003:046D:C53A.0004: invalid report_count 515574103 [ 44.328983][ T385] logitech-djreceiver 0003:046D:C53A.0004: item 0 4 1 9 parsing failed [ 44.344308][ T36] audit: type=1400 audit(1793844708.710:274): avc: denied { connect } for pid=1037 comm="syz.4.120" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.365076][ T385] logitech-djreceiver 0003:046D:C53A.0004: logi_dj_probe: parse failed [ 44.374167][ T385] logitech-djreceiver 0003:046D:C53A.0004: probe with driver logitech-djreceiver failed with error -22 [ 44.527567][ T36] audit: type=1400 audit(1793844708.890:275): avc: denied { mounton } for pid=1042 comm="syz.2.121" path="/23/file0/file0" dev="ramfs" ino=6796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 44.527602][ T1043] overlayfs: missing 'lowerdir' [ 44.620612][ T36] audit: type=1400 audit(1793844708.990:276): avc: denied { map } for pid=1045 comm="syz.2.122" path="/24/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.653966][ T1050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.684285][ T1052] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.124' resets device [ 44.694726][ T36] audit: type=1400 audit(1793844709.060:277): avc: denied { view } for pid=1051 comm="syz.5.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.713657][ T36] audit: type=1400 audit(1793844709.060:278): avc: denied { bind } for pid=1051 comm="syz.5.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.740114][ T1054] rust_binder: 1053:1054 error while translating object: EPERM [ 44.747763][ T1054] rust_binder: 1053:1054 transaction async to 1053:0 failed EPERM, code 1 size 80-24 line thread.rs:995 [ 44.768102][ T1058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 44.782409][ T1058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.127'. [ 44.919683][ T385] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.973239][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 45.050183][ T385] usb 5-1: device descriptor read/64, error -71 [ 45.299116][ T385] usb 5-1: device descriptor read/64, error -71 [ 45.539006][ T385] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 45.679028][ T385] usb 5-1: device descriptor read/64, error -71 [ 45.739014][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 45.889010][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 45.895237][ T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.906196][ T31] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.919275][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.925874][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 45.928998][ T385] usb 5-1: device descriptor read/64, error -71 [ 45.935005][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.950068][ T31] usb 3-1: config 0 descriptor?? [ 46.059013][ T385] usb usb5-port1: attempt power cycle [ 46.141343][ T1089] FAULT_INJECTION: forcing a failure. [ 46.141343][ T1089] name failslab, interval 1, probability 0, space 0, times 0 [ 46.154165][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: syz.5.133 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 46.154194][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.154202][ T1089] Call Trace: [ 46.154206][ T1089] [ 46.154210][ T1089] __dump_stack+0x21/0x30 [ 46.154224][ T1089] dump_stack_lvl+0x140/0x1c0 [ 46.154238][ T1089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.154249][ T1089] dump_stack+0x19/0x20 [ 46.154258][ T1089] should_fail_ex+0x3c2/0x510 [ 46.154274][ T1089] ? x509_get_sig_params+0x250/0x6a0 [ 46.154290][ T1089] should_failslab+0xac/0x100 [ 46.154300][ T1089] __kmalloc_noprof+0x69/0x510 [ 46.154316][ T1089] ? x509_get_sig_params+0x250/0x6a0 [ 46.154331][ T1089] x509_get_sig_params+0x250/0x6a0 [ 46.154346][ T1089] x509_cert_parse+0x53e/0xbd0 [ 46.154360][ T1089] x509_key_preparse+0x6a/0x880 [ 46.154373][ T1089] ? __cfi_down_read+0x10/0x10 [ 46.154387][ T1089] asymmetric_key_preparse+0xb6/0x100 [ 46.154400][ T1089] __key_create_or_update+0x430/0xa90 [ 46.154421][ T1089] ? security_key_permission+0x3d/0x100 [ 46.154437][ T1089] ? key_create_or_update+0x70/0x70 [ 46.154451][ T1089] ? __kasan_kmalloc+0x96/0xb0 [ 46.154463][ T1089] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 46.154477][ T1089] key_create_or_update+0x47/0x70 [ 46.154490][ T1089] __se_sys_add_key+0x355/0x4b0 [ 46.154501][ T1089] ? __x64_sys_add_key+0xf0/0xf0 [ 46.154511][ T1089] ? __kasan_check_write+0x18/0x20 [ 46.154526][ T1089] ? fpregs_restore_userregs+0x11c/0x260 [ 46.154540][ T1089] __x64_sys_add_key+0xc3/0xf0 [ 46.154549][ T1089] x64_sys_call+0x195f/0x2ee0 [ 46.154560][ T1089] do_syscall_64+0x57/0xf0 [ 46.154570][ T1089] ? clear_bhb_loop+0x50/0xa0 [ 46.154584][ T1089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.154597][ T1089] RIP: 0033:0x7f2b7579fb19 [ 46.154607][ T1089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.154615][ T1089] RSP: 002b:00007f2b7664d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 46.154627][ T1089] RAX: ffffffffffffffda RBX: 00007f2b75a26090 RCX: 00007f2b7579fb19 [ 46.154635][ T1089] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 0000200000000340 [ 46.154642][ T1089] RBP: 00007f2b75837b70 R08: ffffffffffffffff R09: 0000000000000000 [ 46.154649][ T1089] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 46.154655][ T1089] R13: 00007f2b75a26128 R14: 00007f2b75a26090 R15: 00007ffc1b85b268 [ 46.154664][ T1089] [ 46.351143][ T9] usb 1-1: USB disconnect, device number 10 [ 46.358997][ T31] input: HID 045e:00f9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:00F9.0005/input/input5 [ 46.419015][ T385] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 46.433186][ T31] microsoft 0003:045E:00F9.0005: input,hidraw0: USB HID v0.00 Joystick [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 46.463024][ T385] usb 5-1: device descriptor read/8, error -71 [ 46.600007][ T385] usb 5-1: device descriptor read/8, error -71 [ 46.626719][ T31] usb 3-1: USB disconnect, device number 16 [ 46.839031][ T385] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 46.870732][ T385] usb 5-1: device descriptor read/8, error -71 [ 47.000053][ T385] usb 5-1: device descriptor read/8, error -71 [ 47.109109][ T385] usb usb5-port1: unable to enumerate USB device [ 47.179028][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 47.340089][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 47.348284][ T9] usb 6-1: config 0 has no interface number 0 [ 47.356390][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 47.365501][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.373565][ T9] usb 6-1: Product: syz [ 47.377744][ T9] usb 6-1: Manufacturer: syz [ 47.382402][ T9] usb 6-1: SerialNumber: syz [ 47.387673][ T9] usb 6-1: config 0 descriptor?? [ 47.388929][ T1109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 47.388999][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 47.550188][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.560604][ T31] usb 3-1: config 0 has no interfaces? [ 47.566101][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 47.575195][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.583897][ T31] usb 3-1: config 0 descriptor?? [ 47.658996][ T399] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 47.669067][ T1113] Invalid argument reading file caps for ./file0 [ 47.675686][ T1113] Invalid argument reading file caps for ./file0 [ 47.682715][ T1113] Invalid argument reading file caps for ./file0 [ 47.689415][ T1113] Invalid argument reading file caps for ./file0 [ 47.696127][ T1113] Invalid argument reading file caps for ./file0 [ 47.702907][ T1113] Invalid argument reading file caps for ./file0 [ 47.709626][ T1113] Invalid argument reading file caps for ./file0 [ 47.716275][ T1113] Invalid argument reading file caps for ./file0 [ 47.723000][ T1113] Invalid argument reading file caps for ./file0 [ 47.729730][ T1113] Invalid argument reading file caps for ./file0 [ 47.736432][ T1113] Invalid argument reading file caps for ./file0 [ 47.743126][ T1113] Invalid argument reading file caps for ./file0 [ 47.750124][ T1113] Invalid argument reading file caps for ./file0 [ 47.757216][ T1113] Invalid argument reading file caps for ./file0 [ 47.764114][ T1113] Invalid argument reading file caps for ./file0 [ 47.770868][ T1113] Invalid argument reading file caps for ./file0 [ 47.777541][ T1113] Invalid argument reading file caps for ./file0 [ 47.784251][ T1113] Invalid argument reading file caps for ./file0 [ 47.791949][ T1113] Invalid argument reading file caps for ./file0 [ 47.798798][ T1113] Invalid argument reading file caps for ./file0 [ 47.805761][ T1113] Invalid argument reading file caps for ./file0 [ 47.810289][ T399] usb 1-1: No LPM exit latency info found, disabling LPM. [ 47.812839][ T1113] Invalid argument reading file caps for ./file0 [ 47.825916][ T31] usb 3-1: USB disconnect, device number 17 [ 47.827138][ T1113] Invalid argument reading file caps for ./file0 [ 47.833305][ T399] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 47.838673][ T1113] Invalid argument reading file caps for ./file0 [ 47.849738][ T399] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 96, changing to 4 [ 47.857188][ T1113] Invalid argument reading file caps for ./file0 [ 47.866400][ T399] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 47.873948][ T1113] Invalid argument reading file caps for ./file0 [ 47.888974][ T1113] Invalid argument reading file caps for ./file0 [ 47.895642][ T1113] Invalid argument reading file caps for ./file0 [ 47.902414][ T1113] Invalid argument reading file caps for ./file0 [ 47.909125][ T1113] Invalid argument reading file caps for ./file0 [ 47.915804][ T1113] Invalid argument reading file caps for ./file0 [ 47.923132][ T1113] Invalid argument reading file caps for ./file0 [ 47.930028][ T1113] Invalid argument reading file caps for ./file0 [ 47.936793][ T1113] Invalid argument reading file caps for ./file0 [ 47.943689][ T1113] Invalid argument reading file caps for ./file0 [ 47.950456][ T1113] Invalid argument reading file caps for ./file0 [ 47.957133][ T1113] Invalid argument reading file caps for ./file0 [ 47.963860][ T1113] Invalid argument reading file caps for ./file0 [ 47.970528][ T1113] Invalid argument reading file caps for ./file0 [ 47.977180][ T1113] Invalid argument reading file caps for ./file0 [ 47.983884][ T1113] Invalid argument reading file caps for ./file0 [ 47.990627][ T1113] Invalid argument reading file caps for ./file0 [ 47.997360][ T1113] Invalid argument reading file caps for ./file0 [ 48.004118][ T1113] Invalid argument reading file caps for ./file0 [ 48.010937][ T1113] Invalid argument reading file caps for ./file0 [ 48.017707][ T1113] Invalid argument reading file caps for ./file0 [ 48.024434][ T1113] Invalid argument reading file caps for ./file0 [ 48.031239][ T1113] Invalid argument reading file caps for ./file0 [ 48.037864][ T1113] Invalid argument reading file caps for ./file0 [ 48.044594][ T1113] Invalid argument reading file caps for ./file0 [ 48.051260][ T1113] Invalid argument reading file caps for ./file0 [ 48.057872][ T1113] Invalid argument reading file caps for ./file0 [ 48.064572][ T1113] Invalid argument reading file caps for ./file0 [ 48.071355][ T1113] Invalid argument reading file caps for ./file0 [ 48.078078][ T1113] Invalid argument reading file caps for ./file0 [ 48.084817][ T1113] Invalid argument reading file caps for ./file0 [ 48.091530][ T1113] Invalid argument reading file caps for ./file0 [ 48.098201][ T1113] Invalid argument reading file caps for ./file0 [ 48.104902][ T1113] Invalid argument reading file caps for ./file0 [ 48.111581][ T1113] Invalid argument reading file caps for ./file0 [ 48.118258][ T1113] Invalid argument reading file caps for ./file0 [ 48.124957][ T1113] Invalid argument reading file caps for ./file0 [ 48.131636][ T1113] Invalid argument reading file caps for ./file0 [ 48.138261][ T1113] Invalid argument reading file caps for ./file0 [ 48.158033][ T1117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.142'. [ 48.232021][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 48.242220][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 48.252945][ T9] asix 6-1:0.251: probe with driver asix failed with error -71 [ 48.263420][ T9] usb 6-1: USB disconnect, device number 3 [ 48.273808][ T1119] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.282097][ T385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.289742][ T385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.297355][ T385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.304960][ T385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.312352][ T385] rtc rtc0: __rtc_set_alarm: err=-22 [ 48.418477][ T1128] capability: warning: `syz.2.145' uses 32-bit capabilities (legacy support in use) [ 48.658993][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 48.809055][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 48.815544][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.823977][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.834182][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.844420][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0159, bcdDevice= 0.40 [ 48.853523][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.861607][ T31] usb 3-1: Product: syz [ 48.865841][ T31] usb 3-1: Manufacturer: syz [ 48.870524][ T31] usb 3-1: SerialNumber: syz [ 48.874372][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 48.874387][ T36] audit: type=1400 audit(1793844713.240:294): avc: denied { listen } for pid=1133 comm="syz.5.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.900883][ T36] audit: type=1400 audit(1793844713.260:295): avc: denied { bind } for pid=1133 comm="syz.5.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.920979][ T36] audit: type=1400 audit(1793844713.270:296): avc: denied { accept } for pid=1133 comm="syz.5.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.030746][ T1140] usb usb5: usbfs: process 1140 (syz.4.148) did not claim interface 0 before use [ 49.040046][ T1141] usb usb5: usbfs: process 1141 (syz.4.148) did not claim interface 0 before use [ 49.096236][ T31] usb 3-1: USB disconnect, device number 18 [ 49.209016][ T36] audit: type=1400 audit(1793844713.570:297): avc: denied { connect } for pid=1146 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.403137][ T36] audit: type=1400 audit(1793844713.770:298): avc: denied { search } for pid=1149 comm="syz.4.151" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 49.430781][ T36] audit: type=1400 audit(1793844713.790:299): avc: denied { create } for pid=1149 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 49.727197][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.737526][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.746702][ T36] audit: type=1400 audit(1793844714.110:300): avc: denied { listen } for pid=1159 comm="syz.5.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.768342][ T36] audit: type=1400 audit(1793844714.130:301): avc: denied { accept } for pid=1159 comm="syz.5.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.796781][ T36] audit: type=1400 audit(1793844714.160:302): avc: denied { write } for pid=1165 comm="syz.2.156" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.958998][ T385] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 50.120344][ T385] usb 6-1: unable to get BOS descriptor or descriptor too short [ 50.128460][ T385] usb 6-1: not running at top speed; connect to a high speed hub [ 50.136977][ T385] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 50.149401][ T385] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 50.158437][ T385] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.166449][ T385] usb 6-1: Product: syz [ 50.170674][ T385] usb 6-1: Manufacturer: syz [ 50.175274][ T385] usb 6-1: SerialNumber: syz [ 50.341324][ T36] audit: type=1400 audit(1793844714.710:303): avc: denied { sqpoll } for pid=1183 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.386199][ T385] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.393731][ T385] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 50.402193][ T385] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 50.410201][ T385] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 50.429964][ T385] usb 6-1: USB disconnect, device number 4 [ 50.437688][ T399] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.448963][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.458306][ T399] usb 1-1: Product: 䦢閏❥侢ꅖ銟悧쌑䠕勊鐱禋⊀ꀽ邲렅뮒沯Ḛ胏召꬙循㛍劾ሽᣢʺ芜銗銷ﳪ阇ඊ䩀ೀܯ嶮짔섵陠퀞⡓陇狪껍갧ㅤٰ᪱㩁鯦ꮏ漡뾎筭忭䔶꡸崃堿鬠٥廴묐⚷宛큍䉰㥹璻냤胳↕ꖩ浖횛시덴୩淖맩瓭ᭊ [ 50.486060][ T399] usb 1-1: Manufacturer: 榷磂ᢓ仧훿ক⼋㬲높ⷛ伋왺鍠䷍򒣋ﱗ痰圈㜲㺫乬䑗 [ 50.500091][ T399] usb 1-1: can't set config #1, error -71 [ 50.507880][ T399] usb 1-1: USB disconnect, device number 11 [ 50.833518][ T1199] binder: Bad value for 'max' [ 50.879016][ T399] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.039003][ T399] usb 1-1: Using ep0 maxpacket: 32 [ 51.045191][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.056165][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.066031][ T399] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.075150][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.084060][ T399] usb 1-1: config 0 descriptor?? [ 51.089958][ T399] hub 1-1:0.0: USB hub found [ 51.494898][ T399] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 51.502817][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 51.511538][ T399] usbhid 1-1:0.0: can't add hid device: -71 [ 51.517490][ T399] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 51.539416][ T399] usb 1-1: USB disconnect, device number 12 [ 51.660081][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.671135][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.681768][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 51.692635][ T374] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 51.700313][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.709741][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.718565][ T31] usb 5-1: config 0 descriptor?? [ 51.858983][ T374] usb 3-1: Using ep0 maxpacket: 16 [ 51.865132][ T374] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.875308][ T374] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.886266][ T374] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.896128][ T374] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 51.909132][ T374] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.915941][ T374] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 51.925100][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.933748][ T374] usb 3-1: config 0 descriptor?? [ 51.968992][ T399] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 52.120153][ T399] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.133328][ T399] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 52.144035][ T399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.156767][ T399] usb 6-1: config 0 descriptor?? [ 52.344742][ T31] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 52.353521][ T374] hid (null): invalid report_count 515574103 [ 52.362540][ T31] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 52.375657][ T374] logitech-djreceiver 0003:046D:C53A.0007: invalid report_count 515574103 [ 52.376950][ T1251] kvm: pic: non byte write [ 52.388845][ T374] logitech-djreceiver 0003:046D:C53A.0007: item 0 4 1 9 parsing failed [ 52.398897][ T374] logitech-djreceiver 0003:046D:C53A.0007: logi_dj_probe: parse failed [ 52.410343][ T374] logitech-djreceiver 0003:046D:C53A.0007: probe with driver logitech-djreceiver failed with error -22 [ 52.486796][ T1260] mmap: syz.0.186 (1260) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.582974][ T1024] ------------[ cut here ]------------ [ 52.588486][ T1024] WARNING: CPU: 0 PID: 1024 at drivers/block/ublk_drv.c:1583 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 52.599184][ T1024] Modules linked in: [ 52.603129][ T1024] CPU: 0 UID: 0 PID: 1024 Comm: kworker/u8:12 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 52.614974][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.624157][ T31] usb 5-1: USB disconnect, device number 11 [ 52.625101][ T1024] Workqueue: iou_exit io_ring_exit_work [ 52.636922][ T1024] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 52.643348][ T1024] Code: 5d e9 13 4a 54 02 cc e8 ed 88 30 fe 0f 0b eb e3 e8 e4 88 30 fe 0f 0b eb da e8 db 88 30 fe 0f 0b e9 4d fe ff ff e8 cf 88 30 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 52.661536][ T399] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5005.0008/input/input8 [ 52.663109][ T1024] RSP: 0018:ffffc9000dc3f990 EFLAGS: 00010293 [ 52.680478][ T1024] RAX: ffffffff8358dd31 RBX: 1ffff1102225dc2d RCX: ffff88811f3fe2c0 [ 52.687387][ T399] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5005.0008/input/input9 [ 52.688457][ T1024] RDX: 0000000000000000 RSI: 00000000000000da RDI: 0000000000000104 [ 52.688475][ T1024] RBP: ffffc9000dc3f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 52.712228][ T399] kye 0003:0458:5005.0008: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.5-1/input0 [ 52.715767][ T1024] R10: 0000000000000000 R11: ffffffff8358cd10 R12: ffff88810dbd8000 [ 52.736003][ T1024] R13: ffff8881112ee140 R14: ffff888131fb4000 R15: ffff888131fb4010 [ 52.744036][ T1024] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 52.753075][ T1024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.759719][ T1024] CR2: 0000000000000000 CR3: 00000001166c0000 CR4: 00000000003526b0 [ 52.767713][ T1024] Call Trace: [ 52.771037][ T1024] [ 52.773993][ T1024] ublk_ch_uring_cmd+0x6f/0xa0 [ 52.778793][ T1024] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 52.784825][ T1024] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 52.790769][ T1024] ? __cfi_trace_event_raw_event_sched_switch+0x10/0x10 [ 52.797710][ T1024] ? io_uring_cancel_generic+0x6eb/0x6eb [ 52.803395][ T1024] ? tracing_record_taskinfo_sched_switch+0x78/0x390 [ 52.810144][ T1024] ? probe_sched_switch+0x67/0x90 [ 52.815186][ T1024] io_ring_exit_work+0x23d/0x83b [ 52.820159][ T1024] ? finish_task_switch+0x13d/0x8a0 [ 52.825375][ T1024] ? __cfi_io_ring_exit_work+0x10/0x10 [ 52.829004][ T374] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 52.830871][ T1024] ? kick_pool+0xb9/0x540 [ 52.842730][ T1024] process_scheduled_works+0x7f7/0x1060 [ 52.848275][ T1024] worker_thread+0xc99/0x13f0 [ 52.852986][ T1024] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 52.858715][ T1024] ? __kasan_check_read+0x15/0x20 [ 52.863757][ T1024] kthread+0x2c7/0x360 [ 52.867836][ T1024] ? __cfi_worker_thread+0x10/0x10 [ 52.872975][ T1024] ? __cfi_kthread+0x10/0x10 [ 52.877573][ T1024] ret_from_fork+0x64/0xa0 [ 52.882004][ T1024] ? __cfi_kthread+0x10/0x10 [ 52.886601][ T1024] ret_from_fork_asm+0x1a/0x30 [ 52.891434][ T1024] [ 52.894446][ T1024] ---[ end trace 0000000000000000 ]--- [ 52.908357][ T31] usb 6-1: USB disconnect, device number 5 [ 53.000115][ T374] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 53.008469][ T374] usb 1-1: config 1 has no interface number 0 [ 53.014909][ T374] usb 1-1: config 1 interface 105 has no altsetting 0 [ 53.023449][ T374] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 53.032838][ T374] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 53.041125][ T374] usb 1-1: Product: syz [ 53.045440][ T374] usb 1-1: Manufacturer: syz [ 53.050316][ T374] usb 1-1: SerialNumber: syz [ 53.307180][ T374] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 53.320398][ T374] usb 1-1: USB disconnect, device number 13 [ 54.462792][ T374] usb 3-1: USB disconnect, device number 19