last executing test programs: 3.81462624s ago: executing program 3 (id=37): r0 = syz_usb_connect$hid(0x5, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406d0488c0000000000001090224000100005000090400fe010300000009210400000122240009058103ff03ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0}}, 0x58) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="40062400000024113125417fa88240a93ace11364bad05adfc"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.654636323s ago: executing program 1 (id=41): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000200)='\x01', &(0x7f0000000040), &(0x7f0000000140)='\x00']}) read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) 3.650349863s ago: executing program 1 (id=42): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d00000000001000ac1414bb00000000"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) unshare(0x44040200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c) (async) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x3000002, @mcast2, 0x1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0xc7f, 0x1, 0xe, 0x8000, 0xfff]}, &(0x7f0000000200)=0x54) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000002c0)={"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"}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="66b8004000000f23d80f21f86635800000a00f23f8b833018ed03ec11200f0f7544fdbc267f33e67650f013e66b9030400000f32f20f320f01b00c000fc728"}], 0x1, 0x60, 0x0, 0xffffffac) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="66b8004000000f23d80f21f86635800000a00f23f8b833018ed03ec11200f0f7544fdbc267f33e67650f013e66b9030400000f32f20f320f01b00c000fc728"}], 0x1, 0x60, 0x0, 0xffffffac) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="920110015cea8820d21915001aec0102030109022d00010800900109044a0100020600090524"], 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x105100, 0x49) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000100)) 2.3153621s ago: executing program 1 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000b700000000000000000000000000000000c116ad67360100000001"], 0x110) 2.258555071s ago: executing program 1 (id=53): r0 = socket(0x2, 0x3, 0x67) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x1, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000180)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000040)="896796148df1789ae21c293cc9e2ec24c014ee2d", 0x14, 0x4008011, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d000100006002090400100503000100092100003601220500090581036877eea3c7837cab8638b6e716bca5a68004efe6bf636d34eec6dd8bba6584f1117c3a78861faf1aca359ba19c723d379d943730c96fb7311ff99982"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000c40)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="4001b2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.258295811s ago: executing program 3 (id=54): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0xc, 0x4, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nr_io\x00del=e,\x00']) 2.243891391s ago: executing program 3 (id=55): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) setfsgid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130705000000fcdbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000034e210602020020006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000fc32000000fe800000000000000000000000000033000000000000000000000000000000000c00000000000000080000000000000000000000000000000000000000000000000000000000000043070000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000043500000a000400000000000000000060001200726663343130362867636d4461657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x9, 0x8) r7 = epoll_create(0x6) epoll_wait(r7, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES16], 0x0) 1.902129256s ago: executing program 2 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101c00, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000580)) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) r4 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0xa25, 0x0, 0x401}, {0xdc2, 0x0, 0x4}]}) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000000c20400007fff000100"/24], 0x18) (async) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000080)={0x5129982, 0x7, 0x907, 0x6, 0x3}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000d80)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90064d9edba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0xfffffffffffffd88}], 0x1, 0x13, 0x0, 0x0) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000880)={0x2, 0x4e21, @broadcast}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) getsockopt$sock_int(r6, 0x1, 0x29, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.666625578s ago: executing program 2 (id=57): r0 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff01, 0x0) close_range(r1, r1, 0x2) 1.666065998s ago: executing program 2 (id=58): unshare(0x22020400) mount(0x0, 0x0, &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="29e91407f349666741e1f37f5fd32a078eb8dfa91db2052acefee02a527a878a68eb2b57d4b1301e7d027a3db6213affad014eb168060ef3a41c4849fa76f774f006af1152bb8c3676b340e5db964e0fe00e78e173386a25e88c45000b12049e4fe81f4fce50ee6a212b73f9d6e1b2abc6dc0b19c3fa8f24aecbe061504cb1c7ad310739317d989ce3", 0x89}], 0x1}, 0x10) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380)=@ng={0x4, 0xe, "5199"}, 0x4, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0xac) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) 1.56886905s ago: executing program 2 (id=59): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001f2858b08f905ffff29950102030109021b0001030690810904fff30144089d090000007567fca97934"], 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 1.226616264s ago: executing program 0 (id=61): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="9c9463523d2e4972a5", 0x9}}, 0x1) 1.225259854s ago: executing program 0 (id=62): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x3b, 0x8, [{0x4}, {0x5366cd9d, 0x8b}, {0x7ff, 0xfffffff8}, {0xfffff545, 0x8}, {0x23, 0x9}, {0xeb, 0x2}, {0xcbffc, 0xc}, {0xffff, 0x40}]}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @remote, 0x2}, 0x1c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x4000000a, 0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r7, 0x4080}, {r6, 0x4002}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x100000000040008}}}}}}}, 0x3e) shutdown(r3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x401}, 0x1c) sendto$packet(r11, 0x0, 0x0, 0x1, 0x0, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setuid(0xee01) getsockopt$ARPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x63, 0x0, &(0x7f0000000040)) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x1) 968.642327ms ago: executing program 3 (id=63): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fallocate(r0, 0x41, 0x4, 0x100100) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c003500000000000000000008001d800400328008002f"], 0x30}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x4, 0x9, 0x7e, 0x44233, 0x9, 0x80, 0x941, 0x80, 0x1005, 0x4, 0x704, 0x0, 0xfffffdfffffffffd], 0xb000, 0x127b40}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x94}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) fallocate(r0, 0x41, 0x4, 0x100100) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c003500000000000000000008001d800400328008002f"], 0x30}], 0x1}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x4, 0x9, 0x7e, 0x44233, 0x9, 0x80, 0x941, 0x80, 0x1005, 0x4, 0x704, 0x0, 0xfffffdfffffffffd], 0xb000, 0x127b40}) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x94}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 876.655958ms ago: executing program 3 (id=64): r0 = syz_open_dev$ublk_bdev(&(0x7f0000000000), 0x0, 0x582) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r1, &(0x7f0000000080)='\xfc]@/}\xa1\'$\x00', 0x2040, &(0x7f00000000c0)={@align=0x4, {0x2, 0xc4c, 0x1, 0xffff}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}, {[0x6, 0x1, 0x7, 0xa]}, 0x852, 0x44, &(0x7f0000000180)=""/68}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000280)={{r2}, 0x4, 0x1, 0x2}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000002c0)) fgetxattr(r1, &(0x7f0000000340)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000380)=""/246, 0xf6) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000004c0)={0xd5, 0x0, 0x1}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2d) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000540)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000005c0)={0x6, 0x7, 0x92ce, 0x0, 0x2}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000640)={{0x0, 0x538, 0x3, 0x98, 0x100, 0xffffffff, 0x8, 0x1, 0x2, 0x8001, 0x8, 0x7, 0x6, 0x3, 0x100000001}}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001640)={r4, 0x2}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x8001) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000002640)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000002680)={0x1, 0x5}, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f00000026c0), &(0x7f0000002700)=0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000002740)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000027c0)) readv(r3, &(0x7f0000002b00)=[{&(0x7f0000002800)=""/141, 0x8d}, {&(0x7f00000028c0)=""/27, 0x1b}, {&(0x7f0000002900)=""/210, 0xd2}, {&(0x7f0000002a00)=""/73, 0x49}, {&(0x7f0000002a80)=""/107, 0x6b}], 0x5) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000002bc0)={0x1, 0x1, 0x0, &(0x7f0000002b80)}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000002c00)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000002c40)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 798.87103ms ago: executing program 3 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xa, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000040)=0xfffffffa) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x3, 0x0, 0x1, r2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000005c0)={'filter\x00', 0x0, 0x4, 0xc4, [0x10001, 0xd362, 0x8, 0x101, 0x6b2b, 0x19f], 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f00000004c0)=""/196}, &(0x7f0000000640)=0x78) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x6, 0x3d, {0x3d, 0xe, "4a746a0b61bfb90f837fcd7a09c6d7180084d79ec731e940cb479fd4f37bb257d0caa2d82f81097e2accd7df7447ce4b4fffd5d56744f770122ef0"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x50, 0x3, 0x418}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xb, 0xcf, "aaf460fa7e07b5ff78b983ee2b7d1d2dd03a4c8e50d93de42698f8fec2836b61214c20432cb401b9ad8135d2d70bc6def07d8e01767b6aed161d8dffb9a3612cae45973c1b5e13bed4c5093a49d2dd72d4f2c5f6ef825af293454e538c022292d814f41074bb4f0fa8be4218633f4e3b5151e7dcc0bd94522a3c59a5a3f9547b6e895088913198710df758d30e529c6885c467b7ac5eb6c6f4a23d51f03fc3770b94c40e0a5806a394e58da58c7f7e273a57b8d56fecb40bba474bcd27992463cf056e85b15f61dac0129eef315ff2"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0xc0, 0x5, 0x1, "15"}, &(0x7f0000000400)={0x40, 0x5, 0x3, "cff18c"}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_REGS(r9, 0x8090ae81, &(0x7f00000001c0)) ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, &(0x7f0000000100)) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 638.114512ms ago: executing program 1 (id=66): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000540)={0x11, 0x12, 0x2, 0xb, 0x0, [@empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}, @local, @mcast1, @remote]}, 0x98) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, 0x1, 0xffffffff}}}, {{@arp={@loopback, @multicast2, 0xff000000, 0x0, 0xc, 0xc, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x269e33ad8a91b08e, 0x0, 0xff, 0xff]}}, 0x4, 0x6, 0x800, 0x0, 0xff13, 0x9, 'vxcan1\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x2d9}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @loopback, @rand_addr=0x64010101, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) sendto$inet6(r0, &(0x7f0000000300)="a6", 0xfffffffffffffff3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback}, 0x1c) recvfrom(r0, &(0x7f0000000380)=""/220, 0xdc, 0x101, &(0x7f0000000480)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) keyctl$negate(0xd, 0x0, 0x8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000100)=0x35) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="a1", 0x1}], 0x1) 612.950072ms ago: executing program 1 (id=67): r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000000)=0x800, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f0000000280)={@void, @void, @mpls={[{0x5}, {0x1, 0x0, 0x1}, {0x6}, {0xaeb}, {0x8662}], @llc={@snap={0xaa, 0x0, '~', "6ebf7d", 0x15, "69421deed94d6b89e9bad4e1a9043ad500193070ca28ab3563bbfa8a42d096fb9e4cb77b69513d0eba7942e97a6fe149310633ff3429b7f43b7b14eda844"}}}}, 0x5a) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="440f20c03503000000440f22c0660f3881a87bd20000b9800000c00f3235001000000f30b9e10900000f3266b835000f00d0660f38818c7900000000650fc75e002e0f22c266baf80cb81cb5d580ef66bafc0c66b8000066ef670f201a", 0x5d}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0xc, 0x2, {0x2, 0x22}}, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "c4"}, @local=@item_012={0x2, 0x2, 0x2, "5317"}]}}, 0x0}, 0x0) 250.487346ms ago: executing program 2 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="f7a1cad85cc10eea68fdee41cb0874a0bc6d6cb8b6057ce44708f94f251ad561c33ae4b4a5f3548734ab9d7a8f0f1e7dab1c009bda16940720a287d6fbae8389d584199d01a5f037880765144e99727c2bd7f71b6c5591ea76b7f830fa095a5650607e2f1f1fda77712e885173a67397b349c144c88c0519aaa4c1189526eaa1cac9e42596dd989eddb0fd744b1cc24fd210f1fef0f26866313c0bb644112a0593d3196eeab83427bd2bc48d942f16d1452c8482e0d21fd4ce2978986a9345690947d8daf5f11a727b861f0ff115b01f75c7039b1ab28c4b0b4a50f4a5d3cb50b37cc3772a5d70ace52960d2efb673478ec7667dec75e7cf65a205e66dff9ce66569871bcb9295787c664e78f2a4ad2f2293ae10d59ed51c5d689e049aaba21bbe594364ea773bd8bdd3c1f3a80436cb1e3ad4ae4f7d9f8da4c29e2b8dcc6127ecaf2c0ff40d1311a9cff6b0c0c505e0529426082d612bd255541d87def043ec0d5f1d18d43f5814ec8b0ec0bb87e6280cc989fef119af77cb5b881f993e5142c3fef6f11a331848b112365907118ee817098c189c42caa11ede0843a9391e94b0b2a0f5002a1a6cf95bfcc558a82290494af5a80fe8d69f061f5635d9d7ebc74c2347c4bd125850a1bf2593c56702131b52d813f9d8767808c3740f6736a6d2dd95a2140bf383c38bf6aa167048ea562a2da7797b0e5e7265f87c8809ed3b37a312f3e6609bb4cfc70d05e628f152e4e0f5d26e281fe22c97b3d48d24f1068d8160383d9003011896989b21533021afd08f74b3d4e9c8b200ee3dda9dc48c66229dff67b37afefcfd9e68686bf3c7ea83aa531756fc28c5b191685c89dbf3fc811d6c83c93b4b94d04395e88f5291ff597a18d41e5024a01ce5da33da91e9a963f07e2ff146a0e42268d6182eb7bcfd5fc49ad007ae3a39ea39e931078a9b646c30a68dbe8d7952a983f257dc1bb6496ba8ce0c4a91149124f18cf6ceb3ff72f0c87915c7e95f47cd8f70cadc4d6e9f100d681051c32c02f563d8bbbaaf09ccdcff776ff1917653290637c02b2a8678e2cf9492077359b4ff97adee279a4e7d2a449b9232b0361c9d2a8611b81fbe80642894d3b9807082f83fa66f7a6d5a5b2bb8cfc76042915eb3b7c2c6a3d4107c5484fc53ef1d4f0c62e68d41f41e81d52b93069f104595aedc61c02d90100c1b2e891aebdc9a4a639f0384d66807d92c540ac61ea9eb75a52bff095a01370b15902f2d42229f57a9fc6e483094316d4f599cde024c5929e274ded88338115c07e4389fcead91d445a6c19463e58fdea8ad8cd38ede1bbfe409e1eaa9f70c6aedf99338d4efe95fcfa6c70bd0471f08c3a989c1a24ca3a5011c32b2487eb5dc0b3c7ac76b2e76612ba355ae09092e90329e07fe82436a0bde152bbddfcc499720d5691813b2bc3395313149e0f94abe372b82c494bc22e05210fb5c06974a2a98c71fecab7a094f3c3bf45f5fe8a3e70ba4abed52e611d111421ed36bd77c8076ad04ccc89fd6ba9a2227c62afd49a6ee12f799074772e0db030dfdfd89de75ab03d30d81ad6fb7faa758e9c91acc48b02e21707b87906a1171a4eaacc7baecba212679ee3d8c180c58ff8c2d4b07c58c76c96cbe4623b8ee41988f9b60b6e03ddece50b3ec150c29d0b2b87548c5777fa4e39f5349ab8dd2e30e29ff56ac7a615300a3298b07e07175713e7385ea09ec0b651702103b7d2f123cb09a23d91f623ec15ddff27044c2e6f7668cd9675f3ffbbaa9b9b2cf5a8494796eddc1c52beff638d806307ea3f617fe5dc46a68ad04517cf7d6a02b0edd19248825fcaf932adff98f0f25d1b374449df22bba96bc1b604134b495da501cccacbe3cad5743f8180cbb3e151313c6751ad98e1ae0495d762473be591629e3a059e7f25483c289bda68aa07ba027e072b1fc2497d85ba0f09e654032e48c54242d69a1e9d94dacd8c3f529fcf71363511714641a22151773f0edd930cfebcbc41ac530015c841910721c5cdc95301bd5ced984bae18c0cd1e56e61f881c3e98b91df488654e1a608bfce7bed930f2cd668e5920730d8ce6c191f4c1500ac0c707fcc3faa90ff991b39a839a168e47a9e5b6d45cc902879ff1dc4a9391b53b8a0bf7a9e9d356e43779b89564a8614014528dc536d9f6ed97bcac7b722f062acd802a854d1d555a7978951e6c000fab5a524f4d04505733db3a19bdcb3cbd2cf37f6e571e096a1f99527ac632bf605f3727ab6c76a3d89e1ff178ffea921f129f233faa6d7b1011fc78f38257a8dac5b15e93ae13c12baed0c823b47c35bf337dccfb7936ec27023bfdc4ae0498121c849848d5245d0e4f158c515dc3acd0956812482ebe19b99c31b3fb98db0eb690df38b45c279a84b9611aa7a64cfbc713428d2cc6362308d8fdfdf671cd0b07c6b41745afa14cf040fc7783a560c58a580d1c014ad4cf3eafaf5e6075dd82e0d040cfdac17476f1c766288f7ee5d595626122ef7cdfbacce07484fd0b0bf4645236a5835c26415b4132617eed202d759f8106f2733ffe700c2d91ff452be0261d81d16752d3fdac1610dae8c61213e300df255be17a96467b1ff11818e4df78eb9c69d83bed93fd69db43ee05e32857a996de057778d962d7f19d81dbf7c4c1809274ff7650e85b5529cbe66d951896ac57f9e0f3790d03d9ae79c926118766038d4cffb72292bddd064f491dfba999eed7407c03aa988c9fcfe13042bef4e947f715bb29ccb2af80fe88ffe12a4d9cf0966db7e99463c32083d9b4bf504f69de3e524f7633bbed07d2e452099005d05a198ab1544d3617bddd2bda2374d1fbbf698e5252ecf610b5deae2bf382cc4fad21fd22dae74cc892de97fe5d3848d742cf5ecb2b1af88b8a0edb6b0c932822fd0b54aa1bc1745bbbcd2f592dc6611042f60f5012f64d8b66ddbf96b09536b0fd257e9561fbe3f74dd9ab5e72ec906b8ce685f9a8aa8d2de66cec3babaaaa0b02f79413c21f348824e383d952ae54787bfc24a34c416fb6fa849e08f3fb0dff9f00bcfa4c93b642c4ddceda526d94b3f0fe9746e543d040ef03b8378452deb46972fb940db08ca2472f81158bcd5bf8d11672bcf2b773269c9138d12ae4ce17786b26b028a4ecc4ac09e20b579a05035e4f3a1bcbbac012a3e8b78e20e51f82e79b39db76625abe2905a7825691b21254e2526fd5b15b752d3a3e799dd0457753d1b1bd106c96825269da36f702396d1ee5d6495a757bf629bd763e3b490f5c19dffc14f14e23c18988054d28179aeed71450f44b58b1c5483350d4b9f340b91d5ef224ed2ab53e3564438616f1cd004019e8fdbb5d66591a44487202ccbfc5f2d963777d926b69f747901f0c41a88ae04a136a85ba965270f97023e40972eea7e33ac17bd49c83d334e4212b7160781fde3a4fcc539fb684ec76409593165a88b18b9a5b60d01bd12c53dbba50d35b2771a1bdf67d8b1d86f8b424f59fbf1bfa25cc2a5b283a1314d8ffa64eb9fd5aad1110f041fe67f04f906020b15b48302d94c8ce99c11db1dd9fb85b1300249ae0fe091027c4684eb57df03b90e9955e660a7e3deb450e7a812892b99d6e798ceb89d31c2780db69bb61449f29f38c9dcfedce389c8a0362258e8aa2ed9a7c1f6248ad3b2ba46dda0eed2de7e4f861c5b54171706f92740d74499beef012abb14a472af2eacbd8e131c820833338feefdb2766a19089e564b6529d2fc4d21b7ae11dc1ef017c6dc6669a6fc31c17964296a1be6f2652d9ef80376a8066da18c3019e20c63859942334787b952e40e005da1bb2318da5fefe31618cd1dd8c190003234ea970b84d1bc77bc66edeb1e4f72d46b629e2da016460354d3c90f1b452683b958314dfc643170fd6ff355f76f79730c763b51fbd3242bd352411bff28f25716519adad795536306e7cc4960bc8a8a18abb6757457dda72c9f91ca76c52512d8d94ca7c8defa565f6ba31f89529b5806697b83172d6b1457647fd793d98597aadd0dc853181931aae0d8a88c45785d4a36b54214be020909f403cd75ac1ab669cf69da9c0edab449f0342d1d458c1b6edbd4544a61fe833f18da2191f484a50936cdb4e00239fff61e94994ce206c3f4193788971baee8e255eaa20689a8dff5383b769a3ae99738813adc5d172f7e3c31df0ed87d997880e8296eb41302fb3096d8ef40f193281e38f9e8d421be966aabc4bec224453679ac2b0873cc53130a13bd4893c825de059313603e06c35930d1157b163a977fb30f260a5c786c5d18093b754d6422ec8fdcab7280a7b40a11bb07a8dc94a719a0c28cd97f1334a4a6f8128f274dc768ea7cf88cbc356781d47d8cd049f92b8a50c45743f53324ac680a8962021b277117627a345a95b3d22394791fa371f215b65b11dbf13a5559ee4db2fcc7ff16e20dc2029d225c0dc19a4783bac2442164e0e2c71cc6ebfd294c3153e10ae51812cd32b812eb6df3608893fe6dea035b22aa24f83b5b43079196a6d37d65370981c661a571bf62ddc0f6fc3162b6727f83562883649871bca22d6add9c9deb991c81b41bb95db2c57966499f77458b57bcfa1b851a9f82339ab55ac38b9a298dec33aa6da46d9d376ffafd78ebe68bcc9c860c00b5ed6e1fa5669356afbe49821f3905f4350bba19278030e39b6430fb3ab9adb46c0381dae9f5a8c78c79990c63808eadaa29f1e7a0064425b3a56d511c3bb38b14d1e2b921da06cb89347a6a28f944194eb26fa73022a45c84352747fac3587e795c4cedc923be6e51b4f7d4f8fc82a572987bc46e04a5c22754a4a743819e8c7962486ee69be7ee4c99bc9b80cf8402506e61440393c7b46a0f76fa6f774c094beb70049d3d965b52860434050282cc8481d3a051c84be9e73c68411275ca2e1b1ed918468f60d7ce719127c8748b55a0a9258c2a7d02bf27fe9b6fd9355bd6acaee158cfaf33fd807a7f8a4ddb8fb5d2fda64527b4ece25aa7491170421d4d742e157c2ca735731325d023041dc0e95dcc1dec5cd745a22f2d57c203076273a9480eb54abe591f238df7591973b395898ec1174494ba6689b1bfcf8610ab9621777c05f2b3c38db87ccb4c57af4f14c91a953ceaf2ef81e1c3ccfa1d381f4f75c61ecdbf395e19a9e85813d7d76fcbff211157fe852b664be65b1175bb895c2485cc1f6b661734ea751b0d92bf7a2a49afcaca436328b73745c446eb4426c7f784920eac0e1d2ab68636e712d2f18063e19e422832b7b5ffc3781aeb61145ebdbfd62c8f9e7b47b1e7534a4ed5786851772b9bb28e131b991392f508aa3ba71b8ca74fd95cd0e4ca0d16ad3c0bed6dc119a142e062aea1e883d5a13472d3cb10150438dcce876a4892b0cad8d2e88f0cd60cd67329d9972a86a453792ca02581cf88bf1ac6b4e23f1ac67343b7231bd15c0e871c935dd165afe5b45435f9ce340cc15ccd9f574601b33eac02317e5003bfaeecffef2caf73444867d263b00402373a3ba27d499f402b45eb33222d555a2fe0464def1dfa7edae492cd848cdbcf80fbfa4ca74db7dfe4f3bf9104693385166c6c26af8bcada58c63748464b8efc2b69eba4492fb1ebb2afed3f305e757a662cc331506ba15fddcd31ab6b506bddb0ce6866e6a10869f79871166d0686f6398444313461a39b568f96cbec62f1ca99e61137997c5fb456ae13c58dac8c167dd0abe2a1103af34008862588153959311e3f7f77be0027ecb8dba4b73e534ce4b5550027b86fa6b1d4c33fa20004ade6ef5265d301a808bbad6cc8058241cfa75cb33c1c86dce0da89a0a89f8dcfcab2b4dd375091dd4ce4393290e3eacbcbda52e811ba82b2ed4ac4afef207ef27e193cdb94356340d444674c84934d0ed11f249612e71f78cc97ee49f29696d79e68e52a04a70f400e000000058019156a91983f8f070ed6699fb479d03d9b8aaa021c5f20ea3c4447a5a41de7975a14a8926753dd94cb1175b7accc265f7fd33c9933ebfc906a148ab8f1a5091a374f8cef07cded914ceceec5090e2ca0c92b0cc259efab48694b18b76322564617aba1956329756051b4a4789c9a58ec55a311a98b7cb9ffcbc7c12a271a581609781bf8744671372cbec49f07a33cb815fc18221045f47b6f6957f9fb2298b70a527bd982a2e079ef9abb9bb1b61703ac9dcd76f635100d0050eaf788c6ab960c4fe96bf49540e5f1796121856ea563aefbe0cf122eb69924ca459e149d81d7b08ac98af0af046ecd8dc67998e17925b8cfdd5adf3e5dc7ca5e92930b310015b26733acf001be627975f06d2a8833fe4e4e222bee65dfe64d0f8aa74cb7aa4e8d9f4959ef1b4f4c99b0898f0d7681979c5c4ce2cd09d026330b3cbba2e0ef53b5da031cdf81db1a8ae8ef6e4abe2995f606d088e953743a492cd1e2859b1295d44f41792f809f361344a3deefac68a1d414d60a800772a4113c665466dccab661cf0a3d6cbdcd24a12ba58f5cd386a982e628e960db2c133f96b65d101d11423f0c369c67427a561f0bc0e790c70ffaa9d5ec62eab93c5dd8a3f169ae7643c390c31b9e21d9d62148f490f27dad4ec0cf668107aa740cffe5186619fc2925e3bcfbdf962513566e08cb7b1962543f82db5d71b8dd56830616d54974e660e6fb678776390e1c5ae3a3aa381c33b3d18ee57c19e78a27514f40c55929a0ba6c1dca19287414ff2061993b594e573bd829410cb985348351b28c6ef4f0db9209cea66d7c7079dff1f09e00a32a049576852a5343e947e429eb5b125e236c503e42ab609868c8795a8211b2cc855b55d8ad207f515dd84f6adc7b5aea47fbd643c2b57da63d5d5e9b3eb586f413218c3c4a8a9d683e28694d37392ce3963465eebdf90fd630b74e6d79ff2e5cbf6b3dbeda6d4bcf8f8c128ae4a237c22409e60d26a64a6a4f8b60198d127d1c8e0407639867a26ca71bdbd8a1e8091fb80dd6c45839ea5ef54e1cab38beaab86dbd39e23be0d41df0db198fc5d860c5773bfa0b4ad45736f35abecf72a0d171fb2afe64939935fd6c6f1e295b338ea2c0e2df4adeddcee70e7dcb0d43c9a1e7df98451e1a18aae93ba2ca98452bded96eebd81388b30a97a93539f11e4053e88dd155b8c29e83c75baed6a7bc4e3193ae5c04aa28ec5e0033ea0546a2604b7f89ab9f4f8d91cd8c86cea75fa8929b5a183c06a4664c6ad84079279c038c04e9f7be7d6ee01f016073472e85cf49f24197f310dff2248dba48c00483d720289b2d545dfae4c3c997bf832b89b7a6d010e15a7ed2922aafc5fe0f2b499d284615b1d07187e23b7c55eb57fe052bc978d2826bcfbdc46872dfd964e8007acc8d987b8c947f463f62d4bfd17b2febcf7407c98bce7c2148167185325570aed09948553e4bf5b520c0ba21ac961ba816923b20726dc1f456b5d31f45453f714fc4811f6e31a019445ed6928389caf25c2fbbe408bd29db15f7410e4ff939a111a7f73bc22b5aefe624c374ffb93f08f48ac7ceedb8511f4914bdd67709b94a67874ec7622d928fa406458b5b3c558668b9741f4417bd19a6b942a085ee08f9e3eceab254142fe67206f00cc4cada297281f5c589c84c144d9c71d953391e24cfec1d452c6a960a466776012ce9efdeea7e4c087e93a0a6455c326038deae9b6a72566c37322cf3117b0c9d4e7a07c5f8128d118714343d5fe1bab349f33cbbb1be8cf30ea7194762d1b00843b12039a7af24cce07a51795615928b0e3ef42f192b33730649a9e96d17a5fd98bc3912e593bd513c4c729bff8b104581c6232d2632204027d5062997c35ceefa1ee6277a6f7d8ef5328ada9d149d781debf909b033e81d28debe1202d61e3336ce762f471d181d33cf2be0da6586f1cc514beb5447812cf4a164edd9094831a7ac0c705e8c14c35668801e284f990c656232d6c490f5e56a1e3434d7bc5bd68a679ce3f009af2545b6e81b7c5a0ec61b418aea9815f820b0faf56d56639a794ad6938268479b6107738c4f296907f8a7cd203173d1e2000798874137c48a9272dc99795de9bc86c5eb7e945402e1cfc385adf3558004ee9a3dd51c19710cc689406242dd792adb5e1542edd516b798f59b002a0d8df1d9dcd3993216b529e25a6258fb448dc3c32ead185476684486f2eda6f8b58b0fe49a6e9b769cc0d7fa99b3b513ea09227578c93dd96225a0de1a91fca4de2846990d411f21b91a72998c8fab4a2c5d7e2c8396f0013ec5b44e7742721585f85f8e46a1a02866c7723312b4b25a28b66248c650ce351e984c205bdc4ee333a2ca8e3e48ce059f44dea4bf45dbcff81d02e5568208b37eafde84bedca64329fc7f6c61d4ff56eb702969455cf5a42bfca7dd663888aed2f69e5cfaf4099e894b0f65e7c7ebb67168ef10926a2d2276dea6a2c20b7f4df68151a015f016bfa79314db0b42efb099a73b00f39272ca3981eb9af9e0a54c1e465bfca573bfae4a5b0ccb81a471744e0ef566345f0d569644c01dcced4fa5d0652f31a75274e60dcca1f7008d8ed207c05c8041a3ac33ecc333282cfc3f4c7fdf71f7334063dae0ca8374eecedfcf657163950d34bd3017e572ef837a59c51f52d6acab7222699c69a9f0c883210147c08bd77c9d749255acce65b7dd64fc1661e6595b8d232fe91ee8ec22caf4235acdc70fa9f8f0eb5b518dc497ee7cb622c7239db7c21cfa822eec78159e9f20d1b17e0a6598422c35f54dca57b61c8182e0118e571e663dd5d2a9b34dc5c49d71285f1e7b2244a2abefae423cac57e19bdc862344692789f901464385b3152e723c3739bb914a2586c2d59fc5a357e8d149a2316e49f60d4483587e1d622740ad25bae74ccfddc7a6f2292cfcf575537555a77ca76b2498e8092059972ad70c2c9550adc672347e339cc2954b3f4de3d5e9901f06ef9701b3f0b2cd66021959be8ca6fb38968340530ba5e28931bcb4e61d0959300d5ecabe09bf4ec31cad6f7b4834310e046d67f65f2dd79de0d898698b477dc52395291d659168d4535401bcee5b7f0c11a00d380b9461b65fa45648faabe1a1a69cce14a2ea9a06b70f35d09561b02d630c4857805b6f0f059fdee58500f54cd7aec7249484946cf8df8348f413234309788ff4381a6f041cfae335be49bafac9067845767ded8b0ab2f726798146691f381fa6fbe79dc58e6794dd51c1f61661d57321052e3774c4f94358fab3e78e63ee2109ec61bfb6a611f9364c82b4dc566d6713b65811f4e8abe7bc646539e7d58e9b778fabe2651677ce8d7d36659edc31db124777ced73bf0e78b11ea83b279bad0839f8babae0b4e37a019884b6ef845cd9c60d62786faa60ac2dc833db93e64f50e7e268b3c12c27ed4aa79dc8383ea7b3397572e652bb3e059c50c8921715682ed508dbe6414a0d3e02ee58fc06fec81d8bb808330952f09c8ac8fb8155ed6b4b386926e155f7c2f88a7420c2250cca8b2017023f23106e79f715d7d93c1690474f2fa3c72d1f4f6e42f4d6fb1673861aedd253d3af83f54b0fdcdf2b2ebb461c9d23a15db07c0d5be49173808851a3a4e9273fc3b65ae38455c5b268f588d0a696fd086ed91467c2369890a05f4a1c3f3b2a0ae847b448222956afdd720f91956c2f994bd4cc946c44388a9a20e5e879dbed231967b44ea0ac4b7f1f7e901b79de7e73d712f23c1312d4259cda886ff54db1da90dd64bfb5d5a00d41b4bbfebc0c68dd31cfc4e1b6069582ba9ddd64cfe2fd8beb6141eee1325583f4eb8011d17f62da36db30f88c9e9e51379b9730a73a01ef3c07d6e5e5f86291e2543b03f8c7e9d09b5ed4a1626d206c0c6742995bd73d5558ac3cff877bdd8511090b7c208dfd90e03cbc97072e6ef23a129eb8769055bcf8fc7d2b1e43fae5a815174706d423edb9dde4f884f5bde6f994fbac904b46d40cceb3d916a1ff9449c15ce71bbaa028201db4493be4652a8fd3d20b29fee043c7ecc148e71378dcc147e8395fc0e22a5cb7f5e7a416b5065c7dd983e8fd4af849e6f43efc0458af1c9db2e0582845b97bffd0f223bccbbcd53cd5c23bdcc1e5c016b737bbce414d1bcbbc990ecb59ad44f1ed08147df0edd2a88b2d3a218d781bbc7e40b80c6a33f0137794edbaa123dd42de3ac6c4a8af71c809313658ec405df5d9b9a99b46d978c338af6a9fe4bcdfe0eb50e77e8d298166a114c9f62a523045bf80df2aa0fbffe2a693813e4fe12684c41a3a3f19a5cd4fb0beb5a600d3e3ab7ab23367f701094f7abd9d8f7c3bfe32f9ab3e0c9ce6fca6dd34d2bedc66f71cce81835df14f4cd70046e50962283a0491ac539ad2c1c9468bd80732ccdf5b408c2e3041bc3e569674294a5992a760d73c2f9bebfa73e334cdf3272214c5c9e0bd30f770f5e02507b3f6210c9e98a8b5f440239d77e9376e4167d98f68097fd6e36557e97f24a26e1d7c6928d520ced48e897e545ef1ac65e7fbd438c641f5094a1f217b2dde5fe24a209969bad94cd850ea84e086f454e5fbf160caddca8b91917ee71233b82e01e3731fb4dcb3635021fccc7dc0d3a401333ded1c7a859a34909126878bcede3d656d2122c35c120537758774bd5b99dd5776867eca2b527873b55c8fb30e914d61923e188037af2493f750c1b92e9ca08021e79f7ea833d518efa390ae8f4b27aad5fcbc9f77b5cbce30eea3b9fdb69f705c1e126ecac466f41918212fe3dac4b2ac65f4c3ad1c07e7835caf33f650f54efab990068b93de025a7396d192990a8bd4c74b1fde93aed93226b567ef7520a4543167e0ab676c9f1af22331b1aa84455d1279b7982724101f49bd03ff087469377b497c9d1d902d759cf721204984af37ccb65322f9eaf0ee35e6717a4c3976231dd45204c041075cfeed8fa39217d65419a67459ba5c83b52ba2cf18f4f3d41f5fd1aa9cda2a97edbb1dcadcaf609a31f946c9bf77873cb51f27755e77696a9f8ebeaaef089045ef71e1a8bd6f116235212792a76e20b33a79f53f34d69a8e97eb2a68de2d88de3d8297ab31f1d54feac1dc5c4e992f35f05e20ca2fe5ec4c74dc170edfbd755c9d5b9fafb9d05d32f19a6e03855f98713e4821c6ed238b83685266c8b75886ba1afb43a04d45dba2dc7a25dc04ce9d893057107dce39663f6e93a3b206fb62306c801804b4c68567895da3801abff908e2a5c4e4fb08366c5c9fdf5902d8a352406105fb6a857cadb3910de0dd7449cfb951877b04650777c669e17c1d03b72be85f2bc6a682002f973fbc6d0acab4813aea66d6b701d37fafe381bff420adb1dbaeaac7618702703d482502697168a406421a1f6732876c7e6acf98ceb8b1a66e204cf5d530b189f3f94987e7c7698acac008e60d936b02d2f00ee22e390f9f9a4cbdbd6d36ba1d9e5cc7eddc3e5f85aaab437b4f3335133d074c51f67339c05c87d9ff986d5b596da7af7320d4e4ead41208eb398737d3b9605489560dd34dddbe0b30583a852dc180d29e77dbec7e1aeca4724cedc5fd9a7bf8de1fd9d77d2cd1059fc8f5e43c2c2b331b67d2b9932f004a15bb4436d1859bbc600", 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xfffffffffffffff5, 0x2, {0x7, 0x29, 0x1, 0x6a546493, 0x681d, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2000000, 0x5}}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 249.993316ms ago: executing program 0 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00010026bc0000000000000000000000000000000004"], 0x40}}, 0x90) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@arm64={0xfa, 0xe, 0x4, '\x00', 0x800}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r8, 0x400, 0x3) (async) fcntl$setlease(r8, 0x400, 0x3) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x38) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0x38) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000640), 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="743be11dd882551f7acf337d8cc1fd269672616e733d66642c7266646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=', @ANYRESDEC=r9, @ANYBLOB=',dfltuid=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000640), 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="743be11dd882551f7acf337d8cc1fd269672616e733d66642c7266646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=', @ANYRESDEC=r9, @ANYBLOB=',dfltuid=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) 212.476917ms ago: executing program 2 (id=70): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280080018a9618abc7a3ebe7d1f634daf079f14b00000000000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3c) io_setup(0x800, &(0x7f0000000440)=0x0) r4 = eventfd(0x0) io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x4f}]) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x1, 0x31, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x65, 0x0}, {0x0, 0x0}]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 120.515939ms ago: executing program 0 (id=71): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000887) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001c002100000000000000000007"], 0x34}}, 0x0) (async) pidfd_send_signal(r3, 0x33, &(0x7f0000000000)={0x33, 0x4, 0x2}, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) (async) r5 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000000)='gid', 0x0, r5) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) (async) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x3, 0x2, 0x2, 0x3f, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r6 = socket(0xa, 0x3, 0x3a) (async) timer_create(0x7, &(0x7f0000000440)={0x0, 0x36, 0x1, @thr={&(0x7f0000000340)="dacdd0e2ffcd83df454427417e350ddb77258dd84d8391d49ca74fcd80c6d08ae5ce097fc0e2fb79b02852157d13053d3e17420ad9efa04b365fc7472843c3ff3d06b3544e86fe99a7457444db2c13aedfa05b1128202813283bc9aaa4009c34248b21417c94d7d6741ce7912170b2d78844b2f62c2b0c1432024f1a9e", &(0x7f00000003c0)="76e36674e32d26a04bbf3ffb4fa3ca3c9a25f78a61cf52cfdd375d08f1d06e8d91b3703289de341d478d77237a3b355d18cdc39866feea3b105f16f68d2e6b3532bb4a54441c340da1bee3"}}, &(0x7f0000000480)=0x0) timer_delete(r7) (async) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, 0x0, 0xb8) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 38.589159ms ago: executing program 0 (id=72): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kheaders.tar.xz', 0x141000, 0x14) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x40000) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8.%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000440)={'security\x00', 0xe8, "fcd3b4bf5f50df25e6535a870decfe3885492de637cfeaa88f931b619de91fc559b3d9177d7c3e43ba23b69cf40e12df0a8c662a0592021c4b2b113f0b7f2a9fd5b71c72ceb21efb604842ff29601c3aa28c970b8cb16e44e3e32e3e7c7a0cb90fb6f7001a9fb85264f5a5047a0e66823c39ed29fd10de706579bfe14aa9ad28c1bd952d28a43cd0c3d98b338248607a7f0d65ca98c7d3cb35d54b22d4fffcf9003ddca4dc27b9b4fade104e8d1d1ea79b36924e071d1deccb5ee3aa26b08c49770ab741252f3ea52c82a49f32d1f553093000e199b91f879d087d72358e1fbfb2128080ddfd1443"}, &(0x7f0000000580)=0x10c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 0s ago: executing program 0 (id=73): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) fcntl$setstatus(r1, 0x4, 0x800) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_ublk_setup_queues(r0, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffd, 0x20000}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r0, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffd, 0x20000}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 22.475611][ T36] audit: type=1400 audit(1778394993.600:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.479232][ T287] cgroup: Unknown subsys name 'net' [ 22.498296][ T36] audit: type=1400 audit(1778394993.600:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.525782][ T36] audit: type=1400 audit(1778394993.640:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.526192][ T287] cgroup: Unknown subsys name 'devices' [ 22.712208][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.717926][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.894580][ T36] audit: type=1400 audit(1778394994.020:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.917974][ T36] audit: type=1400 audit(1778394994.020:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.942727][ T36] audit: type=1400 audit(1778394994.020:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.972695][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.981584][ T36] audit: type=1400 audit(1778394994.110:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.007030][ T36] audit: type=1400 audit(1778394994.110:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.056719][ T36] audit: type=1400 audit(1778394994.180:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.057960][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.082255][ T36] audit: type=1400 audit(1778394994.180:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.482735][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.489822][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.497045][ T296] bridge_slave_0: entered allmulticast mode [ 24.503399][ T296] bridge_slave_0: entered promiscuous mode [ 24.512267][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.519300][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.526706][ T295] bridge_slave_0: entered allmulticast mode [ 24.533112][ T295] bridge_slave_0: entered promiscuous mode [ 24.539364][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.546448][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.553818][ T296] bridge_slave_1: entered allmulticast mode [ 24.560354][ T296] bridge_slave_1: entered promiscuous mode [ 24.570948][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.578000][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.585236][ T295] bridge_slave_1: entered allmulticast mode [ 24.591547][ T295] bridge_slave_1: entered promiscuous mode [ 24.600536][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.607582][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.614795][ T294] bridge_slave_0: entered allmulticast mode [ 24.621099][ T294] bridge_slave_0: entered promiscuous mode [ 24.630027][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.637134][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.644213][ T294] bridge_slave_1: entered allmulticast mode [ 24.650519][ T294] bridge_slave_1: entered promiscuous mode [ 24.698056][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.705196][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.712347][ T297] bridge_slave_0: entered allmulticast mode [ 24.718558][ T297] bridge_slave_0: entered promiscuous mode [ 24.727892][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.734978][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.742142][ T297] bridge_slave_1: entered allmulticast mode [ 24.748398][ T297] bridge_slave_1: entered promiscuous mode [ 24.881105][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.888163][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.895509][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.902572][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.922349][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.929513][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.936813][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.943880][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.956402][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.963497][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.970872][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.977905][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.997444][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.004516][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.011819][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.018875][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.049795][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.057144][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.065428][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.072775][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.079951][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.087223][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.094436][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.102104][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.117991][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.125073][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.138341][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.145451][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.166167][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.173254][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.180858][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.187885][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.197483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.204561][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.215280][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.222372][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.250835][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.257909][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.266030][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.273106][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.310831][ T294] veth0_vlan: entered promiscuous mode [ 25.330012][ T295] veth0_vlan: entered promiscuous mode [ 25.344135][ T297] veth0_vlan: entered promiscuous mode [ 25.359106][ T295] veth1_macvtap: entered promiscuous mode [ 25.367394][ T294] veth1_macvtap: entered promiscuous mode [ 25.375225][ T296] veth0_vlan: entered promiscuous mode [ 25.389353][ T297] veth1_macvtap: entered promiscuous mode [ 25.416484][ T296] veth1_macvtap: entered promiscuous mode [ 25.448266][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.522604][ T320] hub 8-0:1.0: USB hub found [ 25.537018][ T317] ======================================================= [ 25.537018][ T317] WARNING: The mand mount option has been deprecated and [ 25.537018][ T317] and is ignored by this kernel. Remove the mand [ 25.537018][ T317] option from the mount to silence this warning. [ 25.537018][ T317] ======================================================= [ 25.576700][ T320] hub 8-0:1.0: 1 port detected [ 25.610763][ T317] fuse: Bad value for 'fd' [ 25.800190][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.880402][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.961387][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.971556][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 25.980602][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 25.995195][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 26.004301][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.012407][ T31] usb 2-1: Product: syz [ 26.016618][ T31] usb 2-1: Manufacturer: syz [ 26.021586][ T31] usb 2-1: SerialNumber: syz [ 26.027317][ T31] usb 2-1: config 0 descriptor?? [ 26.032341][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 26.038639][ T310] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 26.048603][ T31] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 26.055127][ T31] usb 2-1: No valid video chain found. [ 26.065224][ T310] usb 1-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 26.074402][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.082555][ T310] usb 1-1: Product: syz [ 26.086773][ T310] usb 1-1: Manufacturer: syz [ 26.091420][ T310] usb 1-1: SerialNumber: syz [ 26.096954][ T334] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 26.130181][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.290881][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.305290][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 26.321506][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.343603][ T310] usb 1-1: MIDIStreaming interface descriptor not found [ 26.371642][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 26.376268][ T310] usb 1-1: USB disconnect, device number 2 [ 26.383895][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.394964][ T10] usb 3-1: Product: syz [ 26.399305][ T10] usb 3-1: Manufacturer: syz [ 26.410126][ T10] usb 3-1: SerialNumber: syz [ 26.415521][ T10] usb 3-1: config 0 descriptor?? [ 26.418296][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.484295][ T31] usb 2-1: USB disconnect, device number 2 [ 26.841988][ T31] usb 3-1: USB disconnect, device number 2 [ 26.926638][ T379] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.310170][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.410214][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.436604][ T408] overlayfs: failed to resolve './file1:/': -2 [ 27.442867][ T10] usb 2-1: device descriptor read/64, error -71 [ 27.449724][ T408] incfs: Options parsing error. -22 [ 27.451180][ T410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.30'. [ 27.455761][ T408] incfs: mount failed -22 [ 27.571382][ T31] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 27.580131][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.590352][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 27.599324][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.612310][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.621508][ T31] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 27.630715][ T31] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 27.638749][ T31] usb 1-1: Product: syz [ 27.643132][ T31] usb 1-1: Manufacturer: syz [ 27.649696][ T31] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 27.680187][ T10] usb 2-1: device descriptor read/64, error -71 [ 27.770168][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 27.776507][ T311] usb 3-1: config 1 has an invalid interface number: 225 but max is 2 [ 27.785045][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.795959][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.805053][ T311] usb 3-1: config 1 has no interface number 0 [ 27.812882][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.822168][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.830809][ T311] usb 3-1: Product: syz [ 27.835092][ T311] usb 3-1: Manufacturer: syz [ 27.839717][ T311] usb 3-1: SerialNumber: syz [ 27.853445][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.864196][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.872905][ T31] usb 1-1: USB disconnect, device number 3 [ 27.920151][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.053532][ T311] usb 3-1: 225:2 : does not exist [ 28.058800][ T311] usb 3-1: unit 9 not found! [ 28.065394][ T311] usb 3-1: 4:225: cannot get min/max values for control 9 (id 4) [ 28.070304][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.078281][ T311] usb 3-1: 4:225: cannot get min/max values for control 10 (id 4) [ 28.091107][ T311] usb 3-1: USB disconnect, device number 3 [ 28.100071][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.225/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.230161][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.320170][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.380153][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 28.386474][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.397498][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.410248][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.419499][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.420161][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 28.420203][ T36] audit: type=1400 audit(1778394999.540:165): avc: denied { read } for pid=415 comm="syz.0.32" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.454610][ T10] usb usb2-port1: attempt power cycle [ 28.455465][ T310] usb 4-1: config 0 descriptor?? [ 28.461556][ T36] audit: type=1400 audit(1778394999.590:166): avc: denied { open } for pid=415 comm="syz.0.32" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.477699][ T310] hub 4-1:0.0: USB hub found [ 28.505108][ T36] audit: type=1400 audit(1778394999.620:167): avc: denied { create } for pid=415 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.524894][ T36] audit: type=1400 audit(1778394999.620:168): avc: denied { getopt } for pid=415 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.547814][ T419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=419 comm=syz.0.33 [ 28.561650][ T36] audit: type=1400 audit(1778394999.690:169): avc: denied { map } for pid=418 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.587800][ T36] audit: type=1400 audit(1778394999.690:170): avc: denied { read write } for pid=418 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.678199][ T310] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 28.810231][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.820172][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.831256][ T10] usb 2-1: device descriptor read/8, error -71 [ 28.887202][ T36] audit: type=1400 audit(1778395000.010:171): avc: denied { unlink } for pid=426 comm="syz.2.36" name="#1" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.887590][ T427] overlayfs: conflicting lowerdir path [ 28.917329][ T36] audit: type=1400 audit(1778395000.040:172): avc: denied { nlmsg_read } for pid=426 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.917336][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 28.947686][ T36] audit: type=1400 audit(1778395000.080:173): avc: denied { read write } for pid=426 comm="syz.2.36" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.972185][ T36] audit: type=1400 audit(1778395000.080:174): avc: denied { open } for pid=426 comm="syz.2.36" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.997564][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.005032][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 29.014205][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.022292][ T9] usb 1-1: Product: syz [ 29.026599][ T9] usb 1-1: Manufacturer: syz [ 29.031253][ T9] usb 1-1: SerialNumber: syz [ 29.089594][ T310] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 29.105044][ T310] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 29.230180][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.250153][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.271054][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.380558][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 29.386925][ T31] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 29.397185][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.407867][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.412162][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.417016][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.431203][ T31] usb 3-1: Product: syz [ 29.435411][ T31] usb 3-1: Manufacturer: syz [ 29.440154][ T31] usb 3-1: SerialNumber: syz [ 29.440792][ T429] usb 4-1: USB disconnect, device number 2 [ 29.477022][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 29.483302][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 29.494140][ T9] usb 1-1: USB disconnect, device number 4 [ 29.530837][ T10] usb usb2-port1: unable to enumerate USB device [ 29.652786][ T31] usb 3-1: 0:2 : does not exist [ 29.657822][ T31] usb 3-1: unit 9 not found! [ 29.664370][ T31] usb 3-1: USB disconnect, device number 4 [ 29.673477][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.991066][ T437] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 30.067440][ T443] netlink: 17 bytes leftover after parsing attributes in process `syz.0.40'. [ 30.080206][ T443] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 30.115087][ T445] process 'syz.1.41' launched './file0' with NULL argv: empty string added [ 30.180613][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.189362][ T450] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 30.351187][ T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 30.362711][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.369325][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 30.378421][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.387219][ T9] usb 4-1: config 0 descriptor?? [ 30.460193][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 30.610134][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 30.616487][ T10] usb 2-1: config 8 has an invalid interface number: 74 but max is 0 [ 30.625016][ T10] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 30.635301][ T10] usb 2-1: config 8 has no interface number 0 [ 30.641473][ T10] usb 2-1: config 8 interface 74 has no altsetting 0 [ 30.649533][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=0015, bcdDevice=ec.1a [ 30.658674][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.667525][ T10] usb 2-1: Product: syz [ 30.671840][ T10] usb 2-1: Manufacturer: syz [ 30.676550][ T10] usb 2-1: SerialNumber: syz [ 30.703488][ T453] mmap: syz.2.44 (453): VmData 29073408 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 30.797110][ T9] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x1 [ 30.805756][ T9] logitech-hidpp-device 0003:046D:C088.0002: unexpected long global item [ 30.814687][ T9] logitech-hidpp-device 0003:046D:C088.0002: hidpp_probe:parse failed [ 30.824069][ T9] logitech-hidpp-device 0003:046D:C088.0002: probe with driver logitech-hidpp-device failed with error -22 [ 30.885896][ T10] usb 2-1: bad CDC descriptors [ 30.902179][ T10] usb 2-1: USB disconnect, device number 7 [ 31.002407][ T31] usb 4-1: USB disconnect, device number 3 [ 31.010462][ T468] netlink: 80 bytes leftover after parsing attributes in process `syz.0.49'. [ 31.143448][ T471] batadv_slave_1: entered promiscuous mode [ 31.150799][ T471] tipc: Started in network mode [ 31.155722][ T471] tipc: Node identity 84e, cluster identity 4711 [ 31.162128][ T471] tipc: Node number set to 2126 [ 31.168690][ T470] batadv_slave_1: left promiscuous mode [ 31.191922][ T474] incfs: Error accessing: ./file0. [ 31.197177][ T474] incfs: mount failed -20 [ 31.202072][ T474] incfs: Error accessing: ./file0. [ 31.207283][ T474] incfs: mount failed -20 [ 31.212444][ T474] capability: warning: `syz.0.51' uses 32-bit capabilities (legacy support in use) [ 31.497497][ T479] raw_sendmsg: syz.1.53 forgot to set AF_INET. Fix it! [ 31.512368][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.534265][ T481] tmpfs: Unknown parameter 'nr_io' [ 31.556917][ T483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 31.670341][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 31.676606][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 31.686872][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.697138][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.706247][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.714354][ T10] usb 1-1: Product: syz [ 31.718528][ T10] usb 1-1: Manufacturer: syz [ 31.723156][ T10] usb 1-1: SerialNumber: syz [ 31.740154][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 31.800150][ T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 31.890254][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 31.898688][ T310] usb 2-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 31.909314][ T310] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 31.920871][ T310] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 26472, setting to 1024 [ 31.936257][ T310] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 31.941033][ T10] usb 1-1: 0:2 : does not exist [ 31.950309][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.954720][ T10] usb 1-1: unit 9 not found! [ 31.961346][ T310] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 31.972106][ T10] usb 1-1: USB disconnect, device number 5 [ 31.980268][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.991375][ T9] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 32.003583][ T310] usb 2-1: config 0 descriptor?? [ 32.009194][ T479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 32.017867][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.020231][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 32.050905][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 32.060857][ T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 32.069915][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.279937][ T9] usb 4-1: string descriptor 0 read error: -71 [ 32.288442][ T9] hub 4-1:32.0: USB hub found [ 32.294370][ T9] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 32.320683][ T9] usb 4-1: USB disconnect, device number 4 [ 32.437127][ T310] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.445321][ T310] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.453249][ T310] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.461259][ T310] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.469323][ T310] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.478764][ T310] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 32.480993][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.491375][ T310] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 32.638490][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 32.648490][ T310] usb 2-1: USB disconnect, device number 8 [ 32.670176][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 32.676435][ T10] usb 3-1: config 3 has an invalid interface number: 255 but max is 0 [ 32.684702][ T10] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 32.694882][ T10] usb 3-1: config 3 has no interface number 0 [ 32.701033][ T10] usb 3-1: config 3 interface 255 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.715644][ T10] usb 3-1: config 3 interface 255 has no altsetting 0 [ 32.724070][ T10] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 32.733170][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.741341][ T10] usb 3-1: Product: syz [ 32.745658][ T10] usb 3-1: Manufacturer: syz [ 32.750357][ T10] usb 3-1: SerialNumber: syz [ 32.852579][ T511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.957892][ T10] usbserial_generic 3-1:3.255: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 32.969413][ T10] usbserial_generic 3-1:3.255: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 32.980581][ T10] usbserial_generic 3-1:3.255: device has no bulk endpoints [ 32.988880][ T10] usb 3-1: USB disconnect, device number 5 [ 33.164215][ T522] x_tables: duplicate underflow at hook 2 [ 33.230166][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.380164][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 33.386521][ T310] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 33.394970][ T310] usb 4-1: config 179 has no interface number 0 [ 33.401389][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 33.412514][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 33.423960][ T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 33.431520][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 33.442884][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 33.454375][ T310] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 33.467884][ T310] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 33.476996][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.486639][ T519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.587830][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 33.587884][ T36] audit: type=1400 audit(1778395004.710:203): avc: denied { read write } for pid=532 comm="syz.2.70" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.618439][ T36] audit: type=1400 audit(1778395004.710:204): avc: denied { open } for pid=532 comm="syz.2.70" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.642219][ T36] audit: type=1400 audit(1778395004.710:205): avc: denied { ioctl } for pid=532 comm="syz.2.70" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.673747][ T31] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.684840][ T31] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.694918][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.704791][ T31] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 33.714444][ T519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.727295][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.730893][ T519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.744228][ T31] usb 2-1: config 0 descriptor?? [ 33.798837][ T36] audit: type=1400 audit(1778395004.920:206): avc: denied { cmd } for pid=543 comm="syz.0.73" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 33.880162][ T10] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 33.894832][ T53] ------------[ cut here ]------------ [ 33.900370][ T53] WARNING: CPU: 0 PID: 53 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 33.910895][ T53] Modules linked in: [ 33.914844][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 33.926461][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.936587][ T53] Workqueue: iou_exit io_ring_exit_work [ 33.942255][ T53] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 33.948646][ T53] Code: 5d e9 d5 bd 54 02 cc e8 cf 37 32 fe 0f 0b eb e3 e8 c6 37 32 fe 0f 0b eb da e8 bd 37 32 fe 0f 0b e9 4d fe ff ff e8 b1 37 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 33.968316][ T53] RSP: 0018:ffffc9000036f990 EFLAGS: 00010293 [ 33.974459][ T53] RAX: ffffffff835584ef RBX: 1ffff11023738ca5 RCX: ffff88810168cc00 [ 33.982487][ T53] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003c9 [ 33.990517][ T53] RBP: ffffc9000036f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 33.998539][ T53] R10: 0000000000000000 R11: ffffffff835574d0 R12: ffff88811bd2a600 [ 34.006571][ T53] R13: ffff88811b9c6500 R14: ffff8881394c0000 R15: ffff8881394c0010 [ 34.014601][ T53] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.023586][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.030246][ T53] CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 34.038274][ T53] Call Trace: [ 34.041619][ T53] [ 34.044583][ T53] ? _raw_spin_unlock+0x45/0x60 [ 34.049474][ T53] ublk_ch_uring_cmd+0x6f/0xa0 [ 34.054328][ T53] io_uring_try_cancel_uring_cmd+0x1a1/0x280 [ 34.060413][ T53] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 34.066353][ T53] ? io_uring_cancel_generic+0x6eb/0x6eb [ 34.072063][ T53] ? __cfi___switch_to+0x10/0x10 [ 34.077113][ T53] ? kthread_data+0x54/0xc0 [ 34.081710][ T53] io_ring_exit_work+0x23c/0x83b [ 34.086699][ T53] ? _raw_spin_unlock+0x45/0x60 [ 34.091638][ T53] ? __cfi_io_ring_exit_work+0x10/0x10 [ 34.097139][ T53] process_scheduled_works+0x7d4/0x1020 [ 34.102750][ T53] worker_thread+0xc51/0x1370 [ 34.107471][ T53] ? __kasan_check_read+0x15/0x20 [ 34.112613][ T53] kthread+0x2c9/0x370 [ 34.116727][ T53] ? __cfi_worker_thread+0x10/0x10 [ 34.121901][ T53] ? __cfi_kthread+0x10/0x10 [ 34.126529][ T53] ret_from_fork+0x67/0xa0 [ 34.131002][ T53] ? __cfi_kthread+0x10/0x10 [ 34.135630][ T53] ret_from_fork_asm+0x1a/0x30 [ 34.140507][ T53] [ 34.143555][ T53] ---[ end trace 0000000000000000 ]--- [ 34.311613][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.320286][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 8 [ 34.349870][ T10] usb 3-1: string descriptor 0 read error: -22 [ 34.356193][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 34.370633][ T524] syzkaller1: entered promiscuous mode [ 34.382279][ T524] syzkaller1: entered allmulticast mode [ 34.388486][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.425545][ T533] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 34.441786][ T10] usb 3-1: selecting invalid altsetting 1 [ 34.473209][ T31] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 34.490718][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.646906][ T10] usb 3-1: USB disconnect, device number 6 [ 34.764910][ T429] usb 2-1: USB disconnect, device number 9 [ 36.071252][ T9] usb 4-1: USB disconnect, device number 5 [ 36.071440][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 36.085897][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19