last executing test programs: 1m7.54563269s ago: executing program 2 (id=47): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='batadv_slave_1\x00', 0x10) socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa1c3, 0x6) r2 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, r3}}]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000180)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) 1m7.530422561s ago: executing program 2 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000a40)={0x40000000, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000b00), 0x3ef, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000000240)=""/1024, 0x400) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000b40)={'veth0_vlan\x00', @broadcast}) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c0021ef00000000000000000700000016"], 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x8010) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f0000000180)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRESHEX=r8, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_TDX_INIT_VM(r4, 0xc008aeba, &(0x7f0000000800)={0x1, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0x9f, 0x0, 0x0, r3, 0x20}) 1m7.404314334s ago: executing program 2 (id=49): socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1m7.403650274s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='.\x00', 0x31f) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat$dm(0xffffffffffffff9c, &(0x7f0000000a80)='./dm0\x00', 0x6180, 0x0) 1m7.400212125s ago: executing program 2 (id=51): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000100)=0x80, 0x4) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000040)=0x200, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private0, 0x14}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x200003}, 0x1c) 1m7.297441235s ago: executing program 2 (id=53): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) 1m7.296399475s ago: executing program 32 (id=53): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) 1m7.294931565s ago: executing program 3 (id=55): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000100)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) write(r2, 0x0, 0x0) r5 = accept4$packet(r1, 0x0, &(0x7f0000000300)=0xffffffffffffff9a, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000180)=@req={0xd, 0xa, 0xdd6, 0x7fff}, 0x10) recvmmsg$unix(r1, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/223, 0xdf}, {&(0x7f00000016c0)=""/254, 0xfe}], 0x7}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/35, 0x23}, {&(0x7f0000001980)=""/244, 0xf4}, {&(0x7f0000001a80)=""/57, 0x39}, {&(0x7f0000001ac0)=""/93, 0x5d}, {&(0x7f0000001b40)=""/47, 0x2f}, {&(0x7f0000001b80)=""/46, 0x2e}], 0x6}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001e40)=""/29, 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003840)=""/170, 0xaa}, {&(0x7f0000003900)=""/140, 0x8c}, {&(0x7f00000039c0)=""/231, 0xe7}], 0x4}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003c40)=""/149, 0x95}, {&(0x7f0000003d00)=""/196, 0xc4}], 0x2}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004180)=""/83, 0x53}], 0x1}}], 0x6, 0x2a0, 0x0) sendmmsg(r1, &(0x7f00000025c0)=[{{0x0, 0xa9cc7003, &(0x7f0000002600)=[{&(0x7f0000002640)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m7.017113164s ago: executing program 4 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x208800b, 0x0) mount(0x0, &(0x7f0000000940)='./dev\x00', &(0x7f0000000980)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/sda\x00', 0x101042, 0x5) (async) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/sda\x00', 0x101042, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f00000002c0)=0xc, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) ioctl$KVM_RUN(r6, 0xae80, 0x11) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000140)=0x80000003, 0x4) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.873311588s ago: executing program 4 (id=58): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000540)=0x0) ptrace(0x11, r4) write(r3, &(0x7f0000000200)='27', 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000500)={{0x1, 0x7}, {0x10001, 0x17d4aa0a}, 0x7}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000003c0)=0x20) preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000000440)=""/156, 0x9c}], 0x1, 0x40, 0x3, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1400, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) r6 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r0, 0x12) 1m6.607647185s ago: executing program 4 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='.\x00', 0x31f) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat$dm(0xffffffffffffff9c, &(0x7f0000000a80)='./dm0\x00', 0x6180, 0x0) 1m6.576371898s ago: executing program 4 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20083, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000380)={0x1, 0x0, [{0x80000001, 0x1, 0x6, 0x9, 0x5, 0x1, 0x2e}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3ffffffe]}, 0x8, 0x80000) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000004c0)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000640)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r4, 0x4068aea3, &(0x7f0000000680)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000740)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000880)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setfsgid(0xee01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8102, 0x0) timer_settime(r2, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000300)) 1m6.397391597s ago: executing program 3 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x11d202, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x0) (async) getdents64(r1, 0x0, 0x22) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}]}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00') (async, rerun: 32) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (rerun: 32) writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)='4', 0x1}], 0x1) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='5'], 0x35) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000900)=[@text32={0x20, 0x0, 0xfffffffffffffe6c}], 0x1, 0x61, &(0x7f00000008c0)=[@cr4={0x1, 0x109e2}], 0x1) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback, 0x4d6}, @in6=@remote, {@in=@remote, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x80}, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4}, {}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xfffffff9, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x1, 0x1, 0x5, 0x800, 0x401, 0x5}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r7 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x4, 0x5}, [], {0x4, 0x2}, [{0x8, 0x2}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x5}, {}]}, 0x80, 0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m6.387556618s ago: executing program 3 (id=64): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, &(0x7f0000000300)={'bridge_slave_1\x00', @remote}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff0600000002000000450000002500000019000400440000000d00000000000006040000000000f93132", 0x39}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x42, 0x48) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x60000010}) epoll_pwait2(r4, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000000c0)={0x8000014}) epoll_pwait(r4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0xf, &(0x7f0000000240)={[0x8]}, 0x8) mount$fuseblk(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0xa00006, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x6}}]}}) 1m6.313763255s ago: executing program 4 (id=66): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400), 0x2) r4 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x6) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000600)={r4, 0x1, 0x0, 0x2000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x40046201, 0x0) r5 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000240)='0', 0x1) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x303}, "12341a34567800", "12345678123456781234567812345678", "12345678"}, 0x14) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1, 0x80, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) 1m6.276355239s ago: executing program 33 (id=66): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400), 0x2) r4 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x6) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000600)={r4, 0x1, 0x0, 0x2000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x40046201, 0x0) r5 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000240)='0', 0x1) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x303}, "12341a34567800", "12345678123456781234567812345678", "12345678"}, 0x14) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1, 0x80, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) 1m6.161436181s ago: executing program 3 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='.\x00', 0x31f) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat$dm(0xffffffffffffff9c, &(0x7f0000000a80)='./dm0\x00', 0x6180, 0x0) 1m6.119097825s ago: executing program 3 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x0, 0x0) r1 = inotify_init1(0x80800) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r1, r2, 0x80000) fgetxattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00', 0x0, 0x0) lseek(r0, 0x53, 0x1) 1m6.042555753s ago: executing program 3 (id=71): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6000, 0x0) (async) r0 = open(&(0x7f0000000080)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000900)={0x2e, 0x0, 0x0, r0, 0x1212, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f00000007c0)) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000800)={0xb6, 0x0, 0x7}) (async) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfe000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000880)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000008c0)=0x3) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r12, &(0x7f0000000700)=[{{&(0x7f0000000740)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @cipso={0x86, 0x6}]}}}], 0x20}}], 0x1, 0x8090) (async, rerun: 32) ioctl$KVM_CREATE_VM(r11, 0xae03, 0x10) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async, rerun: 64) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)) r18 = dup(r17) syz_ublk_setup_queues(r18, r16, &(0x7f0000003280)={0x0, 0xfffffffe, 0x800, 0xfffffffe, 0x2f6, 0x0, r13}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40, 0x3, 0x3aa, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0) 1m5.976984099s ago: executing program 34 (id=71): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6000, 0x0) (async) r0 = open(&(0x7f0000000080)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000900)={0x2e, 0x0, 0x0, r0, 0x1212, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f00000007c0)) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000800)={0xb6, 0x0, 0x7}) (async) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfe000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000880)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000008c0)=0x3) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r12, &(0x7f0000000700)=[{{&(0x7f0000000740)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @cipso={0x86, 0x6}]}}}], 0x20}}], 0x1, 0x8090) (async, rerun: 32) ioctl$KVM_CREATE_VM(r11, 0xae03, 0x10) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async, rerun: 64) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)) r18 = dup(r17) syz_ublk_setup_queues(r18, r16, &(0x7f0000003280)={0x0, 0xfffffffe, 0x800, 0xfffffffe, 0x2f6, 0x0, r13}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40, 0x3, 0x3aa, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0) 1m4.677357692s ago: executing program 0 (id=90): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001280), 0x40, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000012c0)) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x3ff, 0x6}, 0x100, './proc/sys/net/ipv6/conf/all/disable_ipv6\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000001300)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000001340)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x2, &(0x7f0000001680)={0x0, 0x26, 0x0, @thr={&(0x7f0000001540)="57be51d14392a179263bd903e3f6e6437ee0c983deed835d0485cb8237aea28c178df4a14fbe89d538bf734d2e33564f158f1616cb824150b6093ac9124d29ad00108c6ccd6cdc77374b407965d4843c0c3c68ebcfa0332f89813f326ca935a150bd6c8ac2a365a6086b12d65fbbd8353288844d39ca48a134b59e6bf71c591723e3f97a443fd48af2a2040090a023f688bcf3026403740a5c5a647175bb464c00d38203cebc314b1d64cf6b79d9e54a70cc3d8f8c7c8e82972e8e10c7a0c5d2b40ce8289ee26a1f95894b2bfd", &(0x7f0000001640)="729cc253864cc3d3839f0ea7c1815c19c842d9e6785b5f3742239d59af975dc762d9b85b0d01287a26217e7e7d41"}}, &(0x7f00000016c0)=0x0) timer_gettime(r5, &(0x7f0000001700)) sendmmsg(r3, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="1b", 0x1}], 0x1}}], 0x1, 0x4004810) r6 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom$unix(r6, &(0x7f0000001440)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000280)=""/4096) write(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1m4.650484375s ago: executing program 0 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x740, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x20400, 0x20) lseek(r1, 0x6, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x41, &(0x7f0000000600)={0xa, 0x4e21, 0x200, @loopback, 0x7}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$tipc(r3, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x2}}, 0x10) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x100) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pwrite64(r8, &(0x7f0000000380)="19fc9368c82137d53ab5e217922201dc16d719f8dfb3eac2c0e1dd56d05b9f59737bc5d93c3fe76c1c4f4836c40eec5738391cfc4871822526ae902c9dc4bceb79342ec52b4b25585b8f5bbf7b4b5f7f4b3edbf877a15ce80cc8b5237388e8be9c012374ea1b4c820a37164d3f744fcb8115b0a65a725ce06e24ed6916b55d222538bf", 0x83, 0x0) sendmmsg$unix(r7, &(0x7f00000000c0), 0x0, 0x3ed0) listen(r6, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) 1m4.561218134s ago: executing program 0 (id=92): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe158}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x48040) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60008d1}, 0x801) r6 = openat$nsim_dev_bool(0xffffffffffffff9c, &(0x7f00000004c0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/dont_allow_reload\x00'}, 0x8000, 0x0) read$nsim_bool(r6, &(0x7f0000000500)=""/159, 0x9f) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000600)={0xfffffe01, 0x4, 0x7, 0xb}, 0x10) r7 = fcntl$dupfd(r2, 0x0, r6) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x9, 0xfe6, 0x61, 0x5, 0x3, 0x0, 0x4, 0x6, 0x1, 0x2, 0x7fff, 0x4, 0x9, 0x4, 0x1], 0x80a0000, 0x8000}) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x16c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xd8, 0x6, "57bd34c709cf9183a794e8387bcfc6c16e172809aa4cbeda117cad71da43642592d37e83f360bc2d6148b5f8f890bc43578c60b4e4e545ef23fefe59d815a2de7cb52e3f09cb52c7937e3eb1081e2f409fb5d79dacbc2d409da28ab76d36e92c45c05e831710c1fa4e4a56c8af80c4bbe74dcd47db11562a6d7ddc99dbe67dee98c2bf39783f47d143c3ef77c03b1138aec47a6707475ff7476209813d63d93f0eb22fec0706b0cc82b5ada33066879de782a0e127a094ae4e0444f23f370109951cb3661cd88b2db6de57aa2491a195dd6f7b41"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x75, 0x6, "6f0f391546fb403ca04676c873187390dc500c85c634df3f0230acd4707d603029300a42b47fec2814f3e5ae6e6ea57159bf820b2da90df862d33d7c43646f699304fee8d683856a06d4b9fa1c7d030f23e5633bfe2d8da2a875a4f7db4e0cc2eb813c4013562773ea2e78a2b5b90ff94b"}]}, 0x16c}}, 0x40001) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x190}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xa4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4031}, 0x80) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x20}}}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26f}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x0]}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x542}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc881}, 0x45000) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000d00)=0x1, 0x4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r2) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xdc, r8, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffd}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xed}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfa8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), r7) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x6c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x32a8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x85}, 0x90) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r10, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x70, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x11, 0x3, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40800) fdatasync(r6) 1m4.560426534s ago: executing program 0 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xc53}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) pipe(&(0x7f0000000400)) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x8000000000000001, 0x3, 0xa, 0xffffffffff7ffffe, 0x4000000000000002, 0x400000000004, 0x100000001, 0x80000000000000, 0xe0, 0x800000000, 0x5, 0x80000000, 0x5, 0x6, 0x1000000000018, 0x7], 0x2000, 0x89340}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e001f0000000c008f0000000000000000000c009000f5fffffeffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x50831}, 0x20004000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x32, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x19) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x4000009b, 0x0, 0xfffffffffffefffb}]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000040)=0x19ca, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0xf3f, 0x4) sendto$packet(r8, &(0x7f00000002c0)="3f03fe7fee6ba4e8f3c062c21e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe466df9893bd5b4bb33", 0x52, 0x0, &(0x7f00000001c0)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0xc, &(0x7f0000000180)=0x4, 0x4) sendmsg$netlink(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[], 0x20}], 0x1, 0x0, 0x0, 0x440d5}, 0x24000080) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) 1m4.347705046s ago: executing program 0 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000440)='fuse\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/events/sched/sched_switch/trigger\x00', 0x484080, 0xb4) write(r1, &(0x7f00000004c0)='enable_event:sch', 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@increfs], 0x37}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0xfffffffffffffd6b, 0x0, &(0x7f00000007c0)=[@acquire], 0xd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000800)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setns(r1, 0x40000000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0xffb2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x9, 0x11, r6, 0xd50c5000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000140)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", '\x00\x00`\x00', "7c5cec21291a43fe"}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.283069542s ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='.\x00', 0x31f) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat$dm(0xffffffffffffff9c, &(0x7f0000000a80)='./dm0\x00', 0x6180, 0x0) 1m4.173324293s ago: executing program 5 (id=100): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000001c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1de) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/sys/net/ipv4/neigh/lo/unres_qlen\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r3, &(0x7f00000005c0)='1', 0x1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000200)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000), 0x2000008, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0]) 1m4.169545914s ago: executing program 5 (id=101): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000169f50ad90904"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x100e2000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000280)=0x80000000, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/4122, 0x101a}, {&(0x7f0000001840)=""/200, 0xc8}, {&(0x7f0000001940)=""/296, 0x128}, {&(0x7f0000001a80)=""/161, 0xa1}, {&(0x7f0000001b40)=""/209, 0xd1}, {&(0x7f0000001c40)=""/76, 0x4c}, {&(0x7f0000001cc0)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/133, 0x85}, {&(0x7f0000001e80)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x8, 0x70bd26, 0x25dfdbfb, 0x4, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 1m2.996078083s ago: executing program 5 (id=103): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000480)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) unshare(0x10050080) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x12, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9eb20fc6647"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@remote, 0x4}]}]}}}], 0x28}, 0x4000810) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="310300000000000000d02f1d2f"], 0x24}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x3}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc0000001200010a00000000000000000700"], 0xbc}}, 0x0) (async) r5 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000500)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f0000000540)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(r7, &(0x7f00000005c0)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0xfea8, 0xa) (async) write$cgroup_type(r6, &(0x7f0000000600), 0x9) (async) sendfile(r5, r5, 0x0, 0x9c) (async) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f0000000300)="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", 0xfd) 1m2.689396855s ago: executing program 5 (id=105): mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000002) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x20000) (rerun: 64) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@sg0, 0x0, 0x0) 1m2.676046876s ago: executing program 5 (id=106): iopl(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) eventfd(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0xa0203, 0x0) execve(&(0x7f0000000140)='./proc/thread-self/fail-nth\x00', &(0x7f0000000480)={[&(0x7f0000000180)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='proc\x00', &(0x7f0000000340)='/[\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='proc\x00', &(0x7f0000000400)='!\x00', &(0x7f0000000440)='proc\x00']}, &(0x7f0000000580)={[&(0x7f0000000500)='\x00', &(0x7f0000000540)='proc\x00']}) write(r0, &(0x7f0000000100)='27', 0x2) mount$bind(&(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', &(0x7f0000000740), 0x201c000, 0x0) r1 = open(&(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x80000, 0x44) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000640)=""/116, 0x74}], 0x1, 0x5b, 0x7) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000007c0)=':+\\(}\x00', &(0x7f0000000800)='./file0\x00', r2) syz_clone(0x2000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="77a6f99d84a1d2db42d580c3ee4dedbfe146cb6f93fd868fa31230d0c218f93fba947af042f74b38efb0b2beba7390f3882d2208554c7efa93246e7fa30c7243260b6e3457f1db232824ce1d2633c0ce447f54f32324abb6c5a8c0e6c3355dea4560d56e110e37ccf24fdebb14215c967c5627a32d") 1m2.411933193s ago: executing program 5 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./tracefs/dynamic_events\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0], &(0x7f00000006c0)={0x0, 0x0, 0xffffffffffffff14, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000700)={0xa3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, 0x0, 0x20040010) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000840)=ANY=[@ANYBLOB="a00b060000003fb50a7e0583"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x53, 0x0}}, &(0x7f0000000480)) r3 = syz_usb_connect$uac1(0x0, 0xdd, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x87, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0xe, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x31}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x1, 0x6, 0x8000, 0xff, 0x7}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x3, "76ea2610"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x7, "2fb7f5355f89"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x3, "c99c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x8, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3ff, 0x9, 0x5, 0xcd}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x800, 0x5, "bfe4"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x88, 0x40, 0x40, 0xb, 0x5}, @as_header={0x7, 0x24, 0x1, 0xf, 0x80, 0x1002}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5a, 0x9, 0x3, 0xfd}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0xc, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x5, 0x8, "8763a0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x3, 0x9, {0x7, 0x25, 0x1, 0x4, 0x1, 0x2}}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0xff, 0x80, 0x5, 0x20, 0x3}, 0x2c, &(0x7f0000000a80)={0x5, 0xf, 0x2c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0xe5, 0xd, 0x6, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0xc, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xd, 0x6, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x0, 0x40, 0x2, 0x9}]}, 0x6, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x400a}}, {0xa7, &(0x7f0000000bc0)=@string={0xa7, 0x3, "0ebe67335cff7847edb5861bfe78cc8b1fc3494cd27780c7cd7a31e306e010e369cd84edb6ab32f3ca684d2fbb4ff463c8a3cec483281bb715fb6c9820d1fd3e5a749a6b654f0daf5074b7ba38c63f057a2e6534ac5ef0b6ac403f9f836d614837215c42e499833825328b69acef56b5307519499a8f3fd68ee07beb855a5dc0613106032ceb2395978f3d0763cb00fc8f0ac6c63228cdfaf79d41fade22df1a2dea93354c"}}, {0xf3, &(0x7f0000000c80)=@string={0xf3, 0x3, "36e971f08aa4dca8d80e88df4f1062459e162db5063005137da6aea745e7f3a1e016d6c4ab0b38ee54de07e7c62a0338ef6ad8789921596f07124accc318e4dcf3d5cc110187ab535d1a6cf02ef9023998922a140b465bb6793d65060a962cd8a1fa694f37ca6fa2076fa5704c93796aace1a735aa4c6c41cdf41faf029f8cd3e1622ee68f59a3c89979028a629d5331f06b52308c10dc30adab2b1d35a0969b6e1faaa878d494da45a1e2ed77dc39ee74cfbc3f5bc8a862a9a8584a2d62cdcf02b45ef2d66bbd56e19e23d07e033c63207f309e1a2f7f65e21834b3809131853e4b0865732012005c8f907cf66db7f02b"}}, {0x37, &(0x7f0000000000)=@string={0x37, 0x3, "305cc087c0dd2bc83001964962492c5795f4dd042f50f316ab5f0a387437b7bb70ed9570b53c40b0b7a0545fc8971bb242c8f3c237"}}, {0xac, &(0x7f0000000dc0)=@string={0xac, 0x3, "79ddf78e1a68e02c411b8077470f4b0f486b9522b3064c0d0d65e8db98847e1430be0013af8f19c2315af884c7d604520696bca84e75ab3026b72a6ce03c5dba5894e9d582fb6d58db9fb7b41b24cba396c72b2138b321878cda591e417e451306265e3cf8f50739052053b2498c7511264f3a5a3190815ef56f7481604d233eff1c063d2a0e70a03ab8686b24ca33e630d5f2be6eb84456c058793bceccbf1ab68af8441091b4850851"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000001040)={0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="4002ef000000ef21e3534279fee166bec9ef748fce340ce6e76babf57acfcbf42f4800e5ba3e02b9d58bdbce54ce0372cea4b0503a80937ef8ff0100005cce37a72cf2d66cda62b17a879bc7f5e089a5be2ba8e61ab167b2ab44f1f496d8cd0600000080afae7c8df3e2eece48e592b6bafdbc9e0c0d9dc8aebffdd6a2900a04488bb7b9e6f9dc087ff1b9523fddb2b393f2b726fceb0211ec8062e4cd203d6736fd7fd1e105b801efbdf402a46e9d9277167e36c7198ccdf2552e37c081960c255f3794c32f496634ef0c5159c6c73224b96c372dfc12a6582201000000b42c2a259249d8f52ec54709761a794818d4da"], &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000001340)={0x44, &(0x7f0000001080)={0x40, 0x18, 0xc5, "90c2ec89a8d406cac70a87314d6c435b5deac2e7e94b74df2876d01bc478807828b560cba47c6e58c711ab2fcc4998a6826e04dd58b76b56a3be100380c7916fafa5ce5ec4d1fd64d3154c9c7fe5aff78bc0297db56cbcc39332fb642576790f1554ec493ec43b9b7d3c100672851a3a2090068f5e72e62b316965c254d42d3c03ee26d27b2f502f5ce0db136abcabcaba43896d84755f71436bbf9cdb4023cdb3bbd57c01e40e7c4cae4c7e83b775c6e12d14016c85e0a708f07cabf860f117bb462dbd8b"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b00)={0x20, 0x81, 0x2, "39ba"}, &(0x7f00000013c0)=ANY=[@ANYBLOB="070002000000a7427cf184e329feedc6e10405d313d9e22f385b49697da0c1eda3a98029c102ef899eed98170bd32de4a5435b9b91a0973bdd100c676b87468566724189bb6851fb7ce7574419549da1d9"], &(0x7f0000001280)={0x20, 0x83, 0x1, "5be9"}, &(0x7f00000012c0)={0x20, 0x84, 0x3, "0f9bc9"}, &(0x7f0000001300)={0x20, 0x85, 0x3, "e8d088"}}) r4 = openat$binderfs_ctrl(0xffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0xc1086201, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) timer_create(0x3, &(0x7f0000000500)={0x0, 0x37, 0x2}, &(0x7f0000000540)=0x0) timer_settime(r6, 0x1, &(0x7f0000000580)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, &(0x7f00000005c0)) bind$unix(r5, &(0x7f0000000280)=@file={0x1}, 0x6e) setxattr$security_ima(&(0x7f0000000340)='./tracefs\x00', &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "a9efc0f8b70b770048b65b2da34d1a0b"}, 0x11, 0x2) listen(r5, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000300)) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x484100, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000140)='#', 0x1}, {&(0x7f0000000180)="703acb93f7ccd8331b2019", 0xb}], 0x2) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x2, 0xb3, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124030101020000000000000000020000092403020101"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 49.200567459s ago: executing program 35 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='.\x00', 0x31f) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat$dm(0xffffffffffffff9c, &(0x7f0000000a80)='./dm0\x00', 0x6180, 0x0) 47.333053199s ago: executing program 36 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./tracefs/dynamic_events\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0], &(0x7f00000006c0)={0x0, 0x0, 0xffffffffffffff14, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000700)={0xa3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, 0x0, 0x20040010) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000840)=ANY=[@ANYBLOB="a00b060000003fb50a7e0583"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x53, 0x0}}, &(0x7f0000000480)) r3 = syz_usb_connect$uac1(0x0, 0xdd, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x87, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0xe, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x31}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x1, 0x6, 0x8000, 0xff, 0x7}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x3, "76ea2610"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x7, "2fb7f5355f89"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x3, "c99c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x8, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3ff, 0x9, 0x5, 0xcd}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x800, 0x5, "bfe4"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x88, 0x40, 0x40, 0xb, 0x5}, @as_header={0x7, 0x24, 0x1, 0xf, 0x80, 0x1002}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5a, 0x9, 0x3, 0xfd}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0xc, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x5, 0x8, "8763a0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x3, 0x9, {0x7, 0x25, 0x1, 0x4, 0x1, 0x2}}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0xff, 0x80, 0x5, 0x20, 0x3}, 0x2c, &(0x7f0000000a80)={0x5, 0xf, 0x2c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0xe5, 0xd, 0x6, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0xc, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xd, 0x6, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x0, 0x40, 0x2, 0x9}]}, 0x6, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x400a}}, {0xa7, &(0x7f0000000bc0)=@string={0xa7, 0x3, "0ebe67335cff7847edb5861bfe78cc8b1fc3494cd27780c7cd7a31e306e010e369cd84edb6ab32f3ca684d2fbb4ff463c8a3cec483281bb715fb6c9820d1fd3e5a749a6b654f0daf5074b7ba38c63f057a2e6534ac5ef0b6ac403f9f836d614837215c42e499833825328b69acef56b5307519499a8f3fd68ee07beb855a5dc0613106032ceb2395978f3d0763cb00fc8f0ac6c63228cdfaf79d41fade22df1a2dea93354c"}}, {0xf3, &(0x7f0000000c80)=@string={0xf3, 0x3, "36e971f08aa4dca8d80e88df4f1062459e162db5063005137da6aea745e7f3a1e016d6c4ab0b38ee54de07e7c62a0338ef6ad8789921596f07124accc318e4dcf3d5cc110187ab535d1a6cf02ef9023998922a140b465bb6793d65060a962cd8a1fa694f37ca6fa2076fa5704c93796aace1a735aa4c6c41cdf41faf029f8cd3e1622ee68f59a3c89979028a629d5331f06b52308c10dc30adab2b1d35a0969b6e1faaa878d494da45a1e2ed77dc39ee74cfbc3f5bc8a862a9a8584a2d62cdcf02b45ef2d66bbd56e19e23d07e033c63207f309e1a2f7f65e21834b3809131853e4b0865732012005c8f907cf66db7f02b"}}, {0x37, &(0x7f0000000000)=@string={0x37, 0x3, "305cc087c0dd2bc83001964962492c5795f4dd042f50f316ab5f0a387437b7bb70ed9570b53c40b0b7a0545fc8971bb242c8f3c237"}}, {0xac, &(0x7f0000000dc0)=@string={0xac, 0x3, "79ddf78e1a68e02c411b8077470f4b0f486b9522b3064c0d0d65e8db98847e1430be0013af8f19c2315af884c7d604520696bca84e75ab3026b72a6ce03c5dba5894e9d582fb6d58db9fb7b41b24cba396c72b2138b321878cda591e417e451306265e3cf8f50739052053b2498c7511264f3a5a3190815ef56f7481604d233eff1c063d2a0e70a03ab8686b24ca33e630d5f2be6eb84456c058793bceccbf1ab68af8441091b4850851"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000001040)={0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="4002ef000000ef21e3534279fee166bec9ef748fce340ce6e76babf57acfcbf42f4800e5ba3e02b9d58bdbce54ce0372cea4b0503a80937ef8ff0100005cce37a72cf2d66cda62b17a879bc7f5e089a5be2ba8e61ab167b2ab44f1f496d8cd0600000080afae7c8df3e2eece48e592b6bafdbc9e0c0d9dc8aebffdd6a2900a04488bb7b9e6f9dc087ff1b9523fddb2b393f2b726fceb0211ec8062e4cd203d6736fd7fd1e105b801efbdf402a46e9d9277167e36c7198ccdf2552e37c081960c255f3794c32f496634ef0c5159c6c73224b96c372dfc12a6582201000000b42c2a259249d8f52ec54709761a794818d4da"], &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000001340)={0x44, &(0x7f0000001080)={0x40, 0x18, 0xc5, "90c2ec89a8d406cac70a87314d6c435b5deac2e7e94b74df2876d01bc478807828b560cba47c6e58c711ab2fcc4998a6826e04dd58b76b56a3be100380c7916fafa5ce5ec4d1fd64d3154c9c7fe5aff78bc0297db56cbcc39332fb642576790f1554ec493ec43b9b7d3c100672851a3a2090068f5e72e62b316965c254d42d3c03ee26d27b2f502f5ce0db136abcabcaba43896d84755f71436bbf9cdb4023cdb3bbd57c01e40e7c4cae4c7e83b775c6e12d14016c85e0a708f07cabf860f117bb462dbd8b"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b00)={0x20, 0x81, 0x2, "39ba"}, &(0x7f00000013c0)=ANY=[@ANYBLOB="070002000000a7427cf184e329feedc6e10405d313d9e22f385b49697da0c1eda3a98029c102ef899eed98170bd32de4a5435b9b91a0973bdd100c676b87468566724189bb6851fb7ce7574419549da1d9"], &(0x7f0000001280)={0x20, 0x83, 0x1, "5be9"}, &(0x7f00000012c0)={0x20, 0x84, 0x3, "0f9bc9"}, &(0x7f0000001300)={0x20, 0x85, 0x3, "e8d088"}}) r4 = openat$binderfs_ctrl(0xffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0xc1086201, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) timer_create(0x3, &(0x7f0000000500)={0x0, 0x37, 0x2}, &(0x7f0000000540)=0x0) timer_settime(r6, 0x1, &(0x7f0000000580)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, &(0x7f00000005c0)) bind$unix(r5, &(0x7f0000000280)=@file={0x1}, 0x6e) setxattr$security_ima(&(0x7f0000000340)='./tracefs\x00', &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "a9efc0f8b70b770048b65b2da34d1a0b"}, 0x11, 0x2) listen(r5, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000300)) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x484100, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000140)='#', 0x1}, {&(0x7f0000000180)="703acb93f7ccd8331b2019", 0xb}], 0x2) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x2, 0xb3, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124030101020000000000000000020000092403020101"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 10.913491289s ago: executing program 8 (id=724): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x0, 0x0, 0x5, 0xde6, 0x9, 0x401}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x32, 0x67, 0x0, 0xbd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557ded5995abd8c2dd746ed1b8e7b953b5e7039ee546652f"}}, 0x3c) 10.863433514s ago: executing program 8 (id=725): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000000c0), 0x0, 0x4000008) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402400, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 10.848047356s ago: executing program 8 (id=726): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x1440, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x11, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022180000000501150025bf0904a101090192008c0508950129309102c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000400), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x1f) write(r1, &(0x7f0000000000)="d22f7c8407f8163355952b1d56c397d85c153b26338d24799ef5cd38a6889a209d21f80f0b1481117ef99c85c41f7e8d20e20e93c9d61ac119c0f4a46859658719f19dab0aa65dc2c0313227133952eb41b010a69ae4640d21deb4840ae4eea5b2c24387a6dc114b73be23cbd11a2770ea0d7e4326a2fe136f42fd9b521d8d261fb02ef74aac9dc05c9ecb79be70e3b8e032657991cae68e73b79eb26ae7076dc1d7006de65df70ad7cf356bba2e7718acb60216a6785d09675b", 0xba) 10.245350727s ago: executing program 8 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000600)=@req3={0x8000, 0x40000200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000080)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @remote, 0x40}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000340)=""/214, &(0x7f0000000440)=0xd6) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000d80)='0fc5:', 0x5) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x8, "4600d3cb1574065bdc7500"}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000200)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)={0x1c, 0x16, 0x200, 0x0, 0x10000001, {0xa}, [@nested={0xffffffffffffff70, 0x77, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f00000001c0)=0xf2, 0xfffffd88) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f00005af000/0x3000)=nil, 0x3000, 0xf, 0x28011, r7, 0x0) fstat(0xffffffffffffffff, 0x0) read$FUSE(r7, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(r7, &(0x7f0000000540)={@void, @void, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x21, 0x1c, 0x68, 0x0, 0x4, 0x2, 0x0, @multicast1, @broadcast}, {0x35, 0xfb, 0x0, @broadcast}}}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0x0) dup(r4) 10.21673166s ago: executing program 8 (id=729): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./proc/file0\x00', 0x488001, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='3', 0x4e) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mkdirat(r0, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='3', 0xfffffffffffffeaf) flock(r2, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.933833609s ago: executing program 8 (id=730): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6142, 0xbc) r1 = syz_open_procfs(0x0, &(0x7f0000001d00)='net/ip6_tables_matches\x00') pread64(r1, &(0x7f0000001d40)=""/102355, 0x18fd3, 0xc2a) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000001ae00), 0x22700, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f000001ae40)={0x1, 0x0, [{0xc0000103, 0x0, 0x3}]}) r5 = syz_open_dev$evdev(&(0x7f000001ad80), 0xbf, 0x40000) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f000001adc0)=""/31) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000540)={0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f0000000200)=0x6, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000380)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@default_permissions}, {@nfs_export_on}, {@xino_on}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f000001ad40)=0xa000000, 0x4) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) recvmmsg(r8, &(0x7f000001fa40)=[{{0x0, 0x0, &(0x7f000001bf80)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/229, 0xe5}, {&(0x7f00000018c0)=""/57, 0x39}, {&(0x7f0000001900)=""/58, 0x3a}, {&(0x7f000001fb40)=""/4109, 0x100d}, {&(0x7f000001be80)=""/219, 0xdb}], 0x8, &(0x7f000001c000)=""/30, 0x1e}, 0xd16d}, {{&(0x7f000001c040)=@nfc, 0x80, &(0x7f000001e500)=[{&(0x7f000001c0c0)=""/4096, 0x1000}, {&(0x7f000001d0c0)=""/100, 0x64}, {&(0x7f000001d140)=""/224, 0xe0}, {&(0x7f000001d240)=""/202, 0xca}, {&(0x7f000001d340)=""/4096, 0x1000}, {&(0x7f000001e340)=""/111, 0xfffffffffffffe8f}, {&(0x7f000001e3c0)=""/6, 0x6}, {&(0x7f000001e400)=""/253, 0xfd}], 0x8, &(0x7f000001e580)=""/118, 0x76}, 0x1001}, {{&(0x7f000001e600)=@un=@abs, 0x80, &(0x7f000001e7c0), 0x0, &(0x7f000001e800)=""/146, 0x92}, 0x8}, {{&(0x7f000001e8c0)=@alg, 0x80, &(0x7f000001ea00)=[{&(0x7f000001e940)=""/175, 0xaf}], 0x1, &(0x7f000001ea40)=""/4096, 0x1000}, 0x44}], 0x4, 0x2100, &(0x7f0000001cc0)={r10, r11+10000000}) gettid() sigaltstack(&(0x7f0000000040)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) openat(r0, &(0x7f0000001780)='./file0/file1/file0\x00', 0x40280, 0x40) 9.886671183s ago: executing program 37 (id=730): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6142, 0xbc) r1 = syz_open_procfs(0x0, &(0x7f0000001d00)='net/ip6_tables_matches\x00') pread64(r1, &(0x7f0000001d40)=""/102355, 0x18fd3, 0xc2a) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000001ae00), 0x22700, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f000001ae40)={0x1, 0x0, [{0xc0000103, 0x0, 0x3}]}) r5 = syz_open_dev$evdev(&(0x7f000001ad80), 0xbf, 0x40000) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f000001adc0)=""/31) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000540)={0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f0000000200)=0x6, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000380)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@default_permissions}, {@nfs_export_on}, {@xino_on}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f000001ad40)=0xa000000, 0x4) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) recvmmsg(r8, &(0x7f000001fa40)=[{{0x0, 0x0, &(0x7f000001bf80)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/229, 0xe5}, {&(0x7f00000018c0)=""/57, 0x39}, {&(0x7f0000001900)=""/58, 0x3a}, {&(0x7f000001fb40)=""/4109, 0x100d}, {&(0x7f000001be80)=""/219, 0xdb}], 0x8, &(0x7f000001c000)=""/30, 0x1e}, 0xd16d}, {{&(0x7f000001c040)=@nfc, 0x80, &(0x7f000001e500)=[{&(0x7f000001c0c0)=""/4096, 0x1000}, {&(0x7f000001d0c0)=""/100, 0x64}, {&(0x7f000001d140)=""/224, 0xe0}, {&(0x7f000001d240)=""/202, 0xca}, {&(0x7f000001d340)=""/4096, 0x1000}, {&(0x7f000001e340)=""/111, 0xfffffffffffffe8f}, {&(0x7f000001e3c0)=""/6, 0x6}, {&(0x7f000001e400)=""/253, 0xfd}], 0x8, &(0x7f000001e580)=""/118, 0x76}, 0x1001}, {{&(0x7f000001e600)=@un=@abs, 0x80, &(0x7f000001e7c0), 0x0, &(0x7f000001e800)=""/146, 0x92}, 0x8}, {{&(0x7f000001e8c0)=@alg, 0x80, &(0x7f000001ea00)=[{&(0x7f000001e940)=""/175, 0xaf}], 0x1, &(0x7f000001ea40)=""/4096, 0x1000}, 0x44}], 0x4, 0x2100, &(0x7f0000001cc0)={r10, r11+10000000}) gettid() sigaltstack(&(0x7f0000000040)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) openat(r0, &(0x7f0000001780)='./file0/file1/file0\x00', 0x40280, 0x40) 4.970415845s ago: executing program 1 (id=807): r0 = syz_open_dev$usbmon(&(0x7f0000000200), 0x10, 0x490240) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000580), 0x2008800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getgroups(0xfffffffffffffdc5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)) r7 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="1a0405000000000000000188031c09", 0xf, 0x4000004, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) (async) sendto$packet(r8, &(0x7f0000000180)="1a0405000000000000000188031c09", 0xf, 0x4000004, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) mount(&(0x7f0000005380)=@filename='./file0\x00', &(0x7f00000053c0)='./file0\x00', &(0x7f0000005400)='erofs\x00', 0x0, 0x0) (async) mount(&(0x7f0000005380)=@filename='./file0\x00', &(0x7f00000053c0)='./file0\x00', &(0x7f0000005400)='erofs\x00', 0x0, 0x0) 4.837390648s ago: executing program 1 (id=808): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000440)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.809602551s ago: executing program 1 (id=809): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0xffffff7f) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a"], 0x6c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000056000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4.793827392s ago: executing program 1 (id=810): socket(0x1e, 0x805, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="31005e63dd69e510aa44c2c674c488b4bc351212745d685bcbd6883f1aea99fb1b0a9299aabdb0220f21eb614794452363abb9f64a29ca3e65fe19c63e97af83f97dfed9a5faf0247a7639f56420c194fd2faaf37dbf0dd8c81ca2d9b08181fb22af5335826f50f6a15ce06645dc17b2cfb601354813d1ca0a1b429b28e9ed1fbc2b37d2a51cdcced3f9bb3c622e93ae376eae5206ccbcf4f718a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="20010200493d4c6a6f4c5d2142f42210bb7128a46a29a41afbda74649da7a84ab6ee43ec5b2ba9b886e68bddfc5fd14341271ed44f"], 0x0}) (async) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb10e7180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r7], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x2082) clock_gettime(0xfffffffffffffffe, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0xcdb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc8}}}, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 3.611212093s ago: executing program 6 (id=820): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x140841, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0xc, 0x12, r1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x200000c5, 0x0, 0x0) r2 = syz_io_uring_setup(0x10007725, &(0x7f0000000480)={0x0, 0x3b40, 0x80, 0x2, 0x31f}, &(0x7f0000000500), &(0x7f0000000200), &(0x7f00000006c0)) mmap$IORING_OFF_CQ_RING(0x0, 0x4, 0x8, 0x13, r2, 0x8000000) syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0x5, 0x0, &(0x7f0000000340)) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x4002, 0x10b) write(r4, &(0x7f0000000240)='10', 0x2) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) keyctl$clear(0x1e, 0xfffffffffffffffd) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x10, r6, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="c4161e709255cf96527da1734bbb8fe70177ef0428612a221190a8cfb17bebdb9b10aabc4e201df2ecefb49732d3bd819c6ad0a9da63e048e66ae999e469da9f6c6282094faf3df0f58ae2de41fe1e04f25c61e5fe1854cf788eaaf71cea305d314f8e7510139efb5f98307f57aede55023262737c0d5a209d0b3e98f40a5d740dd16fc10032b8966787", 0x8a, 0x4, &(0x7f0000000680)={0xa, 0x4e24, 0xfffffffb, @empty, 0x1}, 0x1c) fcntl$lock(r6, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.967638588s ago: executing program 7 (id=821): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) syz_clone3(&(0x7f0000000540)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x2}, 0x7a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x161) (async) pipe2$9p(&(0x7f0000000180), 0x0) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000002c0)='gfs2\x00', 0xe884, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xe656abc5fed06220, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000100)='proc\x00', 0xc040, &(0x7f0000000340)={@align=0x4, {0x7, 0x519, 0x1, 0x7fffffffffffffff}}, 0x15e, &(0x7f0000000140), &(0x7f00000001c0)=0xfff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0xbc) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80284511, 0x0) (async) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3fa, 0x20, 0x70bd2c, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x88) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000440)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) (async) write(r1, &(0x7f0000000380)='100', 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./bus\x00', 0xe3) (async) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.709344835s ago: executing program 6 (id=822): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x20, 0x4, 0x3) 2.709072705s ago: executing program 6 (id=823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = memfd_secret(0x0) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'perf_event'}, {0x2b, 'pids'}, {0x2d, 'pids'}, {0x2b, 'pids'}]}, 0x1e) write$tun(r0, &(0x7f0000000000)={@val={0x8, 0xf9}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@igmp={{0x27, 0x4, 0x2, 0x23, 0xc8, 0x68, 0x0, 0x7, 0x2, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x13, 0xb5, [@broadcast, @remote, @multicast2, @loopback]}, @rr={0x7, 0x1b, 0xfe, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @remote, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0xfa, 0x1, 0x1, [{@rand_addr=0x64010102, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x1}]}, @generic={0x89, 0x3, '\x00'}, @timestamp={0x44, 0x10, 0x80, 0x0, 0x9, [0x8, 0xff, 0x1]}, @timestamp_addr={0x44, 0x4, 0x3a, 0x1, 0xe}, @cipso={0x86, 0x27, 0x0, [{0x7, 0xa, "b88969362d0bcec3"}, {0x0, 0xa, "772439e51a79cd8e"}, {0x1, 0x9, "1bb84fc1dd08d6"}, {0x5, 0x4, "0621"}]}]}}, {0x14, 0x9, 0x0, @empty, "9ea86460562aef6c44d99b308c2c1ffc85458c5bed7441c17e6f66c7222bc2235559e1d3"}}}, 0xd6) 2.691595046s ago: executing program 6 (id=824): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x75}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x81, 0x6, 0x1, 0x0, 0x0, 0x6, 0xc9, 0x0, 0x6, 0xd, 0x7, 0x6, 0x0, 0xa, 0x80000000, 0x2, 0x6, 0x40, 0xf7, '\x00', 0x8, 0x9}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x5}, {0xeeef0000, 0x60000, 0x10, 0x3, 0x21, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x3ff8, 0x20, 0x0, 0x500, 0x1ffc}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x34, 0x3, 0x4, 0x4, 0x4]}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x15}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.668529709s ago: executing program 6 (id=825): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x0, 0x0, 0x5, 0xde6, 0x9, 0x401}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x3b, 0x67, 0x0, 0xbd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557ded5995abd8c2dd746ed1b8e7b953b5e7039ee546652f979f45a699fe21e640"}}, 0x45) 2.605377865s ago: executing program 6 (id=826): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xffffffffffffff3c, &(0x7f0000000580)=[{&(0x7f0000000600)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f00000006c0)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000740)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000780)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000840)="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", 0xcb3}, {&(0x7f0000001500)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f0000001600)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000001700)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001840)={0x0, 0x2, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002020000402505a1a400010102000109024300020100c0010904000001e001030005240001010424020f0524060001052401000107058103080007090401"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x141042, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}, {{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x2, 0xc040) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) r4 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='uid', &(0x7f0000000140)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.326759243s ago: executing program 7 (id=827): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000440)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.214292935s ago: executing program 7 (id=828): prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x81) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x6) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 2.137426853s ago: executing program 7 (id=829): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000440)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x34, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.06802643s ago: executing program 7 (id=830): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x34, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.755940912s ago: executing program 1 (id=831): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000440)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201010102"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_pts(0xffffffffffffffff, 0x4a0000) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.318061376s ago: executing program 7 (id=832): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x20, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x842) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000200), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000000240)=""/49, 0x31, 0x10142, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0xa, "c239"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x2, 'k'}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x122, 0x7, 0x1, {0x22, 0xa31}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, &(0x7f0000000140)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12041, 0x0, 0x0) 344.329465ms ago: executing program 9 (id=843): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c707b80ecb9a84c2e14b0bd247af6ab", 0x10}, {&(0x7f0000000100)}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x1000000000000c47, 0x9, 0x1, 0x10000000, 0x10000, 0x2000004000003, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x7, 0x1000080, 0x10089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 257.241594ms ago: executing program 1 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000002c80)={0x0, 0x1, 0x101, 0x83}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002cc0)={[0x100000000005, 0x8, 0xe9b, 0x2e1, 0x7ffd, 0x7, 0x2000000002, 0x6, 0x81, 0x9c2, 0x2000000005, 0x400000000001006, 0x6, 0xa, 0x40000008000, 0xdfd3], 0xfec00000, 0xf0312}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000002d80)=@x86={0x40, 0x1, 0xa, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff4, 0x0, 0x6, 0xff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002e00)={0x6, 0x0, [{0x585, 0x0, 0x3}, {0x0, 0x0, 0xff}, {0xe7, 0x0, 0x80}, {0x2d3, 0x0, 0x8}, {0x9b4, 0x0, 0x8001}, {0x2e8, 0x0, 0x86}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x78f302, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) syz_usb_connect$uac1(0x6, 0xb9, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x4, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0x2c}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x1, 0x5, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x2, 0x3, 0xd9}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x0, 0x6b, "29af21c293cd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x8, 0x9, 0xd9, 0x13}, @as_header={0x7, 0x24, 0x1, 0x85, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0xf, 0x3, {0x7, 0x25, 0x1, 0x8, 0x6, 0xff81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x8, 0x8, "ac13"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0xee, 0x50, "c6fddd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x2, 0x1, {0x7, 0x25, 0x1, 0x8, 0xfa, 0x1}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000002dc0)={0xa, 0x6, 0xcdb78b233f9d9019, 0x2, 0x3, 0xf6, 0x20, 0x3}, 0xe5, &(0x7f0000000240)=ANY=[@ANYBLOB="050fe500040b10010c02000519080000be180a48298c3ab12fe6e8a56ab253ff5bde44fa114b4469d9ad10ea38f9c079e28acadb2942ea0c4930d2d1983b52861da3f2370132732907129c940881d0a6940d3fdc9b57314a9edb01844b0259fb028063d6bcfeebe204f3dca62af07d101e4d8981a18b92da915b1de06e4e44368cdeccb6a96ecea6a120bf38e6f5ee492dff8c9a37ff380e8c16a7c046cdf382aaa95e8724d5042d52686b3ccfe2e87c307bbb3e34eac555fae26465d4562242346d964b16fe9c0d98c59d4d96ed03100b1410040786e2f0b9ab762a218c7f818ac3fe2b43"], 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x423}}, {0xf6, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2001}}, {0xc4, &(0x7f0000000500)=ANY=[@ANYBLOB="c40378bb8ce9db87b088f4b0e1f91fbd8ebd5e6b7430e7287fb717b59611a8f332ebe789a2120b3bb9975c4409e3ecf89bef59d7c64bdaf03fcfa3fbfa7077d94feffb01de71afd3c82390a2dbc91218cd98e4c0365ac75892a20a45d202f0c88b5b86a7da134e42671774f43d78fb40e1650846a5421289ecd86806f326ca2901b24a037b455c68bfbec9711b1f4e39fabf0abea6e0cab16de62433d10052899184a04991e40aef13729ea2969a3d8b5d4dcf3b9e5241350a78887212623cbe9c787c08"]}]}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000840)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a00)=""/4099, 0x1003}, {&(0x7f0000001a40)=""/105, 0x69}, {&(0x7f0000001b80)=""/66, 0x42}, {&(0x7f0000001b00)=""/101, 0x65}, {&(0x7f0000002e80)=""/72, 0x48}, {&(0x7f0000001c00)=""/4084, 0xff4}, {&(0x7f0000002c00)=""/39, 0x27}], 0x7}, 0xc}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000006c0)={0x0, 0x0, 0x8}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000740)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r6, 0x26, &(0x7f0000000780)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000007c0)={0x1, 0x1, 0x1000000000000025, 0x7}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) fcntl$setflags(r7, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 212.056649ms ago: executing program 9 (id=845): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000006c40)={'bridge0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace/set_event\x00', 0x2, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000440)='\v', 0x1}, {&(0x7f0000000480)='&', 0x1}], 0x2) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000240)={0xb, 0x7, 0x1, {0x2, ',]'}}, 0xb) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000080)={0x2, 0xd49, 0xfffffff9, 0x3, 0xffff, 0x0, 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000500)={0x0, [{0x1, 0x38, 0xc5ac, &(0x7f00000006c0)="1a72988a01e8eb"}, {0x1, 0x30, 0x5, &(0x7f0000000700)="4f49dbd3fc74"}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x5, 0x20, 0xff, &(0x7f0000000740)="8b9f00bf"}, {0x1, 0x0, 0x10000, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0xffff5ff1, 0x0}, {0x3, 0x0, 0xd2, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x7, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x8, 0x0}]}) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r5, &(0x7f0000002940)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) 142.308506ms ago: executing program 9 (id=846): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000440)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x34, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 81.029612ms ago: executing program 9 (id=847): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xe0000015}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x18, 0x101, 0x0, 0x0) close(r0) (async) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x2010000, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}], [{@uid_gt}]}) 25.395238ms ago: executing program 9 (id=848): r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002040)='sys_mnt\x00', &(0x7f0000002080)='sysfs\x00', 0x200000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x8a) write$FUSE_INIT(r4, &(0x7f0000002100)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x5, 0x80000, 0x800, 0x101, 0x8, 0x2, 0x0, 0x0, 0x80, 0xff}}, 0x50) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r6, 0xc76ed000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf25174d91f26a3c8}, 0x810) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f80)={&(0x7f0000002180)=ANY=[@ANYBLOB="541a0000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="3c00018008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f766972745f77696669001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r3, @ANYBLOB="98010280960004007ac4b2ffae949f7656ed67c64db677b18d6a9c708237153f6c3a472ffa23cfb4e08aaf22c12a1419d1d8dde128d0d5a00227545d6e913cbdc55c90bbaa245f3d22023b4693975f53cd112362240e4e6059bbf87b17b590e84d0e0c942dd7f88898a6d26e065dee1343090b5f0eb69dc2bf61e7708d9877bc7a17bd57a252d22245dea9a4efd2533e621b7ad0b127553d5b2400000800020002000000f40003800c00018008000100000000005800018004000300040003000d0002002f6465762f6b766d00000000080001000300000008000100090000000800010004000000130002006261746164765f736c6176655f3100000d0002002f6465762f6b766d000000000c0001800800010008000000500001800800020021b2250008000100ff0f0000080001000300000008000100000000240d0002002f6465762f6b766d000000000800010009000000130002006261746164765f736c6176655f310000300001800c000200402a272d2c2d2d00080001000400000004000300130002006261746164765f736c6176655f310000980002803d0005004be05dcc632c6dbe7177ec17ef44225d18061b337bdcf5055aa77225c1a786fb327c6522ce66c128a294ee3b913b7b7a1b052c1cd12b3b760600000008000200bb2900004c0004001c7ec02ec8c18a0145d15fc6868f494d62eceb8096d936182b2ea807776dd4f314c84f3e7785a5246529630d6512432eadec00db26012b5897cbba5aa480bb28ff68cd4b001863685c0001801400020076657468315f766c616e000000000000140002006873723000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="c95ff7d8bd0393644009fa93ab0bb8732775f8865811fb68fddcd1e6dc83e5ec00000000216c337558028cf6bc8d9bc51a070de2d4511b2c1877a0c3c75d485be2b220c632a09f83a31d00a3eb089944a6714ab1cf4654a3719dbaffb95090450fc687f59b59beea5f2bed4594cbecd830a86a67b1cdcff3bbe73505456efc9ead75ebd6d14110998f4af4ddaa751067", @ANYRES32=r3, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="4800018014000200626f6e645f736c6176655f31000000001400020076657468305f766c616e000000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r3, @ANYBLOB="3c0001801400020069705f76746930000000000000000000080003000300000014000200626f6e6430000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x1a54}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 9 (id=849): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x75}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x34, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ulticast mode [ 30.087095][ T602] loop0: detected capacity change from 0 to 1 [ 30.117116][ T608] overlayfs: failed to resolve './file1/file0': -2 [ 30.138929][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.141831][ T612] netlink: 168 bytes leftover after parsing attributes in process `syz.5.89'. [ 30.166351][ T354] usb 7-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 30.176606][ T354] usb 7-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 30.177161][ T618] overlayfs: missing 'lowerdir' [ 30.208852][ T354] usb 7-1: string descriptor 0 read error: -22 [ 30.215941][ T354] usb 7-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 30.228667][ T354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.264681][ T629] netlink: 7 bytes leftover after parsing attributes in process `syz.0.93'. [ 30.274653][ T629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.378933][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.405551][ T653] netlink: 'syz.5.94': attribute type 9 has an invalid length. [ 30.413232][ T653] netlink: 'syz.5.94': attribute type 2 has an invalid length. [ 30.444764][ T354] usb 7-1: USB disconnect, device number 2 [ 30.486018][ T662] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.494210][ T662] rust_binder: Read failure Err(EFAULT) in pid:61 [ 30.501581][ T662] rust_binder: 661:662 no such ref 1 [ 30.518938][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.758933][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.858940][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 30.870440][ T9] usb usb2-port1: attempt power cycle [ 31.025401][ T732] overlayfs: upper fs does not support tmpfile. [ 31.029974][ T10] usb 6-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config [ 31.058963][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 31.068026][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.228952][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 31.263897][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.292214][ T10] usb 6-1: string descriptor 0 read error: -71 [ 31.309177][ T10] aiptek 6-1:105.0: interface has no int in endpoints, but must have minimum 1 [ 31.330466][ T10] usb 6-1: USB disconnect, device number 2 [ 31.410791][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.649174][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.689891][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.821623][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.829049][ T36] kauditd_printk_skb: 147 callbacks suppressed [ 31.829063][ T36] audit: type=1400 audit(1793611073.319:345): avc: denied { ioctl } for pid=812 comm="syz.5.103" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6532 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.884570][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.103'. [ 31.896903][ T36] audit: type=1400 audit(1793611073.329:346): avc: denied { ioctl } for pid=813 comm="syz.6.104" path="socket:[7304]" dev="sockfs" ino=7304 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.929018][ T9] usb usb2-port1: unable to enumerate USB device [ 31.933265][ T36] audit: type=1400 audit(1793611073.329:347): avc: denied { write } for pid=813 comm="syz.6.104" path="socket:[7304]" dev="sockfs" ino=7304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.962428][ T36] audit: type=1400 audit(1793611073.439:348): avc: denied { mount } for pid=813 comm="syz.6.104" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.984531][ T818] netlink: 156 bytes leftover after parsing attributes in process `syz.5.103'. [ 31.994526][ T820] netlink: 'syz.5.103': attribute type 12 has an invalid length. [ 32.094576][ T36] audit: type=1400 audit(1793611073.579:349): avc: denied { mmap_zero } for pid=840 comm="syz.5.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 32.311263][ T36] audit: type=1400 audit(1793611073.799:350): avc: denied { mounton } for pid=847 comm="syz.5.106" path="/14/proc/49/task/50/fail-nth" dev="proc" ino=7318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 32.376185][ T36] audit: type=1400 audit(1793611073.799:351): avc: denied { write } for pid=847 comm="syz.5.106" name="ip6_flowlabel" dev="proc" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.439603][ T36] audit: type=1400 audit(1793611073.909:352): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.768930][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 32.908946][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.024675][ T36] audit: type=1400 audit(1793611074.509:353): avc: denied { append } for pid=915 comm="syz.6.110" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.148955][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.302785][ T314] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 33.388924][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.449293][ T314] usb 7-1: device descriptor read/64, error -71 [ 33.528927][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.698927][ T314] usb 7-1: device descriptor read/64, error -71 [ 33.771196][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.879027][ T9] usb usb2-port1: attempt power cycle [ 33.958951][ T314] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 34.098960][ T314] usb 7-1: device descriptor read/64, error -71 [ 34.248642][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 34.269926][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.348941][ T314] usb 7-1: device descriptor read/64, error -71 [ 34.399912][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.477117][ T314] usb usb7-port1: attempt power cycle [ 34.648964][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 34.679922][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.814226][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.831934][ T314] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 34.870195][ T314] usb 7-1: device descriptor read/8, error -71 [ 34.929322][ T9] usb usb2-port1: unable to enumerate USB device [ 35.009769][ T314] usb 7-1: device descriptor read/8, error -71 [ 35.249149][ T314] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 35.279902][ T314] usb 7-1: device descriptor read/8, error -71 [ 35.410162][ T314] usb 7-1: device descriptor read/8, error -71 [ 35.443197][ T36] audit: type=1400 audit(1793611076.929:354): avc: denied { read write } for pid=1051 comm="syz.1.111" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.490828][ T1052] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 35.519095][ T314] usb usb7-port1: unable to enumerate USB device [ 35.528806][ T1052] device-mapper: table: 252:1: crypt: Error decoding and setting key (-ENOKEY) [ 35.558912][ T1052] device-mapper: ioctl: error adding target to table [ 35.630027][ T1066] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 35.889023][ T62] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 36.059731][ T62] usb 2-1: not running at top speed; connect to a high speed hub [ 36.077937][ T62] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.105859][ T62] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 36.130747][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.164989][ T62] usb 2-1: Found UVC 1.00 device (0000:0000) [ 36.372838][ T62] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 36.389164][ T62] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 36.408497][ T62] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 36.441512][ T62] usb 2-1: USB disconnect, device number 12 [ 36.952847][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 36.957411][ T36] audit: type=1400 audit(1793611078.439:365): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.033926][ T1145] device-mapper: table: 252:2: crypt: Device lookup failed (-ENOENT) [ 37.068913][ T1145] device-mapper: ioctl: error adding target to table [ 37.252625][ T36] audit: type=1400 audit(1793611078.739:366): avc: denied { create } for pid=1160 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.384444][ T36] audit: type=1400 audit(1793611078.869:367): avc: denied { bind } for pid=1172 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.437451][ T36] audit: type=1400 audit(1793611078.869:368): avc: denied { setopt } for pid=1172 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.493929][ T36] audit: type=1400 audit(1793611078.869:369): avc: denied { write } for pid=1172 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.547713][ T1188] input: syz0 as /devices/virtual/input/input7 [ 37.554220][ T36] audit: type=1400 audit(1793611078.919:370): avc: denied { create } for pid=1174 comm="syz.6.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.612587][ T36] audit: type=1400 audit(1793611078.919:371): avc: denied { write } for pid=1174 comm="syz.6.116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.818927][ T62] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 37.982604][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 38.007995][ T62] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 38.031322][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 250, changing to 11 [ 38.073462][ T62] usb 7-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 38.092607][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.118909][ T62] usb 7-1: Product: syz [ 38.129044][ T62] usb 7-1: Manufacturer: syz [ 38.142593][ T62] usb 7-1: SerialNumber: syz [ 38.169599][ T1188] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 38.316783][ T36] audit: type=1400 audit(1793611079.799:372): avc: denied { write } for pid=1260 comm="syz.1.122" name="file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.343420][ T1265] fuse: Bad value for 'rootmode' [ 38.365115][ T36] audit: type=1400 audit(1793611079.799:373): avc: denied { open } for pid=1260 comm="syz.1.122" path="/42/file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.401550][ T36] audit: type=1326 audit(1793611079.879:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.6.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762619f559 code=0x0 [ 38.499529][ T1288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.121'. [ 38.725410][ T1310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.554930][ T62] usb 7-1: USB disconnect, device number 7 [ 40.602255][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.158926][ T62] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 41.311064][ T62] usb 7-1: not running at top speed; connect to a high speed hub [ 41.319694][ T62] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.333438][ T62] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.352510][ T62] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 41.369053][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.397723][ T62] usb 7-1: Found UVC 1.00 device (046d:0825) [ 41.408937][ T62] usb 7-1: Failed to create links for entity 1 [ 41.425270][ T62] usb 7-1: Failed to register entities (-22). [ 41.438907][ T62] usb 7-1: No streaming interface found for terminal 2. [ 41.599990][ T1500] 9pnet_fd: Insufficient options for proto=fd [ 41.608312][ T62] usb 7-1: USB disconnect, device number 8 [ 42.145766][ T1566] netlink: 'syz.6.135': attribute type 4 has an invalid length. [ 42.188913][ T1566] netlink: 17 bytes leftover after parsing attributes in process `syz.6.135'. [ 42.197704][ T1571] input: syz0 as /devices/virtual/input/input8 [ 42.243453][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 42.243471][ T36] audit: type=1400 audit(1793611083.729:389): avc: denied { append } for pid=1572 comm="syz.6.136" name="uprobe_events" dev="tracefs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.279952][ T1573] can0: slcan on ttynull. [ 42.289498][ T1573] ======================================================= [ 42.289498][ T1573] WARNING: The mand mount option has been deprecated and [ 42.289498][ T1573] and is ignored by this kernel. Remove the mand [ 42.289498][ T1573] option from the mount to silence this warning. [ 42.289498][ T1573] ======================================================= [ 42.333715][ T36] audit: type=1400 audit(1793611083.819:390): avc: denied { mounton } for pid=1572 comm="syz.6.136" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 42.420174][ T1573] can0 (unregistered): slcan off ttynull. [ 43.318180][ T36] audit: type=1326 audit(1793611084.799:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.1.141" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3fd59f559 code=0x0 [ 44.148556][ T1705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1705 comm=syz.6.144 [ 44.270795][ T1724] 9pnet_fd: Insufficient options for proto=fd [ 44.310554][ T36] audit: type=1400 audit(1793611085.789:392): avc: denied { create } for pid=1727 comm="syz.1.148" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.358916][ T36] audit: type=1400 audit(1793611085.799:393): avc: denied { mounton } for pid=1727 comm="syz.1.148" path="/51/file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.395208][ T1738] overlayfs: failed to clone upperpath [ 44.426883][ T36] audit: type=1400 audit(1793611085.909:394): avc: denied { getopt } for pid=1736 comm="syz.6.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.471602][ T1742] overlayfs: failed to clone upperpath [ 44.774263][ T36] audit: type=1400 audit(1793611086.259:395): avc: denied { create } for pid=1763 comm="syz.6.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 44.828955][ T36] audit: type=1400 audit(1793611086.309:396): avc: denied { sys_admin } for pid=1763 comm="syz.6.153" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 44.834075][ T1764] incfs: Options parsing error. -22 [ 44.889841][ T36] audit: type=1400 audit(1793611086.339:397): avc: denied { associate } for pid=1767 comm="syz.6.153" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 44.970966][ T1764] incfs: mount failed -22 [ 45.264197][ T36] audit: type=1400 audit(1793611086.749:398): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.581220][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.621684][ T1811] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 45.679150][ T1811] overlayfs: failed to clone lowerpath [ 45.748979][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 45.759903][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.788947][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.800388][ T13] bridge_slave_1: left allmulticast mode [ 45.806047][ T13] bridge_slave_1: left promiscuous mode [ 45.819017][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.827706][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 45.849154][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.857198][ T9] usb 2-1: SerialNumber: syz [ 45.862019][ T13] bridge_slave_0: left allmulticast mode [ 45.867665][ T13] bridge_slave_0: left promiscuous mode [ 45.878967][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.880939][ T1823] Dead loop on virtual device ip6_vti0, fix it urgently! [ 45.900710][ T9] usb 2-1: 0:2 : does not exist [ 46.014606][ T13] veth1_macvtap: left promiscuous mode [ 46.029053][ T13] veth0_vlan: left promiscuous mode [ 46.206140][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.246664][ T1819] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.268296][ T1819] bridge_slave_0: entered allmulticast mode [ 46.274602][ T1845] x_tables: unsorted underflow at hook 3 [ 46.289340][ T1819] bridge_slave_0: entered promiscuous mode [ 46.299043][ T1848] x_tables: unsorted underflow at hook 3 [ 46.305895][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.318914][ T1819] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.338950][ T1819] bridge_slave_1: entered allmulticast mode [ 46.353112][ T1819] bridge_slave_1: entered promiscuous mode [ 46.510785][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.517851][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.525155][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.532222][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.544155][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 46.558470][ T9] usb 2-1: USB disconnect, device number 13 [ 46.596166][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.609140][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.629160][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.636214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.660843][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.667901][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.710556][ T1819] veth0_vlan: entered promiscuous mode [ 46.725134][ T1819] veth1_macvtap: entered promiscuous mode [ 47.300412][ T1946] overlayfs: failed to clone upperpath [ 47.319470][ T1946] overlayfs: missing 'lowerdir' [ 47.329963][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 47.329977][ T36] audit: type=1400 audit(1793611088.819:408): avc: denied { bind } for pid=1944 comm="syz.6.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.446007][ T36] audit: type=1400 audit(1793611088.929:409): avc: denied { mounton } for pid=1956 comm="syz.7.178" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.576267][ T13] bridge_slave_1: left allmulticast mode [ 47.597097][ T13] bridge_slave_1: left promiscuous mode [ 47.604969][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.615413][ T13] bridge_slave_0: left allmulticast mode [ 47.623379][ T13] bridge_slave_0: left promiscuous mode [ 47.639032][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.698084][ T36] audit: type=1400 audit(1793611089.179:410): avc: denied { read } for pid=1976 comm="syz.7.182" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.746373][ T36] audit: type=1400 audit(1793611089.179:411): avc: denied { open } for pid=1976 comm="syz.7.182" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.771639][ T36] audit: type=1400 audit(1793611089.179:412): avc: denied { ioctl } for pid=1976 comm="syz.7.182" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.851255][ T1983] FAULT_INJECTION: forcing a failure. [ 47.851255][ T1983] name failslab, interval 1, probability 0, space 0, times 0 [ 47.884257][ T1983] CPU: 0 UID: 0 PID: 1983 Comm: syz.7.183 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 47.884290][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.884302][ T1983] Call Trace: [ 47.884308][ T1983] [ 47.884315][ T1983] __dump_stack+0x21/0x30 [ 47.884338][ T1983] dump_stack_lvl+0x140/0x1c0 [ 47.884356][ T1983] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.884371][ T1983] ? avc_has_perm_noaudit+0x289/0x360 [ 47.884391][ T1983] dump_stack+0x19/0x20 [ 47.884411][ T1983] should_fail_ex+0x3c2/0x510 [ 47.884437][ T1983] should_failslab+0xac/0x100 [ 47.884456][ T1983] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 47.884486][ T1983] ? sock_alloc_inode+0x48/0x150 [ 47.884503][ T1983] ? __kasan_check_write+0x18/0x20 [ 47.884529][ T1983] sock_alloc_inode+0x48/0x150 [ 47.884550][ T1983] ? __cfi_sock_alloc_inode+0x10/0x10 [ 47.884566][ T1983] alloc_inode+0x7a/0x270 [ 47.884585][ T1983] ? bpf_lsm_socket_create+0xd/0x20 [ 47.884610][ T1983] new_inode_pseudo+0x19/0x40 [ 47.884633][ T1983] __sock_create+0x130/0x810 [ 47.884653][ T1983] __sys_socket+0xe1/0x1c0 [ 47.884670][ T1983] __x64_sys_socket+0x7e/0x90 [ 47.884692][ T1983] x64_sys_call+0x2608/0x2ee0 [ 47.884711][ T1983] do_syscall_64+0x57/0xf0 [ 47.884731][ T1983] ? clear_bhb_loop+0x50/0xa0 [ 47.884756][ T1983] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.884778][ T1983] RIP: 0033:0x7f10a639f559 [ 47.884796][ T1983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.884811][ T1983] RSP: 002b:00007f10a7302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 47.884834][ T1983] RAX: ffffffffffffffda RBX: 00007f10a6625fa0 RCX: 00007f10a639f559 [ 47.884849][ T1983] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 47.884860][ T1983] RBP: 00007f10a7302090 R08: 0000000000000000 R09: 0000000000000000 [ 47.884872][ T1983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.884885][ T1983] R13: 00007f10a6626038 R14: 00007f10a6625fa0 R15: 00007ffd6c48b438 [ 47.884902][ T1983] [ 47.884910][ T1983] socket: no more sockets [ 47.885521][ T13] veth1_macvtap: left promiscuous mode [ 47.937504][ T36] audit: type=1400 audit(1793611089.389:413): avc: denied { write } for pid=1988 comm="syz.6.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.962213][ T13] veth0_vlan: left promiscuous mode [ 47.978936][ T36] audit: type=1400 audit(1793611089.429:414): avc: denied { map } for pid=1991 comm="syz.7.185" path="socket:[10249]" dev="sockfs" ino=10249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 48.151389][ T36] audit: type=1400 audit(1793611089.439:415): avc: denied { read write } for pid=1994 comm="syz.7.186" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 48.175924][ T36] audit: type=1400 audit(1793611089.439:416): avc: denied { open } for pid=1994 comm="syz.7.186" path="/11/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 48.200621][ T36] audit: type=1400 audit(1793611089.439:417): avc: denied { bind } for pid=1994 comm="syz.7.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.243975][ T1970] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.251106][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.258155][ T1970] bridge_slave_0: entered allmulticast mode [ 48.264724][ T1970] bridge_slave_0: entered promiscuous mode [ 48.271775][ T1970] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.278805][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.286627][ T1970] bridge_slave_1: entered allmulticast mode [ 48.295483][ T1970] bridge_slave_1: entered promiscuous mode [ 48.362405][ T1970] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.369483][ T1970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.376726][ T1970] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.383782][ T1970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.423978][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.439923][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.448427][ T2025] FAULT_INJECTION: forcing a failure. [ 48.448427][ T2025] name failslab, interval 1, probability 0, space 0, times 0 [ 48.462246][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.469318][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.472064][ T2025] CPU: 1 UID: 0 PID: 2025 Comm: syz.7.193 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 48.472093][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.472104][ T2025] Call Trace: [ 48.472110][ T2025] [ 48.472116][ T2025] __dump_stack+0x21/0x30 [ 48.472137][ T2025] dump_stack_lvl+0x140/0x1c0 [ 48.472153][ T2025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.472170][ T2025] dump_stack+0x19/0x20 [ 48.472186][ T2025] should_fail_ex+0x3c2/0x510 [ 48.472210][ T2025] should_failslab+0xac/0x100 [ 48.472228][ T2025] kmem_cache_alloc_noprof+0x42/0x410 [ 48.472252][ T2025] ? security_inode_alloc+0x51/0x230 [ 48.472272][ T2025] security_inode_alloc+0x51/0x230 [ 48.472291][ T2025] inode_init_always_gfp+0x756/0x9e0 [ 48.472309][ T2025] ? __cfi_sock_alloc_inode+0x10/0x10 [ 48.472324][ T2025] alloc_inode+0xc5/0x270 [ 48.472341][ T2025] ? bpf_lsm_socket_create+0xd/0x20 [ 48.472365][ T2025] new_inode_pseudo+0x19/0x40 [ 48.472383][ T2025] __sock_create+0x130/0x810 [ 48.472400][ T2025] __sys_socket+0xe1/0x1c0 [ 48.472417][ T2025] __x64_sys_socket+0x7e/0x90 [ 48.472434][ T2025] x64_sys_call+0x2608/0x2ee0 [ 48.472451][ T2025] do_syscall_64+0x57/0xf0 [ 48.472468][ T2025] ? clear_bhb_loop+0x50/0xa0 [ 48.472489][ T2025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.472509][ T2025] RIP: 0033:0x7f10a639f559 [ 48.472524][ T2025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.472545][ T2025] RSP: 002b:00007f10a7302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 48.472564][ T2025] RAX: ffffffffffffffda RBX: 00007f10a6625fa0 RCX: 00007f10a639f559 [ 48.472577][ T2025] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 48.472588][ T2025] RBP: 00007f10a7302090 R08: 0000000000000000 R09: 0000000000000000 [ 48.472599][ T2025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.472609][ T2025] R13: 00007f10a6626038 R14: 00007f10a6625fa0 R15: 00007ffd6c48b438 [ 48.472623][ T2025] [ 48.472636][ T2025] socket: no more sockets [ 48.480863][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.692257][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.703560][ T2032] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 48.727145][ T1970] veth0_vlan: entered promiscuous mode [ 48.747120][ T1970] veth1_macvtap: entered promiscuous mode [ 48.795300][ T2044] device-mapper: ioctl: Unable to rename non-existent device, to LVM-syzh3 [ 49.058936][ T354] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 49.222754][ T354] usb 9-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 49.233175][ T354] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.241699][ T354] usb 9-1: Product: syz [ 49.246455][ T354] usb 9-1: Manufacturer: syz [ 49.251592][ T354] usb 9-1: SerialNumber: syz [ 49.381409][ T2131] input: syz0 as /devices/virtual/input/input11 [ 49.458970][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.600986][ T2162] FAULT_INJECTION: forcing a failure. [ 49.600986][ T2162] name failslab, interval 1, probability 0, space 0, times 0 [ 49.613828][ T2162] CPU: 1 UID: 0 PID: 2162 Comm: syz.1.211 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 49.613857][ T2162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 49.613868][ T2162] Call Trace: [ 49.613873][ T2162] [ 49.613879][ T2162] __dump_stack+0x21/0x30 [ 49.613900][ T2162] dump_stack_lvl+0x140/0x1c0 [ 49.613915][ T2162] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.613932][ T2162] dump_stack+0x19/0x20 [ 49.613946][ T2162] should_fail_ex+0x3c2/0x510 [ 49.613969][ T2162] ? security_sk_alloc+0x65/0x260 [ 49.613990][ T2162] should_failslab+0xac/0x100 [ 49.614006][ T2162] __kmalloc_noprof+0x69/0x510 [ 49.614036][ T2162] ? kasan_save_alloc_info+0x3a/0x50 [ 49.614056][ T2162] ? security_sk_alloc+0x65/0x260 [ 49.614074][ T2162] ? __kasan_kmalloc+0x96/0xb0 [ 49.614091][ T2162] security_sk_alloc+0x65/0x260 [ 49.614111][ T2162] sk_prot_alloc+0x123/0x3a0 [ 49.614131][ T2162] ? bpf_lsm_capable+0xd/0x20 [ 49.614151][ T2162] sk_alloc+0x40/0x590 [ 49.614168][ T2162] ? ns_capable+0x90/0xf0 [ 49.614186][ T2162] pfkey_create+0x12e/0x650 [ 49.614203][ T2162] __sock_create+0x3a2/0x810 [ 49.614222][ T2162] __sys_socket+0xe1/0x1c0 [ 49.614239][ T2162] __x64_sys_socket+0x7e/0x90 [ 49.614257][ T2162] x64_sys_call+0x2608/0x2ee0 [ 49.614275][ T2162] do_syscall_64+0x57/0xf0 [ 49.614292][ T2162] ? clear_bhb_loop+0x50/0xa0 [ 49.614314][ T2162] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.614336][ T2162] RIP: 0033:0x7fa3fd59f559 [ 49.614352][ T2162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.614366][ T2162] RSP: 002b:00007fa3fe384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 49.614386][ T2162] RAX: ffffffffffffffda RBX: 00007fa3fd825fa0 RCX: 00007fa3fd59f559 [ 49.614400][ T2162] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 49.614411][ T2162] RBP: 00007fa3fe384090 R08: 0000000000000000 R09: 0000000000000000 [ 49.614423][ T2162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.614433][ T2162] R13: 00007fa3fd826038 R14: 00007fa3fd825fa0 R15: 00007ffeeb2fe5b8 [ 49.614448][ T2162] [ 49.620009][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.818815][ T2171] netlink: 104 bytes leftover after parsing attributes in process `syz.1.214'. [ 49.858353][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 49.862691][ T2171] netlink: 104 bytes leftover after parsing attributes in process `syz.1.214'. [ 49.872998][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 49.894728][ T9] usb 8-1: Product: syz [ 49.898977][ T9] usb 8-1: Manufacturer: syz [ 49.910687][ T9] usb 8-1: bad CDC descriptors [ 50.034866][ T2199] sit: non-ECT from 172.30.0.2 with TOS=0xcd [ 50.083258][ T2206] FAULT_INJECTION: forcing a failure. [ 50.083258][ T2206] name failslab, interval 1, probability 0, space 0, times 0 [ 50.099599][ T2206] CPU: 0 UID: 0 PID: 2206 Comm: syz.1.220 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 50.099631][ T2206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.099645][ T2206] Call Trace: [ 50.099651][ T2206] [ 50.099658][ T2206] __dump_stack+0x21/0x30 [ 50.099682][ T2206] dump_stack_lvl+0x140/0x1c0 [ 50.099700][ T2206] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.099721][ T2206] ? __kasan_check_write+0x18/0x20 [ 50.099748][ T2206] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 50.099768][ T2206] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 50.099786][ T2206] dump_stack+0x19/0x20 [ 50.099804][ T2206] should_fail_ex+0x3c2/0x510 [ 50.099831][ T2206] should_failslab+0xac/0x100 [ 50.099850][ T2206] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 50.099875][ T2206] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 50.099893][ T2206] ? __d_alloc+0x42/0x8c0 [ 50.099917][ T2206] ? expand_files+0xda/0x6f0 [ 50.099937][ T2206] ? __x64_sys_socket+0x7e/0x90 [ 50.099956][ T2206] __d_alloc+0x42/0x8c0 [ 50.099980][ T2206] d_alloc_pseudo+0x23/0xc0 [ 50.100005][ T2206] alloc_file_pseudo+0xde/0x1f0 [ 50.100027][ T2206] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 50.100047][ T2206] ? _raw_spin_unlock+0x45/0x60 [ 50.100067][ T2206] sock_alloc_file+0xbe/0x2b0 [ 50.100084][ T2206] __sys_socket+0x14c/0x1c0 [ 50.100104][ T2206] __x64_sys_socket+0x7e/0x90 [ 50.100123][ T2206] x64_sys_call+0x2608/0x2ee0 [ 50.100142][ T2206] do_syscall_64+0x57/0xf0 [ 50.100161][ T2206] ? clear_bhb_loop+0x50/0xa0 [ 50.100184][ T2206] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.100206][ T2206] RIP: 0033:0x7fa3fd59f559 [ 50.100225][ T2206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.100239][ T2206] RSP: 002b:00007fa3fe384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 50.100261][ T2206] RAX: ffffffffffffffda RBX: 00007fa3fd825fa0 RCX: 00007fa3fd59f559 [ 50.100275][ T2206] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 50.100287][ T2206] RBP: 00007fa3fe384090 R08: 0000000000000000 R09: 0000000000000000 [ 50.100298][ T2206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.100309][ T2206] R13: 00007fa3fd826038 R14: 00007fa3fd825fa0 R15: 00007ffeeb2fe5b8 [ 50.100323][ T2206] [ 50.444333][ T2220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.223'. [ 51.028952][ T314] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 51.190732][ T314] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 51.208219][ T314] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 51.226100][ T314] usb 2-1: Product: syz [ 51.232262][ T314] ftdi_sio 2-1:5.0: FTDI USB Serial Device converter detected [ 51.240534][ T314] usb 2-1: Detected FT4233HP [ 51.797098][ T354] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.811954][ T354] usb 9-1: found format II with max.bitrate = 44931, frame size=8 [ 51.822950][ T354] usb 9-1: found format II with max.bitrate = 44931, frame size=8 [ 51.831924][ T354] usb 9-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 51.849473][ T354] usb 9-1: USB disconnect, device number 2 [ 51.865190][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.968658][ T320] usb 8-1: USB disconnect, device number 2 [ 52.007367][ T314] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 52.019141][ T314] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 52.027537][ T314] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 52.050009][ T314] usb 2-1: USB disconnect, device number 14 [ 52.066399][ T314] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 52.091171][ T314] ftdi_sio 2-1:5.0: device disconnected [ 52.120154][ T2372] : renamed from bridge0 (while UP) [ 52.138702][ T2372] kvm: kvm [2364]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x14b2 [ 52.920981][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 52.920997][ T36] audit: type=1400 audit(1793611094.409:432): avc: denied { map } for pid=2476 comm="syz.6.250" path="socket:[11246]" dev="sockfs" ino=11246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.938921][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.954173][ T36] audit: type=1400 audit(1793611094.409:433): avc: denied { read } for pid=2476 comm="syz.6.250" path="socket:[11246]" dev="sockfs" ino=11246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.963365][ T2482] fuse: Unknown parameter '2oot ode' [ 53.076127][ T36] audit: type=1400 audit(1793611094.559:434): avc: denied { getopt } for pid=2496 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.139931][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.160403][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 53.169591][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.177667][ T10] usb 8-1: Product: syz [ 53.182021][ T10] usb 8-1: Manufacturer: syz [ 53.187037][ T10] usb 8-1: SerialNumber: syz [ 53.197213][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 53.208928][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 53.394076][ T36] audit: type=1400 audit(1793611094.879:435): avc: denied { read write } for pid=2439 comm="syz.7.245" name="cdc-wdm0" dev="devtmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 53.417883][ C1] cdc_wdm 8-1:1.0: unknown notification 225 received: index 38327 len 44878 [ 53.426656][ C1] cdc_wdm 8-1:1.0: unknown notification 91 received: index 33259 len 57117 [ 53.435311][ C1] cdc_wdm 8-1:1.0: unknown notification 110 received: index 18283 len 55631 [ 53.444070][ C1] cdc_wdm 8-1:1.0: unknown notification 104 received: index 178 len 0 [ 53.452300][ C1] cdc_wdm 8-1:1.0: unknown notification 158 received: index 35209 len 23102 [ 53.461043][ C1] cdc_wdm 8-1:1.0: unknown notification 4 received: index 2 len 5390 [ 53.469171][ C1] cdc_wdm 8-1:1.0: unknown notification 148 received: index 21201 len 823 [ 53.477735][ C1] cdc_wdm 8-1:1.0: unknown notification 247 received: index 54601 len 21127 [ 53.486477][ C1] cdc_wdm 8-1:1.0: unknown notification 118 received: index 25181 len 47250 [ 53.495305][ C1] cdc_wdm 8-1:1.0: unknown notification 138 received: index 57232 len 54334 [ 53.504113][ C1] cdc_wdm 8-1:1.0: unknown notification 84 received: index 57075 len 60198 [ 53.512782][ C1] cdc_wdm 8-1:1.0: unknown notification 119 received: index 349 len 178 [ 53.521178][ C1] cdc_wdm 8-1:1.0: unknown notification 146 received: index 28104 len 37665 [ 53.529915][ C1] cdc_wdm 8-1:1.0: unknown notification 20 received: index 5620 len 1302 [ 53.538373][ C1] cdc_wdm 8-1:1.0: unknown notification 139 received: index 53630 len 65225 [ 53.547123][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 1 bytes [ 53.554524][ T36] audit: type=1400 audit(1793611094.879:436): avc: denied { open } for pid=2439 comm="syz.7.245" path="/dev/cdc-wdm0" dev="devtmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 53.640376][ T36] audit: type=1400 audit(1793611095.129:437): avc: denied { write } for pid=2571 comm="syz.8.259" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.651357][ T2572] usb usb9: usbfs: process 2572 (syz.8.259) did not claim interface 0 before use [ 53.758057][ T2591] : port 1(bridge_slave_0) entered disabled state [ 54.009888][ T36] audit: type=1400 audit(1793611095.499:438): avc: denied { write } for pid=2615 comm="syz.1.266" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.011314][ T2617] rust_binder: Write failure EFAULT in pid:272 [ 54.275090][ T10] usb 8-1: USB disconnect, device number 3 [ 54.439243][ T36] audit: type=1400 audit(1793611095.929:439): avc: denied { map } for pid=2651 comm="syz.1.268" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.464586][ T2654] rust_binder: 2651:2654 no such ref 3 [ 54.715904][ T2696] tipc: Started in network mode [ 54.721150][ T36] audit: type=1400 audit(1793611096.199:440): avc: denied { ioctl } for pid=2695 comm="syz.8.279" path="socket:[16462]" dev="sockfs" ino=16462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.730076][ T2696] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 54.771289][ T2696] tipc: Enabled bearer , priority 10 [ 54.776225][ T36] audit: type=1400 audit(1793611096.199:441): avc: denied { write } for pid=2695 comm="syz.8.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.902254][ T2725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.283'. [ 54.939663][ T2725] netlink: 168 bytes leftover after parsing attributes in process `syz.6.283'. [ 54.986862][ T2730] netlink: 'syz.1.289': attribute type 4 has an invalid length. [ 55.003792][ T2730] netlink: 17 bytes leftover after parsing attributes in process `syz.1.289'. [ 55.318951][ T314] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 55.326811][ T496] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 55.500109][ T314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.510324][ T496] usb 9-1: config 127 has an invalid interface number: 240 but max is 0 [ 55.518669][ T496] usb 9-1: config 127 has no interface number 0 [ 55.525651][ T314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.535496][ T314] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.544816][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.553128][ T314] usb 2-1: SerialNumber: syz [ 55.557928][ T496] usb 9-1: New USB device found, idVendor=9b98, idProduct=ca47, bcdDevice=19.87 [ 55.567037][ T496] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.576539][ T496] usb 9-1: Product: syz [ 55.580803][ T496] usb 9-1: Manufacturer: syz [ 55.585415][ T496] usb 9-1: SerialNumber: syz [ 55.778990][ T314] usb 2-1: 0:2 : does not exist [ 55.793827][ T2756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.802681][ T314] usb 2-1: USB disconnect, device number 15 [ 55.817287][ T2756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.828003][ T2344] udevd[2344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.849853][ T496] cdc_eem 9-1:127.240: probe with driver cdc_eem failed with error -22 [ 55.860223][ T496] usb 9-1: USB disconnect, device number 3 [ 55.898924][ T495] tipc: Node number set to 4269801488 [ 56.367355][ T2942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2942 comm=syz.1.301 [ 56.628974][ T314] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 56.688931][ T354] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 56.784142][ T2997] fuse: Bad value for 'fd' [ 56.796566][ T2997] overlayfs: failed to clone lowerpath [ 56.819913][ T314] usb 9-1: config 1 interface 0 altsetting 81 bulk endpoint 0x82 has invalid maxpacket 128 [ 56.842039][ T314] usb 9-1: config 1 interface 0 has no altsetting 0 [ 56.850422][ T314] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 56.859931][ T354] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.868466][ T314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.882840][ T314] usb 9-1: Product: syz [ 56.885954][ T354] usb 2-1: config 0 has no interfaces? [ 56.888179][ T314] usb 9-1: Manufacturer: syz [ 56.899396][ T354] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 56.908278][ T314] usb 9-1: SerialNumber: syz [ 56.914144][ T2940] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 56.918748][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.943742][ T354] usb 2-1: Product: syz [ 56.948909][ T354] usb 2-1: Manufacturer: syz [ 56.958914][ T354] usb 2-1: SerialNumber: syz [ 56.968043][ T354] usb 2-1: config 0 descriptor?? [ 57.161691][ T314] usblp0: Disabling reads from problematic bidirectional printer [ 57.172524][ T314] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 81 proto 2 vid 0x03F0 pid 0x0004 [ 57.181648][ T3046] sit: non-ECT from 172.30.0.8 with TOS=0xcd [ 57.186948][ T314] usb 9-1: USB disconnect, device number 4 [ 57.202649][ T314] usblp0: removed [ 57.212338][ T354] usb 2-1: USB disconnect, device number 16 [ 57.819032][ T3137] syz.1.323 uses obsolete (PF_INET,SOCK_PACKET) [ 57.829318][ T3136] batadv_slave_0: entered promiscuous mode [ 57.835789][ T3133] ip6gretap0: entered promiscuous mode [ 57.850608][ T3141] netlink: 16 bytes leftover after parsing attributes in process `syz.8.324'. [ 57.859601][ T3141] netlink: 20 bytes leftover after parsing attributes in process `syz.8.324'. [ 57.876190][ T3132] ip6gretap0: left promiscuous mode [ 57.881600][ T354] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.889045][ T3132] batadv_slave_0: left promiscuous mode [ 57.932878][ T3153] sit: non-ECT from 172.30.0.2 with TOS=0xcd [ 57.984859][ T3163] FAULT_INJECTION: forcing a failure. [ 57.984859][ T3163] name failslab, interval 1, probability 0, space 0, times 0 [ 57.998069][ T3163] CPU: 1 UID: 0 PID: 3163 Comm: syz.8.328 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 57.998107][ T3163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 57.998121][ T3163] Call Trace: [ 57.998126][ T3163] [ 57.998135][ T3163] __dump_stack+0x21/0x30 [ 57.998160][ T3163] dump_stack_lvl+0x140/0x1c0 [ 57.998178][ T3163] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.998195][ T3163] ? __asan_memcpy+0x5a/0x80 [ 57.998220][ T3163] ? errseq_sample+0x48/0x70 [ 57.998240][ T3163] dump_stack+0x19/0x20 [ 57.998256][ T3163] should_fail_ex+0x3c2/0x510 [ 57.998285][ T3163] ? aio_setup_ring+0x2f4/0xc60 [ 57.998306][ T3163] should_failslab+0xac/0x100 [ 57.998325][ T3163] __kmalloc_noprof+0x69/0x510 [ 57.998351][ T3163] ? aio_setup_ring+0x2f4/0xc60 [ 57.998384][ T3163] aio_setup_ring+0x2f4/0xc60 [ 57.998406][ T3163] ? free_ioctx_reqs+0x170/0x170 [ 57.998428][ T3163] ioctx_alloc+0x337/0x840 [ 57.998448][ T3163] __se_sys_io_setup+0x6f/0x230 [ 57.998468][ T3163] __x64_sys_io_setup+0x5f/0x80 [ 57.998487][ T3163] x64_sys_call+0x26a4/0x2ee0 [ 57.998507][ T3163] do_syscall_64+0x57/0xf0 [ 57.998525][ T3163] ? clear_bhb_loop+0x50/0xa0 [ 57.998548][ T3163] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.998571][ T3163] RIP: 0033:0x7f31cfb9f559 [ 57.998587][ T3163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.998603][ T3163] RSP: 002b:00007f31d0998028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 57.998624][ T3163] RAX: ffffffffffffffda RBX: 00007f31cfe25fa0 RCX: 00007f31cfb9f559 [ 57.998640][ T3163] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 000000000000239f [ 57.998653][ T3163] RBP: 00007f31cfc36b50 R08: 0000000000000000 R09: 0000000000000000 [ 57.998668][ T3163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.998680][ T3163] R13: 00007f31cfe26038 R14: 00007f31cfe25fa0 R15: 00007ffda6ab1888 [ 57.998696][ T3163] [ 58.049013][ T354] usb 8-1: Using ep0 maxpacket: 32 [ 58.240764][ T354] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 58.250118][ T354] usb 8-1: config 0 has no interface number 0 [ 58.256214][ T354] usb 8-1: config 0 interface 184 has no altsetting 0 [ 58.268544][ T354] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 58.292791][ T354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.302378][ T354] usb 8-1: Product: syz [ 58.306931][ T354] usb 8-1: Manufacturer: syz [ 58.311169][ T3193] netlink: 'syz.8.331': attribute type 17 has an invalid length. [ 58.311601][ T354] usb 8-1: SerialNumber: syz [ 58.321870][ T3193] netlink: 24 bytes leftover after parsing attributes in process `syz.8.331'. [ 58.333686][ T354] usb 8-1: config 0 descriptor?? [ 58.338694][ T3193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.331'. [ 58.340857][ T354] smsc75xx v1.0.0 [ 58.409464][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 58.409480][ T36] audit: type=1400 audit(1793611099.899:451): avc: denied { mounton } for pid=3203 comm="syz.8.333" path="/26/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.450892][ T3204] netlink: 'syz.8.333': attribute type 27 has an invalid length. [ 58.481101][ T3204] : port 1(bridge_slave_0) entered blocking state [ 58.488084][ T3204] : port 1(bridge_slave_0) entered forwarding state [ 58.644090][ T36] audit: type=1400 audit(1793611100.129:452): avc: denied { bind } for pid=3229 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.678947][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 58.841016][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 58.850853][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.864057][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.874880][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.890762][ T10] usb 9-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 58.900351][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 58.913158][ T10] usb 9-1: Product: syz [ 58.917345][ T10] usb 9-1: Manufacturer: syz [ 58.918065][ T3268] sit: non-ECT from 172.30.0.2 with TOS=0xcd [ 58.932187][ T10] usb 9-1: Found UVC 1.00 device syz (8086:0ad2) [ 58.943271][ T354] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 58.955483][ T10] usb 9-1: No valid video chain found. [ 58.961500][ T354] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 59.091659][ T36] audit: type=1400 audit(1793611100.579:453): avc: denied { setopt } for pid=3293 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.111882][ T36] audit: type=1400 audit(1793611100.579:454): avc: denied { remount } for pid=3293 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.131915][ T3212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.143795][ T3212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.153533][ T3212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.162650][ T3212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.172554][ T3212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.182952][ T3212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.199579][ T3212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.212210][ T3212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.222538][ T3212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.232842][ T3212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.296085][ T2136] usb 9-1: USB disconnect, device number 5 [ 59.598932][ T314] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.748919][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 59.755434][ T314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.764004][ T314] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.777056][ T314] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 59.791252][ T314] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 59.800394][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.812641][ T314] usb 2-1: Product: syz [ 59.819264][ T314] usb 2-1: Manufacturer: syz [ 59.824776][ T314] usb 2-1: SerialNumber: syz [ 59.957938][ T3403] netlink: 40 bytes leftover after parsing attributes in process `syz.6.350'. [ 60.033328][ T36] audit: type=1400 audit(1793611101.519:455): avc: denied { read write } for pid=3319 comm="syz.1.344" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.060213][ T314] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 60.060826][ T36] audit: type=1400 audit(1793611101.519:456): avc: denied { open } for pid=3319 comm="syz.1.344" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.071486][ T314] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 60.090951][ T36] audit: type=1400 audit(1793611101.519:457): avc: denied { getopt } for pid=3319 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.131948][ T314] usb 2-1: USB disconnect, device number 17 [ 60.139454][ T3423] futex_wake_op: syz.6.354 tries to shift op by 144; fix this program [ 60.151680][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.154329][ T3423] futex_wake_op: syz.6.354 tries to shift op by 144; fix this program [ 60.278914][ T2136] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 60.448964][ T2136] usb 9-1: Invalid ep0 maxpacket: 64 [ 60.588951][ T2136] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 60.660631][ T354] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 60.689080][ T36] audit: type=1400 audit(1793611102.169:458): avc: denied { getopt } for pid=3491 comm="syz.7.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.711189][ T354] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 60.736535][ T354] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 60.756057][ T36] audit: type=1400 audit(1793611102.239:459): avc: denied { setopt } for pid=3491 comm="syz.7.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.779111][ T354] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 60.795488][ T2136] usb 9-1: Invalid ep0 maxpacket: 64 [ 60.810609][ T354] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 60.819232][ T2136] usb usb9-port1: attempt power cycle [ 60.829161][ T3513] netlink: 57 bytes leftover after parsing attributes in process `syz.6.360'. [ 60.840548][ T354] usb 8-1: USB disconnect, device number 4 [ 60.954084][ T3528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 60.965460][ T36] audit: type=1400 audit(1793611102.459:460): avc: denied { bind } for pid=3519 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.178954][ T2136] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 61.199308][ T2136] usb 9-1: Invalid ep0 maxpacket: 64 [ 61.348938][ T2136] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 61.369250][ T2136] usb 9-1: Invalid ep0 maxpacket: 64 [ 61.375540][ T2136] usb usb9-port1: unable to enumerate USB device [ 61.421345][ T3582] FAULT_INJECTION: forcing a failure. [ 61.421345][ T3582] name failslab, interval 1, probability 0, space 0, times 0 [ 61.434263][ T3582] CPU: 0 UID: 0 PID: 3582 Comm: syz.7.368 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 61.434297][ T3582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.434307][ T3582] Call Trace: [ 61.434313][ T3582] [ 61.434320][ T3582] __dump_stack+0x21/0x30 [ 61.434342][ T3582] dump_stack_lvl+0x140/0x1c0 [ 61.434359][ T3582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.434376][ T3582] ? release_sock+0x171/0x1f0 [ 61.434396][ T3582] dump_stack+0x19/0x20 [ 61.434411][ T3582] should_fail_ex+0x3c2/0x510 [ 61.434436][ T3582] should_failslab+0xac/0x100 [ 61.434454][ T3582] kmem_cache_alloc_node_noprof+0x45/0x420 [ 61.434479][ T3582] ? netlink_data_ready+0x20/0x20 [ 61.434499][ T3582] ? __alloc_skb+0x10c/0x360 [ 61.434518][ T3582] __alloc_skb+0x10c/0x360 [ 61.434536][ T3582] netlink_alloc_large_skb+0xf7/0x1b0 [ 61.434556][ T3582] netlink_sendmsg+0x576/0xad0 [ 61.434576][ T3582] ? __cfi_netlink_sendmsg+0x10/0x10 [ 61.434598][ T3582] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 61.434623][ T3582] ? security_socket_sendmsg+0x3d/0x100 [ 61.434644][ T3582] ____sys_sendmsg+0x9a1/0xa00 [ 61.434667][ T3582] ? __import_iovec+0x5b9/0x7d0 [ 61.434686][ T3582] ? __sys_sendmsg_sock+0x50/0x50 [ 61.434707][ T3582] ? import_iovec+0x80/0xb0 [ 61.434726][ T3582] ___sys_sendmsg+0x2a6/0x370 [ 61.434746][ T3582] ? __sys_sendmsg+0x260/0x260 [ 61.434767][ T3582] ? proc_fail_nth_write+0x184/0x220 [ 61.434788][ T3582] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 61.434812][ T3582] ? __fget_files+0x2bc/0x330 [ 61.434828][ T3582] __x64_sys_sendmsg+0x1be/0x2a0 [ 61.434849][ T3582] ? fput+0x1a4/0x230 [ 61.434867][ T3582] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 61.434887][ T3582] ? ksys_write+0x1f3/0x260 [ 61.434911][ T3582] ? __kasan_check_read+0x15/0x20 [ 61.434934][ T3582] x64_sys_call+0x2a4c/0x2ee0 [ 61.434953][ T3582] do_syscall_64+0x57/0xf0 [ 61.434971][ T3582] ? clear_bhb_loop+0x50/0xa0 [ 61.434993][ T3582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.435015][ T3582] RIP: 0033:0x7f10a639f559 [ 61.435032][ T3582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.435048][ T3582] RSP: 002b:00007f10a7302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.435068][ T3582] RAX: ffffffffffffffda RBX: 00007f10a6625fa0 RCX: 00007f10a639f559 [ 61.435083][ T3582] RDX: 00000000000000c0 RSI: 0000200000000300 RDI: 0000000000000003 [ 61.435104][ T3582] RBP: 00007f10a7302090 R08: 0000000000000000 R09: 0000000000000000 [ 61.435117][ T3582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.435128][ T3582] R13: 00007f10a6626038 R14: 00007f10a6625fa0 R15: 00007ffd6c48b438 [ 61.435144][ T3582] [ 61.725747][ T3616] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.756409][ T3616] rust_binder: Read failure Err(EFAULT) in pid:129 [ 61.774162][ T3616] rust_binder: 3615:3616 got transaction to invalid handle 1 [ 61.781684][ T3616] rust_binder: 3615:3616 transaction call to 0:0 failed ENOENT, code 0 size 80-24 line process.rs:958 [ 61.834233][ T3634] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 61.842987][ T3634] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 61.903871][ T3645] sit0: entered promiscuous mode [ 61.910293][ T3645] netlink: 'syz.6.376': attribute type 1 has an invalid length. [ 61.917939][ T3645] netlink: 1 bytes leftover after parsing attributes in process `syz.6.376'. [ 62.068925][ T62] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 62.101033][ T3674] No source specified [ 62.198939][ T62] usb 8-1: device descriptor read/64, error -71 [ 62.438923][ T62] usb 8-1: device descriptor read/64, error -71 [ 62.678928][ T62] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 62.808955][ T62] usb 8-1: device descriptor read/64, error -71 [ 63.048910][ T62] usb 8-1: device descriptor read/64, error -71 [ 63.159033][ T62] usb usb8-port1: attempt power cycle [ 63.448955][ T2136] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 63.518952][ T62] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 63.540252][ T62] usb 8-1: device descriptor read/8, error -71 [ 63.620032][ T2136] usb 9-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 63.632690][ T2136] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 63.646528][ T2136] usb 9-1: config 1 interface 0 has no altsetting 0 [ 63.654840][ T2136] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 63.668892][ T2136] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.679289][ T2136] usb 9-1: Product: syz [ 63.684347][ T62] usb 8-1: device descriptor read/8, error -71 [ 63.690954][ T2136] usb 9-1: Manufacturer: syz [ 63.695657][ T2136] usb 9-1: SerialNumber: syz [ 63.907588][ T2136] usbhid 9-1:1.0: can't add hid device: -71 [ 63.915478][ T2136] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 63.926035][ T2136] usb 9-1: USB disconnect, device number 10 [ 63.948915][ T62] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 63.970033][ T62] usb 8-1: device descriptor read/8, error -71 [ 64.110000][ T62] usb 8-1: device descriptor read/8, error -71 [ 64.229026][ T62] usb usb8-port1: unable to enumerate USB device [ 64.433814][ T4092] sit: non-ECT from 172.30.0.9 with TOS=0xcd [ 64.722187][ T495] rust_binder: 3615: undelivered TRANSACTION_ERROR: 29201 [ 64.742951][ T4150] sit: non-ECT from 172.30.0.8 with TOS=0xcd [ 64.808945][ T62] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 64.860324][ T4178] netlink: 80 bytes leftover after parsing attributes in process `syz.1.407'. [ 64.969991][ T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.979954][ T62] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.993074][ T62] usb 9-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 65.013515][ T62] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.027415][ T62] usb 9-1: config 0 descriptor?? [ 65.084796][ T4219] ./dev/sda1: Can't lookup blockdev [ 65.103593][ T4218] sit: non-ECT from 172.30.0.2 with TOS=0xcd [ 65.239687][ T4249] overlayfs: failed to clone upperpath [ 65.418957][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 65.447322][ T62] logitech 0003:046D:C50C.0001: unbalanced delimiter at end of report description [ 65.458097][ T62] logitech 0003:046D:C50C.0001: parse failed [ 65.464366][ T62] logitech 0003:046D:C50C.0001: probe with driver logitech failed with error -22 [ 65.580046][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.590968][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.600884][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.613876][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.623062][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.631821][ T31] usb 2-1: config 0 descriptor?? [ 65.659308][ T4123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.668515][ T4123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.677040][ T4123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.688853][ T4123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.703970][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.712562][ T4123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.713240][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.726445][ T4123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.786453][ T4325] netlink: 104 bytes leftover after parsing attributes in process `syz.6.420'. [ 65.841795][ T31] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 65.859584][ T4346] netlink: 'syz.7.424': attribute type 58 has an invalid length. [ 65.864332][ T31] plantronics 0003:047F:FFFF.0002: parse failed [ 65.881519][ T31] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 65.891457][ T4346] netlink: 140 bytes leftover after parsing attributes in process `syz.7.424'. [ 65.906959][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 65.906972][ T36] audit: type=1400 audit(1793611107.389:466): avc: denied { setopt } for pid=4344 comm="syz.7.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.989071][ T4366] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 66.043213][ T495] usb 2-1: USB disconnect, device number 18 [ 66.168909][ T31] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 66.169424][ T4383] syz.6.430 (4383): attempted to duplicate a private mapping with mremap. This is not supported. [ 66.320208][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 66.335276][ T31] usb 8-1: config 1 has an invalid interface descriptor of length 5, skipping [ 66.349103][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.365090][ T31] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.380597][ T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.390335][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.404558][ T31] usb 8-1: Product: syz [ 66.409672][ T4409] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.431'. [ 66.412016][ T31] usb 8-1: Manufacturer: syz [ 66.423608][ T31] usb 8-1: SerialNumber: syz [ 66.457464][ T4417] incfs: Error accessing: ./file0. [ 66.462721][ T4417] incfs: mount failed -2 [ 66.647510][ T31] cdc_ncm 8-1:1.0: NCM or ECM functional descriptors missing [ 66.655319][ T4437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.665826][ T36] audit: type=1400 audit(1793611108.129:467): avc: denied { bind } for pid=4441 comm="syz.6.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.685076][ T31] cdc_ncm 8-1:1.0: bind() failure [ 66.690333][ T4437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.703891][ T31] usb 8-1: USB disconnect, device number 9 [ 66.784448][ T4448] mmap: syz.6.439 (4448) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.868935][ T496] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 67.034196][ T496] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.045123][ T496] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.065622][ T496] usb 2-1: config 0 interface 0 has no altsetting 0 [ 67.072591][ T496] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 67.081801][ T496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.095669][ T496] usb 2-1: config 0 descriptor?? [ 67.305355][ T496] usbhid 2-1:0.0: can't add hid device: -71 [ 67.312138][ T496] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 67.323246][ T496] usb 2-1: USB disconnect, device number 19 [ 67.418671][ T4564] netlink: 'syz.7.449': attribute type 4 has an invalid length. [ 67.426384][ T4564] netlink: 'syz.7.449': attribute type 5 has an invalid length. [ 67.436355][ T4564] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.449'. [ 67.585108][ T31] usb 9-1: USB disconnect, device number 11 [ 67.610955][ T4601] sit: non-ECT from 172.30.0.9 with TOS=0xcd [ 67.798981][ T62] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 67.821061][ T36] audit: type=1400 audit(1793611109.309:468): avc: denied { map } for pid=4631 comm="syz.6.456" path="socket:[20407]" dev="sockfs" ino=20407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 67.868922][ T36] audit: type=1400 audit(1793611109.349:469): avc: denied { mounton } for pid=4639 comm="syz.6.458" path="/file0" dev="rootfs" ino=19406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.149329][ T496] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 68.310808][ T496] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.331575][ T496] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.355888][ T496] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.366881][ T4697] sit: non-ECT from 172.30.0.8 with TOS=0xcd [ 68.384469][ T496] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 68.411089][ T496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 68.431348][ T496] usb 2-1: Product: syz [ 68.435607][ T496] usb 2-1: Manufacturer: syz [ 68.445148][ T496] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 68.462810][ T496] usb 2-1: No streaming interface found for terminal 2. [ 68.595893][ T36] audit: type=1400 audit(1793611110.079:470): avc: denied { accept } for pid=4717 comm="syz.7.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.621336][ T4721] ./dev/sda1: Can't lookup blockdev [ 68.648534][ T31] usb 2-1: USB disconnect, device number 20 [ 68.857161][ T4748] sit: non-ECT from 172.30.0.9 with TOS=0xcd [ 69.000066][ T36] audit: type=1400 audit(1793611110.479:471): avc: denied { mounton } for pid=4771 comm="syz.8.476" path="/42/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 69.292505][ T4811] sit: non-ECT from 172.30.0.2 with TOS=0xcd [ 69.438918][ T496] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 69.498520][ T36] audit: type=1400 audit(1793611110.979:472): avc: denied { accept } for pid=4825 comm="syz.1.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 69.551555][ T4838] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.592623][ T36] audit: type=1400 audit(1793611111.079:473): avc: denied { append } for pid=4833 comm="syz.1.487" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.619945][ T496] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 4 [ 69.654420][ T496] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023 [ 69.678437][ T496] usb 9-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 69.688292][ T496] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.704568][ T496] usb 9-1: Product: syz [ 69.714769][ T496] usb 9-1: Manufacturer: syz [ 69.724000][ T496] usb 9-1: SerialNumber: syz [ 69.939374][ T496] usb 9-1: Can't get UAC3 power state for id 10 [ 69.957492][ T496] usb 9-1: BAAD HEADPHONE p_chmask mismatch [ 69.973020][ T496] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.992285][ T496] usb 9-1: USB disconnect, device number 12 [ 70.015482][ T2347] udevd[2347]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.194298][ T4884] netlink: 36 bytes leftover after parsing attributes in process `syz.6.492'. [ 70.289897][ T36] audit: type=1400 audit(1793611111.779:474): avc: denied { watch } for pid=4894 comm="syz.6.494" path="/173" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.291745][ T4895] overlayfs: failed to clone upperpath [ 70.362831][ T4906] incfs: Error accessing: ./file0. [ 70.367996][ T4906] incfs: mount failed -20 [ 70.464641][ T36] audit: type=1400 audit(1793611111.949:475): avc: denied { read } for pid=4927 comm="syz.1.501" path="socket:[21844]" dev="sockfs" ino=21844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.489710][ T4930] sit: non-ECT from 172.30.0.9 with TOS=0xcd [ 70.569746][ T4952] overlayfs: failed to resolve './file0': -2 [ 70.586671][ T4950] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 70.607735][ T4960] overlay: filesystem on ./file0 not supported as upperdir [ 70.898959][ T62] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 71.049912][ T62] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.066777][ T62] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.089060][ T62] usb 9-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 71.104982][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.114666][ T62] usb 9-1: Product: syz [ 71.118900][ T62] usb 9-1: Manufacturer: syz [ 71.123520][ T62] usb 9-1: SerialNumber: syz [ 71.135066][ T62] r8152-cfgselector 9-1: Unknown version 0x0000 [ 71.145252][ T62] r8152 9-1:1.0: Expected endpoints are not found [ 71.304910][ T5069] sit: non-ECT from 172.30.0.8 with TOS=0xcd [ 71.380131][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 71.380148][ T36] audit: type=1400 audit(1793611112.869:478): avc: denied { listen } for pid=5085 comm="syz.7.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.409154][ T36] audit: type=1400 audit(1793611112.869:479): avc: denied { accept } for pid=5085 comm="syz.7.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.553203][ T36] audit: type=1400 audit(1793611113.039:480): avc: denied { accept } for pid=5115 comm="syz.7.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.722596][ T5140] sit: non-ECT from 172.30.0.8 with TOS=0xcd [ 71.894884][ T5173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.906524][ T5173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.919184][ T5172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.928435][ T5172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.967596][ T5188] netlink: 'syz.7.531': attribute type 10 has an invalid length. [ 72.088940][ T496] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 72.238915][ T496] usb 2-1: Using ep0 maxpacket: 32 [ 72.245956][ T496] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.254605][ T496] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 198, changing to 11 [ 72.265916][ T496] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1495, setting to 1024 [ 72.277247][ T496] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 72.287172][ T496] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 72.298915][ T496] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.308019][ T496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.316362][ T496] usb 2-1: Product: Й [ 72.320625][ T496] usb 2-1: Manufacturer:   [ 72.325274][ T496] usb 2-1: SerialNumber: 쾑⦍閛䖽붩꼷晛趼圷ꆍ愯訦⤱䘴฾ӂ樸㥏꺃᭲歆ႚ亝伈껱帿掲ᙷ熸纰ଜ螕龆鷰㔵鴭뱡ዽ埱倍褉Ừᦘꜱ族踇췱﷋猃笗狧㖻⚇╊ [ 72.346465][ T5166] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.561526][ T496] cdc_ncm 2-1:1.0: bind() failure [ 72.568420][ T496] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 72.575563][ T496] cdc_ncm 2-1:1.1: bind() failure [ 72.583255][ T496] usb 2-1: USB disconnect, device number 21 [ 72.933063][ T36] audit: type=1400 audit(1793611114.419:481): avc: denied { ioctl } for pid=5334 comm="syz.7.539" path="socket:[21017]" dev="sockfs" ino=21017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.970645][ T5348] rust_binder: 5347:5348 got transaction to invalid handle 1 [ 72.978187][ T5348] rust_binder: 5347:5348 transaction call to 0:0 failed ENOENT, code 2 size 0-0 line process.rs:958 [ 73.028939][ T36] audit: type=1400 audit(1793611114.509:482): avc: denied { read write } for pid=5357 comm="syz.7.542" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.057383][ T5358] netlink: 36 bytes leftover after parsing attributes in process `syz.7.542'. [ 73.079849][ T36] audit: type=1400 audit(1793611114.509:483): avc: denied { open } for pid=5357 comm="syz.7.542" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.109598][ T5358] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 73.147955][ T36] audit: type=1400 audit(1793611114.629:484): avc: denied { cmd } for pid=5380 comm="syz.1.547" path="socket:[22424]" dev="sockfs" ino=22424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.241330][ T5394] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.261160][ T36] audit: type=1400 audit(1793611114.749:485): avc: denied { bind } for pid=5397 comm="syz.8.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.288906][ T5394] rust_binder: Read failure Err(EFAULT) in pid:255 [ 73.292594][ T5402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.305577][ T36] audit: type=1400 audit(1793611114.769:486): avc: denied { setopt } for pid=5397 comm="syz.8.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.325846][ T5394] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.358427][ T5394] rust_binder: Read failure Err(EFAULT) in pid:255 [ 73.365307][ T36] audit: type=1400 audit(1793611114.769:487): avc: denied { getopt } for pid=5397 comm="syz.8.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.368943][ T5402] rust_binder: 5393:5402 got transaction to invalid handle 1 [ 73.396688][ T5402] rust_binder: 5393:5402 transaction call to 0:0 failed ENOENT, code 0 size 104-24 line process.rs:958 [ 73.417056][ T62] rust_binder: 5393: undelivered TRANSACTION_ERROR: 29201 [ 73.458933][ T2136] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 73.489510][ T5428] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 73.610310][ T2136] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.628916][ T2136] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 73.638156][ T2136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.654980][ T2136] uvcvideo 2-1:1.1: Unknown video format 00805559-aa00-3800-9b71-100100000000 [ 73.664715][ T2136] usb 2-1: Found UVC 1.00 device (0000:0000) [ 73.672473][ T2136] uvcvideo 2-1:1.1: No supported video formats found. [ 73.679506][ T2136] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 73.788911][ T314] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 73.875457][ T2136] usb 2-1: USB disconnect, device number 22 [ 73.911877][ T5484] cgroup: fork rejected by pids controller in /syz8 [ 73.948926][ T314] usb 8-1: Using ep0 maxpacket: 16 [ 73.966665][ T314] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.978229][ T314] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.996331][ T314] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 74.030806][ T314] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.039438][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.054687][ T314] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 74.078908][ T314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.092023][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.103253][ T314] usb 8-1: config 0 descriptor?? [ 74.110103][ T5545] netlink: 'syz.6.562': attribute type 9 has an invalid length. [ 74.128212][ T5545] netlink: 'syz.6.562': attribute type 2 has an invalid length. [ 74.128922][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.188958][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.198133][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.220009][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.229736][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.238988][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.247920][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.562'. [ 74.320365][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.335619][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.479188][ T5584] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 74.487428][ T5584] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 74.506531][ T5584] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 74.545749][ T5594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.548257][ T314] hid (null): bogus close delimiter [ 74.555369][ T5587] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 74.569587][ T5594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.579081][ T314] hid (null): unknown global tag 0xc [ 74.584523][ T314] hid (null): unknown global tag 0xd [ 74.596493][ T314] hid (null): unknown global tag 0x1b [ 74.611205][ T314] hid (null): bogus close delimiter [ 74.788883][ T314] usb 8-1: USB disconnect, device number 11 [ 74.968455][ T5663] overlayfs: failed to resolve './bus': -2 [ 75.132224][ T314] kernel read not supported for file /vga_arbiter (pid: 314 comm: kworker/1:3) [ 75.237348][ T5721] fuse: Unknown parameter 'rootTmode' [ 75.257177][ T5730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5730 comm=syz.6.588 [ 75.443377][ T5764] overlay: Bad value for 'nfs_export' [ 75.571497][ T5795] fuse: Bad value for 'fd' [ 75.580715][ T5793] overlayfs: failed to clone lowerpath [ 75.704290][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.732961][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.442202][ T5933] fuse: Unknown parameter 'e:nhW5 C^0x0000000000000005' [ 76.483085][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 76.483102][ T36] audit: type=1400 audit(1793611117.969:501): avc: denied { getopt } for pid=5931 comm="syz.8.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.512697][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5933 comm=syz.8.622 [ 76.589508][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.598644][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.696716][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.706114][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.369601][ T6033] raw_sendmsg: syz.6.633 forgot to set AF_INET. Fix it! [ 77.489444][ T6044] devtmpfs: Unknown parameter 'rootcontextnmƟ2va' [ 77.578955][ T314] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 77.729616][ T314] usb 8-1: device descriptor read/64, error -71 [ 78.008919][ T314] usb 8-1: device descriptor read/64, error -71 [ 78.051834][ T6085] ./dev/sda1: Can't lookup blockdev [ 78.073939][ T6089] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.644' sets config #568 [ 78.146217][ T6104] overlayfs: failed to clone upperpath [ 78.161755][ T6104] __nla_validate_parse: 59 callbacks suppressed [ 78.161773][ T6104] netlink: 104 bytes leftover after parsing attributes in process `syz.6.648'. [ 78.248945][ T314] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 78.408904][ T314] usb 8-1: device descriptor read/64, error -71 [ 78.544961][ T36] audit: type=1400 audit(1793611120.029:502): avc: denied { ioctl } for pid=6158 comm="syz.1.658" path="/179/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.578414][ T36] audit: type=1400 audit(1793611120.059:503): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.658912][ T314] usb 8-1: device descriptor read/64, error -71 [ 78.780057][ T314] usb usb8-port1: attempt power cycle [ 79.118921][ T314] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 79.149921][ T314] usb 8-1: device descriptor read/8, error -71 [ 79.280214][ T314] usb 8-1: device descriptor read/8, error -71 [ 79.290915][ T36] audit: type=1400 audit(1793611120.779:504): avc: denied { ioctl } for pid=6234 comm="syz.6.668" path="socket:[25242]" dev="sockfs" ino=25242 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.529593][ T314] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 79.569904][ T314] usb 8-1: device descriptor read/8, error -71 [ 79.622452][ T6285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6285 comm=syz.8.671 [ 79.645553][ T6236] cgroup: fork rejected by pids controller in /syz6 [ 79.652298][ T496] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 79.709946][ T314] usb 8-1: device descriptor read/8, error -71 [ 79.809608][ T496] usb 2-1: Using ep0 maxpacket: 8 [ 79.819064][ T314] usb usb8-port1: unable to enumerate USB device [ 79.833444][ T496] usb 2-1: config 133 has an invalid interface number: 226 but max is 0 [ 79.848694][ T496] usb 2-1: config 133 has no interface number 0 [ 79.863530][ T496] usb 2-1: New USB device found, idVendor=19d2, idProduct=0136, bcdDevice=62.cb [ 79.877759][ T496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.894569][ T496] usb 2-1: Product: syz [ 79.898850][ T496] usb 2-1: Manufacturer: syz [ 79.911106][ T496] usb 2-1: SerialNumber: syz [ 80.126768][ T496] usb 2-1: bad CDC descriptors [ 80.135767][ T496] usb 2-1: USB disconnect, device number 23 [ 80.180939][ T36] audit: type=1400 audit(1793611121.669:505): avc: denied { read } for pid=6374 comm="syz.8.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.282488][ T36] audit: type=1400 audit(1793611121.769:506): avc: denied { ioctl } for pid=6374 comm="syz.8.673" path="uts:[4026532320]" dev="nsfs" ino=4026532320 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.650747][ T36] audit: type=1400 audit(1793611122.139:507): avc: denied { listen } for pid=6456 comm="syz.1.684" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 80.698408][ T36] audit: type=1400 audit(1793611122.179:508): avc: denied { connect } for pid=6456 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.785410][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.685'. [ 80.798179][ T36] audit: type=1400 audit(1793611122.289:509): avc: denied { listen } for pid=6468 comm="syz.7.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.928939][ T354] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 81.038936][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 81.068907][ T354] usb 2-1: device descriptor read/64, error -71 [ 81.072860][ T6516] netlink: 'syz.6.690': attribute type 27 has an invalid length. [ 81.086207][ T6516] lo: entered promiscuous mode [ 81.091500][ T6516] lo: entered allmulticast mode [ 81.096688][ T6516] tunl0: entered promiscuous mode [ 81.101819][ T6516] tunl0: entered allmulticast mode [ 81.107104][ T6516] gre0: entered promiscuous mode [ 81.112051][ T6516] gre0: entered allmulticast mode [ 81.117249][ T6516] gretap0: entered promiscuous mode [ 81.122537][ T6516] gretap0: entered allmulticast mode [ 81.128169][ T6516] erspan0: entered promiscuous mode [ 81.133486][ T6516] erspan0: entered allmulticast mode [ 81.139177][ T6516] ip_vti0: entered promiscuous mode [ 81.144361][ T6516] ip_vti0: entered allmulticast mode [ 81.150010][ T6516] ip6_vti0: entered promiscuous mode [ 81.155289][ T6516] ip6_vti0: entered allmulticast mode [ 81.160910][ T6516] sit0: entered allmulticast mode [ 81.170910][ T6516] ip6tnl0: entered promiscuous mode [ 81.176099][ T6516] ip6tnl0: entered allmulticast mode [ 81.181651][ T6516] ip6gre0: entered promiscuous mode [ 81.186852][ T6516] ip6gre0: entered allmulticast mode [ 81.192711][ T6516] syz_tun: entered promiscuous mode [ 81.197925][ T6516] syz_tun: entered allmulticast mode [ 81.203880][ T6516] ip6gretap0: entered promiscuous mode [ 81.209415][ T6516] ip6gretap0: entered allmulticast mode [ 81.215573][ T6516] bridge0: entered promiscuous mode [ 81.220822][ T6516] bridge0: entered allmulticast mode [ 81.226150][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.229332][ T6516] dummy0: entered promiscuous mode [ 81.235811][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.241027][ T6516] dummy0: entered allmulticast mode [ 81.250892][ T10] usb 8-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 81.256502][ T6516] veth0: entered promiscuous mode [ 81.264895][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.269973][ T6516] veth0: entered allmulticast mode [ 81.282249][ T10] usb-storage 8-1:1.0: USB Mass Storage device detected [ 81.283547][ T6516] veth1: entered promiscuous mode [ 81.293508][ T10] scsi host1: usb-storage 8-1:1.0 [ 81.294990][ T6516] veth1: entered allmulticast mode [ 81.305664][ T6516] wg0: entered promiscuous mode [ 81.310669][ T6516] wg0: entered allmulticast mode [ 81.315893][ T6516] wg1: entered promiscuous mode [ 81.320884][ T6516] wg1: entered allmulticast mode [ 81.326066][ T6516] wg2: entered promiscuous mode [ 81.330967][ T354] usb 2-1: device descriptor read/64, error -71 [ 81.337326][ T6516] wg2: entered allmulticast mode [ 81.342587][ T6516] veth0_to_bridge: entered promiscuous mode [ 81.348466][ T6516] veth0_to_bridge: entered allmulticast mode [ 81.355214][ T6516] veth1_to_bridge: entered promiscuous mode [ 81.361155][ T6516] veth1_to_bridge: entered allmulticast mode [ 81.367758][ T6516] veth0_to_bond: entered promiscuous mode [ 81.373503][ T6516] veth0_to_bond: entered allmulticast mode [ 81.380014][ T6516] bond_slave_0: entered promiscuous mode [ 81.385645][ T6516] bond_slave_0: entered allmulticast mode [ 81.391909][ T6516] veth1_to_bond: entered promiscuous mode [ 81.397875][ T6516] veth1_to_bond: entered allmulticast mode [ 81.404240][ T6516] bond_slave_1: entered promiscuous mode [ 81.410060][ T6516] bond_slave_1: entered allmulticast mode [ 81.416056][ T6516] veth0_to_team: entered promiscuous mode [ 81.421965][ T6516] veth0_to_team: entered allmulticast mode [ 81.428237][ T6516] team_slave_0: entered promiscuous mode [ 81.434024][ T6516] team_slave_0: entered allmulticast mode [ 81.440312][ T6516] veth1_to_team: entered promiscuous mode [ 81.446017][ T6516] veth1_to_team: entered allmulticast mode [ 81.452594][ T6516] team_slave_1: entered promiscuous mode [ 81.458212][ T6516] team_slave_1: entered allmulticast mode [ 81.464329][ T6516] veth0_to_batadv: entered promiscuous mode [ 81.470236][ T6516] veth0_to_batadv: entered allmulticast mode [ 81.476615][ T6516] batadv_slave_0: entered promiscuous mode [ 81.482472][ T6516] batadv_slave_0: entered allmulticast mode [ 81.489127][ T6516] veth1_to_batadv: entered promiscuous mode [ 81.495023][ T6516] veth1_to_batadv: entered allmulticast mode [ 81.501851][ T6516] batadv_slave_1: entered promiscuous mode [ 81.502860][ T496] usb 8-1: USB disconnect, device number 16 [ 81.507663][ T6516] batadv_slave_1: entered allmulticast mode [ 81.508202][ T6516] xfrm0: entered promiscuous mode [ 81.526431][ T6516] xfrm0: entered allmulticast mode [ 81.532074][ T6516] veth0_to_hsr: entered promiscuous mode [ 81.537707][ T6516] veth0_to_hsr: entered allmulticast mode [ 81.543982][ T6516] hsr_slave_0: entered promiscuous mode [ 81.549551][ T6516] hsr_slave_0: entered allmulticast mode [ 81.555523][ T6516] veth1_to_hsr: entered promiscuous mode [ 81.561250][ T6516] veth1_to_hsr: entered allmulticast mode [ 81.567720][ T6516] hsr_slave_1: entered promiscuous mode [ 81.573553][ T6516] hsr_slave_1: entered allmulticast mode [ 81.579306][ T354] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 81.587502][ T6516] veth1_virt_wifi: entered promiscuous mode [ 81.593616][ T6516] veth1_virt_wifi: entered allmulticast mode [ 81.600483][ T6516] veth0_virt_wifi: entered promiscuous mode [ 81.606391][ T6516] veth0_virt_wifi: entered allmulticast mode [ 81.612938][ T6516] veth1_vlan: entered promiscuous mode [ 81.618387][ T6516] veth1_vlan: entered allmulticast mode [ 81.624429][ T6516] veth0_vlan: entered allmulticast mode [ 81.630647][ T6516] vlan0: entered promiscuous mode [ 81.635712][ T6516] vlan0: entered allmulticast mode [ 81.641408][ T6516] vlan1: entered promiscuous mode [ 81.646489][ T6516] vlan1: entered allmulticast mode [ 81.652147][ T6516] veth1_macvtap: entered allmulticast mode [ 81.658232][ T6516] veth0_macvtap: entered promiscuous mode [ 81.664150][ T6516] veth0_macvtap: entered allmulticast mode [ 81.670583][ T6516] macsec0: entered promiscuous mode [ 81.675807][ T6516] macsec0: entered allmulticast mode [ 81.681716][ T6516] syztnl0: entered promiscuous mode [ 81.686915][ T6516] syztnl0: entered allmulticast mode [ 81.728938][ T354] usb 2-1: device descriptor read/64, error -71 [ 81.749539][ T6531] x_tables: duplicate entry at hook 1 [ 81.768383][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.777562][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.968985][ T354] usb 2-1: device descriptor read/64, error -71 [ 82.084106][ T354] usb usb2-port1: attempt power cycle [ 82.341425][ T6617] netlink: 'syz.6.697': attribute type 1 has an invalid length. [ 82.354071][ T6617] netlink: 'syz.6.697': attribute type 2 has an invalid length. [ 82.402563][ T6628] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.699'. [ 82.423207][ T6628] /dev/sg0: Can't lookup blockdev [ 82.428914][ T354] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 82.469877][ T354] usb 2-1: device descriptor read/8, error -71 [ 82.530488][ T6641] loop0: Can't mount, would change RO state [ 82.538910][ T36] audit: type=1400 audit(2000000001.449:510): avc: denied { mounton } for pid=6640 comm="syz.8.702" path="/84/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 82.616226][ T354] usb 2-1: device descriptor read/8, error -71 [ 82.657326][ T36] audit: type=1400 audit(2000000001.569:511): avc: denied { shutdown } for pid=6671 comm="syz.6.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.862501][ T354] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 82.890416][ T354] usb 2-1: device descriptor read/8, error -71 [ 83.019958][ T354] usb 2-1: device descriptor read/8, error -71 [ 83.129002][ T354] usb usb2-port1: unable to enumerate USB device [ 83.195446][ T6735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.205164][ T6735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.257997][ T6740] netlink: 48 bytes leftover after parsing attributes in process `syz.6.713'. [ 83.706566][ T6815] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 83.719130][ T6820] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 83.975394][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.991047][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.068922][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 84.220089][ T10] usb 8-1: config index 0 descriptor too short (expected 65003, got 45) [ 84.232682][ T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 84.245661][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.255102][ T10] usb 8-1: Product: syz [ 84.259345][ T10] usb 8-1: Manufacturer: syz [ 84.263944][ T10] usb 8-1: SerialNumber: syz [ 84.358951][ T354] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 84.479934][ T6929] device-mapper: ioctl: Invalid ioctl structure: name syzh1, dev fc03 [ 84.482145][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.497386][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.500152][ T6928] device-mapper: ioctl: Invalid ioctl structure: name syzh1, dev fc03 [ 84.509627][ T354] usb 2-1: not running at top speed; connect to a high speed hub [ 84.528428][ T36] audit: type=1400 audit(2000000003.439:512): avc: denied { map } for pid=6933 comm="syz.8.728" path="/93/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.538162][ T354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.566731][ T36] audit: type=1400 audit(2000000003.469:513): avc: denied { execute } for pid=6933 comm="syz.8.728" path="/93/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.588044][ T31] r8152-cfgselector 9-1: USB disconnect, device number 13 [ 84.601744][ T354] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 84.620139][ T354] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 84.633255][ T354] usb 2-1: Product: syz [ 84.637555][ T354] usb 2-1: Manufacturer: syz [ 84.658084][ T354] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 84.678750][ T10] rtl8150 8-1:1.0: couldn't reset the device [ 84.685028][ T10] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 84.710468][ T10] usb 8-1: USB disconnect, device number 17 [ 84.724944][ T353] udevd[353]: inotify_add_watch(7, /dev/sda5, 10) failed: No such file or directory [ 84.859030][ T6870] FAULT_INJECTION: forcing a failure. [ 84.859030][ T6870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.872417][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.1.727 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 84.872449][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.872462][ T6870] Call Trace: [ 84.872468][ T6870] [ 84.872476][ T6870] __dump_stack+0x21/0x30 [ 84.872500][ T6870] dump_stack_lvl+0x140/0x1c0 [ 84.872518][ T6870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.872537][ T6870] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 84.872562][ T6870] dump_stack+0x19/0x20 [ 84.872577][ T6870] should_fail_ex+0x3c2/0x510 [ 84.872602][ T6870] should_fail_alloc_page+0xec/0x110 [ 84.872623][ T6870] __alloc_pages_noprof+0x1c0/0x7e0 [ 84.872646][ T6870] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 84.872669][ T6870] ? folio_add_lru+0x116/0x400 [ 84.872688][ T6870] ? __cfi_folio_add_lru+0x10/0x10 [ 84.872708][ T6870] __folio_alloc_noprof+0x14/0x80 [ 84.872730][ T6870] folio_prealloc+0x46/0x220 [ 84.872751][ T6870] do_pte_missing+0x16af/0x4440 [ 84.872773][ T6870] ? pte_marker_clear+0x1b0/0x1b0 [ 84.872792][ T6870] ? cgroup_rstat_updated+0x144/0x800 [ 84.872818][ T6870] ? kmem_cache_free+0x4b1/0x4f0 [ 84.872843][ T6870] ? vm_area_free+0xee/0x140 [ 84.872867][ T6870] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 84.872892][ T6870] handle_mm_fault+0x1189/0x1ba0 [ 84.872910][ T6870] ? __kasan_check_write+0x18/0x20 [ 84.872951][ T6870] ? __cfi_handle_mm_fault+0x10/0x10 [ 84.872969][ T6870] ? follow_page_pte+0x4b2/0xba0 [ 84.872993][ T6870] ? gup_must_unshare+0x1e0/0x1e0 [ 84.873014][ T6870] ? vma_is_secretmem+0x11/0x50 [ 84.873038][ T6870] ? check_vma_flags+0x36d/0x3a0 [ 84.873059][ T6870] __get_user_pages+0x114b/0x22d0 [ 84.873083][ T6870] ? populate_vma_page_range+0x220/0x220 [ 84.873103][ T6870] ? down_read+0x7f/0xe0 [ 84.873126][ T6870] ? __cfi_down_read+0x10/0x10 [ 84.873147][ T6870] ? __cfi_do_mmap+0x10/0x10 [ 84.873172][ T6870] __mm_populate+0x300/0x440 [ 84.873192][ T6870] vm_mmap_pgoff+0x426/0x4b0 [ 84.873217][ T6870] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 84.873241][ T6870] ? xfd_validate_state+0x68/0x140 [ 84.873267][ T6870] ksys_mmap_pgoff+0xfa/0x1e0 [ 84.873291][ T6870] ? __kasan_check_write+0x18/0x20 [ 84.873315][ T6870] __x64_sys_mmap+0x121/0x140 [ 84.873336][ T6870] x64_sys_call+0x13bf/0x2ee0 [ 84.873356][ T6870] do_syscall_64+0x57/0xf0 [ 84.873374][ T6870] ? clear_bhb_loop+0x50/0xa0 [ 84.873398][ T6870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.873419][ T6870] RIP: 0033:0x7fa3fd59f559 [ 84.873436][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.873452][ T6870] RSP: 002b:00007fa3fe384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 84.873473][ T6870] RAX: ffffffffffffffda RBX: 00007fa3fd825fa0 RCX: 00007fa3fd59f559 [ 84.873487][ T6870] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 84.873500][ T6870] RBP: 00007fa3fd636b50 R08: ffffffffffffffff R09: 00000000cd0b3000 [ 84.873514][ T6870] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 84.873526][ T6870] R13: 00007fa3fd826038 R14: 00007fa3fd825fa0 R15: 00007ffeeb2fe5b8 [ 84.873542][ T6870] [ 85.047454][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.196646][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.203764][ T354] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 85.208806][ T6958] bridge_slave_0: entered allmulticast mode [ 85.215593][ T354] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 85.219728][ T6958] bridge_slave_0: entered promiscuous mode [ 85.234551][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.240368][ T354] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 85.242172][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.257638][ T6958] bridge_slave_1: entered allmulticast mode [ 85.264129][ T6958] bridge_slave_1: entered promiscuous mode [ 85.280045][ T354] usb 2-1: USB disconnect, device number 28 [ 85.298701][ T6981] netlink: 'syz.6.734': attribute type 32 has an invalid length. [ 85.315237][ T6981] netlink: 'syz.6.734': attribute type 32 has an invalid length. [ 85.324678][ T12] bridge_slave_1: left allmulticast mode [ 85.333155][ T12] bridge_slave_1: left promiscuous mode [ 85.340931][ T12] : port 2(bridge_slave_1) entered disabled state [ 85.348415][ T12] bridge_slave_0: left allmulticast mode [ 85.354471][ T12] bridge_slave_0: left promiscuous mode [ 85.361284][ T12] : port 1(bridge_slave_0) entered disabled state [ 85.451960][ T12] tipc: Disabling bearer [ 85.457362][ T12] tipc: Left network mode [ 85.465885][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.472939][ T6958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.480215][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.487235][ T6958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.501031][ T12] veth1_macvtap: left promiscuous mode [ 85.507014][ T12] veth0_vlan: left promiscuous mode [ 85.575571][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.586723][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.612994][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.620095][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.630465][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.637527][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.672809][ T6958] veth0_vlan: entered promiscuous mode [ 85.693852][ T6958] veth1_macvtap: entered promiscuous mode [ 85.946528][ T7024] kvm: kvm [7023]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 86.216000][ T7083] netlink: 'syz.1.748': attribute type 4 has an invalid length. [ 86.230361][ T7083] netlink: 17 bytes leftover after parsing attributes in process `syz.1.748'. [ 86.369087][ T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.525015][ T31] usb 10-1: unable to get BOS descriptor or descriptor too short [ 86.534074][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.544471][ T31] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 231, changing to 11 [ 86.555933][ T31] usb 10-1: config 1 interface 1 has no altsetting 1 [ 86.564202][ T31] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.573561][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.581732][ T31] usb 10-1: Product: syz [ 86.586165][ T31] usb 10-1: Manufacturer: syz [ 86.590946][ T31] usb 10-1: SerialNumber: syz [ 86.901638][ T31] cdc_ncm 10-1:1.0: skipping garbage [ 86.909035][ T31] cdc_ncm 10-1:1.0: NCM or ECM functional descriptors missing [ 86.916564][ T31] cdc_ncm 10-1:1.0: bind() failure [ 86.922896][ T31] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 86.930110][ T31] cdc_ncm 10-1:1.1: bind() failure [ 86.936581][ T31] usb 10-1: USB disconnect, device number 2 [ 87.039224][ T7207] netlink: 'syz.6.754': attribute type 3 has an invalid length. [ 87.048830][ T7207] netlink: 'syz.6.754': attribute type 3 has an invalid length. [ 87.085171][ T7217] netlink: 'syz.6.757': attribute type 4 has an invalid length. [ 87.092987][ T7217] netlink: 'syz.6.757': attribute type 5 has an invalid length. [ 87.100878][ T7217] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.757'. [ 87.318939][ T314] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 87.470939][ T314] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 87.483278][ T314] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 87.491774][ T314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.504968][ T314] usb 2-1: config 0 has no interface number 0 [ 87.511104][ T314] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.524197][ T314] usb 2-1: config 0 interface 200 has no altsetting 0 [ 87.533369][ T314] usb 2-1: New USB device found, idVendor=0b57, idProduct=812a, bcdDevice=6d.39 [ 87.544520][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.553819][ T314] usb 2-1: Product: syz [ 87.558253][ T314] usb 2-1: Manufacturer: syz [ 87.563078][ T314] usb 2-1: SerialNumber: syz [ 87.570461][ T314] usb 2-1: config 0 descriptor?? [ 87.787267][ T314] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 87.810932][ T314] usb 2-1: USB disconnect, device number 29 [ 87.837064][ T36] audit: type=1400 audit(2000000006.749:514): avc: denied { create } for pid=7346 comm="syz.9.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.853937][ T7351] netlink: 36 bytes leftover after parsing attributes in process `syz.9.776'. [ 87.861098][ T36] audit: type=1400 audit(2000000006.769:515): avc: denied { remount } for pid=7341 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.892895][ T36] audit: type=1326 audit(2000000006.799:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.9.777" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc580b9f559 code=0x0 [ 88.718945][ T496] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 88.874692][ T496] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.885134][ T496] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 88.894371][ T496] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 88.908229][ T496] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 88.917638][ T496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.925814][ T496] usb 2-1: Product: syz [ 88.937521][ T496] usb 2-1: Manufacturer: syz [ 88.947317][ T496] usb 2-1: SerialNumber: syz [ 89.087698][ T7579] fuse: Unknown parameter '%T' [ 89.170875][ T496] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 89.178078][ T496] usb 2-1: incorrect wMaxPacketSize 0x20 for BADD profile [ 89.189032][ T496] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 89.211564][ T496] usb 2-1: USB disconnect, device number 30 [ 89.229429][ T7596] netlink: 'syz.7.800': attribute type 2 has an invalid length. [ 89.237912][ T7596] netlink: 1 bytes leftover after parsing attributes in process `syz.7.800'. [ 89.742938][ T36] audit: type=1400 audit(2000000008.659:517): avc: denied { map } for pid=7687 comm="syz.6.805" path="socket:[28739]" dev="sockfs" ino=28739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.766465][ T36] audit: type=1400 audit(2000000008.659:518): avc: denied { read } for pid=7687 comm="syz.6.805" path="socket:[28739]" dev="sockfs" ino=28739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.854353][ T36] audit: type=1400 audit(2000000008.769:519): avc: denied { mounton } for pid=7705 comm="syz.1.807" path="/199/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 90.248939][ T2136] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 90.419003][ T2136] usb 2-1: Using ep0 maxpacket: 16 [ 90.425407][ T2136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.444599][ T2136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.459393][ T2136] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 90.476385][ T7809] syz_tun: entered allmulticast mode [ 90.482486][ T2136] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 90.492022][ T2136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.509076][ T2136] usb 2-1: config 0 descriptor?? [ 90.598099][ T7829] netlink: 216 bytes leftover after parsing attributes in process `syz.7.817'. [ 90.611708][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.7.817'. [ 90.622278][ T7833] netlink: 'syz.6.818': attribute type 29 has an invalid length. [ 90.631093][ T7833] fuse: Unknown parameter 'ld3l' [ 90.632811][ T7829] netlink: 216 bytes leftover after parsing attributes in process `syz.7.817'. [ 90.650126][ T7829] netlink: 132 bytes leftover after parsing attributes in process `syz.7.817'. [ 90.793789][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 90.898937][ T354] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 90.950451][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.962398][ T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.971980][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.984548][ T10] usb 10-1: config 0 descriptor?? [ 91.048931][ T354] usb 8-1: Using ep0 maxpacket: 16 [ 91.057316][ T354] usb 8-1: unable to get BOS descriptor or descriptor too short [ 91.066694][ T354] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.077078][ T354] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.088406][ T354] usb 8-1: New USB device found, idVendor=1235, idProduct=8218, bcdDevice= 0.40 [ 91.099661][ T354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.107694][ T354] usb 8-1: Product: syz [ 91.111971][ T354] usb 8-1: Manufacturer: syz [ 91.117451][ T354] usb 8-1: SerialNumber: syz [ 91.199433][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 91.207021][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 91.218080][ T10] usb 10-1: USB disconnect, device number 3 [ 91.335232][ T354] usb 8-1: USB disconnect, device number 18 [ 91.638962][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 91.790636][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.801742][ T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.811865][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.822017][ T10] usb 10-1: config 0 descriptor?? [ 92.072289][ T8022] fuse: Bad value for 'user_id' [ 92.077519][ T8022] fuse: Bad value for 'user_id' [ 92.142655][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.821'. [ 92.230927][ T10] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 92.251057][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0004/input/input26 [ 92.348878][ T10] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 92.489786][ T36] audit: type=1400 audit(2000000011.409:520): avc: denied { read } for pid=8059 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 92.668089][ T36] audit: type=1400 audit(2000000011.579:521): avc: denied { sys_ptrace } for pid=8059 comm="poweroff" capability=19 scontext=system_u:system_r:acpid_t tcontext=system_u:system_r:acpid_t tclass=cap_userns permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 93.015545][ T10] usb 10-1: USB disconnect, device number 4 [ 93.033777][ T2136] usbhid 2-1:0.0: can't add hid device: -71 [ 93.064489][ T2136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 93.079748][ T36] audit: type=1400 audit(2000000011.979:522): avc: denied { read write } for pid=8114 comm="ip" path="/dev/console" dev="rootfs" ino=113 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 93.111879][ T2136] usb 2-1: USB disconnect, device number 31 OK Stopping iptables: [ 93.232906][ T36] audit: type=1400 audit(2000000012.149:523): avc: denied { read write } for pid=8129 comm="iptables" path="/dev/console" dev="rootfs" ino=113 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 93.278920][ T36] audit: type=1400 audit(2000000012.149:524): avc: denied { search } for pid=8129 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 93.315890][ T36] audit: type=1400 audit(2000000012.149:525): avc: denied { write } for pid=8129 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.364289][ T36] audit: type=1400 audit(2000000012.149:526): avc: denied { add_name } for pid=8129 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.389105][ T36] audit: type=1400 audit(2000000012.149:527): avc: denied { create } for pid=8129 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.411770][ T36] audit: type=1400 audit(2000000012.149:528): avc: denied { read open } for pid=8129 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=1933 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.435539][ T36] audit: type=1400 audit(2000000012.149:529): avc: denied { lock } for pid=8129 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=1933 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done[ 93.458984][ T2136] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 93.467379][ T36] audit: type=1400 audit(2000000012.279:530): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 Stopping klogd: OK [ 93.640193][ T2136] usb 2-1: unable to get BOS descriptor or descriptor too short Stopping acpid: [ 93.654040][ T2136] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.665621][ T2136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 93.676564][ T2136] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.689737][ T36] audit: type=1400 audit(2000000012.599:531): avc: denied { write } for pid=95 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.712825][ T2136] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 93.722086][ T2136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 93.730326][ T2136] usb 2-1: Product: syz [ 93.734535][ T2136] usb 2-1: Manufacturer: syz [ 93.739183][ T2136] usb 2-1: SerialNumber: syz [ 93.748906][ T314] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 93.898901][ T314] usb 8-1: Using ep0 maxpacket: 32 [ 93.905083][ T314] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 93.916261][ T314] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.929089][ T314] usb 8-1: config 0 interface 0 has no altsetting 0 [ 93.935693][ T314] usb 8-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 93.944741][ T314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.953507][ T314] usb 8-1: config 0 descriptor?? [ 93.963630][ T2136] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.976516][ T2136] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 93.992711][ T8167] netlink: 196 bytes leftover after parsing attributes in process `syz.9.838'. [ 94.003143][ T2136] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 94.013155][ T2136] usb 2-1: USB disconnect, device number 32 [ 94.364316][ T314] wacom 0003:056A:00DA.0005: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 94.374218][ T314] wacom 0003:056A:00DA.0005: hidraw0: USB HID v10.01 Device [HID 056a:00da] on usb-dummy_hcd.7-1/input0 [ 94.386002][ T314] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:00DA.0005/input/input27 [ 94.534207][ T8182] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.565826][ T314] usb 8-1: USB disconnect, device number 19 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only Connection to 10.128.1.150 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 95.027772][ T8203] syz_tun (unregistering): left allmulticast mode [ 95.082078][ T297] bridge_slave_1: left allmulticast mode [ 95.087724][ T297] bridge_slave_1: left promiscuous mode [ 95.093420][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.109089][ T297] bridge_slave_0: left allmulticast mode [ 95.114737][ T297] bridge_slave_0: left promiscuous mode [ 95.120451][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.260949][ T297] veth1_macvtap: left promiscuous mode [ 95.266441][ T297] veth0_vlan: left promiscuous mode [ 95.499918][ T297] bridge_slave_1: left allmulticast mode [ 95.505560][ T297] bridge_slave_1: left promiscuous mode [ 95.511168][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.518506][ T297] bridge_slave_0: left allmulticast mode [ 95.524169][ T297] bridge_slave_0: left promiscuous mode [ 95.529864][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.537368][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.544720][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.700679][ T297] tipc: Left network mode [ 95.705967][ T297] veth1_macvtap: left promiscuous mode [ 95.711473][ T297] veth0_vlan: left promiscuous mode [ 96.019869][ T297] ------------[ cut here ]------------ [ 96.025336][ T297] WARNING: CPU: 1 PID: 297 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 96.035345][ T297] Modules linked in: [ 96.039254][ T297] CPU: 1 UID: 0 PID: 297 Comm: kworker/u8:3 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 96.050903][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.060967][ T297] Workqueue: netns cleanup_net [ 96.065984][ T297] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 96.071961][ T297] Code: e8 a1 2f d3 fc 4b 83 3c 3e 00 75 19 e8 c5 9c 79 fc 49 81 ff f8 07 00 00 74 1b e8 b7 9c 79 fc 49 83 c7 08 eb c9 e8 ac 9c 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 96.091592][ T297] RSP: 0018:ffffc9000b69fb90 EFLAGS: 00010293 [ 96.097644][ T297] RAX: ffffffff850fba84 RBX: ffff88812aa891c0 RCX: ffff8881318aa780 [ 96.105634][ T297] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881047d80b8 [ 96.113616][ T297] RBP: ffffc9000b69fbb0 R08: ffffffff88551f87 R09: 1ffffffff10aa3f0 [ 96.121596][ T297] R10: dffffc0000000000 R11: fffffbfff10aa3f1 R12: dffffc0000000000 [ 96.129591][ T297] R13: dffffc0000000000 R14: ffff8881047d8000 R15: 00000000000000b8 [ 96.137560][ T297] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 Sent SIGKILL to[ 96.146666][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 all processes [ 96.154654][ T297] CR2: 00007fff38791d74 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 96.164028][ T297] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 96.172049][ T297] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.180032][ T297] Call Trace: [ 96.183303][ T297] [ 96.186210][ T297] cleanup_net+0x6bd/0xc90 [ 96.190630][ T297] ? __cfi_cleanup_net+0x10/0x10 [ 96.195564][ T297] ? kick_pool+0xb9/0x540 [ 96.199891][ T297] process_scheduled_works+0x7f7/0x1060 [ 96.205442][ T297] worker_thread+0xc99/0x13f0 [ 96.210153][ T297] kthread+0x2c7/0x360 [ 96.214221][ T297] ? __cfi_worker_thread+0x10/0x10 [ 96.219337][ T297] ? __cfi_kthread+0x10/0x10 [ 96.223917][ T297] ret_from_fork+0x64/0xa0 [ 96.228308][ T297] ? __cfi_kthread+0x10/0x10 [ 96.232894][ T297] ret_from_fork_asm+0x1a/0x30 [ 96.237663][ T297] [ 96.240672][ T297] ---[ end trace 0000000000000000 ]--- [ 96.246342][ T297] ------------[ cut here ]------------ Requesting syst[ 96.251819][ T297] WARNING: CPU: 0 PID: 297 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 em poweroff[ 96.263282][ T297] Modules linked in: [ 96.268109][ T297] CPU: 0 UID: 0 PID: 297 Comm: kworker/u8:3 Tainted: G W syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 96.281241][ T297] Tainted: [W]=WARN [ 96.285166][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.295237][ T297] Workqueue: netns cleanup_net [ 96.300017][ T297] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 96.306066][ T297] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 70 9c 79 fc 49 81 ff f8 07 00 00 74 1b e8 62 9c 79 fc 49 83 c7 08 eb c5 e8 57 9c 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 47 9c 79 fc 5b 41 5c 41 5e 41 [ 96.325667][ T297] RSP: 0018:ffffc9000b69fb90 EFLAGS: 00010293 [ 96.331738][ T297] RAX: ffffffff850fbad9 RBX: ffff8881047d8800 RCX: ffff8881318aa780 [ 96.339713][ T297] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881047d8808 [ 96.347663][ T297] RBP: ffffc9000b69fbb0 R08: ffffffff88551f87 R09: 1ffffffff10aa3f0 [ 96.355642][ T297] R10: dffffc0000000000 R11: fffffbfff10aa3f1 R12: dffffc0000000000 [ 96.363607][ T297] R13: dffffc0000000000 R14: ffff8881047d8000 R15: 0000000000000008 [ 96.371563][ T297] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 96.380485][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.387155][ T297] CR2: 00007f76270cb990 CR3: 000000010b7a4000 CR4: 00000000003526b0 [ 96.395127][ T297] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 96.403105][ T297] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.411061][ T297] Call Trace: [ 96.414317][ T297] [ 96.417226][ T297] cleanup_net+0x6bd/0xc90 [ 96.421638][ T297] ? __cfi_cleanup_net+0x10/0x10 [ 96.426558][ T297] ? kick_pool+0xb9/0x540 [ 96.430899][ T297] process_scheduled_works+0x7f7/0x1060 [ 96.436452][ T297] worker_thread+0xc99/0x13f0 [ 96.441161][ T297] kthread+0x2c7/0x360 [ 96.445224][ T297] ? __cfi_worker_thread+0x10/0x10 [ 96.450336][ T297] ? __cfi_kthread+0x10/0x10 [ 96.454919][ T297] ret_from_fork+0x64/0xa0 [ 96.459359][ T297] ? __cfi_kthread+0x10/0x10 [ 96.463958][ T297] ret_from_fork_asm+0x1a/0x30 [ 96.468712][ T297] [ 96.471721][ T297] ---[ end trace 0000000000000000 ]--- [ 96.479462][ T297] ------------[ cut here ]------------ [ 96.484908][ T297] WARNING: CPU: 0 PID: 297 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 96.494465][ T297] Modules linked in: [ 96.498352][ T297] CPU: 0 UID: 0 PID: 297 Comm: kworker/u8:3 Tainted: G W syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 96.511469][ T297] Tainted: [W]=WARN [ 96.515245][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.525321][ T297] Workqueue: netns cleanup_net [ 96.530095][ T297] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 96.535668][ T297] Code: 3c 20 00 74 08 48 89 df e8 3f 0c ee fc 48 8b 3b e8 e7 f8 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 e6 b7 00 cc e8 52 79 94 fc <0f> 0b e9 b0 fd ff ff e8 46 79 94 fc 0f 0b e9 18 fe ff ff e8 3a 79 [ 96.555306][ T297] RSP: 0018:ffffc9000b69fb70 EFLAGS: 00010293 [ 96.561390][ T297] RAX: ffffffff84f4ddde RBX: ffff88812aa891c0 RCX: ffff8881318aa780 [ 96.569371][ T297] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881318aa780 [ 96.577333][ T297] RBP: ffffc9000b69fb98 R08: ffffffff88551f87 R09: 1ffffffff10aa3f0 [ 96.585308][ T297] R10: dffffc0000000000 R11: fffffbfff10aa3f1 R12: 1ffffffff10aa144 [ 96.593297][ T297] R13: dffffc0000000000 R14: ffff88812aa89dc0 R15: dffffc0000000000 [ 96.601287][ T297] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 96.610279][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.616875][ T297] CR2: 00007f76270cb990 CR3: 000000010b7a4000 CR4: 00000000003526b0 [ 96.624864][ T297] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 96.632861][ T297] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.640869][ T297] Call Trace: [ 96.644138][ T297] [ 96.647047][ T297] xfrm_net_exit+0x31/0x80 [ 96.651475][ T297] cleanup_net+0x6bd/0xc90 [ 96.655878][ T297] ? __cfi_cleanup_net+0x10/0x10 [ 96.660836][ T297] ? kick_pool+0xb9/0x540 [ 96.665173][ T297] process_scheduled_works+0x7f7/0x1060 [ 96.670726][ T297] worker_thread+0xc99/0x13f0 [ 96.675411][ T297] kthread+0x2c7/0x360 [ 96.679479][ T297] ? __cfi_worker_thread+0x10/0x10 [ 96.684580][ T297] ? __cfi_kthread+0x10/0x10 [ 96.689164][ T297] ret_from_fork+0x64/0xa0 [ 96.693566][ T297] ? __cfi_kthread+0x10/0x10 [ 96.698129][ T297] ret_from_fork_asm+0x1a/0x30 [ 96.702900][ T297] [ 96.705905][ T297] ---[ end trace 0000000000000000 ]--- [ 97.286543][ T8206] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 97.293128][ T8206] ACPI: PM: Preparing to enter system sleep state S5 [ 97.299954][ T8206] kvm: exiting hardware virtualization [ 97.305434][ T8206] reboot: Power down serialport: VM disconnected.