last executing test programs: 7.305297638s ago: executing program 0 (id=14): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3f7, 0x200, 0x70bd27, 0x25dfdbfe, {0x6, 0x1b, './proc', './proc/thread-self/fail-nth'}}, 0x3c}}, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) (async) syz_usb_connect(0x0, 0xc7, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c2405", @ANYRESOCT, @ANYBLOB="8396ad69395d3f13d5942d470d37082e85946caafb7ea01985ec62e08ba12183552c92f5b65d"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x0, 0x3}}) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') 6.093071001s ago: executing program 0 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000004c0)={0x9, 0x0, [{0x0, 0x5, 0x0, 0x0, @msi={0x137a, 0x8, 0xff, 0x4}}, {0x186, 0xe, 0x1, 0x0, @adapter={0x400, 0x8, 0x8, 0x0, 0x1}}, {0x5f24, 0x2, 0x1, 0x0, @msi={0x8, 0x8001, 0x4, 0x1000}}, {0x1, 0x5, 0x0, 0x0, @sint={0x1ad}}, {0x10000, 0x5, 0x1, 0x0, @msi={0xe, 0x7, 0x8, 0x3}}, {0x5, 0x3, 0x1, 0x0, @msi={0x8, 0x200, 0x7ff, 0x5}}, {0x4, 0x2, 0x0, 0x0, @irqchip={0xff, 0x14}}, {0x2, 0x2, 0x1, 0x0, @sint={0xe1e, 0xa20}}, {0x100, 0x1, 0x1, 0x0, @sint={0x2, 0x5}}]}) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000340)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) socket$inet(0x2, 0x3, 0x1) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r5, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c810}, 0x0) r8 = getpgid(0x0) setpriority(0x1, r8, 0x5) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r9, 0x4004556a, 0x1) 6.05200036s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0x1, 0x6, 0x7, 0xe3, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7fffffff, 0x2, 0x5a000000, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0xfffffffa], [0x3, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf785, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x81, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x807777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.987675583s ago: executing program 0 (id=25): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x7) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x240089c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x7a) close(0x3) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x46) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="002145010b2c000b0000400600000a0000010a000002005000500000000100000002b11003e80000005f09010d5b281b00000000fcc5f8b04b3c1c4cfba2ae704707", 0x42}], 0x1, 0x800, 0x1) 4.237494858s ago: executing program 2 (id=34): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x2, r3}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x3a, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x128}, 0x400c890) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) 4.237238068s ago: executing program 3 (id=35): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e1f6b29, 0xec4d277024ba1ff4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="b9c615adb435cca0e14c99165991425bf6869feb5bc91d16faaa1e553b9ba9b8885e3132b577ed920350b853789a3c023c2b935ea8b2b9b98d4523acf27f4e45df6667b26b934bf4a2e10acf78417923dcef99d0ddb6becfb3766973d20a95ee7e83108308969fca595741c7f50e9d35d0462bc65c295881993cbc4dfd962af204ba800dd23f3721fd98b3f6121083f68f408363a4a8620d535c1b29fbbe546f4a2b0b7681251f3ecc7b782f3df90e2942f9e737bb561ddd15b4b6b5ece9448a616a5221828a7ea71dfaaa7cf64f26b41375972d28cd3db598fa5a5625b6b00f13f7d6c194f39cc639e8a5b0ab06d35935e856555504eb25395adec288f6ff8e99de0119f863a5dbf4e3b18cf049d3b70379a3131cd90f25bd5e2f1c3b83e72b8cc88226def21b7824f92cddbf8f4271315ab0ba1dcab80dc1068d3491baacbbc651ba06cfd8bf3cfecce1c0b25124e28f839f25c7d4e2ad533f8fb14c514de63a86e4f06e9799ecaf00f7ff665a2fed73e567536d1d6b1e929a51d3d782559d4dbc174d9d389e53866249e58ff31a1832f453d299e7a3c4e4b673b546f2f0b670183e77f56a17f07c279bae471ce38124d34b6cb40dd5ac278f173c1296d07653d60ed4c1b8ccf2f3d7ff820bacfa26e4086a7bb79e5a72dbed2e8fff1340a9b158b0da2541074be22c160213fea049286cd8da7fb115968c622063040f9b2fbebbd3bbef6eddb51a1c7a082cc76fc7a8348c01b71d87631363e56cba171a1b501af0e02bcf4c1aaebde108a68de36ed5bbfd8037776f1b265716ace9faf8dfc59235cadfecf04f7fb81d03f112cab7c0ff3075d58ffa492652dd110adca2dda9a430535b9474c4faed55e8428fac436dd9723fb98cae9396cd56339b1012b84ba5181dcb5baf6e6f4aeeca6d138592c8e11abf0057f22c99aa0f3c64dd39f97e99a7be65e4dc45a5ef85ecf7c015cda60ae91b2eb439cb67e69b6eb9dd0b61043557530353d72e0468560d4bafcca1bd7f9c6afe1a3a662fb025fc19369ffee064153cbbeec0570b8fe3409f8309cfe934bc5583874e5ba8fd5612c1686dea7433e35aff9ff0e21204915e5c1239de29a5f38f110c4bf26ad1d167f17152d032fa550e8b36c4a45ebddfdbbce0cc2d90e84818ad6884e515091407be569cf665ab7d9274d33ea803cc08c1b3bc542dc81ce88acfcb1229aa5e7ba6f9f1a16495c11829d97b6bef2cd8decd5add93a5574cb84d2c6bb932222909916b2aba380cef005032d404d28cc3ab15c2de814412fc5f35e783687174fc7f80851ace4ce383e8e998bf94f0f87a6bc18d89c0c97c1ebe6e9247922f8535a0d23d44a64f538afa58b3c7a1e8cb5ee501c8e9cb7f476c89c4716f726ac9563c2c8fa14c1a5dd4cc3aa39c6dc1c87995b4f0334fd1f33437af245eb2a40d7e44293390397ae728acb1bf9a77cb8344ac9e2fa5e992bdbfa09767d44c17712941a4f52d888cb4377ab447deff3fca6953dd13eb9737d99d760cade6a9a0918d4cdfeffc8a7d8641c26d5ab5b367122b0b27055f9fc5633e85fc438969ca0a242f0cd14eec12e99bd7d7f8ad802c452566a86d69b8499822c3d04661de7e52124499e574f9e4c0482de31c798568f00432af1e4f988ff4097037c8a1f02a2aa36f9410bbbd47d647c63f22d7d3e72a92ff70934fd18e4b14f9be799308ba42d58c759e2f66696ead711902070c8d1dda1de261e9881429c5c9b4e4625b37b621928112dba116245f8a541f20dde2b4b820a93f153315fc7894cd9195c9076bd8b5fa922a2cce6a9af29c9401a45893936a3ce9485ddf84d043da66f966deb11fb2657b3a06eec71413a4eb3f035080c7368c53c1ce460b51a179ce81442fefef656d13b3ea789befda32fb6d3eb42f75cdeb62f9cc73b2429745f4a8105c64683ecd90734913f94699859c346c7bce9c828b1e0a2d15b8dc2ae8e4449febfd168c5719c039eb44ed314e060b063d3b32ee017ab1a28acc0861da4ba15e9a71040bf106bb45fe3b719ce40a0649f4f73265235164e88563bed2960a35007e46a539f96234b36750643dd239e482359221a3e75332d5beb627fa9d84bc3a2eb7266c890d1b2295042916fb89e935e8fa6237555f931fb312849571d8889152de3338a5c30e611698e4612c8c2586c182d799428352f3a9ec290985e427312a8d3365a8819097b1697f29f7a207e1323d96207a4e46ba4e5b50d984135da9cca6bcf4c62ea0dc2c1ad88c45163c420da885a456a06384deacd39eff91ae124c33749f007c9c73b39b5ef456e06c7394a010066d72790606d39add005ae84bdda4104077b8a797e24d329071c6e4836a5451f4a043b1f71388bbfade35b0ac98ca8711ddfe042f28cb8f76bb8fff0870c67c2c1150a580a93cc16edf6e73d15319263e36723e76d2203a96cb438b6246a3ac4da6621a7e4c89133584341862d547d7bb885c4c169507e30a16170a242a32ead68bd9a5ab169f7460df9c7a135f8b6af647101cdaf6fbd9c3b849ab70bce5dea4cbf5959dad2a91a2dbc095dfc8960e4c3872eabb62565d420c8df1b44e05ab16c69109a4c07733340d59fd3f9853d0183355f05ddeaee5a4f9a5f03f5d84c76634db61b6d9a4aea51ddbdf43aee55e7f3780cd31ee799f6f33003606a5df9db08849da7bf884df395b50474b24b3527682a87968cd1be63ec8405d38cba5db9c943987eda334efac5ff30b137259babe08532e2a930262edf64c7364dc0d987374d6ca78e16a63d56a63a05b6cd9044abc8599b97aefd6460b13dbef9ff09bb15d419f542eae4a237b0fe376605d300467679c06c33aba623c903a559d0836d8353afed6e39e68be56b775a4952e3edbdc461ea3e6883b596ae6e66e0a92f18d48abf9a23eb5ce70ceed4a2ab6611ed70600a9fced116864dcbf43cb72ea3af69f6a47a9728950fbc7c8c71f6c75713423e2b39ea8ea8e2ebdf68fe639fa8b2577c675a4706343577c8237431e91bd6c2a423d774ebd06db324361a0c6857fa0038974761d178224545a326093d945453119e18be577add7dc62317989bbd4ccc5c962c7c31ef56b5126e92adf8899a1cb3416b4087cc034c29b3518bcf8fe105f6bd70cd766a0617ea45ebf9750ac99ef104a7e14405fbab6d7d735fb7ddf72bc368ba08c14ccd6a1f35fb894b030136a05d882a2613fbcea5f934dcab251d047185eaf8e7e349998ec3cd220251a13d63a6926a27314234e55bfe66b125b502c82c7c8e0a7f71ac8deb73a8731d127ff8722cbc2794b99b4594f90cd62afc53a217ff5860146ec98f422191349a5c252ec81ddb055936712d2edf152564cfc0dc98dca3d1d4a6dca380aee72a4f1d33594a16c9f4a27fca028f2f328fc358962bfdfeaa2e060e19cc8232937d5d2b713ee45d6cd7b5a8fb1450f81653eef0cd73bbda10318abbb30daa1cacd59d30722b5264175a8c3ef10426647afa6eecd7d2cebef58b721de10a1dfe4fe1a7735912c9dc68576d5d462b4aa039f350135e2ca8c4203f379ba0afd22fbe84df3611a359e58bc73529517ff2c2b5d6f4cc44df1f37bb6910d9eaff57306a785715a237543f1b2f16b2ae50b5018e0b8988feaa1b24a9106497f87eeb12cbf705c17d5c53b41b7b6ed022ea3ce572a23e22f689fdc517a0d9cc6a997cfb0eefd67162cd727422f4164837dd349c0214922dbfc50c3657b1913ea1f88778320913229432c6c73527876b553b0a6158063323a7f2f36e0216ebaf5e9ea52a85447d43c8a0cbccdfb0b453ca1df93951471cb72225b97b75f1e77225779657bf6d77313ef8bda668c914769b1c0c0dbc5587e4ace985996a4b9ff4071488684d96d131810baa439ad5f9254217142a5697dbb7abf05a3bbde089b2a2e94153edce47b334ec35572bab1cb551c3c76acb7bc1ab82a7cfc6177b2dea4bb012a0cb3f71117f963a5fcf777c6d03ae50e2ffea596d0c5fb821a585352eace44cae8698c51889f341fc68bf0c0ff565f23aca99fe2194e6066c756848d8ff68d5b62075a374c3441217eb2b9ca87263de59a6240ceae2f8a86b6c064dafc6fb9a669e53c5cf815657766d9903d613fdf6fe2957be15eab0af44c1a4a933f940bea2e46518b31c2a1faf9596d086e4f397b200b040c0e5d090142cf42f7de30c3f8a6deb9331d5ea338470df38689f4456ab8d243d381dc7c551784d6ff11a1bcae327fb72cb4de6f04f9e0cbb5a069633baf800ff676d8efa4471a0d412f1d449b797a3c35cf6904db713639974d6f3d157b7dccf1526e0c65598b656cfb30be0643058ac33d6e51bd720a3aa1efe72148d9b2a2c58e44e453feb31956d67119ca0d4a75db27fd62c207902d27b59f7947691d6ac234522c7722ba04aacafd795a0cfa9d01fc4eecb9233ba819a48e22b9b9d2541f843e28bcd80fc058797d99438d20d39af224727c38a72c8ec008c0d286227dcb4799c8b0096c220fc450f10b2e52f293b624e64cac03084cc2e2626215522980f4d19ef37406f534b1061fe9691e721a38e6854c318433c574b17a841af00195306e2209b46021dda5126cc88a49046c17ae48f0a890fa8c53c248d12f96b2f2abe3155026679bc19f8abb0c90f6554b818294bca0525f49e20eb0daafea45ae572a00bc3a8fae5cefc6d5b90c52f0dfe0de4873f1ebd2cf1ebbf09acc9c83d491d5c7e8612c0a7a12376da52246c6bbd548e81e005e466e7848b4bf348b06f09a2da11ea1102c585549b4b7244e999e10f8a89f31d3855ac706742612c815552c784b4e30d51a4dd5a5b92e6cb1e36c19e8e424b450d590925f8bc94133b7a45feea68cd48bfa165d04d2a83c1374066a7cb98f3bf92c226624749eb5ce340be1178baea230909842503ec5696f8976b535f31ca52ed17c5befecb94ba9ec214ac36c3b0c955f30352e57e469564df9ab96e6", 0xdbd}], 0x1}}], 0x2, 0x28800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000000)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x17, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3df040000007b6aa54cc5001fcaed11831fa79a0000000200", "67523760fd40f78d2c4d03d81a8ca55ba139c01802c4dae4162e43ac65b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) sendfile(r0, r2, &(0x7f00000001c0)=0x3, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) r5 = getpid() ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) sendmsg$netlink(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)={0x28, 0x2e, 0x418, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xbd, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xac, 0x0, 0x0, @fd=r2}]}, 0x28}, {&(0x7f0000000540)={0xcc, 0x2f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@generic="46f4ebbaff7bcaf4dfb4f219c50ec290d5225f8788e86a4836aec536cf2e0c5fd3d9dd57a6ab10565a7cc47496082718dcb85ac5279cb6ebd638d729081f2222332b6aabf59615adf4e3fe8716cc60f6e91f7bb0ef24423232b4ae4edb1aa57c21c2ef7df02bceb93e6ce6ba0cc88f90df802017e200a87b8eebe377ed678b59aeb5adeccbad1ea89720b085a93856aa414957e0ba447fbc4c8fb450fa0e517d304752829a1d32caa4259d5c91fd73cb79c8d4ff6b4f6d196838b840"]}, 0xcc}], 0x2, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc, 0x500}]}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4.236338688s ago: executing program 0 (id=42): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x60, 0x16, 0x2a, {0x2a, 0x30, "2bf5786f28bcc5f9fbd2d0d153706cd15926fa28e2139bb3cab8f3a335f2d7339eca33f24b181ea5"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x5}, @generic={0x3, 0x10, 0x2}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0x0, 0x1, "8ff91a1a", "e478d8ab"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x2, 0x0, 0x3, 0x3ff, 0x5}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x20, 0x15, 0xcd, "2eeedb2fee5437f139912a5e1dd495dd76ae909ee4a4011f5440e2d2ba64229e2b54688a4568438c23c767c31aa3cfc28665209950b5f960d6a04e3f90f4f399af1384b55c00121186cac717f76a6e68a5e8be2feaac1b2d21aeb63438f78783335e2415cbb1682893cc1939040944407a21f8a8d15d8416457d63f56169f5906d49e4766852845a77f7eb429b063b6b1a3fc8cd362e96ba340601a62c8fe5400acd00f4d7b6a6b433d630d92302016d48df9a9872f9f67c60f16b34333fcd730a99e6272a8f56257f46a167fb"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xd200}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0xb, 0x2, "8e42"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "fadf"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x100}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.058438595s ago: executing program 3 (id=37): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x60, 0x16, 0x2a, {0x2a, 0x30, "2bf5786f28bcc5f9fbd2d0d153706cd15926fa28e2139bb3cab8f3a335f2d7339eca33f24b181ea5"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x5}, @generic={0x3, 0x10, 0x2}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0x0, 0x1, "8ff91a1a", "e478d8ab"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x2, 0x0, 0x3, 0x3ff, 0x5}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x20, 0x15, 0xcd, "2eeedb2fee5437f139912a5e1dd495dd76ae909ee4a4011f5440e2d2ba64229e2b54688a4568438c23c767c31aa3cfc28665209950b5f960d6a04e3f90f4f399af1384b55c00121186cac717f76a6e68a5e8be2feaac1b2d21aeb63438f78783335e2415cbb1682893cc1939040944407a21f8a8d15d8416457d63f56169f5906d49e4766852845a77f7eb429b063b6b1a3fc8cd362e96ba340601a62c8fe5400acd00f4d7b6a6b433d630d92302016d48df9a9872f9f67c60f16b34333fcd730a99e6272a8f56257f46a167fb"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xd200}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0xb, 0x2, "8e42"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "fadf"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x100}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.389666914s ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0x1, 0x6, 0x7, 0xe3, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7fffffff, 0x2, 0x5a000000, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0xfffffffa], [0x3, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf785, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x81, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x807777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.178783408s ago: executing program 2 (id=45): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e1f6b29, 0xec4d277024ba1ff4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdbd}], 0x1}}], 0x2, 0x28800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000000)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x17, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3df040000007b6aa54cc5001fcaed11831fa79a0000000200", "67523760fd40f78d2c4d03d81a8ca55ba139c01802c4dae4162e43ac65b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) sendfile(r0, r2, &(0x7f00000001c0)=0x3, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) r5 = getpid() ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) sendmsg$netlink(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)={0x28, 0x2e, 0x418, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xbd, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xac, 0x0, 0x0, @fd=r2}]}, 0x28}, {&(0x7f0000000540)={0xcc, 0x2f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@generic="46f4ebbaff7bcaf4dfb4f219c50ec290d5225f8788e86a4836aec536cf2e0c5fd3d9dd57a6ab10565a7cc47496082718dcb85ac5279cb6ebd638d729081f2222332b6aabf59615adf4e3fe8716cc60f6e91f7bb0ef24423232b4ae4edb1aa57c21c2ef7df02bceb93e6ce6ba0cc88f90df802017e200a87b8eebe377ed678b59aeb5adeccbad1ea89720b085a93856aa414957e0ba447fbc4c8fb450fa0e517d304752829a1d32caa4259d5c91fd73cb79c8d4ff6b4f6d196838b840"]}, 0xcc}], 0x2, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc, 0x500}]}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.141957876s ago: executing program 2 (id=46): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 3.134709657s ago: executing program 2 (id=47): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8400, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x7, 0x0, &(0x7f0000000080)) fcntl$notify(r2, 0x402, 0x24) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRES32=r0], 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r4 = getpid() r5 = getpid() kcmp(r4, r5, 0x2, r1, 0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r3}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x4800) r10 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r15 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r15, r14, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) fcntl$getownex(r15, 0x10, &(0x7f0000000040)) bind$netlink(r9, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r8}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000200)={0x0, 0xffff, 0x8, &(0x7f00000001c0)}) ioctl$UBLK_U_CMD_SET_PARAMS(r8, 0xc0207508, &(0x7f00000003c0)={r16, 0xffff, 0x70, &(0x7f0000000340)={0x70, 0x2, {0x1, 0x9, 0xc, 0xcf, 0xb9, 0x8, 0x4, 0x2, 0x1ac}, {0x7, 0x401, 0xffffff0c, 0x9, 0x40}, {0x8, 0x3, 0x74e2, 0x675b}, {0x5, 0xfff, 0x3}}}) 1.263222197s ago: executing program 0 (id=50): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="120101020000004035120c8040000102030109026e0003017f5016080b0002012230230904000000010130000a2401100a00090000000904010000010330"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 1.196426661s ago: executing program 3 (id=51): r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='- 0 0 0', 0x7) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)={0x18, 0x26, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}], 0x1}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) 1.127873825s ago: executing program 3 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0x1, 0x6, 0x7, 0xe3, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7fffffff, 0x2, 0x5a000000, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0xfffffffa], [0x3, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf785, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x81, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x807777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 222.743274ms ago: executing program 1 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 215.029386ms ago: executing program 1 (id=56): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000001880)=""/4085, 0xff5}], 0x1) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x0, r2}) close(0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r3, 0x5381, 0x0) 189.585491ms ago: executing program 1 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cc, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x70000, 0x8000}) 188.334901ms ago: executing program 3 (id=58): mkdirat(0xffffffffffffffff, 0x0, 0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) inotify_init1(0x80800) read$FUSE(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1, 0x68, 0x4}, 0x18) renameat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') syz_ublk_setup_queues(r2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24008810) write$FUSE_INIT(r2, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x8995, &(0x7f0000000080)={'sit0\x00', 0x0}) fchmodat(r2, &(0x7f0000000200)='./file1\x00', 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) mknodat$loop(r3, &(0x7f0000000180)='./file0\x00', 0x200, 0x0) 137.309792ms ago: executing program 3 (id=59): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x60, 0x16, 0x2a, {0x2a, 0x30, "2bf5786f28bcc5f9fbd2d0d153706cd15926fa28e2139bb3cab8f3a335f2d7339eca33f24b181ea5"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x5}, @generic={0x3, 0x10, 0x2}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0x0, 0x1, "8ff91a1a", "e478d8ab"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x2, 0x0, 0x3, 0x3ff, 0x5}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x20, 0x15, 0xcd, "2eeedb2fee5437f139912a5e1dd495dd76ae909ee4a4011f5440e2d2ba64229e2b54688a4568438c23c767c31aa3cfc28665209950b5f960d6a04e3f90f4f399af1384b55c00121186cac717f76a6e68a5e8be2feaac1b2d21aeb63438f78783335e2415cbb1682893cc1939040944407a21f8a8d15d8416457d63f56169f5906d49e4766852845a77f7eb429b063b6b1a3fc8cd362e96ba340601a62c8fe5400acd00f4d7b6a6b433d630d92302016d48df9a9872f9f67c60f16b34333fcd730a99e6272a8f56257f46a167fb"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xd200}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0xb, 0x2, "8e42"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "fadf"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x100}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 122.122685ms ago: executing program 2 (id=60): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x60, 0x16, 0x2a, {0x2a, 0x30, "2bf5786f28bcc5f9fbd2d0d153706cd15926fa28e2139bb3cab8f3a335f2d7339eca33f24b181ea5"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x5}, @generic={0x3, 0x10, 0x2}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0x0, 0x1, "8ff91a1a", "e478d8ab"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x2, 0x0, 0x3, 0x3ff, 0x5}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x20, 0x15, 0xcd, "2eeedb2fee5437f139912a5e1dd495dd76ae909ee4a4011f5440e2d2ba64229e2b54688a4568438c23c767c31aa3cfc28665209950b5f960d6a04e3f90f4f399af1384b55c00121186cac717f76a6e68a5e8be2feaac1b2d21aeb63438f78783335e2415cbb1682893cc1939040944407a21f8a8d15d8416457d63f56169f5906d49e4766852845a77f7eb429b063b6b1a3fc8cd362e96ba340601a62c8fe5400acd00f4d7b6a6b433d630d92302016d48df9a9872f9f67c60f16b34333fcd730a99e6272a8f56257f46a167fb"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xd200}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0xb, 0x2, "8e42"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "fadf"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x100}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) 107.152798ms ago: executing program 1 (id=61): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c021}, 0x20000000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) 71.519416ms ago: executing program 1 (id=62): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) setns(0xc9, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x8000000001cb, 0x12) 0s ago: executing program 1 (id=63): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e1f6b29, 0xec4d277024ba1ff4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="b9c615adb435cca0e14c99165991425bf6869feb5bc91d16faaa1e553b9ba9b8885e3132b577ed920350b853789a3c023c2b935ea8b2b9b98d4523acf27f4e45df6667b26b934bf4a2e10acf78417923dcef99d0ddb6becfb3766973d20a95ee7e83108308969fca595741c7f50e9d35d0462bc65c295881993cbc4dfd962af204ba800dd23f3721fd98b3f6121083f68f408363a4a8620d535c1b29fbbe546f4a2b0b7681251f3ecc7b782f3df90e2942f9e737bb561ddd15b4b6b5ece9448a616a5221828a7ea71dfaaa7cf64f26b41375972d28cd3db598fa5a5625b6b00f13f7d6c194f39cc639e8a5b0ab06d35935e856555504eb25395adec288f6ff8e99de0119f863a5dbf4e3b18cf049d3b70379a3131cd90f25bd5e2f1c3b83e72b8cc88226def21b7824f92cddbf8f4271315ab0ba1dcab80dc1068d3491baacbbc651ba06cfd8bf3cfecce1c0b25124e28f839f25c7d4e2ad533f8fb14c514de63a86e4f06e9799ecaf00f7ff665a2fed73e567536d1d6b1e929a51d3d782559d4dbc174d9d389e53866249e58ff31a1832f453d299e7a3c4e4b673b546f2f0b670183e77f56a17f07c279bae471ce38124d34b6cb40dd5ac278f173c1296d07653d60ed4c1b8ccf2f3d7ff820bacfa26e4086a7bb79e5a72dbed2e8fff1340a9b158b0da2541074be22c160213fea049286cd8da7fb115968c622063040f9b2fbebbd3bbef6eddb51a1c7a082cc76fc7a8348c01b71d87631363e56cba171a1b501af0e02bcf4c1aaebde108a68de36ed5bbfd8037776f1b265716ace9faf8dfc59235cadfecf04f7fb81d03f112cab7c0ff3075d58ffa492652dd110adca2dda9a430535b9474c4faed55e8428fac436dd9723fb98cae9396cd56339b1012b84ba5181dcb5baf6e6f4aeeca6d138592c8e11abf0057f22c99aa0f3c64dd39f97e99a7be65e4dc45a5ef85ecf7c015cda60ae91b2eb439cb67e69b6eb9dd0b61043557530353d72e0468560d4bafcca1bd7f9c6afe1a3a662fb025fc19369ffee064153cbbeec0570b8fe3409f8309cfe934bc5583874e5ba8fd5612c1686dea7433e35aff9ff0e21204915e5c1239de29a5f38f110c4bf26ad1d167f17152d032fa550e8b36c4a45ebddfdbbce0cc2d90e84818ad6884e515091407be569cf665ab7d9274d33ea803cc08c1b3bc542dc81ce88acfcb1229aa5e7ba6f9f1a16495c11829d97b6bef2cd8decd5add93a5574cb84d2c6bb932222909916b2aba380cef005032d404d28cc3ab15c2de814412fc5f35e783687174fc7f80851ace4ce383e8e998bf94f0f87a6bc18d89c0c97c1ebe6e9247922f8535a0d23d44a64f538afa58b3c7a1e8cb5ee501c8e9cb7f476c89c4716f726ac9563c2c8fa14c1a5dd4cc3aa39c6dc1c87995b4f0334fd1f33437af245eb2a40d7e44293390397ae728acb1bf9a77cb8344ac9e2fa5e992bdbfa09767d44c17712941a4f52d888cb4377ab447deff3fca6953dd13eb9737d99d760cade6a9a0918d4cdfeffc8a7d8641c26d5ab5b367122b0b27055f9fc5633e85fc438969ca0a242f0cd14eec12e99bd7d7f8ad802c452566a86d69b8499822c3d04661de7e52124499e574f9e4c0482de31c798568f00432af1e4f988ff4097037c8a1f02a2aa36f9410bbbd47d647c63f22d7d3e72a92ff70934fd18e4b14f9be799308ba42d58c759e2f66696ead711902070c8d1dda1de261e9881429c5c9b4e4625b37b621928112dba116245f8a541f20dde2b4b820a93f153315fc7894cd9195c9076bd8b5fa922a2cce6a9af29c9401a45893936a3ce9485ddf84d043da66f966deb11fb2657b3a06eec71413a4eb3f035080c7368c53c1ce460b51a179ce81442fefef656d13b3ea789befda32fb6d3eb42f75cdeb62f9cc73b2429745f4a8105c64683ecd90734913f94699859c346c7bce9c828b1e0a2d15b8dc2ae8e4449febfd168c5719c039eb44ed314e060b063d3b32ee017ab1a28acc0861da4ba15e9a71040bf106bb45fe3b719ce40a0649f4f73265235164e88563bed2960a35007e46a539f96234b36750643dd239e482359221a3e75332d5beb627fa9d84bc3a2eb7266c890d1b2295042916fb89e935e8fa6237555f931fb312849571d8889152de3338a5c30e611698e4612c8c2586c182d799428352f3a9ec290985e427312a8d3365a8819097b1697f29f7a207e1323d96207a4e46ba4e5b50d984135da9cca6bcf4c62ea0dc2c1ad88c45163c420da885a456a06384deacd39eff91ae124c33749f007c9c73b39b5ef456e06c7394a010066d72790606d39add005ae84bdda4104077b8a797e24d329071c6e4836a5451f4a043b1f71388bbfade35b0ac98ca8711ddfe042f28cb8f76bb8fff0870c67c2c1150a580a93cc16edf6e73d15319263e36723e76d2203a96cb438b6246a3ac4da6621a7e4c89133584341862d547d7bb885c4c169507e30a16170a242a32ead68bd9a5ab169f7460df9c7a135f8b6af647101cdaf6fbd9c3b849ab70bce5dea4cbf5959dad2a91a2dbc095dfc8960e4c3872eabb62565d420c8df1b44e05ab16c69109a4c07733340d59fd3f9853d0183355f05ddeaee5a4f9a5f03f5d84c76634db61b6d9a4aea51ddbdf43aee55e7f3780cd31ee799f6f33003606a5df9db08849da7bf884df395b50474b24b3527682a87968cd1be63ec8405d38cba5db9c943987eda334efac5ff30b137259babe08532e2a930262edf64c7364dc0d987374d6ca78e16a63d56a63a05b6cd9044abc8599b97aefd6460b13dbef9ff09bb15d419f542eae4a237b0fe376605d300467679c06c33aba623c903a559d0836d8353afed6e39e68be56b775a4952e3edbdc461ea3e6883b596ae6e66e0a92f18d48abf9a23eb5ce70ceed4a2ab6611ed70600a9fced116864dcbf43cb72ea3af69f6a47a9728950fbc7c8c71f6c75713423e2b39ea8ea8e2ebdf68fe639fa8b2577c675a4706343577c8237431e91bd6c2a423d774ebd06db324361a0c6857fa0038974761d178224545a326093d945453119e18be577add7dc62317989bbd4ccc5c962c7c31ef56b5126e92adf8899a1cb3416b4087cc034c29b3518bcf8fe105f6bd70cd766a0617ea45ebf9750ac99ef104a7e14405fbab6d7d735fb7ddf72bc368ba08c14ccd6a1f35fb894b030136a05d882a2613fbcea5f934dcab251d047185eaf8e7e349998ec3cd220251a13d63a6926a27314234e55bfe66b125b502c82c7c8e0a7f71ac8deb73a8731d127ff8722cbc2794b99b4594f90cd62afc53a217ff5860146ec98f422191349a5c252ec81ddb055936712d2edf152564cfc0dc98dca3d1d4a6dca380aee72a4f1d33594a16c9f4a27fca028f2f328fc358962bfdfeaa2e060e19cc8232937d5d2b713ee45d6cd7b5a8fb1450f81653eef0cd73bbda10318abbb30daa1cacd59d30722b5264175a8c3ef10426647afa6eecd7d2cebef58b721de10a1dfe4fe1a7735912c9dc68576d5d462b4aa039f350135e2ca8c4203f379ba0afd22fbe84df3611a359e58bc73529517ff2c2b5d6f4cc44df1f37bb6910d9eaff57306a785715a237543f1b2f16b2ae50b5018e0b8988feaa1b24a9106497f87eeb12cbf705c17d5c53b41b7b6ed022ea3ce572a23e22f689fdc517a0d9cc6a997cfb0eefd67162cd727422f4164837dd349c0214922dbfc50c3657b1913ea1f88778320913229432c6c73527876b553b0a6158063323a7f2f36e0216ebaf5e9ea52a85447d43c8a0cbccdfb0b453ca1df93951471cb72225b97b75f1e77225779657bf6d77313ef8bda668c914769b1c0c0dbc5587e4ace985996a4b9ff4071488684d96d131810baa439ad5f9254217142a5697dbb7abf05a3bbde089b2a2e94153edce47b334ec35572bab1cb551c3c76acb7bc1ab82a7cfc6177b2dea4bb012a0cb3f71117f963a5fcf777c6d03ae50e2ffea596d0c5fb821a585352eace44cae8698c51889f341fc68bf0c0ff565f23aca99fe2194e6066c756848d8ff68d5b62075a374c3441217eb2b9ca87263de59a6240ceae2f8a86b6c064dafc6fb9a669e53c5cf815657766d9903d613fdf6fe2957be15eab0af44c1a4a933f940bea2e46518b31c2a1faf9596d086e4f397b200b040c0e5d090142cf42f7de30c3f8a6deb9331d5ea338470df38689f4456ab8d243d381dc7c551784d6ff11a1bcae327fb72cb4de6f04f9e0cbb5a069633baf800ff676d8efa4471a0d412f1d449b797a3c35cf6904db713639974d6f3d157b7dccf1526e0c65598b656cfb30be0643058ac33d6e51bd720a3aa1efe72148d9b2a2c58e44e453feb31956d67119ca0d4a75db27fd62c207902d27b59f7947691d6ac234522c7722ba04aacafd795a0cfa9d01fc4eecb9233ba819a48e22b9b9d2541f843e28bcd80fc058797d99438d20d39af224727c38a72c8ec008c0d286227dcb4799c8b0096c220fc450f10b2e52f293b624e64cac03084cc2e2626215522980f4d19ef37406f534b1061fe9691e721a38e6854c318433c574b17a841af00195306e2209b46021dda5126cc88a49046c17ae48f0a890fa8c53c248d12f96b2f2abe3155026679bc19f8abb0c90f6554b818294bca0525f49e20eb0daafea45ae572a00bc3a8fae5cefc6d5b90c52f0dfe0de4873f1ebd2cf1ebbf09acc9c83d491d5c7e8612c0a7a12376da52246c6bbd548e81e005e466e7848b4bf348b06f09a2da11ea1102c585549b4b7244e999e10f8a89f31d3855ac706742612c815552c784b4e30d51a4dd5a5b92e6cb1e36c19e8e424b450d590925f8bc94133b7a45feea68cd48bfa165d04d2a83c1374066a7cb98f3bf92c226624749eb5ce340be1178baea230909842503ec5696f8976b535f31ca52ed17c5befecb94ba9ec214ac36c3b0c955f30352e57e469564df9ab96e6", 0xdbd}], 0x1}}], 0x2, 0x28800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000000)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x17, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3df040000007b6aa54cc5001fcaed11831fa79a0000000200", "67523760fd40f78d2c4d03d81a8ca55ba139c01802c4dae4162e43ac65b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) sendfile(r0, r2, &(0x7f00000001c0)=0x3, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) getpid() ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) sendmsg$netlink(r2, &(0x7f0000000680)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc, 0x500}]}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 20.238440][ T36] audit: type=1400 audit(1790869391.510:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.239630][ T286] cgroup: Unknown subsys name 'net' [ 20.261266][ T36] audit: type=1400 audit(1790869391.510:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.288881][ T36] audit: type=1400 audit(1790869391.540:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.289043][ T286] cgroup: Unknown subsys name 'devices' [ 20.432583][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.438301][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.550598][ T36] audit: type=1400 audit(1790869391.820:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.573948][ T36] audit: type=1400 audit(1790869391.830:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.582426][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.598932][ T36] audit: type=1400 audit(1790869391.830:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.630841][ T36] audit: type=1400 audit(1790869391.880:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.656525][ T36] audit: type=1400 audit(1790869391.880:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.666065][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.682614][ T36] audit: type=1400 audit(1790869391.940:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.716796][ T36] audit: type=1400 audit(1790869391.940:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.425403][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.440881][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.448117][ T293] bridge_slave_0: entered allmulticast mode [ 21.469133][ T293] bridge_slave_0: entered promiscuous mode [ 21.476083][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.483154][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.490265][ T293] bridge_slave_1: entered allmulticast mode [ 21.496649][ T293] bridge_slave_1: entered promiscuous mode [ 21.621300][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.628370][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.635725][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.642870][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.684374][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.692107][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.699234][ T298] bridge_slave_0: entered allmulticast mode [ 21.705763][ T298] bridge_slave_0: entered promiscuous mode [ 21.712198][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.719332][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.726980][ T297] bridge_slave_0: entered allmulticast mode [ 21.733549][ T297] bridge_slave_0: entered promiscuous mode [ 21.740287][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.747384][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.754542][ T297] bridge_slave_1: entered allmulticast mode [ 21.760912][ T297] bridge_slave_1: entered promiscuous mode [ 21.767240][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.774413][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.781606][ T299] bridge_slave_0: entered allmulticast mode [ 21.787905][ T299] bridge_slave_0: entered promiscuous mode [ 21.794273][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.801363][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.808542][ T298] bridge_slave_1: entered allmulticast mode [ 21.815031][ T298] bridge_slave_1: entered promiscuous mode [ 21.827046][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.834270][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.841474][ T299] bridge_slave_1: entered allmulticast mode [ 21.847907][ T299] bridge_slave_1: entered promiscuous mode [ 21.955781][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.963478][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.005635][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.012724][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.025935][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.033060][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.104705][ T293] veth0_vlan: entered promiscuous mode [ 22.128138][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.135326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.143299][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.150477][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.159662][ T293] veth1_macvtap: entered promiscuous mode [ 22.172922][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.180071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.188094][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.195256][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.204973][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.212122][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.223946][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.231031][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.277009][ T298] veth0_vlan: entered promiscuous mode [ 22.304292][ T297] veth0_vlan: entered promiscuous mode [ 22.312528][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.328413][ T298] veth1_macvtap: entered promiscuous mode [ 22.359225][ T299] veth0_vlan: entered promiscuous mode [ 22.367411][ T297] veth1_macvtap: entered promiscuous mode [ 22.387239][ T299] veth1_macvtap: entered promiscuous mode [ 22.404266][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.497741][ T323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 22.508530][ T323] netlink: 'syz.2.3': attribute type 27 has an invalid length. [ 22.519662][ T323] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 22.600879][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.729273][ T335] Zero length message leads to an empty skb [ 22.752753][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.766609][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 22.776985][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.786904][ T9] usb 2-1: config 0 descriptor?? [ 22.840811][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.990611][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 22.997306][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.012650][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 23.013863][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.018816][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 23.029681][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 23.045176][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.056653][ T31] usb 4-1: Product: syz [ 23.062350][ T9] usb 2-1: USB disconnect, device number 2 [ 23.064326][ T31] usb 4-1: Manufacturer: syz [ 23.076151][ T31] usb 4-1: SerialNumber: syz [ 23.296720][ T31] usb 4-1: 0:2 : does not exist [ 23.304616][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 23.325041][ T31] usb 4-1: USB disconnect, device number 2 [ 23.335453][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 23.490702][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 23.644514][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.655687][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 23.665205][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.674380][ T45] usb 2-1: config 0 descriptor?? [ 23.800702][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.951300][ T358] random: crng reseeded on system resumption [ 23.962237][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 23.970594][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.978328][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.989633][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 23.999331][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.015262][ T31] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 24.024494][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 24.033021][ T31] usb 1-1: Product: syz [ 24.038002][ T31] usb 1-1: Manufacturer: syz [ 24.066853][ T367] FAULT_INJECTION: forcing a failure. [ 24.066853][ T367] name failslab, interval 1, probability 0, space 0, times 0 [ 24.079850][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz.3.21 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 24.079886][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.079906][ T367] Call Trace: [ 24.079914][ T367] [ 24.079922][ T367] __dump_stack+0x21/0x30 [ 24.079962][ T367] dump_stack_lvl+0x140/0x1c0 [ 24.079989][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.080016][ T367] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 24.080037][ T367] ? init_file+0x9e/0x210 [ 24.080074][ T367] ? alloc_empty_file+0xd9/0x270 [ 24.080100][ T367] ? path_openat+0xf4/0x35a0 [ 24.080127][ T367] ? do_sys_openat2+0x134/0x1d0 [ 24.080155][ T367] ? __x64_sys_openat+0x13a/0x170 [ 24.080181][ T367] ? x64_sys_call+0xe69/0x2ee0 [ 24.080200][ T367] dump_stack+0x19/0x20 [ 24.080224][ T367] should_fail_ex+0x3c2/0x510 [ 24.080247][ T367] should_failslab+0xac/0x100 [ 24.080270][ T367] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 24.080290][ T367] ? __d_alloc+0x42/0x8c0 [ 24.080309][ T367] __d_alloc+0x42/0x8c0 [ 24.080325][ T367] d_alloc_parallel+0xe4/0x1370 [ 24.080344][ T367] ? make_vfsuid+0x4d/0xa0 [ 24.080359][ T367] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 24.080372][ T367] ? security_inode_permission+0x77/0x150 [ 24.080388][ T367] ? try_to_unlazy+0x62a/0xb50 [ 24.080399][ T367] ? __cfi_d_alloc_parallel+0x10/0x10 [ 24.080410][ T367] ? __kasan_check_write+0x18/0x20 [ 24.080421][ T367] ? down_write+0xee/0x2b0 [ 24.080436][ T367] ? __cfi_down_write+0x10/0x10 [ 24.080450][ T367] path_openat+0xa09/0x35a0 [ 24.080464][ T367] ? x64_sys_call+0xe69/0x2ee0 [ 24.080475][ T367] ? do_filp_open+0x440/0x440 [ 24.080489][ T367] do_filp_open+0x1f2/0x440 [ 24.080502][ T367] ? __cfi_do_filp_open+0x10/0x10 [ 24.080517][ T367] ? alloc_fd+0x4c1/0x570 [ 24.080530][ T367] do_sys_openat2+0x134/0x1d0 [ 24.080550][ T367] ? do_sys_open+0x100/0x100 [ 24.080573][ T367] ? is_dma_buf_file+0x11/0x50 [ 24.080589][ T367] __x64_sys_openat+0x13a/0x170 [ 24.080614][ T367] x64_sys_call+0xe69/0x2ee0 [ 24.080625][ T367] do_syscall_64+0x57/0xf0 [ 24.080637][ T367] ? clear_bhb_loop+0x50/0xa0 [ 24.080653][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.080667][ T367] RIP: 0033:0x7fc8e8d9e159 [ 24.080685][ T367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.080695][ T367] RSP: 002b:00007fc8e9d33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 24.080713][ T367] RAX: ffffffffffffffda RBX: 00007fc8e9025fa0 RCX: 00007fc8e8d9e159 [ 24.080723][ T367] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 24.080731][ T367] RBP: 00007fc8e8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 24.080738][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.080745][ T367] R13: 00007fc8e9026038 R14: 00007fc8e9025fa0 R15: 00007fffb0a95e28 [ 24.080755][ T367] [ 24.121863][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.131189][ T45] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 24.133087][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 24.146766][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input4 [ 24.147649][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.231634][ T45] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 24.248031][ T9] usb 3-1: config 0 descriptor?? [ 24.260744][ T31] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 24.451830][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 24.461252][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 24.470379][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 24.479647][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 24.483046][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 24.489041][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 24.498987][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 24.504525][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 24.516440][ T9] usb 3-1: USB disconnect, device number 2 [ 24.521007][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 24.535593][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 24.545190][ T31] usb 1-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 24.554487][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 24.563832][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 24.573407][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 24.583181][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 24.593426][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 7 on unit 48: -71 (exp. 1). [ 24.602922][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 24.612372][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 24.622142][ T31] usb 1-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 24.631333][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 16 on unit 48: -71 (exp. 1). [ 24.640658][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 24.649865][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 24.659488][ T31] usb 1-1: No streaming interface found for terminal 2. [ 24.669737][ T31] usb 1-1: USB disconnect, device number 2 [ 24.922393][ T378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 24.931792][ T343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.939461][ T378] netlink: 'syz.3.24': attribute type 27 has an invalid length. [ 24.949448][ T378] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 24.969070][ T9] usb 2-1: USB disconnect, device number 3 [ 25.068629][ T383] random: crng reseeded on system resumption [ 25.091691][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.106927][ T343] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.116168][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.124796][ T343] usb 3-1: config 0 descriptor?? [ 25.220628][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.340599][ T315] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 25.380601][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 25.386791][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.396984][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.407314][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.416470][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.424599][ T31] usb 1-1: Product: syz [ 25.428766][ T31] usb 1-1: Manufacturer: syz [ 25.433393][ T31] usb 1-1: SerialNumber: syz [ 25.492640][ T315] usb 4-1: not running at top speed; connect to a high speed hub [ 25.500247][ T388] FAULT_INJECTION: forcing a failure. [ 25.500247][ T388] name failslab, interval 1, probability 0, space 0, times 0 [ 25.501549][ T315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.513161][ T388] CPU: 1 UID: 0 PID: 388 Comm: syz.1.28 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 25.513196][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.513208][ T388] Call Trace: [ 25.513216][ T388] [ 25.513224][ T388] __dump_stack+0x21/0x30 [ 25.513257][ T388] dump_stack_lvl+0x140/0x1c0 [ 25.513283][ T388] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.513311][ T388] dump_stack+0x19/0x20 [ 25.513336][ T388] should_fail_ex+0x3c2/0x510 [ 25.513359][ T388] should_failslab+0xac/0x100 [ 25.513383][ T388] kmem_cache_alloc_noprof+0x42/0x410 [ 25.513404][ T388] ? security_inode_alloc+0x51/0x230 [ 25.513431][ T388] security_inode_alloc+0x51/0x230 [ 25.513455][ T388] inode_init_always_gfp+0x756/0x9e0 [ 25.513478][ T388] ? __cfi_sock_alloc_inode+0x10/0x10 [ 25.513500][ T388] alloc_inode+0xc5/0x270 [ 25.513530][ T388] ? bpf_lsm_socket_create+0xd/0x20 [ 25.513553][ T388] new_inode_pseudo+0x19/0x40 [ 25.513577][ T388] __sock_create+0x130/0x810 [ 25.513602][ T388] __sys_socket+0xe1/0x1c0 [ 25.513625][ T388] __x64_sys_socket+0x7e/0x90 [ 25.513648][ T388] x64_sys_call+0x2608/0x2ee0 [ 25.513665][ T388] do_syscall_64+0x57/0xf0 [ 25.513684][ T388] ? clear_bhb_loop+0x50/0xa0 [ 25.513709][ T388] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.513732][ T388] RIP: 0033:0x7f3a8fb9e159 [ 25.513749][ T388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.513764][ T388] RSP: 002b:00007f3a90a7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 25.513785][ T388] RAX: ffffffffffffffda RBX: 00007f3a8fe25fa0 RCX: 00007f3a8fb9e159 [ 25.513799][ T388] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 25.513811][ T388] RBP: 00007f3a8fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 25.513824][ T388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.513835][ T388] R13: 00007f3a8fe26038 R14: 00007f3a8fe25fa0 R15: 00007ffe0642f2a8 [ 25.513851][ T388] [ 25.513886][ T388] socket: no more sockets [ 25.524801][ T315] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 25.561916][ T343] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 25.568586][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.571798][ T343] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5 [ 25.585369][ T315] usb 4-1: Found UVC 1.00 device (046d:0825) [ 25.647573][ T31] usb 1-1: 0:2 : does not exist [ 25.649365][ T315] usb 4-1: No streaming interface found for terminal 2. [ 25.658159][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 25.796168][ T315] usb 4-1: USB disconnect, device number 3 [ 25.810599][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 25.810616][ T36] audit: type=1400 audit(1790869397.080:148): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=464 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.815160][ T31] usb 1-1: USB disconnect, device number 3 [ 25.820632][ T36] audit: type=1400 audit(1790869397.080:149): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=464 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.839662][ T343] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 25.897237][ T36] audit: type=1400 audit(1790869397.080:150): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=464 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.104598][ T397] netlink: 200 bytes leftover after parsing attributes in process `syz.1.31'. [ 26.152289][ T31] usb 3-1: USB disconnect, device number 3 [ 26.663843][ T408] random: crng reseeded on system resumption [ 26.691152][ T407] FAULT_INJECTION: forcing a failure. [ 26.691152][ T407] name failslab, interval 1, probability 0, space 0, times 0 [ 26.712661][ T407] CPU: 1 UID: 0 PID: 407 Comm: syz.2.34 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 26.712692][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.712705][ T407] Call Trace: [ 26.712711][ T407] [ 26.712719][ T407] __dump_stack+0x21/0x30 [ 26.712752][ T407] dump_stack_lvl+0x140/0x1c0 [ 26.712776][ T407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.712802][ T407] dump_stack+0x19/0x20 [ 26.712826][ T407] should_fail_ex+0x3c2/0x510 [ 26.712850][ T407] should_failslab+0xac/0x100 [ 26.712876][ T407] kmem_cache_alloc_noprof+0x42/0x410 [ 26.712897][ T407] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 26.712921][ T407] ? alloc_empty_file+0xbf/0x270 [ 26.712946][ T407] ? arch_stack_walk+0x10a/0x170 [ 26.712967][ T407] alloc_empty_file+0xbf/0x270 [ 26.712992][ T407] path_openat+0xf4/0x35a0 [ 26.713018][ T407] ? stack_depot_save_flags+0x38/0x800 [ 26.713043][ T407] ? schedule+0xc5/0x240 [ 26.713066][ T407] ? kasan_save_track+0x4f/0x80 [ 26.713088][ T407] ? kasan_save_track+0x3e/0x80 [ 26.713109][ T407] ? kasan_save_alloc_info+0x3a/0x50 [ 26.713128][ T407] ? __kasan_slab_alloc+0x73/0x90 [ 26.713151][ T407] ? getname+0x1b/0x30 [ 26.713172][ T407] ? do_sys_openat2+0xda/0x1d0 [ 26.713196][ T407] ? __x64_sys_openat+0x13a/0x170 [ 26.713222][ T407] ? x64_sys_call+0xe69/0x2ee0 [ 26.713239][ T407] ? do_syscall_64+0x57/0xf0 [ 26.713258][ T407] ? do_filp_open+0x440/0x440 [ 26.713297][ T407] do_filp_open+0x1f2/0x440 [ 26.713324][ T407] ? __cfi_do_filp_open+0x10/0x10 [ 26.713350][ T407] ? alloc_fd+0x4c1/0x570 [ 26.713374][ T407] do_sys_openat2+0x134/0x1d0 [ 26.713399][ T407] ? do_sys_open+0x100/0x100 [ 26.713425][ T407] __x64_sys_openat+0x13a/0x170 [ 26.713450][ T407] x64_sys_call+0xe69/0x2ee0 [ 26.713468][ T407] do_syscall_64+0x57/0xf0 [ 26.713487][ T407] ? clear_bhb_loop+0x50/0xa0 [ 26.713511][ T407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.713535][ T407] RIP: 0033:0x7ffbe5f9e159 [ 26.713553][ T407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.713569][ T407] RSP: 002b:00007ffbe6e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 26.713592][ T407] RAX: ffffffffffffffda RBX: 00007ffbe6225fa0 RCX: 00007ffbe5f9e159 [ 26.713608][ T407] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 26.713622][ T407] RBP: 00007ffbe603506b R08: 0000000000000000 R09: 0000000000000000 [ 26.713636][ T407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.713649][ T407] R13: 00007ffbe6226038 R14: 00007ffbe6225fa0 R15: 00007ffc9b0f9b18 [ 26.713666][ T407] [ 26.832715][ T415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 26.970598][ T343] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.973662][ T413] netlink: 'syz.1.36': attribute type 27 has an invalid length. [ 27.030605][ T315] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.143706][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.156150][ T343] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.162840][ T36] audit: type=1400 audit(1790869398.440:151): avc: denied { read write } for pid=417 comm="syz.1.38" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.165599][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.196950][ T316] hid-generic 0000:0008:0000.0003: item fetching failed at offset 0/2 [ 27.198658][ T36] audit: type=1400 audit(1790869398.440:152): avc: denied { open } for pid=417 comm="syz.1.38" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.206486][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.230083][ T343] usb 4-1: config 0 descriptor?? [ 27.245745][ T316] hid-generic 0000:0008:0000.0003: probe with driver hid-generic failed with error -22 [ 27.256691][ T36] audit: type=1400 audit(1790869398.470:153): avc: denied { name_bind } for pid=417 comm="syz.1.38" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.257650][ T315] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.290303][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.299797][ T315] usb 1-1: config 0 descriptor?? [ 27.484141][ T343] usbhid 4-1:0.0: can't add hid device: -71 [ 27.490152][ T343] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 27.503742][ T343] usb 4-1: USB disconnect, device number 4 [ 27.509811][ T425] fuse: Bad value for 'fd' [ 27.514937][ T36] audit: type=1400 audit(1790869398.780:154): avc: denied { mounton } for pid=423 comm="syz.1.41" path="/9/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.540891][ T315] usbhid 1-1:0.0: can't add hid device: -71 [ 27.547413][ T315] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 27.574997][ T315] usb 1-1: USB disconnect, device number 4 [ 27.719741][ T433] random: crng reseeded on system resumption [ 27.871076][ T319] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.980646][ T315] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.000677][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.020661][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 28.021291][ T343] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.027039][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.044286][ T319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.055115][ T319] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.064239][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.072571][ T319] usb 2-1: Product: syz [ 28.077001][ T319] usb 2-1: Manufacturer: syz [ 28.081652][ T319] usb 2-1: SerialNumber: syz [ 28.130796][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.138512][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.149661][ T315] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 28.158912][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.167786][ T315] usb 1-1: config 0 descriptor?? [ 28.182368][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.193834][ T343] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 28.203077][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.212087][ T343] usb 4-1: config 0 descriptor?? [ 28.292656][ T319] usb 2-1: 0:2 : does not exist [ 28.299818][ T319] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 28.311616][ T319] usb 2-1: USB disconnect, device number 4 [ 28.319302][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.370614][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.578614][ T315] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 28.588631][ T315] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input6 [ 28.620586][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.620982][ T343] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 28.637995][ T343] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input7 [ 28.654788][ T315] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 28.722956][ T343] keytouch 0003:0926:3333.0005: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 28.760591][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.806329][ T36] audit: type=1400 audit(1790869400.080:155): avc: denied { read } for pid=442 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.878769][ T36] audit: type=1400 audit(1790869400.150:156): avc: denied { write } for pid=443 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.878874][ T444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'. [ 28.931509][ T36] audit: type=1400 audit(1790869400.210:157): avc: denied { read } for pid=445 comm="syz.1.49" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 29.050722][ T9] usb 3-1: device descriptor read/64, error -71 [ 29.108214][ T315] usb 1-1: USB disconnect, device number 5 [ 29.160729][ T9] usb usb3-port1: attempt power cycle [ 29.180732][ T319] usb 4-1: USB disconnect, device number 5 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: OK Stopping iptables: OK Stopping system message bus: [ 29.500679][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.521555][ T9] usb 3-1: device descriptor read/8, error -71 done killall: can't kill pid 394: No such process [ 29.658329][ T9] usb 3-1: device descriptor read/8, error -71 Stopping klogd: OK Stopping acpid: [ 29.792036][ T493] FAULT_INJECTION: forcing a failure. [ 29.792036][ T493] name failslab, interval 1, probability 0, space 0, times 0 [ 29.804995][ T493] CPU: 1 UID: 0 PID: 493 Comm: syz.1.52 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 29.805028][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.805041][ T493] Call Trace: [ 29.805048][ T493] [ 29.805056][ T493] __dump_stack+0x21/0x30 [ 29.805090][ T493] dump_stack_lvl+0x140/0x1c0 [ 29.805117][ T493] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.805146][ T493] dump_stack+0x19/0x20 [ 29.805172][ T493] should_fail_ex+0x3c2/0x510 [ 29.805203][ T493] ? security_sk_alloc+0x65/0x260 [ 29.805232][ T493] should_failslab+0xac/0x100 [ 29.805256][ T493] __kmalloc_noprof+0x69/0x510 [ 29.805276][ T493] ? kasan_save_alloc_info+0x3a/0x50 [ 29.805295][ T493] ? security_sk_alloc+0x65/0x260 [ 29.805321][ T493] ? __kasan_kmalloc+0x96/0xb0 [ 29.805345][ T493] security_sk_alloc+0x65/0x260 [ 29.805372][ T493] sk_prot_alloc+0x123/0x3a0 [ 29.805398][ T493] sk_alloc+0x40/0x590 [ 29.805423][ T493] netlink_create+0x3d0/0x630 [ 29.805440][ T493] ? __cfi_audit_multicast_bind+0x10/0x10 [ 29.805462][ T493] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 29.805484][ T493] __sock_create+0x3a5/0x810 [ 29.805507][ T493] __sys_socket+0xe1/0x1c0 [ 29.805530][ T493] __x64_sys_socket+0x7e/0x90 [ 29.805552][ T493] x64_sys_call+0x2608/0x2ee0 [ 29.805571][ T493] do_syscall_64+0x57/0xf0 [ 29.805590][ T493] ? clear_bhb_loop+0x50/0xa0 [ 29.805616][ T493] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.805640][ T493] RIP: 0033:0x7f3a8fb9e159 [ 29.805658][ T493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.805674][ T493] RSP: 002b:00007f3a90a7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 29.805695][ T493] RAX: ffffffffffffffda RBX: 00007f3a8fe25fa0 RCX: 00007f3a8fb9e159 [ 29.805711][ T493] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000010 [ 29.805724][ T493] RBP: 00007f3a8fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 29.805737][ T493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.805750][ T493] R13: 00007f3a8fe26038 R14: 00007f3a8fe25fa0 R15: 00007ffe0642f2a8 [ 29.805768][ T493] [ 29.890661][ T315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.040068][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 30.061645][ T9] usb 3-1: device descriptor read/8, error -71 [ 30.191597][ T9] usb 3-1: device descriptor read/8, error -71 [ 30.202135][ T315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.220961][ T315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.231089][ T315] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 30.241856][ T315] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 30.251101][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.259354][ T315] usb 1-1: Product: syz [ 30.263672][ T315] usb 1-1: Manufacturer: syz [ 30.268341][ T315] usb 1-1: SerialNumber: syz [ 30.300827][ T9] usb usb3-port1: unable to enumerate USB device [ 30.481335][ T315] usb 1-1: MIDIStreaming interface descriptor not found [ 30.491038][ T315] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 30.501589][ T315] usb 1-1: USB disconnect, device number 6 [ 30.628304][ T498] random: crng reseeded on system resumption OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 30.792615][ T517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.61'. umount: can't remount debugfs read-only [ 30.869602][ T523] random: crng reseeded on system resumption umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: cSent SIGTERM to all processes [ 30.906844][ T36] kauditd_printk_skb: 37 callbacks suppressed Connection to 10.128.0.132 closed by remote host. [ 30.906865][ T36] audit: type=1400 audit(1790869402.160:195): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2845]" dev="pipefs" ino=2845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 30.960647][ T315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.069751][ T12] bridge_slave_1: left allmulticast mode [ 31.075637][ T12] bridge_slave_1: left promiscuous mode [ 31.081348][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.088829][ T12] bridge_slave_0: left allmulticast mode [ 31.094578][ T12] bridge_slave_0: left promiscuous mode [ 31.100183][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.252318][ T12] veth1_macvtap: left promiscuous mode [ 31.258096][ T12] veth0_vlan: left promiscuous mode [ 31.482444][ T12] bridge_slave_1: left allmulticast mode [ 31.488133][ T12] bridge_slave_1: left promiscuous mode [ 31.493753][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.501690][ T12] bridge_slave_0: left allmulticast mode [ 31.507323][ T12] bridge_slave_0: left promiscuous mode [ 31.513050][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.520728][ T12] bridge_slave_1: left allmulticast mode [ 31.526360][ T12] bridge_slave_1: left promiscuous mode [ 31.532037][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.539536][ T12] bridge_slave_0: left allmulticast mode [ 31.545422][ T12] bridge_slave_0: left promiscuous mode [ 31.551088][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.558616][ T12] bridge_slave_1: left allmulticast mode [ 31.564459][ T12] bridge_slave_1: left promiscuous mode [ 31.570070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.577465][ T12] bridge_slave_0: left allmulticast mode [ 31.583203][ T12] bridge_slave_0: left promiscuous mode [ 31.588778][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.785102][ T12] veth1_macvtap: left promiscuous mode [ 31.790757][ T12] veth0_vlan: left promiscuous mode [ 31.796527][ T12] veth1_macvtap: left promiscuous mode [ 31.802091][ T12] veth0_vlan: left promiscuous mode [ 31.807672][ T12] veth1_macvtap: left promiscuous mode [ 31.813269][ T12] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 33.111064][ T524] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 33.118062][ T524] ACPI: PM: Preparing to enter system sleep state S5 [ 33.125129][ T524] kvm: exiting hardware virtualization [ 33.130673][ T524] reboot: Power down serialport: VM disconnected.