last executing test programs: 47.074818943s ago: executing program 0 (id=1): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}}, 0x0) 47.023214643s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0xca013fbdd5f8710d, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='unlock '], 0xb) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = openat$incfs(r4, &(0x7f00000001c0)='.log\x00', 0x400081, 0x1) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f00000004c0)={0x4, 0x0, [{0x1, 0x8, 0x5, 0xc, 0x400, 0x6, 0x7}, {0xd, 0xe, 0x3, 0x6, 0x7, 0x5, 0x8}, {0xf, 0x81, 0x7, 0x7, 0x101, 0x6, 0x1}, {0x80000000, 0x480000, 0x1, 0x8, 0x9, 0x8, 0x3}]}) chmod(&(0x7f0000000000)='./cgroup\x00', 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de76151a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000b40)=[{&(0x7f00000003c0)="dce9", 0x2}], 0x1) close(r5) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 46.882336222s ago: executing program 0 (id=7): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 46.784640573s ago: executing program 0 (id=8): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xbf8b, 0x0, 0x3, 0x39b}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd59, 0x2000, 0x0, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1a04, 0x40, 0x1, 0x9c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2fb, 0x10000, 0x3, 0xd5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc36e, 0x6a3928e638188356, 0x3, 0x273}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x101}, 0x0, 0x0, '\x00', {0x0, 0xe5e, 0x0, &(0x7f0000001dc0)=@buf_512="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"}}, &(0x7f0000002e40)) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000007, 0x10, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f000015f000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000001640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/4096, 0x1000, 0x2, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x22}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3d}}, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000006700)='./file0/../file0/../file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 46.715990107s ago: executing program 1 (id=11): setns(0xc9, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/file0\x00', 0x202800, 0xa4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000003f") mount(0x0, &(0x7f0000000100)='./mytrace\x00', 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x5, 0x4) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x0, 0x1, 0x8}) write(0xffffffffffffffff, &(0x7f0000801000)="0000000000000000ffff0000009acf00ffff00000092cf0067000010008b0000670000200089", 0x26) write(0xffffffffffffffff, &(0x7f0000802400)="0000200000e5", 0x6) write(0xffffffffffffffff, &(0x7f0000803000)="cd80", 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400000, &(0x7f0000800000/0x400000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000400)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4}, {0x0, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x1ffc, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x87}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0xb, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xa000, 0x67, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x7f}, {0x2000, 0x7ff}, 0x31, 0x0, 0x30000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000800)={[], 0x3000, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(r0, &(0x7f0000000000)='./sys\x00', 0x30) gettid() getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000600)=""/1024, 0x400) 46.50995999s ago: executing program 1 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000019c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000001a00)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0xff}, 0x4) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0xb, 0x7, 0x8}, 0x20) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fd100f000ee1000c", 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f00000000c0)='*(]$!\x00', 0x40, &(0x7f0000000580)={@align=0x4, {0x1, 0x8003, 0x82, 0x2}}, 0x2, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0xcf}) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f00000059c0)={0x2020}, 0x2020) 46.313094001s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x842, 0x1c1) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="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", 0x26e}, {&(0x7f0000000140)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433", 0xba}, {&(0x7f0000000580)="7c9a2316e89ab42497cee1a1b1c383aa88d3cb2fb17650afa805158e027d7d737990ac2627f3a9cc21658385bbd38e56eb7a2af81cc2976e73bebd63ad0c1c73d64865c6ae6b7b25e171fba6a8650c566afc1f5eafba9f62ca5acb6b15b45aceb801c1c5b791dd18ae4ca5b32e34bf2cd497ff73e2d8530fbbd1192f5932d3d35246cc1b6f6132f304ce55deaeb819f5fe7f9f0e1f155dc09dad6af8122f3f404d9a8c74add78c3e309c946543734adc05", 0xb1}], 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r1, 0x10, 0x4000, 0x40fe) 46.312766051s ago: executing program 32 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x842, 0x1c1) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="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", 0x26e}, {&(0x7f0000000140)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433", 0xba}, {&(0x7f0000000580)="7c9a2316e89ab42497cee1a1b1c383aa88d3cb2fb17650afa805158e027d7d737990ac2627f3a9cc21658385bbd38e56eb7a2af81cc2976e73bebd63ad0c1c73d64865c6ae6b7b25e171fba6a8650c566afc1f5eafba9f62ca5acb6b15b45aceb801c1c5b791dd18ae4ca5b32e34bf2cd497ff73e2d8530fbbd1192f5932d3d35246cc1b6f6132f304ce55deaeb819f5fe7f9f0e1f155dc09dad6af8122f3f404d9a8c74add78c3e309c946543734adc05", 0xb1}], 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r1, 0x10, 0x4000, 0x40fe) 45.921397952s ago: executing program 0 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) tee(r0, r4, 0x2, 0x1a) sendmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x300, r5, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 45.793085239s ago: executing program 0 (id=17): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000480)=0x3fd, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000040)={0x1, 0xb}) r3 = getpid() syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xd, &(0x7f00000000c0)={0x7, 0x57}, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2000007, 0x1010, r2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x80) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = open(0x0, 0x30602, 0x78) setsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, 0x0) io_setup(0x800, &(0x7f0000000440)=0x0) r7 = eventfd(0x0) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r7, 0x0, 0x4f}]) 45.782727342s ago: executing program 33 (id=17): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000480)=0x3fd, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000040)={0x1, 0xb}) r3 = getpid() syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xd, &(0x7f00000000c0)={0x7, 0x57}, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2000007, 0x1010, r2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x80) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = open(0x0, 0x30602, 0x78) setsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, 0x0) io_setup(0x800, &(0x7f0000000440)=0x0) r7 = eventfd(0x0) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r7, 0x0, 0x4f}]) 44.901102955s ago: executing program 5 (id=19): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000006d00)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1s]\xaba\xf93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\x19\x8d\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdcU\x00\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-ox\xdb;\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\x13$\t\xa8\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\vf\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf66\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6\x02\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xed\x16\xbcL\x10\x8d\x10\x9c<\x0e\x94\x13}\xbe\xd0\x89\xee\x90p%\x1bV\x89\an\x11Lc\xf8\xe6\'\x84\xfd\x01K/\x15\xce\x8dh}\x00q\xe7\x7f\x19r\xc4z>\xfcX\x98\xccd13S#\'y\xab\xe4\x1fW\xd3\xa1g\x1d\x8eGa\xa2\xab&\xf1\x96\xb5\x1b\xdb\xb0\x8a\x0fVM,\xf5\xcd5\xaaKt8\'\x046\x15\x94\xfa\xc4\x9e\xfc\xa2C\x1e\xd3%,1\x80.\x91h\xeeIb\x82\xd7\xa99\x86O\x9c\x14b\xbeA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xacC\x95\xf0\x9d\xe8\x80G\xc2\xc1zL\xd0\x1f\x8c0\xf5\xec\v\xed\xad\x1d#\xde\x98\xf9\v\x02Y\x89\xb2\'\xeaH\xbc{o\xbc\b?\xd9\x81\'\x0f7Xl\xcc\x93I3 \x0e\xc190`\xd9\xe46w\x1d\xdeV\xbf\xc9\x9e\xb4\xde\xe6\xa3\x97%D]\xd1Vd]\x03\x89J\xa8 \x99\xef\x9b\x00'/2064) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000001d80)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 44.865940343s ago: executing program 5 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x401}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x10) write(r3, &(0x7f0000000400)="43c0", 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000001040), 0x4) mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x20020, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000380)={r2, &(0x7f0000000080)=',\\\x00', 0x400000, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x9]}, {0x55, 0xc, 0x7, 0x2ea0}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r6, &(0x7f00000102c0)=ANY=[@ANYBLOB="7f454c4607100709040000000000000003003e00f9ffffffd80100000000000040000000000000008b0000040000000008000000060038000102"], 0x78) close(r6) renameat2(r5, &(0x7f00000003c0)='./cgroup\x00', r6, &(0x7f0000000400)='./cgroup\x00', 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x12, 0x2, 0xf, '\x00', 0x6}) r8 = socket(0x3, 0x5, 0x7) sendmsg$nl_generic(r8, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x27c, 0x3b, 0xeb793d27e6495d88, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@generic="fad76b7bdbea9f0c5f9d880023bc36c918dc7de055c66cf6cd1f40d63f9f0be64fe58221884fb74eb624ba72c949a3cdaec469b75c84c584352ffc24dd31e522cf10e0d0dffafedda0e7e41f239229f78af17ed2d669cc531b4659afc15d6b6e702aa5cd58ecd42b06b8767d5d460fdecf9492e1f03e8a34987417e9954e351bb67a70c6624199609b117fcefc822c6d0a9012bd3c0ff1a38e8e92e1f42509faba7b", @typed={0x4, 0x5d}, @nested={0x14, 0x32, 0x0, 0x1, [@nested={0x4, 0x72}, @nested={0x4, 0x58}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x43e2}]}, @generic="9a09776c76538e7ac02f7c7830ac521677afd9b0d2aeb7cc159990cd988bd2ca8c5f92e1fe46631b199f84638b40b1edec06c761ada45389999984c23a6622c99624b9d7c36a2b215dcd522f93534e8ed4598c6c1d63407a40fd9da961a2c5196acbe54e8ff5d97865c4bc6276bb3f03b5581d22a298518c2dd0c04d63020e5fd36e6bf2ead448c41a3fd0a547e2fd1054ef09610c6b37280595699ab4f8c1022c468caccd4975d8fcba5ca9e21f17aa31014eda90edec429ce862111c70920796410c322aaf17b39554aa", @generic="d622ea8725339c2c5c7bb7e5d9a5d219d5ce34cd8abf6b72924603dc2a47f932cf92d0dd3fd77ca95e1ffc2974d6454f3e8d7ba441884e9013afa93ab4c3fff31635b3e7b537e134b6f28387f132a9de193a5e8166ef55743d046a7969c967240d3b77a80c0701a0a683116e8b05773c1f7375efe39a1880fdb14ec92fc71dc4a5cb0e8c5068fab7955f5a5d8a27573f1d16b4bf4de5f88b21d47c6702fe3ffbe37038034fbf6a31efb0e3e19fa701831bdc8bb67cda586cb02d090e2687b959d02ea0a9ad0afdd0242e463cc81f5d969822cac6b95305d91afc91", @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x440008d1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 44.630694721s ago: executing program 5 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x76) r1 = socket(0x10, 0x803, 0x0) unshare(0x2040400) listxattr(0x0, 0x0, 0x0) r2 = socket(0x28, 0x801, 0x0) shutdown(r2, 0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x5, 0x2, 0x21, @empty, @empty, 0x8000, 0x1, 0x100, 0x7}}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x6) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000180)={0xc6c, 0x0, 0x80000001, 0x0, 0x40, 0x3, 0x0, &(0x7f0000000000)=[{0x16, 0x1ff, 0x81}, {0x13, 0xfe}, {0x3e, 0xfe, 0x566}]}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000c40)="306663353a313232373a3f7092c0f0bccc488e937ed29879e6083376cf4e4fcb63d6ab4698cbbb31a7ce557cfc4d4701eae01794dc7af761ad80bd22fa41d7f8513cdb1e2a86ce27766a638ca1a0dbff0c85be04150f6b59b4719b80b595564162b2a30c402cc54c62e0ac0dc98f0720a05a4f83a132a90ebe109155f8ba470b", 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$incfs(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 44.573909494s ago: executing program 5 (id=24): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xbf8b, 0x0, 0x3, 0x39b}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd59, 0x2000, 0x0, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1a04, 0x40, 0x1, 0x9c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2fb, 0x10000, 0x3, 0xd5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc36e, 0x6a3928e638188356, 0x3, 0x273}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x101}, 0x0, 0x0, '\x00', {0x0, 0xe5e, 0x0, &(0x7f0000001dc0)=@buf_512="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"}}, &(0x7f0000002e40)) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000007, 0x10, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f000015f000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000001640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/4096, 0x1000, 0x2, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x22}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3d}}, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000006700)='./file0/../file0/../file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 43.720868441s ago: executing program 5 (id=32): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x40) r1 = fcntl$dupfd(r0, 0x406, r0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x2, 0xc) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x6, 0x0, 0x98, &(0x7f0000000140)={0xffffffff, 0x5, 0x6}}) 43.617527252s ago: executing program 5 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) tee(r0, r4, 0x2, 0x1a) sendmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x300, r5, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 43.544925158s ago: executing program 34 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) tee(r0, r4, 0x2, 0x1a) sendmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x300, r5, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 21.824929633s ago: executing program 2 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x401}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x10) write(r3, &(0x7f0000000400)="43c0", 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000001040), 0x4) mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x20020, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x12, 0x2, 0xf, '\x00', 0x6}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21.69408128s ago: executing program 2 (id=308): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x69, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x3, "", [{{0x9, 0x4, 0x0, 0x75, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0xfffe, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x15, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 20.078783497s ago: executing program 2 (id=319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2503"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) lseek(r3, 0xffffffffffffffff, 0x1) write$ublk_bdev(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffff8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5, 0xa9, @random='&'}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x103}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6b, 0xa8, @random="2032983e3eb7913b27d8fe68c5977bc7fd248d82cd689d6d2c5e9ed7489984fce1c633b385e624b46bcc9c9637c95d883b62ea96955a8771bbeecba2a9e69f80dee66e9e01e62d7c4462a2f862db4c64c0c4b48ac9d91ccfdcd5c59b8aa250f7dd795b9e35657f"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c0c1) 19.922692269s ago: executing program 6 (id=321): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000000000007) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x5d) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0xfffffffffffffffc, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x58000, 0x3c4210}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aad03, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0x80000000, 0x10005, 0x9, 0xfffffffa, 0x80000001, 0x5, 0x3}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383", 0x7, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xffff485d}, @mss={0x2, 0x1}, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0xffff}], 0x8) sendto$inet(r6, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000380)="20575acaa7e9cda209a50900c0a48e93eaae3f622f6fcaf68502e536d9bd040b6e49a49db1def24e96ab925988d5b02a41ef51b3fe13f7d642afc05c32e6f6df96242f8a53efd2f6f58ef92ae39c0f37b8d2f133e5b4865216aedad5770e31bebe956e47e184e3c8da3d093f3c2adcfcbdb50c75f68f88481e187b648ae02eca5540d2fcc48f833dc5ee36b6916b62", 0x13, 0x1, 0x0, 0x0) 19.696754287s ago: executing program 6 (id=327): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='disable=', 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c004014}, 0x4) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x7, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0xffff}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1555555555555667}) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x0, 0x9, 0xcc, {0xcc, 0x2, "7b894bd8fce847d237cb6fecb46b0fc4994a80d5f90ffb086d962f097873c9ef43949995317c9704dd2b9c56a7796c442baf3aadd95991fd9c728dc3b09afb8026a3423c38873e6e3a2cb3af08a48749228ef01f3b391f7c493b3bd4d44c54e5ef0dd5ecc035cf55057505f15dd406ec942e622c5fff51a9af7eaa87d42aa068ec1d1fd6bad72ee13a4578d65ff2c1fa74f687db5106938a376730ec960a5756b32bdece6c7b6622a9244902b10f2c06ec8f744b0215226be17b5c39403993131937fe8cc2c61343b951"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x0, 0x18, 0xe1, "597e9e1f840c678d3a39f914130137dd1fe37e2fad42c1b4dfa9e7d4e3911f996d733a11dec94ead1cd2dbb335ceba1db77e305676826fa836fcee6561eac77463ff5f8b056ec6ffa736dc70b8bf2698ce2d01c7579522492f2ff0f88ca3f6d2996e51dfa0d3559b71e73ab6e3d81f25ad928ec3f36b25a64132778bc2a27ecadc608406b18f3afc00fbbc80605e2f627d2a4a64eacc65de5b9e28c581c5dc3fc0f06f82faed92880f6fbad9c5ee390336e1dfe942eaf2687e5876757512ea54c912c7d5ac5835db1fd4c69cbb86f66562452f312bf8a51e313aaa3207c5f38511"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x81, 0x3, "01a9da"}, &(0x7f0000000780)={0x20, 0x82, 0x2, 'E3'}, &(0x7f00000007c0)={0x20, 0x83, 0x2, "dd9e"}, &(0x7f0000000800)={0x20, 0x84, 0x4, "5a2b368b"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "d46e66"}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0x30, 0x4a, {0x4a, 0x3, "f4ae78597bf1f4e49b74241aed988da9b947669261fcf79243ccc7e26a09aa381c8876ca1bd3bcfdbc8e014addc5c29c041623f38ea9ddf57efabf90f29a6858707c4fd74d631b69"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x6, "56ccd392"}, @global=@item_012={0x1, 0x1, 0x0, "1f"}, @global=@item_012={0x1, 0x1, 0x4, "12"}, @main=@item_4={0x3, 0x0, 0xb, "ccc750c4"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x3, "7b5f44f2"}, @main=@item_012={0x1, 0x0, 0xc, "d7"}, @local, @local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xe, 0x1, {0x22, 0x9ca}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x18, 0x8, "23b673e33b6f9e7a"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x1, 0x10, "25a853317e196f055062e651fea5fe94"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r3}], 0x1, &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r4, &(0x7f0000000140)='0', 0x1) syz_usb_control_io$uac3(r2, 0x0, 0x0) 18.825001878s ago: executing program 2 (id=329): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x69, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x3, "", [{{0x9, 0x4, 0x0, 0x75, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0xfffe, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x15, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 17.627544148s ago: executing program 6 (id=344): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x5, &(0x7f0000000140)=[{0x3, 0x40, 0x1, 0x1f}, {0xa7, 0x8, 0x6, 0x7}, {0x7, 0xfe, 0x1, 0x5}, {0x2, 0x56, 0x23, 0x4}, {0x5, 0x4, 0x7, 0x2}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x34ff, 0xa, 0x1, 0xfe, 0x5c}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4000017}, 0x48010) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) fchown(r1, 0x0, 0xee01) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x7, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x6, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x101, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x7, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = inotify_init() ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) lsm_set_self_attr(0x0, &(0x7f0000000280)={0x6a, 0x98ca, 0xa6, 0x86, "a983ac77a52a01ed8c122ae814ce45b749f20d967aa470886f8b363dead843f7c41f2435bb25addc753dddc791bd95072bee780502479bd2517bc8cd78381e1ae8f3fc900e4b157a444014839cbb64b022f7c787e336ff3c0369342bd202f61d877daf62ab643145d313d08a101b6348a77737df7056baafe6cb6c182c22154be7f11c90ca1b"}, 0xa6, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 17.527618119s ago: executing program 4 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="2c0000001b0005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RELDISP(r1, 0x5605) 17.427117839s ago: executing program 4 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.299566916s ago: executing program 6 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x401}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x10) write(r3, &(0x7f0000000400)="43c0", 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000380)={r2, &(0x7f0000000080)=',\\\x00', 0x400000, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x9]}, {0x55, 0xc, 0x7, 0x2ea0}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x12, 0x2, 0xf, '\x00', 0x6}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.294719257s ago: executing program 4 (id=348): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0xca013fbdd5f8710d, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.204491526s ago: executing program 4 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) fchmodat(r0, &(0x7f0000000240)='./dev/sda1\x00', 0x40) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) pwritev(0xffffffffffffffff, &(0x7f0000001300)=[{0x0}, {&(0x7f00000001c0)="f23860d17faf7fda13769a9dc9678851914eeb741bb9ca9d59d583fc532473b9a98eaf95977ce8aceadb9ffc527899c83f4f2ec115afc2c3cdb2df6158d6de4bbe000000", 0x44}], 0x2, 0x8, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000b00)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x4, 0x1f8, 0xfffffffffffffffe, 0xffffffdfefffff17, 0x3, 0x0, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.124787752s ago: executing program 6 (id=350): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0x4, 0x2, 0x3766689785d1053e) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) 17.061097616s ago: executing program 4 (id=351): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x20, 0x38, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002240)=""/4112, 0x1010}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000001980)=""/285, 0x11d}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f0000000080)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x4008000) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00030400000004", @ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0) 16.872257945s ago: executing program 3 (id=355): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 16.747480491s ago: executing program 3 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.684281584s ago: executing program 3 (id=357): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0xca013fbdd5f8710d, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.628529156s ago: executing program 3 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x401}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x10) write(r3, &(0x7f0000000400)="43c0", 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000380)={r2, &(0x7f0000000080)=',\\\x00', 0x400000, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x9]}, {0x55, 0xc, 0x7, 0x2ea0}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x12, 0x2, 0xf, '\x00', 0x6}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.549632223s ago: executing program 3 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000180)={r2, &(0x7f0000000080)='/dev/kvm\x00', 0x8800, &(0x7f00000000c0)={@_ha_fsid={[0x800, 0x1]}, {0x9, 0x5, 0x9, 0xffffffff}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0xde4}) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x0) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7) capset(0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000040), 0x4) r10 = openat(0xffffffffffffff9c, 0x0, 0x101940, 0x100) ioctl$FIBMAP(r10, 0x1, 0x0) r11 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r11) add_key$keyring(0x0, 0x0, 0x0, 0x0, r12) r13 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r12) keyctl$KEYCTL_MOVE(0x1e, r4, r8, r13, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xb30400, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYRESDEC=r3, @ANYRESHEX=r17]) splice(r16, 0x0, r15, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r15, 0x0, 0xe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00'], 0x2c}], 0x1, 0x0, 0x0, 0x40855}, 0x800) 15.779827603s ago: executing program 2 (id=360): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x405d6, 0x8001, 0x8a, 0x7a, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x0, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf5, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffffa, 0x192, 0x1000, 0xfffffffe, 0x5], [0x2, 0xfffffffa, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x6, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x3, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x0, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x200005, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x7, 0x140f1, 0x5396, 0x3, 0xa, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x9, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x0, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xc20, 0x50, 0x0, 0x0, 0x7}}, 0x50) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x407, 0xee, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x9, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0xb04}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15.612251227s ago: executing program 3 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00'], 0x2c}], 0x1, 0x0, 0x0, 0x40855}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 11.853850301s ago: executing program 6 (id=362): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)=r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x5, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 11.653093532s ago: executing program 4 (id=363): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x2000000) 10.764097928s ago: executing program 2 (id=364): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r2, r2, 0x0, 0x2000009) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xb) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f0000000580)) r9 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r1, @ANYRESDEC=r4], 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="003105007d002118031c9ed51cd39462e5c6546c49b99ad3bdd89085a1a7c4ce3f4c354f4a4b0979"], 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="20090400000060012000"], &(0x7f0000000380)={0x40, 0x7, 0x2, 0x10}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000580)={0x40, 0xb, 0x2, "d832"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f00000003c0)={0x40, 0x19, 0x2, '}W'}, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000002c0)=0x100, 0x4) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 0s ago: executing program 35 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00'], 0x2c}], 0x1, 0x0, 0x0, 0x40855}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 29.373902][ T36] audit: type=1400 audit(1790406854.320:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.377567][ T287] cgroup: Unknown subsys name 'net' [ 29.396600][ T36] audit: type=1400 audit(1790406854.320:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.424356][ T36] audit: type=1400 audit(1790406854.350:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.424883][ T287] cgroup: Unknown subsys name 'devices' [ 29.548164][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.553827][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.649306][ T36] audit: type=1400 audit(1790406854.600:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.672697][ T36] audit: type=1400 audit(1790406854.600:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.697520][ T36] audit: type=1400 audit(1790406854.600:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.728000][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.737037][ T36] audit: type=1400 audit(1790406854.690:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.762624][ T36] audit: type=1400 audit(1790406854.690:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.774639][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.788850][ T36] audit: type=1400 audit(1790406854.720:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.822652][ T36] audit: type=1400 audit(1790406854.720:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.127047][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.134619][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.141934][ T295] bridge_slave_0: entered allmulticast mode [ 31.148704][ T295] bridge_slave_0: entered promiscuous mode [ 31.157263][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.164348][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.171656][ T295] bridge_slave_1: entered allmulticast mode [ 31.178097][ T295] bridge_slave_1: entered promiscuous mode [ 31.236282][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.243373][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.250554][ T297] bridge_slave_0: entered allmulticast mode [ 31.256989][ T297] bridge_slave_0: entered promiscuous mode [ 31.263686][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.270835][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.278043][ T297] bridge_slave_1: entered allmulticast mode [ 31.284513][ T297] bridge_slave_1: entered promiscuous mode [ 31.304856][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.312022][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.319179][ T294] bridge_slave_0: entered allmulticast mode [ 31.325577][ T294] bridge_slave_0: entered promiscuous mode [ 31.335307][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.342697][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.349846][ T294] bridge_slave_1: entered allmulticast mode [ 31.356324][ T294] bridge_slave_1: entered promiscuous mode [ 31.377529][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.384622][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.391813][ T296] bridge_slave_0: entered allmulticast mode [ 31.398145][ T296] bridge_slave_0: entered promiscuous mode [ 31.413807][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.421072][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.428490][ T296] bridge_slave_1: entered allmulticast mode [ 31.434850][ T296] bridge_slave_1: entered promiscuous mode [ 31.585985][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.593085][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.600430][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.607493][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.616919][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.624025][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.631472][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.638554][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.646936][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.654042][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.661536][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.668610][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.677580][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.684651][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.691989][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.699143][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.755299][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.762863][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.770789][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.778571][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.786133][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.793893][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.801358][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.808787][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.825959][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.833155][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.845066][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.852290][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.866034][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.873202][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.890570][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.897681][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.917608][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.924735][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.932794][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.939972][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.961692][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.968786][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.976718][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.983769][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.019024][ T297] veth0_vlan: entered promiscuous mode [ 32.042714][ T294] veth0_vlan: entered promiscuous mode [ 32.051788][ T296] veth0_vlan: entered promiscuous mode [ 32.061106][ T297] veth1_macvtap: entered promiscuous mode [ 32.081126][ T295] veth0_vlan: entered promiscuous mode [ 32.089938][ T294] veth1_macvtap: entered promiscuous mode [ 32.104321][ T296] veth1_macvtap: entered promiscuous mode [ 32.143576][ T295] veth1_macvtap: entered promiscuous mode [ 32.167760][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.253423][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.309520][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.499180][ T341] ======================================================= [ 32.499180][ T341] WARNING: The mand mount option has been deprecated and [ 32.499180][ T341] and is ignored by this kernel. Remove the mand [ 32.499180][ T341] option from the mount to silence this warning. [ 32.499180][ T341] ======================================================= [ 32.564680][ T347] usbcore.quirks: string doesn't fit in 127 chars. [ 32.573366][ T347] incfs: ino conflict with backing FS 2 [ 32.857853][ T53] bridge_slave_1: left allmulticast mode [ 32.863700][ T53] bridge_slave_1: left promiscuous mode [ 32.869684][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.877821][ T53] bridge_slave_0: left allmulticast mode [ 32.883659][ T53] bridge_slave_0: left promiscuous mode [ 32.889741][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.956575][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.998642][ T53] veth1_macvtap: left promiscuous mode [ 33.004297][ T53] veth0_vlan: left promiscuous mode [ 33.098655][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.105909][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.113021][ T355] bridge_slave_0: entered allmulticast mode [ 33.119912][ T355] bridge_slave_0: entered promiscuous mode [ 33.120209][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.131141][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.138553][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 33.146749][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.148709][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.159688][ T355] bridge_slave_1: entered allmulticast mode [ 33.169923][ T10] usb 3-1: config 0 descriptor?? [ 33.172071][ T355] bridge_slave_1: entered promiscuous mode [ 33.254577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.261726][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.271888][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.279011][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.310551][ T355] veth0_vlan: entered promiscuous mode [ 33.323924][ T355] veth1_macvtap: entered promiscuous mode [ 33.487984][ T53] bridge_slave_1: left allmulticast mode [ 33.493721][ T53] bridge_slave_1: left promiscuous mode [ 33.505756][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.516121][ T53] bridge_slave_0: left allmulticast mode [ 33.521922][ T53] bridge_slave_0: left promiscuous mode [ 33.528106][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.586597][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.604769][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.616463][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.623422][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.630595][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.639309][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.646588][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.653561][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.660731][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.668036][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.675058][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.682347][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.689610][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.699709][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.707048][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.714206][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.724239][ T53] veth1_macvtap: left promiscuous mode [ 33.729920][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.730351][ T53] veth0_vlan: left promiscuous mode [ 33.742527][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.755444][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.764064][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.771103][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.778136][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.785056][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.792206][ T10] wacom 0003:056A:0069.0001: unknown main item tag 0x0 [ 33.802167][ T10] wacom 0003:056A:0069.0001: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 33.814738][ T10] wacom 0003:056A:0069.0001: hidraw0: USB HID vff.fe Device [HID 056a:0069] on usb-dummy_hcd.2-1/input0 [ 33.835916][ T10] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0069.0001/input/input4 [ 33.866975][ T10] usb 3-1: USB disconnect, device number 2 [ 33.885753][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 33.933063][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.940227][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.947473][ T362] bridge_slave_0: entered allmulticast mode [ 33.953825][ T362] bridge_slave_0: entered promiscuous mode [ 33.960501][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.968166][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.975802][ T362] bridge_slave_1: entered allmulticast mode [ 33.982377][ T362] bridge_slave_1: entered promiscuous mode [ 34.033585][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.040695][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.048107][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.055257][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.067458][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 34.077251][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 34.086148][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 34.099472][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 34.109403][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.116944][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.117156][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.125323][ T9] usb 5-1: Product: syz [ 34.136607][ T9] usb 5-1: Manufacturer: syz [ 34.141361][ T9] usb 5-1: SerialNumber: syz [ 34.149227][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.156341][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.169356][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.176477][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.207638][ T362] veth0_vlan: entered promiscuous mode [ 34.221492][ T362] veth1_macvtap: entered promiscuous mode [ 34.356403][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.365468][ T326] Bluetooth: hci0: command 0x1003 tx timeout [ 34.365474][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.419263][ T373] kvm: user requested TSC rate below hardware speed [ 34.434341][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 34.434361][ T36] audit: type=1400 audit(1790406859.380:151): avc: denied { setopt } for pid=376 comm="syz.5.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.460777][ T36] audit: type=1400 audit(1790406859.380:152): avc: denied { mounton } for pid=376 comm="syz.5.21" path="/proc/7/cgroup" dev="proc" ino=4511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 34.492222][ T36] audit: type=1400 audit(1790406859.390:153): avc: denied { remount } for pid=376 comm="syz.5.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 34.512377][ T36] audit: type=1400 audit(1790406859.440:154): avc: denied { create } for pid=376 comm="syz.5.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 34.555519][ T9] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 34.564040][ T9] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 34.587510][ T36] audit: type=1400 audit(1790406859.540:155): avc: denied { bind } for pid=379 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.661343][ T391] usbcore.quirks: string doesn't fit in 127 chars. [ 34.670224][ T391] incfs: ino conflict with backing FS 2 [ 34.788417][ T398] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 34.796757][ T398] netlink: 17 bytes leftover after parsing attributes in process `syz.2.26'. [ 34.813183][ T36] audit: type=1400 audit(1790406859.760:156): avc: denied { create } for pid=394 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.835527][ T36] audit: type=1400 audit(1790406859.780:157): avc: denied { write } for pid=394 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.864216][ T36] audit: type=1400 audit(1790406859.810:158): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.909591][ T36] audit: type=1400 audit(1790406859.860:159): avc: denied { mount } for pid=404 comm="syz.2.28" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 34.934831][ T36] audit: type=1400 audit(1790406859.860:160): avc: denied { search } for pid=404 comm="syz.2.28" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.961611][ T9] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 34.986767][ T9] usb 5-1: USB disconnect, device number 2 [ 35.004516][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.135507][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.247719][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.286978][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.293732][ T46] usb 4-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 35.302942][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.311938][ T46] usb 4-1: config 0 descriptor?? [ 35.385450][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.619296][ T13] bridge_slave_1: left allmulticast mode [ 35.629114][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.638465][ T13] bridge_slave_1: left promiscuous mode [ 35.644189][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.656404][ T13] bridge_slave_0: left allmulticast mode [ 35.662266][ T13] bridge_slave_0: left promiscuous mode [ 35.668653][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.722004][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.732767][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.740161][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.749125][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.757926][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.764863][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.774877][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.782372][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.789665][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.797404][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.804394][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.812079][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.822204][ T13] veth1_macvtap: left promiscuous mode [ 35.827798][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.835040][ T13] veth0_vlan: left promiscuous mode [ 35.840780][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.855520][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.872988][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.882963][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.891365][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.899373][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.907043][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.914232][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.923617][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.931591][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.939130][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.946910][ T46] wacom 0003:056A:0069.0002: unknown main item tag 0x0 [ 35.954136][ T46] wacom 0003:056A:0069.0002: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 35.970077][ T46] wacom 0003:056A:0069.0002: hidraw0: USB HID vff.fe Device [HID 056a:0069] on usb-dummy_hcd.3-1/input0 [ 35.999423][ T46] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0069.0002/input/input7 [ 36.021463][ T46] usb 4-1: USB disconnect, device number 2 [ 36.046466][ T311] usb 3-1: device descriptor read/64, error -71 [ 36.093937][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.101047][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.108200][ T425] bridge_slave_0: entered allmulticast mode [ 36.114599][ T425] bridge_slave_0: entered promiscuous mode [ 36.121491][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.128924][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.136929][ T425] bridge_slave_1: entered allmulticast mode [ 36.143257][ T425] bridge_slave_1: entered promiscuous mode [ 36.194114][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.201311][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.208766][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.215844][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.238750][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.246639][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.257844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.265015][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.272791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.279867][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.286566][ T311] usb 3-1: device descriptor read/64, error -71 [ 36.313834][ T425] veth0_vlan: entered promiscuous mode [ 36.325923][ T425] veth1_macvtap: entered promiscuous mode [ 36.388541][ T436] FAULT_INJECTION: forcing a failure. [ 36.388541][ T436] name failslab, interval 1, probability 0, space 0, times 1 [ 36.396121][ T311] usb usb3-port1: attempt power cycle [ 36.402270][ T436] CPU: 0 UID: 0 PID: 436 Comm: syz.6.40 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 36.402371][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.402421][ T436] Call Trace: [ 36.402442][ T436] [ 36.402465][ T436] __dump_stack+0x21/0x30 [ 36.402571][ T436] dump_stack_lvl+0x140/0x1c0 [ 36.402655][ T436] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.402776][ T436] dump_stack+0x19/0x20 [ 36.402872][ T436] should_fail_ex+0x3c2/0x510 [ 36.402955][ T436] should_failslab+0xac/0x100 [ 36.403039][ T436] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 36.403103][ T436] ? get_random_u32+0x2ef/0x4e0 [ 36.403165][ T436] ? __d_alloc+0x42/0x8c0 [ 36.403227][ T436] __d_alloc+0x42/0x8c0 [ 36.403292][ T436] d_alloc_pseudo+0x23/0xc0 [ 36.403347][ T436] alloc_file_pseudo+0xde/0x1f0 [ 36.403431][ T436] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 36.403528][ T436] ? shmem_get_inode+0x81c/0xc10 [ 36.403609][ T436] ? __kasan_check_write+0x18/0x20 [ 36.403673][ T436] ? clear_nlink+0x8e/0xf0 [ 36.403747][ T436] __shmem_file_setup+0x242/0x2c0 [ 36.403823][ T436] shmem_file_setup+0x33/0x40 [ 36.403889][ T436] __se_sys_memfd_create+0x3bb/0x8f0 [ 36.403964][ T436] ? __x64_sys_memfd_create+0x80/0x80 [ 36.404037][ T436] ? __kasan_check_write+0x18/0x20 [ 36.404116][ T436] __x64_sys_memfd_create+0x5f/0x80 [ 36.404207][ T436] x64_sys_call+0x29f8/0x2ee0 [ 36.404268][ T436] do_syscall_64+0x57/0xf0 [ 36.404330][ T436] ? clear_bhb_loop+0x50/0xa0 [ 36.404414][ T436] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.404475][ T436] RIP: 0033:0x7f6225f9e159 [ 36.404535][ T436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.404586][ T436] RSP: 002b:00007f6226f1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 36.404662][ T436] RAX: ffffffffffffffda RBX: 00007f6226225fa0 RCX: 00007f6225f9e159 [ 36.404712][ T436] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 36.404747][ T436] RBP: 00007f622603506b R08: 0000000000000000 R09: 0000000000000000 [ 36.404787][ T436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.404820][ T436] R13: 00007f6226226038 R14: 00007f6226225fa0 R15: 00007ffd7b663cb8 [ 36.404873][ T436] [ 36.975441][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.016681][ T311] usb 3-1: device descriptor read/8, error -71 [ 37.146519][ T311] usb 3-1: device descriptor read/8, error -71 [ 37.175426][ T430] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 37.336851][ T430] usb 7-1: unable to get BOS descriptor or descriptor too short [ 37.355148][ T430] usb 7-1: not running at top speed; connect to a high speed hub [ 37.373893][ T430] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 37.385415][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.407560][ T311] usb 3-1: device descriptor read/8, error -71 [ 37.414271][ T430] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 37.423491][ T430] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.431785][ T430] usb 7-1: Product: syz [ 37.436121][ T430] usb 7-1: Manufacturer: syz [ 37.440824][ T430] usb 7-1: SerialNumber: syz [ 37.536590][ T311] usb 3-1: device descriptor read/8, error -71 [ 37.648621][ T311] usb usb3-port1: unable to enumerate USB device [ 37.677537][ T430] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.878923][ T430] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 37.888697][ T430] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 38.046161][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.208354][ T311] usb 5-1: config 0 interface 0 has no altsetting 0 [ 38.215565][ T311] usb 5-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 38.224819][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.235741][ T311] usb 5-1: config 0 descriptor?? [ 38.280895][ T430] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 38.301749][ T430] usb 7-1: USB disconnect, device number 2 [ 38.326217][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.648656][ T311] usbhid 5-1:0.0: can't add hid device: -71 [ 38.658195][ T311] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 38.669514][ T311] usb 5-1: USB disconnect, device number 3 [ 39.129484][ T508] can0: slcan on ttynull. [ 39.145505][ T311] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 39.155450][ T430] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.171356][ T507] can0 (unregistered): slcan off ttynull. [ 39.258728][ T525] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.72'. [ 39.299862][ T311] usb 7-1: Using ep0 maxpacket: 32 [ 39.307721][ T311] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.329094][ T430] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 39.338469][ T311] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 39.349843][ T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.358250][ T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 39.368180][ T311] usb 7-1: Product: syz [ 39.375211][ T430] usb 4-1: Product: syz [ 39.379634][ T311] usb 7-1: Manufacturer: syz [ 39.391883][ T430] usb 4-1: Manufacturer: syz [ 39.396624][ T311] usb 7-1: SerialNumber: syz [ 39.415965][ T311] usb 7-1: config 0 descriptor?? [ 39.423596][ T311] smsc75xx v1.0.0 [ 39.428223][ T311] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 39.438674][ T311] smsc75xx 7-1:0.0: probe with driver smsc75xx failed with error -22 [ 39.484217][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 39.484238][ T36] audit: type=1400 audit(1790406864.430:218): avc: denied { read write } for pid=540 comm="syz.2.74" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.520387][ T36] audit: type=1400 audit(1790406864.430:219): avc: denied { open } for pid=540 comm="syz.2.74" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.565440][ T36] audit: type=1400 audit(1790406864.470:220): avc: denied { ioctl } for pid=540 comm="syz.2.74" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.594231][ T36] audit: type=1400 audit(1790406864.470:221): avc: denied { create } for pid=540 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.613844][ T36] audit: type=1400 audit(1790406864.470:222): avc: denied { search } for pid=542 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.630940][ T311] usb 7-1: USB disconnect, device number 3 [ 39.656289][ T430] usb 4-1: USB disconnect, device number 3 [ 39.680208][ T36] audit: type=1400 audit(1790406864.470:223): avc: denied { setopt } for pid=540 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.725432][ T36] audit: type=1400 audit(1790406864.550:224): avc: denied { write } for pid=491 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.754334][ T36] audit: type=1400 audit(1790406864.550:225): avc: denied { nlmsg_write } for pid=491 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.774960][ T36] audit: type=1400 audit(1790406864.550:226): avc: denied { relabelfrom } for pid=491 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 39.794791][ T36] audit: type=1400 audit(1790406864.550:227): avc: denied { relabelto } for pid=491 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 39.859036][ T564] syzkaller1: entered promiscuous mode [ 39.864662][ T564] syzkaller1: entered allmulticast mode [ 39.985543][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.137495][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 40.146603][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 40.156015][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.165336][ T9] usb 5-1: config 0 descriptor?? [ 40.575128][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 40.592988][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 40.604789][ T9] usb 5-1: USB disconnect, device number 4 [ 40.965512][ T430] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.116649][ T430] usb 4-1: unable to get BOS descriptor set [ 41.123441][ T430] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.135511][ T430] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.144541][ T430] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.159587][ T430] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.171126][ T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.179429][ T430] usb 4-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ [ 41.204253][ T430] usb 4-1: Manufacturer: ᥢ꺠瘿蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 41.220581][ T430] usb 4-1: SerialNumber: syz [ 41.436462][ T430] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 41.443534][ T430] cdc_ncm 4-1:1.0: bind() failure [ 41.454192][ T430] usb 4-1: USB disconnect, device number 4 [ 42.047319][ T672] SELinux: ebitmap: truncated map [ 42.072489][ T672] SELinux: failed to load policy [ 42.094814][ T683] overlayfs: empty lowerdir [ 42.142663][ T687] overlayfs: failed to resolve '$': -2 [ 42.147462][ T690] capability: warning: `syz.2.110' uses 32-bit capabilities (legacy support in use) [ 42.375673][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.527341][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.544213][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 42.553444][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.565340][ T9] usb 5-1: config 0 descriptor?? [ 42.795465][ T430] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.945417][ T430] usb 4-1: Using ep0 maxpacket: 32 [ 42.951820][ T430] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 42.960044][ T430] usb 4-1: config 0 has no interface number 0 [ 42.966362][ T430] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 42.981206][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 42.988953][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 42.997049][ T430] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.005823][ T9] usb 5-1: USB disconnect, device number 5 [ 43.015778][ T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.023936][ T430] usb 4-1: Product: syz [ 43.035425][ T430] usb 4-1: Manufacturer: syz [ 43.040105][ T430] usb 4-1: SerialNumber: syz [ 43.045966][ T430] usb 4-1: config 0 descriptor?? [ 43.052504][ T430] smsc95xx v2.0.0 [ 43.056230][ T430] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 43.066613][ T430] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 43.252173][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.261753][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.269983][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.279269][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.288235][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.297562][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.307448][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.317663][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.331227][ T46] usb 4-1: USB disconnect, device number 5 [ 43.455565][ T430] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 43.554391][ T733] FAULT_INJECTION: forcing a failure. [ 43.554391][ T733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.568748][ T733] CPU: 0 UID: 0 PID: 733 Comm: syz.4.126 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 43.568787][ T733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.568800][ T733] Call Trace: [ 43.568808][ T733] [ 43.568816][ T733] __dump_stack+0x21/0x30 [ 43.568853][ T733] dump_stack_lvl+0x140/0x1c0 [ 43.568885][ T733] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.568919][ T733] dump_stack+0x19/0x20 [ 43.568949][ T733] should_fail_ex+0x3c2/0x510 [ 43.568978][ T733] should_fail+0xf/0x20 [ 43.569003][ T733] should_fail_usercopy+0x1e/0x30 [ 43.569033][ T733] strncpy_from_user+0x29/0x280 [ 43.569062][ T733] getname_flags+0x106/0x6b0 [ 43.569090][ T733] user_path_at+0x2b/0x60 [ 43.569119][ T733] path_setxattr+0x3ad/0x5a0 [ 43.569147][ T733] ? simple_xattrs_free+0x180/0x180 [ 43.569179][ T733] ? __cfi_ksys_write+0x10/0x10 [ 43.569205][ T733] __x64_sys_setxattr+0xc9/0xe0 [ 43.569228][ T733] x64_sys_call+0x2d94/0x2ee0 [ 43.569250][ T733] do_syscall_64+0x57/0xf0 [ 43.569272][ T733] ? clear_bhb_loop+0x50/0xa0 [ 43.569301][ T733] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.569330][ T733] RIP: 0033:0x7f1779d9e159 [ 43.569349][ T733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.569367][ T733] RSP: 002b:00007f177ac31028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 43.569391][ T733] RAX: ffffffffffffffda RBX: 00007f177a025fa0 RCX: 00007f1779d9e159 [ 43.569408][ T733] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000180 [ 43.569424][ T733] RBP: 00007f177ac31090 R08: 0000000000000000 R09: 0000000000000000 [ 43.569439][ T733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.569452][ T733] R13: 00007f177a026038 R14: 00007f177a025fa0 R15: 00007ffeb999a198 [ 43.569478][ T733] [ 43.625647][ T430] usb 7-1: device descriptor read/64, error -71 [ 44.005489][ T430] usb 7-1: device descriptor read/64, error -71 [ 44.245604][ T430] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 44.385472][ T430] usb 7-1: device descriptor read/64, error -71 [ 44.505442][ T311] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 44.635452][ T430] usb 7-1: device descriptor read/64, error -71 [ 44.656713][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.667164][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 44.680333][ T311] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 44.690026][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.698440][ T311] usb 3-1: Product: syz [ 44.702947][ T311] usb 3-1: Manufacturer: syz [ 44.707921][ T311] usb 3-1: SerialNumber: syz [ 44.715526][ T759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.745647][ T430] usb usb7-port1: attempt power cycle [ 44.929497][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 44.941665][ T311] usb 3-1: USB disconnect, device number 7 [ 45.085786][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.089199][ T430] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 45.116560][ T430] usb 7-1: device descriptor read/8, error -71 [ 45.236887][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 45.243720][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 45.252988][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.257259][ T430] usb 7-1: device descriptor read/8, error -71 [ 45.271999][ T10] usb 5-1: config 0 descriptor?? [ 45.398103][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 45.398122][ T36] audit: type=1400 audit(1790406870.350:253): avc: denied { unlink } for pid=774 comm="syz.3.142" name="#1" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.426392][ T36] audit: type=1400 audit(1790406870.350:254): avc: denied { mount } for pid=774 comm="syz.3.142" name="/" dev="overlay" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.448552][ T36] audit: type=1400 audit(1790406870.380:255): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.515462][ T430] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 45.536500][ T430] usb 7-1: device descriptor read/8, error -71 [ 45.676558][ T430] usb 7-1: device descriptor read/8, error -71 [ 45.685195][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 45.694090][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 45.703462][ T10] usb 5-1: USB disconnect, device number 6 [ 45.786313][ T430] usb usb7-port1: unable to enumerate USB device [ 45.798576][ T790] FAULT_INJECTION: forcing a failure. [ 45.798576][ T790] name failslab, interval 1, probability 0, space 0, times 0 [ 45.811289][ T790] CPU: 1 UID: 0 PID: 790 Comm: syz.3.147 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 45.811322][ T790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.811337][ T790] Call Trace: [ 45.811350][ T790] [ 45.811381][ T790] __dump_stack+0x21/0x30 [ 45.811409][ T790] dump_stack_lvl+0x140/0x1c0 [ 45.811437][ T790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.811459][ T790] ? kernel_text_address+0xa9/0xe0 [ 45.811481][ T790] ? unwind_get_return_address+0x51/0x90 [ 45.811502][ T790] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 45.811522][ T790] dump_stack+0x19/0x20 [ 45.811542][ T790] should_fail_ex+0x3c2/0x510 [ 45.811563][ T790] should_failslab+0xac/0x100 [ 45.811583][ T790] kmem_cache_alloc_noprof+0x42/0x410 [ 45.811600][ T790] ? __kasan_check_write+0x18/0x20 [ 45.811616][ T790] ? inet_bind_bucket_create+0x40/0x320 [ 45.811631][ T790] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 45.811647][ T790] inet_bind_bucket_create+0x40/0x320 [ 45.811663][ T790] inet_csk_get_port+0xaf2/0x15e0 [ 45.811681][ T790] ? lock_sock_nested+0x216/0x2a0 [ 45.811698][ T790] ? __cfi_lock_sock_nested+0x10/0x10 [ 45.811713][ T790] ? selinux_capable+0x38/0x50 [ 45.811737][ T790] __inet6_bind+0x8e4/0xec0 [ 45.811753][ T790] inet6_bind_sk+0x13f/0x200 [ 45.811766][ T790] ? __check_object_size+0xdc/0x870 [ 45.811783][ T790] ? __cfi_inet6_bind_sk+0x10/0x10 [ 45.811798][ T790] inet6_bind+0x4a/0x60 [ 45.811810][ T790] __sys_bind+0x309/0x410 [ 45.811829][ T790] ? __cfi___sys_bind+0x10/0x10 [ 45.811849][ T790] ? __kasan_check_read+0x15/0x20 [ 45.811868][ T790] __x64_sys_bind+0x7e/0x90 [ 45.811886][ T790] x64_sys_call+0x1ffd/0x2ee0 [ 45.811901][ T790] do_syscall_64+0x57/0xf0 [ 45.811915][ T790] ? clear_bhb_loop+0x50/0xa0 [ 45.811936][ T790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.811955][ T790] RIP: 0033:0x7fe62a39e159 [ 45.811969][ T790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.811982][ T790] RSP: 002b:00007fe62b314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 45.812025][ T790] RAX: ffffffffffffffda RBX: 00007fe62a625fa0 RCX: 00007fe62a39e159 [ 45.812043][ T790] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 45.812061][ T790] RBP: 00007fe62b314090 R08: 0000000000000000 R09: 0000000000000000 [ 45.812071][ T790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.812080][ T790] R13: 00007fe62a626038 R14: 00007fe62a625fa0 R15: 00007ffe54a3b5f8 [ 45.812094][ T790] [ 46.228582][ T802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.152'. [ 46.256186][ T806] tipc: Started in network mode [ 46.261132][ T806] tipc: Node identity ac14140f, cluster identity 4711 [ 46.268484][ T806] tipc: New replicast peer: 255.255.255.255 [ 46.274866][ T806] tipc: Enabled bearer , priority 10 [ 46.294771][ T36] audit: type=1400 audit(1790406871.240:256): avc: denied { map } for pid=803 comm="syz.3.153" path="socket:[9900]" dev="sockfs" ino=9900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.319916][ T36] audit: type=1400 audit(1790406871.240:257): avc: denied { read } for pid=803 comm="syz.3.153" path="socket:[9900]" dev="sockfs" ino=9900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.343894][ T36] audit: type=1400 audit(1790406871.270:258): avc: denied { connect } for pid=803 comm="syz.3.153" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.364226][ T36] audit: type=1400 audit(1790406871.270:259): avc: denied { write } for pid=803 comm="syz.3.153" laddr=fe80::13 lport=60 faddr=fe80::d fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.437737][ T36] audit: type=1400 audit(1790406871.390:260): avc: denied { create } for pid=814 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.466274][ T36] audit: type=1400 audit(1790406871.420:261): avc: denied { connect } for pid=814 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.512867][ T820] FAULT_INJECTION: forcing a failure. [ 46.512867][ T820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 46.539933][ T820] CPU: 0 UID: 0 PID: 820 Comm: syz.4.158 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 46.539969][ T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.539984][ T820] Call Trace: [ 46.539991][ T820] [ 46.539999][ T820] __dump_stack+0x21/0x30 [ 46.540037][ T820] dump_stack_lvl+0x140/0x1c0 [ 46.540097][ T820] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.540129][ T820] ? avc_has_perm_noaudit+0x289/0x360 [ 46.540160][ T820] dump_stack+0x19/0x20 [ 46.540190][ T820] should_fail_ex+0x3c2/0x510 [ 46.540218][ T820] should_fail_alloc_page+0xec/0x110 [ 46.540249][ T820] __alloc_pages_noprof+0x1c0/0x7e0 [ 46.540284][ T820] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.540317][ T820] ? selinux_file_open+0x46c/0x630 [ 46.540346][ T820] __pud_alloc+0xb0/0x8f0 [ 46.540375][ T820] ? __cfi___pud_alloc+0x10/0x10 [ 46.540402][ T820] ? is_bpf_text_address+0x17b/0x1a0 [ 46.540439][ T820] handle_mm_fault+0x18ea/0x1ba0 [ 46.540470][ T820] ? __cfi_handle_mm_fault+0x10/0x10 [ 46.540498][ T820] ? find_vma+0xd3/0x120 [ 46.540523][ T820] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 46.540551][ T820] ? lock_mm_and_find_vma+0xb8/0x390 [ 46.540579][ T820] do_user_addr_fault+0x4ee/0x1230 [ 46.540604][ T820] exc_page_fault+0x58/0xc0 [ 46.540634][ T820] asm_exc_page_fault+0x2b/0x30 [ 46.540661][ T820] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 46.540694][ T820] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 46.540711][ T820] RSP: 0018:ffffc9000af97d70 EFLAGS: 00050216 [ 46.540731][ T820] RAX: 00007ffffffff001 RBX: 0000000000000014 RCX: 0000000000000014 [ 46.540747][ T820] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000af97de0 [ 46.540761][ T820] RBP: ffffc9000af97d90 R08: ffffc9000af97df3 R09: 1ffff920015f2fbe [ 46.540778][ T820] R10: dffffc0000000000 R11: fffff520015f2fbf R12: 0000000000000014 [ 46.540793][ T820] R13: 1ffff920015f2fb8 R14: ffffc9000af97de0 R15: 0000200000000000 [ 46.540814][ T820] ? _copy_from_user+0x6d/0xa0 [ 46.540862][ T820] __sys_connect+0x15b/0x460 [ 46.540892][ T820] ? __cfi___sys_connect+0x10/0x10 [ 46.540922][ T820] ? __kasan_check_read+0x15/0x20 [ 46.540946][ T820] __x64_sys_connect+0x7e/0x90 [ 46.540974][ T820] x64_sys_call+0x1c2f/0x2ee0 [ 46.540996][ T820] do_syscall_64+0x57/0xf0 [ 46.541018][ T820] ? clear_bhb_loop+0x50/0xa0 [ 46.541048][ T820] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.541074][ T820] RIP: 0033:0x7f1779d9e159 [ 46.541092][ T820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.541110][ T820] RSP: 002b:00007f177ac31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 46.541132][ T820] RAX: ffffffffffffffda RBX: 00007f177a025fa0 RCX: 00007f1779d9e159 [ 46.541149][ T820] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000004 [ 46.541163][ T820] RBP: 00007f177ac31090 R08: 0000000000000000 R09: 0000000000000000 [ 46.541178][ T820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.541192][ T820] R13: 00007f177a026038 R14: 00007f177a025fa0 R15: 00007ffeb999a198 [ 46.541211][ T820] [ 46.644709][ T36] audit: type=1400 audit(1790406871.550:262): avc: denied { create } for pid=827 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.935425][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 47.098658][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.108812][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 47.125189][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 47.134791][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.143211][ T9] usb 5-1: Product: syz [ 47.147445][ T9] usb 5-1: Manufacturer: syz [ 47.152085][ T9] usb 5-1: SerialNumber: syz [ 47.185498][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.336920][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.343688][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 47.353062][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.361197][ T856] tipc: Node number set to 2886997007 [ 47.369080][ T10] usb 3-1: config 0 descriptor?? [ 47.377785][ T9] usb 5-1: unit 4 not found! [ 47.386976][ T9] usb 5-1: USB disconnect, device number 7 [ 47.401206][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.465450][ T313] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 47.615462][ T313] usb 7-1: Using ep0 maxpacket: 32 [ 47.621722][ T313] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.629936][ T313] usb 7-1: config 0 has no interface number 0 [ 47.637643][ T313] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.647360][ T313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.655462][ T313] usb 7-1: Product: syz [ 47.659670][ T313] usb 7-1: Manufacturer: syz [ 47.664325][ T313] usb 7-1: SerialNumber: syz [ 47.669944][ T313] usb 7-1: config 0 descriptor?? [ 47.675972][ T313] smsc95xx v2.0.0 [ 47.777613][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 47.783705][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 47.792622][ T10] usb 3-1: USB disconnect, device number 8 [ 47.927579][ T862] netlink: 188 bytes leftover after parsing attributes in process `syz.3.176'. [ 48.175424][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 48.325467][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 48.331833][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.342049][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.352591][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.361749][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.369793][ T9] usb 4-1: Product: syz [ 48.374249][ T9] usb 4-1: Manufacturer: syz [ 48.378934][ T9] usb 4-1: SerialNumber: syz [ 48.535450][ T312] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 48.588394][ T9] usb 4-1: 0:2 : does not exist [ 48.596623][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 48.610365][ T9] usb 4-1: USB disconnect, device number 6 [ 48.622437][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.686833][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.695164][ T312] usb 3-1: not running at top speed; connect to a high speed hub [ 48.703810][ T312] usb 3-1: config 192 has an invalid interface number: 60 but max is 0 [ 48.712397][ T312] usb 3-1: config 192 has no interface number 0 [ 48.718916][ T312] usb 3-1: config 192 interface 60 has no altsetting 0 [ 48.727457][ T312] usb 3-1: New USB device found, idVendor=5050, idProduct=0100, bcdDevice=ca.41 [ 48.736615][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.744734][ T312] usb 3-1: Product: syz [ 48.748967][ T312] usb 3-1: Manufacturer: syz [ 48.753597][ T312] usb 3-1: SerialNumber: syz [ 48.895642][ T313] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 48.906550][ T313] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 48.915884][ T313] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 48.927241][ T313] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 48.936699][ T313] usb 7-1: USB disconnect, device number 8 [ 48.969891][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.978519][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.224070][ T312] ftdi_sio 3-1:192.60: FTDI USB Serial Device converter detected [ 49.246699][ T312] ftdi_sio ttyUSB0: unknown device type: 0xca41 [ 49.258827][ T312] usb 3-1: USB disconnect, device number 9 [ 49.274311][ T312] ftdi_sio 3-1:192.60: device disconnected [ 49.534902][ T912] process 'syz.2.194' launched '/dev/fd/6' with NULL argv: empty string added [ 49.550097][ T912] bridge0: port 3(veth0_to_bridge) entered blocking state [ 49.563084][ T912] bridge0: port 3(veth0_to_bridge) entered disabled state [ 49.574959][ T912] veth0_to_bridge: entered allmulticast mode [ 49.588915][ T912] veth0_to_bridge: entered promiscuous mode [ 49.596658][ T912] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 49.612613][ T912] bridge0: port 3(veth0_to_bridge) entered blocking state [ 49.619824][ T912] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 49.676540][ T917] capability: warning: `syz.2.196' uses deprecated v2 capabilities in a way that may be insecure [ 49.703900][ T919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 49.705791][ T312] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 49.719916][ T919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.882271][ T312] usb 7-1: config 0 interface 0 has no altsetting 0 [ 49.895443][ T312] usb 7-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 49.907178][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.925699][ T312] usb 7-1: config 0 descriptor?? [ 50.152397][ T945] FAULT_INJECTION: forcing a failure. [ 50.152397][ T945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.165723][ T945] CPU: 0 UID: 0 PID: 945 Comm: syz.3.207 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 50.165761][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.165774][ T945] Call Trace: [ 50.165781][ T945] [ 50.165790][ T945] __dump_stack+0x21/0x30 [ 50.165826][ T945] dump_stack_lvl+0x140/0x1c0 [ 50.165857][ T945] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.165890][ T945] ? check_stack_object+0x138/0x150 [ 50.165916][ T945] dump_stack+0x19/0x20 [ 50.165945][ T945] should_fail_ex+0x3c2/0x510 [ 50.165973][ T945] should_fail+0xf/0x20 [ 50.165998][ T945] should_fail_usercopy+0x1e/0x30 [ 50.166028][ T945] _copy_to_user+0x24/0xa0 [ 50.166061][ T945] simple_read_from_buffer+0xed/0x160 [ 50.166094][ T945] proc_fail_nth_read+0x1aa/0x220 [ 50.166127][ T945] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 50.166161][ T945] ? bpf_lsm_file_permission+0xd/0x20 [ 50.166191][ T945] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 50.166223][ T945] vfs_read+0x288/0xc70 [ 50.166248][ T945] ? __cfi_vfs_read+0x10/0x10 [ 50.166270][ T945] ? __kasan_check_write+0x18/0x20 [ 50.166293][ T945] ? mutex_lock+0x97/0x1d0 [ 50.166320][ T945] ? __cfi_mutex_lock+0x10/0x10 [ 50.166349][ T945] ksys_read+0x145/0x260 [ 50.166373][ T945] ? __cfi_ksys_read+0x10/0x10 [ 50.166397][ T945] ? __kasan_check_read+0x15/0x20 [ 50.166419][ T945] __x64_sys_read+0x7f/0x90 [ 50.166443][ T945] x64_sys_call+0x2638/0x2ee0 [ 50.166464][ T945] do_syscall_64+0x57/0xf0 [ 50.166496][ T945] ? clear_bhb_loop+0x50/0xa0 [ 50.166539][ T945] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.166582][ T945] RIP: 0033:0x7fe62a35e98e [ 50.166601][ T945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.166619][ T945] RSP: 002b:00007fe62b313fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.166641][ T945] RAX: ffffffffffffffda RBX: 00007fe62b3146c0 RCX: 00007fe62a35e98e [ 50.166657][ T945] RDX: 000000000000000f RSI: 00007fe62b3140a0 RDI: 0000000000000006 [ 50.166671][ T945] RBP: 00007fe62b314090 R08: 0000000000000000 R09: 0000000000000000 [ 50.166683][ T945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.166694][ T945] R13: 00007fe62a626038 R14: 00007fe62a625fa0 R15: 00007ffe54a3b5f8 [ 50.166710][ T945] [ 50.411927][ T312] usbhid 7-1:0.0: can't add hid device: -71 [ 50.417991][ T312] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 50.428213][ T312] usb 7-1: USB disconnect, device number 9 [ 50.487875][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 50.487893][ T36] audit: type=1400 audit(1790406875.440:276): avc: denied { audit_write } for pid=950 comm="syz.3.210" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.514969][ T36] audit: type=1400 audit(1790406875.440:277): avc: denied { nlmsg_write } for pid=950 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 50.535523][ T36] audit: type=1400 audit(1790406875.440:278): avc: denied { create } for pid=950 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 50.551635][ T487] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.565292][ T952] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 50.604785][ T36] audit: type=1400 audit(1790406875.550:279): avc: denied { append } for pid=956 comm="syz.4.212" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.727021][ T487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.738280][ T487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.748151][ T487] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.762837][ T487] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.772028][ T487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.780966][ T487] usb 3-1: config 0 descriptor?? [ 51.006112][ T36] audit: type=1400 audit(1790406875.950:280): avc: denied { mount } for pid=965 comm="syz.6.215" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.039700][ T36] audit: type=1400 audit(1790406875.990:281): avc: denied { unmount } for pid=425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.203561][ T487] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 51.229495][ T487] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.255410][ T36] audit: type=1400 audit(1790406876.200:282): avc: denied { bind } for pid=976 comm="syz.6.218" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.291892][ T36] audit: type=1400 audit(1790406876.200:283): avc: denied { name_bind } for pid=976 comm="syz.6.218" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 51.312971][ T36] audit: type=1400 audit(1790406876.200:284): avc: denied { node_bind } for pid=976 comm="syz.6.218" saddr=fe80::aa src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 51.397908][ T36] audit: type=1326 audit(1790406876.350:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=980 comm="syz.6.220" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6225f9e159 code=0x7ffc0000 [ 51.575613][ T987] Zero length message leads to an empty skb [ 51.762527][ T998] x_tables: duplicate underflow at hook 1 [ 51.870473][ T1007] futex_wake_op: syz.4.230 tries to shift op by 144; fix this program [ 52.018588][ T46] usb 3-1: USB disconnect, device number 10 [ 52.063382][ T1019] Mass Storage Function, version: 2009/09/11 [ 52.069587][ T1019] LUN: removable file: (no medium) [ 53.179149][ T1056] FAULT_INJECTION: forcing a failure. [ 53.179149][ T1056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.192497][ T1056] CPU: 0 UID: 0 PID: 1056 Comm: syz.3.249 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 53.192534][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.192549][ T1056] Call Trace: [ 53.192561][ T1056] [ 53.192568][ T1056] __dump_stack+0x21/0x30 [ 53.192595][ T1056] dump_stack_lvl+0x140/0x1c0 [ 53.192617][ T1056] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.192647][ T1056] ? check_stack_object+0x81/0x150 [ 53.192665][ T1056] dump_stack+0x19/0x20 [ 53.192686][ T1056] should_fail_ex+0x3c2/0x510 [ 53.192706][ T1056] should_fail+0xf/0x20 [ 53.192723][ T1056] should_fail_usercopy+0x1e/0x30 [ 53.192743][ T1056] _copy_from_user+0x20/0xa0 [ 53.192766][ T1056] memdup_user+0x81/0x170 [ 53.192780][ T1056] ? strndup_user+0x40/0xd0 [ 53.192794][ T1056] strndup_user+0x6c/0xd0 [ 53.192808][ T1056] __se_sys_fsconfig+0x555/0x870 [ 53.192824][ T1056] ? __x64_sys_fsconfig+0xf0/0xf0 [ 53.192837][ T1056] ? ksys_write+0x1f3/0x260 [ 53.192854][ T1056] ? __cfi_ksys_write+0x10/0x10 [ 53.192872][ T1056] __x64_sys_fsconfig+0xc3/0xf0 [ 53.192887][ T1056] x64_sys_call+0x11bb/0x2ee0 [ 53.192901][ T1056] do_syscall_64+0x57/0xf0 [ 53.192916][ T1056] ? clear_bhb_loop+0x50/0xa0 [ 53.192937][ T1056] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.192956][ T1056] RIP: 0033:0x7fe62a39e159 [ 53.192969][ T1056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.192982][ T1056] RSP: 002b:00007fe62b314028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 53.192999][ T1056] RAX: ffffffffffffffda RBX: 00007fe62a625fa0 RCX: 00007fe62a39e159 [ 53.193011][ T1056] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 53.193021][ T1056] RBP: 00007fe62b314090 R08: 0000000000000000 R09: 0000000000000000 [ 53.193031][ T1056] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 53.193041][ T1056] R13: 00007fe62a626038 R14: 00007fe62a625fa0 R15: 00007ffe54a3b5f8 [ 53.193054][ T1056] [ 53.995428][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 54.155427][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 54.166242][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.174310][ T46] usb 4-1: config 0 has no interface number 0 [ 54.180853][ T46] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.192008][ T46] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.202194][ T46] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 54.215427][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.229969][ T46] usb 4-1: config 0 descriptor?? [ 54.635209][ T487] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 54.844860][ T46] uclogic 0003:28BD:0094.0005: failed retrieving string descriptor #100: -71 [ 54.854749][ T46] uclogic 0003:28BD:0094.0005: failed retrieving pen parameters: -71 [ 54.863268][ T46] uclogic 0003:28BD:0094.0005: pen probing failed: -71 [ 54.870840][ T46] uclogic 0003:28BD:0094.0005: failed probing parameters: -71 [ 54.878794][ T46] uclogic 0003:28BD:0094.0005: probe with driver uclogic failed with error -71 [ 54.889463][ T46] usb 4-1: USB disconnect, device number 7 [ 55.295469][ T487] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 55.446582][ T487] usb 7-1: config 0 interface 0 has no altsetting 0 [ 55.457285][ T487] usb 7-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 55.468904][ T487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.489147][ T487] usb 7-1: config 0 descriptor?? [ 55.537041][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 55.537066][ T36] audit: type=1400 audit(1790406880.490:327): avc: denied { create } for pid=1145 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.592843][ T1148] FAULT_INJECTION: forcing a failure. [ 55.592843][ T1148] name failslab, interval 1, probability 0, space 0, times 0 [ 55.606319][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: syz.4.285 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 55.606352][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.606373][ T1148] Call Trace: [ 55.606380][ T1148] [ 55.606389][ T1148] __dump_stack+0x21/0x30 [ 55.606427][ T1148] dump_stack_lvl+0x140/0x1c0 [ 55.606466][ T1148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.606507][ T1148] dump_stack+0x19/0x20 [ 55.606547][ T1148] should_fail_ex+0x3c2/0x510 [ 55.606583][ T1148] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 55.606615][ T1148] should_failslab+0xac/0x100 [ 55.606654][ T1148] __kmalloc_noprof+0x69/0x510 [ 55.606684][ T1148] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 55.606718][ T1148] ? cred_has_capability+0x296/0x3a0 [ 55.606750][ T1148] genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 55.606794][ T1148] genl_family_rcv_msg_doit+0xe3/0x360 [ 55.606829][ T1148] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 55.606861][ T1148] ? selinux_capable+0x38/0x50 [ 55.606898][ T1148] ? bpf_lsm_capable+0xd/0x20 [ 55.606949][ T1148] ? ns_capable+0x90/0xf0 [ 55.606974][ T1148] genl_rcv_msg+0x60f/0x7b0 [ 55.607006][ T1148] ? __cfi_genl_rcv_msg+0x10/0x10 [ 55.607033][ T1148] ? __cfi_nfc_genl_dev_down+0x10/0x10 [ 55.607068][ T1148] netlink_rcv_skb+0x24a/0x4e0 [ 55.607112][ T1148] ? __cfi_genl_rcv_msg+0x10/0x10 [ 55.607140][ T1148] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 55.607183][ T1148] ? down_read+0x7f/0xe0 [ 55.607220][ T1148] ? __cfi_down_read+0x10/0x10 [ 55.607256][ T1148] genl_rcv+0x2c/0x40 [ 55.607285][ T1148] netlink_unicast+0x8bf/0xa70 [ 55.607320][ T1148] netlink_sendmsg+0x7d1/0xad0 [ 55.607363][ T1148] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.607405][ T1148] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 55.607436][ T1148] ? security_socket_sendmsg+0x3d/0x100 [ 55.607478][ T1148] ____sys_sendmsg+0x99e/0xa00 [ 55.607520][ T1148] ? __import_iovec+0x5b9/0x7d0 [ 55.607546][ T1148] ? __sys_sendmsg_sock+0x50/0x50 [ 55.607589][ T1148] ? import_iovec+0x80/0xb0 [ 55.607614][ T1148] ___sys_sendmsg+0x2a6/0x370 [ 55.607657][ T1148] ? __sys_sendmsg+0x260/0x260 [ 55.607697][ T1148] ? proc_fail_nth_write+0x184/0x220 [ 55.607740][ T1148] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 55.607797][ T1148] ? __fget_files+0x2bc/0x330 [ 55.607834][ T1148] __x64_sys_sendmsg+0x1be/0x2a0 [ 55.607880][ T1148] ? fput+0x1a4/0x230 [ 55.607916][ T1148] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 55.607955][ T1148] ? ksys_write+0x1f3/0x260 [ 55.607989][ T1148] ? __kasan_check_read+0x15/0x20 [ 55.608018][ T1148] x64_sys_call+0x2a4c/0x2ee0 [ 55.608048][ T1148] do_syscall_64+0x57/0xf0 [ 55.608073][ T1148] ? clear_bhb_loop+0x50/0xa0 [ 55.608110][ T1148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.608143][ T1148] RIP: 0033:0x7f1779d9e159 [ 55.608169][ T1148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.608190][ T1148] RSP: 002b:00007f177ac31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.608222][ T1148] RAX: ffffffffffffffda RBX: 00007f177a025fa0 RCX: 00007f1779d9e159 [ 55.608242][ T1148] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 55.608262][ T1148] RBP: 00007f177ac31090 R08: 0000000000000000 R09: 0000000000000000 [ 55.608282][ T1148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.608298][ T1148] R13: 00007f177a026038 R14: 00007f177a025fa0 R15: 00007ffeb999a198 [ 55.608320][ T1148] [ 56.115465][ T1165] ./dev/sda1: Can't lookup blockdev [ 56.168511][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.175600][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.182525][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.189680][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.196916][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.203865][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.210818][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.217795][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.224712][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.231702][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.238656][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.245762][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.252690][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.259761][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.266711][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.273632][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.280636][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.287644][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.294564][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.301692][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.308627][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.315569][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.322482][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.329434][ T487] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 56.336640][ T487] wacom 0003:056A:0069.0006: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 56.348363][ T487] wacom 0003:056A:0069.0006: hidraw0: USB HID vff.fe Device [HID 056a:0069] on usb-dummy_hcd.6-1/input0 [ 56.349463][ T1168] FAULT_INJECTION: forcing a failure. [ 56.349463][ T1168] name fail_futex, interval 1, probability 0, space 0, times 1 [ 56.367636][ T487] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0069.0006/input/input14 [ 56.388299][ T1168] CPU: 0 UID: 0 PID: 1168 Comm: syz.2.293 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 56.388334][ T1168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.388349][ T1168] Call Trace: [ 56.388357][ T1168] [ 56.388366][ T1168] __dump_stack+0x21/0x30 [ 56.388406][ T1168] dump_stack_lvl+0x140/0x1c0 [ 56.388437][ T1168] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.388471][ T1168] ? __schedule+0x149e/0x20b0 [ 56.388497][ T1168] dump_stack+0x19/0x20 [ 56.388527][ T1168] should_fail_ex+0x3c2/0x510 [ 56.388556][ T1168] should_fail+0xf/0x20 [ 56.388582][ T1168] get_futex_key+0x22c/0x940 [ 56.388613][ T1168] ? __cfi_get_futex_key+0x10/0x10 [ 56.388643][ T1168] ? kasan_save_track+0x4f/0x80 [ 56.388671][ T1168] futex_wake+0x150/0x950 [ 56.388691][ T1168] ? preempt_schedule_irq+0xab/0x110 [ 56.388728][ T1168] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 56.388755][ T1168] ? __cfi_futex_wake+0x10/0x10 [ 56.388776][ T1168] ? perf_lock_task_context+0x398/0x450 [ 56.388803][ T1168] ? __perf_event_period+0x490/0x490 [ 56.388830][ T1168] do_futex+0x37d/0x510 [ 56.388862][ T1168] ? __kasan_check_read+0x15/0x20 [ 56.388885][ T1168] ? __cfi_do_futex+0x10/0x10 [ 56.388917][ T1168] ? __kasan_check_write+0x18/0x20 [ 56.388941][ T1168] mm_release+0x15f/0x300 [ 56.388969][ T1168] ? exit_mm_release+0x50/0x50 [ 56.388996][ T1168] ? futex_exit_release+0x11d/0x1f0 [ 56.389028][ T1168] exit_mm_release+0x29/0x50 [ 56.389059][ T1168] do_exit+0x832/0x2850 [ 56.389090][ T1168] ? futex_wake+0x666/0x950 [ 56.389111][ T1168] ? __cfi_do_exit+0x10/0x10 [ 56.389140][ T1168] ? futex_wait+0x2b8/0x7c0 [ 56.389162][ T1168] ? __cfi_futex_wait+0x10/0x10 [ 56.389184][ T1168] ? __kasan_check_write+0x18/0x20 [ 56.389208][ T1168] ? _raw_spin_lock_irq+0x93/0x120 [ 56.389231][ T1168] do_group_exit+0x21f/0x2f0 [ 56.389261][ T1168] ? __kasan_check_write+0x18/0x20 [ 56.389285][ T1168] ? recalc_sigpending+0x16c/0x1d0 [ 56.389311][ T1168] get_signal+0x134c/0x1490 [ 56.389345][ T1168] arch_do_signal_or_restart+0xbc/0x700 [ 56.389368][ T1168] ? fput+0x1a4/0x230 [ 56.389398][ T1168] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.389425][ T1168] syscall_exit_to_user_mode+0x57/0xb0 [ 56.389457][ T1168] do_syscall_64+0x63/0xf0 [ 56.389479][ T1168] ? clear_bhb_loop+0x50/0xa0 [ 56.389508][ T1168] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.389536][ T1168] RIP: 0033:0x7f5dfeb9e159 [ 56.389557][ T1168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.389577][ T1168] RSP: 002b:00007f5dff9d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.389602][ T1168] RAX: fffffffffffffe00 RBX: 00007f5dfee26098 RCX: 00007f5dfeb9e159 [ 56.389620][ T1168] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5dfee26098 [ 56.389635][ T1168] RBP: 00007f5dfee26090 R08: 0000000000000000 R09: 0000000000000000 [ 56.389650][ T1168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.389664][ T1168] R13: 00007f5dfee26128 R14: 00007ffc60a1f730 R15: 00007ffc60a1f818 [ 56.389684][ T1168] [ 56.454114][ T487] usb 7-1: USB disconnect, device number 10 [ 56.985410][ T313] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 57.146910][ T313] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 57.156433][ T313] usb 4-1: config 0 has no interface number 0 [ 57.163881][ T313] usb 4-1: config 0 interface 41 has no altsetting 0 [ 57.175971][ T313] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 57.185648][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.194403][ T313] usb 4-1: Product: syz [ 57.200110][ T313] usb 4-1: Manufacturer: syz [ 57.204985][ T313] usb 4-1: SerialNumber: syz [ 57.215756][ T313] usb 4-1: config 0 descriptor?? [ 57.572558][ T36] audit: type=1400 audit(1790406882.520:328): avc: denied { write } for pid=1207 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.825926][ T313] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 57.837055][ T487] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 57.845440][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 57.909536][ T36] audit: type=1400 audit(1790406882.860:329): avc: denied { mounton } for pid=1211 comm="syz.6.309" path="/48/file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 58.006695][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 58.013432][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 58.017529][ T487] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.023112][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.032041][ T487] usb 5-1: config 129 has an invalid interface number: 80 but max is 0 [ 58.041439][ T9] usb 3-1: config 0 descriptor?? [ 58.053520][ T487] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 58.061891][ T487] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 58.078730][ T487] usb 5-1: config 129 has no interface number 0 [ 58.085260][ T487] usb 5-1: config 129 has no interface number 1 [ 58.091842][ T487] usb 5-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 58.105135][ T487] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 58.116092][ T487] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 58.129353][ T487] usb 5-1: config 129 interface 80 has no altsetting 0 [ 58.136297][ T487] usb 5-1: config 129 interface 5 has no altsetting 0 [ 58.145786][ T487] usb 5-1: string descriptor 0 read error: -22 [ 58.152056][ T487] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 58.161234][ T487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.175150][ T487] usb 5-1: MIDIStreaming interface descriptor not found [ 58.238332][ T36] audit: type=1400 audit(1790406883.190:330): avc: denied { execute } for pid=1230 comm="syz.6.317" path="/memory.swap.current" dev="ramfs" ino=15792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 58.467780][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.486467][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.503707][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.514108][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.528631][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.544032][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.553822][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.566268][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.579000][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.590387][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.611440][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.624275][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.636336][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.648592][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.659587][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.676081][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.683212][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.694326][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.701630][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.711509][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.718517][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.726857][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.734727][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.741806][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.752975][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.762124][ T487] usb 5-1: USB disconnect, device number 8 [ 58.772560][ T9] wacom 0003:056A:0069.0007: unknown main item tag 0x0 [ 58.788639][ T9] wacom 0003:056A:0069.0007: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 58.809452][ T9] wacom 0003:056A:0069.0007: hidraw0: USB HID vff.fe Device [HID 056a:0069] on usb-dummy_hcd.2-1/input0 [ 58.836163][ T9] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0069.0007/input/input17 [ 58.874837][ T9] usb 3-1: USB disconnect, device number 11 [ 59.204741][ T1242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.319'. [ 59.291348][ T36] audit: type=1400 audit(1790406884.240:331): avc: denied { accept } for pid=1243 comm="syz.6.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.348955][ T1248] program syz.4.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.350787][ T36] audit: type=1400 audit(1790406884.300:332): avc: denied { append } for pid=1247 comm="syz.4.322" name="sda1" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.405414][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.405424][ T326] Bluetooth: hci0: command 0x1003 tx timeout [ 59.455554][ T487] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 59.605495][ T487] usb 3-1: Using ep0 maxpacket: 32 [ 59.621289][ T487] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 59.631610][ T487] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 59.641058][ T487] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 59.653723][ T487] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 59.663019][ T487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.671218][ T487] usb 3-1: Product: syz [ 59.675531][ T487] usb 3-1: Manufacturer: syz [ 59.680186][ T487] usb 3-1: SerialNumber: syz [ 59.690505][ T487] usb 3-1: Fast Track Pro config OK [ 59.765438][ T46] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 59.903341][ T487] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 59.913039][ T487] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 59.921443][ T487] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 59.929127][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 59.936423][ T487] usb 3-1: 0:2 : does not exist [ 59.941599][ T487] usb 3-1: unit 5 not found! [ 59.946983][ T46] usb 7-1: unable to get BOS descriptor or descriptor too short [ 59.954866][ T487] usb 3-1: unit 6 not found! [ 59.960849][ T46] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 59.983491][ T487] usb 3-1: USB disconnect, device number 12 [ 59.992877][ T46] usb 7-1: string descriptor 0 read error: -22 [ 60.005261][ T46] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 60.033555][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.576530][ T36] audit: type=1400 audit(1790406885.530:333): avc: denied { create } for pid=1270 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.610886][ T1273] FAULT_INJECTION: forcing a failure. [ 60.610886][ T1273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.624282][ T1273] CPU: 0 UID: 0 PID: 1273 Comm: syz.4.332 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 60.624326][ T1273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.624341][ T1273] Call Trace: [ 60.624348][ T1273] [ 60.624357][ T1273] __dump_stack+0x21/0x30 [ 60.624411][ T1273] dump_stack_lvl+0x140/0x1c0 [ 60.624446][ T1273] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.624482][ T1273] dump_stack+0x19/0x20 [ 60.624514][ T1273] should_fail_ex+0x3c2/0x510 [ 60.624542][ T1273] should_fail_alloc_page+0xec/0x110 [ 60.624598][ T1273] __alloc_pages_noprof+0x1c0/0x7e0 [ 60.624636][ T1273] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.624676][ T1273] ? filemap_get_entry+0x41b/0x490 [ 60.624699][ T1273] __folio_alloc_noprof+0x14/0x80 [ 60.624724][ T1273] __filemap_get_folio+0x798/0xe80 [ 60.624766][ T1273] ? file_init_path+0x434/0x590 [ 60.624799][ T1273] ? __cfi___filemap_get_folio+0x10/0x10 [ 60.624837][ T1273] ? alloc_anon_inode+0x1a5/0x340 [ 60.624863][ T1273] aio_setup_ring+0x38e/0xc60 [ 60.624904][ T1273] ? free_ioctx_reqs+0x170/0x170 [ 60.624936][ T1273] ioctx_alloc+0x337/0x840 [ 60.624971][ T1273] __se_sys_io_setup+0x6f/0x230 [ 60.624992][ T1273] __x64_sys_io_setup+0x5f/0x80 [ 60.625011][ T1273] x64_sys_call+0x26a4/0x2ee0 [ 60.625027][ T1273] do_syscall_64+0x57/0xf0 [ 60.625063][ T1273] ? clear_bhb_loop+0x50/0xa0 [ 60.625093][ T1273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.625126][ T1273] RIP: 0033:0x7f1779d9e159 [ 60.625141][ T1273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.625155][ T1273] RSP: 002b:00007f177ac31028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 60.625173][ T1273] RAX: ffffffffffffffda RBX: 00007f177a025fa0 RCX: 00007f1779d9e159 [ 60.625203][ T1273] RDX: 0000000000000000 RSI: 0000200000002500 RDI: 0000000000000076 [ 60.625219][ T1273] RBP: 00007f1779e3506b R08: 0000000000000000 R09: 0000000000000000 [ 60.625234][ T1273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.625247][ T1273] R13: 00007f177a026038 R14: 00007f177a025fa0 R15: 00007ffeb999a198 [ 60.625273][ T1273] [ 60.858484][ T313] usb 4-1: USB disconnect, device number 8 [ 60.905434][ T487] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 61.058564][ T487] usb 3-1: config 0 interface 0 has no altsetting 0 [ 61.065916][ T46] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 61.068358][ T1291] FAULT_INJECTION: forcing a failure. [ 61.068358][ T1291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.077079][ T487] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 61.088385][ T1291] CPU: 0 UID: 0 PID: 1291 Comm: syz.3.338 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 61.088425][ T1291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.088439][ T1291] Call Trace: [ 61.088447][ T1291] [ 61.088456][ T1291] __dump_stack+0x21/0x30 [ 61.088493][ T1291] dump_stack_lvl+0x140/0x1c0 [ 61.088525][ T1291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.088557][ T1291] ? check_stack_object+0x138/0x150 [ 61.088583][ T1291] dump_stack+0x19/0x20 [ 61.088613][ T1291] should_fail_ex+0x3c2/0x510 [ 61.088642][ T1291] should_fail+0xf/0x20 [ 61.088668][ T1291] should_fail_usercopy+0x1e/0x30 [ 61.088698][ T1291] _copy_to_user+0x24/0xa0 [ 61.088731][ T1291] simple_read_from_buffer+0xed/0x160 [ 61.088771][ T1291] proc_fail_nth_read+0x1aa/0x220 [ 61.088804][ T1291] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 61.088838][ T1291] ? selinux_socket_setsockopt+0x324/0x3d0 [ 61.088881][ T1291] ? bpf_lsm_file_permission+0xd/0x20 [ 61.088912][ T1291] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 61.088956][ T1291] vfs_read+0x288/0xc70 [ 61.088981][ T1291] ? __cfi_vfs_read+0x10/0x10 [ 61.089004][ T1291] ? __kasan_check_write+0x18/0x20 [ 61.089027][ T1291] ? mutex_lock+0x97/0x1d0 [ 61.089103][ T1291] ? __cfi_mutex_lock+0x10/0x10 [ 61.089213][ T1291] ksys_read+0x145/0x260 [ 61.089285][ T1291] ? __fget_files+0x2bc/0x330 [ 61.089366][ T1291] ? __cfi_ksys_read+0x10/0x10 [ 61.089433][ T1291] ? __kasan_check_write+0x18/0x20 [ 61.089497][ T1291] ? __kasan_check_read+0x15/0x20 [ 61.089554][ T1291] __x64_sys_read+0x7f/0x90 [ 61.089618][ T1291] x64_sys_call+0x2638/0x2ee0 [ 61.089681][ T1291] do_syscall_64+0x57/0xf0 [ 61.089736][ T1291] ? clear_bhb_loop+0x50/0xa0 [ 61.089811][ T1291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.089893][ T1291] RIP: 0033:0x7fe62a35e98e [ 61.089945][ T1291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.089993][ T1291] RSP: 002b:00007fe62b313fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.090057][ T1291] RAX: ffffffffffffffda RBX: 00007fe62b3146c0 RCX: 00007fe62a35e98e [ 61.090108][ T1291] RDX: 000000000000000f RSI: 00007fe62b3140a0 RDI: 0000000000000004 [ 61.090142][ T1291] RBP: 00007fe62b314090 R08: 0000000000000000 R09: 0000000000000000 [ 61.090184][ T1291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.090225][ T1291] R13: 00007fe62a626038 R14: 00007fe62a625fa0 R15: 00007ffe54a3b5f8 [ 61.090279][ T1291] [ 61.098449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.098601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.098784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.098908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.098993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.099122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.099206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.099325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.099426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.099543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.718844][ T1315] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 61.828014][ T46] usb 7-1: USB disconnect, device number 11 [ 62.280717][ T36] audit: type=1400 audit(1790406887.230:334): avc: denied { write } for pid=1338 comm="syz.3.354" name="fib_triestat" dev="proc" ino=4026532345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.306505][ T487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.331005][ T487] usb 3-1: config 0 descriptor?? [ 62.477245][ T313] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.599286][ T46] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 62.637371][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.648511][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.658792][ T313] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 62.668371][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.682698][ T313] usb 5-1: config 0 descriptor?? [ 62.729422][ T36] audit: type=1400 audit(1790406887.680:335): avc: denied { setopt } for pid=1351 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.799154][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 62.823598][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 62.855047][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 62.877366][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 62.884313][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 62.906599][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.937346][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 62.944387][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 62.955015][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.977614][ T46] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 63.007537][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.014539][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.057342][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.177705][ T46] usb 7-1: config 0 descriptor?? [ 63.195432][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.202501][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.235810][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.255688][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.263286][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.293317][ T313] usb 5-1: language id specifier not provided by device, defaulting to English [ 63.296694][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.335705][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.342663][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.376304][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.396763][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.416667][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.446938][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.466680][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.505441][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.512418][ T487] wacom 0003:056A:0069.0008: unknown main item tag 0x0 [ 63.561445][ T487] wacom 0003:056A:0069.0008: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 63.624051][ T1360] FAULT_INJECTION: forcing a failure. [ 63.624051][ T1360] name failslab, interval 1, probability 0, space 0, times 0 [ 63.636950][ T1360] CPU: 0 UID: 0 PID: 1360 Comm: syz.3.361 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 63.636985][ T1360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.637000][ T1360] Call Trace: [ 63.637007][ T1360] [ 63.637017][ T1360] __dump_stack+0x21/0x30 [ 63.637060][ T1360] dump_stack_lvl+0x140/0x1c0 [ 63.637093][ T1360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.637126][ T1360] ? __kasan_check_write+0x18/0x20 [ 63.637150][ T1360] ? copy_mm+0x307/0x1da0 [ 63.637189][ T1360] dump_stack+0x19/0x20 [ 63.637220][ T1360] should_fail_ex+0x3c2/0x510 [ 63.637249][ T1360] should_failslab+0xac/0x100 [ 63.637286][ T1360] kmem_cache_alloc_noprof+0x42/0x410 [ 63.637310][ T1360] ? alloc_pid+0xa5/0xb80 [ 63.637336][ T1360] ? __asan_memcpy+0x5a/0x80 [ 63.637359][ T1360] alloc_pid+0xa5/0xb80 [ 63.637387][ T1360] copy_process+0x1467/0x3350 [ 63.637419][ T1360] ? __cfi_copy_process+0x10/0x10 [ 63.637536][ T1360] ? __kmalloc_cache_noprof+0x23c/0x470 [ 63.637563][ T1360] ? __kasan_check_write+0x18/0x20 [ 63.637593][ T1360] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 63.637621][ T1360] vhost_task_create+0x1f7/0x3f0 [ 63.637646][ T1360] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 63.637676][ T1360] ? __cfi_vhost_task_create+0x10/0x10 [ 63.637702][ T1360] ? __cfi_vhost_task_fn+0x10/0x10 [ 63.637726][ T1360] ? __kasan_check_write+0x18/0x20 [ 63.637750][ T1360] ? mutex_lock+0x97/0x1d0 [ 63.637778][ T1360] ? __cfi_mutex_lock+0x10/0x10 [ 63.637804][ T1360] ? kernel_text_address+0xa9/0xe0 [ 63.637837][ T1360] kvm_mmu_post_init_vm+0x161/0x300 [ 63.637872][ T1360] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 63.637905][ T1360] ? _parse_integer_limit+0x195/0x1e0 [ 63.637933][ T1360] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 63.637966][ T1360] ? kstrtoull+0x13b/0x1e0 [ 63.637999][ T1360] ? kstrtouint+0x78/0xf0 [ 63.638024][ T1360] ? ioctl_has_perm+0x1bc/0x500 [ 63.638049][ T1360] ? __asan_memcpy+0x5a/0x80 [ 63.638072][ T1360] ? ioctl_has_perm+0x408/0x500 [ 63.638096][ T1360] ? has_cap_mac_admin+0xd0/0xd0 [ 63.638126][ T1360] ? __kasan_check_write+0x18/0x20 [ 63.638149][ T1360] ? mutex_lock_killable+0x97/0x1d0 [ 63.638179][ T1360] ? __cfi_mutex_lock_killable+0x10/0x10 [ 63.638208][ T1360] ? proc_fail_nth_write+0x184/0x220 [ 63.638244][ T1360] kvm_vcpu_ioctl+0xa43/0x1000 [ 63.638263][ T1360] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 63.638284][ T1360] ? __cfi_vfs_write+0x10/0x10 [ 63.638309][ T1360] ? __kasan_check_write+0x18/0x20 [ 63.638332][ T1360] ? mutex_unlock+0x90/0x240 [ 63.638380][ T1360] ? __cfi_mutex_unlock+0x10/0x10 [ 63.638408][ T1360] ? __fget_files+0x2bc/0x330 [ 63.638443][ T1360] ? bpf_lsm_file_ioctl+0xd/0x20 [ 63.638473][ T1360] ? security_file_ioctl+0x3e/0x110 [ 63.638497][ T1360] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 63.638519][ T1360] __se_sys_ioctl+0x123/0x1b0 [ 63.638549][ T1360] __x64_sys_ioctl+0x7f/0xa0 [ 63.638577][ T1360] x64_sys_call+0x1878/0x2ee0 [ 63.638604][ T1360] do_syscall_64+0x57/0xf0 [ 63.638631][ T1360] ? clear_bhb_loop+0x50/0xa0 [ 63.638661][ T1360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.638689][ T1360] RIP: 0033:0x7fe62a39e159 [ 63.638709][ T1360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.638729][ T1360] RSP: 002b:00007fe62b314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.638754][ T1360] RAX: ffffffffffffffda RBX: 00007fe62a625fa0 RCX: 00007fe62a39e159 [ 63.638770][ T1360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 63.638791][ T1360] RBP: 00007fe62b314090 R08: 0000000000000000 R09: 0000000000000000 [ 63.638806][ T1360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.638820][ T1360] R13: 00007fe62a626038 R14: 00007fe62a625fa0 R15: 00007ffe54a3b5f8 [ 63.638840][ T1360] [ 63.752131][ T487] wacom 0003:056A:0069.0008: hidraw0: USB HID vff.fe Device [HID 056a:0069] on usb-dummy_hcd.2-1/input0 [ 64.415617][ T46] usb 7-1: language id specifier not provided by device, defaulting to English [ 66.105418][ C1] net_ratelimit: 48973 callbacks suppressed [ 66.105443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.123564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 66.135713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.147826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.159956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.172100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 66.184254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.196359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.208416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.220478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 66.330193][ T46] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 66.517658][ T46] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 66.525246][ T46] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 67.350668][ T46] usb 7-1: USB disconnect, device number 12 [ 71.115393][ C1] net_ratelimit: 59000 callbacks suppressed [ 71.115417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.133845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.145937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 71.158275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 71.170410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.182525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.194593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 71.207093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 71.219226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.231333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.689059][ C0] sched: DL replenish lagged too much [ 75.028047][ T313] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 75.906088][ T313] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 75.914237][ T313] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 76.125434][ C1] net_ratelimit: 59541 callbacks suppressed [ 76.125458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 76.143540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.155675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.167729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 76.179848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 76.192022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.204231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.216300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 76.228359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 76.240522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.768312][ T313] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 79.788256][ T313] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 79.857686][ T487] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0069.0008/input/input20 [ 81.135407][ C1] net_ratelimit: 56533 callbacks suppressed [ 81.135431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.153469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 81.165590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.177688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.189815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.201865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 81.213984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.226087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.238120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.250277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 81.548507][ T313] usb 5-1: USB disconnect, device number 9 [ 82.355843][ T487] usb 3-1: USB disconnect, device number 13 [ 86.145416][ C1] net_ratelimit: 58153 callbacks suppressed [ 86.145440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.163445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.175518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 86.187652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.199762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.211846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.224035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 86.236261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.248462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.260597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.598629][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 86.618414][ T36] audit: type=1400 audit(1790406911.530:336): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[2923]" dev="pipefs" ino=2923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.155438][ C1] net_ratelimit: 55295 callbacks suppressed [ 91.155463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.173515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 91.185655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.197766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.209813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.221886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 91.234021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.246179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.258219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.270319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 96.165383][ C1] net_ratelimit: 60225 callbacks suppressed [ 96.165406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.183415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 96.195546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.207659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.219980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.232178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.244258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.256365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.268420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:a0:78:c8:48:dd, vlan:0) [ 96.280578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)