last executing test programs: 57.183904636s ago: executing program 0 (id=326): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @typed={0x8, 0x17, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'dummy0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x11, 0xd04, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6, 0x13}}) 57.124949519s ago: executing program 0 (id=327): r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)="1481be3e2c58221bb0eae7db9e041572334e05c05b1b423ec18545e0fc75101e11cf7636a3b262e3fb90ed46f5652db6871f99a60b52a6abf097f13a37364015ddd5f5be8b37de0397a544a8e3d7cbb559bf61ed55ebaa36bd80bcfb06e218b0d1b21a904add39ec7089a1533fa78cec8cec032bbd39a947781b3c5123610e39cdd65d6d9f2e6714d55510256316ee68103e6c47de8ec08f8d14e5720fd3d50d3f460cfb973fef017e2b3ad6925b6212adaecd604731a498808ab97b24504f784b2ac9739f2591ed9f3afd", 0xcb, r0}, 0x68) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000002900)=0x659c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x62) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x15, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x40, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x401, 0x3, 0x8, 0x6409, 0x3d81c000}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0xc, 0xe, 0xd615, 0x7, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 57.122341679s ago: executing program 0 (id=329): symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffff9, 0xd, 0x7, 0x1, 0x1, "008ef1ffa278887cb0baba0000000000000008"}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x12, 0x80, 0xb, 0x1, "fdff00"}}, 0x0}, 0x0) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0x3, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@loopback, @empty}, 0x6) syz_usb_control_io$uac3(r2, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f00000020c0)={0x18, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) creat(&(0x7f00000000c0)='./file1\x00', 0x148) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xab81}, {{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/11, 0xb}], 0x1, &(0x7f00000006c0)=""/233, 0xe9}, 0x200}], 0x3, 0x10000, 0x0) write(r5, &(0x7f0000000080)="240000001e005f031400ff01f9ff00f80700b3586ff606f1c71ae96d210d858f0b5b0600", 0x24) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 55.231698418s ago: executing program 0 (id=341): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)="c24d5304833c27da1ef7f6916ede2e91d4a80bebca7d555b9f43feab3ef983d3c47de39b8771d9e0b643a5ffffffff3a5d3786a64fdb9a09", 0x38) (async) write(r1, &(0x7f0000000040)="c24d5304833c27da1ef7f6916ede2e91d4a80bebca7d555b9f43feab3ef983d3c47de39b8771d9e0b643a5ffffffff3a5d3786a64fdb9a09", 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) setpgid(r2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000002a00), 0x0, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) (async) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x31) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) (async) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) ptrace$cont(0x20, r0, 0x0, 0x0) 53.954465988s ago: executing program 0 (id=345): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r1, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000000)={0xa, 0x68, 0x464, 0x7}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) syz_clone(0x0, &(0x7f00000000c0)="c6eb205636d3821aef831d1bc6720c2303255af22031bf13ae5cfe0e0977eabbd4635c53b01f0944dba393a29d20047dd2f831eea79fa47ea83cc9d1e2113d448ab8bc6ef9857864f6af693eb811e6fb89541a68", 0x54, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="233489bdbb6e661c1331dba9ac1da2e5bd7897e00dca510b5f2daf7b295a6eec101ec01368f74535c639eee0a88f47b098450299405e8ed8") ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000040)) 53.646521993s ago: executing program 0 (id=348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, r5) r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 53.585176985s ago: executing program 32 (id=348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, r5) r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 48.535833723s ago: executing program 1 (id=387): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)="389d", 0x2, 0xffffffffffffffff) keyctl$read(0xb, r7, &(0x7f0000000280)=""/130, 0x1001) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r12, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r12, 0xc008aec1, &(0x7f0000000200)={0x731, 0x0, [{0x4, 0x400, 0x1, 0x644, 0x5000000, 0x9, 0x1}]}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r13, 0x65, 0x6, 0x0, 0x0) syz_ublk_setup_queues(r9, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="23fe4fb322e9", @multicast2, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private=0xa010101, @empty, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010100, @private=0xa010101, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r15, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r14, 0x0, r0, 0x0, 0x40010003, 0x0) syz_usb_connect$uac2(0x5, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe950000000835121182400001025d22ef9b8a08e0300b3003080b000101002007090400000001012000092401f6ec050e000105240b10000904010000010220000904010101271620000c240201010407fdb7682528090501090800080609082501033f0909000904020000010220000904020101010220000624020102000905820900040f05420825010103090500"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r16 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r16, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r16, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$ASHMEM_SET_NAME(r16, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\x02\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ\x99\xd5\xa7|\x87\xe2\xccrj%\xc4r&K\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xc2?BN\x1d\xb2\'\"F\xc7\xda\xdb\x06H\xfa\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D*\xfa\xbb\xd3\xfc;C\xbfB\xec5\rh\'X\x92\xe7\xfd%tp\x12\xd95zKue\xa564\xf6\xde\x9b\xc6)\x00\x88\xe9\xef\x18\xc4so5^+\x9b\x17\xab\x9f\x89F\x12Dw\'\x85\x06\xb7\x06\xdc\xb9d:\v\xd9+\xca\x05\\U\x99\xb0\x9c\xef5K\xcb\xf1e\xb5\x99^\x8c\xa6\xf8k\xa3Y\xee\xa9\xb9\b\xffl\xf56.cB\x14}\x02\xa9?j\xb7b\xb6\xf2%\xd9|\x02\x1d\xf5\xf0\xc7R\x12\xcf\x95R\x9f|\xca\xe3k3\xc68\t\xc8>\x8d\xf4\x85\x94]\xb2F\xadf\x8d[\xc3\x13\xc8\xad\xd8\xd9') listen(r13, 0x1) ioctl$ASHMEM_SET_NAME(r16, 0x40087708, &(0x7f0000000540)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99f\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\b\x00\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\x7f\x97\x18\xc5\xdd\x8b\xe1\xb7\x1aZ\xbcY\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xb3\x16JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\a\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7z\x18\xa1\xd7U4\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\x83\r\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7U\xe1\xbf\x1a\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\x06\x00#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb5\'_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA\x00\x00\x00\x00\x00\x00\x00\x00\v\xa3\xb2\x1b)E/\xbb\x90\xcct_\x1f\xc5,.\xecv\x04\xe7\x04\v\xe0\x84\x89\xcc\xde\x82^\xc0&\x18\x8c\a\x88\\\xc7H\x97\xeb\x0e\xcdv\x8e\x00z(\f\xc4\xd4!\x95\"\x9ee\xda\xe4\x88\xc7\xac\xa3\xa9\x929Z\x03j_\x83\x05\ai\xc0\nB6\x06mT\xdf\'-$\r,\xe4J8\xac^[\xfd\x10\xa4\xb3\xf2\xfb\xfc\xd9-\b\x0f\x10\xb8\xbf7\'\x97\x98\x16\x81\x99\xa03\x12\xb7p^]LLO\xd4\x1a^\xfb5 \x8fH\xf5\x17N\xadQ\xbd\x1f\x90\xd7') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 45.189792419s ago: executing program 1 (id=407): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 45.141720412s ago: executing program 1 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x7ffffffc, 0x6, 0xcd0b, 0xf, 0x6, 0x45, 0xfc, 0xf, 0xff, 0x0, 0x1, 0x6, 0xff, 0x0, 0x6}}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x7, 0x2, 0x8, 0xb, 0x9, "ff000003ffffffe6e000", 0x40fff, 0x88}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020901010000000000000000010000010400020004000200399f670112b52b92e16c1d417fd39d7393ad5f"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 45.011143688s ago: executing program 1 (id=409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', r3, 0x80, 0x10, 0x10, 0x757ed7c4, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x67, 0x0, 0x5, 0x0, 0x0, @empty, @empty}}}}) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x14, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 44.988233389s ago: executing program 1 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a80)={0x0, 0x0, @pic={0x8, 0x8, 0xe5, 0xb9, 0x63, 0xa, 0x4, 0x7, 0x81, 0x39, 0x0, 0x17, 0x0, 0x4, 0xff, 0x2}}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0xeb95d000) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9k\xe1\xdeB\xe1\x02-&\"1hS\x92\a$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x0, 0x4}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x8000) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000040)=""/82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/eth0/threaded\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='1\n', 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000199000/0x800000)=nil, 0xc00000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000001"], 0x2a) r8 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r8, &(0x7f0000000140)='1\x00', 0x2) 44.884041814s ago: executing program 1 (id=411): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4210, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0x9, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x400, 0x2, 0x0, 0x8, 0x8, 0x1}, 0x20) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x40000) socket$netlink(0x10, 0x3, 0xa) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace(0x4210, r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0x9, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x400, 0x2, 0x0, 0x8, 0x8, 0x1}, 0x20) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x40000) (async) 29.336475733s ago: executing program 33 (id=411): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4210, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0x9, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x400, 0x2, 0x0, 0x8, 0x8, 0x1}, 0x20) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x40000) socket$netlink(0x10, 0x3, 0xa) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace(0x4210, r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0x9, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x400, 0x2, 0x0, 0x8, 0x8, 0x1}, 0x20) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x40000) (async) 9.084370313s ago: executing program 3 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000180)=0x5a26c626) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/cpu_dma_latency\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x9, 0xf0}}) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) (rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) (async) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x42cc, 0x80, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0xea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x5, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc7f, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', @local}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000004c0)='\x9f\xf7c)\x00', 0x200000, &(0x7f0000000540)={@align=0x2, {0x81, 0x187, 0xb, 0x2}}, 0x401, &(0x7f0000000640)={@_ha_fsid}, &(0x7f00000005c0)=0xfff}) (async) write$tun(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffff"], 0x62) 8.804102137s ago: executing program 3 (id=575): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x74) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 8.803804467s ago: executing program 3 (id=576): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="0f3567f36c0f2250650fc7280f080f20e06635020000000f22e0650f0fc9b00f01f5676436670fc770ed0fc75900", 0x2e}], 0x1, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.778933828s ago: executing program 3 (id=577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090f0000000007000000000000050018000200200050d4f62b7d0bd09efb62d9b7c6c42e25895ea88f3b65a80ffbdabb4ae0a558c10300060000000000020000000000b70b0b2c00000000000002000100000004d674d9260900000000030005000000000002004e21ac1414000000000000000000"], 0x78}, 0x1, 0x7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[], 0xf0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_ublk_setup_io_uring(0x72a2, &(0x7f0000000140)={0x0, 0xe5e3, 0x400, 0x0, 0x29a}, 0x0, 0x0, 0x0) (async) syz_ublk_setup_io_uring(0x72a2, &(0x7f0000000140)={0x0, 0xe5e3, 0x400, 0x0, 0x29a}, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)) (async) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x2f89, r4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)="56511c5bf21545d2efa5e42e13e4a9df65814b4afff6eb60180e0fd2444cbcb1cea5060b3ab9bdb718efa270ab9ff4bca92be300c7ea4022081b4a4b728d4d044abeaf5ebaa0a96f790085b8a2f5d704ff4f38d97733d291ea453419d81af010c2fbda1cee3870506af0ea388d6469d8b4d9f248b8a226d6c95844f6301fb20314357566d4488ddc63b5567556401c60b1506908884c0d8d159a6d9c49ba75d9b67c1adf4b7ebcd16f59317f5a55bf337c2ca985804c188aa9", 0xb9}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "32c5ab", 0x4c, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[@fragment={0x3b, 0x0, 0xff, 0x1, 0x0, 0x2, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x7e) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file7/file0\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='7', 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3ff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) 8.73196793s ago: executing program 3 (id=578): mlock(&(0x7f0000123000/0x2000)=nil, 0x2000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x2, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x3, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x1, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x466cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xc2, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x64) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/154, 0x9a}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 8.263166482s ago: executing program 3 (id=579): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) r2 = socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) close_range(r0, r0, 0x2) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) ioctl$UI_DEV_SETUP(r0, 0x41015500, 0x0) 8.223863644s ago: executing program 34 (id=579): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) r2 = socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) close_range(r0, r0, 0x2) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) ioctl$UI_DEV_SETUP(r0, 0x41015500, 0x0) 7.271875018s ago: executing program 6 (id=585): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="0f3567f36c0f2250650fc7280f080f20e06635020000000f22e0650f0fc9b00f01f5676436670fc770ed0fc75900", 0x2e}], 0x1, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.118450756s ago: executing program 6 (id=586): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x74) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 7.0319519s ago: executing program 6 (id=588): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x3, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0x100, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0xc6, 0x2, 0x1000000, 0x489, 0x7ff, 0x5, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x0, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x402, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x8004, 0xfffffff9, 0x191, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x80000000, 0x2, 0x400, 0x8, 0x9, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x83, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1afc, 0xbfc, 0x9, 0x6, 0x2007f, 0x55, 0x7ff, 0x5, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0xf4, 0x8, 0x8, 0x1, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) read(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000200)={0xf8c8, 0x8001ff, 0x4, 0x8003, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x400}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x4, r5, 0x1, 0x1c, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x44040) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x1000, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x9, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) (async) ioctl$TIOCSBRK(r7, 0x5427) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume_offset', 0x202, 0x40) write$cgroup_pressure(r9, &(0x7f0000000080)={'some', 0x20, 0x56, 0x20, 0xe}, 0x19) recvmsg$can_raw(r9, &(0x7f0000000880)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/141, 0x8d}, 0x2100) 6.699911255s ago: executing program 6 (id=590): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x40, 0xe, 0x6, "d16ebbddc357"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 6.39958788s ago: executing program 4 (id=594): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d7d3141ca0eb25e73c4ccdb6ba0120100000000ea3f2509888800000000000109118cce3c3f4c94d699c64b45ed37d703000921fdef0301220800090581030002090188"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="409e59"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d7d3141ca0eb25e73c4ccdb6ba0120100000000ea3f2509888800000000000109118cce3c3f4c94d699c64b45ed37d703000921fdef0301220800090581030002090188"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="409e59"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 4.892175161s ago: executing program 5 (id=596): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="0f3567f36c0f2250650fc7280f080f20e06635020000000f22e0650f0fc9b00f01f5676436670fc770ed0fc75900", 0x2e}], 0x1, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.773812516s ago: executing program 5 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 4.709093449s ago: executing program 5 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mmap(&(0x7f00004d7000/0x3000)=nil, 0x3000, 0x6c16c79d4dcb3e7f, 0x13, r3, 0x2ed18000) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) (async, rerun: 64) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x4}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async, rerun: 32) write(r5, &(0x7f0000000000)="1c0000001a00590214f9f407000904101f0000000000000000020000", 0x1c) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write$tun(r8, 0x0, 0xba) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_TDX_GET_CPUID(r4, 0xc008aeba, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000140)={0x6, 0x0, [{0xd, 0x81, 0xa4d3da950ac79b37, 0x1, 0x3, 0x86b, 0x3}, {0x40000001, 0x0, 0x0, 0x40, 0xffffffff, 0x3, 0x5}, {0xb, 0x7ed, 0x2, 0x6c, 0x3, 0x0, 0x5}, {0x80000019, 0x8, 0x0, 0x10000, 0xfffff21f, 0x5, 0x7}, {0xc0000006, 0x400, 0x2, 0x6, 0x7, 0x5, 0x40}, {0xcb3f9da02a647945, 0x45a, 0x6, 0x9, 0x9, 0x2, 0x2}]}}) (async, rerun: 64) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x4003) (rerun: 64) ioctl$EVIOCGID(r10, 0x80084502, &(0x7f0000000080)=""/6) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000280)={{0x1c4c0a06ed718da7, @private=0xa010100, 0x4e22, 0x1, 'lblc\x00', 0x16, 0x80, 0x7e}, {@loopback, 0x4e20, 0x3, 0x1, 0x800, 0xfffffff9}}, 0x44) 4.390425884s ago: executing program 5 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x7ffffffc, 0x6, 0xcd0b, 0xf, 0x6, 0x45, 0xfc, 0xf, 0xff, 0x0, 0x1, 0x6, 0xff, 0x0, 0x6}}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x7, 0x2, 0x8, 0xb, 0x9, "ff000003ffffffe6e000", 0x40fff, 0x88}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020901010000000000000000010000010400020004000200399f670112b52b92e16c1d417fd39d7393ad5f"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.236762631s ago: executing program 2 (id=601): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) r0 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xe3\x03\xc8\xb6\xa9D\xcc\xf4#\x9e4vmB\xd3\'\a\"\x80_N\t>\xd6\x98\x06\x00\x00\x00\x00\x00\x00\x00l\xcf\xa2\xb8\xdf4\xd8\x1d\x83\xf3\xf4\xedn_\xad\xbdt', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) (async) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) (async, rerun: 32) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 3.920068226s ago: executing program 2 (id=602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x54000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40006}, 0x808) eventfd2(0x2, 0x801) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.858660669s ago: executing program 2 (id=603): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x4b42, 0x0) read$FUSE(r1, 0x0, 0x5a) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000040)={0x20, 0x31, 0x13, {0x13, 0x21, "7fe3417f6fb591d71a22efca30779ed539"}}, &(0x7f0000000080)={0x0, 0x3, 0x57, @string={0x57, 0x3, "e39f8176cbe47194f0d8076f01aca533893ffb726bb71f3c1c2f1dbfd166e4fde80a0dfe3d2b701b587d584ea246ac6cd343e475f373dcc0193ca38b1d558c53af792ad9452ca3e079826f5a4039842fc4cc0f9b58"}}, &(0x7f00000005c0)={0x0, 0xf, 0x179, {0x5, 0xf, 0x179, 0x3, [@generic={0xa9, 0x10, 0x4, "daa69f827e218c00103885ecbb997d1d7a587ead9dac7a02b3df24ca66bb10591350e9934360035684883649b17189a155fb7ac7492c7ee477ea60e80c2bd4e13c74ec45ebca9353e5eb9acb753f1d912ee5091455a020db00d593a660bb83ba28c41e2a1491875eb500433d2555d58f353a093625a4a73d79e9031c1fa249c285fc42847bab6928ee29fdd77ee1b5399b12acd459b9ff70cee10e46d54ec9fd07a5cf1d6747"}, @generic={0xb9, 0x10, 0xb, "c0557c49adb5a9a88c60e0e991bcf3f11335c77c0d24cc55d103004dfaa09ff9c2d56dd9296f5aff1b7542599c5f02f79acc43a56df0a40c071f7db666f8b656736ded43e5546ef357bc5ade0427b09fca04f888d5ffdbe668046277958287adb0236289c628ddee063ca5b7e0ab6e74693643f794eba86598532881e0d38a227986d7f00ebf8b4cf1be1db2a38f2dfe5abeabdd3c79947b6545a2ff29b1a96b8b726c0abcaff1763250f51eaa13749fb52fbd3d1a53"}, @generic={0x12, 0x10, 0xa, "d0fa2395b0ce9688916a74fcda024f"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7d, 0x10, 0x1, 0x5, "31c5a4fa", "cb33f66c"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0xb, 0xe6, 0x0, 0x2, 0xb8}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x0, 0x9, 0x41, "74b93620c0bb42d9665c8a9a5983d80b1493ceb4ee33709d6742e240171da10acd99f5f5e3b92856e85fcc5f2c5b8ba95a3adfc677643ff43bf71686c334de7980"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x3d}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "042c"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "9cc7"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x14}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x6}}) prlimit64(0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xc5, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x3, 0x60, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x56}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1b, 0xf9}, [@extension_unit={0x11, 0x24, 0xa, 0x4, 0x6, [0x2, 0x2, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x81, 0x9, 0x800, 0x1001, 0x81, 0x5, 0x8, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x40, 0x4, {0xa, 0x25, 0x25, 0x400, 0xbe, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x37, 0x28}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe, 0x4, 0x41, 0x0, '4', "8ddcce"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xf7, 0x4, 0xfa, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x5, 0x4, {0xa, 0x25, 0x25, 0xb8, 0x0, 0xe56b}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000100)={0x40, 0x24, 0xb8, {0xb8, 0x22, "a8679916e299d01d02eabbf36a88eb57b7fec2ef98babde3e9d8e9b63e9200bf737bc53b0154203e2a1eb4563359ad4cf1e57545830054acfb1799c438462308ec9835d0e7695462da553241e20c43f9d963a9fbaa791a0fefe436060ad9cada5c0357dc87f4e213efc4d479565c27cc2c0e838924c347400eb1a70bda72cd3ad05ee137910743671cc9d933faf2d6404d58eec977eda26cbbfac694e28659cbeb785272694e5c11746e17dbd8cdfe56990be436d793"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, 0x0, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xf42}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000500)={0x20, 0x3, 0x81, "0e7d0c4297ebb8c231f0c1c1cf2260a55fe7688fdb2074a3db9512bf15f895a3e89422cb13d93503f41a287dfc3461018345a7b33f2a6e1c2be8337543cb0465a9e8a911dd889b6cf880bd38652d8d16c26377f665faec7a03a9afa4126954ce67d0d5e4235cdcf58c29d30398cfe96645ae68c917c9464cf0242911dc1573a3c1"}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x3}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.546281964s ago: executing program 6 (id=604): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x40, 0xe, 0x6, "d16ebbddc357"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.389344991s ago: executing program 5 (id=605): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async, rerun: 32) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x10e) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={r1, 0x0, 0x0, 0x9}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000002ac0)={0x2020}, 0x2020) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd2cd0000000000000080bbff0200000000000000000000000186009078ff2b0500020000000700000031"], 0x63) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched_retired(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7f35d6f6815e937f, 0xf}, {0xd, 0xf}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40000040) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r4, 0xfffffffffffff001, 0x3, 0x9d10}) (rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fstat(r8, &(0x7f0000000200)) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r9, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0x8, "9a345e88"}, @local=@item_4={0x3, 0x2, 0x1, "a0dbd29e"}, @main=@item_4={0x3, 0x0, 0xa, "3629c7ec"}, @global=@item_4={0x3, 0x1, 0x6, "04b858aa"}, @global=@item_4={0x3, 0x1, 0x0, "42ee9050"}]}}, 0x0}, 0x0) 3.329413304s ago: executing program 4 (id=606): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="0f3567f36c0f2250650fc7280f080f20e06635020000000f22e0650f0fc9b00f01f5676436670fc770ed0fc75900", 0x2e}], 0x1, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.285128645s ago: executing program 4 (id=607): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 3.272659286s ago: executing program 4 (id=608): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0xee01, r2, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) setresuid(r2, 0xee00, r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x200000001496) close(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$unix(r5, &(0x7f0000001200)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4040010}}], 0x1, 0xc0014) 3.214969089s ago: executing program 4 (id=609): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) 1.879872112s ago: executing program 6 (id=610): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) prlimit64(r1, 0x9, &(0x7f0000000100)={0xffffffff, 0x7fffffffffffffff}, &(0x7f0000004340)) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) (async) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x400, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)=0x10000000000, 0x12) fcntl$setlease(r7, 0x400, 0x0) unlink(&(0x7f0000000000)='./file0\x00') (async) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x0) (async) syz_io_uring_setup(0x340d, &(0x7f0000004200)={0x0, 0x60ab, 0x80, 0x0, 0x2dc}, &(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)) 833.213821ms ago: executing program 2 (id=611): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private1, 0x56}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x1c, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e", @generic="15c76bc0"]}, 0x1c}], 0x1}, 0x4000080) 752.105155ms ago: executing program 2 (id=612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x54000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40006}, 0x808) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 665.705459ms ago: executing program 2 (id=613): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x40, 0xe, 0x6, "d16ebbddc357"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 326.271645ms ago: executing program 5 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x7ffffffc, 0x6, 0xcd0b, 0xf, 0x6, 0x45, 0xfc, 0xf, 0xff, 0x0, 0x1, 0x6, 0xff, 0x0, 0x6}}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x7, 0x2, 0x8, 0xb, 0x9, "ff000003ffffffe6e000", 0x40fff, 0x88}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020901010000000000000000010000010400020004000200399f670112b52b92e16c1d417fd39d7393ad5f"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 4 (id=615): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xe, 0x5, "cfd72e3c53"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x2, '\"4'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) r4 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x6) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000015000b0000000000000000000afd000004000000140001"], 0x40}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) kernel console output (not intermixed with test programs): n item tag 0x0 [ 64.450938][ T583] logitech 0003:046D:C218.0006: unknown main item tag 0x0 [ 64.459048][ T583] logitech 0003:046D:C218.0006: hidraw0: USB HID v0.00 Device [HID 046d:c218] on usb-dummy_hcd.3-1/input0 [ 64.470525][ T583] logitech 0003:046D:C218.0006: no inputs found [ 64.480070][ T583] usb 4-1: USB disconnect, device number 21 [ 64.622838][ T1272] FAULT_INJECTION: forcing a failure. [ 64.622838][ T1272] name failslab, interval 1, probability 0, space 0, times 0 [ 64.635670][ T1272] CPU: 1 UID: 0 PID: 1272 Comm: syz.2.288 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 64.635706][ T1272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.635717][ T1272] Call Trace: [ 64.635724][ T1272] [ 64.635732][ T1272] __dump_stack+0x21/0x30 [ 64.635764][ T1272] dump_stack_lvl+0x140/0x1c0 [ 64.635788][ T1272] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.635812][ T1272] dump_stack+0x19/0x20 [ 64.635833][ T1272] should_fail_ex+0x3c2/0x510 [ 64.635853][ T1272] should_failslab+0xac/0x100 [ 64.635875][ T1272] __kmalloc_cache_node_noprof+0x46/0x430 [ 64.635893][ T1272] ? sbitmap_queue_init_node+0x209/0x5d0 [ 64.635918][ T1272] sbitmap_queue_init_node+0x209/0x5d0 [ 64.635937][ T1272] blk_mq_init_tags+0x176/0x370 [ 64.635959][ T1272] blk_mq_alloc_map_and_rqs+0xca/0xae0 [ 64.635975][ T1272] ? xa_find+0x11b/0x170 [ 64.635996][ T1272] blk_mq_init_sched+0x30b/0x840 [ 64.636011][ T1272] ? __cfi_blk_mq_init_sched+0x10/0x10 [ 64.636027][ T1272] ? __kasan_check_write+0x18/0x20 [ 64.636043][ T1272] ? blk_mq_quiesce_queue+0x10b/0x190 [ 64.636064][ T1272] elevator_switch+0x127/0x250 [ 64.636082][ T1272] elv_iosched_store+0x534/0x610 [ 64.636099][ T1272] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 64.636116][ T1272] ? __cfi_elv_iosched_store+0x10/0x10 [ 64.636135][ T1272] ? blk_freeze_queue+0xc7/0x100 [ 64.636157][ T1272] queue_attr_store+0x30e/0x3d0 [ 64.636179][ T1272] ? __cfi_queue_attr_store+0x10/0x10 [ 64.636210][ T1272] ? __kasan_check_write+0x18/0x20 [ 64.636229][ T1272] ? _copy_from_iter+0x215/0x1520 [ 64.636252][ T1272] ? __virt_addr_valid+0x2a1/0x370 [ 64.636274][ T1272] ? __kasan_check_write+0x18/0x20 [ 64.636293][ T1272] ? mutex_lock+0x97/0x1d0 [ 64.636313][ T1272] ? __cfi_mutex_lock+0x10/0x10 [ 64.636335][ T1272] ? __kmalloc_noprof+0x261/0x510 [ 64.636354][ T1272] ? __cfi_queue_attr_store+0x10/0x10 [ 64.636377][ T1272] sysfs_kf_write+0x141/0x160 [ 64.636397][ T1272] ? __cfi_sysfs_kf_write+0x10/0x10 [ 64.636415][ T1272] kernfs_fop_write_iter+0x319/0x510 [ 64.636441][ T1272] vfs_write+0x762/0xfd0 [ 64.636461][ T1272] ? __cfi_vfs_write+0x10/0x10 [ 64.636481][ T1272] ? __cfi_mutex_lock+0x10/0x10 [ 64.636503][ T1272] ksys_write+0x145/0x260 [ 64.636521][ T1272] ? xfd_validate_state+0x68/0x140 [ 64.636545][ T1272] ? __cfi_ksys_write+0x10/0x10 [ 64.636564][ T1272] ? __kasan_check_write+0x18/0x20 [ 64.636581][ T1272] ? fpregs_restore_userregs+0x11c/0x260 [ 64.636603][ T1272] __x64_sys_write+0x7f/0x90 [ 64.636622][ T1272] x64_sys_call+0x271c/0x2ee0 [ 64.636639][ T1272] do_syscall_64+0x57/0xf0 [ 64.636655][ T1272] ? clear_bhb_loop+0x50/0xa0 [ 64.636676][ T1272] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.636696][ T1272] RIP: 0033:0x7fce0c99e159 [ 64.636711][ T1272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.636727][ T1272] RSP: 002b:00007fce0d78b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.636749][ T1272] RAX: ffffffffffffffda RBX: 00007fce0cc25fa0 RCX: 00007fce0c99e159 [ 64.636763][ T1272] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 64.636775][ T1272] RBP: 00007fce0ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 64.636787][ T1272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.636799][ T1272] R13: 00007fce0cc26038 R14: 00007fce0cc25fa0 R15: 00007ffd30897bb8 [ 64.636816][ T1272] [ 64.636908][ T1272] elv: switch to "bfq" failed, falling back to "none" [ 64.981053][ T657] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 65.129690][ T657] usb 1-1: device descriptor read/64, error -71 [ 65.259690][ T583] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 65.289697][ T441] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 65.379713][ T657] usb 1-1: device descriptor read/64, error -71 [ 65.430683][ T583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57652, setting to 1024 [ 65.447365][ T583] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 65.450649][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.457267][ T583] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 65.479259][ T441] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.479522][ T583] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.488669][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.505800][ T657] usb usb1-port1: attempt power cycle [ 65.509672][ T583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.519302][ T583] usb 3-1: Product: â  [ 65.519513][ T441] usb 4-1: config 0 descriptor?? [ 65.523490][ T583] usb 3-1: Manufacturer: щ [ 65.523507][ T583] usb 3-1: SerialNumber: ш [ 65.739718][ T583] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 65.746555][ T583] cdc_ncm 3-1:1.0: bind() failure [ 65.752550][ T583] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 65.759348][ T583] cdc_ncm 3-1:1.1: bind() failure [ 65.766842][ T583] usb 3-1: USB disconnect, device number 12 [ 65.849687][ T657] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 65.870725][ T657] usb 1-1: device descriptor read/8, error -71 [ 66.009761][ T657] usb 1-1: device descriptor read/8, error -71 [ 66.144294][ T1280] syz.3.291 (1280): drop_caches: 3 [ 66.155626][ T441] usbhid 4-1:0.0: can't add hid device: -71 [ 66.161655][ T441] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 66.172991][ T441] usb 4-1: USB disconnect, device number 22 [ 66.249800][ T657] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 66.292465][ T657] usb 1-1: device descriptor read/8, error -71 [ 66.430391][ T657] usb 1-1: device descriptor read/8, error -71 [ 66.540014][ T657] usb usb1-port1: unable to enumerate USB device [ 66.889322][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 66.889337][ T36] audit: type=1400 audit(1789552866.439:316): avc: denied { write } for pid=1298 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.889530][ T1300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 67.037188][ T36] audit: type=1326 audit(1789552866.589:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0c99e159 code=0x7ffc0000 [ 67.068009][ T36] audit: type=1326 audit(1789552866.619:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0c99e159 code=0x7ffc0000 [ 67.093252][ T36] audit: type=1326 audit(1789552866.619:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0c99e159 code=0x7ffc0000 [ 67.118537][ T36] audit: type=1326 audit(1789552866.619:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce0c99dec2 code=0x7ffc0000 [ 67.150350][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 67.161045][ T36] audit: type=1326 audit(1789552866.619:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fce0c99df57 code=0x7ffc0000 [ 67.189553][ T36] audit: type=1326 audit(1789552866.619:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fce0c95ae51 code=0x7ffc0000 [ 67.215275][ T36] audit: type=1326 audit(1789552866.619:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fce0c99ef49 code=0x7ffc0000 [ 67.240930][ T36] audit: type=1326 audit(1789552866.619:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce0c99e159 code=0x7ffc0000 [ 67.266215][ T36] audit: type=1326 audit(1789552866.619:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0c99e159 code=0x7ffc0000 [ 67.321024][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 67.337073][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 67.348292][ T10] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 67.357561][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.379697][ T10] usb 1-1: Product: syz [ 67.383902][ T10] usb 1-1: Manufacturer: syz [ 67.388517][ T10] usb 1-1: SerialNumber: syz [ 67.534717][ T1335] tmpfs: Unknown parameter 'usrquota_block_hardmimit' [ 67.606759][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 67.620802][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 67.638198][ T10] usb 1-1: USB disconnect, device number 20 [ 67.689701][ T441] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 67.849678][ T441] usb 2-1: Using ep0 maxpacket: 16 [ 67.859715][ T441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.879864][ T441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.903044][ T441] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.929675][ T441] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.949079][ T441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.969973][ T441] usb 2-1: config 0 descriptor?? [ 68.179678][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 68.343168][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 68.353970][ T10] usb 3-1: config 253 has an invalid descriptor of length 1, skipping remainder of the config [ 68.374829][ T10] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 68.397293][ T441] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 68.399699][ T10] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 68.411465][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.432219][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.440658][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.441584][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.456696][ T10] usb 3-1: SerialNumber: syz [ 68.457101][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.468656][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.477756][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.485576][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.495888][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.507936][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.515570][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.522997][ T441] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 68.543205][ T441] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input11 [ 68.560405][ T441] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 68.612702][ T441] usb 2-1: USB disconnect, device number 15 [ 68.680547][ T10] rndis_host 3-1:253.0: skipping garbage [ 68.686231][ T10] usb 3-1: bad CDC descriptors [ 68.696621][ T10] usb 3-1: USB disconnect, device number 13 [ 69.519699][ T441] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 69.529686][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 69.680700][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.691799][ T9] usb 2-1: config 1 has an invalid descriptor of length 85, skipping remainder of the config [ 69.691807][ T441] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.691829][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.712142][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 19290, setting to 64 [ 69.719986][ T441] usb 4-1: config 0 descriptor?? [ 69.735225][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.749573][ T9] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 69.758769][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.766786][ T9] usb 2-1: Product: syz [ 69.771060][ T9] usb 2-1: Manufacturer: syz [ 69.775654][ T9] usb 2-1: SerialNumber: syz [ 69.781599][ T1354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.001776][ T9] usb 2-1: USB disconnect, device number 16 [ 70.136757][ T1356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.146720][ T1356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.600387][ T1392] tmpfs: Unknown parameter 'usrquota_block_hardmimit' [ 71.344561][ T1401] tmpfs: Too small a size for current use [ 71.482265][ T1404] capability: warning: `syz.0.326' uses 32-bit capabilities (legacy support in use) [ 71.779790][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 71.939691][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 71.946411][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.955164][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 71.968123][ T10] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 71.977616][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.985907][ T10] usb 1-1: Product: syz [ 71.990728][ T10] usb 1-1: Manufacturer: syz [ 71.995397][ T10] usb 1-1: SerialNumber: syz [ 72.202891][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 72.211186][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.402812][ T441] usbhid 4-1:0.0: can't add hid device: -71 [ 72.408957][ T441] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 72.429804][ T441] usb 4-1: USB disconnect, device number 23 [ 72.442735][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 72.442751][ T36] audit: type=1400 audit(1789552871.999:359): avc: denied { search } for pid=1441 comm="syz.3.335" name="/" dev="configfs" ino=2504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.540063][ T1445] EXT4-fs: dax option not supported [ 72.603083][ T10] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 72.860458][ T10] usb 1-1: USB disconnect, device number 21 [ 73.395886][ T36] audit: type=1400 audit(1789552872.949:360): avc: denied { mounton } for pid=1459 comm="syz.0.341" path="/80/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 73.659689][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 73.819691][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 73.830005][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 73.839882][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 73.851228][ T31] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 73.860353][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.868346][ T31] usb 1-1: Product: syz [ 73.872691][ T31] usb 1-1: Manufacturer: syz [ 73.877290][ T31] usb 1-1: SerialNumber: syz [ 73.890200][ T1461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.897393][ T1461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.905405][ T31] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 73.916713][ T31] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 73.927614][ T31] usbserial_generic 1-1:1.0: generic converter detected [ 73.935821][ T31] usb 1-1: generic converter now attached to ttyUSB0 [ 73.959677][ T10] usb 2-1: device descriptor read/64, error -71 [ 74.060354][ T36] audit: type=1400 audit(1789552873.619:361): avc: denied { read write } for pid=1468 comm="syz.3.344" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.083768][ T36] audit: type=1400 audit(1789552873.619:362): avc: denied { open } for pid=1468 comm="syz.3.344" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.107590][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 74.117047][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 74.126718][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 74.136157][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 74.209668][ T10] usb 2-1: device descriptor read/64, error -71 [ 74.469683][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 74.609673][ T10] usb 2-1: device descriptor read/64, error -71 [ 74.673834][ T36] audit: type=1400 audit(1789552874.229:363): avc: denied { unlink } for pid=296 comm="syz-executor" name="ttyUSB0" dev="devtmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.849751][ T10] usb 2-1: device descriptor read/64, error -71 [ 74.851592][ T441] usb 1-1: USB disconnect, device number 22 [ 74.877545][ T441] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 74.889915][ T441] usbserial_generic 1-1:1.0: device disconnected [ 74.945274][ T12] bridge_slave_1: left allmulticast mode [ 74.959701][ T12] bridge_slave_1: left promiscuous mode [ 74.965031][ T10] usb usb2-port1: attempt power cycle [ 74.965387][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.000124][ T12] bridge_slave_0: left allmulticast mode [ 75.011406][ T12] bridge_slave_0: left promiscuous mode [ 75.022668][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.077125][ T1490] FAULT_INJECTION: forcing a failure. [ 75.077125][ T1490] name failslab, interval 1, probability 0, space 0, times 0 [ 75.090052][ T1490] CPU: 0 UID: 0 PID: 1490 Comm: syz.3.349 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 75.090084][ T1490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.090096][ T1490] Call Trace: [ 75.090103][ T1490] [ 75.090110][ T1490] __dump_stack+0x21/0x30 [ 75.090142][ T1490] dump_stack_lvl+0x140/0x1c0 [ 75.090168][ T1490] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.090194][ T1490] dump_stack+0x19/0x20 [ 75.090216][ T1490] should_fail_ex+0x3c2/0x510 [ 75.090239][ T1490] should_failslab+0xac/0x100 [ 75.090262][ T1490] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 75.090283][ T1490] ? kmalloc_gfp_adjust+0xed/0x220 [ 75.090300][ T1490] ? kvrealloc_noprof+0x59/0x120 [ 75.090318][ T1490] ? vm_mmap+0xc0/0xc0 [ 75.090335][ T1490] krealloc_noprof+0x8d/0x130 [ 75.090354][ T1490] kvrealloc_noprof+0x59/0x120 [ 75.090372][ T1490] _RNvMs0_NtNtCsbuTvttuFvbr_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7context7ContextENtNtB7_9allocator8KVmallocE7reserveB1g_+0x244/0x3f0 [ 75.090418][ T1490] _RNvCswPamI0U300_11rust_binder16rust_binder_open+0xd1a/0x1cd0 [ 75.090442][ T1490] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 75.090464][ T1490] ? bpf_lsm_file_open+0xd/0x20 [ 75.090488][ T1490] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 75.090510][ T1490] do_dentry_open+0x97c/0x1510 [ 75.090533][ T1490] vfs_open+0x86/0x240 [ 75.090554][ T1490] ? __cfi_vfs_open+0x10/0x10 [ 75.090578][ T1490] ? may_open+0x352/0x430 [ 75.090602][ T1490] path_openat+0x2c49/0x35a0 [ 75.090627][ T1490] ? kasan_save_alloc_info+0x3a/0x50 [ 75.090644][ T1490] ? getname+0x1b/0x30 [ 75.090663][ T1490] ? x64_sys_call+0xe69/0x2ee0 [ 75.090680][ T1490] ? do_syscall_64+0x57/0xf0 [ 75.090699][ T1490] ? do_filp_open+0x440/0x440 [ 75.090724][ T1490] do_filp_open+0x1f2/0x440 [ 75.090748][ T1490] ? __cfi_do_filp_open+0x10/0x10 [ 75.090773][ T1490] ? alloc_fd+0x4c1/0x570 [ 75.090795][ T1490] do_sys_openat2+0x134/0x1d0 [ 75.090820][ T1490] ? fput+0x1a4/0x230 [ 75.090841][ T1490] ? do_sys_open+0x100/0x100 [ 75.090867][ T1490] __x64_sys_openat+0x13a/0x170 [ 75.090892][ T1490] x64_sys_call+0xe69/0x2ee0 [ 75.090910][ T1490] do_syscall_64+0x57/0xf0 [ 75.090926][ T1490] ? clear_bhb_loop+0x50/0xa0 [ 75.090949][ T1490] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.090976][ T1490] RIP: 0033:0x7ff09af9e159 [ 75.090994][ T1490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.091011][ T1490] RSP: 002b:00007ff09bf14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.091032][ T1490] RAX: ffffffffffffffda RBX: 00007ff09b226090 RCX: 00007ff09af9e159 [ 75.091048][ T1490] RDX: 0000000000000002 RSI: 0000200000000d40 RDI: ffffffffffffff9c [ 75.091062][ T1490] RBP: 00007ff09b03506b R08: 0000000000000000 R09: 0000000000000000 [ 75.091078][ T1490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.091091][ T1490] R13: 00007ff09b226128 R14: 00007ff09b226090 R15: 00007ffc57dc1588 [ 75.091107][ T1490] [ 75.432381][ T36] audit: type=1400 audit(1789552874.989:364): avc: denied { mounton } for pid=1494 comm="syz.2.352" path="/33/file0" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 75.473105][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 75.500570][ T10] usb 2-1: device descriptor read/8, error -71 [ 75.668320][ T1491] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.675423][ T1491] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.682547][ T1491] bridge_slave_0: entered allmulticast mode [ 75.688884][ T1491] bridge_slave_0: entered promiscuous mode [ 75.695456][ T1491] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.702515][ T1491] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.709583][ T1491] bridge_slave_1: entered allmulticast mode [ 75.730202][ T1491] bridge_slave_1: entered promiscuous mode [ 75.737179][ T12] veth1_macvtap: left promiscuous mode [ 75.743717][ T10] usb 2-1: device descriptor read/8, error -71 [ 75.759715][ T12] veth0_vlan: left promiscuous mode [ 75.946447][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.953576][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.979388][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.986517][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.999687][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 76.003126][ T1491] veth0_vlan: entered promiscuous mode [ 76.021842][ T1491] veth1_macvtap: entered promiscuous mode [ 76.041510][ T10] usb 2-1: device descriptor read/8, error -71 [ 76.054695][ T36] audit: type=1400 audit(1789552875.609:365): avc: denied { mount } for pid=1491 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.102872][ T36] audit: type=1400 audit(1789552875.659:366): avc: denied { map } for pid=1503 comm="syz.4.350" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.170648][ T10] usb 2-1: device descriptor read/8, error -71 [ 76.280007][ T10] usb usb2-port1: unable to enumerate USB device [ 76.379718][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.530691][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 76.543966][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 76.571211][ T31] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 76.580521][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.588519][ T31] usb 5-1: Product: syz [ 76.603432][ T31] usb 5-1: Manufacturer: syz [ 76.608068][ T31] usb 5-1: SerialNumber: syz [ 76.620504][ T31] usb 5-1: config 0 descriptor?? [ 76.635591][ T1506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.649753][ T1506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.741587][ T36] audit: type=1400 audit(1789552876.299:367): avc: denied { bind } for pid=1524 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.769704][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 76.861823][ T1506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.869186][ T1506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.920847][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.931979][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.942194][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.955768][ T10] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 76.965002][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.973931][ T10] usb 3-1: config 0 descriptor?? [ 76.999699][ T332] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 77.149678][ T332] usb 2-1: Using ep0 maxpacket: 16 [ 77.170394][ T332] usb 2-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 77.181797][ T332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.190753][ T10] usb 3-1: string descriptor 0 read error: -71 [ 77.198775][ T10] usb 3-1: USB disconnect, device number 14 [ 77.204912][ T332] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.219708][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.227741][ T332] usb 2-1: Product: syz [ 77.236068][ T332] usb 2-1: Manufacturer: syz [ 77.240779][ T332] usb 2-1: SerialNumber: syz [ 77.278250][ T31] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 77.448157][ T332] usb 2-1: 0:2 : does not exist [ 77.455260][ T332] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 77.466566][ T332] usb 2-1: USB disconnect, device number 21 [ 77.979212][ T1539] FAULT_INJECTION: forcing a failure. [ 77.979212][ T1539] name failslab, interval 1, probability 0, space 0, times 0 [ 78.012185][ T1539] CPU: 1 UID: 0 PID: 1539 Comm: syz.1.365 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 78.012222][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.012235][ T1539] Call Trace: [ 78.012242][ T1539] [ 78.012250][ T1539] __dump_stack+0x21/0x30 [ 78.012287][ T1539] dump_stack_lvl+0x140/0x1c0 [ 78.012318][ T1539] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.012346][ T1539] ? ipv6_recv_error+0xf20/0x14e0 [ 78.012372][ T1539] ? kasan_save_track+0x4f/0x80 [ 78.012394][ T1539] ? kasan_save_alloc_info+0x3a/0x50 [ 78.012413][ T1539] dump_stack+0x19/0x20 [ 78.012438][ T1539] should_fail_ex+0x3c2/0x510 [ 78.012463][ T1539] should_failslab+0xac/0x100 [ 78.012487][ T1539] kmem_cache_alloc_noprof+0x42/0x410 [ 78.012506][ T1539] ? mas_wr_store_type+0x13f3/0x1b40 [ 78.012527][ T1539] ? mas_alloc_nodes+0x254/0x9d0 [ 78.012552][ T1539] mas_alloc_nodes+0x254/0x9d0 [ 78.012578][ T1539] mas_preallocate+0x79b/0xc90 [ 78.012604][ T1539] ? __cfi_mas_preallocate+0x10/0x10 [ 78.012629][ T1539] ? __kasan_check_read+0x15/0x20 [ 78.012649][ T1539] ? anon_vma_name+0x51/0xa0 [ 78.012667][ T1539] ? vm_area_dup+0x415/0x560 [ 78.012688][ T1539] __split_vma+0x449/0xc10 [ 78.012709][ T1539] ? is_bpf_text_address+0x17b/0x1a0 [ 78.012746][ T1539] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 78.012768][ T1539] ? kernel_text_address+0xa9/0xe0 [ 78.012796][ T1539] ? __kasan_check_write+0x18/0x20 [ 78.012815][ T1539] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 78.012835][ T1539] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 78.012855][ T1539] vma_modify+0x364/0x1540 [ 78.012880][ T1539] vma_modify_flags_name+0x186/0x1c0 [ 78.012905][ T1539] madvise_update_vma+0x24e/0x800 [ 78.012927][ T1539] ? __ia32_sys_process_madvise+0xf0/0xf0 [ 78.012950][ T1539] madvise_set_anon_name+0x2fa/0x650 [ 78.012969][ T1539] ? __cfi_madvise_set_anon_name+0x10/0x10 [ 78.012989][ T1539] ? kfree+0x158/0x440 [ 78.013006][ T1539] ? prctl_set_vma+0x258/0x590 [ 78.013027][ T1539] ? anon_vma_name_alloc+0xb8/0x1a0 [ 78.013045][ T1539] prctl_set_vma+0x2fc/0x590 [ 78.013065][ T1539] ? prctl_get_mdwe+0x120/0x120 [ 78.013085][ T1539] ? __kasan_check_read+0x15/0x20 [ 78.013104][ T1539] ? static_key_count+0x45/0x70 [ 78.013128][ T1539] ? security_task_prctl+0x2b4/0x2e0 [ 78.013152][ T1539] __se_sys_prctl+0x4a9/0x1480 [ 78.013171][ T1539] ? __x64_sys_prctl+0xf0/0xf0 [ 78.013191][ T1539] ? __kasan_check_write+0x18/0x20 [ 78.013210][ T1539] ? fpregs_restore_userregs+0x11c/0x260 [ 78.013233][ T1539] __x64_sys_prctl+0xc3/0xf0 [ 78.013252][ T1539] x64_sys_call+0x2614/0x2ee0 [ 78.013271][ T1539] do_syscall_64+0x57/0xf0 [ 78.013288][ T1539] ? clear_bhb_loop+0x50/0xa0 [ 78.013311][ T1539] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.013334][ T1539] RIP: 0033:0x7f5c7879e159 [ 78.013352][ T1539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.013368][ T1539] RSP: 002b:00007f5c79603028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 78.013392][ T1539] RAX: ffffffffffffffda RBX: 00007f5c78a25fa0 RCX: 00007f5c7879e159 [ 78.013408][ T1539] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 78.013421][ T1539] RBP: 00007f5c7883506b R08: 0000200000000b40 R09: 0000000000000000 [ 78.013435][ T1539] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 78.013447][ T1539] R13: 00007f5c78a26038 R14: 00007f5c78a25fa0 R15: 00007fff0547d2f8 [ 78.013465][ T1539] [ 78.370151][ T31] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 78.395882][ T31] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, f6:48:e4:cc:23:d2 [ 78.399045][ T36] audit: type=1400 audit(1789552877.949:368): avc: denied { cmd } for pid=1540 comm="syz.1.366" path="socket:[15036]" dev="sockfs" ino=15036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.409221][ T31] usb 5-1: USB disconnect, device number 2 [ 78.438512][ T31] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 78.486839][ T1552] FAULT_INJECTION: forcing a failure. [ 78.486839][ T1552] name failslab, interval 1, probability 0, space 0, times 0 [ 78.514338][ T1552] CPU: 0 UID: 0 PID: 1552 Comm: syz.1.367 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 78.514368][ T1552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.514380][ T1552] Call Trace: [ 78.514385][ T1552] [ 78.514393][ T1552] __dump_stack+0x21/0x30 [ 78.514421][ T1552] dump_stack_lvl+0x140/0x1c0 [ 78.514444][ T1552] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.514468][ T1552] dump_stack+0x19/0x20 [ 78.514489][ T1552] should_fail_ex+0x3c2/0x510 [ 78.514511][ T1552] should_failslab+0xac/0x100 [ 78.514533][ T1552] kmem_cache_alloc_noprof+0x42/0x410 [ 78.514552][ T1552] ? security_inode_alloc+0x51/0x230 [ 78.514576][ T1552] security_inode_alloc+0x51/0x230 [ 78.514598][ T1552] inode_init_always_gfp+0x756/0x9e0 [ 78.514619][ T1552] ? __cfi_sock_alloc_inode+0x10/0x10 [ 78.514637][ T1552] alloc_inode+0xc5/0x270 [ 78.514658][ T1552] ? bpf_lsm_socket_create+0xd/0x20 [ 78.514677][ T1552] new_inode_pseudo+0x19/0x40 [ 78.514698][ T1552] __sock_create+0x130/0x810 [ 78.514718][ T1552] __sys_socket+0xe1/0x1c0 [ 78.514736][ T1552] __x64_sys_socket+0x7e/0x90 [ 78.514756][ T1552] x64_sys_call+0x2608/0x2ee0 [ 78.514772][ T1552] do_syscall_64+0x57/0xf0 [ 78.514789][ T1552] ? clear_bhb_loop+0x50/0xa0 [ 78.514808][ T1552] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.514827][ T1552] RIP: 0033:0x7f5c7879f9c7 [ 78.514843][ T1552] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.514859][ T1552] RSP: 002b:00007f5c795e0f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 78.514878][ T1552] RAX: ffffffffffffffda RBX: 00007f5c78a26090 RCX: 00007f5c7879f9c7 [ 78.514892][ T1552] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 78.514904][ T1552] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 78.514915][ T1552] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 78.514927][ T1552] R13: 00007f5c78a26128 R14: 00007f5c78a26090 R15: 00007fff0547d2f8 [ 78.514942][ T1552] [ 78.514964][ T1552] socket: no more sockets [ 78.825347][ T36] audit: type=1400 audit(1789552878.379:369): avc: denied { remount } for pid=1557 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.860975][ T1564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 78.911736][ T36] audit: type=1400 audit(1789552878.469:370): avc: denied { audit_write } for pid=1566 comm="syz.1.371" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.964534][ T36] audit: type=1107 audit(1789552878.469:371): pid=1566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¤õ!Lnš¤«€ÖË™`ÒAŽ%dr²`›' [ 78.998167][ T36] audit: type=1400 audit(1789552878.509:372): avc: denied { unmount } for pid=1491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.081902][ T1584] kernel profiling enabled (shift: 9) [ 79.118277][ T36] audit: type=1400 audit(1789552878.669:373): avc: denied { setopt } for pid=1589 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.167114][ T36] audit: type=1400 audit(1789552878.719:374): avc: denied { read write } for pid=1592 comm="syz.1.378" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 79.206712][ T36] audit: type=1400 audit(1789552878.719:375): avc: denied { open } for pid=1592 comm="syz.1.378" path="/108/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 79.231329][ T1602] program syz.1.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.241100][ T36] audit: type=1400 audit(1789552878.749:376): avc: denied { ioctl } for pid=1592 comm="syz.1.378" path="/108/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 79.299707][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.449698][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 79.459249][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.479681][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.500053][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.509996][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.518003][ T31] usb 5-1: Product: syz [ 79.535441][ T31] usb 5-1: Manufacturer: syz [ 79.544547][ T31] usb 5-1: SerialNumber: syz [ 79.555208][ T31] usb 5-1: config 0 descriptor?? [ 80.009727][ T36] audit: type=1400 audit(1789552879.559:377): avc: denied { setopt } for pid=1613 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.142128][ T1633] x_tables: duplicate underflow at hook 1 [ 80.529683][ T310] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 80.689684][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 80.696323][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.704129][ T310] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 80.713121][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 80.720832][ T310] usb 2-1: can't read configurations, error -61 [ 80.849712][ T310] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 81.009679][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 81.023166][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.039713][ T310] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 81.060017][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.069319][ T310] usb 2-1: can't read configurations, error -61 [ 81.078213][ T310] usb usb2-port1: attempt power cycle [ 81.429698][ T310] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 81.450987][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 81.462086][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.470759][ T310] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 81.479773][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.487441][ T310] usb 2-1: can't read configurations, error -61 [ 81.629691][ T310] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 81.649997][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 81.656484][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.665317][ T310] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 81.674323][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.682146][ T310] usb 2-1: can't read configurations, error -61 [ 81.688652][ T310] usb usb2-port1: unable to enumerate USB device [ 82.187848][ T332] usb 5-1: USB disconnect, device number 3 [ 82.349507][ T1684] ÿÿÿÿÿÿ: renamed from lo (while UP) [ 82.759866][ T332] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 82.911312][ T332] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.919495][ T332] usb 5-1: not running at top speed; connect to a high speed hub [ 82.928283][ T332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.938712][ T332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.949278][ T332] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 82.965585][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.982128][ T332] usb 5-1: Product: syz [ 82.990064][ T332] usb 5-1: Manufacturer: syz [ 82.995351][ T332] usb 5-1: SerialNumber: syz [ 83.415919][ T332] usb 5-1: unit 0 not found! [ 83.432488][ T332] usb 5-1: USB disconnect, device number 4 [ 83.580334][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 83.686413][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 83.686431][ T36] audit: type=1400 audit(1789552883.239:384): avc: denied { mounton } for pid=1719 comm="syz.1.410" path="/117/file0" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.740331][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 83.746520][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.756745][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.778305][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 83.787530][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.807711][ T9] usb 3-1: Product: syz [ 83.811955][ T9] usb 3-1: Manufacturer: syz [ 83.816546][ T9] usb 3-1: SerialNumber: syz [ 83.832142][ T9] usb 3-1: config 0 descriptor?? [ 84.053055][ T9] kernel write not supported for file /input/event0 (pid: 9 comm: kworker/0:0) [ 84.082309][ T36] audit: type=1400 audit(1789552883.629:385): avc: denied { create } for pid=1722 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 86.499280][ T9] usb 3-1: USB disconnect, device number 15 [ 87.080615][ T36] audit: type=1400 audit(1789552886.627:386): avc: denied { bind } for pid=1765 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.132082][ T36] audit: type=1400 audit(1789552886.627:387): avc: denied { name_bind } for pid=1765 comm="syz.4.423" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 87.166399][ T36] audit: type=1400 audit(1789552886.627:388): avc: denied { node_bind } for pid=1765 comm="syz.4.423" saddr=::ffff:172.20.20.43 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 87.189587][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 87.353244][ T1775] fuse: Bad value for 'group_id' [ 87.362159][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 87.372188][ T1775] fuse: Bad value for 'group_id' [ 87.383142][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.393717][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.426743][ T9] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.463563][ T9] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 87.472695][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.480685][ T9] usb 3-1: Product: syz [ 87.502202][ T9] usb 3-1: Manufacturer: syz [ 87.506840][ T9] usb 3-1: SerialNumber: syz [ 87.682330][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 87.853348][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 87.872567][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 87.892862][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 87.901068][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.922606][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 87.944301][ T10] usb 4-1: config 0 has no interface number 0 [ 87.953480][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 87.972460][ T10] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 87.982344][ T10] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.003009][ T9] usb 3-1: USB disconnect, device number 16 [ 88.022492][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 88.033491][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 88.044135][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.052140][ T10] usb 4-1: Product: syz [ 88.059795][ T10] usb 4-1: Manufacturer: syz [ 88.067659][ T10] usb 4-1: SerialNumber: syz [ 88.073024][ T10] usb 4-1: config 0 descriptor?? [ 88.078797][ T10] smsc75xx v1.0.0 [ 88.082446][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 88.112546][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 88.423053][ T36] audit: type=1400 audit(1789552887.976:389): avc: denied { ioctl } for pid=1787 comm="syz.2.431" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.657296][ T1794] netlink: 'syz.2.432': attribute type 58 has an invalid length. [ 88.912920][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 89.072996][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 89.087469][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.100891][ T31] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 89.131058][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 89.151252][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.163030][ T31] usb 3-1: SerialNumber: syz [ 89.182159][ T1798] netlink: 'syz.4.433': attribute type 25 has an invalid length. [ 89.397153][ T9] usb 3-1: USB disconnect, device number 17 [ 89.556416][ T36] audit: type=1400 audit(1789552889.106:390): avc: denied { mounton } for pid=1793 comm="syz.2.432" path="/proc/206/task/207/net" dev="proc" ino=18848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 90.717962][ T9] usb 4-1: USB disconnect, device number 24 [ 91.685984][ T36] audit: type=1400 audit(1789552891.235:391): avc: denied { append } for pid=1812 comm="syz.2.437" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 91.725000][ T36] audit: type=1400 audit(1789552891.265:392): avc: denied { execmem } for pid=1812 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.744204][ T36] audit: type=1400 audit(1789552891.265:393): avc: denied { mmap_zero } for pid=1812 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 91.814378][ T36] audit: type=1400 audit(1789552891.355:394): avc: denied { read write } for pid=1068 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.842052][ T36] audit: type=1400 audit(1789552891.355:395): avc: denied { open } for pid=1068 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.872923][ T36] audit: type=1400 audit(1789552891.355:396): avc: denied { ioctl } for pid=1068 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.906202][ T36] audit: type=1400 audit(1789552891.455:397): avc: denied { read } for pid=1816 comm="syz.2.438" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.954431][ T36] audit: type=1400 audit(1789552891.455:398): avc: denied { open } for pid=1816 comm="syz.2.438" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.997612][ T36] audit: type=1400 audit(1789552891.455:399): avc: denied { ioctl } for pid=1816 comm="syz.2.438" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.164544][ T310] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 92.344754][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.364646][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.384584][ T310] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.393683][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.394695][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 92.415888][ T310] usb 4-1: config 0 descriptor?? [ 92.481813][ T1826] fuse: Bad value for 'fd' [ 92.556552][ T9] usb 3-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 92.577219][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.604767][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=fffb, bcdDevice= 0.00 [ 92.619348][ T1828] overlayfs: failed to resolve '/ýw™Ûö óg 2>Uèô½6é³Ú': -2 [ 92.624031][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.645473][ T9] usb 3-1: config 0 descriptor?? [ 92.857272][ T9] usb 3-1: string descriptor 0 read error: -71 [ 92.865224][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 92.886073][ T9] usb 3-1: USB disconnect, device number 18 [ 93.036899][ T310] usb 4-1: string descriptor 0 read error: -22 [ 93.245522][ T310] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0008/input/input12 [ 93.268081][ T310] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 93.462026][ T310] usb 4-1: USB disconnect, device number 25 [ 94.285607][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 94.445677][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 94.455765][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.475184][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.494507][ T9] usb 3-1: config 0 has no interface number 0 [ 94.507237][ T9] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 94.527310][ T9] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.554418][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 94.571899][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.586093][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.599176][ T9] usb 3-1: Product: syz [ 94.607702][ T9] usb 3-1: Manufacturer: syz [ 94.617787][ T9] usb 3-1: SerialNumber: syz [ 94.626625][ T9] usb 3-1: config 0 descriptor?? [ 94.632509][ T9] smsc75xx v1.0.0 [ 94.643857][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 94.664621][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 94.926289][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 94.926305][ T36] audit: type=1400 audit(1789552894.473:426): avc: denied { create } for pid=1842 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.975945][ T36] audit: type=1400 audit(1789552894.503:427): avc: denied { create } for pid=1842 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.022797][ T36] audit: type=1400 audit(1789552894.513:428): avc: denied { create } for pid=1842 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.251900][ T36] audit: type=1400 audit(1789552895.793:429): avc: denied { read } for pid=1838 comm="syz.2.445" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.293140][ T36] audit: type=1400 audit(1789552895.793:430): avc: denied { open } for pid=1838 comm="syz.2.445" path="net:[4026532548]" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.340055][ T36] audit: type=1400 audit(1789552895.793:431): avc: denied { create } for pid=1838 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.156963][ T36] audit: type=1400 audit(1789552896.692:432): avc: denied { write } for pid=1856 comm="syz.3.448" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.298336][ T9] usb 3-1: USB disconnect, device number 19 [ 97.347178][ T310] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.536553][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 97.542812][ T310] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 97.552316][ T310] usb 5-1: config 0 has no interface number 0 [ 97.568865][ T310] usb 5-1: config 0 interface 184 has no altsetting 0 [ 97.578506][ T36] audit: type=1400 audit(1789552897.122:433): avc: denied { write } for pid=1866 comm="syz.2.452" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.586293][ T1867] FAULT_INJECTION: forcing a failure. [ 97.586293][ T1867] name failslab, interval 1, probability 0, space 0, times 0 [ 97.617214][ T310] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 97.626827][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.645194][ T310] usb 5-1: Product: syz [ 97.649669][ T1867] CPU: 1 UID: 0 PID: 1867 Comm: syz.2.452 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 97.649699][ T1867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.649712][ T1867] Call Trace: [ 97.649718][ T1867] [ 97.649727][ T1867] __dump_stack+0x21/0x30 [ 97.649759][ T1867] dump_stack_lvl+0x140/0x1c0 [ 97.649785][ T1867] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.649810][ T1867] ? kasan_save_alloc_info+0x3a/0x50 [ 97.649829][ T1867] ? __kasan_slab_alloc+0x73/0x90 [ 97.649851][ T1867] dump_stack+0x19/0x20 [ 97.649874][ T1867] should_fail_ex+0x3c2/0x510 [ 97.649896][ T1867] should_failslab+0xac/0x100 [ 97.649921][ T1867] __kmalloc_cache_noprof+0x41/0x470 [ 97.649943][ T1867] ? alloc_pipe_info+0xfb/0x5f0 [ 97.649964][ T1867] alloc_pipe_info+0xfb/0x5f0 [ 97.649983][ T1867] create_pipe_files+0x8f/0x6c0 [ 97.650004][ T1867] __do_pipe_flags+0x50/0x2f0 [ 97.650023][ T1867] do_pipe2+0xab/0x190 [ 97.650042][ T1867] ? xfd_validate_state+0x68/0x140 [ 97.650067][ T1867] ? pipe_fcntl+0x520/0x520 [ 97.650089][ T1867] __x64_sys_pipe+0x3e/0x50 [ 97.650108][ T1867] x64_sys_call+0xd3/0x2ee0 [ 97.650125][ T1867] do_syscall_64+0x57/0xf0 [ 97.650143][ T1867] ? clear_bhb_loop+0x50/0xa0 [ 97.650164][ T1867] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.650186][ T1867] RIP: 0033:0x7fce0c99e159 [ 97.650203][ T1867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.650220][ T1867] RSP: 002b:00007fce0d78b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 97.650241][ T1867] RAX: ffffffffffffffda RBX: 00007fce0cc25fa0 RCX: 00007fce0c99e159 [ 97.650257][ T1867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.650270][ T1867] RBP: 00007fce0ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 97.650282][ T1867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.650295][ T1867] R13: 00007fce0cc26038 R14: 00007fce0cc25fa0 R15: 00007ffd30897bb8 [ 97.650312][ T1867] [ 97.859659][ T310] usb 5-1: Manufacturer: syz [ 97.864281][ T310] usb 5-1: SerialNumber: syz [ 97.937760][ T310] usb 5-1: config 0 descriptor?? [ 97.940642][ T1868] SELinux: failed to load policy [ 97.946351][ T310] smsc75xx v1.0.0 [ 97.957440][ T36] audit: type=1400 audit(1789552897.482:434): avc: denied { load_policy } for pid=1866 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.034140][ T36] audit: type=1400 audit(1789552897.572:435): avc: denied { mount } for pid=1869 comm="syz.2.453" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.124253][ T1872] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 98.295593][ T1879] netlink: 32 bytes leftover after parsing attributes in process `syz.3.457'. [ 98.667791][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 98.751960][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 98.767056][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 98.786505][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 98.807145][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 98.827134][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 98.837626][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 98.846641][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 98.858091][ T310] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 98.866565][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.874969][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.886781][ T310] usb 5-1: USB disconnect, device number 5 [ 98.893617][ T31] usb 4-1: config 0 has no interface number 0 [ 98.900598][ T31] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 98.920678][ T31] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.943612][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 98.951942][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 98.971274][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.987168][ T31] usb 4-1: Product: syz [ 98.992947][ T31] usb 4-1: Manufacturer: syz [ 99.007170][ T31] usb 4-1: SerialNumber: syz [ 99.012538][ T31] usb 4-1: config 0 descriptor?? [ 99.027999][ T31] smsc75xx v1.0.0 [ 99.031663][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 99.052027][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 99.489246][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.496326][ T1889] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.506879][ T1889] bridge_slave_0: entered allmulticast mode [ 99.519111][ T1889] bridge_slave_0: entered promiscuous mode [ 99.525769][ T1892] netlink: 'syz.4.462': attribute type 12 has an invalid length. [ 99.534678][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.546467][ T1889] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.561677][ T1889] bridge_slave_1: entered allmulticast mode [ 99.568751][ T1889] bridge_slave_1: entered promiscuous mode [ 99.576664][ T350] bridge_slave_1: left allmulticast mode [ 99.582534][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.590498][ T350] bridge_slave_0: left allmulticast mode [ 99.596148][ T350] bridge_slave_0: left promiscuous mode [ 99.602016][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.699557][ T350] veth1_macvtap: left promiscuous mode [ 99.705108][ T350] veth0_vlan: left promiscuous mode [ 99.773553][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.780641][ T1889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.787922][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.794987][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.818139][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.825395][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.833624][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.847667][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.854729][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.863798][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.870855][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.901269][ T1889] veth0_vlan: entered promiscuous mode [ 99.916540][ T1889] veth1_macvtap: entered promiscuous mode [ 99.939976][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 99.939989][ T36] audit: type=1400 audit(1789552899.481:463): avc: denied { mounton } for pid=1889 comm="syz-executor" path="/root/syzkaller.h9suLt/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 99.984171][ T36] audit: type=1400 audit(1789552899.511:464): avc: denied { mounton } for pid=1889 comm="syz-executor" path="/root/syzkaller.h9suLt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.014919][ T36] audit: type=1400 audit(1789552899.511:465): avc: denied { mounton } for pid=1889 comm="syz-executor" path="/root/syzkaller.h9suLt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 100.043410][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.051679][ T36] audit: type=1400 audit(1789552899.511:466): avc: denied { mounton } for pid=1889 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 100.075084][ T36] audit: type=1400 audit(1789552899.511:467): avc: denied { mount } for pid=1889 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 100.105597][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 100.123523][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 100.133150][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.141392][ T31] usb 5-1: Product: syz [ 100.145635][ T31] usb 5-1: Manufacturer: syz [ 100.150718][ T31] usb 5-1: SerialNumber: syz [ 100.228615][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 100.360925][ T1896] fuse: Unknown parameter '.ä' [ 100.384457][ T1896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.389461][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.394104][ T1896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.411749][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.438685][ T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 100.447748][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.469383][ T10] usb 6-1: config 0 descriptor?? [ 100.504890][ T31] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.513040][ T31] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 100.530456][ T31] usb 5-1: USB disconnect, device number 6 [ 100.881936][ T10] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 100.889554][ T10] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 100.988954][ T10] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 100.996944][ T10] hid-steam 0003:28DE:1142.0009: No HID_FEATURE_REPORT submitted - nothing to read [ 101.007618][ T10] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 101.015647][ T10] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 101.172158][ T1907] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 101.400424][ T1911] cgroup: fork rejected by pids controller in /syz2 [ 101.429946][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.438809][ T1944] hid-steam 0003:28DE:1142.000A: pid 1944 passed too large report [ 101.569243][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 101.580329][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 101.596291][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.610339][ T31] usb 5-1: config 0 has no interface number 0 [ 101.619365][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 101.640905][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.650180][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.664678][ T31] usb 5-1: Product: syz [ 101.667607][ T10] usb 4-1: USB disconnect, device number 26 [ 101.674265][ T31] usb 5-1: Manufacturer: syz [ 101.688204][ T31] usb 5-1: SerialNumber: syz [ 101.699295][ T36] audit: type=1400 audit(1789552901.240:468): avc: denied { create } for pid=1958 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.734710][ T31] usb 5-1: config 0 descriptor?? [ 101.745437][ T31] smsc75xx v1.0.0 [ 101.749426][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 101.759353][ T36] audit: type=1400 audit(1789552901.240:469): avc: denied { write } for pid=1958 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.778756][ T36] audit: type=1400 audit(1789552901.240:470): avc: denied { create } for pid=1958 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.800638][ T36] audit: type=1400 audit(1789552901.240:471): avc: denied { setopt } for pid=1958 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.821272][ T45] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 101.830537][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.848709][ T45] usb 3-1: Product: syz [ 101.856205][ T45] usb 3-1: Manufacturer: syz [ 101.866224][ T45] usb 3-1: SerialNumber: syz [ 102.079331][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.087965][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.096263][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.104960][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.113233][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.121889][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.130214][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.138749][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.147035][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.155592][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.160333][ T36] audit: type=1400 audit(1789552901.700:472): avc: denied { write } for pid=1908 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.163519][ T1987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 102.195267][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 102.206514][ T1989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.215577][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 102.225413][ T1989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.233648][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 102.245247][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 102.245381][ T1995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.263161][ T1995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.279463][ T45] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 102.294136][ T45] usb 3-1: USB disconnect, device number 20 [ 102.542491][ T2102] rust_binder: 2099:2102 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 102.609763][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 102.759839][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 102.766222][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 102.774644][ T45] usb 3-1: config 0 has no interface number 0 [ 102.782053][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 102.797770][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 102.813081][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.825666][ T45] usb 3-1: Product: syz [ 102.829947][ T45] usb 3-1: Manufacturer: syz [ 102.834859][ T45] usb 3-1: SerialNumber: syz [ 102.845141][ T45] usb 3-1: config 0 descriptor?? [ 102.850966][ T45] smsc75xx v1.0.0 [ 103.100218][ T441] usb 6-1: USB disconnect, device number 2 [ 103.110834][ T441] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 103.250087][ T441] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 103.400178][ T441] usb 6-1: Using ep0 maxpacket: 32 [ 103.407793][ T441] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 103.417177][ T441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.425409][ T441] usb 6-1: Product: syz [ 103.429620][ T441] usb 6-1: Manufacturer: syz [ 103.434615][ T441] usb 6-1: SerialNumber: syz [ 103.651378][ T441] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.668208][ T441] usb 6-1: USB disconnect, device number 3 [ 103.689547][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 103.700493][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 103.709868][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 103.721017][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 103.730895][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 103.741351][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 103.750954][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 103.760570][ T45] usb 3-1: USB disconnect, device number 21 [ 103.981174][ T2116] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 104.208080][ T31] usb 5-1: USB disconnect, device number 7 [ 104.252785][ T2123] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.478'. [ 104.400852][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.500454][ T2143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 104.570786][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 104.577405][ T45] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.585889][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.597960][ T2150] zero sized request [ 104.601933][ T45] usb 6-1: config 0 has no interface number 0 [ 104.608181][ T45] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.630770][ T45] usb 6-1: config 0 interface 184 has no altsetting 0 [ 104.639819][ T45] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.649246][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.660766][ T45] usb 6-1: Product: syz [ 104.669240][ T45] usb 6-1: Manufacturer: syz [ 104.680816][ T45] usb 6-1: SerialNumber: syz [ 104.686239][ T45] usb 6-1: config 0 descriptor?? [ 104.692721][ T45] smsc75xx v1.0.0 [ 104.696701][ T2153] fuse: Unknown parameter 'root' [ 104.700992][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 104.712347][ T45] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 105.533433][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 105.533459][ T36] audit: type=1400 audit(1789552905.078:483): avc: denied { map } for pid=2165 comm="syz.4.487" path="socket:[22700]" dev="sockfs" ino=22700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 105.801368][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.971448][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 105.991967][ T45] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.005746][ T45] usb 5-1: config 0 has no interface number 0 [ 106.021461][ T45] usb 5-1: config 0 interface 184 has no altsetting 0 [ 106.032813][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.061517][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.079770][ T45] usb 5-1: Product: syz [ 106.084932][ T45] usb 5-1: Manufacturer: syz [ 106.089538][ T45] usb 5-1: SerialNumber: syz [ 106.095136][ T45] usb 5-1: config 0 descriptor?? [ 106.101925][ T45] smsc75xx v1.0.0 [ 106.851864][ T36] audit: type=1400 audit(1789552906.387:484): avc: denied { write } for pid=2179 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.911252][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 106.922727][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 106.932833][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 106.948900][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 106.964817][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 106.991938][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 107.003429][ T45] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 107.013422][ T45] usb 5-1: USB disconnect, device number 8 [ 107.102531][ T36] audit: type=1400 audit(1789552906.647:485): avc: denied { read write } for pid=2185 comm="syz.2.493" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.127257][ T36] audit: type=1400 audit(1789552906.647:486): avc: denied { open } for pid=2185 comm="syz.2.493" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.151632][ T36] audit: type=1400 audit(1789552906.667:487): avc: denied { ioctl } for pid=2185 comm="syz.2.493" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.323718][ T45] usb 6-1: USB disconnect, device number 4 [ 107.326297][ T2205] pim6reg1: entered promiscuous mode [ 107.345895][ T2205] pim6reg1: entered allmulticast mode [ 107.367224][ T36] audit: type=1400 audit(1789552906.907:488): avc: denied { nlmsg_write } for pid=2204 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.464626][ T2213] netlink: 'syz.4.500': attribute type 27 has an invalid length. [ 107.488123][ T2213] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 107.519280][ T36] audit: type=1400 audit(1789552907.057:489): avc: denied { create } for pid=2212 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.617635][ T36] audit: type=1400 audit(1789552907.157:490): avc: denied { mounton } for pid=2221 comm="syz.4.504" path="/40/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 107.641684][ T36] audit: type=1326 audit(1789552907.187:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2223 comm="syz.5.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bc219e159 code=0x0 [ 107.732659][ T441] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 107.892407][ T441] usb 3-1: Using ep0 maxpacket: 8 [ 107.899015][ T441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.908468][ T441] usb 3-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 107.921209][ T441] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 107.933280][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.941394][ T441] usb 3-1: Product: syz [ 107.948985][ T441] usb 3-1: Manufacturer: syz [ 107.954031][ T441] usb 3-1: SerialNumber: syz [ 108.072521][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.165172][ T441] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.186173][ T441] usb 3-1: USB disconnect, device number 22 [ 108.232856][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 108.239491][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.247971][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.258435][ T10] usb 5-1: config 0 has no interface number 0 [ 108.265033][ T10] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.278363][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 108.286715][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.296497][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.304729][ T10] usb 5-1: Product: syz [ 108.309058][ T10] usb 5-1: Manufacturer: syz [ 108.313976][ T10] usb 5-1: SerialNumber: syz [ 108.319371][ T10] usb 5-1: config 0 descriptor?? [ 108.326128][ T10] smsc75xx v1.0.0 [ 108.329923][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 108.340459][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 108.684767][ T36] audit: type=1400 audit(1789552908.226:492): avc: denied { mount } for pid=2236 comm="syz.2.510" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 108.713939][ T441] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 108.862915][ T441] usb 6-1: Using ep0 maxpacket: 32 [ 108.869314][ T441] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.878293][ T441] usb 6-1: config 0 has no interface number 0 [ 108.885068][ T441] usb 6-1: config 0 interface 184 has no altsetting 0 [ 108.893611][ T441] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.902894][ T441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.910886][ T441] usb 6-1: Product: syz [ 108.915476][ T441] usb 6-1: Manufacturer: syz [ 108.920076][ T441] usb 6-1: SerialNumber: syz [ 108.925801][ T441] usb 6-1: config 0 descriptor?? [ 108.931621][ T441] smsc75xx v1.0.0 [ 108.953151][ T657] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 109.123708][ T657] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.143722][ T657] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.163040][ T657] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.172544][ T657] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 109.183996][ T657] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 109.197599][ T657] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.210039][ T657] usb 3-1: config 1 interface 1 has no altsetting 0 [ 109.218925][ T657] usb 3-1: string descriptor 0 read error: -22 [ 109.225444][ T657] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 109.234665][ T657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.735426][ T441] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 109.746948][ T441] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 109.758716][ T441] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 109.779927][ T441] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 109.800734][ T441] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 109.811289][ T441] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.820899][ T441] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 109.830495][ T441] usb 6-1: USB disconnect, device number 5 [ 110.048617][ T657] usb 3-1: USB disconnect, device number 23 [ 110.565378][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 110.565394][ T36] audit: type=1400 audit(1789552910.105:494): avc: denied { unmount } for pid=1068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 110.728300][ T36] audit: type=1400 audit(1789552910.265:495): avc: denied { write } for pid=2263 comm="syz.3.518" name="ip6_tables_matches" dev="proc" ino=4026532529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 110.783950][ T36] audit: type=1400 audit(1789552910.315:496): avc: denied { create } for pid=2263 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.848831][ T36] audit: type=1400 audit(1789552910.325:497): avc: denied { connect } for pid=2263 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.961635][ T657] usb 5-1: USB disconnect, device number 9 [ 111.023986][ T332] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 111.063995][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 111.184048][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 111.190396][ T332] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 111.194066][ T36] audit: type=1400 audit(1789552910.725:498): avc: denied { write } for pid=2276 comm="syz.5.523" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.198957][ T332] usb 3-1: config 0 has no interface number 0 [ 111.226441][ T332] usb 3-1: config 0 interface 184 has no altsetting 0 [ 111.234603][ T332] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 111.243852][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.252933][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 111.263912][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 111.274030][ T332] usb 3-1: Product: syz [ 111.278227][ T332] usb 3-1: Manufacturer: syz [ 111.282818][ T332] usb 3-1: SerialNumber: syz [ 111.298470][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 111.308045][ T332] usb 3-1: config 0 descriptor?? [ 111.313081][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.313260][ T36] audit: type=1400 audit(1789552910.845:499): avc: denied { connect } for pid=2284 comm="syz.4.526" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.321888][ T332] smsc75xx v1.0.0 [ 111.345126][ T10] usb 4-1: Product: syz [ 111.349294][ T10] usb 4-1: Manufacturer: syz [ 111.353887][ T10] usb 4-1: SerialNumber: syz [ 111.360668][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 111.484235][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.563663][ T441] usb 4-1: USB disconnect, device number 27 [ 111.584266][ T657] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.635389][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.646461][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.656260][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 111.665519][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.674686][ T9] usb 6-1: config 0 descriptor?? [ 111.724321][ T657] usb 5-1: device descriptor read/64, error -71 [ 111.964477][ T657] usb 5-1: device descriptor read/64, error -71 [ 112.082445][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x2 [ 112.094669][ T9] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 112.134539][ T332] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 112.145488][ T332] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 112.155159][ T332] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 112.166347][ T332] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 112.176130][ T332] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 112.186465][ T332] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 112.196357][ T332] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 112.207400][ T332] usb 3-1: USB disconnect, device number 24 [ 112.214602][ T657] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 112.281754][ T2277] rust_binder: Write failure EINVAL in pid:38 [ 112.344647][ T657] usb 5-1: device descriptor read/64, error -71 [ 112.482563][ T36] audit: type=1400 audit(1789552912.014:500): avc: denied { read } for pid=2276 comm="syz.5.523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.594781][ T657] usb 5-1: device descriptor read/64, error -71 [ 112.702286][ T9] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 112.709789][ T9] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 112.716377][ T657] usb usb5-port1: attempt power cycle [ 112.727103][ T9] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 112.747667][ T9] usb 6-1: USB disconnect, device number 6 [ 112.755732][ T36] audit: type=1400 audit(1789552912.294:501): avc: denied { bind } for pid=2293 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.778092][ T36] audit: type=1400 audit(1789552912.314:502): avc: denied { listen } for pid=2293 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.799261][ T36] audit: type=1400 audit(1789552912.314:503): avc: denied { setopt } for pid=2293 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.826733][ T2295] FAULT_INJECTION: forcing a failure. [ 112.826733][ T2295] name failslab, interval 1, probability 0, space 0, times 0 [ 112.841811][ T2295] CPU: 0 UID: 0 PID: 2295 Comm: syz.2.529 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 112.841842][ T2295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.841855][ T2295] Call Trace: [ 112.841861][ T2295] [ 112.841868][ T2295] __dump_stack+0x21/0x30 [ 112.841901][ T2295] dump_stack_lvl+0x140/0x1c0 [ 112.841926][ T2295] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.841953][ T2295] dump_stack+0x19/0x20 [ 112.841976][ T2295] should_fail_ex+0x3c2/0x510 [ 112.841998][ T2295] should_failslab+0xac/0x100 [ 112.842021][ T2295] kmem_cache_alloc_noprof+0x42/0x410 [ 112.842040][ T2295] ? security_file_alloc+0x49/0x220 [ 112.842057][ T2295] ? kasan_save_alloc_info+0x3a/0x50 [ 112.842075][ T2295] security_file_alloc+0x49/0x220 [ 112.842093][ T2295] init_file+0x9e/0x210 [ 112.842115][ T2295] alloc_empty_file+0xd9/0x270 [ 112.842138][ T2295] dentry_open+0x4b/0xb0 [ 112.842161][ T2295] __se_sys_open_tree+0x798/0x900 [ 112.842180][ T2295] ? fput+0x1a4/0x230 [ 112.842202][ T2295] ? __x64_sys_open_tree+0xa0/0xa0 [ 112.842221][ T2295] ? __kasan_check_write+0x18/0x20 [ 112.842238][ T2295] ? fpregs_restore_userregs+0x11c/0x260 [ 112.842261][ T2295] __x64_sys_open_tree+0x7f/0xa0 [ 112.842279][ T2295] x64_sys_call+0x2d58/0x2ee0 [ 112.842296][ T2295] do_syscall_64+0x57/0xf0 [ 112.842313][ T2295] ? clear_bhb_loop+0x50/0xa0 [ 112.842335][ T2295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.842356][ T2295] RIP: 0033:0x7fce0c99e159 [ 112.842373][ T2295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.842388][ T2295] RSP: 002b:00007fce0b3f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 112.842409][ T2295] RAX: ffffffffffffffda RBX: 00007fce0cc26090 RCX: 00007fce0c99e159 [ 112.842423][ T2295] RDX: 0000000000089901 RSI: 0000200000000640 RDI: 0000000000000007 [ 112.842436][ T2295] RBP: 00007fce0ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 112.842448][ T2295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.842460][ T2295] R13: 00007fce0cc26128 R14: 00007fce0cc26090 R15: 00007ffd30897bb8 [ 112.842475][ T2295] [ 113.065006][ T657] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.095957][ T657] usb 5-1: device descriptor read/8, error -71 [ 113.245083][ T657] usb 5-1: device descriptor read/8, error -71 [ 113.355146][ T441] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 113.485203][ T657] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 113.509121][ T2302] pimreg: tun_chr_ioctl cmd 1074025677 [ 113.514698][ T2302] pimreg: linktype set to 0 [ 113.519616][ T441] usb 3-1: Using ep0 maxpacket: 32 [ 113.526314][ T657] usb 5-1: device descriptor read/8, error -71 [ 113.532612][ T2302] mmap: syz.5.532 (2302): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 113.545344][ T441] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 113.553518][ T441] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.564153][ T441] usb 3-1: config 0 has no interface number 0 [ 113.570866][ T441] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.584096][ T441] usb 3-1: config 0 interface 184 has no altsetting 0 [ 113.592550][ T441] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.601896][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.610057][ T441] usb 3-1: Product: syz [ 113.619410][ T441] usb 3-1: Manufacturer: syz [ 113.624176][ T441] usb 3-1: SerialNumber: syz [ 113.631813][ T441] usb 3-1: config 0 descriptor?? [ 113.638468][ T441] smsc75xx v1.0.0 [ 113.645378][ T441] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 113.655775][ T441] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 113.664616][ T657] usb 5-1: device descriptor read/8, error -71 [ 113.781257][ T657] usb usb5-port1: unable to enumerate USB device [ 114.125509][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 114.275616][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 114.282005][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 114.290551][ T9] usb 6-1: config 0 has no interface number 0 [ 114.296910][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 114.305253][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 114.314783][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.323024][ T9] usb 6-1: Product: syz [ 114.327554][ T9] usb 6-1: Manufacturer: syz [ 114.332248][ T9] usb 6-1: SerialNumber: syz [ 114.343940][ T9] usb 6-1: config 0 descriptor?? [ 114.356408][ T9] smsc75xx v1.0.0 [ 114.716192][ T332] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.845915][ T332] usb 5-1: device descriptor read/64, error -71 [ 115.096007][ T332] usb 5-1: device descriptor read/64, error -71 [ 115.160231][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 115.171351][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 115.181463][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 115.206057][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 115.216005][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 115.226538][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 115.235975][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 115.245433][ T9] usb 6-1: USB disconnect, device number 7 [ 115.336221][ T332] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 115.466236][ T332] usb 5-1: device descriptor read/64, error -71 [ 115.706318][ T332] usb 5-1: device descriptor read/64, error -71 [ 115.816479][ T332] usb usb5-port1: attempt power cycle [ 115.873810][ T2339] batadv_slave_0: entered promiscuous mode [ 115.880323][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 115.880337][ T36] audit: type=1400 audit(1789552915.423:512): avc: denied { name_bind } for pid=2338 comm="syz.5.545" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 115.908848][ T2338] batadv_slave_0: left promiscuous mode [ 115.924463][ T36] audit: type=1400 audit(1789552915.443:513): avc: denied { node_bind } for pid=2338 comm="syz.5.545" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 116.176544][ T332] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 116.207555][ T332] usb 5-1: device descriptor read/8, error -71 [ 116.230767][ T36] audit: type=1400 audit(1789552915.763:514): avc: denied { mount } for pid=2347 comm="syz.3.549" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.253082][ T36] audit: type=1400 audit(1789552915.763:515): avc: denied { execute } for pid=2347 comm="syz.3.549" name="file0" dev="tmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.277546][ T36] audit: type=1400 audit(1789552915.763:516): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.278120][ T657] usb 3-1: USB disconnect, device number 25 [ 116.303472][ T441] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 116.337671][ T332] usb 5-1: device descriptor read/8, error -71 [ 116.371580][ T2352] SELinux: truncated policydb string identifier [ 116.378039][ T2352] SELinux: failed to load policy [ 116.383530][ T36] audit: type=1400 audit(1789552915.913:517): avc: denied { search } for pid=2351 comm="syz.2.551" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.405744][ T36] audit: type=1400 audit(1789552915.913:518): avc: denied { read } for pid=2351 comm="syz.2.551" name="trace" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.428956][ T36] audit: type=1400 audit(1789552915.913:519): avc: denied { open } for pid=2351 comm="syz.2.551" path="/96/trace/trace" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.496716][ T441] usb 6-1: Using ep0 maxpacket: 32 [ 116.509133][ T441] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.526706][ T441] usb 6-1: config 0 has no interface number 0 [ 116.535611][ T441] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.544746][ T441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.552848][ T441] usb 6-1: Product: syz [ 116.557097][ T441] usb 6-1: Manufacturer: syz [ 116.561794][ T441] usb 6-1: SerialNumber: syz [ 116.567123][ T441] usb 6-1: config 0 descriptor?? [ 116.572940][ T441] smsc95xx v2.0.0 [ 116.576772][ T332] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 116.597845][ T332] usb 5-1: device descriptor read/8, error -71 [ 116.716835][ T657] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 116.737839][ T332] usb 5-1: device descriptor read/8, error -71 [ 116.846981][ T332] usb usb5-port1: unable to enumerate USB device [ 116.876888][ T657] usb 3-1: Using ep0 maxpacket: 32 [ 116.883186][ T657] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.891444][ T657] usb 3-1: config 0 has no interface number 0 [ 116.897602][ T657] usb 3-1: config 0 interface 184 has no altsetting 0 [ 116.905801][ T657] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.914954][ T657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.922975][ T657] usb 3-1: Product: syz [ 116.927205][ T657] usb 3-1: Manufacturer: syz [ 116.931813][ T657] usb 3-1: SerialNumber: syz [ 116.937287][ T657] usb 3-1: config 0 descriptor?? [ 116.943124][ T657] smsc75xx v1.0.0 [ 116.975351][ T441] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 116.986581][ T2346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.995202][ T2346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.003031][ T441] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.214295][ T441] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.225710][ T441] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 117.235246][ T441] usb 6-1: USB disconnect, device number 8 [ 117.749690][ T36] audit: type=1400 audit(1789552917.282:520): avc: denied { append } for pid=2375 comm="syz.5.561" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.757346][ T657] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 117.784409][ T36] audit: type=1400 audit(1789552917.312:521): avc: denied { append } for pid=2375 comm="syz.5.561" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.807351][ T657] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 117.816768][ T657] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.827599][ T657] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 117.837242][ T657] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 117.847725][ T657] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 117.857157][ T657] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 117.868034][ T657] usb 3-1: USB disconnect, device number 26 [ 118.017472][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 118.167543][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 118.173943][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 118.182442][ T9] usb 5-1: config 0 has no interface number 0 [ 118.188807][ T9] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.199090][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 118.207456][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 118.216925][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.225190][ T9] usb 5-1: Product: syz [ 118.229638][ T9] usb 5-1: Manufacturer: syz [ 118.234324][ T9] usb 5-1: SerialNumber: syz [ 118.240024][ T9] usb 5-1: config 0 descriptor?? [ 118.245948][ T9] smsc75xx v1.0.0 [ 118.250132][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 118.260604][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 119.168052][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 119.318116][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 119.328834][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.337093][ T31] usb 3-1: config 0 has no interface number 0 [ 119.343358][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 119.351802][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.361103][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.369271][ T31] usb 3-1: Product: syz [ 119.373506][ T31] usb 3-1: Manufacturer: syz [ 119.378331][ T31] usb 3-1: SerialNumber: syz [ 119.388376][ T31] usb 3-1: config 0 descriptor?? [ 119.394250][ T31] smsc75xx v1.0.0 [ 119.881577][ T2438] syzkaller1: left promiscuous mode [ 119.886830][ T2438] syzkaller1: left allmulticast mode [ 119.895607][ T2437] FAULT_INJECTION: forcing a failure. [ 119.895607][ T2437] name fail_futex, interval 1, probability 0, space 0, times 1 [ 119.908768][ T2437] CPU: 0 UID: 0 PID: 2437 Comm: syz.3.577 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 119.908800][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.908812][ T2437] Call Trace: [ 119.908820][ T2437] [ 119.908827][ T2437] __dump_stack+0x21/0x30 [ 119.908855][ T2437] dump_stack_lvl+0x140/0x1c0 [ 119.908879][ T2437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.908903][ T2437] ? __cfi_cmp_ex_search+0x10/0x10 [ 119.908928][ T2437] ? __get_user_8+0x18/0x40 [ 119.908949][ T2437] dump_stack+0x19/0x20 [ 119.908971][ T2437] should_fail_ex+0x3c2/0x510 [ 119.908993][ T2437] should_fail+0xf/0x20 [ 119.909012][ T2437] get_futex_key+0x178/0x940 [ 119.909035][ T2437] ? __cfi_get_futex_key+0x10/0x10 [ 119.909056][ T2437] ? __cfi_futex_wake_mark+0x10/0x10 [ 119.909073][ T2437] futex_wake+0x150/0x950 [ 119.909091][ T2437] ? __cfi_futex_wake+0x10/0x10 [ 119.909106][ T2437] ? find_vma+0xd3/0x120 [ 119.909125][ T2437] ? kernelmode_fixup_or_oops+0x83/0x100 [ 119.909144][ T2437] ? __seccomp_filter+0x897/0x1b70 [ 119.909166][ T2437] do_futex+0x37d/0x510 [ 119.909188][ T2437] ? __fget_files+0x2bc/0x330 [ 119.909210][ T2437] ? __cfi_do_futex+0x10/0x10 [ 119.909231][ T2437] ? fdget+0x188/0x1e0 [ 119.909251][ T2437] __se_sys_futex+0x13c/0x320 [ 119.909274][ T2437] ? __x64_sys_futex+0x110/0x110 [ 119.909298][ T2437] __x64_sys_futex+0xe9/0x110 [ 119.909321][ T2437] x64_sys_call+0x227f/0x2ee0 [ 119.909337][ T2437] do_syscall_64+0x57/0xf0 [ 119.909354][ T2437] ? clear_bhb_loop+0x50/0xa0 [ 119.909375][ T2437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.909396][ T2437] RIP: 0033:0x7ff09af9e159 [ 119.909411][ T2437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.909426][ T2437] RSP: 002b:00007ff09bf350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.909453][ T2437] RAX: ffffffffffffffda RBX: 00007ff09b225fa8 RCX: 00007ff09af9e159 [ 119.909467][ T2437] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff09b225fac [ 119.909480][ T2437] RBP: 00007ff09b225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 119.909493][ T2437] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.909506][ T2437] R13: 00007ff09b226038 R14: 00007ffc57dc14a0 R15: 00007ffc57dc1588 [ 119.909521][ T2437] [ 120.199922][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 120.223839][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 120.239469][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 120.253592][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 120.272779][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 120.285507][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 120.295104][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 120.305498][ T31] usb 3-1: USB disconnect, device number 27 [ 120.324824][ T409] vlan0: left allmulticast mode [ 120.340472][ T409] veth0_vlan: left allmulticast mode [ 120.345810][ T409] vlan0: left promiscuous mode [ 120.362071][ T409] bridge0: port 3(vlan0) entered disabled state [ 120.378863][ T409] bridge_slave_1: left allmulticast mode [ 120.386907][ T409] bridge_slave_1: left promiscuous mode [ 120.398691][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.413801][ T409] bridge_slave_0: left allmulticast mode [ 120.424940][ T409] bridge_slave_0: left promiscuous mode [ 120.438934][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.598607][ T2440] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.605808][ T2440] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.612990][ T2440] bridge_slave_0: entered allmulticast mode [ 120.619394][ T2440] bridge_slave_0: entered promiscuous mode [ 120.626375][ T409] veth1_macvtap: left promiscuous mode [ 120.633356][ T409] veth0_vlan: left promiscuous mode [ 120.692317][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.699443][ T2440] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.706515][ T2440] bridge_slave_1: entered allmulticast mode [ 120.719869][ T2440] bridge_slave_1: entered promiscuous mode [ 120.801848][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.808954][ T2440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.816231][ T2440] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.823290][ T2440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.852517][ T2430] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.860492][ T2430] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.881825][ T657] usb 5-1: USB disconnect, device number 18 [ 120.895920][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.903004][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.927386][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.934496][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.956260][ T2440] veth0_vlan: entered promiscuous mode [ 120.968338][ T2440] veth1_macvtap: entered promiscuous mode [ 121.009600][ T2451] syz.6.587 uses obsolete (PF_INET,SOCK_PACKET) [ 122.119561][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 122.189560][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 122.216364][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 122.216380][ T36] audit: type=1400 audit(1789552921.750:525): avc: denied { open } for pid=2482 comm="syz.4.593" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=25587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.269597][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 122.275863][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.284855][ T10] usb 6-1: config 0 has no interface number 0 [ 122.291192][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 122.299491][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.309125][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.317357][ T10] usb 6-1: Product: syz [ 122.321832][ T10] usb 6-1: Manufacturer: syz [ 122.326555][ T10] usb 6-1: SerialNumber: syz [ 122.332064][ T10] usb 6-1: config 0 descriptor?? [ 122.337933][ T10] smsc75xx v1.0.0 [ 122.341658][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 122.349301][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.357823][ T9] usb 7-1: config 0 has no interface number 0 [ 122.364329][ T9] usb 7-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.374548][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 122.382997][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.392695][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.401276][ T9] usb 7-1: Product: syz [ 122.405528][ T9] usb 7-1: Manufacturer: syz [ 122.410485][ T9] usb 7-1: SerialNumber: syz [ 122.416052][ T9] usb 7-1: config 0 descriptor?? [ 122.422168][ T9] smsc75xx v1.0.0 [ 122.425945][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 122.436472][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 122.489707][ T441] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 122.639788][ T441] usb 5-1: device descriptor read/64, error -71 [ 122.879899][ T441] usb 5-1: device descriptor read/64, error -71 [ 123.140058][ T441] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 123.147981][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 123.158917][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 123.168451][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 123.179476][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 123.189379][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 123.199899][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 123.209751][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 123.219320][ T10] usb 6-1: USB disconnect, device number 9 [ 123.270099][ T441] usb 5-1: device descriptor read/64, error -71 [ 123.510247][ T441] usb 5-1: device descriptor read/64, error -71 [ 123.626701][ T441] usb usb5-port1: attempt power cycle [ 123.666220][ T36] audit: type=1400 audit(1789552923.199:526): avc: denied { read write } for pid=2490 comm="syz.5.595" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.689863][ T36] audit: type=1400 audit(1789552923.199:527): avc: denied { open } for pid=2490 comm="syz.5.595" path="/31/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.715859][ T36] audit: type=1400 audit(1789552923.199:528): avc: denied { ioctl } for pid=2490 comm="syz.5.595" path="/31/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.744807][ T36] audit: type=1400 audit(1789552923.199:529): avc: denied { mount } for pid=2490 comm="syz.5.595" name="/" dev="ramfs" ino=27654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 123.767090][ T36] audit: type=1400 audit(1789552923.199:530): avc: denied { execute } for pid=2490 comm="syz.5.595" path="/memory.swap.current" dev="ramfs" ino=27655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 123.913464][ T36] audit: type=1400 audit(1789552923.449:531): avc: denied { execute } for pid=2500 comm="syz.5.599" path="/syzcgroup/cpu/syz5/memory.force_empty" dev="cgroup" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 123.939027][ T36] audit: type=1400 audit(1789552923.469:532): avc: denied { read } for pid=2500 comm="syz.5.599" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.963506][ T36] audit: type=1400 audit(1789552923.469:533): avc: denied { open } for pid=2500 comm="syz.5.599" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.020472][ T441] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 124.041424][ T441] usb 5-1: device descriptor read/8, error -71 [ 124.171683][ T441] usb 5-1: device descriptor read/8, error -71 [ 124.423045][ T441] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 124.461730][ T441] usb 5-1: device descriptor read/8, error -71 [ 124.603341][ T441] usb 5-1: device descriptor read/8, error -71 [ 124.714243][ T441] usb usb5-port1: unable to enumerate USB device [ 125.030965][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 125.093657][ T441] usb 7-1: USB disconnect, device number 2 [ 125.202875][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.213977][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.223811][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.232709][ T10] usb 3-1: config 0 descriptor?? [ 125.286801][ T2526] overlay: ./file0 is not a directory [ 125.411178][ T441] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 125.501212][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 125.561250][ T441] usb 7-1: Using ep0 maxpacket: 32 [ 125.567540][ T441] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.576271][ T441] usb 7-1: config 0 has no interface number 0 [ 125.582621][ T441] usb 7-1: config 0 interface 184 has no altsetting 0 [ 125.591062][ T441] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.600500][ T441] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.608893][ T441] usb 7-1: Product: syz [ 125.613325][ T441] usb 7-1: Manufacturer: syz [ 125.618028][ T441] usb 7-1: SerialNumber: syz [ 125.631487][ T441] usb 7-1: config 0 descriptor?? [ 125.636564][ T31] usb 6-1: device descriptor read/64, error -71 [ 125.643697][ T441] smsc75xx v1.0.0 [ 125.648423][ T10] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 125.658817][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input14 [ 125.723985][ T10] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 125.850905][ T2518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.859697][ T2518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.881393][ T31] usb 6-1: device descriptor read/64, error -71 [ 126.141541][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 126.245855][ T441] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 126.256932][ T441] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.267672][ T441] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 126.278754][ T31] usb 6-1: device descriptor read/64, error -71 [ 126.290932][ T441] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 126.302825][ T441] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 126.313473][ T441] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 126.323651][ T441] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 126.334706][ T441] usb 7-1: USB disconnect, device number 3 [ 126.541729][ T31] usb 6-1: device descriptor read/64, error -71 [ 126.584712][ T36] audit: type=1400 audit(1789552926.117:534): avc: denied { read } for pid=2541 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 126.651926][ T31] usb usb6-port1: attempt power cycle Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: [ 126.992514][ T31] usb 6-1: new high-speed USB device number 12 using dummy_hcd stopped /usr/sbin/crond (pid 194) OK [ 127.023018][ T31] usb 6-1: device descriptor read/8, error -71 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 127.172207][ T31] usb 6-1: device descriptor read/8, error -71 [ 127.238078][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 127.238097][ T36] audit: type=1400 audit(1789552926.767:541): avc: denied { unlink } for pid=149 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK Stopping iptables: [ 127.343391][ T36] audit: type=1400 audit(1789552926.877:542): avc: denied { read write } for pid=2571 comm="iptables" path="/dev/console" dev="rootfs" ino=36 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 127.432175][ T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 127.462812][ T31] usb 6-1: device descriptor read/8, error -71 [ 127.487846][ T36] audit: type=1400 audit(1789552927.017:543): avc: denied { search } for pid=2571 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 127.514027][ T36] audit: type=1400 audit(1789552927.017:544): avc: denied { write } for pid=2571 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.536791][ T36] audit: type=1400 audit(1789552927.017:545): avc: denied { add_name } for pid=2571 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 127.574780][ T36] audit: type=1400 audit(1789552927.017:546): avc: denied { create } for pid=2571 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.606296][ T36] audit: type=1400 audit(1789552927.017:547): avc: denied { read open } for pid=2571 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=624 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.630389][ T36] audit: type=1400 audit(1789552927.017:548): avc: denied { lock } for pid=2571 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=624 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.653717][ T31] usb 6-1: device descriptor read/8, error -71 done [ 127.762422][ T31] usb usb6-port1: unable to enumerate USB device [ 127.805217][ T31] usb 3-1: USB disconnect, device number 28 [ 127.821980][ T2579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. Stopping klogd: OK Stopping acpid: [ 128.003340][ T36] audit: type=1400 audit(1789552927.527:549): avc: denied { write } for pid=95 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.024367][ T36] audit: type=1400 audit(1789552927.527:550): avc: denied { remove_name } for pid=95 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.312675][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 128.472689][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 128.479053][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.487451][ T31] usb 3-1: config 0 has no interface number 0 [ 128.494433][ T31] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.504521][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 128.512901][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.522105][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.530205][ T31] usb 3-1: Product: syz [ 128.534500][ T31] usb 3-1: Manufacturer: syz [ 128.539170][ T31] usb 3-1: SerialNumber: syz [ 128.544654][ T31] usb 3-1: config 0 descriptor?? [ 128.550479][ T31] smsc75xx v1.0.0 [ 128.554203][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 128.564490][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 128.852892][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 129.004098][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.013914][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 OK [ 129.033058][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 Stopping syslogd: [ 129.051114][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 stopped /sbin/syslogd (pid 92) OK [ 129.070285][ T10] usb 5-1: Product: syz [ 129.078954][ T10] usb 5-1: Manufacturer: syz [ 129.087928][ T10] usb 5-1: SerialNumber: syz [ 129.103553][ T10] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 129.111346][ T10] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 129.111346][ T10] Please send a copy of this message to and umount: can't remount debugfs read-only Connection to 10.128.0.225 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 129.322095][ T583] usb 3-1: USB disconnect, device number 29 [ 129.351166][ T10] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 129.360668][ T10] usb 5-1: USB disconnect, device number 23 [ 129.484241][ T409] bridge_slave_1: left allmulticast mode [ 129.489926][ T409] bridge_slave_1: left promiscuous mode [ 129.495651][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.503094][ T409] bridge_slave_0: left allmulticast mode [ 129.508832][ T409] bridge_slave_0: left promiscuous mode [ 129.514481][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.715220][ T409] veth1_macvtap: left promiscuous mode [ 129.720727][ T409] veth0_vlan: left promiscuous mode [ 129.894638][ T409] ------------[ cut here ]------------ [ 129.900124][ T409] WARNING: CPU: 0 PID: 409 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 129.910151][ T409] Modules linked in: [ 129.914069][ T409] CPU: 0 UID: 0 PID: 409 Comm: kworker/u8:9 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 129.925699][ T409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.935763][ T409] Workqueue: netns cleanup_net [ 129.940517][ T409] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 129.946528][ T409] Code: e8 a1 b4 d5 fc 4b 83 3c 3e 00 75 19 e8 15 d1 7c fc 49 81 ff f8 07 00 00 74 1b e8 07 d1 7c fc 49 83 c7 08 eb c9 e8 fc d0 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 129.966154][ T409] RSP: 0018:ffffc9000cb17b90 EFLAGS: 00010293 [ 129.972223][ T409] RAX: ffffffff850aa914 RBX: ffff88812e918000 RCX: ffff8881155d8000 [ 129.980212][ T409] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f807f0 [ 129.988202][ T409] RBP: ffffc9000cb17bb0 R08: 0000000000000003 R09: 0000000000000004 [ 129.996203][ T409] R10: dffffc0000000000 R11: fffff52001962f04 R12: dffffc0000000000 [ 130.004268][ T409] R13: dffffc0000000000 R14: ffff888103f80000 R15: 00000000000007f0 [ 130.012236][ T409] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 130.021184][ T409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.027801][ T409] CR2: 00007f5dc01f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 130.035787][ T409] Call Trace: [ 130.039062][ T409] [ 130.041971][ T409] cleanup_net+0x6bd/0xc90 [ 130.046385][ T409] ? __cfi_cleanup_net+0x10/0x10 [ 130.051312][ T409] ? kick_pool+0xb9/0x540 [ 130.055646][ T409] process_scheduled_works+0x7f4/0x1060 [ 130.061176][ T409] worker_thread+0xc99/0x13f0 [ 130.065863][ T409] kthread+0x2c4/0x360 [ 130.069931][ T409] ? __cfi_worker_thread+0x10/0x10 [ 130.075043][ T409] ? __cfi_kthread+0x10/0x10 [ 130.079626][ T409] ret_from_fork+0x64/0xa0 [ 130.084159][ T409] ? __cfi_kthread+0x10/0x10 [ 130.088755][ T409] ret_from_fork_asm+0x1a/0x30 [ 130.093628][ T409] [ 130.096630][ T409] ---[ end trace 0000000000000000 ]--- [ 130.102296][ T409] ------------[ cut here ]------------ [ 130.107785][ T409] WARNING: CPU: 1 PID: 409 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 130.118056][ T409] Modules linked in: [ 130.121937][ T409] CPU: 1 UID: 0 PID: 409 Comm: kworker/u8:9 Tainted: G W syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 130.135041][ T409] Tainted: [W]=WARN [ 130.138827][ T409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.148881][ T409] Workqueue: netns cleanup_net [ 130.153659][ T409] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 130.159719][ T409] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c0 d0 7c fc 49 81 ff f8 07 00 00 74 1b e8 b2 d0 7c fc 49 83 c7 08 eb c5 e8 a7 d0 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 97 d0 7c fc 5b 41 5c 41 5e 41 [ 130.179338][ T409] RSP: 0018:ffffc9000cb17b90 EFLAGS: 00010293 [ 130.185470][ T409] RAX: ffffffff850aa969 RBX: ffff888103f80800 RCX: ffff8881155d8000 [ 130.193431][ T409] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f80808 [ 130.201422][ T409] RBP: ffffc9000cb17bb0 R08: 0000000000000003 R09: 0000000000000004 [ 130.209404][ T409] R10: dffffc0000000000 R11: fffff52001962f04 R12: dffffc0000000000 [ 130.217381][ T409] R13: dffffc0000000000 R14: ffff888103f80000 R15: 0000000000000008 [ 130.225378][ T409] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 130.234335][ T409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.240906][ T409] CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 130.248880][ T409] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000083 [ 130.256873][ T409] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 130.264885][ T409] Call Trace: [ 130.268165][ T409] [ 130.271078][ T409] cleanup_net+0x6bd/0xc90 [ 130.275506][ T409] ? __cfi_cleanup_net+0x10/0x10 [ 130.280467][ T409] ? kick_pool+0xb9/0x540 [ 130.284817][ T409] process_scheduled_works+0x7f4/0x1060 [ 130.290359][ T409] worker_thread+0xc99/0x13f0 [ 130.295051][ T409] kthread+0x2c4/0x360 [ 130.299108][ T409] ? __cfi_worker_thread+0x10/0x10 [ 130.304226][ T409] ? __cfi_kthread+0x10/0x10 [ 130.308805][ T409] ret_from_fork+0x64/0xa0 [ 130.313203][ T409] ? __cfi_kthread+0x10/0x10 [ 130.317788][ T409] ret_from_fork_asm+0x1a/0x30 [ 130.322549][ T409] [ 130.325608][ T409] ---[ end trace 0000000000000000 ]--- [ 130.334278][ T409] ------------[ cut here ]------------ [ 130.339733][ T409] WARNING: CPU: 1 PID: 409 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 130.349197][ T409] Modules linked in: [ 130.353072][ T409] CPU: 1 UID: 0 PID: 409 Comm: kworker/u8:9 Tainted: G W syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 130.366181][ T409] Tainted: [W]=WARN [ 130.369998][ T409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.380053][ T409] Workqueue: netns cleanup_net [ 130.384824][ T409] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 130.390369][ T409] Code: 3c 20 00 74 08 48 89 df e8 bf 72 f0 fc 48 8b 3b e8 07 63 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 8f 97 fc <0f> 0b e9 b0 fd ff ff e8 16 8f 97 fc 0f 0b e9 18 fe ff ff e8 0a 8f [ 130.409995][ T409] RSP: 0018:ffffc9000cb17b70 EFLAGS: 00010293 [ 130.416068][ T409] RAX: ffffffff84efeaee RBX: ffff88812e918000 RCX: ffff8881155d8000 [ 130.424037][ T409] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881155d8000 [ 130.431998][ T409] RBP: ffffc9000cb17b98 R08: ffffffff87d43d87 R09: 1ffffffff0fa87b0 [ 130.439977][ T409] R10: dffffc0000000000 R11: fffffbfff0fa87b1 R12: 1ffffffff0fa8504 [ 130.447954][ T409] R13: dffffc0000000000 R14: ffff88812e918c00 R15: dffffc0000000000 [ 130.455932][ T409] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 130.464893][ T409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Sent SIGKILL to[ 130.471609][ T409] CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003526b0 all processes [ 130.481137][ T409] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000083 [ 130.490257][ T409] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 130.498317][ T409] Call Trace: [ 130.501587][ T409] [ 130.504526][ T409] xfrm_net_exit+0x31/0x80 [ 130.508934][ T409] cleanup_net+0x6bd/0xc90 [ 130.513327][ T409] ? __cfi_cleanup_net+0x10/0x10 [ 130.518284][ T409] ? kick_pool+0xb9/0x540 [ 130.522605][ T409] process_scheduled_works+0x7f4/0x1060 [ 130.528155][ T409] worker_thread+0xc99/0x13f0 [ 130.532824][ T409] kthread+0x2c4/0x360 [ 130.536890][ T409] ? __cfi_worker_thread+0x10/0x10 [ 130.541994][ T409] ? __cfi_kthread+0x10/0x10 [ 130.546594][ T409] ret_from_fork+0x64/0xa0 [ 130.551003][ T409] ? __cfi_kthread+0x10/0x10 [ 130.555590][ T409] ret_from_fork_asm+0x1a/0x30 [ 130.560359][ T409] [ 130.563378][ T409] ---[ end trace 0000000000000000 ]--- Requesting system poweroff [ 130.616031][ T409] bridge_slave_1: left allmulticast mode [ 130.621685][ T409] bridge_slave_1: left promiscuous mode [ 130.627372][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.634880][ T409] bridge_slave_0: left allmulticast mode [ 130.640505][ T409] bridge_slave_0: left promiscuous mode [ 130.646230][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.654183][ T409] bridge_slave_1: left allmulticast mode [ 130.659807][ T409] bridge_slave_1: left promiscuous mode [ 130.665391][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.672802][ T409] bridge_slave_0: left allmulticast mode [ 130.678461][ T409] bridge_slave_0: left promiscuous mode [ 130.684103][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.691588][ T409] bridge_slave_1: left allmulticast mode [ 130.697261][ T409] bridge_slave_1: left promiscuous mode [ 130.702836][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.710177][ T409] bridge_slave_0: left allmulticast mode [ 130.715871][ T409] bridge_slave_0: left promiscuous mode [ 130.721426][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.898028][ T409] veth1_macvtap: left promiscuous mode [ 130.903537][ T409] veth0_vlan: left promiscuous mode [ 130.909020][ T409] veth1_macvtap: left promiscuous mode [ 130.914506][ T409] veth0_vlan: left promiscuous mode [ 130.919938][ T409] veth1_macvtap: left promiscuous mode [ 130.925430][ T409] veth0_vlan: left promiscuous mode [ 131.577242][ T2608] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 131.583810][ T2608] ACPI: PM: Preparing to enter system sleep state S5 [ 131.590659][ T2608] kvm: exiting hardware virtualization [ 131.596176][ T2608] reboot: Power down serialport: VM disconnected.