last executing test programs:

7.246997845s ago: executing program 3 (id=130):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1ad)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r4, 0x2275, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000000)={0x6, 0x10000, 0x0, r0, 0x100000})

6.926927962s ago: executing program 3 (id=135):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x10}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffbfffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1b150a5, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1000000000e)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r2 = socket(0x2b, 0x4, 0x0)
write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'})

6.926300122s ago: executing program 3 (id=136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f00000002c0)=[@nested_load_syzos={0x136, 0xf0, {0x1, 0x2, [@nested_amd_vmload={0x182, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x9baa, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x8a, 0x2}}, @rdmsr={0x66, 0x18, {0x95e8911983ed083f}}, @nested_create_vm={0x12d, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x1ac7, 0x4, 0x3}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x6639}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0xf, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xb6, 0x2}}, @wr_drn={0x68, 0x20, {0x6, 0x3ff}}, @nested_vmresume={0x130, 0x18, 0xff}, @set_irq_handler={0xc8, 0x20, {0xc3, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x5f, 0x1}}, @wr_crn={0x67, 0x20, {0x4, 0x9}}, @nested_amd_vmload={0x182, 0x18}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0xd46a, 0x4}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x6e4d, 0x2}}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x8a9, 0xfffe000000000}}, @uexit={0x0, 0x18, 0x80}], 0x2c0})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0x100000, 0x0, {[0x5, 0x4, 0x6, 0xa5a2, 0xae, 0x7, 0x3, 0x9]}}) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async, rerun: 32)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x9, 0x14, 0xd, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x8, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000003, 0xffff0000, 0x3f92, 0x1000, 0x80000000, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x40000003, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x8a, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501) (async)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x18}], 0x1) (async)
write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async, rerun: 32)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000140)='\x00') (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async)
setuid(0xee00)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async)
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/65) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) (async)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000017c0)={0x1, 0x0, [{0x80000008, 0x914, 0x4, 0x0, 0xfffffff7, 0x5, 0x1000aa}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.848893396s ago: executing program 3 (id=151):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1fd)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file0\x00', 0x131000, 0x132)
r1 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
fspick(r1, &(0x7f0000000280)='.\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r2, &(0x7f0000000000)="ff", 0x30000, 0x2200)

5.823480597s ago: executing program 3 (id=152):
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000001c0)={0x6, 'ipvlan0\x00', {0x5}, 0xffff}) (async, rerun: 64)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x40000100, 0x0, 0xb7}, {0xbf3, 0x0, 0x8000000000000001}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14)
creat(&(0x7f0000000200)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x8) (async)
write(r3, &(0x7f0000000080), 0x0) (async)
syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async, rerun: 64)
mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async, rerun: 64)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e)
socket$inet6(0xa, 0x3, 0x5) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, &(0x7f0000000180)) (async)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={0x0, 0x157}, 0x0, &(0x7f0000000840)="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", 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x4601, 0x0) (rerun: 64)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

5.381848047s ago: executing program 3 (id=155):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}, {0x6, 0x9, 0x81, 0x5}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143)
linkat(r0, &(0x7f00000021c0)='./file0/file0\x00', r0, 0x0, 0x400)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)
setresuid(0x0, 0xee00, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000010090400001202060000052406000005240000000d240f010000000000000000000915810340000000000905820260000000000905030208"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)

4.745603821s ago: executing program 0 (id=157):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x806, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
setreuid(0xffffffffffffffff, 0xee00)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x806, 0x0) (async)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x4}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
setreuid(0xffffffffffffffff, 0xee00) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) (async)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, 0x0) (async)

4.679567303s ago: executing program 0 (id=158):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008c0110655000000000001090224000100001000090400000203000100092103000001222b0009058103ff03"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x19, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00236f0000006f0bb70ba381030000000000000000cb4fdca0566e3361913e0fb3fcacd43ac5b1d4"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = getpgrp(0xffffffffffffffff)
syz_open_procfs$pagemap(r4, &(0x7f0000000040))
dup(0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008c0110655000000000001090224000100001000090400000203000100092103000001222b0009058103ff03"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x19, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00236f0000006f0bb70ba381030000000000000000cb4fdca0566e3361913e0fb3fcacd43ac5b1d4"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
getpgrp(0xffffffffffffffff) (async)
syz_open_procfs$pagemap(r4, &(0x7f0000000040)) (async)
dup(0xffffffffffffffff) (async)

3.241533096s ago: executing program 1 (id=160):
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x13, 0x9, 0x7f, 0x1}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge0\x00', <r3=>0x0})
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000200)=0x1000, 0x4)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0})
sendto$packet(r1, &(0x7f00000006c0)="280320000a00140000007ef506be", 0xe, 0x400c010, &(0x7f0000000000)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000240)=[{0x1, 0x0, 0x3}]}, 0x10)
sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x85c, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000001c0), 0x10, 0x10002, 0x0)
write(r5, &(0x7f0000000000)='3', 0x4e)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x1c3}, 0x0, 0x0, 0x0)

3.159589758s ago: executing program 1 (id=161):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}})
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x0, 0x3}})

3.133118658s ago: executing program 1 (id=162):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$uac3(0x1, 0x9d, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x1, 0xa0, 0x2, {0x8, 0xb, 0x1, 0x2, 0x1, 0x20, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xfd, 0x1b, 0x8}, [@extension_unit={0x11, 0x24, 0xa, 0x2, 0x5, [0x2, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe, "9bad37", "cf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x80, 0x0, 0x6, {0xa, 0x25, 0x25, 0x80000000, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x3, 0x1}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x0, 0xb8, 0xc, 0x5, 0x0, 0x7}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c01}}]})
syz_usb_connect$uac2(0x5, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x9e, &(0x7f00000003c0)={0x5, 0xf, 0x9e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xb, 0x40, 0x2}, @generic={0x7b, 0x10, 0x2, "7d173ba2a8e7eef17f590ebae0cec7665031cdc2cf5dcb5b76f9bd66d52de83b9c937b5ffcd7cd82966a0c4485500219ea7ef1749203c59cf7d3616d30de74370feaa56300c29f45e097b2d2c667509abc26eab39c98a668b38c45fb95cd0178af7f6bb0fc9fde9c6d444d466d5f1a6e9dbce5c02f00c8b4"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d2745fa5b34cf8ea184bfb7cd350fb8d"}]}})
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x931}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044091}, 0x4001)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r3, 0x1, 0x2e, 0x0, &(0x7f0000000040))
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x22, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

1.640351382s ago: executing program 0 (id=164):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
truncate(0x0, 0x8)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache='])

1.496249396s ago: executing program 0 (id=165):
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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"/472, 0x1d8, 0xfffffffffffffffd)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x0, @private1, 0xfffffe01}}}, 0x108)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x33, 0x65, 0x36, 0x65, 0x66, 0x34, 0x63, 0x64, 0x31, 0x1d, 0x38, 0x37, 0x38, 0x0, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3d}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x35, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x63, 0x66, 0x30, 0x30, 0x31, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
keyctl$unlink(0x9, r1, r2)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3)

1.408657718s ago: executing program 0 (id=166):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = fsopen(&(0x7f0000000280)='iso9660\x00', 0x1)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000500)=0x9) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0xb522f000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40200, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x28, 0xffffffff, 0xfffd, 0xa, 0x9, 0x10, 0x6, 0x2, 0x40, 0x1, 0x9, 0x9, 0xd, 0xff, 0xfffffffd, [0x3, 0x3]}}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0xa70d6000) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}], 0x1, 0x24008084) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000340)={0x0, 0x2, 0x28804, 0x0, 0x1e5}, &(0x7f0000000000), &(0x7f0000000480), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x7f6f, &(0x7f00000003c0)={0x0, 0x441b, 0x8, 0x2, 0x374}, &(0x7f0000000440), &(0x7f00000002c0), &(0x7f0000000300)) (async)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x8b) (async)
socket$netlink(0x10, 0x3, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)

1.097057385s ago: executing program 1 (id=170):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(r0, &(0x7f0000000340)="8824abd3f72f657d0388f3664067a38d3a2eaf47d63398ad7166e9d343e70ca65257575aab08e935e383aa57990889ee706e69fade962c26461b50d30bfe81a34afe13a4a6cf49e3692ac38ac75b282c9e22b91d3bddd8b52acb6dd2beef4e7d6c73eb68aec4e2b414655788fba46eb6c8282cc6176edde6cbcd38b69aa4230f83ce72f064fa4a1ddbcefb66026409281a7b5655a7fd5e3bf58efc4421a656d2a346444a208928181a211887e169f1818225f9a223f839f7c0f7c56c08812853c5f73ff7cb0cddf2744f03df5911a706df", 0xd1)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

844.19764ms ago: executing program 1 (id=171):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}})
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x0, 0x3}})

817.528751ms ago: executing program 1 (id=173):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000000001)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
read$FUSE(r2, &(0x7f0000003c80)={0x2020}, 0x2020)
unlinkat(r2, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001000)={0x0, &(0x7f0000002000)=[@wrmsr={0x65, 0x20, {0x400000f1}}], 0x20})
r3 = fsopen(&(0x7f0000000140)='xfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x8004)
r5 = fsmount(r3, 0x1, 0x2)
fchdir(r5)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r6, 0x400, 0x0)
openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240, 0x60, 0x8}, 0x18)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3c, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xd8f, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfc, 0xf9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109708102c0c0"], 0x0}, 0x0)
openat(r5, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x80)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00', 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x4, 0xfff, 0x0, 0x10, 0x0, 0x80000000, 0x1000, 0x3, 0x7fffffffffffe, 0x1, 0x5, 0x7, 0x8, 0x5, 0xfffffffeffffffff, 0xfffffffffffffff8], 0xdddd1000, 0x404})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00')
exit(0xf)
getdents64(r8, 0x0, 0x0)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c})
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1})
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)

618.694436ms ago: executing program 2 (id=175):
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x2, 0x4000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={<r2=>0xffffffffffffffff, &(0x7f0000000080)='\'\xa2.\x00', 0x40200, &(0x7f00000000c0)={@align=0xffffffffffffff25, {0x8, 0x2, 0x7ff}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
poll(&(0x7f0000000200)=[{r0, 0x49}, {0xffffffffffffffff, 0xa200}, {r1, 0x2}, {r2, 0x4}, {r3, 0x4004}, {0xffffffffffffffff, 0x2}, {r4, 0x8010}], 0x7, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
ioctl$UBLK_U_CMD_GET_FEATURES(r2, 0x80207513, &(0x7f00000002c0)={<r5=>0x0, 0xffff, 0x8, &(0x7f0000000280)})
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000340)={0xb24b, 0xd4})
ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000380)=0x3)
recvfrom(r2, &(0x7f00000003c0)=""/155, 0x9b, 0x16163, &(0x7f0000000480)=@hci={0x1f, 0x3, 0x1}, 0x80)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000500))
ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f00000006c0)={{0x2, 0x0, 0x80000001, 0x0, 0xbb6a}, &(0x7f0000000540)=[{}, {}]})
close(r0)
sendmsg$key(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x2, 0x14, 0x7, 0x9, 0x1d, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0xe7, 0x0, 0x0, 0x70bd27, 0x3502}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@local, 0x2a, 0x1ae71cdb655a74d6}, @sadb_x_sa2={0x2, 0x13, 0xd, 0x0, 0x0, 0x70bd26, 0x34ff}, @sadb_lifetime={0x4, 0x3, 0xfffffffe, 0x6a9b20b5, 0x2, 0x8000000000000000}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28, 0x3500}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2d}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x9, {0x6, 0x33, 0x33, 0x6, 0x0, 0x7, 0x0, @in=@rand_addr=0x1, @in6=@mcast2}}]}, 0xe8}}, 0x1)
ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000008c0))
ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x7)
ioctl$UBLK_U_CMD_STOP_DEV(r2, 0xc0207507, &(0x7f0000000900)={r5})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x3ff, 0xc3d6, 0x0, 0x4, 0x1d, 0x18, "4db5c6cbb4eee752e25a41513a0c5460550e5975540ae6f824c90ac3f1e847e7414445d6fdbe2cfad7ef74a14af57d0dda71034987ef477fda896c4a0d6e930c", "d90347c41db62d52892ae2e8c1f731a8d37d3b72483881861194c689a50cbacf26dbe0f12a0550fe5d7c82909130c7c0b6df34a6980e98cf3c58c5727aafe393", "6485555d960d5e7a70a722830f16cd130e7785c69ec44ff91adcfa9069c36805", [0x6, 0x6]})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000a80))
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000ac0)=0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000b00))
link(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00')
r7 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000c00)={0x4004, r7}, 0x1)
lsetxattr$security_ima(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), &(0x7f0000000cc0)=@v2={0x5, 0x3, 0x9, 0x8, 0x4f, "1402c2f407defc66168bed06d0884fa87d63536e1c476c11b87e6d170d0f22b4851dd6889ee4fe4c0755f624e9d5259e35d8d5e61c2e06a237ec06c714d42b8e176839695af963c0d541cb7bee42da"}, 0x58, 0x0)
fchmod(r7, 0x88)

511.258478ms ago: executing program 0 (id=176):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
pread64(r2, &(0x7f0000000100)=""/133, 0x85, 0x8)
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400)={0x0, 0xf09}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c3)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="666404", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r3, &(0x7f000000a3c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x1, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000000000003000000000000000300000000000000010000000000000004000000000000000000001b0000000000000000000000800100000000000000f8ffffffffffffff04000000000000000900000000000000d253000000000000ff000000000000000400000000080000ffffffff0010000005000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="00000000400000000000000003000000009879b89d506c4ff400000000800000000000000d0000007f0000002e0f53cdd2693bb291ddfb9b01000000"], 0x0, 0x0, 0x0})
getdents64(r6, 0x0, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005640000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r7 = syz_usb_connect(0x3, 0x68, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES16=0x0, @ANYRESOCT=r0], 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7000000000000000000000000000000000100000001000000020000"], 0x110)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x80081270, 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0)
r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
pwritev2(r10, &(0x7f0000000340)=[{&(0x7f0000000000)="5715f8abc8a475b6bd7f3ae6b6753fe0b6133546151f746ecd5b045f063533a145e12cd408d3fa9e192ee00392a67c416fc3e76532a07f69f22db4e0b87a5a67e5c272", 0x43}, {&(0x7f00000001c0)="f8094d724511139654147ef83c8405286bceb00056e13623883268e07c4679", 0x1f}, {&(0x7f0000000240)="b564bc6ad3a019cedcbce9376bb24d166d6e2bc4f106470e975844d925f424a72bfa719fca2e4a728b35bc92e138550e6b533c3695b8e9743a3c1d5ce6f8d896116457fdd1fbd93955e54b4cca1fe2a6e3be08004d3280a81d49081435550053343eb2e25f5554977c428e9a264e2efd1506cfd76f584ea891f7ef5926ac214a9c1dc06ba1f9f3f45e0c16d5e79fc47aa6bc56c1b05ba93a1b7af002c0cf4454f0c1e8a6406ef9be3f8f7d98f26bc21fc26b8f9b47e1ada63c8e613e6d0e9164317758be73531e264382d2eef9e81f262bf8840bb795a03087", 0xd9}], 0x3, 0x80, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

435.49121ms ago: executing program 2 (id=177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x100000000, 0x0, 0x80, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x9, 0x4000000000000007, 0x0, 0x5, 0x1000000200000000, 0x2, 0xffffffffffffffff], 0x0, 0x81e00})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl(r6, 0x5, &(0x7f0000000340)="7c182cd01a7c0662f0ed50dbdeab3d788c13746510bacc63a0847b813ace22ad4030ece01718a51ccb965f059bf2c9edbd68d3fd846c8cb9d618778663f7185add50ee27bdf99bbb021f1fcf49bec81ffdee45a9804d6f7c8a2f3096e1d99bf3488d46c4a077f89d1623559c1ca21ca8e8ef594ffede3311a1b02781d796fefedc97d5ef9d8f4cd90f1192f6cc0893d0c8b26e1b3c4d145d7ee8685be1ad0eff5dafc09d6f0100d335d6ce729a9c6728cf14870bc4e4a4ff0c58266a46618743dd911eae0285b1255bdc8c6c52a045615aa6116438bc4eae30c83c7d27232882bab1c4650d43c6c8")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003ca000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00')

203.773605ms ago: executing program 2 (id=178):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
r1 = eventfd(0xf7b2)
unshare(0x2a020400)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f000000cb00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004804}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x30, 0x4008000}}], 0x2, 0x810)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
landlock_restrict_self(r6, 0x0)

112.756267ms ago: executing program 2 (id=179):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) (async)
getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) (async, rerun: 32)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000240)) (rerun: 32)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff01000000000000000000000000000164010102000000000000000000000000000000004e2100000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000b8c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002d60000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005d0735000010"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (async)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) (async)
bind$tipc(r1, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r7=>0x0, <r8=>0x0}, &(0x7f0000000040)=0xc) (async, rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'batadv_slave_0\x00', 0x100})
fchown(r0, r7, r8) (async)
setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000080), 0x4)

3.6428ms ago: executing program 2 (id=180):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x80000000000fffe, 0x40000001})
fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x1, 0x2, 0x3fe, 0x407})

0s ago: executing program 2 (id=181):
syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a05050300000000000000000000000904010000010230000904010101010230000905010920000308e20a25250200"], 0x0)
r0 = syz_clone(0x800, &(0x7f0000000000)="d34d95071db6e64881a8cd9f3d69344ec209249e9e585772da302a18111d7a27e2fc7f5da3d9930e1769d0e4b3227c7b7f373085185a1bb1c80000277261b43495a9daaf92e6ad7bc400083303756accb39dc721a9dd124fbd6f7a60115d7ee8319275c0372ca49fe449ce44b15e5b7e9a0b322d35693ebb3b0f2861", 0x7c, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000300)="4408c40e217ad87df9a9cac7c7a29df51ae4b2f4b01dfa39688cc6acf5d8bb6dcdb7339fbf7a67f4981e93be4f4842bc161363282f333601acab9e1068605aaf7a726200111a96da1a1ea73fef54f72e6d73275ccc3f55e1daff2278a2670c9bead7d208b4b51c245e5a5c0b50d47048a42910c0f1ffe492c21b1887ce850e0a5facadc16c635534f21c2eec")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000300)='r:_est/event1 ./file0:0x0 arg2=$', 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x0, &(0x7f00000001c0))
syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a05050300000000000000000000000904010000010230000904010101010230000905010920000308e20a25250200"], 0x0) (async)
syz_clone(0x800, &(0x7f0000000000)="d34d95071db6e64881a8cd9f3d69344ec209249e9e585772da302a18111d7a27e2fc7f5da3d9930e1769d0e4b3227c7b7f373085185a1bb1c80000277261b43495a9daaf92e6ad7bc400083303756accb39dc721a9dd124fbd6f7a60115d7ee8319275c0372ca49fe449ce44b15e5b7e9a0b322d35693ebb3b0f2861", 0x7c, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000300)="4408c40e217ad87df9a9cac7c7a29df51ae4b2f4b01dfa39688cc6acf5d8bb6dcdb7339fbf7a67f4981e93be4f4842bc161363282f333601acab9e1068605aaf7a726200111a96da1a1ea73fef54f72e6d73275ccc3f55e1daff2278a2670c9bead7d208b4b51c245e5a5c0b50d47048a42910c0f1ffe492c21b1887ce850e0a5facadc16c635534f21c2eec") (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) (async)
write(r1, &(0x7f0000000300)='r:_est/event1 ./file0:0x0 arg2=$', 0x20) (async)
prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x0, &(0x7f00000001c0)) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts.
[   22.232890][   T36] audit: type=1400 audit(1788817216.690:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.234000][  T286] cgroup: Unknown subsys name 'net'
[   22.255532][   T36] audit: type=1400 audit(1788817216.690:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.282843][   T36] audit: type=1400 audit(1788817216.720:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.282998][  T286] cgroup: Unknown subsys name 'devices'
[   22.401452][  T286] cgroup: Unknown subsys name 'hugetlb'
[   22.407053][  T286] cgroup: Unknown subsys name 'rlimit'
[   22.500376][   T36] audit: type=1400 audit(1788817216.960:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.523534][   T36] audit: type=1400 audit(1788817216.960:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   22.529676][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.548398][   T36] audit: type=1400 audit(1788817216.960:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.566627][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.580302][   T36] audit: type=1400 audit(1788817217.020:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.614083][   T36] audit: type=1400 audit(1788817217.020:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.639702][   T36] audit: type=1400 audit(1788817217.020:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.665330][   T36] audit: type=1400 audit(1788817217.020:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.843882][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.850978][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.858029][  T294] bridge_slave_0: entered allmulticast mode
[   23.864427][  T294] bridge_slave_0: entered promiscuous mode
[   23.872931][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.879987][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.887048][  T294] bridge_slave_1: entered allmulticast mode
[   23.893358][  T294] bridge_slave_1: entered promiscuous mode
[   23.914293][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.921362][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.928493][  T296] bridge_slave_0: entered allmulticast mode
[   23.934887][  T296] bridge_slave_0: entered promiscuous mode
[   23.943925][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.951015][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.958107][  T296] bridge_slave_1: entered allmulticast mode
[   23.964322][  T296] bridge_slave_1: entered promiscuous mode
[   23.980718][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.987767][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.994871][  T293] bridge_slave_0: entered allmulticast mode
[   24.001082][  T293] bridge_slave_0: entered promiscuous mode
[   24.020896][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.027942][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.035039][  T293] bridge_slave_1: entered allmulticast mode
[   24.041217][  T293] bridge_slave_1: entered promiscuous mode
[   24.086860][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.093981][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.101078][  T295] bridge_slave_0: entered allmulticast mode
[   24.107224][  T295] bridge_slave_0: entered promiscuous mode
[   24.113708][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.120771][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.127867][  T295] bridge_slave_1: entered allmulticast mode
[   24.134233][  T295] bridge_slave_1: entered promiscuous mode
[   24.253003][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.260091][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.267372][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.274421][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.283116][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.290182][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.297425][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.304454][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.326644][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.333716][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.340993][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.348007][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.369691][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.376742][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.384050][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.391101][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.418385][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.425958][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.433210][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.440741][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.447951][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.455201][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.462454][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.469645][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.483360][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.490412][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.502310][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.509345][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.533449][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.540504][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.548163][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.555210][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.562694][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.569746][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.577193][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.584312][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.609282][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.616369][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.624598][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.631653][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.640021][  T294] veth0_vlan: entered promiscuous mode
[   24.666531][  T296] veth0_vlan: entered promiscuous mode
[   24.688447][  T295] veth0_vlan: entered promiscuous mode
[   24.697644][  T294] veth1_macvtap: entered promiscuous mode
[   24.706071][  T296] veth1_macvtap: entered promiscuous mode
[   24.734163][  T295] veth1_macvtap: entered promiscuous mode
[   24.749601][  T293] veth0_vlan: entered promiscuous mode
[   24.762034][  T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.791396][  T293] veth1_macvtap: entered promiscuous mode
[   24.825291][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   25.049842][   T63] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   25.079688][  T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.109698][   T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   25.200148][   T63] usb 2-1: too many configurations: 47, using maximum allowed: 8
[   25.208893][   T63] usb 2-1: unable to read config index 0 descriptor/start: -61
[   25.216563][   T63] usb 2-1: can't read configurations, error -61
[   25.239850][  T312] usb 4-1: Using ep0 maxpacket: 16
[   25.247165][  T312] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   25.256265][  T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.264453][  T312] usb 4-1: Product: syz
[   25.268626][  T312] usb 4-1: Manufacturer: syz
[   25.273442][  T312] usb 4-1: SerialNumber: syz
[   25.278547][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.290680][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.300552][   T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   25.313475][   T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   25.322637][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.330805][  T312] r8152-cfgselector 4-1: Unknown version 0x0000
[   25.337052][  T312] r8152-cfgselector 4-1: config 0 descriptor??
[   25.344567][  T312] hub 4-1:0.0: bad descriptor, ignoring hub
[   25.350609][   T45] usb 1-1: config 0 descriptor??
[   25.355634][   T63] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   25.363372][  T312] hub 4-1:0.0: probe with driver hub failed with error -5
[   25.519975][   T63] usb 2-1: too many configurations: 47, using maximum allowed: 8
[   25.528911][   T63] usb 2-1: unable to read config index 0 descriptor/start: -61
[   25.537082][   T63] usb 2-1: can't read configurations, error -61
[   25.543542][   T63] usb usb2-port1: attempt power cycle
[   25.572815][  T329] FAULT_INJECTION: forcing a failure.
[   25.572815][  T329] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   25.585977][  T329] CPU: 1 UID: 0 PID: 329 Comm: syz.0.1 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   25.586011][  T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   25.586030][  T329] Call Trace:
[   25.586038][  T329]  <TASK>
[   25.586045][  T329]  __dump_stack+0x21/0x30
[   25.586068][  T329]  dump_stack_lvl+0x140/0x1c0
[   25.586086][  T329]  ? __cfi_dump_stack_lvl+0x10/0x10
[   25.586102][  T329]  dump_stack+0x19/0x20
[   25.586115][  T329]  should_fail_ex+0x3c2/0x510
[   25.586128][  T329]  should_fail+0xf/0x20
[   25.586138][  T329]  should_fail_usercopy+0x1e/0x30
[   25.586150][  T329]  _copy_from_user+0x20/0xa0
[   25.586164][  T329]  raw_ioctl+0xd68/0x37a0
[   25.586185][  T329]  ? __cfi_futex_wait+0x10/0x10
[   25.586201][  T329]  ? __cfi_raw_ioctl+0x10/0x10
[   25.586215][  T329]  ? selinux_file_ioctl+0x732/0x1480
[   25.586226][  T329]  ? vfs_write+0xbcf/0xfd0
[   25.586237][  T329]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   25.586248][  T329]  ? do_futex+0x32a/0x510
[   25.586263][  T329]  ? __cfi_do_futex+0x10/0x10
[   25.586277][  T329]  ? __fget_files+0x2bc/0x330
[   25.586289][  T329]  ? bpf_lsm_file_ioctl+0xd/0x20
[   25.586303][  T329]  ? security_file_ioctl+0x3e/0x110
[   25.586313][  T329]  ? __cfi_raw_ioctl+0x10/0x10
[   25.586328][  T329]  __se_sys_ioctl+0x126/0x1b0
[   25.586340][  T329]  __x64_sys_ioctl+0x7f/0xa0
[   25.586352][  T329]  x64_sys_call+0x1878/0x2ee0
[   25.586362][  T329]  do_syscall_64+0x57/0xf0
[   25.586377][  T329]  ? clear_bhb_loop+0x50/0xa0
[   25.586389][  T329]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   25.586400][  T329] RIP: 0033:0x7f0e4e79ddeb
[   25.586415][  T329] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   25.586432][  T329] RSP: 002b:00007f0e4f6b2f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   25.586461][  T329] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f0e4e79ddeb
[   25.586476][  T329] RDX: 00007f0e4f6b2fd0 RSI: 00000000c0085504 RDI: 0000000000000006
[   25.586483][  T329] RBP: 00007f0e4e835024 R08: 0000000000000000 R09: 0000000000000000
[   25.586490][  T329] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f0e4f6b2fd8
[   25.586497][  T329] R13: 0000000000000000 R14: 00007f0e4ea25fa0 R15: 00007ffe1462ef48
[   25.586507][  T329]  </TASK>
[   25.589058][  T329] syzkaller0: refused to change device tx_queue_len
[   25.659711][   T10] r8152-cfgselector 4-1: USB disconnect, device number 2
[   25.672922][   T45] usbhid 1-1:0.0: can't add hid device: -71
[   25.836282][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   25.846154][   T45] usb 1-1: USB disconnect, device number 2
[   25.929835][   T63] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   25.950433][   T63] usb 2-1: too many configurations: 47, using maximum allowed: 8
[   25.959124][   T63] usb 2-1: unable to read config index 0 descriptor/start: -61
[   25.966751][   T63] usb 2-1: can't read configurations, error -61
[   26.100085][   T63] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   26.106360][  T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.130708][   T63] usb 2-1: too many configurations: 47, using maximum allowed: 8
[   26.140548][   T63] usb 2-1: unable to read config index 0 descriptor/start: -61
[   26.142073][  T337] FAULT_INJECTION: forcing a failure.
[   26.142073][  T337] name failslab, interval 1, probability 0, space 0, times 1
[   26.148560][   T63] usb 2-1: can't read configurations, error -61
[   26.161607][  T337] CPU: 0 UID: 0 PID: 337 Comm: syz.3.7 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   26.161637][  T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   26.161648][  T337] Call Trace:
[   26.161654][  T337]  <TASK>
[   26.161662][  T337]  __dump_stack+0x21/0x30
[   26.161695][  T337]  dump_stack_lvl+0x140/0x1c0
[   26.161719][  T337]  ? __cfi_dump_stack_lvl+0x10/0x10
[   26.161746][  T337]  dump_stack+0x19/0x20
[   26.161770][  T337]  should_fail_ex+0x3c2/0x510
[   26.161792][  T337]  should_failslab+0xac/0x100
[   26.161814][  T337]  kmem_cache_alloc_noprof+0x42/0x410
[   26.161834][  T337]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   26.161862][  T337]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   26.161888][  T337]  ? mutex_unlock+0x90/0x240
[   26.161909][  T337]  kvm_mmu_topup_memory_cache+0x24/0x30
[   26.161935][  T337]  kvm_mmu_load+0xa1/0x2900
[   26.161958][  T337]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   26.161984][  T337]  ? queue_delayed_work_on+0x16f/0x1f0
[   26.162018][  T337]  ? kvm_apic_has_interrupt+0x77a/0x790
[   26.162045][  T337]  vcpu_run+0x4d72/0x7830
[   26.162072][  T337]  ? kvm_sched_clock_read+0x15/0x30
[   26.162105][  T337]  ? signal_pending+0xc0/0xc0
[   26.162129][  T337]  ? __kasan_check_write+0x18/0x20
[   26.162149][  T337]  ? xfd_validate_state+0x68/0x140
[   26.162173][  T337]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   26.162195][  T337]  ? __kasan_check_write+0x18/0x20
[   26.162213][  T337]  ? fpregs_mark_activate+0x68/0x160
[   26.162234][  T337]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   26.162255][  T337]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   26.162276][  T337]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   26.162301][  T337]  ? try_to_wake_up+0x119e/0x1fd0
[   26.162322][  T337]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   26.162347][  T337]  ? __cfi_try_to_wake_up+0x10/0x10
[   26.162368][  T337]  ? plist_del+0x3f0/0x410
[   26.162393][  T337]  ? ioctl_has_perm+0x1bc/0x500
[   26.162412][  T337]  ? __asan_memcpy+0x5a/0x80
[   26.162430][  T337]  ? ioctl_has_perm+0x408/0x500
[   26.162448][  T337]  ? has_cap_mac_admin+0xd0/0xd0
[   26.162466][  T337]  ? __kasan_check_write+0x18/0x20
[   26.162485][  T337]  ? mutex_lock_killable+0x97/0x1d0
[   26.162506][  T337]  ? __cfi_mutex_lock_killable+0x10/0x10
[   26.162527][  T337]  kvm_vcpu_ioctl+0xa43/0x1000
[   26.162546][  T337]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   26.162564][  T337]  ? do_futex+0x37d/0x510
[   26.162589][  T337]  ? __cfi_do_futex+0x10/0x10
[   26.162614][  T337]  ? __fget_files+0x2bc/0x330
[   26.162637][  T337]  ? bpf_lsm_file_ioctl+0xd/0x20
[   26.162660][  T337]  ? security_file_ioctl+0x3e/0x110
[   26.162678][  T337]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   26.162695][  T337]  __se_sys_ioctl+0x126/0x1b0
[   26.162717][  T337]  __x64_sys_ioctl+0x7f/0xa0
[   26.162739][  T337]  x64_sys_call+0x1878/0x2ee0
[   26.162756][  T337]  do_syscall_64+0x57/0xf0
[   26.162781][  T337]  ? clear_bhb_loop+0x50/0xa0
[   26.162802][  T337]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   26.162822][  T337] RIP: 0033:0x7f3bc6b9e159
[   26.162838][  T337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   26.162854][  T337] RSP: 002b:00007f3bc79ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   26.162874][  T337] RAX: ffffffffffffffda RBX: 00007f3bc6e25fa0 RCX: 00007f3bc6b9e159
[   26.162889][  T337] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[   26.162901][  T337] RBP: 00007f3bc6c35024 R08: 0000000000000000 R09: 0000000000000000
[   26.162913][  T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   26.162924][  T337] R13: 00007f3bc6e26038 R14: 00007f3bc6e25fa0 R15: 00007fff716febb8
[   26.162940][  T337]  </TASK>
[   26.525980][   T63] usb usb2-port1: unable to enumerate USB device
[   26.539312][  T340] rust_binder: 339:340 got reply transaction with no transaction stack
[   26.547661][  T340] rust_binder: 339:340 transaction reply to 0:0 failed EINVAL, code 0 size 104-24
[   26.809659][   T63] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   26.889713][  T324] Bluetooth: hci0: command 0x1003 tx timeout
[   26.891207][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   26.949656][   T63] usb 1-1: device descriptor read/64, error -71
[   27.019680][   T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   27.159657][   T45] usb 4-1: device descriptor read/64, error -71
[   27.199802][   T63] usb 1-1: device descriptor read/64, error -71
[   27.349648][  T352] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   27.399655][   T45] usb 4-1: device descriptor read/64, error -71
[   27.439644][   T63] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   27.500680][  T352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   27.511045][  T352] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   27.524226][  T352] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   27.533340][  T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.541920][  T352] usb 3-1: config 0 descriptor??
[   27.547869][  T352] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   27.579647][   T63] usb 1-1: device descriptor read/64, error -71
[   27.649677][   T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   27.779665][   T45] usb 4-1: device descriptor read/64, error -71
[   27.819631][   T63] usb 1-1: device descriptor read/64, error -71
[   27.837629][   T36] kauditd_printk_skb: 64 callbacks suppressed
[   27.837646][   T36] audit: type=1400 audit(1788817222.290:138): avc:  denied  { read write } for  pid=360 comm="syz.1.16" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.868383][   T36] audit: type=1400 audit(1788817222.290:139): avc:  denied  { open } for  pid=360 comm="syz.1.16" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.884867][  T365] overlayfs: invalid origin (0000)
[   27.892584][   T36] audit: type=1400 audit(1788817222.290:140): avc:  denied  { ioctl } for  pid=360 comm="syz.1.16" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.923427][   T36] audit: type=1400 audit(1788817222.310:141): avc:  denied  { map } for  pid=362 comm="syz.1.17" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.935512][  T367] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19'.
[   27.946787][   T36] audit: type=1400 audit(1788817222.360:142): avc:  denied  { mount } for  pid=364 comm="syz.1.18" name="/" dev="overlay" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   27.955527][   T63] usb usb1-port1: attempt power cycle
[   27.977903][   T36] audit: type=1400 audit(1788817222.390:143): avc:  denied  { mounton } for  pid=366 comm="syz.1.19" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   28.005281][   T36] audit: type=1400 audit(1788817222.390:144): avc:  denied  { mount } for  pid=366 comm="syz.1.19" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   28.008108][  T370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   28.030532][   T36] audit: type=1400 audit(1788817222.390:145): avc:  denied  { nlmsg_read } for  pid=366 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   28.038741][  T370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   28.057057][   T36] audit: type=1400 audit(1788817222.440:146): avc:  denied  { read } for  pid=366 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   28.082397][   T45] usb 4-1: device descriptor read/64, error -71
[   28.082432][   T36] audit: type=1400 audit(1788817222.500:147): avc:  denied  { create } for  pid=368 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   28.189753][   T45] usb usb4-port1: attempt power cycle
[   28.239686][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   28.349721][   T63] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   28.370691][   T63] usb 1-1: device descriptor read/8, error -71
[   28.390700][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   28.400845][   T10] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[   28.409920][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.418435][   T10] usb 2-1: config 0 descriptor??
[   28.424177][   T10] usb 2-1: bad CDC descriptors
[   28.500700][   T63] usb 1-1: device descriptor read/8, error -71
[   28.529643][   T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   28.550669][   T45] usb 4-1: device descriptor read/8, error -71
[   28.624480][  T311] usb 2-1: USB disconnect, device number 6
[   28.680651][   T45] usb 4-1: device descriptor read/8, error -71
[   28.739661][   T63] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   28.760614][   T63] usb 1-1: device descriptor read/8, error -71
[   28.890644][   T63] usb 1-1: device descriptor read/8, error -71
[   28.919665][   T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   28.940628][   T45] usb 4-1: device descriptor read/8, error -71
[   28.999757][   T63] usb usb1-port1: unable to enumerate USB device
[   29.070706][   T45] usb 4-1: device descriptor read/8, error -71
[   29.179773][   T45] usb usb4-port1: unable to enumerate USB device
[   29.231456][  T391] process 'syz.1.22' launched './file0' with NULL argv: empty string added
[   29.519686][  T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   29.549307][    T9] rust_binder: 339: undelivered TRANSACTION_ERROR: 29201
[   29.669665][  T311] usb 2-1: Using ep0 maxpacket: 32
[   29.675945][  T311] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[   29.684307][  T311] usb 2-1: config 0 has no interface number 0
[   29.690670][  T311] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   29.700816][  T311] usb 2-1: config 0 interface 196 has no altsetting 0
[   29.708897][  T311] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   29.718142][  T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.726163][  T311] usb 2-1: Product: syz
[   29.730341][  T311] usb 2-1: Manufacturer: syz
[   29.734923][  T311] usb 2-1: SerialNumber: syz
[   29.740507][  T311] usb 2-1: config 0 descriptor??
[   29.745786][  T399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   30.121692][    T9] usb 3-1: USB disconnect, device number 2
[   30.189674][  T382] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   30.339627][  T382] usb 4-1: Using ep0 maxpacket: 8
[   30.346854][  T382] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[   30.355959][  T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.364068][  T311] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[   30.372632][  T311] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached
[   30.380184][  T382] usb 4-1: Product: syz
[   30.384342][  T382] usb 4-1: Manufacturer: syz
[   30.388915][  T382] usb 4-1: SerialNumber: syz
[   30.599955][  T382] usb 4-1: MIDIStreaming interface descriptor not found
[   30.609421][  T382] usb 4-1: USB disconnect, device number 7
[   30.618061][  T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.709721][  T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   30.758325][   T45] usb 2-1: USB disconnect, device number 7
[   30.799246][   T45] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected
[   30.861008][  T311] usb 1-1: unable to get BOS descriptor or descriptor too short
[   30.869465][  T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.879631][  T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.889964][  T311] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   30.898991][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.907071][  T311] usb 1-1: Product: syz
[   30.911273][  T311] usb 1-1: Manufacturer: syz
[   30.915881][  T311] usb 1-1: SerialNumber: syz
[   30.922875][  T311] usb 1-1: selecting invalid altsetting 1
[   30.928748][  T311] usb 1-1: unit 6 not found!
[   31.059669][   T63] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   31.167011][  T463] Zero length message leads to an empty skb
[   31.189656][   T63] usb 3-1: device descriptor read/64, error -71
[   31.381180][  T474] SELinux: security_context_str_to_sid (^) failed with errno=-22
[   31.429634][   T63] usb 3-1: device descriptor read/64, error -71
[   31.629649][   T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   31.679643][   T63] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   31.724792][  T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.733371][  T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.780079][   T45] usb 2-1: too many configurations: 24, using maximum allowed: 8
[   31.788552][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.798699][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.811515][   T63] usb 3-1: device descriptor read/64, error -71
[   31.818451][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.828617][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.842091][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.852226][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.865683][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.875812][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.889321][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.899475][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.912999][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.923170][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.936775][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.946973][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.960594][   T45] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   31.970761][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   31.984945][   T45] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   31.994064][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.002081][   T45] usb 2-1: Product: syz
[   32.006247][   T45] usb 2-1: Manufacturer: syz
[   32.010913][   T45] usb 2-1: SerialNumber: syz
[   32.017764][   T45] rtl8150 2-1:1.0: couldn't find required endpoints
[   32.024513][   T45] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[   32.089679][   T63] usb 3-1: device descriptor read/64, error -71
[   32.199712][   T63] usb usb3-port1: attempt power cycle
[   32.229637][   T10] usb 2-1: USB disconnect, device number 8
[   32.319625][  T382] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   32.469625][  T382] usb 4-1: Using ep0 maxpacket: 8
[   32.477034][  T382] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   32.486188][  T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.494238][  T382] usb 4-1: Product: syz
[   32.498406][  T382] usb 4-1: Manufacturer: syz
[   32.503067][  T382] usb 4-1: SerialNumber: syz
[   32.539632][   T63] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   32.560636][   T63] usb 3-1: device descriptor read/8, error -71
[   32.690668][   T63] usb 3-1: device descriptor read/8, error -71
[   32.716014][  T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.724623][  T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.741177][  T480] FAULT_INJECTION: forcing a failure.
[   32.741177][  T480] name failslab, interval 1, probability 0, space 0, times 0
[   32.753877][  T480] CPU: 0 UID: 0 PID: 480 Comm: syz.1.44 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   32.753907][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   32.753919][  T480] Call Trace:
[   32.753925][  T480]  <TASK>
[   32.753933][  T480]  __dump_stack+0x21/0x30
[   32.753968][  T480]  dump_stack_lvl+0x140/0x1c0
[   32.753991][  T480]  ? __cfi_dump_stack_lvl+0x10/0x10
[   32.754007][  T480]  dump_stack+0x19/0x20
[   32.754020][  T480]  should_fail_ex+0x3c2/0x510
[   32.754033][  T480]  should_failslab+0xac/0x100
[   32.754046][  T480]  kmem_cache_alloc_noprof+0x42/0x410
[   32.754057][  T480]  ? security_inode_alloc+0x51/0x230
[   32.754071][  T480]  security_inode_alloc+0x51/0x230
[   32.754084][  T480]  inode_init_always_gfp+0x756/0x9e0
[   32.754097][  T480]  ? __cfi_sock_alloc_inode+0x10/0x10
[   32.754108][  T480]  alloc_inode+0xc5/0x270
[   32.754120][  T480]  ? bpf_lsm_socket_create+0xd/0x20
[   32.754132][  T480]  new_inode_pseudo+0x19/0x40
[   32.754145][  T480]  __sock_create+0x130/0x810
[   32.754156][  T480]  __sys_socket+0xe1/0x1c0
[   32.754167][  T480]  __x64_sys_socket+0x7e/0x90
[   32.754177][  T480]  x64_sys_call+0x2608/0x2ee0
[   32.754187][  T480]  do_syscall_64+0x57/0xf0
[   32.754202][  T480]  ? clear_bhb_loop+0x50/0xa0
[   32.754213][  T480]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   32.754225][  T480] RIP: 0033:0x7f08e3b9e159
[   32.754235][  T480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   32.754243][  T480] RSP: 002b:00007f08e4b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   32.754256][  T480] RAX: ffffffffffffffda RBX: 00007f08e3e25fa0 RCX: 00007f08e3b9e159
[   32.754264][  T480] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   32.754270][  T480] RBP: 00007f08e3c35024 R08: 0000000000000000 R09: 0000000000000000
[   32.754277][  T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   32.754283][  T480] R13: 00007f08e3e26038 R14: 00007f08e3e25fa0 R15: 00007ffe594704f8
[   32.754292][  T480]  </TASK>
[   32.754321][  T480] socket: no more sockets
[   32.949626][   T63] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   32.992158][   T63] usb 3-1: device descriptor read/8, error -71
[   33.120651][   T63] usb 3-1: device descriptor read/8, error -71
[   33.219634][   T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   33.229788][   T63] usb usb3-port1: unable to enumerate USB device
[   33.370925][   T45] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   33.382561][   T45] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   33.393553][   T45] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   33.404801][   T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   33.413875][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.422773][  T483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   33.445235][  T311] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[   33.456274][  T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   33.467279][  T382] usb 4-1: unit 0 not found!
[   33.475510][  T311] usb 1-1: USB disconnect, device number 7
[   33.481549][  T382] usb 4-1: USB disconnect, device number 8
[   33.494068][  T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   33.494719][  T484] udevd[484]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   33.540238][  T488] netlink: 'syz.3.47': attribute type 4 has an invalid length.
[   33.547816][  T488] netlink: 17 bytes leftover after parsing attributes in process `syz.3.47'.
[   33.564210][   T36] kauditd_printk_skb: 73 callbacks suppressed
[   33.564227][   T36] audit: type=1400 audit(1788817228.020:221): avc:  denied  { create } for  pid=487 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   33.590343][  T488] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.597680][  T488] netlink: 'syz.3.47': attribute type 1 has an invalid length.
[   33.605469][  T488] netlink: 9 bytes leftover after parsing attributes in process `syz.3.47'.
[   33.753531][  T495] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.767484][   T36] audit: type=1400 audit(1788817228.230:222): avc:  denied  { read write } for  pid=494 comm="syz.3.49" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   33.791068][   T36] audit: type=1400 audit(1788817228.230:223): avc:  denied  { read write } for  pid=494 comm="syz.3.49" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   33.814659][  T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   33.814674][   T36] audit: type=1400 audit(1788817228.230:224): avc:  denied  { open } for  pid=494 comm="syz.3.49" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   33.845627][   T36] audit: type=1400 audit(1788817228.230:225): avc:  denied  { ioctl } for  pid=494 comm="syz.3.49" path="socket:[4055]" dev="sockfs" ino=4055 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.971961][  T311] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   33.981080][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.989059][  T311] usb 1-1: Product: syz
[   33.993265][  T311] usb 1-1: Manufacturer: syz
[   33.997859][  T311] usb 1-1: SerialNumber: syz
[   34.169652][  T382] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   34.319647][  T382] usb 3-1: Using ep0 maxpacket: 8
[   34.326387][  T382] usb 3-1: unable to get BOS descriptor or descriptor too short
[   34.342642][  T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   34.352447][  T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[   34.363550][  T382] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[   34.373546][  T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   34.383238][  T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   34.394902][  T382] usb 3-1: string descriptor 0 read error: -22
[   34.401180][  T382] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   34.403865][   T36] audit: type=1400 audit(1788817228.860:226): avc:  denied  { create } for  pid=503 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   34.411719][  T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.432612][   T36] audit: type=1400 audit(1788817228.860:227): avc:  denied  { setopt } for  pid=503 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   34.447204][  T382] usb 3-1: config 0 descriptor??
[   34.466386][  T499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   34.476212][  T509] FAULT_INJECTION: forcing a failure.
[   34.476212][  T509] name failslab, interval 1, probability 0, space 0, times 0
[   34.488215][  T484] udevd[484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.489010][  T509] CPU: 1 UID: 0 PID: 509 Comm: syz.3.53 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   34.489038][  T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   34.489050][  T509] Call Trace:
[   34.489057][  T509]  <TASK>
[   34.489065][  T509]  __dump_stack+0x21/0x30
[   34.489096][  T509]  dump_stack_lvl+0x140/0x1c0
[   34.489121][  T509]  ? __cfi_dump_stack_lvl+0x10/0x10
[   34.489148][  T509]  dump_stack+0x19/0x20
[   34.489173][  T509]  should_fail_ex+0x3c2/0x510
[   34.489196][  T509]  should_failslab+0xac/0x100
[   34.489218][  T509]  kmem_cache_alloc_noprof+0x42/0x410
[   34.489238][  T509]  ? security_inode_alloc+0x51/0x230
[   34.489262][  T509]  security_inode_alloc+0x51/0x230
[   34.489285][  T509]  inode_init_always_gfp+0x756/0x9e0
[   34.489308][  T509]  ? __cfi_sock_alloc_inode+0x10/0x10
[   34.489326][  T509]  alloc_inode+0xc5/0x270
[   34.489348][  T509]  ? bpf_lsm_socket_create+0xd/0x20
[   34.489369][  T509]  new_inode_pseudo+0x19/0x40
[   34.489392][  T509]  __sock_create+0x130/0x810
[   34.489413][  T509]  __sys_socket+0xe1/0x1c0
[   34.489431][  T509]  __x64_sys_socket+0x7e/0x90
[   34.489450][  T509]  x64_sys_call+0x2608/0x2ee0
[   34.489467][  T509]  do_syscall_64+0x57/0xf0
[   34.489493][  T509]  ? clear_bhb_loop+0x50/0xa0
[   34.489514][  T509]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.489534][  T509] RIP: 0033:0x7f3bc6b9e159
[   34.489550][  T509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.489566][  T509] RSP: 002b:00007f3bc79ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   34.489589][  T509] RAX: ffffffffffffffda RBX: 00007f3bc6e25fa0 RCX: 00007f3bc6b9e159
[   34.489604][  T509] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   34.489615][  T509] RBP: 00007f3bc6c35024 R08: 0000000000000000 R09: 0000000000000000
[   34.489626][  T509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.489638][  T509] R13: 00007f3bc6e26038 R14: 00007f3bc6e25fa0 R15: 00007fff716febb8
[   34.489654][  T509]  </TASK>
[   34.491618][  T509] socket: no more sockets
[   34.718661][   T36] audit: type=1400 audit(1788817229.180:228): avc:  denied  { read write } for  pid=498 comm="syz.2.50" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   34.741837][   T36] audit: type=1400 audit(1788817229.180:229): avc:  denied  { open } for  pid=498 comm="syz.2.50" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   34.764875][   T36] audit: type=1400 audit(1788817229.180:230): avc:  denied  { write } for  pid=498 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   34.821106][  T382] usb 3-1: USB disconnect, device number 7
[   35.820730][  T529] fuse: Unknown parameter 'rootmo00000000140000'
[   36.317372][  T537] FAULT_INJECTION: forcing a failure.
[   36.317372][  T537] name failslab, interval 1, probability 0, space 0, times 0
[   36.330305][  T537] CPU: 0 UID: 0 PID: 537 Comm: syz.2.62 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   36.330336][  T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.330348][  T537] Call Trace:
[   36.330353][  T537]  <TASK>
[   36.330360][  T537]  __dump_stack+0x21/0x30
[   36.330390][  T537]  dump_stack_lvl+0x140/0x1c0
[   36.330414][  T537]  ? __cfi_dump_stack_lvl+0x10/0x10
[   36.330438][  T537]  ? avc_has_perm_noaudit+0x289/0x360
[   36.330461][  T537]  dump_stack+0x19/0x20
[   36.330483][  T537]  should_fail_ex+0x3c2/0x510
[   36.330503][  T537]  should_failslab+0xac/0x100
[   36.330524][  T537]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   36.330554][  T537]  ? sock_alloc_inode+0x48/0x150
[   36.330573][  T537]  sock_alloc_inode+0x48/0x150
[   36.330589][  T537]  ? __cfi_sock_alloc_inode+0x10/0x10
[   36.330607][  T537]  alloc_inode+0x7d/0x270
[   36.330629][  T537]  ? bpf_lsm_socket_create+0xd/0x20
[   36.330649][  T537]  new_inode_pseudo+0x19/0x40
[   36.330670][  T537]  __sock_create+0x130/0x810
[   36.330689][  T537]  __sys_socket+0xe1/0x1c0
[   36.330706][  T537]  __x64_sys_socket+0x7e/0x90
[   36.330724][  T537]  x64_sys_call+0x2608/0x2ee0
[   36.330740][  T537]  do_syscall_64+0x57/0xf0
[   36.330763][  T537]  ? clear_bhb_loop+0x50/0xa0
[   36.330783][  T537]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   36.330801][  T537] RIP: 0033:0x7fce68f9e159
[   36.330816][  T537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.330830][  T537] RSP: 002b:00007fce69f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   36.330849][  T537] RAX: ffffffffffffffda RBX: 00007fce69225fa0 RCX: 00007fce68f9e159
[   36.330863][  T537] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   36.330874][  T537] RBP: 00007fce69035024 R08: 0000000000000000 R09: 0000000000000000
[   36.330885][  T537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.330896][  T537] R13: 00007fce69226038 R14: 00007fce69225fa0 R15: 00007fff6b6fedc8
[   36.330911][  T537]  </TASK>
[   36.330919][  T537] socket: no more sockets
[   36.545660][  T382] usb 1-1: USB disconnect, device number 8
[   36.673428][   T45] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response
[   36.684921][   T45] aiptek 2-1:17.0: probe with driver aiptek failed with error -22
[   36.696144][   T45] usb 2-1: USB disconnect, device number 9
[   36.859719][  T352] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   36.939708][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   36.959639][  T382] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   37.010719][  T352] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[   37.019762][  T352] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   37.029384][  T352] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   37.039296][  T352] usb 4-1: config 1 interface 0 has no altsetting 0
[   37.045939][  T352] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   37.055027][  T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.064319][  T352] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[   37.089661][  T382] usb 1-1: device descriptor read/64, error -71
[   37.099733][    T9] usb 3-1: Using ep0 maxpacket: 32
[   37.107296][    T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[   37.116378][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.124401][    T9] usb 3-1: Product: syz
[   37.128725][    T9] usb 3-1: Manufacturer: syz
[   37.133329][    T9] usb 3-1: SerialNumber: syz
[   37.281452][  T352] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22
[   37.294532][  T352] usb 4-1: USB disconnect, device number 9
[   37.329634][  T382] usb 1-1: device descriptor read/64, error -71
[   37.343096][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[   37.356964][    T9] usb 3-1: USB disconnect, device number 8
[   37.569642][  T382] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   37.619827][   T45] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   37.699623][  T382] usb 1-1: device descriptor read/64, error -71
[   37.771041][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   37.779044][   T45] usb 2-1: not running at top speed; connect to a high speed hub
[   37.787477][   T45] usb 2-1: config 1 has an invalid interface number: 116 but max is 0
[   37.795687][   T45] usb 2-1: config 1 has no interface number 0
[   37.803240][   T45] usb 2-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[   37.814258][   T45] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64
[   37.825246][   T45] usb 2-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81
[   37.834462][  T566] FAULT_INJECTION: forcing a failure.
[   37.834462][  T566] name failslab, interval 1, probability 0, space 0, times 0
[   37.841811][   T45] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64
[   37.850632][  T566] CPU: 0 UID: 0 PID: 566 Comm: syz.3.72 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   37.850662][  T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.850674][  T566] Call Trace:
[   37.850680][  T566]  <TASK>
[   37.850687][  T566]  __dump_stack+0x21/0x30
[   37.850721][  T566]  dump_stack_lvl+0x140/0x1c0
[   37.850746][  T566]  ? __cfi_dump_stack_lvl+0x10/0x10
[   37.850772][  T566]  ? avc_has_perm_noaudit+0x289/0x360
[   37.850796][  T566]  dump_stack+0x19/0x20
[   37.850820][  T566]  should_fail_ex+0x3c2/0x510
[   37.850840][  T566]  should_failslab+0xac/0x100
[   37.850864][  T566]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   37.850884][  T566]  ? sock_alloc_inode+0x48/0x150
[   37.850904][  T566]  sock_alloc_inode+0x48/0x150
[   37.850921][  T566]  ? __cfi_sock_alloc_inode+0x10/0x10
[   37.850938][  T566]  alloc_inode+0x7d/0x270
[   37.850961][  T566]  ? bpf_lsm_socket_create+0xd/0x20
[   37.850982][  T566]  new_inode_pseudo+0x19/0x40
[   37.851014][  T566]  __sock_create+0x130/0x810
[   37.851035][  T566]  __sys_socket+0xe1/0x1c0
[   37.851055][  T566]  __x64_sys_socket+0x7e/0x90
[   37.851075][  T566]  x64_sys_call+0x2608/0x2ee0
[   37.851092][  T566]  do_syscall_64+0x57/0xf0
[   37.851121][  T566]  ? clear_bhb_loop+0x50/0xa0
[   37.851143][  T566]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   37.851163][  T566] RIP: 0033:0x7f3bc6b9e159
[   37.851178][  T566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.851197][  T566] RSP: 002b:00007f3bc79ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   37.851218][  T566] RAX: ffffffffffffffda RBX: 00007f3bc6e25fa0 RCX: 00007f3bc6b9e159
[   37.851232][  T566] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   37.851243][  T566] RBP: 00007f3bc6c35024 R08: 0000000000000000 R09: 0000000000000000
[   37.851256][  T566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   37.851268][  T566] R13: 00007f3bc6e26038 R14: 00007f3bc6e25fa0 R15: 00007fff716febb8
[   37.851285][  T566]  </TASK>
[   37.851294][  T566] socket: no more sockets
[   37.861470][   T45] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid wMaxPacketSize 0
[   37.949637][  T382] usb 1-1: device descriptor read/64, error -71
[   37.952888][   T45] usb 2-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   38.069735][  T382] usb usb1-port1: attempt power cycle
[   38.070618][   T45] usb 2-1: config 1 interface 116 has no altsetting 0
[   38.093191][  T573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=573 comm=syz.3.73
[   38.102297][  T572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=572 comm=syz.3.73
[   38.137605][   T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[   38.146707][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.156518][   T45] usb 2-1: Product: syz
[   38.160730][   T45] usb 2-1: Manufacturer: syz
[   38.165326][   T45] usb 2-1: SerialNumber: syz
[   38.169633][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   38.180125][  T564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   38.187909][  T564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   38.329615][   T10] usb 3-1: Using ep0 maxpacket: 8
[   38.335720][   T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   38.344162][   T10] usb 3-1: config 179 has no interface number 0
[   38.350537][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   38.361612][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   38.372837][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   38.383985][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   38.395570][   T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   38.397278][  T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.409247][   T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   38.419107][  T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.426560][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.436733][   T45] ums-usbat 2-1:1.116: USB Mass Storage device detected
[   38.443343][  T570] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   38.456059][  T382] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   38.480640][  T382] usb 1-1: device descriptor read/8, error -71
[   38.500690][   T45] ums-usbat 2-1:1.116: probe with driver ums-usbat failed with error -5
[   38.513862][   T45] usb 2-1: USB disconnect, device number 10
[   38.610635][  T382] usb 1-1: device descriptor read/8, error -71
[   38.674321][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5
[   38.685184][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   38.685199][   T36] audit: type=1400 audit(1788817233.140:243): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=484 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.713630][   T36] audit: type=1400 audit(1788817233.140:244): avc:  denied  { open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=484 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.737191][   T36] audit: type=1400 audit(1788817233.140:245): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=484 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.859673][  T382] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   38.880603][  T382] usb 1-1: device descriptor read/8, error -71
[   39.011735][  T382] usb 1-1: device descriptor read/8, error -71
[   39.075476][  T312] usb 3-1: USB disconnect, device number 9
[   39.075526][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   39.090924][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[   39.129768][  T382] usb usb1-port1: unable to enumerate USB device
[   39.199642][   T45] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   39.329672][   T45] usb 2-1: device descriptor read/64, error -71
[   39.569639][   T45] usb 2-1: device descriptor read/64, error -71
[   39.603504][  T594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'.
[   39.612751][   T36] audit: type=1400 audit(1788817234.070:246): avc:  denied  { execstack } for  pid=593 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   39.633700][  T596] FAULT_INJECTION: forcing a failure.
[   39.633700][  T596] name failslab, interval 1, probability 0, space 0, times 0
[   39.646429][  T598] 9p: Unknown Cache mode or invalid value dev/kvm
[   39.646420][  T596] CPU: 0 UID: 0 PID: 596 Comm: syz.3.81 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   39.646449][  T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   39.646460][  T596] Call Trace:
[   39.646465][  T596]  <TASK>
[   39.646472][  T596]  __dump_stack+0x21/0x30
[   39.646504][  T596]  dump_stack_lvl+0x140/0x1c0
[   39.646531][  T596]  ? __cfi_dump_stack_lvl+0x10/0x10
[   39.646559][  T596]  dump_stack+0x19/0x20
[   39.646583][  T596]  should_fail_ex+0x3c2/0x510
[   39.646605][  T596]  should_failslab+0xac/0x100
[   39.646627][  T596]  kmem_cache_alloc_noprof+0x42/0x410
[   39.646647][  T596]  ? security_inode_alloc+0x51/0x230
[   39.646671][  T596]  security_inode_alloc+0x51/0x230
[   39.646693][  T596]  inode_init_always_gfp+0x756/0x9e0
[   39.646716][  T596]  ? __cfi_sock_alloc_inode+0x10/0x10
[   39.646734][  T596]  alloc_inode+0xc5/0x270
[   39.646756][  T596]  ? bpf_lsm_socket_create+0xd/0x20
[   39.646777][  T596]  new_inode_pseudo+0x19/0x40
[   39.646800][  T596]  __sock_create+0x130/0x810
[   39.646820][  T596]  __sys_socket+0xe1/0x1c0
[   39.646839][  T596]  __x64_sys_socket+0x7e/0x90
[   39.646857][  T596]  x64_sys_call+0x2608/0x2ee0
[   39.646874][  T596]  do_syscall_64+0x57/0xf0
[   39.646900][  T596]  ? clear_bhb_loop+0x50/0xa0
[   39.646921][  T596]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.646946][  T596] RIP: 0033:0x7f3bc6b9e159
[   39.646963][  T596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.646979][  T596] RSP: 002b:00007f3bc79ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   39.647001][  T596] RAX: ffffffffffffffda RBX: 00007f3bc6e25fa0 RCX: 00007f3bc6b9e159
[   39.647019][  T596] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   39.647031][  T596] RBP: 00007f3bc6c35024 R08: 0000000000000000 R09: 0000000000000000
[   39.647044][  T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.647055][  T596] R13: 00007f3bc6e26038 R14: 00007f3bc6e25fa0 R15: 00007fff716febb8
[   39.647072][  T596]  </TASK>
[   39.647084][  T596] socket: no more sockets
[   39.819625][   T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[   39.893033][   T36] audit: type=1400 audit(1788817234.350:247): avc:  denied  { write } for  pid=601 comm="syz.2.84" path="socket:[5509]" dev="sockfs" ino=5509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.916950][   T36] audit: type=1400 audit(1788817234.350:248): avc:  denied  { setopt } for  pid=602 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.920154][  T612] =======================================================
[   39.920154][  T612] WARNING: The mand mount option has been deprecated and
[   39.920154][  T612]          and is ignored by this kernel. Remove the mand
[   39.920154][  T612]          option from the mount to silence this warning.
[   39.920154][  T612] =======================================================
[   39.982289][  T612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   39.985535][   T36] audit: type=1400 audit(1788817234.440:249): avc:  denied  { unlink } for  pid=611 comm="syz.3.85" name="#3" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   40.028004][   T36] audit: type=1400 audit(1788817234.480:250): avc:  denied  { remount } for  pid=601 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   40.044586][  T614] kvm: pic: non byte read
[   40.047707][   T45] usb 2-1: device descriptor read/64, error -71
[   40.052160][  T614] kvm: pic: non byte read
[   40.062970][   T36] audit: type=1400 audit(1788817234.490:251): avc:  denied  { map } for  pid=618 comm="syz.3.87" path="socket:[5584]" dev="sockfs" ino=5584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   40.069944][  T614] kvm: pic: non byte read
[   40.088379][   T36] audit: type=1400 audit(1788817234.500:252): avc:  denied  { name_bind } for  pid=613 comm="syz.0.86" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   40.099115][  T614] kvm: pic: non byte read
[   40.116094][  T614] kvm: pic: non byte read
[   40.120855][  T614] kvm: pic: non byte read
[   40.140373][  T614] kvm: pic: non byte read
[   40.144934][  T614] kvm: pic: non byte read
[   40.149558][  T614] kvm: pic: non byte read
[   40.186387][  T632] netlink: 'syz.3.90': attribute type 9 has an invalid length.
[   40.264451][  T636] FAULT_INJECTION: forcing a failure.
[   40.264451][  T636] name failslab, interval 1, probability 0, space 0, times 0
[   40.277217][  T636] CPU: 0 UID: 0 PID: 636 Comm: syz.0.92 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   40.277248][  T636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.277260][  T636] Call Trace:
[   40.277265][  T636]  <TASK>
[   40.277272][  T636]  __dump_stack+0x21/0x30
[   40.277303][  T636]  dump_stack_lvl+0x140/0x1c0
[   40.277327][  T636]  ? __cfi_dump_stack_lvl+0x10/0x10
[   40.277351][  T636]  dump_stack+0x19/0x20
[   40.277373][  T636]  should_fail_ex+0x3c2/0x510
[   40.277395][  T636]  should_failslab+0xac/0x100
[   40.277419][  T636]  kmem_cache_alloc_noprof+0x42/0x410
[   40.277438][  T636]  ? security_inode_alloc+0x51/0x230
[   40.277461][  T636]  security_inode_alloc+0x51/0x230
[   40.277485][  T636]  inode_init_always_gfp+0x756/0x9e0
[   40.277507][  T636]  ? __cfi_sock_alloc_inode+0x10/0x10
[   40.277524][  T636]  alloc_inode+0xc5/0x270
[   40.277545][  T636]  ? bpf_lsm_socket_create+0xd/0x20
[   40.277567][  T636]  new_inode_pseudo+0x19/0x40
[   40.277589][  T636]  __sock_create+0x130/0x810
[   40.277610][  T636]  __sys_socket+0xe1/0x1c0
[   40.277629][  T636]  __x64_sys_socket+0x7e/0x90
[   40.277661][  T636]  x64_sys_call+0x2608/0x2ee0
[   40.277679][  T636]  do_syscall_64+0x57/0xf0
[   40.277707][  T636]  ? clear_bhb_loop+0x50/0xa0
[   40.277730][  T636]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   40.277751][  T636] RIP: 0033:0x7f0e4e79e159
[   40.277767][  T636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.277783][  T636] RSP: 002b:00007f0e4f6b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   40.277804][  T636] RAX: ffffffffffffffda RBX: 00007f0e4ea25fa0 RCX: 00007f0e4e79e159
[   40.277820][  T636] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   40.277831][  T636] RBP: 00007f0e4e835024 R08: 0000000000000000 R09: 0000000000000000
[   40.277843][  T636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   40.277857][  T636] R13: 00007f0e4ea26038 R14: 00007f0e4ea25fa0 R15: 00007ffe1462ef48
[   40.277871][  T636]  </TASK>
[   40.277884][  T636] socket: no more sockets
[   40.309634][   T45] usb 2-1: device descriptor read/64, error -71
[   40.599723][   T45] usb usb2-port1: attempt power cycle
[   40.619702][  T352] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   40.771084][  T352] usb 4-1: unable to get BOS descriptor or descriptor too short
[   40.780814][  T352] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[   40.790076][  T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.798056][  T352] usb 4-1: Product: syz
[   40.802240][  T352] usb 4-1: Manufacturer: syz
[   40.806829][  T352] usb 4-1: SerialNumber: syz
[   40.849645][   T63] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   40.939641][   T45] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[   40.960501][   T45] usb 2-1: device descriptor read/8, error -71
[   40.979623][   T63] usb 1-1: device descriptor read/64, error -71
[   41.043608][  T352] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   41.050745][  T352] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   41.059485][  T352] usb 4-1: USB disconnect, device number 10
[   41.069938][  T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   41.091562][   T45] usb 2-1: device descriptor read/8, error -71
[   41.219677][   T63] usb 1-1: device descriptor read/64, error -71
[   41.339649][   T45] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[   41.360607][   T45] usb 2-1: device descriptor read/8, error -71
[   41.459695][   T63] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   41.490606][   T45] usb 2-1: device descriptor read/8, error -71
[   41.579638][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   41.589751][   T63] usb 1-1: device descriptor read/64, error -71
[   41.599804][   T45] usb usb2-port1: unable to enumerate USB device
[   41.749649][   T10] usb 3-1: Using ep0 maxpacket: 8
[   41.755116][   T10] usb 3-1: no configurations
[   41.759824][   T10] usb 3-1: can't read configurations, error -22
[   41.829654][   T63] usb 1-1: device descriptor read/64, error -71
[   41.889635][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   41.939728][   T63] usb usb1-port1: attempt power cycle
[   41.978846][  T672] FAULT_INJECTION: forcing a failure.
[   41.978846][  T672] name failslab, interval 1, probability 0, space 0, times 0
[   41.991562][  T672] CPU: 1 UID: 0 PID: 672 Comm: syz.1.103 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   41.991597][  T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.991609][  T672] Call Trace:
[   41.991613][  T672]  <TASK>
[   41.991619][  T672]  __dump_stack+0x21/0x30
[   41.991640][  T672]  dump_stack_lvl+0x140/0x1c0
[   41.991654][  T672]  ? __cfi_dump_stack_lvl+0x10/0x10
[   41.991668][  T672]  ? avc_has_perm_noaudit+0x289/0x360
[   41.991683][  T672]  dump_stack+0x19/0x20
[   41.991696][  T672]  should_fail_ex+0x3c2/0x510
[   41.991708][  T672]  should_failslab+0xac/0x100
[   41.991720][  T672]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   41.991732][  T672]  ? sock_alloc_inode+0x48/0x150
[   41.991743][  T672]  sock_alloc_inode+0x48/0x150
[   41.991752][  T672]  ? __cfi_sock_alloc_inode+0x10/0x10
[   41.991761][  T672]  alloc_inode+0x7d/0x270
[   41.991774][  T672]  ? bpf_lsm_socket_create+0xd/0x20
[   41.991786][  T672]  new_inode_pseudo+0x19/0x40
[   41.991798][  T672]  __sock_create+0x130/0x810
[   41.991810][  T672]  __sys_socket+0xe1/0x1c0
[   41.991820][  T672]  __x64_sys_socket+0x7e/0x90
[   41.991831][  T672]  x64_sys_call+0x2608/0x2ee0
[   41.991840][  T672]  do_syscall_64+0x57/0xf0
[   41.991855][  T672]  ? clear_bhb_loop+0x50/0xa0
[   41.991867][  T672]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   41.991878][  T672] RIP: 0033:0x7f08e3b9e159
[   41.991887][  T672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.991896][  T672] RSP: 002b:00007f08e4b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   41.991909][  T672] RAX: ffffffffffffffda RBX: 00007f08e3e25fa0 RCX: 00007f08e3b9e159
[   41.991917][  T672] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   41.991923][  T672] RBP: 00007f08e3c35024 R08: 0000000000000000 R09: 0000000000000000
[   41.991930][  T672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   41.991936][  T672] R13: 00007f08e3e26038 R14: 00007f08e3e25fa0 R15: 00007ffe594704f8
[   41.991945][  T672]  </TASK>
[   41.991950][  T672] socket: no more sockets
[   42.049605][   T10] usb 3-1: Using ep0 maxpacket: 8
[   42.206498][   T10] usb 3-1: no configurations
[   42.211183][   T10] usb 3-1: can't read configurations, error -22
[   42.219405][  T675] input: syz1 as /devices/virtual/input/input7
[   42.224806][   T10] usb usb3-port1: attempt power cycle
[   42.234115][  T675] fuse: Unknown parameter '000000000000000000000000x0000000000000005'
[   42.319641][   T63] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   42.340610][   T63] usb 1-1: device descriptor read/8, error -71
[   42.480690][   T63] usb 1-1: device descriptor read/8, error -71
[   42.569677][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   42.590043][   T10] usb 3-1: Using ep0 maxpacket: 8
[   42.595490][   T10] usb 3-1: no configurations
[   42.600118][   T10] usb 3-1: can't read configurations, error -22
[   42.699659][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   42.719639][   T63] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   42.739646][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   42.740695][   T63] usb 1-1: device descriptor read/8, error -71
[   42.770207][   T10] usb 3-1: Using ep0 maxpacket: 8
[   42.775696][   T10] usb 3-1: no configurations
[   42.780446][   T10] usb 3-1: can't read configurations, error -22
[   42.786812][   T10] usb usb3-port1: unable to enumerate USB device
[   42.850837][    T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[   42.862046][    T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   42.874832][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   42.881457][    T9] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[   42.890541][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.890819][   T63] usb 1-1: device descriptor read/8, error -71
[   42.899415][    T9] usb 4-1: config 0 descriptor??
[   43.009729][   T63] usb usb1-port1: unable to enumerate USB device
[   43.312248][    T9] input: HID 6666:8802 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:6666:8802.0001/input/input8
[   43.325319][    T9] smartjoyplus 0003:6666:8802.0001: input,hidraw0: USB HID v0.53 Joystick [HID 6666:8802] on usb-dummy_hcd.3-1/input0
[   43.337808][    T9] smartjoyplus 0003:6666:8802.0001: no output reports found
[   43.359635][   T63] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[   43.489629][   T63] usb 2-1: device descriptor read/64, error -71
[   43.579194][  T687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'.
[   43.588921][    T9] usb 4-1: USB disconnect, device number 11
[   43.729671][   T63] usb 2-1: device descriptor read/64, error -71
[   43.969683][   T63] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[   44.009788][   T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   44.099986][   T63] usb 2-1: device descriptor read/64, error -71
[   44.159653][   T45] usb 1-1: Using ep0 maxpacket: 32
[   44.165877][   T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7
[   44.178353][   T45] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[   44.187435][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.195434][   T45] usb 1-1: Product: syz
[   44.199623][   T45] usb 1-1: Manufacturer: syz
[   44.204195][   T45] usb 1-1: SerialNumber: syz
[   44.351960][   T63] usb 2-1: device descriptor read/64, error -71
[   44.360561][  T707] FAULT_INJECTION: forcing a failure.
[   44.360561][  T707] name failslab, interval 1, probability 0, space 0, times 0
[   44.373283][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   44.373309][  T707] CPU: 1 UID: 0 PID: 707 Comm: syz.2.112 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   44.373336][  T707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.373348][  T707] Call Trace:
[   44.373354][  T707]  <TASK>
[   44.373362][  T707]  __dump_stack+0x21/0x30
[   44.373398][  T707]  dump_stack_lvl+0x140/0x1c0
[   44.373424][  T707]  ? __cfi_dump_stack_lvl+0x10/0x10
[   44.373450][  T707]  ? avc_has_perm_noaudit+0x289/0x360
[   44.373474][  T707]  dump_stack+0x19/0x20
[   44.373497][  T707]  should_fail_ex+0x3c2/0x510
[   44.373520][  T707]  should_failslab+0xac/0x100
[   44.373542][  T707]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   44.373561][  T707]  ? sock_alloc_inode+0x48/0x150
[   44.373580][  T707]  sock_alloc_inode+0x48/0x150
[   44.373598][  T707]  ? __cfi_sock_alloc_inode+0x10/0x10
[   44.373615][  T707]  alloc_inode+0x7d/0x270
[   44.373638][  T707]  ? bpf_lsm_socket_create+0xd/0x20
[   44.373658][  T707]  new_inode_pseudo+0x19/0x40
[   44.373681][  T707]  __sock_create+0x130/0x810
[   44.373701][  T707]  __sys_socket+0xe1/0x1c0
[   44.373720][  T707]  __x64_sys_socket+0x7e/0x90
[   44.373739][  T707]  x64_sys_call+0x2608/0x2ee0
[   44.373755][  T707]  do_syscall_64+0x57/0xf0
[   44.373781][  T707]  ? clear_bhb_loop+0x50/0xa0
[   44.373802][  T707]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   44.373829][  T707] RIP: 0033:0x7fce68f9e159
[   44.373845][  T707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.373862][  T707] RSP: 002b:00007fce69f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   44.373919][  T707] RAX: ffffffffffffffda RBX: 00007fce69225fa0 RCX: 00007fce68f9e159
[   44.373936][  T707] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   44.373947][  T707] RBP: 00007fce69035024 R08: 0000000000000000 R09: 0000000000000000
[   44.373960][  T707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   44.373972][  T707] R13: 00007fce69226038 R14: 00007fce69225fa0 R15: 00007fff6b6fedc8
[   44.373989][  T707]  </TASK>
[   44.374022][  T707] socket: no more sockets
[   44.540736][    T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.542495][   T63] usb usb2-port1: attempt power cycle
[   44.550523][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   44.559925][   T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   44.582331][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00
[   44.585870][   T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   44.590998][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.601043][   T45] usb 1-1: 0:3 : does not exist
[   44.609700][    T9] usb 4-1: config 0 descriptor??
[   44.612768][   T45] usb 1-1: 0:4 : does not exist
[   44.641979][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   44.641994][   T36] audit: type=1400 audit(1788817239.100:270): avc:  denied  { map } for  pid=709 comm="syz.2.113" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   44.643171][   T45] usb 1-1: unit 7 not found!
[   44.648392][  T710] rust_binder: 709:710 error while translating object: EINVAL
[   44.653558][   T36] audit: type=1400 audit(1788817239.110:271): avc:  denied  { call } for  pid=709 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   44.660147][  T710] rust_binder: Failure in copy_transaction_data: EINVAL
[   44.674101][   T45] usb 1-1: USB disconnect, device number 17
[   44.690041][  T710] rust_binder: 709:710 transaction async to 709:0 failed EINVAL, code 0 size 96-24
[   44.718936][  T711] rust_binder: Write failure EFAULT in pid:84
[   44.746192][  T330] rust_binder: 709: undelivered TRANSACTION_ERROR: 29201
[   44.909663][   T63] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[   44.930604][   T63] usb 2-1: device descriptor read/8, error -71
[   45.019632][  T382] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   45.041052][    T9] usbhid 4-1:0.0: can't add hid device: -71
[   45.047009][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   45.056918][    T9] usb 4-1: USB disconnect, device number 12
[   45.070899][   T63] usb 2-1: device descriptor read/8, error -71
[   45.170710][  T382] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   45.180636][  T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[   45.191710][  T382] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[   45.199647][   T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   45.203028][  T382] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   45.218300][  T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.226311][  T382] usb 3-1: Product: syz
[   45.230674][  T382] usb 3-1: Manufacturer: syz
[   45.235278][  T382] usb 3-1: SerialNumber: syz
[   45.240751][  T715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   45.247911][  T715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   45.255881][  T382] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   45.267206][  T382] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   45.277981][  T382] usbserial_generic 3-1:1.0: generic converter detected
[   45.285641][  T382] usb 3-1: generic converter now attached to ttyUSB0
[   45.309679][   T63] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[   45.330717][   T63] usb 2-1: device descriptor read/8, error -71
[   45.360637][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 141, changing to 11
[   45.371840][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.381600][   T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.394428][   T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[   45.403470][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.411994][   T45] usb 1-1: config 0 descriptor??
[   45.460673][   T63] usb 2-1: device descriptor read/8, error -71
[   45.461760][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   45.476522][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   45.486381][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   45.498960][  T382] usb 3-1: USB disconnect, device number 14
[   45.505704][  T382] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   45.513883][  T382] usbserial_generic 3-1:1.0: device disconnected
[   45.569747][   T63] usb usb2-port1: unable to enumerate USB device
[   45.712009][  T727] FAULT_INJECTION: forcing a failure.
[   45.712009][  T727] name failslab, interval 1, probability 0, space 0, times 0
[   45.724745][  T727] CPU: 1 UID: 0 PID: 727 Comm: syz.3.120 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   45.724779][  T727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.724795][  T727] Call Trace:
[   45.724801][  T727]  <TASK>
[   45.724810][  T727]  __dump_stack+0x21/0x30
[   45.724843][  T727]  dump_stack_lvl+0x140/0x1c0
[   45.724869][  T727]  ? __cfi_dump_stack_lvl+0x10/0x10
[   45.724897][  T727]  dump_stack+0x19/0x20
[   45.724921][  T727]  should_fail_ex+0x3c2/0x510
[   45.724945][  T727]  should_failslab+0xac/0x100
[   45.724970][  T727]  __kmalloc_cache_noprof+0x41/0x470
[   45.724991][  T727]  ? init_srcu_struct_fields+0x89/0xac0
[   45.725011][  T727]  ? __vmalloc_noprof+0x104/0x1d0
[   45.725039][  T727]  init_srcu_struct_fields+0x89/0xac0
[   45.725058][  T727]  init_srcu_struct+0xf/0x30
[   45.725076][  T727]  kvm_dev_ioctl+0x428/0x14c0
[   45.725104][  T727]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   45.725131][  T727]  ? bpf_lsm_file_ioctl+0xd/0x20
[   45.725155][  T727]  ? security_file_ioctl+0x3e/0x110
[   45.725174][  T727]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   45.725200][  T727]  __se_sys_ioctl+0x126/0x1b0
[   45.725224][  T727]  __x64_sys_ioctl+0x7f/0xa0
[   45.725247][  T727]  x64_sys_call+0x1878/0x2ee0
[   45.725265][  T727]  do_syscall_64+0x57/0xf0
[   45.725292][  T727]  ? clear_bhb_loop+0x50/0xa0
[   45.725312][  T727]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   45.725334][  T727] RIP: 0033:0x7f3bc6b9e159
[   45.725351][  T727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.725368][  T727] RSP: 002b:00007f3bc79ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   45.725390][  T727] RAX: ffffffffffffffda RBX: 00007f3bc6e25fa0 RCX: 00007f3bc6b9e159
[   45.725406][  T727] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007
[   45.725420][  T727] RBP: 00007f3bc6c35024 R08: 0000000000000000 R09: 0000000000000000
[   45.725433][  T727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.725446][  T727] R13: 00007f3bc6e26038 R14: 00007f3bc6e25fa0 R15: 00007fff716febb8
[   45.725463][  T727]  </TASK>
[   45.941345][   T45] kye 0003:0458:5015.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   45.952169][   T45] kye 0003:0458:5015.0002: No inputs registered, leaving
[   45.959822][   T45] kye 0003:0458:5015.0002: hidraw0: USB HID v0.00 Joystick [HID 0458:5015] on usb-dummy_hcd.0-1/input0
[   45.970937][   T45] kye 0003:0458:5015.0002: tablet-enabling feature report not found
[   45.978964][   T45] kye 0003:0458:5015.0002: tablet enabling failed
[   46.050218][  T730] FAULT_INJECTION: forcing a failure.
[   46.050218][  T730] name failslab, interval 1, probability 0, space 0, times 0
[   46.062912][  T730] CPU: 0 UID: 0 PID: 730 Comm: syz.2.121 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   46.062945][  T730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.062957][  T730] Call Trace:
[   46.062964][  T730]  <TASK>
[   46.062972][  T730]  __dump_stack+0x21/0x30
[   46.063005][  T730]  dump_stack_lvl+0x140/0x1c0
[   46.063028][  T730]  ? __cfi_dump_stack_lvl+0x10/0x10
[   46.063042][  T730]  ? avc_has_perm_noaudit+0x289/0x360
[   46.063056][  T730]  dump_stack+0x19/0x20
[   46.063069][  T730]  should_fail_ex+0x3c2/0x510
[   46.063081][  T730]  should_failslab+0xac/0x100
[   46.063096][  T730]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   46.063109][  T730]  ? sock_alloc_inode+0x48/0x150
[   46.063120][  T730]  sock_alloc_inode+0x48/0x150
[   46.063129][  T730]  ? __cfi_sock_alloc_inode+0x10/0x10
[   46.063146][  T730]  alloc_inode+0x7d/0x270
[   46.063160][  T730]  ? bpf_lsm_socket_create+0xd/0x20
[   46.063173][  T730]  new_inode_pseudo+0x19/0x40
[   46.063187][  T730]  __sock_create+0x130/0x810
[   46.063200][  T730]  __sys_socket+0xe1/0x1c0
[   46.063211][  T730]  __x64_sys_socket+0x7e/0x90
[   46.063222][  T730]  x64_sys_call+0x2608/0x2ee0
[   46.063231][  T730]  do_syscall_64+0x57/0xf0
[   46.063247][  T730]  ? clear_bhb_loop+0x50/0xa0
[   46.063259][  T730]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   46.063271][  T730] RIP: 0033:0x7fce68f9e159
[   46.063281][  T730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.063290][  T730] RSP: 002b:00007fce69f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   46.063303][  T730] RAX: ffffffffffffffda RBX: 00007fce69225fa0 RCX: 00007fce68f9e159
[   46.063311][  T730] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   46.063317][  T730] RBP: 00007fce69035024 R08: 0000000000000000 R09: 0000000000000000
[   46.063324][  T730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   46.063331][  T730] R13: 00007fce69226038 R14: 00007fce69225fa0 R15: 00007fff6b6fedc8
[   46.063340][  T730]  </TASK>
[   46.063375][  T730] socket: no more sockets
[   46.155140][   T45] usb 1-1: USB disconnect, device number 18
[   46.169606][   T36] audit: type=1400 audit(1788817240.620:272): avc:  denied  { read write } for  pid=732 comm="syz.1.122" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.303282][   T36] audit: type=1400 audit(1788817240.620:273): avc:  denied  { open } for  pid=732 comm="syz.1.122" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.331490][   T36] audit: type=1400 audit(1788817240.620:274): avc:  denied  { ioctl } for  pid=732 comm="syz.1.122" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.365538][   T36] audit: type=1400 audit(1788817240.820:275): avc:  denied  { ioctl } for  pid=739 comm="syz.1.125" path="socket:[5949]" dev="sockfs" ino=5949 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.396139][   T36] audit: type=1400 audit(1788817240.850:276): avc:  denied  { ioctl } for  pid=737 comm="syz.2.123" path="socket:[7018]" dev="sockfs" ino=7018 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   46.420490][   T36] audit: type=1400 audit(1788817240.850:277): avc:  denied  { bind } for  pid=737 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   46.439805][   T36] audit: type=1400 audit(1788817240.850:278): avc:  denied  { create } for  pid=737 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   46.559677][   T36] audit: type=1400 audit(1788817241.010:279): avc:  denied  { getopt } for  pid=751 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.611075][  T759] FAULT_INJECTION: forcing a failure.
[   46.611075][  T759] name failslab, interval 1, probability 0, space 0, times 0
[   46.623787][  T759] CPU: 0 UID: 0 PID: 759 Comm: syz.2.131 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   46.623819][  T759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.623832][  T759] Call Trace:
[   46.623839][  T759]  <TASK>
[   46.623846][  T759]  __dump_stack+0x21/0x30
[   46.623869][  T759]  dump_stack_lvl+0x140/0x1c0
[   46.623883][  T759]  ? __cfi_dump_stack_lvl+0x10/0x10
[   46.623899][  T759]  dump_stack+0x19/0x20
[   46.623913][  T759]  should_fail_ex+0x3c2/0x510
[   46.623926][  T759]  should_failslab+0xac/0x100
[   46.623940][  T759]  kmem_cache_alloc_noprof+0x42/0x410
[   46.623951][  T759]  ? security_inode_alloc+0x51/0x230
[   46.623965][  T759]  security_inode_alloc+0x51/0x230
[   46.623977][  T759]  inode_init_always_gfp+0x756/0x9e0
[   46.623991][  T759]  ? __cfi_sock_alloc_inode+0x10/0x10
[   46.624001][  T759]  alloc_inode+0xc5/0x270
[   46.624014][  T759]  ? bpf_lsm_socket_create+0xd/0x20
[   46.624025][  T759]  new_inode_pseudo+0x19/0x40
[   46.624038][  T759]  __sock_create+0x130/0x810
[   46.624050][  T759]  __sys_socket+0xe1/0x1c0
[   46.624060][  T759]  __x64_sys_socket+0x7e/0x90
[   46.624071][  T759]  x64_sys_call+0x2608/0x2ee0
[   46.624081][  T759]  do_syscall_64+0x57/0xf0
[   46.624095][  T759]  ? clear_bhb_loop+0x50/0xa0
[   46.624110][  T759]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   46.624121][  T759] RIP: 0033:0x7fce68f9e159
[   46.624131][  T759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.624141][  T759] RSP: 002b:00007fce69f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   46.624153][  T759] RAX: ffffffffffffffda RBX: 00007fce69225fa0 RCX: 00007fce68f9e159
[   46.624162][  T759] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   46.624169][  T759] RBP: 00007fce69035024 R08: 0000000000000000 R09: 0000000000000000
[   46.624175][  T759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   46.624182][  T759] R13: 00007fce69226038 R14: 00007fce69225fa0 R15: 00007fff6b6fedc8
[   46.624191][  T759]  </TASK>
[   46.624201][  T759] socket: no more sockets
[   46.884668][  T773] syz.3.135 (773): attempted to duplicate a private mapping with mremap.  This is not supported.
[   46.922113][  T775] input: syz0 as /devices/virtual/input/input9
[   46.929033][  T770] 9pnet_fd: Insufficient options for proto=fd
[   46.982009][  T792] netlink: 'syz.1.139': attribute type 27 has an invalid length.
[   47.090344][  T795] FAULT_INJECTION: forcing a failure.
[   47.090344][  T795] name failslab, interval 1, probability 0, space 0, times 0
[   47.103096][  T795] CPU: 1 UID: 0 PID: 795 Comm: syz.1.140 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   47.103128][  T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.103141][  T795] Call Trace:
[   47.103146][  T795]  <TASK>
[   47.103153][  T795]  __dump_stack+0x21/0x30
[   47.103194][  T795]  dump_stack_lvl+0x140/0x1c0
[   47.103220][  T795]  ? __cfi_dump_stack_lvl+0x10/0x10
[   47.103246][  T795]  ? avc_has_perm_noaudit+0x289/0x360
[   47.103272][  T795]  dump_stack+0x19/0x20
[   47.103296][  T795]  should_fail_ex+0x3c2/0x510
[   47.103318][  T795]  should_failslab+0xac/0x100
[   47.103343][  T795]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   47.103364][  T795]  ? sock_alloc_inode+0x48/0x150
[   47.103383][  T795]  sock_alloc_inode+0x48/0x150
[   47.103401][  T795]  ? __cfi_sock_alloc_inode+0x10/0x10
[   47.103420][  T795]  alloc_inode+0x7d/0x270
[   47.103445][  T795]  ? bpf_lsm_socket_create+0xd/0x20
[   47.103466][  T795]  new_inode_pseudo+0x19/0x40
[   47.103499][  T795]  __sock_create+0x130/0x810
[   47.103527][  T795]  __sys_socket+0xe1/0x1c0
[   47.103542][  T795]  __x64_sys_socket+0x7e/0x90
[   47.103563][  T795]  x64_sys_call+0x2608/0x2ee0
[   47.103574][  T795]  do_syscall_64+0x57/0xf0
[   47.103590][  T795]  ? clear_bhb_loop+0x50/0xa0
[   47.103604][  T795]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   47.103616][  T795] RIP: 0033:0x7f08e3b9e159
[   47.103626][  T795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.103636][  T795] RSP: 002b:00007f08e4b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   47.103649][  T795] RAX: ffffffffffffffda RBX: 00007f08e3e25fa0 RCX: 00007f08e3b9e159
[   47.103657][  T795] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   47.103664][  T795] RBP: 00007f08e3c35024 R08: 0000000000000000 R09: 0000000000000000
[   47.103670][  T795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.103677][  T795] R13: 00007f08e3e26038 R14: 00007f08e3e25fa0 R15: 00007ffe594704f8
[   47.103686][  T795]  </TASK>
[   47.103692][  T795] socket: no more sockets
[   47.679631][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   47.714238][  T813] netlink: 'syz.2.146': attribute type 16 has an invalid length.
[   47.722053][  T813] netlink: 'syz.2.146': attribute type 25 has an invalid length.
[   47.730362][  T813] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.146'.
[   47.762108][   T63] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   47.788083][  T819] program syz.2.149 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   47.807933][  T821] FAULT_INJECTION: forcing a failure.
[   47.807933][  T821] name failslab, interval 1, probability 0, space 0, times 0
[   47.821855][  T821] CPU: 0 UID: 0 PID: 821 Comm: syz.2.150 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   47.821888][  T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.821900][  T821] Call Trace:
[   47.821906][  T821]  <TASK>
[   47.821914][  T821]  __dump_stack+0x21/0x30
[   47.821946][  T821]  dump_stack_lvl+0x140/0x1c0
[   47.821970][  T821]  ? __cfi_dump_stack_lvl+0x10/0x10
[   47.821995][  T821]  ? avc_has_perm_noaudit+0x289/0x360
[   47.822018][  T821]  dump_stack+0x19/0x20
[   47.822040][  T821]  should_fail_ex+0x3c2/0x510
[   47.822061][  T821]  should_failslab+0xac/0x100
[   47.822081][  T821]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   47.822101][  T821]  ? sock_alloc_inode+0x48/0x150
[   47.822119][  T821]  sock_alloc_inode+0x48/0x150
[   47.822135][  T821]  ? __cfi_sock_alloc_inode+0x10/0x10
[   47.822152][  T821]  alloc_inode+0x7d/0x270
[   47.822172][  T821]  ? bpf_lsm_socket_create+0xd/0x20
[   47.822192][  T821]  new_inode_pseudo+0x19/0x40
[   47.822213][  T821]  __sock_create+0x130/0x810
[   47.822232][  T821]  __sys_socket+0xe1/0x1c0
[   47.822250][  T821]  __x64_sys_socket+0x7e/0x90
[   47.822267][  T821]  x64_sys_call+0x2608/0x2ee0
[   47.822283][  T821]  do_syscall_64+0x57/0xf0
[   47.822307][  T821]  ? clear_bhb_loop+0x50/0xa0
[   47.822327][  T821]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   47.822345][  T821] RIP: 0033:0x7fce68f9e159
[   47.822361][  T821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.822376][  T821] RSP: 002b:00007fce69f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   47.822395][  T821] RAX: ffffffffffffffda RBX: 00007fce69225fa0 RCX: 00007fce68f9e159
[   47.822427][  T821] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[   47.822439][  T821] RBP: 00007fce69035024 R08: 0000000000000000 R09: 0000000000000000
[   47.822452][  T821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.822463][  T821] R13: 00007fce69226038 R14: 00007fce69225fa0 R15: 00007fff6b6fedc8
[   47.822480][  T821]  </TASK>
[   47.822488][  T821] socket: no more sockets
[   47.920722][   T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   47.923654][   T10] usb 1-1: Using ep0 maxpacket: 16
[   47.927925][   T63] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   47.933580][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30
[   47.944707][   T63] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   47.947656][   T10] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   47.977936][   T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   47.994056][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   48.000728][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.010631][   T10] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[   48.017938][   T63] usb 2-1: Product: syz
[   48.025262][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.027958][   T63] usb 2-1: Manufacturer: syz
[   48.045586][   T10] usb 1-1: config 0 descriptor??
[   48.057459][  T826] FAULT_INJECTION: forcing a failure.
[   48.057459][  T826] name failslab, interval 1, probability 0, space 0, times 0
[   48.160298][   T63] usb 2-1: SerialNumber: syz
[   48.165301][  T826] CPU: 1 UID: 0 PID: 826 Comm: syz.3.152 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   48.165328][  T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.165339][  T826] Call Trace:
[   48.165344][  T826]  <TASK>
[   48.165352][  T826]  __dump_stack+0x21/0x30
[   48.165380][  T826]  dump_stack_lvl+0x140/0x1c0
[   48.165402][  T826]  ? __cfi_dump_stack_lvl+0x10/0x10
[   48.165435][  T826]  dump_stack+0x19/0x20
[   48.165457][  T826]  should_fail_ex+0x3c2/0x510
[   48.165478][  T826]  should_failslab+0xac/0x100
[   48.165498][  T826]  kmem_cache_alloc_noprof+0x42/0x410
[   48.165517][  T826]  ? security_inode_alloc+0x51/0x230
[   48.165539][  T826]  security_inode_alloc+0x51/0x230
[   48.165559][  T826]  inode_init_always_gfp+0x756/0x9e0
[   48.165582][  T826]  ? __cfi_sock_alloc_inode+0x10/0x10
[   48.165599][  T826]  alloc_inode+0xc5/0x270
[   48.165620][  T826]  ? bpf_lsm_socket_create+0xd/0x20
[   48.165639][  T826]  new_inode_pseudo+0x19/0x40
[   48.165660][  T826]  __sock_create+0x130/0x810
[   48.165679][  T826]  __sys_socket+0xe1/0x1c0
[   48.165697][  T826]  __x64_sys_socket+0x7e/0x90
[   48.165715][  T826]  x64_sys_call+0x2608/0x2ee0
[   48.165731][  T826]  do_syscall_64+0x57/0xf0
[   48.165754][  T826]  ? clear_bhb_loop+0x50/0xa0
[   48.165773][  T826]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   48.165792][  T826] RIP: 0033:0x7f3bc6b9e159
[   48.165807][  T826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.165822][  T826] RSP: 002b:00007f3bc79ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   48.165842][  T826] RAX: ffffffffffffffda RBX: 00007f3bc6e25fa0 RCX: 00007f3bc6b9e159
[   48.165856][  T826] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a
[   48.165867][  T826] RBP: 00007f3bc6c35024 R08: 0000000000000000 R09: 0000000000000000
[   48.165878][  T826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.165890][  T826] R13: 00007f3bc6e26038 R14: 00007f3bc6e25fa0 R15: 00007fff716febb8
[   48.165905][  T826]  </TASK>
[   48.165917][  T826] socket: no more sockets
[   48.319373][  T834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'.
[   48.386750][   T63] hub 2-1:1.0: bad descriptor, ignoring hub
[   48.393648][   T63] hub 2-1:1.0: probe with driver hub failed with error -5
[   48.471694][   T10] usbhid 1-1:0.0: can't add hid device: -71
[   48.477732][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   48.489867][   T10] usb 1-1: USB disconnect, device number 19
[   48.599948][   T63] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   48.659634][  T352] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   48.789630][  T352] usb 3-1: device descriptor read/64, error -71
[   48.874271][  T839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.883875][  T839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.998515][  T846] tipc: Started in network mode
[   49.009758][  T846] tipc: Node identity 020d1a98aa4, cluster identity 4711
[   49.019180][  T846] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   49.032064][  T845] tipc: Resetting bearer <eth:syzkaller0>
[   49.039085][  T845] tipc: Disabling bearer <eth:syzkaller0>
[   49.045086][  T352] usb 3-1: device descriptor read/64, error -71
[   49.289629][  T352] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   49.349624][   T63] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   49.419628][  T352] usb 3-1: device descriptor read/64, error -71
[   49.499623][   T63] usb 1-1: Using ep0 maxpacket: 8
[   49.505866][   T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.517108][   T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   49.530214][   T63] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[   49.539376][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.552276][   T63] usb 1-1: config 0 descriptor??
[   49.689635][  T352] usb 3-1: device descriptor read/64, error -71
[   49.809763][  T352] usb usb3-port1: attempt power cycle
[   49.996140][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.003123][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.010185][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.017453][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.024518][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.031600][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.038479][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.045648][   T63] betop 0003:11C0:5506.0003: unknown main item tag 0x0
[   50.053126][   T63] betop 0003:11C0:5506.0003: unknown global tag 0xd
[   50.059992][   T63] betop 0003:11C0:5506.0003: item 0 0 1 13 parsing failed
[   50.067295][   T63] betop 0003:11C0:5506.0003: parse failed
[   50.073314][   T63] betop 0003:11C0:5506.0003: probe with driver betop failed with error -22
[   50.149634][  T352] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   50.170700][  T352] usb 3-1: device descriptor read/8, error -71
[   50.196698][  T857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.208960][  T857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.300719][  T352] usb 3-1: device descriptor read/8, error -71
[   50.541421][  T352] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   50.559756][  T330] usb 2-1: USB disconnect, device number 19
[   50.571296][  T330] usblp0: removed
[   50.580618][  T352] usb 3-1: device descriptor read/8, error -71
[   50.622716][  T870] FAULT_INJECTION: forcing a failure.
[   50.622716][  T870] name failslab, interval 1, probability 0, space 0, times 0
[   50.639613][  T870] CPU: 0 UID: 0 PID: 870 Comm: syz.1.160 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   50.639649][  T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.639662][  T870] Call Trace:
[   50.639669][  T870]  <TASK>
[   50.639677][  T870]  __dump_stack+0x21/0x30
[   50.639711][  T870]  dump_stack_lvl+0x140/0x1c0
[   50.639737][  T870]  ? __cfi_dump_stack_lvl+0x10/0x10
[   50.639762][  T870]  ? futex_wait+0x2b8/0x7c0
[   50.639782][  T870]  ? __cfi_futex_wait+0x10/0x10
[   50.639800][  T870]  dump_stack+0x19/0x20
[   50.639826][  T870]  should_fail_ex+0x3c2/0x510
[   50.639848][  T870]  should_failslab+0xac/0x100
[   50.639872][  T870]  kmem_cache_alloc_noprof+0x42/0x410
[   50.639894][  T870]  ? do_futex+0x32a/0x510
[   50.639917][  T870]  ? getname_flags+0xcc/0x6b0
[   50.639940][  T870]  getname_flags+0xcc/0x6b0
[   50.639962][  T870]  getname+0x1b/0x30
[   50.639982][  T870]  do_sys_openat2+0xda/0x1d0
[   50.640012][  T870]  ? fput+0x1a4/0x230
[   50.640036][  T870]  ? do_sys_open+0x100/0x100
[   50.640064][  T870]  __x64_sys_openat+0x13a/0x170
[   50.640091][  T870]  x64_sys_call+0xe69/0x2ee0
[   50.640110][  T870]  do_syscall_64+0x57/0xf0
[   50.640137][  T870]  ? clear_bhb_loop+0x50/0xa0
[   50.640159][  T870]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   50.640181][  T870] RIP: 0033:0x7f08e3b9e159
[   50.640196][  T870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.640211][  T870] RSP: 002b:00007f08e4b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   50.640239][  T870] RAX: ffffffffffffffda RBX: 00007f08e3e25fa0 RCX: 00007f08e3b9e159
[   50.640256][  T870] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[   50.640271][  T870] RBP: 00007f08e3c35024 R08: 0000000000000000 R09: 0000000000000000
[   50.640285][  T870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.640299][  T870] R13: 00007f08e3e26038 R14: 00007f08e3e25fa0 R15: 00007ffe594704f8
[   50.640316][  T870]  </TASK>
[   50.820893][  T352] usb 3-1: device descriptor read/8, error -71
[   50.969834][  T352] usb usb3-port1: unable to enumerate USB device
[   51.049634][  T330] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   51.210713][  T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.221737][  T330] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   51.230969][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.249354][  T330] usb 2-1: config 0 descriptor??
[   51.457686][  T874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.467194][  T874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.679019][  T330] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[   51.697202][  T330] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input10
[   51.769485][  T330] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[   51.921281][   T36] kauditd_printk_skb: 20 callbacks suppressed
[   51.921299][   T36] audit: type=1400 audit(1788817246.380:300): avc:  denied  { read } for  pid=882 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   52.198099][  T382] usb 1-1: USB disconnect, device number 20
[   52.205946][   T63] usb 2-1: USB disconnect, device number 20
[   52.230258][   T36] audit: type=1400 audit(1788817246.680:301): avc:  denied  { mounton } for  pid=883 comm="syz.0.164" path="/23/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   52.234016][  T884] 9p: Unknown Cache mode or invalid value dev/kvm
Stopping sshd: stopped /usr/sbin/sshd (pid 201)
OK
[   52.404217][   T36] audit: type=1400 audit(1788817246.850:302): avc:  denied  { create } for  pid=891 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
Stopping crond: [   52.449609][   T36] audit: type=1400 audit(1788817246.850:303): avc:  denied  { setattr } for  pid=891 comm="syz.0.166" path="socket:[8612]" dev="sockfs" ino=8612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
stopped /usr/sbin/crond (pid 194)
OK
[   52.509675][   T36] audit: type=1400 audit(1788817246.850:304): avc:  denied  { write } for  pid=891 comm="syz.0.166" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
Stopping dhcpcd...
[   52.559606][   T36] audit: type=1400 audit(1788817246.850:305): avc:  denied  { ioctl } for  pid=891 comm="syz.0.166" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
stopped /sbin/dhcpcd (pid 148)
[   52.617212][   T36] audit: type=1400 audit(1788817246.950:306): avc:  denied  { map } for  pid=897 comm="syz.2.167" path="socket:[8039]" dev="sockfs" ino=8039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
Stopping network: [   52.647913][   T36] audit: type=1400 audit(1788817246.950:307): avc:  denied  { execmem } for  pid=897 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   52.682938][   T36] audit: type=1400 audit(1788817246.950:308): avc:  denied  { read accept } for  pid=897 comm="syz.2.167" path="socket:[8039]" dev="sockfs" ino=8039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   52.706943][  T908] capability: warning: `syz.2.169' uses 32-bit capabilities (legacy support in use)
[   52.765110][   T36] audit: type=1400 audit(1788817247.220:309): avc:  denied  { read write } for  pid=921 comm="ip" path="/dev/console" dev="rootfs" ino=1127 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
OK
Stopping iptables: OK
Stopping system message bus: done
[   53.274639][  T946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.290630][   T63] usb 2-1: new high-speed USB device number 21 using dummy_hcd
Stopping klogd: OK
Stopping acpid: [   53.449729][   T63] usb 2-1: Using ep0 maxpacket: 32
[   53.456111][   T63] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.477159][   T63] usb 2-1: config 0 interface 0 has no altsetting 0
[   53.487253][   T63] usb 2-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00
[   53.496385][   T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.510323][   T63] usb 2-1: config 0 descriptor??
[   53.569677][  T382] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   53.709608][  T382] usb 1-1: device descriptor read/64, error -71
[   53.747023][  T964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.179'.
[   53.759601][  T965] tipc: Can't bind to reserved service type 0
[   53.918433][   T63] input: HID 046d:c101 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C101.0005/input/input11
[   53.934097][   T63] logitech 0003:046D:C101.0005: input,hidraw0: USB HID vd.8f Joystick [HID 046d:c101] on usb-dummy_hcd.1-1/input0
[   53.959620][  T382] usb 1-1: device descriptor read/64, error -71
[   54.069621][  T352] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   54.199619][  T382] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   54.239604][  T352] usb 3-1: Using ep0 maxpacket: 8
[   54.245805][  T352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.256158][  T352] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   54.266639][  T352] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   54.275799][  T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.283897][  T352] usb 3-1: Product: syz
[   54.288135][  T352] usb 3-1: Manufacturer: syz
[   54.292790][  T352] usb 3-1: SerialNumber: syz
[   54.349626][  T382] usb 1-1: device descriptor read/64, error -71
OK
Stopping syslogd: stopped /sbin/syslogd (pid 92)
OK
[   54.510283][  T971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.528880][  T971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.539733][  T352] usb 3-1: unit 4 not found!
[   54.547217][  T352] usb 3-1: USB disconnect, device number 19
umount: can't remount debugfs read-only
[   54.599613][  T382] usb 1-1: device descriptor read/64, error -71
Connection to 10.128.0.133 closed by remote host.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[   54.716985][    T9] usb 2-1: USB disconnect, device number 21
[   54.729678][  T382] usb usb1-port1: attempt power cycle
[   54.831955][  T309] bridge_slave_1: left allmulticast mode
[   54.837643][  T309] bridge_slave_1: left promiscuous mode
[   54.859684][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.873669][  T309] bridge_slave_0: left allmulticast mode
[   54.879331][  T309] bridge_slave_0: left promiscuous mode
[   54.884978][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.002009][  T309] veth1_macvtap: left promiscuous mode
[   55.007511][  T309] veth0_vlan: left promiscuous mode
[   55.242066][  T309] bridge_slave_1: left allmulticast mode
[   55.247720][  T309] bridge_slave_1: left promiscuous mode
[   55.253331][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.260760][  T309] bridge_slave_0: left allmulticast mode
[   55.266457][  T309] bridge_slave_0: left promiscuous mode
[   55.272248][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.279841][  T309] bridge_slave_1: left allmulticast mode
[   55.285464][  T309] bridge_slave_1: left promiscuous mode
[   55.291136][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.298529][  T309] bridge_slave_0: left allmulticast mode
[   55.304246][  T309] bridge_slave_0: left promiscuous mode
[   55.309853][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.317407][  T309] bridge_slave_1: left allmulticast mode
[   55.323180][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.330608][  T309] bridge_slave_0: left allmulticast mode
[   55.336227][  T309] bridge_slave_0: left promiscuous mode
[   55.341885][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.542505][  T309] tipc: Left network mode
[   55.548541][  T309] veth1_macvtap: left promiscuous mode
[   55.554066][  T309] veth0_vlan: left promiscuous mode
[   55.559532][  T309] veth1_macvtap: left promiscuous mode
[   55.565068][  T309] veth0_vlan: left promiscuous mode
[   55.570591][  T309] veth1_macvtap: left promiscuous mode
[   55.576066][  T309] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[   56.012011][  T309] ------------[ cut here ]------------
[   56.017485][  T309] WARNING: CPU: 1 PID: 309 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[   56.027499][  T309] Modules linked in:
[   56.031408][  T309] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:3 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   56.043059][  T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.053128][  T309] Workqueue: netns cleanup_net
[   56.057890][  T309] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[   56.063874][  T309] Code: e8 51 d5 d5 fc 4b 83 3c 3e 00 75 19 e8 d5 fa 7c fc 49 81 ff f8 07 00 00 74 1b e8 c7 fa 7c fc 49 83 c7 08 eb c9 e8 bc fa 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[   56.083536][  T309] RSP: 0018:ffffc9000b71fb90 EFLAGS: 00010293
[   56.089627][  T309] RAX: ffffffff850a7ca4 RBX: ffff888104710000 RCX: ffff8881332aa600
[   56.097595][  T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810475c000
[   56.105578][  T309] RBP: ffffc9000b71fbb0 R08: ffffffff87d43587 R09: 1ffffffff0fa86b0
[   56.113567][  T309] R10: dffffc0000000000 R11: fffffbfff0fa86b1 R12: dffffc0000000000
[   56.121549][  T309] R13: dffffc0000000000 R14: ffff88810475c000 R15: 0000000000000000
[   56.129510][  T309] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   56.138446][  T309] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.145055][  T309] CR2: 000055558a7dd8a8 CR3: 000000010affc000 CR4: 00000000003526b0
[   56.153130][  T309] Call Trace:
[   56.156400][  T309]  <TASK>
[   56.159310][  T309]  cleanup_net+0x6bd/0xc90
[   56.163736][  T309]  ? __cfi_cleanup_net+0x10/0x10
[   56.168692][  T309]  ? kick_pool+0xb9/0x540
[   56.173022][  T309]  process_scheduled_works+0x7f4/0x1060
[   56.178558][  T309]  worker_thread+0xc99/0x13f0
[   56.183248][  T309]  kthread+0x2c4/0x360
[   56.187312][  T309]  ? __cfi_worker_thread+0x10/0x10
[   56.192422][  T309]  ? __cfi_kthread+0x10/0x10
[   56.197004][  T309]  ret_from_fork+0x64/0xa0
[   56.201451][  T309]  ? __cfi_kthread+0x10/0x10
[   56.206060][  T309]  ret_from_fork_asm+0x1a/0x30
[   56.210848][  T309]  </TASK>
[   56.213863][  T309] ---[ end trace 0000000000000000 ]---
[   56.219534][  T309] ------------[ cut here ]------------
[   56.225008][  T309] WARNING: CPU: 0 PID: 309 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
[   56.235106][  T309] Modules linked in:
[   56.239010][  T309] CPU: 0 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G        W          syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   56.252149][  T309] Tainted: [W]=WARN
[   56.255931][  T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.266026][  T309] Workqueue: netns cleanup_net
[   56.270834][  T309] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[   56.276912][  T309] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 80 fa 7c fc 49 81 ff f8 07 00 00 74 1b e8 72 fa 7c fc 49 83 c7 08 eb c5 e8 67 fa 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 57 fa 7c fc 5b 41 5c 41 5e 41
[   56.296651][  T309] RSP: 0018:ffffc9000b71fb90 EFLAGS: 00010293
[   56.302742][  T309] RAX: ffffffff850a7cf9 RBX: ffff88810475c800 RCX: ffff8881332aa600
[   56.310730][  T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810475c810
[   56.318703][  T309] RBP: ffffc9000b71fbb0 R08: ffffffff87d43587 R09: 1ffffffff0fa86b0
[   56.326735][  T309] R10: dffffc0000000000 R11: fffffbfff0fa86b1 R12: dffffc0000000000
[   56.334770][  T309] R13: dffffc0000000000 R14: ffff88810475c000 R15: 0000000000000010
[   56.342785][  T309] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   56.351791][  T309] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.358378][  T309] CR2: 00007f376cff84c0 CR3: 000000010affc000 CR4: 00000000003526b0
[   56.366365][  T309] Call Trace:
[   56.369676][  T309]  <TASK>
[   56.372602][  T309]  cleanup_net+0x6bd/0xc90
[   56.376999][  T309]  ? __cfi_cleanup_net+0x10/0x10
[   56.382040][  T309]  ? kick_pool+0xb9/0x540
[   56.386375][  T309]  process_scheduled_works+0x7f4/0x1060
[   56.391954][  T309]  worker_thread+0xc99/0x13f0
[   56.396633][  T309]  kthread+0x2c4/0x360
[   56.400713][  T309]  ? __cfi_worker_thread+0x10/0x10
[   56.405821][  T309]  ? __cfi_kthread+0x10/0x10
[   56.410424][  T309]  ret_from_fork+0x64/0xa0
[   56.414840][  T309]  ? __cfi_kthread+0x10/0x10
[   56.419440][  T309]  ret_from_fork_asm+0x1a/0x30
[   56.424215][  T309]  </TASK>
[   56.427246][  T309] ---[ end trace 0000000000000000 ]---
[   56.436130][  T309] ------------[ cut here ]------------
[   56.441617][  T309] WARNING: CPU: 1 PID: 309 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310
[   56.451112][  T309] Modules linked in:
[   56.454988][  T309] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G        W          syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767
[   56.468149][  T309] Tainted: [W]=WARN
[   56.471994][  T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.482119][  T309] Workqueue: netns cleanup_net
[   56.486882][  T309] RIP: 0010:xfrm_state_fini+0x2be/0x310
[   56.492475][  T309] Code: 3c 20 00 74 08 48 89 df e8 6f 93 f0 fc 48 8b 3b e8 87 84 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 b8 97 fc <0f> 0b e9 b0 fd ff ff e8 d6 b8 97 fc 0f 0b e9 18 fe ff ff e8 ca b8
[   56.512133][  T309] RSP: 0018:ffffc9000b71fb70 EFLAGS: 00010293
[   56.518212][  T309] RAX: ffffffff84efbe7e RBX: ffff888104710000 RCX: ffff8881332aa600
[   56.526216][  T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881332aa600
[   56.534210][  T309] RBP: ffffc9000b71fb98 R08: ffffffff87d43587 R09: 1ffffffff0fa86b0
[   56.542198][  T309] R10: dffffc0000000000 R11: fffffbfff0fa86b1 R12: 1ffffffff0fa8404
[   56.550186][  T309] R13: dffffc0000000000 R14: ffff888104710c00 R15: dffffc0000000000
[   56.558149][  T309] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   56.567083][  T309] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.573677][  T309] CR2: 000055558a7dd8a8 CR3: 000000010affc000 CR4: 00000000003526b0
[   56.581689][  T309] Call Trace:
[   56.584953][  T309]  <TASK>
[   56.587883][  T309]  xfrm_net_exit+0x31/0x80
[   56.592320][  T309]  cleanup_net+0x6bd/0xc90
[   56.596726][  T309]  ? __cfi_cleanup_net+0x10/0x10
[   56.601673][  T309]  ? kick_pool+0xb9/0x540
[   56.605999][  T309]  process_scheduled_works+0x7f4/0x1060
[   56.611543][  T309]  worker_thread+0xc99/0x13f0
[   56.616212][  T309]  kthread+0x2c4/0x360
[   56.620277][  T309]  ? __cfi_worker_thread+0x10/0x10
[   56.625381][  T309]  ? __cfi_kthread+0x10/0x10
[   56.630313][  T309]  ret_from_fork+0x64/0xa0
[   56.634751][  T309]  ? __cfi_kthread+0x10/0x10
[   56.639418][  T309]  ret_from_fork_asm+0x1a/0x30
[   56.644338][  T309]  </TASK>
[   56.647361][  T309] ---[ end trace 0000000000000000 ]---
[   56.866556][  T983] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   56.873164][  T983] ACPI: PM: Preparing to enter system sleep state S5
[   56.879984][  T983] kvm: exiting hardware virtualization
[   56.885472][  T983] reboot: Power down
serialport: VM disconnected.