last executing test programs: 22.300575763s ago: executing program 3 (id=6): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) inotify_init() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x3e0}}, 0x20010000) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x15) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200001b, 0x100010, r7, 0x604cf000) 22.061868159s ago: executing program 3 (id=13): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0xfc, 0x38}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0xfffffff7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x9, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x3, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x1, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x9, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0xfffffffa, 0x1], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000400010000000000000004000100000000001000030002000100200006"], 0x24, 0x1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) openat(r5, &(0x7f0000000140)='./file0\x00', 0x206b40, 0x60) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21.862245485s ago: executing program 3 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x1c}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000840)={0x1, &(0x7f0000000340)=[{0x8, 0x47, 0x0, 0xffffffff}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) mprotect(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101440, 0xcd) recvmmsg(r2, &(0x7f00000032c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/58, 0x3a}], 0x1, &(0x7f00000004c0)=""/225, 0xe1}, 0xa}, {{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000003200)=[{&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/108, 0x6c}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x4, &(0x7f0000003240)=""/78, 0x4e}, 0x4}], 0x2, 0x12040, 0x0) connect$netlink(r1, &(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc) write(r1, &(0x7f0000000000)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x2000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000000)='7', 0x1) fsmount(r6, 0x1, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21.599258261s ago: executing program 3 (id=16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x7, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000240)={0xed, 0x0, 0x101}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 21.333948538s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth/file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x1000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth/file0\x00', 0x0, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000000000000002004e20ac14141500000000000000000000000000000000000000000000000000956847f6f9e3d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffff0500"/535], 0x210) write(r1, &(0x7f0000000000)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.333614938s ago: executing program 3 (id=19): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020004000100000000000000040001000000000010000300020001"], 0x24, 0x1) epoll_pwait(r4, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @ioapic={0x58000, 0x8, 0x6, 0x1, 0x0, [{0xff, 0x9, 0xff, '\x00', 0x2}, {0x7, 0x81, 0xc, '\x00', 0x40}, {0x2, 0xf, 0x1, '\x00', 0x1}, {0x3, 0x7, 0x2, '\x00', 0x3c}, {0x9, 0xe1, 0xa, '\x00', 0x4}, {0x1, 0x2, 0x5, '\x00', 0xfb}, {0x0, 0xc2, 0xd7, '\x00', 0x10}, {0xe1, 0x3b, 0x2, '\x00', 0x41}, {0xe, 0xb3, 0xc0, '\x00', 0x8}, {0x4, 0x81, 0x7f, '\x00', 0x2}, {0x4, 0x55, 0x0, '\x00', 0x2e}, {0x4, 0x2, 0x1, '\x00', 0x4f}, {0x0, 0x0, 0x0, '\x00', 0x87}, {0x91, 0x8, 0x8, '\x00', 0xed}, {0x5, 0x89, 0x84, '\x00', 0x1f}, {0x4, 0xe, 0x40, '\x00', 0xfb}, {0x2, 0xeb, 0xca, '\x00', 0xfc}, {0xd, 0xc, 0x3, '\x00', 0x6}, {0x6, 0x7, 0x30, '\x00', 0x2}, {0x5, 0xdd, 0x1, '\x00', 0x6}, {0x8, 0x3, 0x7, '\x00', 0x3}, {0xc, 0xce, 0xfe, '\x00', 0x4}, {0x0, 0x40, 0x4, '\x00', 0xd2}, {0x9, 0x7, 0xe9, '\x00', 0x80}]}}) 5.956666321s ago: executing program 32 (id=19): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020004000100000000000000040001000000000010000300020001"], 0x24, 0x1) epoll_pwait(r4, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @ioapic={0x58000, 0x8, 0x6, 0x1, 0x0, [{0xff, 0x9, 0xff, '\x00', 0x2}, {0x7, 0x81, 0xc, '\x00', 0x40}, {0x2, 0xf, 0x1, '\x00', 0x1}, {0x3, 0x7, 0x2, '\x00', 0x3c}, {0x9, 0xe1, 0xa, '\x00', 0x4}, {0x1, 0x2, 0x5, '\x00', 0xfb}, {0x0, 0xc2, 0xd7, '\x00', 0x10}, {0xe1, 0x3b, 0x2, '\x00', 0x41}, {0xe, 0xb3, 0xc0, '\x00', 0x8}, {0x4, 0x81, 0x7f, '\x00', 0x2}, {0x4, 0x55, 0x0, '\x00', 0x2e}, {0x4, 0x2, 0x1, '\x00', 0x4f}, {0x0, 0x0, 0x0, '\x00', 0x87}, {0x91, 0x8, 0x8, '\x00', 0xed}, {0x5, 0x89, 0x84, '\x00', 0x1f}, {0x4, 0xe, 0x40, '\x00', 0xfb}, {0x2, 0xeb, 0xca, '\x00', 0xfc}, {0xd, 0xc, 0x3, '\x00', 0x6}, {0x6, 0x7, 0x30, '\x00', 0x2}, {0x5, 0xdd, 0x1, '\x00', 0x6}, {0x8, 0x3, 0x7, '\x00', 0x3}, {0xc, 0xce, 0xfe, '\x00', 0x4}, {0x0, 0x40, 0x4, '\x00', 0xd2}, {0x9, 0x7, 0xe9, '\x00', 0x80}]}}) 5.309911958s ago: executing program 1 (id=87): mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xdddd0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xd, 0x4, 0x81, 0x0, 0x9, 0x2, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x9, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0xfe}, {0x200000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0xfec00000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x280000001, 0x5, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 5.21945168s ago: executing program 1 (id=88): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000003480)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x8, &(0x7f0000003500)=""/56, 0x38}, 0x9}, {{&(0x7f0000003540)=@generic, 0x80, &(0x7f00000037c0)=[{&(0x7f00000035c0)=""/134, 0x86}, {&(0x7f0000003680)}, {&(0x7f00000036c0)=""/209, 0xd1}], 0x3, &(0x7f0000003800)=""/90, 0x5a}, 0x7}, {{&(0x7f0000003880)=@tipc=@id, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003900)=""/170, 0xaa}, {&(0x7f00000039c0)=""/232, 0xe8}], 0x2}, 0x6}, {{&(0x7f0000003b00)=@can, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b80)=""/49, 0x31}], 0x1}, 0x2061c097}], 0x4, 0x40002141, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000003d00)={'wg1\x00', @local}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000003d40)={0x0, 0x40}) write$tun(r0, &(0x7f0000004d40)={@void, @val={0x2, 0x1, 0xc, 0x7, 0x101, 0x4}, @llc={@snap={0xaa, 0x55, "cd", "9e1147", 0x4, "447a8dd4eccf199e73a274c8a19d11aa2ab49f73da47e6d3d824eaf4ca914132b573a188faba2a508294d9f6991960aa8ae853183e192ebf2b9942838dda7a744ec26b49bdbd9d4e7d72608d1d18fd24fa"}}}, 0x63) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000004dc0)={0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004e00)) preadv2(r0, &(0x7f0000005280)=[{&(0x7f0000004e40)=""/234, 0xea}, {&(0x7f0000004f40)=""/7, 0x7}, {&(0x7f0000004f80)=""/160, 0xa0}, {&(0x7f0000005040)=""/140, 0x8c}, {&(0x7f0000005100)=""/112, 0x70}, {&(0x7f0000005180)=""/170, 0xaa}, {&(0x7f0000005240)=""/52, 0x34}], 0x7, 0x98fa, 0x1000, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000053c0)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x2004cc00) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000005400), &(0x7f0000005440)=0x30) r1 = accept$inet(r0, 0x0, &(0x7f0000005480)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000054c0)={0x0, 'syzkaller1\x00', {0x3}, 0x643}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000005640)={{0xffffffffffffffff, &(0x7f0000005500)='.\x00', 0x1, &(0x7f0000005540)={@_ha_fsid={[0x1000, 0x1]}, {0x5b4, 0x2, 0x0, 0x78}}, 0xffff9dad, &(0x7f0000005580)={@_ha_fsid}, &(0x7f00000055c0)=0x200}, {[0x9, 0x9, 0x6, 0x80]}, 0x200, 0x36, &(0x7f0000005600)=""/54}) r3 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r3, &(0x7f00000056c0)=""/80, 0x50, 0x40002022, &(0x7f0000005740)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x80) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000057c0)={0x9, 0x3ff, 0x5}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) lsm_list_modules(&(0x7f0000005800)=[0x0], &(0x7f0000005840)=0x8, 0x0) syz_clone(0x4008000, &(0x7f0000005880)="8b56626537b45fd2ff31f2cc812eb9d6884b815e5050cdd2bb4ca1c27f3a3af86345668a58aa0fbce655f014a401fe56b0aac58535d97a258446dba06c0cb176bcafffc5d89317ed680d2e2f370de47ca0889a0ac0120270beb54d932eee66d9d1f458236abd2777", 0x68, &(0x7f0000005900), &(0x7f0000005940), &(0x7f0000005980)="06b2354feb200228e007e0ca80de7ba3e55ca3779891ce2ed0885296b1bb3bc31c50a3d3a491f2e2f99d85014aaa203abb5c258cfc377c2e181f7384bef52567fa2cf178150cc9136a740e5a4a44d59ffac093e7ece0efda7c57915ab60a079c8093ae9f65423976834863756402d46d9be4d8f4521affa76fc7521cb63d3ee7b17824e78ed9805e92ad5a0e25a69bfe29211a0f1467a71663a818e1a6ce6340b22d0b843d2846b83b01f9da0a26cfc8493495939d0a9566fcf495d17e7e65") ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000005e40)={0x101fc, 0x200, 0x0, &(0x7f0000005a40)=[0x6, 0x1, 0x7fffffff, 0x7f, 0x2, 0x8, 0x7, 0x49, 0xfffffffffffffffd, 0x6, 0x8, 0x9, 0x9, 0x9, 0x8, 0x100000000, 0x7, 0x9, 0x7ff, 0xfffffffffffffe01, 0x63c8, 0x400, 0x5, 0x8dce, 0x2, 0x7, 0x8000000000000000, 0x8, 0x59, 0x54, 0x1000, 0x0, 0x8, 0x1, 0x6, 0xfffffffffffffff0, 0x401, 0x4, 0x5, 0xa4a4, 0x1, 0x0, 0x7f, 0x2, 0x8, 0x3, 0x6, 0x6, 0x4, 0x4, 0x9d, 0xf, 0x1, 0x2, 0x5, 0x7ff, 0xb, 0x3, 0xa, 0xffffffffffffffff, 0xd02, 0x8, 0xfffffffffffffff9, 0x8, 0x2, 0xc, 0x40, 0x1, 0x200, 0x5, 0x7fff, 0x7, 0x1, 0x100, 0x7, 0x1, 0x1, 0x9, 0x9, 0x400, 0xf, 0x80000000, 0x8000000000000001, 0x48000000000, 0xfffffffffffffffe, 0x4, 0x3, 0x6, 0x0, 0x1, 0xfffffffffffff89e, 0x5, 0xffffffffffffc2c7, 0x1, 0x7, 0x7, 0x6, 0x5, 0xd92e, 0x6, 0x5, 0x7fffffff, 0xe3, 0x0, 0xffffffffffffff4c, 0x7, 0xe839, 0x2d9, 0x5, 0x101, 0x3, 0x3ff, 0x2, 0x8a27, 0x10001, 0x2, 0x6, 0xf211, 0x9, 0x7f9f, 0x9, 0x7, 0x8, 0x5, 0x1, 0xf, 0x5, 0x5]}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000005e80)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000005ec0)={0x4, 0x65, [{0x2, 0x0, 0x4}, {0x400, 0x0, 0x81}, {0x1fffe00, 0x0, 0x80000000}, {0x7, 0x0, 0x6}, {0x48f2, 0x0, 0x3}, {0x80000000, 0x0, 0xffffffff}, {0x1, 0x0, 0x1}, {0x8001, 0x0, 0x7fffffffffffffff}, {0x5, 0x0, 0x9}, {0x56, 0x0, 0x7}, {0xffffffff, 0x0, 0x16e72e38}, {0x2, 0x0, 0x4}, {0xb, 0x0, 0xfc}, {0x7e3, 0x0, 0x8001}, {0xea86, 0x0, 0xfffffffffffffff7}, {0x1, 0x0, 0xfffffffffffffffd}]}) r4 = openat(r0, &(0x7f0000006080)='./file0\x00', 0x100, 0x108) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000060c0)={0x8001}) write$P9_RSETATTR(r1, &(0x7f0000006100)={0x7, 0x1b, 0x2}, 0x7) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, &(0x7f0000006140)=""/12, &(0x7f0000006180)=0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006200), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000006300)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000062c0)={&(0x7f0000006280)={0x24, r5, 0x200, 0x70bd2b, 0x289, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.20282309s ago: executing program 1 (id=89): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002"], &(0x7f0000000bc0)=0x2a) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, 0x0, 0x0, 0x24, 0x1) epoll_pwait(r5, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.266886513s ago: executing program 1 (id=91): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r2) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0x8c}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f00000000c0)) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000500)={"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"}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x3300, 0x4) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f00000001c0)={0xfb7f, 0x200, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x9, 0x6, 0x0, 0xee4, 0x2, 0x5b, 0x1, 0x3b, 0x7, 0x5, 0xff, 0x0, 0x7, 0x9, 0x5, 0xa, 0x1, 0x2, '\x00', 0x1, 0x7fff}) 4.240973904s ago: executing program 2 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1e7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d07, &(0x7f0000000900)) 4.239893044s ago: executing program 2 (id=93): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x0, 0x5, 0xae, {0xae, 0x3, "2d9419c0436681e431e88c3c0f6b717f69f44afa58b4cc57ac32c3730756158ac618bdb9705f2d6da8efbc0ad089f06346b16fbc96b2103143038169a0299cd30e1fbd63167eeedc59a7b8816b4e42cc16d7e42e4af94e567436439eee0ed6925f1159292a2a72814efcebb7607c844a61c96f76bde1b4cc68808f5e073cb02ff880eb58aed90bd8eb65643152aed8704931c6982a73bae6d913d5b9e188fdeeaca4c019e98126392fb06031"}}, &(0x7f00000001c0)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "c858e03fd8fd8f0289442ad4b20d0cf1d7f006153b7ebae27c2b6143f9f954467b5b6a8e3f6c47730396de67e21c396a42e9d4f180f9855f43e974b12f7ff12d6f7367dc469c942e4964a820d266ac9cacfd32aa106ceed5198ea91259888c31346355e0ea0910fc0f13d089b81e771a778844c4eb2d7243f21461c9f993e7a4e13476ae1ab2be6c9ee2addff85c4ca5e441f6b048b2eb927f9599"}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0x17, 0x4b, "aca8b0c7056bc62545732beb7b183ea522e34206fbdea5f07794cf7aafa25ec9da4121ce8b5c9a8921101bf373e53e2cbd9486dd42885331f37d028d659689c89e81daa27a90179db140de"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "9662a3"}, &(0x7f0000000400)={0x20, 0x82, 0x1, '4'}, &(0x7f0000000440)={0x20, 0x83, 0x2, "5504"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "7c798796"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "4594ec"}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f00000008c0)={0x0, 0x1, 0x2, "9458"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.97799602s ago: executing program 1 (id=97): syz_pidfd_open(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys/module/hid_steam/parameters/lizard_mode\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/hid_steam/parameters/lizard_mode\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0\n', 0x2) close(r1) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r2, 0x81, 0x36, &(0x7f0000000500)='B\x00'/53) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='cgroup\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB='-', @ANYRESDEC=r3], 0x8b) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "33fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00170200000008c2dce7cce596b08e7e1aa94f0f318ec362ef296305888d5a9eecd8e4a00e0873fe77a19d0f6661940becd2be1a8a54d7cf70d3cf7a"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) clock_nanosleep(0xfffffff4, 0x225c17d03, &(0x7f0000000400)={0x77359400}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.688846453s ago: executing program 0 (id=103): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wake_unlock', 0x82042, 0x12b) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @any, 0x7}, 0xe) r4 = getegid() mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@uname={'uname', 0x3d, 'netdevsim\x00\xa4\xec\xfc\xfe\x87l!\xf4\xe4WN\xb6\x98\x91\x98\'\'\x8e\xe5\'Vb\xae\vH\xd1-\xaa\a\xec\x85\xcc\x0f\x00\n\xaa\x0e\x9dq\xa9mA\x8flt\x9cJ\xae\'0F\vB\xcb\xff\xf7\x80Z,\xc9\xdb\xd0\xcb\x14\xd6\x87\xc3!5\x9b\xe2\xfbC\xeb\xa2$\xa9<\xfa)\xa6\xcd\xb8Iv\xd1l`p\xe8'}}]}}) r5 = signalfd(r1, &(0x7f0000000000)={[0x318]}, 0x8) setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)={0x2, 0x9, 0x42, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_GET_SPEED(r10, 0x551f) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)={0x34, r8, 0x65c3856849136387, 0x8070bd2a, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004884}, 0x40440c4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r11 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r11, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r11, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.886007573s ago: executing program 0 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x32480, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)='ic', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xffe) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x4210, r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_open_procfs$userns(r3, &(0x7f0000000000)) 1.883975263s ago: executing program 2 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2ac40, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)={0x4, 0x0, [{0x6, 0x3, 0x2, 0xb, 0x26f0779c, 0x8, 0x9}, {0x6, 0x5, 0x500, 0x1, 0xfffffffb, 0x8, 0x7fffffff}, {0x7, 0x0, 0x2, 0x5, 0x8, 0xfffffffa, 0x2}, {0x40000001, 0x0, 0x0, 0x40, 0x2, 0xc98, 0x6a5412a7}]}) 1.872536073s ago: executing program 2 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/pf_taken\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000001900)={0x2020}, 0x2020) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRES8=r0, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100027bd7000ffdbdf251b0000000c00060001000000010000000c000600000000000000000010002e800c0004000200aaaaaaaaabaa"], 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x4040011) 1.817917404s ago: executing program 0 (id=107): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) epoll_pwait(r4, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x1040000) 1.814678154s ago: executing program 2 (id=108): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x7, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000300)={0x0, 0x1c0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xf633, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000005, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffdf, 0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x8000000000000001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400009, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffdffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000000002, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x1000, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x7ffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff7fffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000007, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffbffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff]}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001f51a2404"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0xd60a343d34c3e966, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x2000006, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d757365722cbc7353616368657273696f6e3d3970323048302e752c636f6e7465787435726f6f742c00000000"]) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.710561977s ago: executing program 0 (id=109): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x400000f3}}], 0x18}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x400, 0x1422, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 1.640180799s ago: executing program 0 (id=110): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002"], &(0x7f0000000bc0)=0x2a) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f0000000480)=ANY=[], 0x24, 0x1) epoll_pwait(r5, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.265894868s ago: executing program 4 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000100)=0xbffe) 1.21605192s ago: executing program 4 (id=115): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x274f, 0x2b) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=r3], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x120e2) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0x42cc, 0x8, 0x2, 0x7e}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72a2, 0x10000, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8ad, 0x1, 0x0, 0x3aa, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ec8, 0x4, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18da, 0x80, 0x0, 0x230}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/28, 0x1c}, 0x7f}], 0x1, 0x12023, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'veth0_vlan\x00', 0x1000}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.159639441s ago: executing program 4 (id=116): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x200}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/freeze_notification\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f00000000c0)={0x6, 'geneve0\x00', {0x4}, 0x830}) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000980)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r5}, &(0x7f00000003c0)=ANY=[@ANYBLOB='enc=pkcs1 '], 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r6, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x25, 0x0, &(0x7f0000000040)) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x400000008000002, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19090000000000f3162500e6faffff007000", [0x7, 0xffffffff9673e35d]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100230100003402000003000000400001800d0001007564703a73797a30000000002c0004001400010002007530ac1414aa000005000000000014000200"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x98, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x24c2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x95}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20040891) 1.033883034s ago: executing program 4 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b501a, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000020300)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x8000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0x4000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x8000}]}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x3) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x0, 0x2000}) lseek(r5, 0x8000000000000002, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) ftruncate(0xffffffffffffffff, 0x51a9497) (async) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b501a, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000020300)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x8000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0x4000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x8000}]}) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) (async) ftruncate(r4, 0xffff) (async) fcntl$addseals(r4, 0x409, 0x3) (async) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x0, 0x2000}) (async) lseek(r5, 0x8000000000000002, 0x0) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) (async) 1.033538814s ago: executing program 4 (id=118): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') fallocate(r1, 0x2, 0xf931, 0x5) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="02000000", 0x4}], 0x1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, {[0x5, 0x1000, 0xfffffffffffffffe, 0x1, 0x59, 0x100000001, 0x6, 0xc]}}) 940.555067ms ago: executing program 4 (id=119): socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000640)={0x80000000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) socket$key(0xf, 0x3, 0x2) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x500}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x80, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x8001, 0x16}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x5d, 0x84}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x5, 0x6}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x19, &(0x7f00000000c0)=ANY=[]}) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000140)='./debug\x00', 0x2000020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='+ 2 0 0', 0x7) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[], 0x0) 859.193079ms ago: executing program 33 (id=119): socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000640)={0x80000000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) socket$key(0xf, 0x3, 0x2) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x500}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x80, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x8001, 0x16}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x5d, 0x84}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x5, 0x6}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x19, &(0x7f00000000c0)=ANY=[]}) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000140)='./debug\x00', 0x2000020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='+ 2 0 0', 0x7) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[], 0x0) 648.347464ms ago: executing program 0 (id=121): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfffffffffffffd8d, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x10a}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfffffffffffffd8d, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x10a}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) dup(r3) (async) r6 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) 425.99814ms ago: executing program 2 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x28, 0x0, 0x0, 0x0, @u64=0xfff}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x1ff}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 0s ago: executing program 1 (id=123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x1, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xfffffffb, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e4bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x4, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd4fd, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0xe, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x8, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x12, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) cachestat(r8, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000400010000000000000004000100000000001000030002000100200006"], 0x24, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 20.149788][ T36] audit: type=1400 audit(1791255715.689:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.150945][ T286] cgroup: Unknown subsys name 'net' [ 20.172442][ T36] audit: type=1400 audit(1791255715.689:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.199800][ T36] audit: type=1400 audit(1791255715.719:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.199986][ T286] cgroup: Unknown subsys name 'devices' [ 20.322981][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.328580][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.461714][ T36] audit: type=1400 audit(1791255716.009:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.484932][ T36] audit: type=1400 audit(1791255716.009:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.509695][ T36] audit: type=1400 audit(1791255716.009:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.538458][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.547245][ T36] audit: type=1400 audit(1791255716.089:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.564268][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.572686][ T36] audit: type=1400 audit(1791255716.089:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.607059][ T36] audit: type=1400 audit(1791255716.099:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.632592][ T36] audit: type=1400 audit(1791255716.099:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.410231][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.417338][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.424467][ T296] bridge_slave_0: entered allmulticast mode [ 21.430730][ T296] bridge_slave_0: entered promiscuous mode [ 21.440544][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.447621][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.454810][ T294] bridge_slave_0: entered allmulticast mode [ 21.461109][ T294] bridge_slave_0: entered promiscuous mode [ 21.467377][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.474429][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.481680][ T293] bridge_slave_0: entered allmulticast mode [ 21.487828][ T293] bridge_slave_0: entered promiscuous mode [ 21.494057][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.501073][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.508159][ T296] bridge_slave_1: entered allmulticast mode [ 21.514410][ T296] bridge_slave_1: entered promiscuous mode [ 21.522351][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.529368][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.536437][ T294] bridge_slave_1: entered allmulticast mode [ 21.542584][ T294] bridge_slave_1: entered promiscuous mode [ 21.548569][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.555642][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.562723][ T293] bridge_slave_1: entered allmulticast mode [ 21.568846][ T293] bridge_slave_1: entered promiscuous mode [ 21.609853][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.616920][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.624016][ T295] bridge_slave_0: entered allmulticast mode [ 21.630276][ T295] bridge_slave_0: entered promiscuous mode [ 21.636730][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.643783][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.650834][ T295] bridge_slave_1: entered allmulticast mode [ 21.657168][ T295] bridge_slave_1: entered promiscuous mode [ 21.802804][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.809840][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.817147][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.824208][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.849346][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.856418][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.863702][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.870730][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.879128][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.886184][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.893433][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.900437][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.913455][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.920503][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.927817][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.934847][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.967542][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.974733][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.982487][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.989791][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.997034][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.004537][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.011795][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.018966][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.034257][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.041327][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.049993][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.057044][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.082749][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.089800][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.106043][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.113086][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.120610][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.127691][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.135292][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.142343][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.150031][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.157070][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.169700][ T296] veth0_vlan: entered promiscuous mode [ 22.180998][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.188085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.216710][ T296] veth1_macvtap: entered promiscuous mode [ 22.243100][ T295] veth0_vlan: entered promiscuous mode [ 22.258771][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.285347][ T294] veth0_vlan: entered promiscuous mode [ 22.291989][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.298548][ T294] veth1_macvtap: entered promiscuous mode [ 22.317272][ T295] veth1_macvtap: entered promiscuous mode [ 22.323456][ T293] veth0_vlan: entered promiscuous mode [ 22.374674][ T293] veth1_macvtap: entered promiscuous mode [ 22.410143][ T9] sony 0005:054C:03D5.0001: UNIQ does not contain a MAC address; duplicate check skipped [ 22.432652][ T9] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0001/input/input4 [ 22.447582][ T324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 22.448934][ T9] sony 0005:054C:03D5.0001: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 22.489307][ T330] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 22.523191][ T326] fido_id[326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 22.524862][ T333] futex_wake_op: syz.3.6 tries to shift op by 144; fix this program [ 22.603558][ T340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=340 comm=syz.3.6 [ 22.685581][ T346] option changes via remount are deprecated (pid=345 comm=syz.2.10) [ 22.700982][ T346] netlink: 'syz.2.10': attribute type 9 has an invalid length. [ 22.708893][ T346] netlink: 'syz.2.10': attribute type 2 has an invalid length. [ 22.951351][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.984018][ T362] FAULT_INJECTION: forcing a failure. [ 22.984018][ T362] name fail_futex, interval 1, probability 0, space 0, times 1 [ 22.997010][ T362] CPU: 0 UID: 0 PID: 362 Comm: syz.3.15 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 22.997029][ T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 22.997042][ T362] Call Trace: [ 22.997046][ T362] [ 22.997050][ T362] __dump_stack+0x21/0x30 [ 22.997079][ T362] dump_stack_lvl+0x140/0x1c0 [ 22.997094][ T362] ? __cfi_dump_stack_lvl+0x10/0x10 [ 22.997109][ T362] ? save_fpregs_to_fpstate+0x19d/0x230 [ 22.997122][ T362] dump_stack+0x19/0x20 [ 22.997136][ T362] should_fail_ex+0x3c2/0x510 [ 22.997150][ T362] should_fail+0xf/0x20 [ 22.997162][ T362] get_futex_key+0x178/0x940 [ 22.997176][ T362] ? __cfi_get_futex_key+0x10/0x10 [ 22.997189][ T362] ? _raw_spin_unlock+0x45/0x60 [ 22.997201][ T362] futex_wake+0x150/0x950 [ 22.997211][ T362] ? __kasan_check_write+0x18/0x20 [ 22.997223][ T362] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 22.997233][ T362] ? __cfi_futex_wake+0x10/0x10 [ 22.997243][ T362] ? perf_lock_task_context+0x398/0x450 [ 22.997256][ T362] ? __perf_event_period+0x490/0x490 [ 22.997267][ T362] ? mutex_unlock+0x90/0x240 [ 22.997280][ T362] do_futex+0x37d/0x510 [ 22.997294][ T362] ? __kasan_check_read+0x15/0x20 [ 22.997305][ T362] ? __cfi_do_futex+0x10/0x10 [ 22.997318][ T362] ? __kasan_check_write+0x18/0x20 [ 22.997329][ T362] mm_release+0x15f/0x300 [ 22.997342][ T362] ? exit_mm_release+0x50/0x50 [ 22.997354][ T362] ? futex_exit_release+0x11d/0x1f0 [ 22.997368][ T362] exit_mm_release+0x29/0x50 [ 22.997380][ T362] do_exit+0x832/0x2850 [ 22.997395][ T362] ? futex_wake+0x666/0x950 [ 22.997404][ T362] ? __cfi_do_exit+0x10/0x10 [ 22.997417][ T362] ? futex_wait+0x2b8/0x7c0 [ 22.997426][ T362] ? __cfi_futex_wait+0x10/0x10 [ 22.997436][ T362] ? __kasan_check_write+0x18/0x20 [ 22.997446][ T362] ? _raw_spin_lock_irq+0x93/0x120 [ 22.997457][ T362] do_group_exit+0x21f/0x2f0 [ 22.997470][ T362] ? __kasan_check_write+0x18/0x20 [ 22.997480][ T362] ? recalc_sigpending+0x16c/0x1d0 [ 22.997492][ T362] get_signal+0x134c/0x1490 [ 22.997508][ T362] arch_do_signal_or_restart+0xbc/0x700 [ 22.997518][ T362] ? _raw_spin_unlock+0x45/0x60 [ 22.997529][ T362] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 22.997540][ T362] syscall_exit_to_user_mode+0x57/0xb0 [ 22.997564][ T362] do_syscall_64+0x63/0xf0 [ 22.997574][ T362] ? clear_bhb_loop+0x50/0xa0 [ 22.997589][ T362] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 22.997602][ T362] RIP: 0033:0x7ff0cfd9e199 [ 22.997615][ T362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.997624][ T362] RSP: 002b:00007ff0d0c080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 22.997642][ T362] RAX: fffffffffffffe00 RBX: 00007ff0d0025fa8 RCX: 00007ff0cfd9e199 [ 22.997650][ T362] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff0d0025fa8 [ 22.997657][ T362] RBP: 00007ff0d0025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 22.997664][ T362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 22.997670][ T362] R13: 00007ff0d0026038 R14: 00007ffd93e5fab0 R15: 00007ffd93e5fb98 [ 22.997679][ T362] [ 23.231453][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.324578][ T45] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 23.333832][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.342779][ T45] usb 2-1: config 0 descriptor?? [ 23.491294][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 23.501673][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 23.510050][ T31] usb 3-1: config 14 has an invalid interface number: 35 but max is 0 [ 23.518693][ T31] usb 3-1: config 14 has no interface number 0 [ 23.525041][ T31] usb 3-1: config 14 interface 35 has no altsetting 0 [ 23.533881][ T31] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.92 [ 23.543107][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.555979][ T31] usb 3-1: Product: syz [ 23.560318][ T31] usb 3-1: Manufacturer: syz [ 23.565334][ T31] usb 3-1: SerialNumber: syz [ 23.621272][ T370] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.782804][ T370] usb 1-1: unable to get BOS descriptor or descriptor too short [ 23.791536][ T359] rust_binder: 358:359 no such ref 0 [ 23.798929][ T359] rust_binder: Write failure EFAULT in pid:13 [ 23.799796][ T370] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 23.819074][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.827940][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.835939][ T370] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 23.848547][ T370] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.858196][ T31] usb-storage 3-1:14.35: USB Mass Storage device detected [ 23.865356][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.873881][ T370] usb 1-1: Product: syz [ 23.878307][ T370] usb 1-1: Manufacturer: syz [ 23.883856][ T31] usb-storage 3-1:14.35: Quirks match for vid 04e6 pid 0007: 1 [ 23.891651][ T370] usb 1-1: SerialNumber: syz [ 23.933951][ T31] usb 3-1: USB disconnect, device number 2 [ 24.101763][ T366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.111062][ T366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.145158][ T370] cdc_ncm 1-1:1.0: bind() failure [ 24.151800][ T370] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 24.158960][ T370] cdc_ncm 1-1:1.1: bind() failure [ 24.165849][ T370] usb 1-1: USB disconnect, device number 2 [ 24.679301][ T383] random: crng reseeded on system resumption [ 24.795705][ T386] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 24.811264][ T386] SELinux: failed to load policy [ 24.967759][ T45] usb 2-1: Cannot set autoneg [ 24.974994][ T45] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 25.001753][ T45] usb 2-1: USB disconnect, device number 2 [ 25.492264][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 25.492281][ T36] audit: type=1400 audit(1791255721.039:157): avc: denied { read } for pid=391 comm="syz.1.25" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 25.521131][ T36] audit: type=1400 audit(1791255721.059:158): avc: denied { open } for pid=391 comm="syz.1.25" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 25.663702][ T394] overlayfs: missing 'lowerdir' [ 25.947657][ T36] audit: type=1400 audit(1791255721.489:159): avc: denied { listen } for pid=395 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.967277][ T36] audit: type=1400 audit(1791255721.489:160): avc: denied { setopt } for pid=395 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.987463][ T36] audit: type=1400 audit(1791255721.489:161): avc: denied { getopt } for pid=395 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.007560][ T36] audit: type=1400 audit(1791255721.489:162): avc: denied { create } for pid=395 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.027313][ T36] audit: type=1400 audit(1791255721.489:163): avc: denied { connect } for pid=395 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.048973][ T400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 26.185212][ T36] audit: type=1400 audit(1791255721.729:164): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 26.461306][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.612730][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.621295][ T311] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 26.632996][ T311] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 26.642636][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 26.650697][ T311] usb 3-1: Product: syz [ 26.655198][ T311] usb 3-1: Manufacturer: syz [ 26.674676][ T311] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 26.686454][ T404] FAULT_INJECTION: forcing a failure. [ 26.686454][ T404] name failslab, interval 1, probability 0, space 0, times 0 [ 26.699469][ T404] CPU: 1 UID: 0 PID: 404 Comm: syz.0.28 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 26.699498][ T404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 26.699510][ T404] Call Trace: [ 26.699516][ T404] [ 26.699523][ T404] __dump_stack+0x21/0x30 [ 26.699558][ T404] dump_stack_lvl+0x140/0x1c0 [ 26.699583][ T404] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.699611][ T404] dump_stack+0x19/0x20 [ 26.699634][ T404] should_fail_ex+0x3c2/0x510 [ 26.699657][ T404] should_failslab+0xac/0x100 [ 26.699681][ T404] kmem_cache_alloc_noprof+0x42/0x410 [ 26.699702][ T404] ? __kernfs_new_node+0xf1/0x740 [ 26.699727][ T404] __kernfs_new_node+0xf1/0x740 [ 26.699752][ T404] ? make_kgid+0x1d0/0x690 [ 26.699774][ T404] ? kernfs_new_node+0x280/0x280 [ 26.699798][ T404] ? irqentry_exit+0x4a/0x60 [ 26.699824][ T404] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 26.699848][ T404] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 26.699874][ T404] ? __cfi_net_get_ownership+0x10/0x10 [ 26.699898][ T404] kernfs_new_node+0x154/0x280 [ 26.699922][ T404] kernfs_create_dir_ns+0x4b/0x130 [ 26.699948][ T404] sysfs_create_dir_ns+0x127/0x210 [ 26.699969][ T404] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 26.699991][ T404] ? net_namespace+0x11/0x50 [ 26.700011][ T404] kobject_add_internal+0x71f/0xc20 [ 26.700033][ T404] kobject_add+0x169/0x240 [ 26.700051][ T404] ? mutex_unlock+0x90/0x240 [ 26.700075][ T404] ? __cfi_kobject_add+0x10/0x10 [ 26.700094][ T404] ? kobject_put+0x1cc/0x2a0 [ 26.700113][ T404] ? get_device_parent+0x43d/0x470 [ 26.700132][ T404] device_add+0x3b5/0xbf0 [ 26.700149][ T404] netdev_register_kobject+0x196/0x330 [ 26.700169][ T404] register_netdevice+0x1042/0x1a80 [ 26.700190][ T404] ? __kmalloc_cache_noprof+0x23c/0x470 [ 26.700211][ T404] ? __cfi_register_netdevice+0x10/0x10 [ 26.700233][ T404] tun_set_iff+0x828/0xec0 [ 26.700252][ T404] __tun_chr_ioctl+0x852/0x1fb0 [ 26.700269][ T404] ? mutex_unlock+0x90/0x240 [ 26.700290][ T404] ? tun_flow_create+0x400/0x400 [ 26.700311][ T404] ? __fget_files+0x2bc/0x330 [ 26.700333][ T404] tun_chr_ioctl+0x2e/0x40 [ 26.700356][ T404] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 26.700373][ T404] __se_sys_ioctl+0x126/0x1b0 [ 26.700395][ T404] __x64_sys_ioctl+0x7f/0xa0 [ 26.700416][ T404] x64_sys_call+0x1878/0x2ee0 [ 26.700434][ T404] do_syscall_64+0x57/0xf0 [ 26.700451][ T404] ? clear_bhb_loop+0x50/0xa0 [ 26.700474][ T404] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.700497][ T404] RIP: 0033:0x7fae3979e199 [ 26.700513][ T404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.700529][ T404] RSP: 002b:00007fae3a646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.700550][ T404] RAX: ffffffffffffffda RBX: 00007fae39a25fa0 RCX: 00007fae3979e199 [ 26.700565][ T404] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 26.700579][ T404] RBP: 00007fae3a646090 R08: 0000000000000000 R09: 0000000000000000 [ 26.700591][ T404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 26.700604][ T404] R13: 00007fae39a26038 R14: 00007fae39a25fa0 R15: 00007ffe97e5b1b8 [ 26.700620][ T404] [ 26.700703][ T404] kobject: kobject_add_internal failed for syzkaller1 (error: -12 parent: net) [ 27.029930][ T311] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 27.039683][ T311] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 27.051274][ T311] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 27.086278][ T311] usb 3-1: USB disconnect, device number 3 [ 27.301292][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.321307][ T370] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.410099][ T36] audit: type=1400 audit(1791255722.939:165): avc: denied { create } for pid=409 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.439402][ T36] audit: type=1400 audit(1791255722.939:166): avc: denied { bind } for pid=409 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.461278][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 27.472650][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 27.491267][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.492590][ T370] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.507484][ T9] usb 1-1: Product: syz [ 27.508172][ T370] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 27.521263][ T9] usb 1-1: Manufacturer: syz [ 27.526328][ T9] usb 1-1: SerialNumber: syz [ 27.531264][ T370] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 27.552744][ T370] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.561918][ T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.569926][ T370] usb 2-1: Product: syz [ 27.574413][ T370] usb 2-1: Manufacturer: syz [ 27.579019][ T370] usb 2-1: SerialNumber: syz [ 27.737541][ T408] syz.0.29: attempt to access beyond end of device [ 27.737541][ T408] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 27.750253][ T408] exFAT-fs (loop0): unable to read boot sector [ 27.757794][ T408] exFAT-fs (loop0): failed to read boot sector [ 27.764120][ T408] exFAT-fs (loop0): failed to recognize exfat type [ 27.774897][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.790296][ T407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.791421][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 27.800656][ T407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.813836][ T9] usb 1-1: USB disconnect, device number 3 [ 27.834201][ T370] cdc_ncm 2-1:1.0: bind() failure [ 27.842362][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.862443][ T370] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 27.872305][ T370] cdc_ncm 2-1:1.1: bind() failure [ 27.881553][ T370] usb 2-1: USB disconnect, device number 3 [ 28.453808][ T431] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 28.863629][ T446] FAULT_INJECTION: forcing a failure. [ 28.863629][ T446] name failslab, interval 1, probability 0, space 0, times 0 [ 28.884500][ T446] CPU: 1 UID: 0 PID: 446 Comm: syz.1.42 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 28.884534][ T446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.884546][ T446] Call Trace: [ 28.884552][ T446] [ 28.884560][ T446] __dump_stack+0x21/0x30 [ 28.884591][ T446] dump_stack_lvl+0x140/0x1c0 [ 28.884617][ T446] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.884643][ T446] ? find_get_block_common+0xc48/0xe80 [ 28.884669][ T446] dump_stack+0x19/0x20 [ 28.884693][ T446] should_fail_ex+0x3c2/0x510 [ 28.884716][ T446] should_failslab+0xac/0x100 [ 28.884740][ T446] kmem_cache_alloc_noprof+0x42/0x410 [ 28.884760][ T446] ? bdev_getblk+0x58/0x4f0 [ 28.884782][ T446] ? __get_acl+0xa6/0x430 [ 28.884799][ T446] ? jbd2__journal_start+0x16d/0x860 [ 28.884822][ T446] ? ext4_get_group_desc+0x2d0/0x410 [ 28.884847][ T446] jbd2__journal_start+0x16d/0x860 [ 28.884869][ T446] __ext4_journal_start_sb+0x111/0x3f0 [ 28.884897][ T446] __ext4_new_inode+0x1193/0x3920 [ 28.884925][ T446] ? __cfi___ext4_new_inode+0x10/0x10 [ 28.884950][ T446] ? dquot_initialize+0x40/0x40 [ 28.884970][ T446] ? ext4_lookup+0x303/0x710 [ 28.884995][ T446] ext4_create+0x238/0x480 [ 28.885020][ T446] ? __cfi_ext4_create+0x10/0x10 [ 28.885045][ T446] ? bpf_lsm_inode_create+0xd/0x20 [ 28.885066][ T446] ? security_inode_create+0x7e/0x180 [ 28.885093][ T446] ? __cfi_ext4_create+0x10/0x10 [ 28.885117][ T446] path_openat+0x150e/0x35a0 [ 28.885146][ T446] ? do_filp_open+0x440/0x440 [ 28.885173][ T446] do_filp_open+0x1f2/0x440 [ 28.885198][ T446] ? __cfi_do_filp_open+0x10/0x10 [ 28.885226][ T446] ? alloc_fd+0x4c1/0x570 [ 28.885255][ T446] do_sys_openat2+0x134/0x1d0 [ 28.885282][ T446] ? fput+0x1a4/0x230 [ 28.885306][ T446] ? do_sys_open+0x100/0x100 [ 28.885331][ T446] ? ksys_write+0x1f3/0x260 [ 28.885352][ T446] ? __cfi_ksys_write+0x10/0x10 [ 28.885373][ T446] __x64_sys_openat+0x13a/0x170 [ 28.885401][ T446] x64_sys_call+0xe69/0x2ee0 [ 28.885419][ T446] do_syscall_64+0x57/0xf0 [ 28.885439][ T446] ? clear_bhb_loop+0x50/0xa0 [ 28.885470][ T446] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.885494][ T446] RIP: 0033:0x7f0eadb9e199 [ 28.885511][ T446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.885527][ T446] RSP: 002b:00007f0eaea7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 28.885548][ T446] RAX: ffffffffffffffda RBX: 00007f0eade25fa0 RCX: 00007f0eadb9e199 [ 28.885564][ T446] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 28.885577][ T446] RBP: 00007f0eaea7c090 R08: 0000000000000000 R09: 0000000000000000 [ 28.885594][ T446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 28.885606][ T446] R13: 00007f0eade26038 R14: 00007f0eade25fa0 R15: 00007fff91710ae8 [ 28.885622][ T446] [ 28.885650][ T446] EXT4-fs error (device sda1) in __ext4_new_inode:1090: Out of memory [ 29.214198][ T454] Bluetooth: hci0: sending frame failed (-49) [ 29.220367][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 29.441278][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.531280][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.536023][ T461] ./dev/sda1: Can't lookup blockdev [ 29.591282][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 29.602343][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.621839][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.641264][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 29.651116][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 29.671620][ T9] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 29.680675][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.711371][ T9] usb 2-1: Product: syz [ 29.715571][ T9] usb 2-1: Manufacturer: syz [ 29.719470][ T469] FAULT_INJECTION: forcing a failure. [ 29.719470][ T469] name failslab, interval 1, probability 0, space 0, times 0 [ 29.732539][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.741093][ T65] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 29.741275][ T469] CPU: 1 UID: 0 PID: 469 Comm: syz.0.50 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 29.741302][ T469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 29.741314][ T469] Call Trace: [ 29.741319][ T469] [ 29.741326][ T469] __dump_stack+0x21/0x30 [ 29.741355][ T469] dump_stack_lvl+0x140/0x1c0 [ 29.741380][ T469] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.741403][ T469] ? proc_pident_instantiate+0x6d/0x2c0 [ 29.741427][ T469] ? proc_tid_base_lookup+0x2f/0x40 [ 29.741444][ T469] ? path_openat+0x1124/0x35a0 [ 29.741476][ T469] ? do_filp_open+0x1f2/0x440 [ 29.741499][ T469] ? __x64_sys_openat+0x13a/0x170 [ 29.741525][ T469] ? x64_sys_call+0xe69/0x2ee0 [ 29.741541][ T469] ? do_syscall_64+0x57/0xf0 [ 29.741561][ T469] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.741585][ T469] dump_stack+0x19/0x20 [ 29.741608][ T469] should_fail_ex+0x3c2/0x510 [ 29.741629][ T469] should_failslab+0xac/0x100 [ 29.741651][ T469] kmem_cache_alloc_node_noprof+0x45/0x420 [ 29.741672][ T469] ? __alloc_skb+0x10c/0x360 [ 29.741694][ T469] ? avc_has_perm_noaudit+0x289/0x360 [ 29.741717][ T469] __alloc_skb+0x10c/0x360 [ 29.741738][ T469] alloc_skb_with_frags+0xd0/0x8b0 [ 29.741763][ T469] sock_alloc_send_pskb+0x883/0x9a0 [ 29.741791][ T469] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 29.741818][ T469] ? iov_iter_advance+0x9b/0x1e0 [ 29.741843][ T469] tun_get_user+0xaef/0x3720 [ 29.741866][ T469] ? ptr_ring_consume+0x430/0x430 [ 29.741885][ T469] ? _parse_integer+0x2e/0x40 [ 29.741905][ T469] ? kstrtoull+0x13b/0x1e0 [ 29.741925][ T469] ? __kasan_check_write+0x18/0x20 [ 29.741943][ T469] ? ref_tracker_alloc+0x32b/0x5b0 [ 29.741966][ T469] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 29.741989][ T469] ? selinux_file_permission+0x318/0xb60 [ 29.742010][ T469] ? __kasan_check_write+0x18/0x20 [ 29.742029][ T469] ? proc_fail_nth_write+0x184/0x220 [ 29.742054][ T469] tun_chr_write_iter+0x1fa/0x310 [ 29.742074][ T469] vfs_write+0x762/0xfd0 [ 29.742093][ T469] ? __cfi_vfs_write+0x10/0x10 [ 29.742115][ T469] ksys_write+0x145/0x260 [ 29.742135][ T469] ? __cfi_ksys_write+0x10/0x10 [ 29.742155][ T469] ? __kasan_check_read+0x15/0x20 [ 29.742173][ T469] __x64_sys_write+0x7f/0x90 [ 29.742192][ T469] x64_sys_call+0x271c/0x2ee0 [ 29.742209][ T469] do_syscall_64+0x57/0xf0 [ 29.742227][ T469] ? clear_bhb_loop+0x50/0xa0 [ 29.742250][ T469] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.742272][ T469] RIP: 0033:0x7fae3979e199 [ 29.742287][ T469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.742303][ T469] RSP: 002b:00007fae3a646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 29.742323][ T469] RAX: ffffffffffffffda RBX: 00007fae39a25fa0 RCX: 00007fae3979e199 [ 29.742337][ T469] RDX: 0000000000000fca RSI: 0000200000001240 RDI: 0000000000000003 [ 29.742350][ T469] RBP: 00007fae3a646090 R08: 0000000000000000 R09: 0000000000000000 [ 29.742361][ T469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.742373][ T469] R13: 00007fae39a26038 R14: 00007fae39a25fa0 R15: 00007ffe97e5b1b8 [ 29.742388][ T469] [ 30.067049][ T9] usb 2-1: SerialNumber: syz [ 30.072714][ T65] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 30.085602][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.111260][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.119335][ T65] usb 3-1: Product: syz [ 30.131269][ T65] usb 3-1: Manufacturer: syz [ 30.135920][ T65] usb 3-1: SerialNumber: syz [ 30.284174][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.302498][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.337464][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 30.350687][ T9] usb 2-1: USB disconnect, device number 4 [ 30.367161][ T459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.379783][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.397586][ T459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.455152][ T65] cdc_ncm 3-1:1.0: bind() failure [ 30.461201][ T65] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 30.472057][ T65] cdc_ncm 3-1:1.1: bind() failure [ 30.484540][ T65] usb 3-1: USB disconnect, device number 4 [ 31.001912][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 31.001929][ T36] audit: type=1400 audit(1791255726.549:215): avc: denied { append } for pid=535 comm="syz.2.55" name="uprobe_events" dev="tracefs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 31.049753][ T36] audit: type=1400 audit(1791255726.579:216): avc: denied { ioctl } for pid=535 comm="syz.2.55" path="/15/tracing/uprobe_events" dev="tracefs" ino=1047 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 31.195714][ T36] audit: type=1400 audit(1791255726.739:217): avc: denied { getopt } for pid=544 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.265759][ T36] audit: type=1400 audit(1791255726.809:218): avc: denied { read write } for pid=560 comm="syz.0.60" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.305498][ T561] syz.0.60: vmalloc error: size 270336, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 31.305852][ T36] audit: type=1400 audit(1791255726.839:219): avc: denied { open } for pid=560 comm="syz.0.60" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.348891][ T36] audit: type=1400 audit(1791255726.839:220): avc: denied { ioctl } for pid=560 comm="syz.0.60" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.351276][ T561] CPU: 1 UID: 0 PID: 561 Comm: syz.0.60 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 31.351307][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.351319][ T561] Call Trace: [ 31.351326][ T561] [ 31.351333][ T561] __dump_stack+0x21/0x30 [ 31.351365][ T561] dump_stack_lvl+0x140/0x1c0 [ 31.351391][ T561] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.351418][ T561] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 31.351440][ T561] dump_stack+0x19/0x20 [ 31.351463][ T561] warn_alloc+0x1e7/0x2c0 [ 31.351490][ T561] ? __cfi_warn_alloc+0x10/0x10 [ 31.351516][ T561] ? __kmalloc_node_noprof+0x252/0x500 [ 31.351536][ T561] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 31.351556][ T561] __vmalloc_node_range_noprof+0x100b/0x1300 [ 31.351573][ T561] ? __kasan_kmalloc+0x96/0xb0 [ 31.351599][ T561] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 31.351620][ T561] vmalloc_user_noprof+0x77/0x90 [ 31.351637][ T561] ? security_read_policy+0x121/0x300 [ 31.351657][ T561] security_read_policy+0x121/0x300 [ 31.351676][ T561] ? __cfi_security_read_policy+0x10/0x10 [ 31.351703][ T561] ? __kmalloc_cache_noprof+0x23c/0x470 [ 31.351724][ T561] ? sel_open_policy+0x1c4/0x4a0 [ 31.351749][ T561] sel_open_policy+0x1e8/0x4a0 [ 31.351773][ T561] ? __cfi_sel_open_policy+0x10/0x10 [ 31.351795][ T561] do_dentry_open+0x97c/0x1510 [ 31.351823][ T561] vfs_open+0x86/0x240 [ 31.351848][ T561] ? __cfi_vfs_open+0x10/0x10 [ 31.351873][ T561] ? may_open+0x352/0x430 [ 31.351896][ T561] path_openat+0x2c49/0x35a0 [ 31.351922][ T561] ? kasan_save_alloc_info+0x3a/0x50 [ 31.351940][ T561] ? getname+0x1b/0x30 [ 31.351960][ T561] ? x64_sys_call+0xe69/0x2ee0 [ 31.351977][ T561] ? do_syscall_64+0x57/0xf0 [ 31.351997][ T561] ? do_filp_open+0x440/0x440 [ 31.352023][ T561] do_filp_open+0x1f2/0x440 [ 31.352048][ T561] ? __cfi_do_filp_open+0x10/0x10 [ 31.352075][ T561] ? alloc_fd+0x4c1/0x570 [ 31.352097][ T561] do_sys_openat2+0x134/0x1d0 [ 31.352123][ T561] ? fput+0x1a4/0x230 [ 31.352146][ T561] ? do_sys_open+0x100/0x100 [ 31.352174][ T561] __x64_sys_openat+0x13a/0x170 [ 31.352200][ T561] x64_sys_call+0xe69/0x2ee0 [ 31.352217][ T561] do_syscall_64+0x57/0xf0 [ 31.352235][ T561] ? clear_bhb_loop+0x50/0xa0 [ 31.352259][ T561] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.352283][ T561] RIP: 0033:0x7fae3979e199 [ 31.352299][ T561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.352315][ T561] RSP: 002b:00007fae3a646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 31.352335][ T561] RAX: ffffffffffffffda RBX: 00007fae39a25fa0 RCX: 00007fae3979e199 [ 31.352350][ T561] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 31.352364][ T561] RBP: 00007fae398358e0 R08: 0000000000000000 R09: 0000000000000000 [ 31.352375][ T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.352387][ T561] R13: 00007fae39a26038 R14: 00007fae39a25fa0 R15: 00007ffe97e5b1b8 [ 31.352404][ T561] [ 31.352428][ T561] Mem-Info: [ 31.388707][ T36] audit: type=1400 audit(1791255726.849:221): avc: denied { wake_alarm } for pid=560 comm="syz.0.60" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.431787][ T561] active_anon:9005 inactive_anon:2 isolated_anon:0 [ 31.431787][ T561] active_file:5845 inactive_file:2359 isolated_file:0 [ 31.431787][ T561] unevictable:0 dirty:83 writeback:0 [ 31.431787][ T561] slab_reclaimable:3528 slab_unreclaimable:75177 [ 31.431787][ T561] mapped:24256 shmem:3034 pagetables:940 [ 31.431787][ T561] sec_pagetables:6 bounce:0 [ 31.431787][ T561] kernel_misc_reclaimable:0 [ 31.431787][ T561] free:1536912 free_pcp:2443 free_cma:0 [ 31.747061][ T561] Node 0 active_anon:36020kB inactive_anon:8kB active_file:23380kB inactive_file:9436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97124kB dirty:332kB writeback:0kB shmem:12136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4572kB pagetables:4160kB sec_pagetables:24kB all_unreclaimable? no [ 31.779224][ T561] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:0kB free_cma:0kB [ 31.809208][ T370] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.817987][ T561] lowmem_reserve[]: 0 3921 3921 [ 31.823075][ T561] Normal free:3187732kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35720kB inactive_anon:8kB active_file:23380kB inactive_file:9436kB unevictable:0kB writepending:332kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4372kB local_pcp:1428kB free_cma:0kB [ 31.857886][ T561] lowmem_reserve[]: 0 0 0 [ 31.862306][ T561] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 31.895707][ T561] Normal: 290*4kB (UE) 66*8kB (UME) 233*16kB (UE) 53*32kB (UE) 57*64kB (UME) 79*128kB (UME) 35*256kB (UME) 21*512kB (UME) 6*1024kB (UME) 9*2048kB (UME) 763*4096kB (UM) = 3190408kB [ 31.917772][ T588] FAULT_INJECTION: forcing a failure. [ 31.917772][ T588] name failslab, interval 1, probability 0, space 0, times 0 [ 31.932574][ T561] 11252 total pagecache pages [ 31.937296][ T561] 0 pages in swap cache [ 31.941525][ T588] CPU: 1 UID: 0 PID: 588 Comm: syz.1.62 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 31.941550][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.941561][ T588] Call Trace: [ 31.941567][ T588] [ 31.941573][ T588] __dump_stack+0x21/0x30 [ 31.941600][ T588] dump_stack_lvl+0x140/0x1c0 [ 31.941632][ T588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.941659][ T588] dump_stack+0x19/0x20 [ 31.941682][ T588] should_fail_ex+0x3c2/0x510 [ 31.941705][ T588] should_failslab+0xac/0x100 [ 31.941729][ T588] __kmalloc_cache_noprof+0x41/0x470 [ 31.941750][ T588] ? alloc_super+0x67/0x950 [ 31.941775][ T588] ? _raw_spin_lock+0x92/0x120 [ 31.941795][ T588] alloc_super+0x67/0x950 [ 31.941822][ T588] ? __cfi_test_bdev_super+0x10/0x10 [ 31.941842][ T588] sget+0x1fb/0x710 [ 31.941867][ T588] ? __cfi_set_bdev_super+0x10/0x10 [ 31.941888][ T588] mount_bdev+0xe5/0x2d0 [ 31.941906][ T588] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.941933][ T588] ? __cfi_mount_bdev+0x10/0x10 [ 31.941951][ T588] ? vfs_parse_fs_string+0x10f/0x180 [ 31.941977][ T588] f2fs_mount+0x38/0x50 [ 31.942002][ T588] legacy_get_tree+0x106/0x1b0 [ 31.942026][ T588] ? __cfi_f2fs_mount+0x10/0x10 [ 31.942051][ T588] vfs_get_tree+0x9e/0x290 [ 31.942070][ T588] do_new_mount+0x251/0xb40 [ 31.942089][ T588] ? security_capable+0x44/0x130 [ 31.942112][ T588] path_mount+0x66a/0xff0 [ 31.942130][ T588] ? putname+0x113/0x150 [ 31.942151][ T588] __se_sys_mount+0x2bf/0x480 [ 31.942171][ T588] ? ksys_write+0x1f3/0x260 [ 31.942191][ T588] ? __x64_sys_mount+0xf0/0xf0 [ 31.942212][ T588] __x64_sys_mount+0xc3/0xf0 [ 31.942232][ T588] x64_sys_call+0x2021/0x2ee0 [ 31.942250][ T588] do_syscall_64+0x57/0xf0 [ 31.942268][ T588] ? clear_bhb_loop+0x50/0xa0 [ 31.942293][ T588] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.942316][ T588] RIP: 0033:0x7f0eadb9e199 [ 31.942332][ T588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.942348][ T588] RSP: 002b:00007f0eaea7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.942368][ T588] RAX: ffffffffffffffda RBX: 00007f0eade25fa0 RCX: 00007f0eadb9e199 [ 31.942383][ T588] RDX: 0000200000000140 RSI: 00002000000003c0 RDI: 0000200000000880 [ 31.942394][ T588] RBP: 00007f0eaea7c090 R08: 0000000000000000 R09: 0000000000000000 [ 31.942406][ T588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 31.942418][ T588] R13: 00007f0eade26038 R14: 00007f0eade25fa0 R15: 00007fff91710ae8 [ 31.942434][ T588] [ 31.948190][ T561] Free swap = 124692kB [ 32.211271][ T561] Total swap = 124996kB [ 32.216358][ T561] 2097051 pages RAM [ 32.220182][ T561] 0 pages HighMem/MovableOnly [ 32.232400][ T561] 352242 pages reserved [ 32.240673][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 32.247478][ T561] 0 pages cma reserved [ 32.253051][ T370] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 32.263324][ T561] Memory allocations: [ 32.268783][ T370] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 32.281279][ T561] 0 B 0 init/main.c:1477 func:do_initcalls [ 32.283728][ T370] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 32.309203][ T561] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 32.318338][ T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.335523][ T370] usb 3-1: config 0 descriptor?? [ 32.339487][ T561] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 32.361868][ T609] FAULT_INJECTION: forcing a failure. [ 32.361868][ T609] name failslab, interval 1, probability 0, space 0, times 0 [ 32.374539][ T561] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 32.391272][ T561] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 32.399206][ T561] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 32.401275][ T609] CPU: 1 UID: 0 PID: 609 Comm: syz.1.64 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 32.401306][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 32.401318][ T609] Call Trace: [ 32.401324][ T609] [ 32.401332][ T609] __dump_stack+0x21/0x30 [ 32.401361][ T609] dump_stack_lvl+0x140/0x1c0 [ 32.401385][ T609] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.401411][ T609] dump_stack+0x19/0x20 [ 32.401434][ T609] should_fail_ex+0x3c2/0x510 [ 32.401456][ T609] should_failslab+0xac/0x100 [ 32.401479][ T609] kmem_cache_alloc_noprof+0x42/0x410 [ 32.401499][ T609] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 32.401521][ T609] ? alloc_empty_file+0xbf/0x270 [ 32.401544][ T609] ? arch_stack_walk+0x10a/0x170 [ 32.401570][ T609] alloc_empty_file+0xbf/0x270 [ 32.401594][ T609] path_openat+0xf4/0x35a0 [ 32.401618][ T609] ? stack_depot_save_flags+0x38/0x800 [ 32.401642][ T609] ? kasan_save_track+0x4f/0x80 [ 32.401662][ T609] ? kasan_save_track+0x3e/0x80 [ 32.401683][ T609] ? kasan_save_alloc_info+0x3a/0x50 [ 32.401700][ T609] ? __kasan_slab_alloc+0x73/0x90 [ 32.401721][ T609] ? getname+0x1b/0x30 [ 32.401740][ T609] ? do_sys_openat2+0xda/0x1d0 [ 32.401764][ T609] ? __x64_sys_openat+0x13a/0x170 [ 32.401789][ T609] ? x64_sys_call+0xe69/0x2ee0 [ 32.401806][ T609] ? do_syscall_64+0x57/0xf0 [ 32.401826][ T609] ? do_filp_open+0x440/0x440 [ 32.401851][ T609] do_filp_open+0x1f2/0x440 [ 32.401875][ T609] ? __cfi_do_filp_open+0x10/0x10 [ 32.401901][ T609] ? alloc_fd+0x4c1/0x570 [ 32.401923][ T609] do_sys_openat2+0x134/0x1d0 [ 32.401948][ T609] ? fput+0x1a4/0x230 [ 32.401970][ T609] ? do_sys_open+0x100/0x100 [ 32.401994][ T609] ? ksys_write+0x1f3/0x260 [ 32.402013][ T609] ? __cfi_ksys_write+0x10/0x10 [ 32.402033][ T609] __x64_sys_openat+0x13a/0x170 [ 32.402059][ T609] x64_sys_call+0xe69/0x2ee0 [ 32.402075][ T609] do_syscall_64+0x57/0xf0 [ 32.402094][ T609] ? clear_bhb_loop+0x50/0xa0 [ 32.402118][ T609] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.402141][ T609] RIP: 0033:0x7f0eadb9e199 [ 32.402157][ T609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.402172][ T609] RSP: 002b:00007f0eaea7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 32.402192][ T609] RAX: ffffffffffffffda RBX: 00007f0eade25fa0 RCX: 00007f0eadb9e199 [ 32.402206][ T609] RDX: 0000000000002700 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 32.402220][ T609] RBP: 00007f0eaea7c090 R08: 0000000000000000 R09: 0000000000000000 [ 32.402232][ T609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.402243][ T609] R13: 00007f0eade26038 R14: 00007f0eade25fa0 R15: 00007fff91710ae8 [ 32.402259][ T609] [ 32.653467][ T370] usbhid 3-1:0.0: can't add hid device: -71 [ 32.656545][ T561] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 32.691287][ T370] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.701105][ T36] audit: type=1400 audit(1791255728.249:222): avc: denied { ioctl } for pid=557 comm="syz.2.59" path="socket:[5813]" dev="sockfs" ino=5813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.730384][ T561] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 32.732481][ T370] usb 3-1: USB disconnect, device number 5 [ 32.740870][ T561] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 32.759693][ T36] audit: type=1400 audit(1791255728.249:223): avc: denied { ioctl } for pid=557 comm="syz.2.59" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.785212][ T561] 0 B 0 init/initramfs.c:101 func:find_link [ 33.031274][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.081279][ T360] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.121282][ T370] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.171294][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.211289][ T360] usb 1-1: device descriptor read/64, error -71 [ 33.281273][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 33.287547][ T370] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.298008][ T370] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.308601][ T370] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.317958][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.326258][ T370] usb 3-1: Product: syz [ 33.330579][ T370] usb 3-1: Manufacturer: syz [ 33.335642][ T370] usb 3-1: SerialNumber: syz [ 33.421282][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.471294][ T360] usb 1-1: device descriptor read/64, error -71 [ 33.661306][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.731300][ T360] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.811270][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.861272][ T360] usb 1-1: device descriptor read/64, error -71 [ 34.057787][ T9] usb 2-1: device descriptor read/64, error -71 [ 34.101281][ T360] usb 1-1: device descriptor read/64, error -71 [ 34.181315][ T9] usb usb2-port1: attempt power cycle [ 34.211400][ T360] usb usb1-port1: attempt power cycle [ 34.521277][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.551272][ T360] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.563327][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.571738][ T370] usb 3-1: 0:2 : does not exist [ 34.579588][ T360] usb 1-1: device descriptor read/8, error -71 [ 34.591128][ T370] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 34.606202][ T370] usb 3-1: USB disconnect, device number 6 [ 34.697216][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.715512][ T360] usb 1-1: device descriptor read/8, error -71 [ 34.941277][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.961279][ T360] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.981910][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.982305][ T360] usb 1-1: device descriptor read/8, error -71 [ 35.041298][ T370] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.112222][ T9] usb 2-1: device descriptor read/8, error -71 [ 35.122430][ T360] usb 1-1: device descriptor read/8, error -71 [ 35.171277][ T370] usb 3-1: device descriptor read/64, error -71 [ 35.221420][ T9] usb usb2-port1: unable to enumerate USB device [ 35.231521][ T360] usb usb1-port1: unable to enumerate USB device [ 35.421278][ T370] usb 3-1: device descriptor read/64, error -71 [ 35.661282][ T370] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.811258][ T370] usb 3-1: device descriptor read/64, error -71 [ 35.894946][ T630] FAULT_INJECTION: forcing a failure. [ 35.894946][ T630] name failslab, interval 1, probability 0, space 0, times 0 [ 35.923872][ T630] CPU: 1 UID: 0 PID: 630 Comm: syz.1.69 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 35.923907][ T630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.923920][ T630] Call Trace: [ 35.923927][ T630] [ 35.923935][ T630] __dump_stack+0x21/0x30 [ 35.923970][ T630] dump_stack_lvl+0x140/0x1c0 [ 35.923997][ T630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.924021][ T630] dump_stack+0x19/0x20 [ 35.924042][ T630] should_fail_ex+0x3c2/0x510 [ 35.924064][ T630] should_failslab+0xac/0x100 [ 35.924087][ T630] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 35.924107][ T630] ? __d_alloc+0x42/0x8c0 [ 35.924125][ T630] ? __kasan_record_aux_stack+0xb2/0xd0 [ 35.924143][ T630] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 35.924160][ T630] ? __call_rcu_common+0xd5/0x710 [ 35.924181][ T630] __d_alloc+0x42/0x8c0 [ 35.924199][ T630] d_alloc_parallel+0xe4/0x1370 [ 35.924217][ T630] ? avc_has_perm_noaudit+0x26b/0x360 [ 35.924240][ T630] ? __asan_memcpy+0x5a/0x80 [ 35.924259][ T630] ? selinux_inode_permission+0x3f2/0x5d0 [ 35.924279][ T630] ? __cfi_d_alloc_parallel+0x10/0x10 [ 35.924299][ T630] ? __cfi_selinux_inode_permission+0x10/0x10 [ 35.924329][ T630] ? make_vfsuid+0x4d/0xa0 [ 35.924348][ T630] ? generic_permission+0x1ec/0x590 [ 35.924373][ T630] __lookup_slow+0x150/0x420 [ 35.924396][ T630] ? __d_lookup+0x4e8/0x550 [ 35.924416][ T630] ? lookup_one_len+0x300/0x300 [ 35.924440][ T630] ? lookup_one_common+0x320/0x470 [ 35.924466][ T630] lookup_one_len+0x1a1/0x300 [ 35.924489][ T630] ? __kasan_check_write+0x18/0x20 [ 35.924509][ T630] ? __cfi_lookup_one_len+0x10/0x10 [ 35.924533][ T630] ? simple_pin_fs+0x9c/0x160 [ 35.924559][ T630] start_creating+0x173/0x310 [ 35.924580][ T630] ? debugfs_create_dir+0x20/0x470 [ 35.924602][ T630] debugfs_create_dir+0x2b/0x470 [ 35.924624][ T630] kvm_create_vm_debugfs+0x20d/0xb50 [ 35.924643][ T630] ? __mmu_notifier_register+0x364/0x6b0 [ 35.924666][ T630] ? kvm_enable_virtualization+0x150/0x150 [ 35.924687][ T630] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 35.924710][ T630] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 35.924728][ T630] kvm_dev_ioctl+0xb57/0x14c0 [ 35.924747][ T630] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 35.924765][ T630] ? bpf_lsm_file_ioctl+0xd/0x20 [ 35.924790][ T630] ? security_file_ioctl+0x3e/0x110 [ 35.924809][ T630] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 35.924826][ T630] __se_sys_ioctl+0x126/0x1b0 [ 35.924850][ T630] __x64_sys_ioctl+0x7f/0xa0 [ 35.924874][ T630] x64_sys_call+0x1878/0x2ee0 [ 35.924892][ T630] do_syscall_64+0x57/0xf0 [ 35.924916][ T630] ? clear_bhb_loop+0x50/0xa0 [ 35.924942][ T630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.924967][ T630] RIP: 0033:0x7f0eadb9e199 [ 35.924985][ T630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.925003][ T630] RSP: 002b:00007f0eae9eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.925025][ T630] RAX: ffffffffffffffda RBX: 00007f0eade26090 RCX: 00007f0eadb9e199 [ 35.925040][ T630] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000002a [ 35.925054][ T630] RBP: 00007f0eadc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 35.925067][ T630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.925080][ T630] R13: 00007f0eade26128 R14: 00007f0eade26090 R15: 00007fff91710ae8 [ 35.925097][ T630] [ 36.331280][ T370] usb 3-1: device descriptor read/64, error -71 [ 36.354301][ T36] audit: type=1400 audit(1791255731.899:224): avc: denied { create } for pid=637 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.411585][ T36] audit: type=1400 audit(1791255731.959:225): avc: denied { read } for pid=637 comm="syz.0.72" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.441368][ T370] usb usb3-port1: attempt power cycle [ 36.471261][ T36] audit: type=1400 audit(1791255731.959:226): avc: denied { open } for pid=637 comm="syz.0.72" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.501324][ T36] audit: type=1400 audit(1791255731.999:227): avc: denied { write } for pid=646 comm="syz.1.73" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.524285][ T36] audit: type=1400 audit(1791255732.019:228): avc: denied { read } for pid=649 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.737277][ T65] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.791281][ T370] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.812276][ T370] usb 3-1: device descriptor read/8, error -71 [ 36.891262][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 36.911976][ T65] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.931259][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.937904][ T65] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 36.952276][ T370] usb 3-1: device descriptor read/8, error -71 [ 36.961263][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.981494][ T65] usb 2-1: config 0 descriptor?? [ 37.191264][ T370] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 37.222327][ T370] usb 3-1: device descriptor read/8, error -71 [ 37.352342][ T370] usb 3-1: device descriptor read/8, error -71 [ 37.392802][ T65] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 37.407516][ T65] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 37.422373][ T65] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 37.437063][ T65] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 37.451817][ T65] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 37.461776][ T370] usb usb3-port1: unable to enumerate USB device [ 37.466790][ T65] uclogic 0003:5543:0064.0002: No inputs registered, leaving [ 37.491103][ T65] uclogic 0003:5543:0064.0002: hiddev96,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 37.909035][ T36] audit: type=1400 audit(1791255733.446:229): avc: denied { write } for pid=671 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.929241][ T672] veth0: mtu less than device minimum [ 37.951971][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.960436][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.991197][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.001270][ T370] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 38.010020][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.171251][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 38.184919][ T370] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 38.194424][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.211882][ T370] usb 3-1: Product: syz [ 38.220508][ T370] usb 3-1: Manufacturer: syz [ 38.229503][ T370] usb 3-1: SerialNumber: syz [ 38.894458][ T36] audit: type=1400 audit(1791255734.436:230): avc: denied { create } for pid=677 comm="syz.0.84" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.936585][ T36] audit: type=1400 audit(1791255734.436:231): avc: denied { write } for pid=677 comm="syz.0.84" name="file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.978620][ T36] audit: type=1400 audit(1791255734.436:232): avc: denied { open } for pid=677 comm="syz.0.84" path="/29/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.003846][ T36] audit: type=1400 audit(1791255734.436:233): avc: denied { ioctl } for pid=677 comm="syz.0.84" path="/29/file0" dev="tmpfs" ino=186 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.046101][ T354] bridge_slave_1: left allmulticast mode [ 39.051846][ T354] bridge_slave_1: left promiscuous mode [ 39.057492][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.065255][ T354] bridge_slave_0: left allmulticast mode [ 39.070906][ T354] bridge_slave_0: left promiscuous mode [ 39.076749][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.176546][ T683] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.183645][ T683] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.190760][ T683] bridge_slave_0: entered allmulticast mode [ 39.197061][ T683] bridge_slave_0: entered promiscuous mode [ 39.203664][ T683] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.210698][ T683] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.217935][ T683] bridge_slave_1: entered allmulticast mode [ 39.224305][ T683] bridge_slave_1: entered promiscuous mode [ 39.231121][ T354] veth1_macvtap: left promiscuous mode [ 39.236677][ T354] veth0_vlan: left promiscuous mode [ 39.319875][ T683] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.326937][ T683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.334348][ T683] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.341393][ T683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.366453][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.375134][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.382202][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.408521][ T683] veth0_vlan: entered promiscuous mode [ 39.419663][ T683] veth1_macvtap: entered promiscuous mode [ 39.478755][ T360] usb 2-1: USB disconnect, device number 9 [ 39.692085][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.862703][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 39.881734][ T65] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 39.891901][ T65] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 39.903188][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.912643][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.920709][ T65] usb 5-1: Product: syz [ 39.925188][ T65] usb 5-1: Manufacturer: syz [ 39.930074][ T65] usb 5-1: SerialNumber: syz [ 40.056375][ T370] usb 3-1: MIDIStreaming interface descriptor not found [ 40.068329][ T370] usb 3-1: USB disconnect, device number 11 [ 40.138709][ T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.147927][ T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.160720][ T65] cdc_ncm 5-1:1.0: bind() failure [ 40.172354][ T65] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 40.179133][ T65] cdc_ncm 5-1:1.1: bind() failure [ 40.202461][ T65] usb 5-1: USB disconnect, device number 2 [ 40.586746][ T708] MTRR 1 not used [ 40.612633][ T705] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 40.679094][ T712] netlink: 168 bytes leftover after parsing attributes in process `syz.4.94'. [ 40.693532][ T712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.841316][ T360] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 41.002350][ T360] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 41.011532][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.020085][ T360] usb 3-1: config 0 descriptor?? [ 41.062619][ T370] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 41.221262][ T370] usb 2-1: Using ep0 maxpacket: 32 [ 41.227712][ T370] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 41.237072][ T370] usb 2-1: config 0 has no interface number 0 [ 41.243266][ T370] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 41.255260][ T370] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 41.264725][ T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.273064][ T370] usb 2-1: Product: syz [ 41.277422][ T370] usb 2-1: Manufacturer: syz [ 41.282554][ T370] usb 2-1: SerialNumber: syz [ 41.289036][ T370] usb 2-1: config 0 descriptor?? [ 41.296456][ T720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.505494][ T720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.715014][ T720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.724532][ T720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.785683][ T370] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 41.796054][ T370] asix 2-1:0.188: probe with driver asix failed with error -61 [ 41.982831][ T734] zero sized request [ 42.110791][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 42.110808][ T36] audit: type=1400 audit(1791255737.646:252): avc: denied { connect } for pid=737 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.121579][ T738] 9pnet_fd: Insufficient options for proto=fd [ 42.148498][ T36] audit: type=1400 audit(1791255737.696:253): avc: denied { write } for pid=737 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.167641][ T36] audit: type=1400 audit(1791255737.696:254): avc: denied { append } for pid=737 comm="syz.0.103" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.261269][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.412635][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 42.421011][ T65] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 42.431111][ T65] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 42.440993][ T360] usb 3-1: Cannot set autoneg [ 42.442660][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.445774][ T360] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 42.456324][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.468029][ T360] usb 3-1: USB disconnect, device number 12 [ 42.476069][ T65] usb 5-1: Product: syz [ 42.484569][ T65] usb 5-1: Manufacturer: syz [ 42.490076][ T65] usb 5-1: SerialNumber: syz [ 42.696836][ T736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.705387][ T736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.714853][ T65] cdc_ncm 5-1:1.0: bind() failure [ 42.720488][ T65] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 42.727307][ T65] cdc_ncm 5-1:1.1: bind() failure [ 42.735127][ T65] usb 5-1: USB disconnect, device number 3 [ 43.227963][ T36] audit: type=1400 audit(1791255738.766:255): avc: denied { read } for pid=762 comm="syz.4.111" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.251048][ T65] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 43.402082][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 43.410789][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 43.420523][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.432499][ T65] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 43.451292][ T65] usb 3-1: Found UVC 1.00 device (046d:0825) [ 43.471281][ T65] uvcvideo 3-1:1.1: No supported video formats found. [ 43.478166][ T65] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 43.490707][ T36] audit: type=1400 audit(1791255739.036:256): avc: denied { getattr } for pid=772 comm="syz.4.113" path="socket:[8562]" dev="sockfs" ino=8562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.537356][ T36] audit: type=1400 audit(1791255739.076:257): avc: denied { setopt } for pid=781 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.684053][ T36] audit: type=1400 audit(1791255739.226:258): avc: denied { name_bind } for pid=787 comm="syz.4.116" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.709067][ T65] usb 3-1: USB disconnect, device number 13 [ 43.715119][ T36] audit: type=1400 audit(1791255739.246:259): avc: denied { write } for pid=787 comm="syz.4.116" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.741541][ T788] Zero length message leads to an empty skb [ 43.766622][ T36] audit: type=1400 audit(1791255739.246:260): avc: denied { read } for pid=787 comm="syz.4.116" name="freeze_notification" dev="binder" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.805155][ T36] audit: type=1400 audit(1791255739.246:261): avc: denied { open } for pid=787 comm="syz.4.116" path="/dev/binderfs/features/freeze_notification" dev="binder" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.873054][ T12] bridge_slave_1: left allmulticast mode [ 43.878749][ T12] bridge_slave_1: left promiscuous mode [ 43.885146][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.901997][ T12] bridge_slave_0: left allmulticast mode [ 43.912348][ T12] bridge_slave_0: left promiscuous mode [ 43.923715][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.058687][ T12] veth1_macvtap: left promiscuous mode [ 44.064360][ T12] veth0_vlan: left promiscuous mode [ 44.156242][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.163362][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.170459][ T801] bridge_slave_0: entered allmulticast mode [ 44.176952][ T801] bridge_slave_0: entered promiscuous mode [ 44.188296][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.195460][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.202846][ T801] bridge_slave_1: entered allmulticast mode [ 44.209221][ T801] bridge_slave_1: entered promiscuous mode [ 44.209363][ T807] rust_binder: Failure in copy_transaction_data: EINVAL [ 44.218497][ T806] rust_binder: Failure in copy_transaction_data: EINVAL [ 44.228570][ T807] rust_binder: 805:807 transaction call to 805:0 failed EINVAL, code 0 size 88-18446744073709550989 [ 44.247510][ T806] rust_binder: 805:806 transaction call to 805:0 failed EINVAL, code 0 size 88-18446744073709550989 [ 44.265448][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.272535][ T801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.279782][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.286817][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.343877][ T801] veth0_vlan: entered promiscuous mode [ 44.357291][ T801] veth1_macvtap: entered promiscuous mode [ 44.451700][ T811] FAULT_INJECTION: forcing a failure. [ 44.451700][ T811] name failslab, interval 1, probability 0, space 0, times 0 [ 44.452237][ T360] rust_binder: 805: undelivered TRANSACTION_ERROR: 29201 [ 44.466384][ T811] CPU: 0 UID: 0 PID: 811 Comm: syz.2.122 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 44.466416][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.466428][ T811] Call Trace: [ 44.466435][ T811] [ 44.466443][ T811] __dump_stack+0x21/0x30 [ 44.466475][ T811] dump_stack_lvl+0x140/0x1c0 [ 44.466502][ T811] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.466528][ T811] ? netlink_sendmsg+0x7d1/0xad0 [ 44.466556][ T811] ? x64_sys_call+0x2a4c/0x2ee0 [ 44.466573][ T811] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.466599][ T811] dump_stack+0x19/0x20 [ 44.466626][ T811] should_fail_ex+0x3c2/0x510 [ 44.466649][ T811] ? kobject_get_path+0xc3/0x2d0 [ 44.466668][ T811] should_failslab+0xac/0x100 [ 44.466692][ T811] __kmalloc_noprof+0x69/0x510 [ 44.466712][ T811] ? __cfi_down_write+0x10/0x10 [ 44.466737][ T811] ? kobject_get_path+0xc3/0x2d0 [ 44.466755][ T811] kobject_get_path+0xc3/0x2d0 [ 44.466775][ T811] kobject_rename+0x18d/0x580 [ 44.466794][ T811] ? kernfs_put+0x314/0x360 [ 44.466833][ T811] ? __cfi_kobject_rename+0x10/0x10 [ 44.466853][ T811] ? sysfs_rename_link_ns+0x174/0x1b0 [ 44.466876][ T811] device_rename+0x16e/0x1e0 [ 44.466897][ T811] __dev_change_net_namespace+0x1001/0x16c0 [ 44.466924][ T811] ? __cfi___dev_change_net_namespace+0x10/0x10 [ 44.466949][ T811] ? avc_has_perm_noaudit+0x26b/0x360 [ 44.466972][ T811] ? __asan_memcpy+0x5a/0x80 [ 44.466991][ T811] ? avc_has_perm_noaudit+0x289/0x360 [ 44.467015][ T811] ? cred_has_capability+0x296/0x3a0 [ 44.467036][ T811] ? selinux_perf_event_alloc+0x110/0x110 [ 44.467058][ T811] ? selinux_capable+0x38/0x50 [ 44.467082][ T811] ? bpf_lsm_capable+0xd/0x20 [ 44.467109][ T811] ? security_capable+0x44/0x130 [ 44.467130][ T811] ? ns_capable+0x90/0xf0 [ 44.467149][ T811] ? netlink_ns_capable+0xd5/0x110 [ 44.467173][ T811] ? rtnl_link_get_net_capable+0x10c/0x2f0 [ 44.467196][ T811] do_setlink+0x316/0x41e0 [ 44.467219][ T811] ? nlmsg_parse_deprecated_strict+0x130/0x130 [ 44.467241][ T811] ? kasan_save_track+0x4f/0x80 [ 44.467263][ T811] ? kasan_save_track+0x3e/0x80 [ 44.467283][ T811] ? kasan_save_alloc_info+0x3a/0x50 [ 44.467301][ T811] ? __kasan_kmalloc+0x96/0xb0 [ 44.467322][ T811] ? __kmalloc_cache_noprof+0x23c/0x470 [ 44.467346][ T811] ? __nla_validate+0x70/0x70 [ 44.467368][ T811] ? kasan_save_alloc_info+0x3a/0x50 [ 44.467385][ T811] ? __kasan_kmalloc+0x96/0xb0 [ 44.467409][ T811] rtnl_newlink+0x1801/0x2220 [ 44.467430][ T811] ? rtnl_newlink+0x4d1/0x2220 [ 44.467450][ T811] ? __cfi_rtnl_newlink+0x10/0x10 [ 44.467469][ T811] ? cred_has_capability+0x296/0x3a0 [ 44.467488][ T811] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 44.467511][ T811] ? selinux_perf_event_alloc+0x110/0x110 [ 44.467532][ T811] ? stack_trace_save+0xaa/0x100 [ 44.467556][ T811] ? __cfi_mutex_lock+0x10/0x10 [ 44.467578][ T811] ? ns_capable+0x90/0xf0 [ 44.467595][ T811] ? netlink_net_capable+0x129/0x160 [ 44.467618][ T811] ? __cfi_rtnl_newlink+0x10/0x10 [ 44.467637][ T811] rtnetlink_rcv_msg+0x8be/0xa40 [ 44.467658][ T811] ? __asan_memcpy+0x5a/0x80 [ 44.467677][ T811] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 44.467699][ T811] ? avc_has_perm+0x155/0x240 [ 44.467722][ T811] netlink_rcv_skb+0x24d/0x4e0 [ 44.467747][ T811] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 44.467769][ T811] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 44.467794][ T811] ? selinux_netlink_send+0x7df/0x8b0 [ 44.467828][ T811] ? netlink_autobind+0x1c0/0x1c0 [ 44.467846][ T811] ? is_vmalloc_addr+0x11/0x40 [ 44.467873][ T811] rtnetlink_rcv+0x20/0x30 [ 44.467894][ T811] netlink_unicast+0x8bc/0xa70 [ 44.467921][ T811] netlink_sendmsg+0x7d1/0xad0 [ 44.467948][ T811] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.467976][ T811] ? __futex_queue+0x19f/0x350 [ 44.468003][ T811] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 44.468024][ T811] ? security_socket_sendmsg+0x3d/0x100 [ 44.468050][ T811] ____sys_sendmsg+0x99e/0xa00 [ 44.468078][ T811] ? __import_iovec+0x5b9/0x7d0 [ 44.468096][ T811] ? __sys_sendmsg_sock+0x50/0x50 [ 44.468123][ T811] ? import_iovec+0x80/0xb0 [ 44.468141][ T811] ___sys_sendmsg+0x2a6/0x370 [ 44.468167][ T811] ? __sys_sendmsg+0x260/0x260 [ 44.468193][ T811] ? __cfi_futex_wait+0x10/0x10 [ 44.468215][ T811] ? __fget_files+0x2bc/0x330 [ 44.468239][ T811] __x64_sys_sendmsg+0x1be/0x2a0 [ 44.468265][ T811] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 44.468293][ T811] ? __kasan_check_write+0x18/0x20 [ 44.468312][ T811] ? fpregs_restore_userregs+0x11c/0x260 [ 44.468336][ T811] ? switch_fpu_return+0x12/0x20 [ 44.468359][ T811] x64_sys_call+0x2a4c/0x2ee0 [ 44.468377][ T811] do_syscall_64+0x57/0xf0 [ 44.468395][ T811] ? clear_bhb_loop+0x50/0xa0 [ 44.468420][ T811] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.468444][ T811] RIP: 0033:0x7f635219e199 [ 44.468461][ T811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.468478][ T811] RSP: 002b:00007f6352fc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.468498][ T811] RAX: ffffffffffffffda RBX: 00007f6352425fa0 RCX: 00007f635219e199 [ 44.468514][ T811] RDX: 0000000000048000 RSI: 0000200000000740 RDI: 0000000000000006 [ 44.468527][ T811] RBP: 00007f63522358e0 R08: 0000000000000000 R09: 0000000000000000 [ 44.468539][ T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.468551][ T811] R13: 00007f6352426038 R14: 00007f6352425fa0 R15: 00007ffd4cbd9bd8 [ 44.468568][ T811] [ 44.468839][ T811] ------------[ cut here ]------------ [ 44.478746][ T360] rust_binder: 805: undelivered TRANSACTION_ERROR: 29201 [ 44.482921][ T811] WARNING: CPU: 0 PID: 811 at net/core/dev.c:11749 __dev_change_net_namespace+0x154f/0x16c0 [ 44.482964][ T811] Modules linked in: [ 44.806204][ T360] usb 2-1: USB disconnect, device number 10 [ 44.806267][ T811] CPU: 0 UID: 0 PID: 811 Comm: syz.2.122 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 45.053791][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 45.063978][ T811] RIP: 0010:__dev_change_net_namespace+0x154f/0x16c0 [ 45.071013][ T811] Code: 05 70 96 60 03 01 48 c7 c7 40 0d 8b 86 48 c7 c6 20 0d 8b 86 ba 7a 2d 00 00 e8 4d 74 7f fc 0f 0b e9 3b ec ff ff e8 c1 a2 02 fd <0f> 0b e9 d7 fa ff ff e8 b5 a2 02 fd 0f 0b e9 95 fe ff ff e8 a9 a2 [ 45.090712][ T811] RSP: 0018:ffffc9000d90eae0 EFLAGS: 00010283 [ 45.097196][ T811] RAX: ffffffff8484d5df RBX: 1ffff1102618a4be RCX: 0000000000080000 [ 45.105231][ T811] RDX: ffffc90002a56000 RSI: 0000000000026c75 RDI: 0000000000026c76 [ 45.113267][ T811] RBP: ffffc9000d90eed0 R08: ffffffff81e0297e R09: ffffffff81e05944 [ 45.121266][ T811] R10: ffffffff81e05944 R11: ffffffff81e02e5f R12: dffffc0000000000 [ 45.129254][ T811] R13: ffff888130c52118 R14: ffff888130c525f4 R15: 00000000fffffff4 [ 45.137303][ T811] FS: 00007f6352fc56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.146360][ T811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.153041][ T811] CR2: 0000000000000000 CR3: 000000011dff6000 CR4: 00000000003526b0 [ 45.161021][ T811] Call Trace: [ 45.164317][ T811] [ 45.167250][ T811] ? __cfi___dev_change_net_namespace+0x10/0x10 [ 45.173531][ T811] ? avc_has_perm_noaudit+0x26b/0x360 [ 45.179030][ T811] ? __asan_memcpy+0x5a/0x80 [ 45.183663][ T811] ? avc_has_perm_noaudit+0x289/0x360 [ 45.189051][ T811] ? cred_has_capability+0x296/0x3a0 [ 45.194377][ T811] ? selinux_perf_event_alloc+0x110/0x110 [ 45.200106][ T811] ? selinux_capable+0x38/0x50 [ 45.204884][ T811] ? bpf_lsm_capable+0xd/0x20 [ 45.209575][ T811] ? security_capable+0x44/0x130 [ 45.214530][ T811] ? ns_capable+0x90/0xf0 [ 45.218880][ T811] ? netlink_ns_capable+0xd5/0x110 [ 45.224005][ T811] ? rtnl_link_get_net_capable+0x10c/0x2f0 [ 45.229818][ T811] do_setlink+0x316/0x41e0 [ 45.234267][ T811] ? nlmsg_parse_deprecated_strict+0x130/0x130 [ 45.240423][ T811] ? kasan_save_track+0x4f/0x80 [ 45.245309][ T811] ? kasan_save_track+0x3e/0x80 [ 45.250179][ T811] ? kasan_save_alloc_info+0x3a/0x50 [ 45.255484][ T811] ? __kasan_kmalloc+0x96/0xb0 [ 45.260252][ T811] ? __kmalloc_cache_noprof+0x23c/0x470 [ 45.265818][ T811] ? __nla_validate+0x70/0x70 [ 45.270499][ T811] ? kasan_save_alloc_info+0x3a/0x50 [ 45.275793][ T811] ? __kasan_kmalloc+0x96/0xb0 [ 45.280564][ T811] rtnl_newlink+0x1801/0x2220 [ 45.285257][ T811] ? rtnl_newlink+0x4d1/0x2220 [ 45.290029][ T811] ? __cfi_rtnl_newlink+0x10/0x10 [ 45.295113][ T811] ? cred_has_capability+0x296/0x3a0 [ 45.300402][ T811] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 45.306572][ T811] ? selinux_perf_event_alloc+0x110/0x110 [ 45.312436][ T811] ? stack_trace_save+0xaa/0x100 [ 45.317366][ T811] ? __cfi_mutex_lock+0x10/0x10 [ 45.322274][ T811] ? ns_capable+0x90/0xf0 [ 45.326607][ T811] ? netlink_net_capable+0x129/0x160 [ 45.331944][ T811] ? __cfi_rtnl_newlink+0x10/0x10 [ 45.336970][ T811] rtnetlink_rcv_msg+0x8be/0xa40 [ 45.341929][ T811] ? __asan_memcpy+0x5a/0x80 [ 45.346551][ T811] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 45.352045][ T811] ? avc_has_perm+0x155/0x240 [ 45.356743][ T811] netlink_rcv_skb+0x24d/0x4e0 [ 45.361545][ T811] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 45.367012][ T811] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 45.372323][ T811] ? selinux_netlink_send+0x7df/0x8b0 [ 45.377723][ T811] ? netlink_autobind+0x1c0/0x1c0 [ 45.382777][ T811] ? is_vmalloc_addr+0x11/0x40 [ 45.387567][ T811] rtnetlink_rcv+0x20/0x30 [ 45.392007][ T811] netlink_unicast+0x8bc/0xa70 [ 45.396801][ T811] netlink_sendmsg+0x7d1/0xad0 [ 45.401589][ T811] ? __cfi_netlink_sendmsg+0x10/0x10 [ 45.406881][ T811] ? __futex_queue+0x19f/0x350 [ 45.411678][ T811] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 45.416993][ T811] ? security_socket_sendmsg+0x3d/0x100 [ 45.422571][ T811] ____sys_sendmsg+0x99e/0xa00 [ 45.427346][ T811] ? __import_iovec+0x5b9/0x7d0 [ 45.432207][ T811] ? __sys_sendmsg_sock+0x50/0x50 [ 45.437273][ T811] ? import_iovec+0x80/0xb0 [ 45.441791][ T811] ___sys_sendmsg+0x2a6/0x370 [ 45.446501][ T811] ? __sys_sendmsg+0x260/0x260 [ 45.451295][ T811] ? __cfi_futex_wait+0x10/0x10 [ 45.456162][ T811] ? __fget_files+0x2bc/0x330 [ 45.460835][ T811] __x64_sys_sendmsg+0x1be/0x2a0 [ 45.465803][ T811] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 45.471306][ T811] ? __kasan_check_write+0x18/0x20 [ 45.476433][ T811] ? fpregs_restore_userregs+0x11c/0x260 [ 45.482097][ T811] ? switch_fpu_return+0x12/0x20 [ 45.487039][ T811] x64_sys_call+0x2a4c/0x2ee0 [ 45.491732][ T811] do_syscall_64+0x57/0xf0 [ 45.496151][ T811] ? clear_bhb_loop+0x50/0xa0 [ 45.500822][ T811] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.506778][ T811] RIP: 0033:0x7f635219e199 [ 45.511189][ T811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.530851][ T811] RSP: 002b:00007f6352fc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.539295][ T811] RAX: ffffffffffffffda RBX: 00007f6352425fa0 RCX: 00007f635219e199 [ 45.547296][ T811] RDX: 0000000000048000 RSI: 0000200000000740 RDI: 0000000000000006 [ 45.555339][ T811] RBP: 00007f63522358e0 R08: 0000000000000000 R09: 0000000000000000 [ 45.563340][ T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.571332][ T811] R13: 00007f6352426038 R14: 00007f6352425fa0 R15: 00007ffd4cbd9bd8 [ 45.579327][ T811] [ 45.582361][ T811] ---[ end trace 0000000000000000 ]--- [ 45.592364][ T811] veth1_to_hsr: entered promiscuous mode [ 45.598177][ T811] veth1_to_hsr: entered allmulticast mode [ 45.744847][ T12] bridge_slave_1: left allmulticast mode [ 45.750521][ T12] bridge_slave_1: left promiscuous mode [ 45.756165][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.763546][ T12] bridge_slave_0: left allmulticast mode [ 45.769169][ T12] bridge_slave_0: left promiscuous mode [ 45.774913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.954118][ T12] veth1_macvtap: left promiscuous mode [ 45.959618][ T12] veth0_vlan: left promiscuous mode [ 46.232447][ T12] bridge_slave_1: left allmulticast mode [ 46.238105][ T12] bridge_slave_1: left promiscuous mode [ 46.243796][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.251191][ T12] bridge_slave_0: left allmulticast mode [ 46.256908][ T12] bridge_slave_0: left promiscuous mode [ 46.262619][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.270124][ T12] bridge_slave_1: left allmulticast mode [ 46.275842][ T12] bridge_slave_1: left promiscuous mode [ 46.281469][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.288808][ T12] bridge_slave_0: left allmulticast mode [ 46.294621][ T12] bridge_slave_0: left promiscuous mode [ 46.300217][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.444511][ T12] veth1_macvtap: left promiscuous mode [ 46.450025][ T12] veth0_vlan: left promiscuous mode [ 46.455713][ T12] veth1_macvtap: left promiscuous mode [ 46.461278][ T12] veth0_vlan: left promiscuous mode