last executing test programs: 3m15.241986331s ago: executing program 2 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "150000000200", "5579000000000000001000", "d28d34eb", "cb9d8450ab655ddc"}, 0x28) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg(r5, &(0x7f000000d980)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000180)="c4d25ca6f021cd87ca2e854d238656ac0ebfa32840f82ba0320799bcb5fd1f4cb5823ef9cd2aa5107b50549a0dc0d3e4d66f6e28c4ffe5e5c5019d7431766a7582c945a6d7ca1015ce80fb16bd08f12288e7dbb5f333607b744141f363fca4a80ea28642fdcd14bbef71d8b989420e309d7e8e268b862159bfc0cdffd558348b771ec4fe2aa58a92874c52ea2441eac291d7fe118c7172651f05a774da90909f7e417f2fd70260f6951ea6aa85791de73a6bedbe0450a9ef7c77dffb6bdf70c7c9dbcf5ed7958d7777dfd9410f052d35ee0b3e2b40d8c330e7afd8a6b5e914852a", 0xe1}, {&(0x7f0000000280)="30f58418bb933cd681b20d4c2f15c7b972e6c5b633e621623b979502cf74f99cb68447a2b76220022ccb8829a56d209972385e492ef10c2583fe220640c632d996d3ebf9bd05a9786914858ff18794e4276dd0842a5fbe1e0ffe0e258b23445fcd1d6d904a96a8ca2a8237e889490ba91492edb5cc5f7e59ac0b93026beee143c55c227188c3a63d52d15f6fdaa2411970eae6708944", 0x96}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="731d916502f8ac6f8b45b40b80f3157c5cbe7ea2a984cd93a61fa10f9a1f781cf346d26e92acd29f88dbb63f072cc16c9e22b18323abb54f9f2bafaafe17696f8a26a3f5c6dde0e2295b6a7cf7ef49ea8a93bc7cb1032b29a4b591f92b84c99b12cc591d7ae18e7e8b246c269eb565498c9ce0a4084c2c48fb19fb1f2b2cb391623114510481d993bcd4749b268576e64fbbf2ff63a6fec659b9d5df07f2ac6fc82fc3e564519ae7", 0xa8}, {&(0x7f0000001400)="8f63e0d0feff2c1485d8660a29d192c7f15e6af4d05cf4e129b97268da47ccc54753832bc63c3c270170d6ab420fc06ded4eedb9e6535eadd3a664dbaba0b02649e4025fae8a4daea6aca81d0a687ff259219337e16ca4cd15c875d725e16b50f9289d91c0", 0x65}, {&(0x7f0000001480)="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", 0x64b}], 0x6}}], 0x1, 0x4044) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) 3m14.348138963s ago: executing program 2 (id=391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x4e24, @multicast1}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/14, 0xe, 0x7, 0x8807}) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, 0xa2e1, 0xc) (async, rerun: 64) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.247461198s ago: executing program 2 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x14000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x270, 0x0, 0x5}]}) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x14000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x270, 0x0, 0x5}]}) (async) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000040)) (async) 3m14.189997941s ago: executing program 2 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) exit(0xe0a1) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f000016a000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'bridge0\x00', @random="02000136b1ff"}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f00000001c0)) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000017000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000300)={0x0, &(0x7f0000000180)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x640a, 0x5, 0x8000000000000000, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x38, {0x0, 0x8000000000000001, [@nested_vmresume={0x130, 0x18, 0x2}]}}, @code={0xa, 0x66, {"0f20c035040000000f22c0c4a211ba8d0030000066ba2100b8bbf00000efb9c50900000f3266470f6ca8000000000fe347156767460f01c2c74424003e010000c74424025eaf02c6ff2c242e6466460ffa33470f06"}}, @nested_load_syzos={0x136, 0x48, {0x2, 0x5, [@enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}]}}], 0x14e}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp\x00') ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@vmx={0x108, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m13.321596741s ago: executing program 2 (id=399): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e9}, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x514, 0x0, 0x0, 0x1000, 0xffffffff, r4}}}, &(0x7f0000000100)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8}, 0x14) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r8, &(0x7f0000000080)=""/1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r11 = dup(r6) syz_ublk_setup_queues(r1, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e1f, 0x200, 0x2, 0x2c, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4e5, 0x20, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb35f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x2, 0xffffffff, 0x0, r8}}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r13, 0x112, 0xa, 0x0, 0x0) 3m13.293284443s ago: executing program 2 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x7ff}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xc144f000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{r4, 0x4001}], 0x1, 0x24dc5d7c) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) syz_usb_control_io(r6, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x7ff}]}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109240, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xc144f000) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) poll(&(0x7f0000000080)=[{r4, 0x4001}], 0x1, 0x24dc5d7c) (async) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async) syz_usb_control_io(r6, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) (async) 2m58.558799498s ago: executing program 3 (id=469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x0, 0xe1, 0x81, 0x9, 0x9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x3, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = gettid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)={@val={0x70}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "a445aa20618a32bfe4e892dc935525b19db2b0f3dd0d1314", "cc2ec93e99545ca82fac746dcdecd68bf79e4d713d6424d1bbf85e112e610dc5"}}}}}}}, 0x6e) timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f00000001c0)) syz_open_procfs$pagemap(r3, &(0x7f00000000c0)) 2m58.181696285s ago: executing program 32 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x7ff}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xc144f000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{r4, 0x4001}], 0x1, 0x24dc5d7c) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) syz_usb_control_io(r6, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x7ff}]}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109240, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xc144f000) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) poll(&(0x7f0000000080)=[{r4, 0x4001}], 0x1, 0x24dc5d7c) (async) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async) syz_usb_control_io(r6, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) (async) 2m58.181505745s ago: executing program 3 (id=473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0xb532b000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000007c0)={0x5ca}, 0x4) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xfffffffffffffffd) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x1, 0x0, @pic={0xff, 0x2, 0x4, 0x1, 0xff, 0x9, 0x2, 0x81, 0x17, 0x5, 0x10, 0xf9, 0x9, 0xf, 0x7, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x6000, 0x10001, 0xd7c, 0x7, 0x0, [{0x5, 0x0, 0x4, '\x00', 0x4}, {0x4, 0xa, 0x7, '\x00', 0x8}, {0x8, 0x90, 0xc, '\x00', 0xf7}, {0x6, 0x1, 0x2, '\x00', 0x3}, {0x3, 0x9, 0x80, '\x00', 0x1}, {0x8, 0xc5, 0x0, '\x00', 0x2}, {0x40, 0x5, 0x0, '\x00', 0x7}, {0x6, 0x1, 0x1}, {0xce, 0xbd, 0x2a, '\x00', 0x9}, {0x6, 0xc0, 0x6, '\x00', 0x81}, {0x40, 0x4}, {0x9, 0x0, 0x6, '\x00', 0x6}, {0x68, 0x9, 0x4, '\x00', 0x7}, {0x27, 0x7, 0x2, '\x00', 0x4}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x40, 0xfc, 0x0, '\x00', 0x8}, {0x3, 0xf, 0x3, '\x00', 0xb}, {0x0, 0x8, 0xe, '\x00', 0xf8}, {0x1, 0x0, 0x81, '\x00', 0x4}, {0x40, 0x1, 0x6, '\x00', 0xf9}, {0x4e, 0x0, 0x1, '\x00', 0xfc}, {0x6, 0x3a, 0xf6, '\x00', 0x6}, {0x0, 0x9, 0x9, '\x00', 0x8}, {0x6, 0x3, 0x8b, '\x00', 0x4}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000700)={[0x6e, 0x0, 0x7, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x8000000380000, 0x9, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) syz_socket_connect_nvme_tcp() syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x9021, 0x10, 0x1, 0x70}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2bd0, 0x40000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6cb5, 0x100, 0x2, 0x3ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb179, 0x10000, 0x1, 0x224}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x361e, 0x400, 0x2, 0x4f}, 0xffffffffffffffff}], 0x4, &(0x7f0000001b00)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7ff}, 0x0, 0x0, '\x00', {0x2, 0xa69, 0x0, &(0x7f0000000b00)=@buf_max_buf="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"}}, &(0x7f0000001b80)) mmap$IORING_OFF_SQ_RING(0x0, 0x776, 0x1000001, 0x10010, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m57.935828147s ago: executing program 3 (id=474): fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) (async) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x40000000, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x40000000, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_pid(r2, &(0x7f0000001c00)=r3, 0x12) 2m57.571069794s ago: executing program 3 (id=475): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = open(&(0x7f00000001c0)='./file7/file0\x00', 0x90080, 0x103) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x2, 0x141400) ppoll(&(0x7f0000000380)=[{r3, 0x14}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000540)={[0x8]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="ac47cead76", 0x5}, {&(0x7f0000000100)="784037a5260d6613c227ce13f82b8f1b0361e0159be017c468831837de8dec8bb8ff22e2c6ee6e11fcc3ae999109d4c8537c669002d236e1da23c6b21f20b1878e451ce4bfd775c17986d3ea0bd07c179686ca7402936501bea474888498a9076fc16afef05548edf7a7a8dda320585418333373395de40f06356d85cc8b76428fb33bd95af3f812e39b58953180e362d3807a38b6abff53d3d8fe7bc8bbbf8b7883a7d25649094b9094608c383fc7dcc8e5667add99e2ccf2ab7427a0cf119bff02d4", 0xc3}, {&(0x7f0000000200)="8bce2590457a7b0df2979e3a456212523208a973b8c77326a326f838dab83bfae965137d026f96f3a8d8bf3f84a073fc678c4da9c2e76ed2fa6cc688742e947c3192ba67b91b3c8b88164a67f32f34bdefdfb4fdae7a42483a2b0d97be7c263b932641e06b19c04926dd1f38358d28f24ae708562a0568550f529731cbd3377650358e6593f1a6cfd6bc1a3fa03d7ad5edc6833dd581d1353cec15abd4c1538e62ac91784322b0030c4498b4d2ea10bb80117b245b245bb23ae6c62566bfe6fa68ff85cf9aaa9122b9475a0416ca12a7db832efa27fd58a82b288d8051c7de803e", 0xe1}], 0x3, &(0x7f0000000340)}, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xfffffff7, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x624efc52], [0x7fff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x80000000, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x200000, 0xfffffffd, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x9, 0x0, 0x3, 0x200000, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x2, 0xdf51, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000003], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffdffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x51, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x8006, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x27, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffce2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x5, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x70, 0x51, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0x3, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x650, 0x4, 0x7, 0x2, {0x8, 0x25, 0x1, 0x2, 0xf, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) 2m55.993059219s ago: executing program 3 (id=482): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) (async) mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 2m55.461247984s ago: executing program 3 (id=487): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0xf, 0x6, 0x5, 0x3, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x1, 0x4, 0x7, 0x5, 0x8, 0x0, 0x40, 0xd, 0xe, 0x1, 0x0, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x5, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0x2, 0x180001, 0xf, 0x40008b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x0, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x0, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0x10000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0xc, 0x400008, 0x1, 0x0, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x604, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0107000000000000000067"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000340)={0x1000001, 0x4}, 0x8) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="01000000040200f2c8dc1b"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m55.292673012s ago: executing program 33 (id=487): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0xf, 0x6, 0x5, 0x3, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x1, 0x4, 0x7, 0x5, 0x8, 0x0, 0x40, 0xd, 0xe, 0x1, 0x0, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x5, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0x2, 0x180001, 0xf, 0x40008b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x0, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x0, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0x10000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0xc, 0x400008, 0x1, 0x0, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x604, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0107000000000000000067"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000340)={0x1000001, 0x4}, 0x8) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="01000000040200f2c8dc1b"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m52.719055833s ago: executing program 0 (id=502): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7fae", 0x12) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1200000000000800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r5, r6, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d, 0x0, r9}}], 0x1, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 2m52.094958483s ago: executing program 0 (id=508): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000001, 0x2000000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) unlink(&(0x7f0000000000)='./file0\x00') (async) ioctl$TCSBRKP(r0, 0x5425, 0x9) 2m51.965361169s ago: executing program 0 (id=510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x6}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3, 0x5}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(0x0, 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r4, 0x8, 0x4000, 0x4000) 2m51.735538609s ago: executing program 0 (id=512): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8a1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c7) (async) socket$netlink(0x10, 0x3, 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000100)={0x30000, 0xc000, 0x403}) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x3c, 0x6}, {0x6}]}) (async) umount2(&(0x7f0000000240)='./file0\x00', 0x9) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, r3, 0xec1b7000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x2, 0x2, 0x2, 0x15e09aaa, 0x6, 0x6}) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TIOCCONS(r5, 0x541d) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)=@v2={0x2000000, [{0x801, 0x1}, {0x5, 0x4009}]}, 0x14, 0x3) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0xb6, 0x4) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r7 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x4}}], 0x40}) 2m50.690086519s ago: executing program 0 (id=516): r0 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) io_setup(0x6, &(0x7f0000000040)=0x0) setrlimit(0xb, &(0x7f0000000100)={0x3b3, 0x2}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) io_submit(r1, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x2a}]) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='X\x00\x00', 0x3}], 0x1) 2m50.571813464s ago: executing program 0 (id=517): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x68, &(0x7f0000002440)=ANY=[@ANYBLOB="2ef21197a37d7cd2599b1c67564813e7eac1305e69b0a4a68a7ed8431a4bbcf407cc7f74839a95650e4581edbe00e81e4ace1e5fad5afe0080c9b1a840ee647c483e1eb8a7286269b7be7cf240186c3ce5fe2808f186e78395e0685555c9c21da316a62230d26b47dcdedffab8f0c1f44b2b24fce9a65e3e2789b70620b61c1b4522384bd1287a349ca044e5f4938fb482968668e57c4ef8f7111106f4d8c68aa84c", @ANYRES64=r6, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES16=r4, @ANYRES16=r3, @ANYRES16=r5, @ANYRES8=r0, @ANYBLOB="c1f091a101ea529309abba141aa1f7d38f5c937fa9d4c9089b42901730cb81be161d72bc1ad43a65ebac59fb98556d41c3ca81a60149e94796c184a3ab8ee5139591b84b07d946c85f794dad263361cf91ba2db2881eb33427c8266beb45c9acb290a83947ac1d0900d9ba428bbf60c4745972c130a6bd31938cbcbcb6ca163b8efed1ff208cb480d6f7e5b47360fe966cf4641582dcc49b42882ab1fe387566527ad6cfaf599ac56e2e1001b09c777ad61e42a260232b7062dbf2c62fd0fb4f6ca3553cc83613a9535f99d3375466fae4994ce1d48069d1668559671b28a3cdc8bb5b2c606679e39f71178e3004443fce747f035c", @ANYRESDEC=r4], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="200763ec64b850d13cddc92f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00183c0000007af20000000043f8172df7b5087d9f2fc6aa290e1e8714c5c4f2869145b343dbdfdf768d4b273c43484fcaa65126e5c727024c4bb7808cec8243d28f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11) r8 = socket$unix(0x1, 0x2, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000000400)={0x2020}, 0x2020) (async) write$P9_RGETLOCK(r10, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async) fcntl$setpipe(r3, 0x407, 0x7000000) (async) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$unix(0x1, 0x2, 0x0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 2m35.241581027s ago: executing program 34 (id=517): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x68, &(0x7f0000002440)=ANY=[@ANYBLOB="2ef21197a37d7cd2599b1c67564813e7eac1305e69b0a4a68a7ed8431a4bbcf407cc7f74839a95650e4581edbe00e81e4ace1e5fad5afe0080c9b1a840ee647c483e1eb8a7286269b7be7cf240186c3ce5fe2808f186e78395e0685555c9c21da316a62230d26b47dcdedffab8f0c1f44b2b24fce9a65e3e2789b70620b61c1b4522384bd1287a349ca044e5f4938fb482968668e57c4ef8f7111106f4d8c68aa84c", @ANYRES64=r6, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES16=r4, @ANYRES16=r3, @ANYRES16=r5, @ANYRES8=r0, @ANYBLOB="c1f091a101ea529309abba141aa1f7d38f5c937fa9d4c9089b42901730cb81be161d72bc1ad43a65ebac59fb98556d41c3ca81a60149e94796c184a3ab8ee5139591b84b07d946c85f794dad263361cf91ba2db2881eb33427c8266beb45c9acb290a83947ac1d0900d9ba428bbf60c4745972c130a6bd31938cbcbcb6ca163b8efed1ff208cb480d6f7e5b47360fe966cf4641582dcc49b42882ab1fe387566527ad6cfaf599ac56e2e1001b09c777ad61e42a260232b7062dbf2c62fd0fb4f6ca3553cc83613a9535f99d3375466fae4994ce1d48069d1668559671b28a3cdc8bb5b2c606679e39f71178e3004443fce747f035c", @ANYRESDEC=r4], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="200763ec64b850d13cddc92f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00183c0000007af20000000043f8172df7b5087d9f2fc6aa290e1e8714c5c4f2869145b343dbdfdf768d4b273c43484fcaa65126e5c727024c4bb7808cec8243d28f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11) r8 = socket$unix(0x1, 0x2, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000000400)={0x2020}, 0x2020) (async) write$P9_RGETLOCK(r10, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async) fcntl$setpipe(r3, 0x407, 0x7000000) (async) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$unix(0x1, 0x2, 0x0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 2m3.021893597s ago: executing program 1 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000500)={0x5, 0x10}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@ra={0x94, 0x4}]}}}}}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0xf}, 0x1, 0x0, 0x0, 0x4}, 0x4010) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffff"], 0x62) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000004c0)={'veth0_vlan\x00', @local}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m2.887082504s ago: executing program 1 (id=774): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x17c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) (async) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (async, rerun: 32) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 2m2.692313273s ago: executing program 1 (id=775): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0x22, 0xd9, {0xd9, 0x21, "808d80930fa694b266d09694b31383012f4a90b5383aa288bbd0774f5a20f20b7857bad220657ee30b5f8dc51d8b136f27f9633ac18534f36f315f48bfc16d488f6cf70ed5b8f0a3f17ed1c838a41a54ef4c6b91ce5a452fc1c5bdeec348f7a385c0aeddb64a919d2fb3c2f59b7cf6dc62d3509edb892d082b9626e4ad8fd747c58c1f3d777b7dd4051d705bcafd84d54626ea2fb954254e5f695eb97402d9dd47b470ec9b8a180b128dfb2c462886290d701ef40a27a9ce84382086a02b792a2ad0b53b958d3f6bdf21daf84b80b60b24d48faab7baae"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="00035b0006005b0357c1067f07eee268956e3e9bca34bb50b1a720824e456e668c64f762c4a724b776c0c4ebb3d6df6fcc5f2ffc156dbd33b2f2b9fe3fe48577dde02a7d4317d65eceda9b872829e948000b51a472287e0b8ab659ddb8baf06d50"], &(0x7f0000000200)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x3, "69f8156a"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x9, "e6c630a6"}, @local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x397}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x14, 0xab, "0e87f5ba753a7c9f542d4472ae38a21fea96a3464f764cf1324f003a12d9428819d5eb55f341a2d2eae23d19b77abd049c07eb65e771bba103d650748b2a95fbf90dce4ce905605bffc88b03574ffc79f59edbd803e0538ab669daa7ee190188832630082ddcf90f18e9598ccc01947386ac916e95b3c0e6c0fe365b26d77f262a35427f6c6a37421b7cad77a6bbbb6bd12ab6de5f3f7fcee332364befc6ecabac923a3b429061da108872"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000000400)={0x20, 0x1, 0xa6, "bb0b8aa3e66704feb7970bf63117957dd43252802536ee29ec171f772bb870a9a9a25802d64e1b8469e64d96c63bfb0f375e262b2515754d6f32c0b45c5dcb5c61db8639de9d609bfcac6e0a1fab4e52f6fe58af3860cf0d2aaee56bdce714efb2ba3da5992dbf4f93ea40f51db96bf31b8f0225ae1ae7303185b40760c0ae2b35bd3d3b6be153527d0216247e979f524750eefde699d497fc55149c8740ac58624b1ddc1cb6"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1}}) 2m1.664609651s ago: executing program 5 (id=780): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000000)=""/78, 0x4e) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000080)={0xb753, 0x6}) 2m1.530105678s ago: executing program 5 (id=781): syz_usb_connect$uac2(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010000002063075001400001020301090289000301032005080b00050107202e0904000000010120000924010e00022900bb0924050301000602000b240606030200030009000c24030300030906"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000002380)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000100000000000bf84428c9a27e9c81cd080712170c040005000000000010000600000000002000000000000000"], 0x24, 0x3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m1.138092986s ago: executing program 4 (id=784): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 2m0.825936801s ago: executing program 1 (id=785): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x8001, 0x4, 0x7fff, 0x9, 0x8001, 0x6, 0x40, 0x80, 0x0, 0xeba9, 0x208, 0x80}}, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x50000) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m0.225979339s ago: executing program 6 (id=787): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m0.224426849s ago: executing program 5 (id=788): write(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r0, &(0x7f0000000080)='0', 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x75}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000140)) 1m59.930867713s ago: executing program 5 (id=789): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = signalfd4(r0, &(0x7f0000000000)={[0xa]}, 0x8, 0x80800) renameat(r1, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00') read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) io_setup(0x37e, &(0x7f0000000340)) ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r0) 1m59.844394377s ago: executing program 4 (id=790): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x7c778000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0xfffffffd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getgroups(0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xee01, 0xee01]) setgroups(0x3, &(0x7f0000005540)=[r3, 0x0, r4]) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r6, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a"], 0x4c}}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd38, 0x25dfdbfb, {}, [{@nsim={{0x3}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x78, 0xa8, @random="16c600c55396d542aae9376b411a77010e4d20f88ceae433fe9433c73bb607dfa0529465b3446879f79152422401c747921f78b41d7400910a4644474f041549856d6f6e768a4b8f5d78a8fdcc56c989b816f6dff16c874ea5e7194282959e826433c9dfdef884a0caa238647b5546c0d8900bf8"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x3, r10}, 0x14) 1m59.642115777s ago: executing program 6 (id=791): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x6, 0x82b, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0xf, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768f8124c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f00000004c0)={0xdb, 0x0, 0x1ff}) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x23) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="b805000000b9009000000f01c1440f20c03503000000440f22c0f30fc7363671b8470f0826f347ad0f00aa000001000f01cb0f0171cac44175ef13", 0x3b}], 0x1, 0x6a, &(0x7f00000002c0), 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f00000000c0)=0x6, 0x4) (async) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x94, 0x4) (async) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'erspan0\x00', {0x3}, 0x4}) ioctl$XFS_IOC_START_COMMIT(r8, 0x40087707, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) 1m59.534093811s ago: executing program 5 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1fd) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) (async) r5 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) (async) r8 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x4}}], 0x40}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x5, 0x31237648, 0x0, 0xfffffffa, 0x80}]}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl(r4, 0xc138fd07, &(0x7f0000000480)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") (async) connect$vsock_stream(r4, &(0x7f0000000040), 0x10) 1m59.495107854s ago: executing program 4 (id=793): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14525c2c3aaef6e2eb280000000000000053920000000000000a28000000000a00000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c}, 0x40004) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', r4, 0x8, 0x8000, 0xe, 0x7, {{0x13, 0x4, 0x0, 0x3f, 0x4c, 0x66, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x1f, 0x94, [@multicast2, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @remote]}, @lsrr={0x83, 0xf, 0xf0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @cipso={0x86, 0x8, 0x0, [{0x7, 0x2}]}]}}}}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x7ffd}]}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x87, 0x6, @random="ac2c825ca174"}, 0x14) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f0000001800)) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m59.334119321s ago: executing program 6 (id=794): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "79ce0842"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x14, 0xab, "0e87f5ba753a7c9f542d4472ae38a21fea96a3464f764cf1324f003a12d9428819d5eb55f341a2d2eae23d19b77abd049c07eb65e771bba103d650748b2a95fbf90dce4ce905605bffc88b03574ffc79f59edbd803e0538ab669daa7ee190188832630082ddcf90f18e9598ccc01947386ac916e95b3c0e6c0fe365b26d77f262a35427f6c6a37421b7cad77a6bbbb6bd12ab6de5f3f7fcee332364befc6ecabac923a3b429061da108872"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000000400)={0x20, 0x1, 0xa6, "bb0b8aa3e66704feb7970bf63117957dd43252802536ee29ec171f772bb870a9a9a25802d64e1b8469e64d96c63bfb0f375e262b2515754d6f32c0b45c5dcb5c61db8639de9d609bfcac6e0a1fab4e52f6fe58af3860cf0d2aaee56bdce714efb2ba3da5992dbf4f93ea40f51db96bf31b8f0225ae1ae7303185b40760c0ae2b35bd3d3b6be153527d0216247e979f524750eefde699d497fc55149c8740ac58624b1ddc1cb6"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1}}) 1m59.037148026s ago: executing program 4 (id=795): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000900000000240009801c00000008"], 0x40}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f0000010000000000000000000000000000000000f4ff000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xdb, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x40000000000, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r3, &(0x7f0000000140), 0x1111) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r9, 0x2000403, 0x3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_seqnum', 0x1, 0x200) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000300)={@local}, 0x14) socket$netlink(0x10, 0x3, 0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00') 1m58.742217509s ago: executing program 4 (id=796): mkdir(&(0x7f0000000140)='./control\x00', 0x111) (async) r0 = inotify_init1(0x800) (async) fchown(0xffffffffffffffff, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40000840524007f000d240f0104000000080000000006241a03000a0524020000"], 0x0) (async) close(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000080)='ramfs\x00', 0x862904fa42311080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) read(r2, &(0x7f0000000400)=""/100, 0x64) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x56de196530f3563c, 0x102) write$selinux_create(r3, &(0x7f00000002c0)=@access={'/usr/lib/telepathy/mission-control-5', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x26}, 0x51) (async) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x40000c17) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) (async) r5 = syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000016c0)=ANY=[@ANYBLOB="120100c7430000106307032040000102030109026f00030106000d0904000000010100000a240108000a0002010209040100000102000009040101010102000007240180090210082402010202060009050109080050000807250108000000090402000001020000090402010101020000090582090002038c0107250104020700"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, 0x0, 0x1) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async) rmdir(&(0x7f0000000040)='./control\x00') 1m58.554076618s ago: executing program 6 (id=797): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@arm64={0x6, 0x10, 0x6}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m58.420119154s ago: executing program 5 (id=798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000000000003) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xe000202b}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="b8010000000f01c1c42189f99b3e94e39648b803000000000000000f23c00f21f83503000f000f23f866bad104b000eec4c2a1bc5c0ad966baf80cb8165d1c81ef66bafc0c66b80f0066eff3450f07646465643e410f01d1b8010000000f01d964400f01ca", 0x65}], 0x1, 0x70, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000000), 0x8) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONE(r10, 0x40049409, 0xffffffffffffffff) ioctl$TCXONC(r9, 0x540a, 0x0) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f00000000c0)={0x7, 0x6, 0xc, 0x9, 0x3, "56c3df871a74e309449817fe2de33f2d8dc45e", 0x3, 0xe}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$KVM_SET_PIT2(r11, 0x4070aea0, &(0x7f0000000200)={[{0x1ce7, 0x40, 0x9, 0x5, 0xb, 0x7, 0x9, 0xff, 0x1, 0x4, 0xad, 0x7f, 0x9}, {0x6, 0x1, 0x3, 0xe, 0x1, 0x5, 0x62, 0x1, 0x9, 0xef, 0x59, 0x1, 0x7}, {0x10, 0x4, 0xff, 0x6, 0x81, 0xd, 0x0, 0x80, 0x7f, 0x8, 0x7, 0x8d, 0x7}], 0xd7}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m58.360856067s ago: executing program 6 (id=799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$inet6(0xa, 0x804, 0xfffffffa) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @loopback, 0x4000005}, 0x1c) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x2, 0x6, 0xd}, 0xffffffffffffffd7, 0x4, 0x107f, 0x0, 0x1, 0x2, 0x0}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000500)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000900)={{r4}, r7, 0x10, @inherit={0x70, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000500000000000000ff0100000000eaff00000000000000000800000000000000040000000000000005000000000000000600000000000000a806000000000000030000000000000006000000000000001c96440b00000000ffffff7f00ffffffff00000000000000812aff"]}, @name="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"}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="02031b0030001400060065931c1000a000fffe8000000000000000000000000000aaff020000000000000000000000000001001200000000000007"], 0xd2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x10, 0xb, 0x7, 0xc83}, {0x7, 0x7, 0x9, 0xda}, {0x3104, 0x8e, 0x85, 0xc84}]}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000180)={0x7, {{0xa, 0x4e20, 0xa3f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xbfd}}, {{0xa, 0x4e21, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) getsockopt$inet6_buf(r9, 0x29, 0x44, &(0x7f0000000180)=""/203, &(0x7f0000000540)=0xcb) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m57.738077716s ago: executing program 1 (id=800): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x8b, 0x4, 0x0, 0x21}, {0x8585, 0x25, 0x8, 0x7}, {0x7, 0x4, 0xf7, 0x101}, {0x81, 0x64, 0x84}, {0x1, 0xa, 0xc3, 0x2}]}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) pread64(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x2fa) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000180)) 1m57.501846228s ago: executing program 1 (id=801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="01d46f4cb554ff43eb6d66f7cb6e00400601fc000000000000000000000000000000ff0200000000f40000000000000000014e244e2273cb6048045fc3d4a06481750f00b6b3ecd633b686e10940e9d516d16bf2f59a16b562ad492fb6d2aed0838de92f65aa2ad526e1603b0fae62c2bebeba71e780c2f863032356eeb10e56c2c85e7897146f9a7be42e012bf950181710b45b334960fb5c32f6630341593db693cb874e1b0552a1c6ddbfb6f5de3529539363e6af65979744327cdfa8a14ba99fcdd24f53730a449494d499e0dabc4bd6952a07fa699b856687fbded0d4abb1a6cd15b66f7cc64188fd1eb355387603bd0f5001b66bc31b36df3061a62b079795127fc646f8f1d9dbcca438933fe85e6b04e17ed6d871b0a82356faf7cb7489608a68b392dba99b7ce641132a4dcff56de53a324ee788993471afd39eee0eb81eef015c2f3d8408bffd639c4ac2b69904e85cd7e6f4733661831c1bf652b14734e6199fb0c7c66a7693fb80da11fe0a0371d402dbd4ad741068d25a667a7b9e70e883fd6f18803051bd3529ca5c539bf97d5ca7dd44735913e363b76b23bb00b15f116c20df2c9dacfcc6e2e30e19ed19bfd20f0979827de7e0e20522b62ce8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00800081907804f104021312a458c47c2571acd9e01c42775ebedb1e1e1509760c1c715a61faf3b75fa442b410387a9d3a000000"], 0x72) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="7d008e92555c1051efeb4adad207f938037c5931d452d259f3d665b88bfb1b4ca0dcf7e608b9ca81d7aadc628d7cbb86b112b027c2ef79180d89db3c8f8e13da4a13125d39ab56b23dac2e180a1bab12731c0bb7b6a7", @ANYRES16=r4, @ANYBLOB="000227bd7000fedbdf255200000008000300", @ANYRES32=r9, @ANYBLOB="0c009900f2ae0000480000000a000600ffffffffffff00000500890009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4008040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000005c0)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffe09}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @empty, 0x2}, 0x1c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66b888008ec00f01704d66baf80cb89cea9f8bef66bafc0cb802880000ef0f9f8600000000c4e38578d60db92a080000b849ccc09dba000000000f3066baf80cb8f9216a84ef66bafc0cb000ee0f21f30f01c467640f01cb", 0x58}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 1m56.549600372s ago: executing program 6 (id=802): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m47.69275289s ago: executing program 4 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20182, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="2e8b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000000)='\n\x00Y`}f\"', 0x7}], 0x4e) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (rerun: 64) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000740)={0x2, 0x0, @ioapic={0xfec00000, 0xd, 0x1, 0x4, 0x0, [{0x4, 0xc, 0x4, '\x00', 0x38}, {0x80, 0xfe, 0x5c, '\x00', 0x2f}, {0x2, 0xb3, 0x1, '\x00', 0xd}, {0x1, 0x9, 0x1, '\x00', 0x86}, {0x5, 0x2, 0x6, '\x00', 0x7c}, {0x7, 0x80, 0xfe, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x40, 0x1, '\x00', 0x7}, {0x2, 0x6, 0x73, '\x00', 0xfe}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0xa4, 0x24, 0xa9, '\x00', 0x1}, {0x7, 0x1, 0x17, '\x00', 0x4}, {0x6, 0x6, 0x5, '\x00', 0x3}, {0x19, 0x10, 0x8c, '\x00', 0x4}, {0x4, 0xc0, 0x4, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x3, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3}, {0xf4, 0x10, 0x7, '\x00', 0xf8}, {0x4, 0x6, 0x30, '\x00', 0xf7}, {0x7, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x7, 0x3, '\x00', 0x7}, {0x16, 0x85, 0x4, '\x00', 0xff}]}}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) (async) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 1m31.475434495s ago: executing program 35 (id=798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000000000003) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xe000202b}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="b8010000000f01c1c42189f99b3e94e39648b803000000000000000f23c00f21f83503000f000f23f866bad104b000eec4c2a1bc5c0ad966baf80cb8165d1c81ef66bafc0c66b80f0066eff3450f07646465643e410f01d1b8010000000f01d964400f01ca", 0x65}], 0x1, 0x70, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000000), 0x8) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONE(r10, 0x40049409, 0xffffffffffffffff) ioctl$TCXONC(r9, 0x540a, 0x0) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f00000000c0)={0x7, 0x6, 0xc, 0x9, 0x3, "56c3df871a74e309449817fe2de33f2d8dc45e", 0x3, 0xe}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$KVM_SET_PIT2(r11, 0x4070aea0, &(0x7f0000000200)={[{0x1ce7, 0x40, 0x9, 0x5, 0xb, 0x7, 0x9, 0xff, 0x1, 0x4, 0xad, 0x7f, 0x9}, {0x6, 0x1, 0x3, 0xe, 0x1, 0x5, 0x62, 0x1, 0x9, 0xef, 0x59, 0x1, 0x7}, {0x10, 0x4, 0xff, 0x6, 0x81, 0xd, 0x0, 0x80, 0x7f, 0x8, 0x7, 0x8d, 0x7}], 0xd7}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 57.233832801s ago: executing program 36 (id=802): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 54.407206914s ago: executing program 37 (id=801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00800081907804f104021312a458c47c2571acd9e01c42775ebedb1e1e1509760c1c715a61faf3b75fa442b410387a9d3a000000"], 0x72) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="7d008e92555c1051efeb4adad207f938037c5931d452d259f3d665b88bfb1b4ca0dcf7e608b9ca81d7aadc628d7cbb86b112b027c2ef79180d89db3c8f8e13da4a13125d39ab56b23dac2e180a1bab12731c0bb7b6a7", @ANYRES16=r4, @ANYBLOB="000227bd7000fedbdf255200000008000300", @ANYRES32=r9, @ANYBLOB="0c009900f2ae0000480000000a000600ffffffffffff00000500890009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4008040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000005c0)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffe09}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @empty, 0x2}, 0x1c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66b888008ec00f01704d66baf80cb89cea9f8bef66bafc0cb802880000ef0f9f8600000000c4e38578d60db92a080000b849ccc09dba000000000f3066baf80cb8f9216a84ef66bafc0cb000ee0f21f30f01c467640f01cb", 0x58}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 0s ago: executing program 38 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20182, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="2e8b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000000)='\n\x00Y`}f\"', 0x7}], 0x4e) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (rerun: 64) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000740)={0x2, 0x0, @ioapic={0xfec00000, 0xd, 0x1, 0x4, 0x0, [{0x4, 0xc, 0x4, '\x00', 0x38}, {0x80, 0xfe, 0x5c, '\x00', 0x2f}, {0x2, 0xb3, 0x1, '\x00', 0xd}, {0x1, 0x9, 0x1, '\x00', 0x86}, {0x5, 0x2, 0x6, '\x00', 0x7c}, {0x7, 0x80, 0xfe, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x40, 0x1, '\x00', 0x7}, {0x2, 0x6, 0x73, '\x00', 0xfe}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0xa4, 0x24, 0xa9, '\x00', 0x1}, {0x7, 0x1, 0x17, '\x00', 0x4}, {0x6, 0x6, 0x5, '\x00', 0x3}, {0x19, 0x10, 0x8c, '\x00', 0x4}, {0x4, 0xc0, 0x4, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x3, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3}, {0xf4, 0x10, 0x7, '\x00', 0xf8}, {0x4, 0x6, 0x30, '\x00', 0xf7}, {0x7, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x7, 0x3, '\x00', 0x7}, {0x16, 0x85, 0x4, '\x00', 0xff}]}}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) (async) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) kernel console output (not intermixed with test programs): oduct: syz [ 110.341264][ T343] usb 2-1: Manufacturer: syz [ 110.349429][ T343] usb 2-1: SerialNumber: syz [ 110.566904][ T343] usb 2-1: 0:1 : does not exist [ 110.663518][ T343] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 110.675980][ T343] usb 2-1: USB disconnect, device number 37 [ 110.757731][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.873761][ T431] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 111.027969][ T431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.038935][ T431] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.052805][ T431] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.072511][ T431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.082610][ T431] usb 5-1: Product: syz [ 111.092153][ T431] usb 5-1: Manufacturer: syz [ 111.097508][ T431] usb 5-1: SerialNumber: syz [ 111.194067][ T2380] ./dev/sda1: Can't lookup blockdev [ 111.517911][ T431] usb 5-1: cannot find UAC_HEADER [ 111.546270][ T431] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.573396][ T431] usb 5-1: USB disconnect, device number 6 [ 111.645450][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.866183][ T2405] netlink: 'syz.1.568': attribute type 32 has an invalid length. [ 112.606050][ T2421] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1262: comm syz.5.573: iget: checksum invalid [ 113.024829][ T36] kauditd_printk_skb: 532 callbacks suppressed [ 113.024849][ T36] audit: type=1400 audit(1789336661.433:3877): avc: denied { read open } for pid=2434 comm="syz.1.579" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.056212][ T36] audit: type=1400 audit(1789336661.473:3878): avc: denied { ioctl } for pid=2434 comm="syz.1.579" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.103302][ T36] audit: type=1400 audit(1789336661.513:3879): avc: denied { create } for pid=2434 comm="syz.1.579" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.125153][ T36] audit: type=1400 audit(1789336661.513:3880): avc: denied { map } for pid=2434 comm="syz.1.579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.163224][ T36] audit: type=1400 audit(1789336661.513:3881): avc: denied { read write } for pid=2434 comm="syz.1.579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.203414][ T36] audit: type=1400 audit(1789336661.513:3882): avc: denied { map } for pid=2434 comm="syz.1.579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.228501][ T36] audit: type=1400 audit(1789336661.513:3883): avc: denied { read write } for pid=2434 comm="syz.1.579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.229540][ T2443] FAULT_INJECTION: forcing a failure. [ 113.229540][ T2443] name failslab, interval 1, probability 0, space 0, times 0 [ 113.257281][ T36] audit: type=1400 audit(1789336661.513:3884): avc: denied { map } for pid=2434 comm="syz.1.579" path="socket:[42314]" dev="sockfs" ino=42314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.289898][ T36] audit: type=1400 audit(1789336661.523:3885): avc: denied { read write } for pid=2065 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.299316][ T2443] CPU: 1 UID: 0 PID: 2443 Comm: syz.4.580 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 113.299428][ T2443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.299469][ T2443] Call Trace: [ 113.299490][ T2443] [ 113.299519][ T2443] __dump_stack+0x21/0x30 [ 113.299657][ T2443] dump_stack_lvl+0x140/0x1c0 [ 113.299733][ T2443] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.299890][ T2443] ? __cfi_futex_wake_mark+0x10/0x10 [ 113.299971][ T2443] dump_stack+0x19/0x20 [ 113.300057][ T2443] should_fail_ex+0x3c2/0x510 [ 113.300138][ T2443] should_failslab+0xac/0x100 [ 113.300218][ T2443] kmem_cache_alloc_noprof+0x42/0x410 [ 113.300276][ T2443] ? prepare_creds+0x47/0x6b0 [ 113.300349][ T2443] prepare_creds+0x47/0x6b0 [ 113.300411][ T2443] ? vfs_write+0xbcf/0xfd0 [ 113.300484][ T2443] __se_sys_keyctl+0x495/0xe40 [ 113.300559][ T2443] ? __x64_sys_keyctl+0xf0/0xf0 [ 113.300632][ T2443] ? __cfi_do_futex+0x10/0x10 [ 113.300713][ T2443] ? mutex_unlock+0x90/0x240 [ 113.300788][ T2443] ? __se_sys_futex+0x13c/0x320 [ 113.300870][ T2443] ? fput+0x1a4/0x230 [ 113.300945][ T2443] ? xfd_validate_state+0x68/0x140 [ 113.301030][ T2443] ? __kasan_check_write+0x18/0x20 [ 113.301091][ T2443] ? fpregs_restore_userregs+0x11c/0x260 [ 113.301186][ T2443] __x64_sys_keyctl+0xc3/0xf0 [ 113.301280][ T2443] x64_sys_call+0x996/0x2ee0 [ 113.301343][ T2443] do_syscall_64+0x57/0xf0 [ 113.301397][ T2443] ? clear_bhb_loop+0x50/0xa0 [ 113.301470][ T2443] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.301543][ T2443] RIP: 0033:0x7f5b8bb9e159 [ 113.301605][ T2443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.301657][ T2443] RSP: 002b:00007f5b8cac5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 113.301741][ T2443] RAX: ffffffffffffffda RBX: 00007f5b8be25fa0 RCX: 00007f5b8bb9e159 [ 113.301799][ T2443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 113.301832][ T2443] RBP: 00007f5b8bc3503b R08: 0000000000000000 R09: 0000000000000000 [ 113.301871][ T2443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.301911][ T2443] R13: 00007f5b8be26038 R14: 00007f5b8be25fa0 R15: 00007ffc1e114828 [ 113.301963][ T2443] [ 113.538539][ T36] audit: type=1400 audit(1789336661.523:3886): avc: denied { read write open } for pid=2065 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.833291][ T337] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.993240][ T337] usb 6-1: Using ep0 maxpacket: 16 [ 114.015885][ T337] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 114.033262][ T337] usb 6-1: config 0 has no interface number 0 [ 114.043275][ T337] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 114.063313][ T337] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 114.087277][ T337] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 114.106581][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.123255][ T337] usb 6-1: Product: syz [ 114.133253][ T337] usb 6-1: Manufacturer: syz [ 114.143722][ T337] usb 6-1: SerialNumber: syz [ 114.150406][ T337] usb 6-1: config 0 descriptor?? [ 114.165722][ T2446] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 114.181091][ T2446] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 114.213266][ T343] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 114.375888][ T343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.387362][ T343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.401526][ T2446] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 114.409396][ T2446] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 114.413596][ T343] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 114.426417][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.434487][ T343] usb 2-1: Product: syz [ 114.438780][ T343] usb 2-1: Manufacturer: syz [ 114.443441][ T343] usb 2-1: SerialNumber: syz [ 114.459096][ T343] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 114.465170][ T343] cdc_wdm 2-1:1.0: Unknown control protocol [ 114.657027][ T2456] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 114.663966][ T343] usb 2-1: USB disconnect, device number 38 [ 114.832520][ T337] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 114.842641][ T337] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 114.853038][ T337] asix 6-1:0.34: probe with driver asix failed with error -61 [ 115.640613][ T2471] syz.1.588 (2471): drop_caches: 0 [ 116.446541][ T2476] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.589'. [ 116.455836][ T2476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 116.467210][ T2476] selinux_netlink_send: 57 callbacks suppressed [ 116.467229][ T2476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2476 comm=syz.1.589 [ 116.932015][ T64] usb 6-1: USB disconnect, device number 2 [ 117.140360][ T2483] 9pnet_fd: Insufficient options for proto=fd [ 117.423371][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.503288][ T337] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 117.583295][ T64] usb 5-1: Using ep0 maxpacket: 16 [ 117.590842][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.602702][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.615605][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.628510][ T64] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.637811][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.647590][ T64] usb 5-1: config 0 descriptor?? [ 117.658123][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.669775][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.679867][ T337] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.690646][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.693423][ T431] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 117.708306][ T337] usb 2-1: config 0 descriptor?? [ 117.843269][ T431] usb 6-1: device descriptor read/64, error -71 [ 117.930908][ T337] usbhid 2-1:0.0: can't add hid device: -71 [ 117.936947][ T337] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 117.951930][ T337] usb 2-1: USB disconnect, device number 39 [ 118.058976][ T36] kauditd_printk_skb: 332 callbacks suppressed [ 118.058995][ T36] audit: type=1400 audit(1789336666.473:4219): avc: denied { ioctl } for pid=2485 comm="syz.4.592" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.062958][ T64] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 118.082300][ T36] audit: type=1400 audit(1789336666.473:4220): avc: denied { ioctl } for pid=2485 comm="syz.4.592" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.092505][ T431] usb 6-1: device descriptor read/64, error -71 [ 118.121374][ T36] audit: type=1400 audit(1789336666.513:4221): avc: denied { ioctl } for pid=2485 comm="syz.4.592" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.127573][ T64] microsoft 0003:045E:07DA.000B: usage index exceeded [ 118.141695][ T36] audit: type=1400 audit(1789336666.543:4222): avc: denied { read write } for pid=2486 comm="syz.1.594" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.154181][ T64] microsoft 0003:045E:07DA.000B: item 0 4 2 0 parsing failed [ 118.184257][ T36] audit: type=1400 audit(1789336666.543:4223): avc: denied { read write open } for pid=2486 comm="syz.1.594" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.202830][ T64] microsoft 0003:045E:07DA.000B: parse failed [ 118.222781][ T64] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22 [ 118.236182][ T36] audit: type=1400 audit(1789336666.543:4224): avc: denied { ioctl } for pid=2486 comm="syz.1.594" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.262758][ T36] audit: type=1400 audit(1789336666.543:4225): avc: denied { ioctl } for pid=2486 comm="syz.1.594" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.287713][ T36] audit: type=1400 audit(1789336666.573:4226): avc: denied { ioctl } for pid=2486 comm="syz.1.594" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.312735][ T36] audit: type=1400 audit(1789336666.573:4227): avc: denied { ioctl } for pid=2486 comm="syz.1.594" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.337639][ T36] audit: type=1400 audit(1789336666.683:4228): avc: denied { ioctl } for pid=2495 comm="syz.5.596" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.393299][ T431] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 118.483282][ T337] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 118.521049][ T334] logitech-hidpp-device 0005:046D:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 118.535650][ T431] usb 6-1: device descriptor read/64, error -71 [ 118.665487][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.676767][ T334] usb 1-1: USB disconnect, device number 10 [ 118.684966][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.709217][ T2501] fido_id[2501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.730672][ T337] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 118.740686][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.762032][ T337] usb 2-1: config 0 descriptor?? [ 118.793295][ T431] usb 6-1: device descriptor read/64, error -71 [ 118.898374][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.906126][ T431] usb usb6-port1: attempt power cycle [ 118.911564][ T2502] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.920548][ T2502] bridge_slave_0: entered allmulticast mode [ 118.927184][ T2502] bridge_slave_0: entered promiscuous mode [ 118.935174][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.942226][ T2502] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.949355][ T2502] bridge_slave_1: entered allmulticast mode [ 118.955791][ T2502] bridge_slave_1: entered promiscuous mode [ 118.995462][ T1391] bridge_slave_1: left allmulticast mode [ 119.001167][ T1391] bridge_slave_1: left promiscuous mode [ 119.007391][ T1391] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.015534][ T1391] bridge_slave_0: left allmulticast mode [ 119.021282][ T1391] bridge_slave_0: left promiscuous mode [ 119.027106][ T1391] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.137186][ T1391] veth1_macvtap: left promiscuous mode [ 119.142749][ T1391] veth0_vlan: left promiscuous mode [ 119.187391][ T337] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 119.204984][ T337] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 119.230056][ T337] usb 2-1: USB disconnect, device number 40 [ 119.263303][ T431] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 119.297722][ T431] usb 6-1: device descriptor read/8, error -71 [ 119.314485][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.321557][ T2502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.328924][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.336019][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.404544][ T1392] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.413944][ T1392] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.436566][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.443684][ T1388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.460296][ T1392] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.467416][ T1392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.476248][ T431] usb 6-1: device descriptor read/8, error -71 [ 119.554593][ T2502] veth0_vlan: entered promiscuous mode [ 119.592135][ T2502] veth1_macvtap: entered promiscuous mode [ 119.723270][ T431] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 119.748926][ T431] usb 6-1: device descriptor read/8, error -71 [ 119.886261][ T431] usb 6-1: device descriptor read/8, error -71 [ 120.003468][ T431] usb usb6-port1: unable to enumerate USB device [ 120.093244][ T337] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 120.189992][ T431] usb 5-1: USB disconnect, device number 7 [ 120.197035][ T45] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 120.266194][ T337] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.276493][ T337] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.312956][ T337] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 120.332687][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.342789][ T337] usb 2-1: Product: syz [ 120.357832][ T337] usb 2-1: Manufacturer: syz [ 120.362496][ T337] usb 2-1: SerialNumber: syz [ 120.373512][ T45] usb 7-1: Invalid ep0 maxpacket: 64 [ 120.400730][ T337] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 120.427958][ T337] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 120.427958][ T337] Please send a copy of this message to and [ 120.523231][ T45] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 120.558108][ T2530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2530 comm=syz.5.603 [ 120.693271][ T45] usb 7-1: Invalid ep0 maxpacket: 64 [ 120.705887][ T45] usb usb7-port1: attempt power cycle [ 120.785890][ T2534] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2337 sclass=netlink_xfrm_socket pid=2534 comm=syz.5.605 [ 121.025531][ T337] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 121.046590][ T337] usb 2-1: USB disconnect, device number 41 [ 121.074495][ T45] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 121.105140][ T45] usb 7-1: Invalid ep0 maxpacket: 64 [ 121.243279][ T64] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 121.251080][ T45] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 121.274064][ T45] usb 7-1: Invalid ep0 maxpacket: 64 [ 121.281081][ T45] usb usb7-port1: unable to enumerate USB device [ 121.383273][ T64] usb 6-1: device descriptor read/64, error -71 [ 121.598533][ T2542] kvm: Disabled LAPIC found during irq injection [ 121.623280][ T64] usb 6-1: device descriptor read/64, error -71 [ 121.883235][ T64] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 122.064746][ T64] usb 6-1: device descriptor read/64, error -71 [ 122.123271][ T340] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 122.206184][ T2565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=2565 comm=syz.1.614 [ 122.295713][ T340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.305913][ T64] usb 6-1: device descriptor read/64, error -71 [ 122.312681][ T340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.324219][ T340] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.334820][ T340] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.352908][ T340] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 122.363716][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.371750][ T340] usb 5-1: Product: syz [ 122.377282][ T340] usb 5-1: Manufacturer: syz [ 122.381927][ T340] usb 5-1: SerialNumber: syz [ 122.393373][ T340] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 122.414093][ T64] usb usb6-port1: attempt power cycle [ 122.598611][ T337] usb 5-1: USB disconnect, device number 8 [ 122.753252][ T64] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 122.775848][ T64] usb 6-1: device descriptor read/8, error -71 [ 122.916232][ T64] usb 6-1: device descriptor read/8, error -71 [ 123.063498][ T36] kauditd_printk_skb: 554 callbacks suppressed [ 123.063516][ T36] audit: type=1400 audit(1789336671.483:4783): avc: denied { write } for pid=2569 comm="syz.6.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.093769][ T36] audit: type=1400 audit(1789336671.513:4784): avc: denied { ioctl } for pid=2536 comm="syz.5.606" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.131488][ T36] audit: type=1400 audit(1789336671.543:4785): avc: denied { read write } for pid=297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.166426][ T36] audit: type=1400 audit(1789336671.543:4786): avc: denied { read write open } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.191607][ T64] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 123.234809][ T64] usb 6-1: device descriptor read/8, error -71 [ 123.258566][ T36] audit: type=1400 audit(1789336671.543:4787): avc: denied { ioctl } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.304005][ T36] audit: type=1400 audit(1789336671.623:4788): avc: denied { unmount } for pid=2065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.343422][ T36] audit: type=1400 audit(1789336671.633:4789): avc: denied { read write } for pid=2065 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.383242][ T64] usb 6-1: device descriptor read/8, error -71 [ 123.416578][ T36] audit: type=1400 audit(1789336671.633:4790): avc: denied { read write open } for pid=2065 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.447419][ T36] audit: type=1400 audit(1789336671.633:4791): avc: denied { ioctl } for pid=2065 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.474948][ T36] audit: type=1400 audit(1789336671.643:4792): avc: denied { read } for pid=2575 comm="syz.1.616" dev="nsfs" ino=4026532452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.496435][ T64] usb usb6-port1: unable to enumerate USB device [ 123.519973][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 123.623260][ T45] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 123.683252][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 123.690891][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 123.700031][ T10] usb 2-1: config 179 has no interface number 0 [ 123.706543][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 123.717833][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 123.729328][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.740624][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.751149][ T10] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.764559][ T10] usb 2-1: config 179 interface 65 has no altsetting 0 [ 123.771448][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 123.782173][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.796434][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 123.797055][ T45] usb 7-1: config 7 has an invalid interface number: 177 but max is 1 [ 123.822619][ T45] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 123.834466][ T45] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 123.844689][ T45] usb 7-1: config 7 has no interface number 0 [ 123.851139][ T45] usb 7-1: config 7 interface 177 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 123.865582][ T45] usb 7-1: config 7 interface 177 has no altsetting 0 [ 123.877676][ T45] usb 7-1: New USB device found, idVendor=19d2, idProduct=0b70, bcdDevice=b8.3c [ 123.887383][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.896741][ T45] usb 7-1: Product: syz [ 123.901151][ T45] usb 7-1: Manufacturer: syz [ 123.911297][ T45] usb 7-1: SerialNumber: syz [ 124.013958][ T2576] netlink: 'syz.1.616': attribute type 4 has an invalid length. [ 124.033325][ T2576] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.616'. [ 124.131391][ T2588] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1518732303 (48599433696 ns) > initial count (34413656512 ns). Using initial count to start timer. [ 124.179052][ T2591] kvm: pic: single mode not supported [ 124.179157][ T2591] picdev_read: 6 callbacks suppressed [ 124.179173][ T2591] kvm: pic: non byte read [ 124.184532][ T45] usb 7-1: bad CDC descriptors [ 124.200421][ T2591] kvm: pic: single mode not supported [ 124.200496][ T2591] kvm: pic: non byte read [ 124.216946][ T45] usb 7-1: USB disconnect, device number 6 [ 124.346205][ T2595] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 124.613259][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 124.776032][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.798207][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 124.808590][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.817595][ T10] usb 6-1: Product: syz [ 124.821895][ T10] usb 6-1: Manufacturer: syz [ 124.827717][ T10] usb 6-1: SerialNumber: syz [ 124.846468][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 124.859948][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 125.074774][ C1] cdc_wdm 6-1:1.0: unknown notification 120 received: index 0 len 0 [ 125.277657][ T45] usb 6-1: USB disconnect, device number 11 [ 126.013226][ T10] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 126.163224][ T10] usb 7-1: device descriptor read/64, error -71 [ 126.232194][ T337] usb 2-1: USB disconnect, device number 42 [ 126.232243][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 126.247382][ T337] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 126.353213][ T2629] netlink: 'syz.1.629': attribute type 2 has an invalid length. [ 126.433340][ T10] usb 7-1: device descriptor read/64, error -71 [ 126.683232][ T10] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 126.763640][ T343] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 126.794025][ T343] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.843254][ T10] usb 7-1: device descriptor read/64, error -71 [ 127.023248][ T64] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 127.103336][ T10] usb 7-1: device descriptor read/64, error -71 [ 127.193920][ T64] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.213733][ T10] usb usb7-port1: attempt power cycle [ 127.219670][ T64] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 127.243255][ T64] usb 6-1: config 220 interface 0 has no altsetting 0 [ 127.254411][ T64] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.264062][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.272081][ T64] usb 6-1: Product: syz [ 127.276468][ T64] usb 6-1: Manufacturer: syz [ 127.281111][ T64] usb 6-1: SerialNumber: syz [ 127.443254][ T334] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.508975][ T64] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 127.516622][ T64] usb 6-1: No valid video chain found. [ 127.523044][ T64] usb 6-1: USB disconnect, device number 12 [ 127.534424][ T311] udevd[311]: setting mode of /dev/bus/usb/006/012 to 020664 failed: No such file or directory [ 127.545412][ T311] udevd[311]: setting owner of /dev/bus/usb/006/012 to uid=0, gid=0 failed: No such file or directory [ 127.584025][ T10] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 127.603270][ T334] usb 5-1: Using ep0 maxpacket: 32 [ 127.615284][ T10] usb 7-1: device descriptor read/8, error -71 [ 127.623648][ T334] usb 5-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice= 0.40 [ 127.632740][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.641681][ T334] usb 5-1: Product: syz [ 127.646419][ T334] usb 5-1: Manufacturer: syz [ 127.651058][ T334] usb 5-1: SerialNumber: syz [ 127.657528][ T334] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 127.667035][ T334] usb 5-1: no configuration chosen from 1 choice [ 127.746904][ T10] usb 7-1: device descriptor read/8, error -71 [ 127.993262][ T10] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 128.031513][ T10] usb 7-1: device descriptor read/8, error -71 [ 128.102276][ T36] kauditd_printk_skb: 835 callbacks suppressed [ 128.102295][ T36] audit: type=1400 audit(1789336676.513:5628): avc: denied { create } for pid=2670 comm="syz.5.642" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.134912][ T36] audit: type=1400 audit(1789336676.543:5629): avc: denied { ioctl } for pid=2666 comm="syz.1.641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.159905][ T36] audit: type=1400 audit(1789336676.543:5630): avc: denied { ioctl } for pid=2670 comm="syz.5.642" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44080 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.183352][ T334] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 128.187811][ T36] audit: type=1400 audit(1789336676.543:5631): avc: denied { ioctl } for pid=2670 comm="syz.5.642" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44080 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.221363][ T10] usb 7-1: device descriptor read/8, error -71 [ 128.225672][ T36] audit: type=1400 audit(1789336676.553:5632): avc: denied { create } for pid=2670 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.248590][ T36] audit: type=1400 audit(1789336676.603:5633): avc: denied { ioctl } for pid=2623 comm="syz.6.627" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.275505][ T36] audit: type=1400 audit(1789336676.623:5634): avc: denied { ioctl } for pid=2666 comm="syz.1.641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.304596][ T36] audit: type=1400 audit(1789336676.623:5635): avc: denied { ioctl } for pid=2666 comm="syz.1.641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.329679][ T36] audit: type=1400 audit(1789336676.633:5636): avc: denied { ioctl } for pid=2623 comm="syz.6.627" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.333586][ T10] usb usb7-port1: unable to enumerate USB device [ 128.356725][ T36] audit: type=1400 audit(1789336676.633:5637): avc: denied { ioctl } for pid=2666 comm="syz.1.641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.373595][ T334] usb 2-1: device descriptor read/64, error -71 [ 128.653257][ T334] usb 2-1: device descriptor read/64, error -71 [ 128.893240][ T334] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 129.043316][ T334] usb 2-1: device descriptor read/64, error -71 [ 129.290113][ T334] usb 2-1: device descriptor read/64, error -71 [ 129.413333][ T334] usb usb2-port1: attempt power cycle [ 129.613232][ T343] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 129.763260][ T334] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 129.773964][ T343] usb 6-1: Using ep0 maxpacket: 8 [ 129.785985][ T343] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 129.803307][ T343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 getty: ttyS0: read error: Resource temporarily unavailable [ 129.824837][ T343] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.838775][ T334] usb 2-1: device descriptor read/8, error -71 [ 129.858385][ T343] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 ý[ 129.877594][ T343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.895060][ T343] usb 6-1: config 0 descriptor?? [ 129.986561][ T334] usb 2-1: device descriptor read/8, error -71 [ 130.113256][ T64] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 130.200296][ T45] usb 5-1: USB disconnect, device number 9 [ 130.223279][ T334] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 130.263046][ T334] usb 2-1: device descriptor read/8, error -71 [ 130.294209][ T64] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 130.308323][ T64] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 0 [ 130.340293][ T64] usb 7-1: string descriptor 0 read error: -22 [ 130.350659][ T64] usb 7-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 130.370835][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.398840][ T64] usb 7-1: low speed audio streaming not supported [ 130.411897][ T334] usb 2-1: device descriptor read/8, error -71 [ 130.426273][ T64] usb 7-1: low speed audio streaming not supported [ 130.486891][ T343] usbhid 6-1:0.0: can't add hid device: -71 [ 130.492907][ T343] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 130.530994][ T343] usb 6-1: USB disconnect, device number 13 [ 130.537895][ T334] usb usb2-port1: unable to enumerate USB device [ 130.723236][ T430] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.908097][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.927146][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.947878][ T430] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 130.968197][ T430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.987642][ T430] usb 5-1: config 0 descriptor?? [ 131.021246][ T2707] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 131.353271][ T334] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 131.493239][ T334] usb 2-1: device descriptor read/64, error -71 [ 131.614365][ T430] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 131.643314][ T430] usb 5-1: USB disconnect, device number 10 [ 131.763251][ T334] usb 2-1: device descriptor read/64, error -71 [ 132.003248][ T334] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 132.163240][ T334] usb 2-1: device descriptor read/64, error -71 [ 132.403263][ T334] usb 2-1: device descriptor read/64, error -71 [ 132.443293][ T64] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.513832][ T334] usb usb2-port1: attempt power cycle [ 132.593256][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 132.600692][ T64] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 132.609051][ T64] usb 5-1: config 0 has no interface number 0 [ 132.615182][ T64] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 132.625255][ T64] usb 5-1: config 0 interface 196 has no altsetting 0 [ 132.635520][ T64] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 132.644619][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.652634][ T64] usb 5-1: Product: syz [ 132.656870][ T64] usb 5-1: Manufacturer: syz [ 132.661492][ T64] usb 5-1: SerialNumber: syz [ 132.667938][ T64] usb 5-1: config 0 descriptor?? [ 132.683286][ T2710] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.742480][ T45] usb 7-1: USB disconnect, device number 11 [ 132.853243][ T334] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 132.897420][ T334] usb 2-1: device descriptor read/8, error -71 [ 133.048236][ T334] usb 2-1: device descriptor read/8, error -71 [ 133.105535][ T36] kauditd_printk_skb: 431 callbacks suppressed [ 133.105554][ T36] audit: type=1400 audit(1789336681.523:6069): avc: denied { read } for pid=2709 comm="syz.4.657" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.136603][ T64] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 133.147883][ T64] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 133.173717][ T36] audit: type=1400 audit(1789336681.523:6070): avc: denied { read open } for pid=2709 comm="syz.4.657" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.193380][ T45] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 133.204441][ T36] audit: type=1400 audit(1789336681.523:6071): avc: denied { ioctl } for pid=2709 comm="syz.4.657" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.251438][ T36] audit: type=1400 audit(1789336681.543:6072): avc: denied { ioctl } for pid=2720 comm="syz.6.660" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.277229][ T36] audit: type=1400 audit(1789336681.543:6073): avc: denied { map } for pid=2725 comm="syz.5.662" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.302340][ T36] audit: type=1400 audit(1789336681.553:6074): avc: denied { ioctl } for pid=2709 comm="syz.4.657" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.334546][ T334] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 133.344753][ T36] audit: type=1400 audit(1789336681.553:6075): avc: denied { ioctl } for pid=2709 comm="syz.4.657" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.373246][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 133.374379][ T334] usb 2-1: device descriptor read/8, error -71 [ 133.386471][ T36] audit: type=1400 audit(1789336681.563:6076): avc: denied { read write } for pid=2725 comm="syz.5.662" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.389465][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.424877][ T36] audit: type=1400 audit(1789336681.583:6077): avc: denied { ioctl } for pid=2706 comm="syz.1.656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.453263][ T45] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.463018][ T36] audit: type=1400 audit(1789336681.583:6078): avc: denied { ioctl } for pid=2706 comm="syz.1.656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.483302][ T45] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.511355][ T45] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 133.525393][ T45] usb 7-1: config 0 interface 0 has no altsetting 0 [ 133.532054][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 133.540720][ T334] usb 2-1: device descriptor read/8, error -71 [ 133.544306][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.560466][ T45] usb 7-1: config 0 descriptor?? [ 133.622873][ T2734] overlayfs: failed to resolve './file0': -2 [ 133.659351][ T334] usb usb2-port1: unable to enumerate USB device [ 133.852063][ T2741] FAULT_INJECTION: forcing a failure. [ 133.852063][ T2741] name failslab, interval 1, probability 0, space 0, times 0 [ 133.864905][ T2741] CPU: 1 UID: 0 PID: 2741 Comm: syz.5.665 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 133.864943][ T2741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.864963][ T2741] Call Trace: [ 133.864970][ T2741] [ 133.864977][ T2741] __dump_stack+0x21/0x30 [ 133.865003][ T2741] dump_stack_lvl+0x140/0x1c0 [ 133.865025][ T2741] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.865046][ T2741] ? futex_wait+0x2b8/0x7c0 [ 133.865061][ T2741] ? __cfi_futex_wait+0x10/0x10 [ 133.865075][ T2741] dump_stack+0x19/0x20 [ 133.865095][ T2741] should_fail_ex+0x3c2/0x510 [ 133.865113][ T2741] should_failslab+0xac/0x100 [ 133.865132][ T2741] kmem_cache_alloc_noprof+0x42/0x410 [ 133.865148][ T2741] ? do_futex+0x32a/0x510 [ 133.865168][ T2741] ? getname_flags+0xcc/0x6b0 [ 133.865185][ T2741] getname_flags+0xcc/0x6b0 [ 133.865203][ T2741] getname+0x1b/0x30 [ 133.865218][ T2741] do_sys_openat2+0xda/0x1d0 [ 133.865240][ T2741] ? fput+0x1a4/0x230 [ 133.865259][ T2741] ? do_sys_open+0x100/0x100 [ 133.865281][ T2741] ? __cfi_ksys_write+0x10/0x10 [ 133.865296][ T2741] ? __kasan_check_write+0x18/0x20 [ 133.865312][ T2741] __x64_sys_openat+0x13a/0x170 [ 133.865341][ T2741] x64_sys_call+0xe69/0x2ee0 [ 133.865355][ T2741] do_syscall_64+0x57/0xf0 [ 133.865370][ T2741] ? clear_bhb_loop+0x50/0xa0 [ 133.865389][ T2741] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.865408][ T2741] RIP: 0033:0x7f2b8919e159 [ 133.865421][ T2741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.865434][ T2741] RSP: 002b:00007f2b8a00f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.865450][ T2741] RAX: ffffffffffffffda RBX: 00007f2b89426090 RCX: 00007f2b8919e159 [ 133.865462][ T2741] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 133.865472][ T2741] RBP: 00007f2b8923503b R08: 0000000000000000 R09: 0000000000000000 [ 133.865482][ T2741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.865491][ T2741] R13: 00007f2b89426128 R14: 00007f2b89426090 R15: 00007ffeec2293d8 [ 133.865505][ T2741] [ 134.131922][ T45] logitech-djreceiver 0003:046D:C53A.000E: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 134.308968][ T2722] kvm: kvm [2720]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0x40000087) = 0x7 [ 134.403252][ T334] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 134.556024][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.567533][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.577347][ T334] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 134.586481][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.596303][ T334] usb 2-1: config 0 descriptor?? [ 134.775000][ T2749] rust_binder: Write failure EINVAL in pid:173 [ 134.868568][ T431] rust_binder: 2745: undelivered TRANSACTION_COMPLETE [ 134.938930][ T55] Bluetooth: hci0: setting up ROME/QCA6390 Hü[ 135.216480][ T64] usb 5-1: USB disconnect, device number 11 [ 135.228427][ T334] hid-led 0003:27B8:01ED.000F: probe with driver hid-led failed with error -71 [ 135.249636][ T334] usb 2-1: USB disconnect, device number 51 ü[ 135.283407][ T45] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 135.413243][ T431] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 135.583249][ T431] usb 6-1: Using ep0 maxpacket: 16 [ 135.591270][ T431] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.602331][ T431] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.612198][ T431] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 135.625203][ T431] usb 6-1: config 0 interface 0 has no altsetting 0 [ 135.631850][ T431] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 135.640988][ T431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.651230][ T431] usb 6-1: config 0 descriptor?? [ 135.766810][ T2764] EXT4-fs error (device sda1): ext4_lookup:1819: inode #274: comm syz.1.673: iget: checksum invalid [ 135.777898][ T2764] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 135.790519][ T2764] EXT4-fs error (device sda1): ext4_lookup:1819: inode #274: comm syz.1.673: iget: checksum invalid [ 135.802456][ T2764] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 135.813928][ T2764] EXT4-fs error (device sda1): ext4_lookup:1819: inode #274: comm syz.1.673: iget: checksum invalid [ 135.827637][ T2764] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 135.845357][ T2764] EXT4-fs error (device sda1): ext4_lookup:1819: inode #274: comm syz.1.673: iget: checksum invalid [ 135.863353][ T2764] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 135.883919][ T2764] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 136.026093][ T2770] netlink: 104 bytes leftover after parsing attributes in process `syz.6.675'. [ 136.099228][ T2772] /dev/sr0: Can't lookup blockdev [ 136.108610][ T431] hid (null): report_id 0 is invalid [ 136.126677][ T431] hid (null): unknown global tag 0xe [ 136.276156][ T431] usb 6-1: USB disconnect, device number 14 [ 136.368384][ T2785] netlink: 79 bytes leftover after parsing attributes in process `syz.4.680'. [ 136.393171][ C1] Clock: inserting leap second 23:59:60 UTC [ 136.553273][ T334] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 136.643715][ T340] usb 7-1: USB disconnect, device number 12 [ 136.703255][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 136.711169][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.718359][ T334] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 136.727446][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.737234][ T334] usb 2-1: config 0 descriptor?? [ 137.063231][ T45] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 137.151162][ T334] input: HID 258a:6a88 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:258A:6A88.0011/input/input22 [ 137.170645][ T334] itetech 0003:258A:6A88.0011: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 137.218609][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.243811][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.263253][ T431] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 137.293264][ T45] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 137.302385][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.334777][ T45] usb 6-1: config 0 descriptor?? [ 137.343225][ T574] Bluetooth: hci0: command 0xfc00 tx timeout [ 137.352528][ T55] Bluetooth: hci0: Reading QCA version information failed (-110) [ 137.363231][ T55] Bluetooth: hci0: Retry BT power ON:0 Hü[ 137.463231][ T431] usb 7-1: Using ep0 maxpacket: 16 [ 137.475829][ T431] usb 7-1: config index 0 descriptor too short (expected 62750, got 36) [ 137.493199][ T431] usb 7-1: config 104 has an invalid descriptor of length 238, skipping remainder of the config [ 137.523216][ T431] usb 7-1: config 104 has 0 interfaces, different from the descriptor's value: 6 [ 137.543226][ T431] usb 7-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 137.570567][ T431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 ü[ 137.835602][ T2794] SELinux: avtab: truncated entry [ 137.851433][ T2804] netlink: 148 bytes leftover after parsing attributes in process `syz.4.686'. [ 137.889374][ T2794] SELinux: failed to load policy [ 137.905978][ T10] usb 2-1: USB disconnect, device number 52 [ 137.963241][ T45] hid-led 0003:27B8:01ED.0012: probe with driver hid-led failed with error -71 [ 137.994370][ T45] usb 6-1: USB disconnect, device number 15 [ 138.002097][ T2810] fuse: Bad value for 'fd' [ 138.047956][ T2812] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 138.118532][ T2813] 9pnet_fd: Insufficient options for proto=fd [ 138.121904][ T36] kauditd_printk_skb: 476 callbacks suppressed [ 138.121941][ T36] audit: type=1400 audit(1700006400.720:6555): avc: denied { mounton } for pid=2811 comm="syz.4.689" path="/57/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 138.169412][ T2813] can: request_module (can-proto-0) failed. [ 138.173470][ T36] audit: type=1400 audit(1700006400.770:6556): avc: denied { create } for pid=2811 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.203247][ T36] audit: type=1400 audit(1700006400.800:6557): avc: denied { read write } for pid=2811 comm="syz.4.689" name="file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 138.230809][ T36] audit: type=1400 audit(1700006400.800:6558): avc: denied { read write open } for pid=2811 comm="syz.4.689" path="/57/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 138.270018][ T2817] can: request_module (can-proto-0) failed. [ 138.275196][ T2816] 9pnet_fd: Insufficient options for proto=fd [ 138.276620][ T36] audit: type=1400 audit(1700006400.860:6559): avc: denied { read write } for pid=2811 comm="syz.4.689" name="file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 138.330499][ T36] audit: type=1400 audit(1700006400.860:6560): avc: denied { read write open } for pid=2811 comm="syz.4.689" path="/57/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 138.359329][ T36] audit: type=1400 audit(1700006400.860:6561): avc: denied { mac_admin } for pid=2811 comm="syz.4.689" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.380457][ T36] audit: type=1400 audit(1700006400.860:6562): avc: denied { relabelto } for pid=2811 comm="syz.4.689" name="file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 138.407830][ T36] audit: type=1400 audit(1700006400.860:6563): avc: denied { associate } for pid=2811 comm="syz.4.689" name="file0" dev="tmpfs" ino=330 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 138.435851][ T36] audit: type=1400 audit(1700006400.870:6564): avc: denied { create } for pid=2811 comm="syz.4.689" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.989241][ T2839] netlink: 'syz.4.697': attribute type 4 has an invalid length. [ 139.002702][ T2838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.013354][ T2831] mmap: syz.5.695 (2831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.050538][ T2838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.131520][ T2843] netlink: 104 bytes leftover after parsing attributes in process `syz.4.699'. [ 139.343223][ T334] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 139.363456][ T2849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 139.494293][ T343] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 139.508189][ T334] usb 2-1: no configurations [ 139.515297][ T334] usb 2-1: can't read configurations, error -22 [ 139.618574][ T2855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.627808][ T2855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.641970][ T2855] netlink: 'syz.6.704': attribute type 16 has an invalid length. [ 139.663156][ T334] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 139.674285][ T343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.703220][ T343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.721636][ T343] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 139.730868][ T343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.741090][ T343] usb 6-1: config 0 descriptor?? [ 139.746845][ T574] Bluetooth: hci0: command 0xfc00 tx timeout [ 139.753015][ T55] Bluetooth: hci0: Reading QCA version information failed (-110) [ 139.760801][ T55] Bluetooth: hci0: Retry BT power ON:1 Hü[ 139.804202][ T2858] FAULT_INJECTION: forcing a failure. [ 139.804202][ T2858] name failslab, interval 1, probability 0, space 0, times 0 [ 139.824048][ T334] usb 2-1: no configurations [ 139.829342][ T334] usb 2-1: can't read configurations, error -22 [ 139.837299][ T334] usb usb2-port1: attempt power cycle [ 139.844283][ T2858] CPU: 0 UID: 0 PID: 2858 Comm: syz.4.705 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 139.844314][ T2858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.844327][ T2858] Call Trace: [ 139.844333][ T2858] [ 139.844342][ T2858] __dump_stack+0x21/0x30 [ 139.844379][ T2858] dump_stack_lvl+0x140/0x1c0 [ 139.844414][ T2858] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.844445][ T2858] ? kasan_save_track+0x4f/0x80 [ 139.844481][ T2858] ? kasan_save_alloc_info+0x3a/0x50 [ 139.844501][ T2858] dump_stack+0x19/0x20 [ 139.844537][ T2858] should_fail_ex+0x3c2/0x510 [ 139.844565][ T2858] should_failslab+0xac/0x100 [ 139.844592][ T2858] kmem_cache_alloc_noprof+0x42/0x410 [ 139.844614][ T2858] ? mas_wr_store_type+0xfbf/0x1b40 [ 139.844640][ T2858] ? mas_alloc_nodes+0x254/0x9d0 [ 139.844667][ T2858] mas_alloc_nodes+0x254/0x9d0 [ 139.844697][ T2858] mas_preallocate+0x79b/0xc90 [ 139.844723][ T2858] ? __cfi_mas_preallocate+0x10/0x10 [ 139.844751][ T2858] ? __asan_memset+0x39/0x50 [ 139.844771][ T2858] ? vm_area_alloc+0x5f/0x190 [ 139.844794][ T2858] mmap_region+0x1409/0x1d10 [ 139.844821][ T2858] ? __cfi_mmap_region+0x10/0x10 [ 139.844848][ T2858] ? mm_get_unmapped_area_vmflags+0xbe/0xe0 [ 139.844876][ T2858] ? __get_unmapped_area+0x406/0x470 [ 139.844917][ T2858] do_mmap+0xb61/0x13b0 [ 139.844940][ T2858] ? __cfi_do_mmap+0x10/0x10 [ 139.844961][ T2858] ? down_write_killable+0xee/0x2d0 [ 139.844990][ T2858] ? __cfi_down_write_killable+0x10/0x10 [ 139.845018][ T2858] ? __sys_sendto+0x4f5/0x6e0 [ 139.845047][ T2858] vm_mmap_pgoff+0x367/0x4b0 [ 139.845070][ T2858] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 139.845093][ T2858] ? do_user_addr_fault+0xbf5/0x1230 [ 139.845128][ T2858] ksys_mmap_pgoff+0xfa/0x1e0 [ 139.845151][ T2858] __x64_sys_mmap+0x121/0x140 [ 139.845173][ T2858] x64_sys_call+0x13bf/0x2ee0 [ 139.845193][ T2858] do_syscall_64+0x57/0xf0 [ 139.845213][ T2858] ? clear_bhb_loop+0x50/0xa0 [ 139.845242][ T2858] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.845268][ T2858] RIP: 0033:0x7f5b8bb9dec2 [ 139.845287][ T2858] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 139.845307][ T2858] RSP: 002b:00007f5b8caa2d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 139.845330][ T2858] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b8bb9dec2 [ 139.845345][ T2858] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 139.845359][ T2858] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 139.845373][ T2858] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 139.845387][ T2858] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f5b8bc32778 [ 139.845404][ T2858] [ 139.895503][ T2857] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 140.138472][ T2857] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 140.184098][ T334] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 140.217330][ T334] usb 2-1: no configurations [ 140.232641][ T334] usb 2-1: can't read configurations, error -22 [ 140.373315][ T334] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 140.415962][ T343] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71 [ 140.434629][ T334] usb 2-1: no configurations [ 140.439395][ T334] usb 2-1: can't read configurations, error -22 [ 140.446918][ T343] usb 6-1: USB disconnect, device number 16 [ 140.460619][ T334] usb usb2-port1: unable to enumerate USB device [ 141.275464][ T2890] rust_binder: Failed to allocate buffer. len:19472, is_oneway:false [ 141.275490][ T2890] rust_binder: Failure in copy_transaction_data: ENOSPC [ 141.284686][ T2890] rust_binder: 2889:2890 transaction call to 2889:0 failed ENOSPC, code 0 size 19456-0 [ 141.301511][ T340] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 141.320577][ T64] rust_binder: 2889: undelivered TRANSACTION_ERROR: 29201 [ 141.477414][ T340] usb 6-1: unable to get BOS descriptor or descriptor too short [ 141.486870][ T340] usb 6-1: not running at top speed; connect to a high speed hub [ 141.526707][ T340] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 141.543424][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.562826][ T340] usb 6-1: Product: syz [ 141.571440][ T340] usb 6-1: Manufacturer: syz [ 141.583191][ T340] usb 6-1: SerialNumber: syz [ 141.689238][ T2905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.697894][ T2905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.809258][ T340] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 141.820643][ T340] usb 6-1: USB disconnect, device number 17 [ 142.513089][ T343] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 142.623841][ T431] usb 7-1: string descriptor 0 read error: -32 [ 142.665883][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.687442][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.729177][ T343] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 142.759055][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.807237][ T343] usb 2-1: config 0 descriptor?? [ 143.003136][ T2933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.022031][ T2933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.152082][ T36] kauditd_printk_skb: 583 callbacks suppressed [ 143.152102][ T36] audit: type=1400 audit(1700006661.754:7148): avc: denied { sys_module } for pid=2930 comm="syz.4.730" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.181724][ T36] audit: type=1400 audit(1700006661.764:7149): avc: denied { execmem } for pid=2930 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.246497][ T36] audit: type=1400 audit(1700006661.844:7150): avc: denied { read write } for pid=2907 comm="syz.1.722" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.273556][ T36] audit: type=1400 audit(1700006661.844:7151): avc: denied { read write open } for pid=2907 comm="syz.1.722" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.298708][ T343] arvo 0003:1E7D:30D4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 143.309906][ T36] audit: type=1400 audit(1700006661.844:7152): avc: denied { ioctl } for pid=2907 comm="syz.1.722" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.357256][ T36] audit: type=1400 audit(1700006661.844:7153): avc: denied { ioctl } for pid=2907 comm="syz.1.722" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.393609][ T36] audit: type=1400 audit(1700006661.844:7154): avc: denied { ioctl } for pid=2907 comm="syz.1.722" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.449496][ T36] audit: type=1400 audit(1700006661.844:7155): avc: denied { ioctl } for pid=2907 comm="syz.1.722" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.477511][ T343] arvo 0003:1E7D:30D4.0014: couldn't init struct arvo_device [ 143.490185][ T343] arvo 0003:1E7D:30D4.0014: couldn't install keyboard [ 143.507607][ T2941] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.515588][ T36] audit: type=1400 audit(1700006661.854:7156): avc: denied { read write } for pid=2907 comm="syz.1.722" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.539874][ T343] arvo 0003:1E7D:30D4.0014: probe with driver arvo failed with error -32 [ 143.790985][ T2954] netlink: 'syz.6.736': attribute type 30 has an invalid length. [ 143.900096][ T2958] fuse: Bad value for 'user_id' [ 143.930142][ T2958] fuse: Bad value for 'user_id' [ 144.249706][ T2966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=2966 comm=syz.6.738 [ 144.355093][ T2969] kvm: kvm [2968]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 144.642819][ T343] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 144.792833][ T343] usb 6-1: device descriptor read/64, error -71 [ 144.862860][ T64] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.015419][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.026748][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.036584][ T64] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 145.045893][ T343] usb 6-1: device descriptor read/64, error -71 [ 145.046168][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.064247][ T64] usb 5-1: config 0 descriptor?? [ 145.196490][ T334] usb 2-1: USB disconnect, device number 57 [ 145.282778][ T343] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 145.492794][ T343] usb 6-1: device descriptor read/64, error -71 [ 145.692393][ T2994] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1262: comm syz.1.747: iget: checksum invalid [ 145.713253][ T2994] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1262: comm syz.1.747: iget: checksum invalid [ 145.732721][ T343] usb 6-1: device descriptor read/64, error -71 [ 145.751853][ T2994] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1262: comm syz.1.747: iget: checksum invalid [ 145.853210][ T343] usb usb6-port1: attempt power cycle [ 145.921473][ T64] hid-led 0003:27B8:01ED.0015: probe with driver hid-led failed with error -71 [ 145.944423][ T64] usb 5-1: USB disconnect, device number 12 [ 146.223506][ T343] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 146.262641][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 146.274721][ T343] usb 6-1: device descriptor read/8, error -71 [ 146.412843][ T343] usb 6-1: device descriptor read/8, error -71 [ 146.422641][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 146.437128][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 146.456323][ T10] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 146.472595][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.480724][ T10] usb 2-1: Product: syz [ 146.490832][ T10] usb 2-1: Manufacturer: syz [ 146.495532][ T10] usb 2-1: SerialNumber: syz [ 146.662592][ T343] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 146.706748][ T343] usb 6-1: device descriptor read/8, error -71 [ 146.725836][ T10] usb 2-1: USB disconnect, device number 58 [ 146.824038][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.846796][ T343] usb 6-1: device descriptor read/8, error -71 [ 146.963164][ T343] usb usb6-port1: unable to enumerate USB device [ 147.392484][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 147.512652][ T3019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.514178][ T3019] rust_binder: 3017:3019 error while translating object: ENOENT [ 147.562525][ T3019] rust_binder: Failure in copy_transaction_data: ENOENT [ 147.562561][ T3019] rust_binder: 3017:3019 transaction call to 2745:0 failed ENOENT, code 0 size 80-24 [ 147.582857][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 147.609999][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.631621][ T10] usb 5-1: config 0 has no interface number 0 [ 147.638029][ T343] rust_binder: 3017: undelivered TRANSACTION_ERROR: 29201 [ 147.662480][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 147.689804][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 147.707705][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.725985][ T10] usb 5-1: Product: syz [ 147.736085][ T10] usb 5-1: Manufacturer: syz [ 147.746217][ T10] usb 5-1: SerialNumber: syz [ 147.776402][ T10] usb 5-1: config 0 descriptor?? [ 147.794501][ T10] smsc75xx v1.0.0 [ 148.002422][ T64] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 148.163008][ T36] kauditd_printk_skb: 1847 callbacks suppressed [ 148.163027][ T36] audit: type=1400 audit(1700006666.775:8687): avc: denied { ioctl } for pid=3032 comm="syz.1.760" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.202444][ T64] usb 6-1: device descriptor read/64, error -71 [ 148.222397][ T343] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 148.229167][ T36] audit: type=1400 audit(1700006666.825:8688): avc: denied { ioctl } for pid=3011 comm="syz.4.753" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.269636][ T36] audit: type=1400 audit(1700006666.825:8689): avc: denied { ioctl } for pid=3011 comm="syz.4.753" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.332391][ T36] audit: type=1400 audit(1700006666.835:8690): avc: denied { ioctl } for pid=3032 comm="syz.1.760" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.357932][ T36] audit: type=1400 audit(1700006666.835:8691): avc: denied { ioctl } for pid=3032 comm="syz.1.760" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.383471][ T36] audit: type=1400 audit(1700006666.835:8692): avc: denied { ioctl } for pid=3032 comm="syz.1.760" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.409616][ T36] audit: type=1400 audit(1700006666.915:8693): avc: denied { ioctl } for pid=3032 comm="syz.1.760" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.421069][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.452383][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 148.456765][ T36] audit: type=1400 audit(1700006666.935:8694): avc: denied { ioctl } for pid=3026 comm="syz.5.758" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.472449][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 148.488154][ T64] usb 6-1: device descriptor read/64, error -71 [ 148.504243][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.524249][ T343] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 148.542349][ T36] audit: type=1400 audit(1700006666.935:8695): avc: denied { ioctl } for pid=3026 comm="syz.5.758" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.544085][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.581928][ T36] audit: type=1400 audit(1700006666.935:8696): avc: denied { ioctl } for pid=3026 comm="syz.5.758" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.607132][ T343] usb 2-1: config 0 descriptor?? [ 148.752393][ T64] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 148.892344][ T64] usb 6-1: device descriptor read/64, error -71 [ 148.946747][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 148.957885][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 148.973088][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 148.983320][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 148.993556][ T10] usb 5-1: USB disconnect, device number 13 [ 149.003310][ T322] udevd[322]: setting mode of /dev/bus/usb/005/013 to 020664 failed: Read-only file system [ 149.014012][ T322] udevd[322]: setting owner of /dev/bus/usb/005/013 to uid=0, gid=0 failed: Read-only file system [ 149.057252][ T311] udevd[311]: symlink '../bus/usb/005/013' '/dev/char/189:524.tmp-c189:524' failed: Read-only file system [ 149.093047][ T311] udevd[311]: symlink '../bus/usb/005/013' '/dev/char/189:524.tmp-c189:524' failed: Read-only file system [ 149.142322][ T64] usb 6-1: device descriptor read/64, error -71 [ 149.252839][ T64] usb usb6-port1: attempt power cycle [ 149.401050][ T3039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.416031][ T3039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.430382][ T343] hid-led 0003:27B8:01ED.0016: probe with driver hid-led failed with error -71 [ 149.449228][ T343] usb 2-1: USB disconnect, device number 59 [ 149.592257][ T64] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 149.636401][ T64] usb 6-1: device descriptor read/8, error -71 [ 149.795989][ T64] usb 6-1: device descriptor read/8, error -71 [ 149.981461][ T3050] netlink: 'syz.1.766': attribute type 3 has an invalid length. [ 149.989844][ T3050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 150.002318][ T343] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 150.042171][ T64] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 150.077212][ T64] usb 6-1: device descriptor read/8, error -71 [ 150.162155][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 150.183664][ T343] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.197590][ T3057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.197594][ T343] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 150.206569][ T3057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.230222][ T343] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 150.240587][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.259654][ T64] usb 6-1: device descriptor read/8, error -71 [ 150.266862][ T343] usb 5-1: Product: syz [ 150.271072][ T343] usb 5-1: Manufacturer: syz [ 150.275712][ T343] usb 5-1: SerialNumber: syz [ 150.379249][ T64] usb usb6-port1: unable to enumerate USB device [ 150.396630][ T311] udevd[311]: symlink '../../loop5' '/dev/disk/by-diskseq/57.tmp-b7:5' failed: Read-only file system [ 150.428243][ T3059] netlink: 64 bytes leftover after parsing attributes in process `syz.6.769'. [ 150.494361][ T343] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 150.527808][ T343] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 150.584620][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 150.622541][ T55] Bluetooth: hci0: Reading QCA version information failed (-110) [ 150.630430][ T55] Bluetooth: hci0: Retry BT power ON:2 [ 150.932029][ T343] usb 5-1: USB disconnect, device number 14 [ 151.029454][ T1973] udevd[1973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.254426][ T3075] cgroup: fork rejected by pids controller in /syz5 [ 151.302058][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 151.469852][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.488889][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.521254][ T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 151.552014][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.573614][ T10] usb 2-1: config 0 descriptor?? [ 151.903248][ T3128] bridge0: port 3(veth0_to_bridge) entered blocking state [ 151.910461][ T3128] bridge0: port 3(veth0_to_bridge) entered disabled state [ 151.962048][ T3128] veth0_to_bridge: entered allmulticast mode [ 151.969212][ T3128] veth0_to_bridge: entered promiscuous mode [ 151.999525][ T3128] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.032583][ T3128] bridge0: port 3(veth0_to_bridge) entered blocking state [ 152.039815][ T3128] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 152.400693][ T10] hid-led 0003:27B8:01ED.0017: probe with driver hid-led failed with error -71 [ 152.416319][ T10] usb 2-1: USB disconnect, device number 60 [ 152.491860][ T64] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 152.661847][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 152.669803][ T64] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.679960][ T64] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.692266][ T64] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 152.701400][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.709639][ T64] usb 6-1: Product: syz [ 152.713902][ T64] usb 6-1: Manufacturer: syz [ 152.718569][ T64] usb 6-1: SerialNumber: syz [ 152.841843][ T343] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 152.943618][ T64] usb 6-1: 0:1 : does not exist [ 152.951669][ T64] usb 6-1: 0:2 : does not exist [ 152.957041][ T64] usb 6-1: 0:3 : does not exist [ 152.963238][ T64] usb 6-1: 0:4 : does not exist [ 152.981728][ T64] usb 6-1: USB disconnect, device number 26 [ 153.001805][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 153.021650][ T343] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.063614][ T343] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.088899][ T343] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.101917][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.110038][ T343] usb 5-1: Product: syz [ 153.115402][ T343] usb 5-1: Manufacturer: syz [ 153.120108][ T343] usb 5-1: SerialNumber: syz [ 153.129273][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.191788][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 153.206562][ T36] kauditd_printk_skb: 1081 callbacks suppressed [ 153.206580][ T36] audit: type=1400 audit(1700006671.816:9778): avc: denied { ioctl } for pid=3144 comm="syz.1.785" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.304086][ T36] audit: type=1400 audit(1700006671.856:9779): avc: denied { ioctl } for pid=3144 comm="syz.1.785" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.361826][ T343] usb 5-1: 0:2 : does not exist [ 153.389286][ T343] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 153.399266][ T36] audit: type=1400 audit(1700006671.856:9780): avc: denied { read write } for pid=2502 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.438829][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.449947][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 153.475513][ T343] usb 5-1: USB disconnect, device number 15 [ 153.513054][ T36] audit: type=1400 audit(1700006671.856:9781): avc: denied { read write open } for pid=2502 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.576511][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.588000][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.628557][ T3150] netlink: 32 bytes leftover after parsing attributes in process `syz.6.787'. [ 153.637680][ T10] usb 2-1: Product: syz [ 153.645304][ T36] audit: type=1400 audit(1700006671.856:9782): avc: denied { ioctl } for pid=2502 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.671116][ T10] usb 2-1: Manufacturer: syz [ 153.676684][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.787'. [ 153.686575][ T10] usb 2-1: SerialNumber: syz [ 153.697689][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 153.728682][ T334] smpboot: CPU 1 is now offline [ 153.775049][ T3150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.799169][ T2110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.813344][ T36] audit: type=1400 audit(1700006671.856:9783): avc: denied { ioctl } for pid=3144 comm="syz.1.785" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.841822][ T3150] audit: audit_lost=109 audit_rate_limit=0 audit_backlog_limit=64 [ 153.856258][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.877361][ T2110] audit: audit_lost=110 audit_rate_limit=0 audit_backlog_limit=64 [ 153.898216][ T3145] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 154.039875][ T3156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.790'. [ 154.080159][ T3156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=3156 comm=syz.4.790 [ 154.145548][ T10] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 154.160987][ T10] cdc_mbim 2-1:1.0: bind() failure [ 154.219840][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 154.284885][ T10] cdc_ncm 2-1:1.1: bind() failure [ 154.492873][ T3176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.547583][ T3176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.101951][ T3185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.161958][ T3188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.224304][ T3185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.260841][ T3188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.331499][ T334] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 155.491526][ T334] usb 5-1: device descriptor read/64, error -71 [ 155.751486][ T334] usb 5-1: device descriptor read/64, error -71 [ 155.801441][ T343] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 155.947197][ T10] usb 2-1: USB disconnect, device number 61 [ 155.965199][ T343] usb 6-1: config index 0 descriptor too short (expected 7768, got 18) [ 155.989759][ T343] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 156.001416][ T334] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 156.054059][ T343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.100508][ T343] usb 6-1: config 0 descriptor?? [ 156.131640][ T343] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG [ 156.161404][ T334] usb 5-1: device descriptor read/64, error -71 [ 156.177199][ T343] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 156.433482][ T334] usb 5-1: device descriptor read/64, error -71 [ 158.035775][ T334] usb usb5-port1: attempt power cycle [ 158.061358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.073595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.085784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.097944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.110110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.122272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.134430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.146593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.158764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.170929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 158.216638][ T36] kauditd_printk_skb: 397 callbacks suppressed [ 158.216652][ T36] audit: type=1400 audit(1700006676.826:10104): avc: denied { ioctl } for pid=3193 comm="syz.5.798" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.070569][ C0] net_ratelimit: 48578 callbacks suppressed [ 163.070585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 163.088666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.100635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 163.112806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.124776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 163.136907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.148860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 163.160983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.172960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 163.185110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.079973][ C0] net_ratelimit: 68751 callbacks suppressed [ 168.079989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.097914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 168.109962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.121997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.134150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.146138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 168.158214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.170226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.182399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.194401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 173.089322][ C0] net_ratelimit: 77030 callbacks suppressed [ 173.089339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.107418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 173.119626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.131609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.143770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.155754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 173.167780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.179767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.191927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.203889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 178.098824][ C0] net_ratelimit: 76418 callbacks suppressed [ 178.098840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.116864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 178.128924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.140914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.153065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.165124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 178.177210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.189195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.201389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.213384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 183.108124][ C0] net_ratelimit: 76657 callbacks suppressed [ 183.108155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.126340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.138406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 183.150449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.162419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.174577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.186568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 183.198602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.210566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.222591][ C0] sched: DL replenish lagged too much [ 183.228159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.117498][ C0] net_ratelimit: 77333 callbacks suppressed [ 188.117514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.135444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.147675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.159676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 188.171731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.183711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.195860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.207847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 188.219856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.231823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.126898][ C0] net_ratelimit: 77670 callbacks suppressed [ 193.126914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.144836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.156987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.168977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 193.181019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.192991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.205134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.217120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 193.229165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.241167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.136272][ C0] net_ratelimit: 76256 callbacks suppressed [ 198.136288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.154212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 198.166268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.178260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.190421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.202409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 198.214452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.226431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.238596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.250565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 203.145798][ C0] net_ratelimit: 75010 callbacks suppressed [ 203.145815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.163828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 203.175875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.187847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.200023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.212013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 203.224036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.236012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.248160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.260116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 204.757303][ T36] audit: type=1400 audit(1700006676.876:10105): avc: denied { read write } for pid=2502 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.155071][ C0] net_ratelimit: 74978 callbacks suppressed [ 208.155088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.173007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 208.185068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.197025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.209136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.221108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 208.233155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.245114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.257246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.269225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 212.015945][ T36] audit: type=1400 audit(1700006676.876:10106): avc: denied { read write open } for pid=2502 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.164471][ C0] net_ratelimit: 74043 callbacks suppressed [ 213.164489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 213.182474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.194478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.206607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.218583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 213.230674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.242728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.254903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.266877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 213.278931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.156007][ T10] usb 6-1: USB disconnect, device number 27 [ 216.570441][ T36] audit: type=1400 audit(1700006676.876:10107): avc: denied { ioctl } for pid=2502 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.515610][ T334] usb 7-1: USB disconnect, device number 13 [ 217.635681][ T36] audit: type=1400 audit(1700006677.406:10108): avc: denied { create } for pid=3200 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.173853][ C0] net_ratelimit: 65057 callbacks suppressed [ 218.173870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.191804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 218.203866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.215847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.228046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.240031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 218.252092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.264084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.276254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.288275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 218.645321][ T36] audit: type=1400 audit(1700006677.416:10109): avc: denied { create } for pid=3200 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.183306][ C0] net_ratelimit: 64658 callbacks suppressed [ 223.183322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.201243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 223.213298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.225263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.237400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 223.249521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.261496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 223.273510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.285460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.297581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 228.192653][ C0] net_ratelimit: 67447 callbacks suppressed [ 228.192671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.210661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.222817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 228.235014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.246994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 228.259042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.271015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.283140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 228.295267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.307243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 233.202078][ C0] net_ratelimit: 71935 callbacks suppressed [ 233.202094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.220109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 233.232246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.244317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 233.256358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.268369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.280496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.292516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 233.304677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.316648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 238.211470][ C0] net_ratelimit: 74706 callbacks suppressed [ 238.211486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.229417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 238.241497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.253453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.265552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.277530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 238.289548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.301502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.313624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.325587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 243.220890][ C0] net_ratelimit: 82702 callbacks suppressed [ 243.220907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.238856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 243.250935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.262905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.274996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.286961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 243.298988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.310974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.323108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.335071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 248.230272][ C0] net_ratelimit: 80703 callbacks suppressed [ 248.230289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 248.248328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.260298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.272379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.284346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 248.296390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.308381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.320522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.332491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 248.344551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.239701][ C0] net_ratelimit: 81216 callbacks suppressed [ 253.239718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.257765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.269763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 253.281798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.293769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.305923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.317897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 253.330095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.342089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.354179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.426999][ T36] audit: type=1400 audit(1700006677.466:10110): avc: denied { create } for pid=3200 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.765603][ T1427] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:58: bg 5: bad block bitmap checksum [ 258.249115][ C0] net_ratelimit: 77631 callbacks suppressed [ 258.249132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.267063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 258.279114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.291197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.303372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.315383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 258.327487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.339460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.351563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.363540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 262.809329][ T1427] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 3583 with max blocks 1 with error 74 [ 263.258442][ C0] net_ratelimit: 75471 callbacks suppressed [ 263.258459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 263.276491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.288523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.300663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.312649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 263.324715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.336687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.348793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.360751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 263.372780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.412712][ T36] audit: type=1400 audit(1700006678.216:10111): avc: denied { ioctl } for pid=3200 comm="syz.1.801" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 264.124382][ T1427] EXT4-fs (sda1): This should not happen!! Data will be lost [ 264.124382][ T1427] [ 264.360052][ T36] audit: type=1400 audit(1700006723.602:10112): avc: denied { read write } for pid=2065 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.267876][ C0] net_ratelimit: 73766 callbacks suppressed [ 268.267893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 268.285897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.297966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.310148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.322152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 268.334235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.346229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.358335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.370351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 268.382403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.277278][ C0] net_ratelimit: 75451 callbacks suppressed [ 273.277293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.295228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.307341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.319394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 273.331520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.343605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.355825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.367908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 273.380024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.392094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.138564][ T36] audit: type=1400 audit(1700006723.602:10113): avc: denied { read write open } for pid=2065 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.286672][ C0] net_ratelimit: 73991 callbacks suppressed [ 278.286688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.304730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.316725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 278.328762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.340753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.352891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.364867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 278.376966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.389022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.401103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.296080][ C0] net_ratelimit: 80718 callbacks suppressed [ 283.296096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.314130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.326124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 283.338166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.350149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.362334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.374380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 283.386535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.398576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.410744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.957183][ T37] INFO: task getty:205 blocked for more than 132 seconds. [ 283.964338][ T37] Not tainted syzkaller #0 [ 284.766237][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.774947][ T37] task:getty state:D stack:0 pid:205 tgid:205 ppid:1 flags:0x00004002 [ 284.785147][ T37] Call Trace: [ 284.788461][ T37] [ 284.791397][ T37] __schedule+0x1496/0x20b0 [ 284.795943][ T37] ? __sched_text_start+0x10/0x10 [ 284.800975][ T37] ? kernel_text_address+0xa9/0xe0 [ 284.806106][ T37] ? __kasan_check_write+0x18/0x20 [ 284.811219][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 284.816715][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 284.822616][ T37] schedule+0xc5/0x240 [ 284.826696][ T37] schedule_timeout+0xc7/0x3b0 [ 284.831469][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 284.836857][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 284.842402][ T37] ? kasan_save_track+0x4f/0x80 [ 284.847312][ T37] ? __kasan_slab_free+0x5f/0x80 [ 284.852265][ T37] ? kfree+0x158/0x440 [ 284.856346][ T37] ? cleanup_srcu_struct+0x3cd/0x4d0 [ 284.861635][ T37] wait_for_common+0x368/0x650 [ 284.866428][ T37] ? do_exit+0xa2e/0x2850 [ 284.870795][ T37] ? do_group_exit+0x21f/0x2f0 [ 284.875564][ T37] ? wait_for_completion+0x40/0x40 [ 284.880687][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 284.885822][ T37] ? __virt_addr_valid+0xc4/0x370 [ 284.890898][ T37] ? kasan_addr_to_slab+0x11/0x80 [ 284.895939][ T37] wait_for_completion+0x1c/0x40 [ 284.900874][ T37] __flush_work+0x6a8/0xaa0 [ 284.905381][ T37] ? flush_work+0x40/0x40 [ 284.909730][ T37] ? __cfi_wq_barrier_func+0x10/0x10 [ 284.915030][ T37] ? __kasan_check_write+0x18/0x20 [ 284.920146][ T37] ? __cancel_work+0x175/0x1f0 [ 284.924919][ T37] disable_work_sync+0xab/0xd0 [ 284.929694][ T37] hci_unregister_dev+0x174/0x3b0 [ 284.934729][ T37] hci_uart_tty_close+0x292/0x330 [ 284.939775][ T37] ? __cfi_hci_uart_tty_close+0x10/0x10 [ 284.945332][ T37] tty_ldisc_reinit+0x169/0x500 [ 284.950198][ T37] tty_ldisc_hangup+0x3d3/0x6e0 [ 284.955050][ T37] __tty_hangup+0x59f/0x820 [ 284.959587][ T37] tty_vhangup_session+0x1e/0x30 [ 284.964529][ T37] disassociate_ctty+0x3cd/0x8c0 [ 284.969490][ T37] do_exit+0xa2e/0x2850 [ 284.973669][ T37] ? __cfi_do_exit+0x10/0x10 [ 284.978304][ T37] ? __kasan_check_write+0x18/0x20 [ 284.983417][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 284.988546][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 284.994092][ T37] ? __kasan_check_write+0x18/0x20 [ 284.999220][ T37] ? do_user_addr_fault+0xbf5/0x1230 [ 285.004535][ T37] ? zap_other_threads+0x32f/0x370 [ 285.009731][ T37] do_group_exit+0x21f/0x2f0 [ 285.014332][ T37] __x64_sys_exit_group+0x43/0x50 [ 285.019383][ T37] x64_sys_call+0x2ed2/0x2ee0 [ 285.024082][ T37] do_syscall_64+0x57/0xf0 [ 285.028519][ T37] ? clear_bhb_loop+0x50/0xa0 [ 285.033233][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 285.039161][ T37] RIP: 0033:0x7fa8ccaad6c5 [ 285.043582][ T37] RSP: 002b:00007ffe5f6cb808 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 285.052027][ T37] RAX: ffffffffffffffda RBX: 00007fa8ccbaefe8 RCX: 00007fa8ccaad6c5 [ 285.060038][ T37] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 285.068023][ T37] RBP: 0000000000000001 R08: 00007ffe5f6cb798 R09: 0000000000000000 [ 285.076009][ T37] R10: 00007ffe5f6cb630 R11: 0000000000000206 R12: 0000000000000000 [ 285.083980][ T37] R13: 0000000000000001 R14: 00007fa8ccbad680 R15: 00007fa8ccbaf000 [ 285.091981][ T37] [ 285.795872][ T36] audit: type=1400 audit(1700006723.602:10114): avc: denied { ioctl } for pid=2065 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.305530][ C0] net_ratelimit: 71650 callbacks suppressed [ 288.305548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.323627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.335618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 288.347685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.359664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.371791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.383763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 288.395797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.407772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.419926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.025509][ T37] NMI backtrace for cpu 0 [ 290.025526][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 290.025549][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.025559][ T37] Call Trace: [ 290.025564][ T37] [ 290.025571][ T37] __dump_stack+0x21/0x30 [ 290.025598][ T37] dump_stack_lvl+0x140/0x1c0 [ 290.025620][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 290.025642][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 290.025671][ T37] dump_stack+0x19/0x20 [ 290.025692][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 290.025716][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 290.025738][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 290.025762][ T37] ? sched_show_task+0x371/0x530 [ 290.025783][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 290.025805][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.025827][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.025849][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 290.025873][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 290.025895][ T37] watchdog+0xe45/0xf90 [ 290.025912][ T37] ? __kasan_check_write+0x18/0x20 [ 290.025931][ T37] ? __cfi_watchdog+0x10/0x10 [ 290.025947][ T37] ? __kasan_check_read+0x15/0x20 [ 290.025962][ T37] ? __kthread_parkme+0x12f/0x180 [ 290.025978][ T37] ? schedule+0xc5/0x240 [ 290.025994][ T37] kthread+0x2c4/0x360 [ 290.026012][ T37] ? __cfi_watchdog+0x10/0x10 [ 290.026028][ T37] ? __cfi_kthread+0x10/0x10 [ 290.026045][ T37] ret_from_fork+0x64/0xa0 [ 290.026068][ T37] ? __cfi_kthread+0x10/0x10 [ 290.026086][ T37] ret_from_fork_asm+0x1a/0x30 [ 290.026103][ T37] [ 293.296479][ T36] audit: type=1400 audit(1700006734.803:10115): avc: denied { read write } for pid=297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.320663][ C0] net_ratelimit: 70558 callbacks suppressed [ 293.320677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.320831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.320898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 293.320977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.321042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.321143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.321209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:8f:10:50:06:1b, vlan:0) [ 293.321249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.321314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.321460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)