last executing test programs: 38.109056832s ago: executing program 2 (id=1529): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x456b7a21, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000480)=0xff) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 38.108871362s ago: executing program 2 (id=1530): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x5, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0xf2, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x80007f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0xf0e6, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28010}, 0x4008800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 38.044824403s ago: executing program 2 (id=1533): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x19) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={r1, 0x4, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x3, 0x4, "ce38c3d86e93f43b434b45a74dccebda3503d7aea7308bf2bff1136fad8fd8ec89f8d3e517975e845fa6903d9a31b25df98ea84acb76a8e56037f433f3fe0af0", "3ea9fe937c91cf7dfc94bec6a613d781c391d752a9a35077134d29282c8ae6bfe8f96ab127243a8c7a6b31744da8024e07ea060859e96d15eba1b515848079fb", "bad8efdf9103ef9077c51a7b5a3ca663efe9ece5db531a3bdd512c97c4192d34", [0x100000001, 0xc]}}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x10, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x2, 0x78, 0x7, 0x9}, [{0x6474e551, 0xfffffff7, 0x2, 0x9, 0x41000101, 0x400005, 0xb, 0xa}, {0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000080)={'netpci0\x00', {0x2, 0x0, @private}}) 36.873282183s ago: executing program 2 (id=1546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x5f, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000875300000000000000000000000000002e00000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 36.809031544s ago: executing program 2 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) unshare(0x60000600) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x1a) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x40, 0xfffffffe}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'gre0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000010007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x6801, 0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) lseek(r7, 0x7fa2, 0x0) write(r6, &(0x7f0000000300)='1', 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0xfe03, 0x1}, 0x6) 36.808813984s ago: executing program 2 (id=1548): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x456b7a21, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000480)=0xff) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 21.670052327s ago: executing program 32 (id=1548): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x456b7a21, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000480)=0xff) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 9.237074573s ago: executing program 0 (id=1715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @remote}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x80000001, 0x3) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7e, 0x100000, 0xfffffffffffffffe, 0x2004c8, 0xa000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0xd, 0x2, 0xffffffffffffffff], 0x26000, 0x112291}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x400009, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x2, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r6, @ANYBLOB="010024bd7000fcdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00') r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000040)={0x9000000c}) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000300)={{0x2, @multicast2, 0x4e23, 0x4, 'ovf\x00', 0x1, 0x9, 0xc}, {@multicast2, 0x4e20, 0x4, 0x7fffffff, 0x4, 0x8001}}, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x8, 0xc, 0x53, 0x2, 0x9, 0x9, 0x1, 0xfff, 0x8000000000000001, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x4], 0x50000, 0xa3300}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/26/smp_affinity\x00', 0x1, 0x0) write$khugepaged_scan(r9, &(0x7f0000000340), 0x8) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) 9.236933173s ago: executing program 1 (id=1716): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28010}, 0x4008800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.236762953s ago: executing program 3 (id=1717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x50000, 0xdddd1000, 0x4, 0x9, 0xff, 0xe4, 0x40, 0x7, 0x0, 0x2d, 0x16}, {0x80a0000, 0x3000, 0x3, 0x0, 0x40, 0x5, 0x7f, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x4, 0x4, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0xddfd4006, 0xeeee0000, 0x8, 0x97, 0x4, 0x38, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x8, 0xdb}, {0x10000, 0x100000, 0xc, 0x7, 0xb1, 0x9, 0x4, 0x81, 0x80, 0xff, 0x1, 0x2c}, {0x3000, 0x8000000, 0x4, 0xfd, 0x6, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x70000, 0x2, 0xf, 0x5, 0xd, 0x7, 0x0, 0x34, 0x9, 0xc, 0xb0, 0x9}, {0x5000, 0x1000}, {0x6000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x0, 0x3001, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) (fail_nth: 3) 7.621532683s ago: executing program 0 (id=1718): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x5, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0xf2, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x80007f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0xf0e6, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28010}, 0x4008800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.621171643s ago: executing program 1 (id=1719): openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80661, 0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6", 0x0, 0x9c}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x5000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.621052003s ago: executing program 3 (id=1720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x0, 0x4, 0x4e22, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0xf, 0x2000000000000, 0x7fffffff, 0xfffffffffffffdfd, 0x50, 0x3}, {0x5, 0x0, 0x4, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x48881) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 5.865989646s ago: executing program 0 (id=1721): r0 = syz_clone(0x20000091, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000480)={@void, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0xb0, 0x65, 0x0, 0x82, 0x11, 0x0, @empty=0x7f000000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4e22, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "450000000000000800ed031548ef8e16a76a9457e32200", "0168f352121fbef418440c9e003cedf246e3c6b2ad5cb2bc744846e08c53b1af4ac85232872f8adbd44cad506a53486e", "069800950000000000000000007200", {"85546bb9e58d06d8255b0ea21fbf326c", "af659269a76f00dc95932477597427de"}}}}}}}}, 0xc6) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902"], 0x0) preadv(r2, &(0x7f0000002c80)=[{&(0x7f0000000100)=""/221, 0xdd}], 0x1, 0x6, 0x2f00) 5.865342256s ago: executing program 1 (id=1722): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68581, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x64000600) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7c5fa0988f57"], 0xfdef) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.864990066s ago: executing program 3 (id=1723): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x13325491, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(0x3) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) pselect6(0x40, &(0x7f00000001c0)={0xe, 0x80, 0x5, 0x2, 0x1, 0x0, 0x3ff, 0x8}, 0x0, 0x0, &(0x7f0000000280), 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e6}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0f1c130f79c9adda8714000000c4e1f05694880010438266b83d018ed00f30a1f00000009a24c50000620064660fc7b6cc82da0d", 0x34}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r2, 0x0) write(r1, &(0x7f0000000ac0)='&!', 0x2) 4.004667062s ago: executing program 0 (id=1724): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x16, &(0x7f00000007c0)={0x27, 0xf0e3, 0x2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2020) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) 4.004096342s ago: executing program 1 (id=1725): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r1 = accept4$nfc_llcp(r0, &(0x7f0000000040), 0x0, 0x80800) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b010201013002090400005768cfa56b"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f00000000c0)="018c857a85d2782aad6b264d2d6f64a5072ce3b36ea34cefc9633b2cdc7fd08b396d2627b3c0ce31560ccdf932f55614") r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x140000000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000d, 0x50, r2, 0x44603000) ioctl$ASHMEM_SET_NAME(r2, 0x8008770b, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) copy_file_range(r1, 0x0, r2, &(0x7f0000000000)=0x1, 0x3d1ddf47, 0x0) flock(r4, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r5, 0x88, 0x68, 0x0, &(0x7f0000000080)) flock(r5, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='ceph\x00', 0x8000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)='\nO', 0x2}], 0x1, 0x4, 0x7) close(0x3) 4.003205762s ago: executing program 3 (id=1726): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() ioprio_get$pid(0x0, r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSBRKP(r1, 0x5425, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_procfs(0x0, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x80002011}) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000300)={{0x67, @multicast2, 0x4e23, 0x4, 'ovf\x00', 0x1, 0x9, 0x24}, {@multicast2, 0x4e20, 0x2, 0x7fffffff, 0x4, 0x8001}}, 0x44) epoll_pwait(r6, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) 2.05426132s ago: executing program 0 (id=1727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ping_group_range\x00', 0x40242, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) 2.05196519s ago: executing program 1 (id=1728): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x64000600) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) mount$9p_tcp(0x0, 0x0, 0x0, 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee00, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a800, 0x100) socket$netlink(0x10, 0x3, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(r5, 0x0, r6, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xa28, 0x0, 0x0, 0x1000, 0x7ff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r11, &(0x7f0000000000)='7', 0x1) unshare(0x2000000) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000300)={0x0, 0x6e47, 0x8, 0x1, 0x299, 0x0, r8}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9261, 0x20, 0x2, 0x3bb, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7099, 0x8, 0x1, 0x1c1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdbb1, 0x200, 0x0, 0x3a9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf632, 0x80000, 0x2, 0x220, 0x0, r5}}], 0x4, &(0x7f0000001940)={0x2e, 0x39, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xeff5}, 0x0, 0x0, '\x00', {0x3, 0xb52, 0x0, &(0x7f0000000940)=@buf_max_buf="e20e25928a4416f3ce278f9996f871ed23d6947a8066e2d7d37e8a2fae99fcb8e35240f4b231b7d9c6a140e16147114c8622152527e2a12722444b1cad85c0dcd2a957adbdf87711080e26b56842a12ea2a3f561c4a469acc38071a477b51171fdb6bc09e8e77f44324d36617dbaab5f2db77838e6a1f36ab26c0d4f0a1b5231cc984e92bb9257e54256b714883e0239c1cc240e9989c3eda291d404b863e03dc7533063ea6588ffd3f2df8cced86058d8cb2ba6dbfda2daa88ffd9f4de8f0e9771563967dff365ef725c1a4528e2a5bbea575dce4c6847d05402c2bfa7748a3c0bd12121ec0a14023c4016b3b5a03673fff384228579ca13ebaabe29878a16c74172a37813a5de06ea4f05d85fed97ae572f71ba2e115654b35b8eb212c69e938261afd49c47496339fde75d054de9ec89062f89f590c5d9de191cbf2d9e832b8a7f167d85d5e9d10e06faf749b184f57b3221f00c1d5b5275c98c9786dcb8b03e529e513fd02235ff31cd4406362832773a32496ecda43d4b60668b3ef978c40a14b8599380d440c699191aabf1abd1356dcac46f0f278f375079951f80cd15e7e2049443a9df76817e3996c9da3215574578de997a7e33d72a602e5a197fd558ee7d27aa4336b58bb191208b4c6dc4b7a0e51169598270c447708ab35201407361917b41d45f90f195b0793fa7217d97a0606482f63d9e30820c583328bd9fce79270e250b7a1f2f63775c886d900a0308760d27419c55858c838c7ac3425c08167580d72b430a88e03f329a67e0666520ec63628f6ffa9d97c529f019c76a664a8d5c3d2881a069745aad0c2d632ec01cb986c4e602aa635677e8ecd20fb5e7c45ac6316b4a3dcb7f62fc1ea5aee61985fa94bf6d4d6a2e922ca6e3d1c45d6686756554dc5a1e5149767b0c43c1eaf56c672673b60308957853f166b9cec666b039aa4bd02fa86192a6fdcf226af7554dfe5eeade76177dabb5a4f7d0ea1d7127d407469dcda3073d323bc9101c4b5cdc7ce746d0ee5d8660a232e5be69375990cc9e36d7bda7dc4580047ae6ee1e12b45b3a0780ae88ae31d146a7337396a09ddf16cd02f37ccc394ee9de38b63a4288e6e6d842b5f30f095845eb86f511604c6056009d310eb1afc1ac6f107f3ca365d4c1f91efba71d5b9fd6a72493fc479652c86d8691ac3ab45b7aca369dc76dea7d02c6073c6d5b179de23722e4b4916384cd3c92fcfce9692ed7d6747056d5698e88d797cffd895a3175b2bd392147c96a96dc08c0875805ff31f4ddce5d6386007af62aa638276e08a4198f7f5c6a0be9ecfc6d87011f807f9da2fbaf39f888a045b797329561fe3a3dda77d2a949f39f3e2f0d1465494affcbeb20136157a37132c4fadb09037dc8713531e42660052600681b21a4e6af7b5e34818fae9524652bad6e66e50845da9f85480cd6001758aed3d6f73006d7d8ab10e948dadc196c78913b46ca973c57a9035e1e0f28cfa0812a0f0841a4a039e392595bbcb2456dc9af830df556223a84fe7060e29e44e1169658affd3cddc4cf8dc8923bacb7fae5ceab14d22e370c8ea387c65c4094e8921e30166bd0c274264fc73cf7bd0770bc0ec8f882796ce5a99b18d0886d4aea55a42a9248edc88cdbeda313ae52342ccd264c036e2f1d3fff5bcc4824a7f0d23d9387db0fbc820b14c18cbe3f691392bed30f07fa6787796c7fa2a1970e535ee1b0f1d50e14c4ea58e3795dfc2f44985eab7c77330765e1d3adbf8d89e7cd18c61f2f092c5279f8c4c5072cd992c72b99c67b23b72d4a90e207f357f65edeceb10bcd06c887bf4399b1f03f5223fe76338d59ee64dbbc8cd08c0af6b9f2b010b3065ede4e07d97820b92f996aeba5a6f752186c9ea256e32fa20b80b55d8ed3a4a15d3aea3ad626a56bec8e73a6f98ee89734d15e2f1e146c02f16f32c97bceb7f8b227e10b7d20eac769c208d5277bc0e4d433257539185fbd44d89d442d5d71493fd7aa223b0954ba1a4583fe421cd364afc1bf947daf33f071af6b34b50c8a53b7e84e227a97fa25e983a60f1503a834cff526274a744247b6315f92fdd0cf51cffbe153865f4fd0f00986f08cec367980ff5e68464aad062caaa5b589db74677c03cf4906a7e6a16c0cf10fe8481ef0c557309a5b2e0254345386e57cb428074d7c3337ace843edb73d508f0f2476584e6278b6b1ed1e1194a97955b33ca54091cf27bfcb8867f0af6c4e6d63f2e5ade157e1cbc04aad629d45f97001b61f1283cd533e2da517a121aa25d9b2aa8103084233300575bbed68b29e9aff9862bf8e64e825f7b925554bcc4b5c35f45ff33f8cbf1d63163438e568ead885a895dfed25d7d5af2caaa909019ae2a1f70d0447252ddc5cc007c51b0ce3c8df58a32c149cfe8d694d2d0c82bd4c232f9adb35789a16853f094b81ec45c43af7b721e85b2bd5f8ab70c40974adfe5703a9ef884a42654e493ffa68b18876d1eae290511bc9dd16f512285029cb0ce9e25701b07aea22ec78f5f3a2e980a4f1e225db96cbd503b2956fef8f0263bc9a782b87270f37d3bab10957f68f4e3ba3ddf0e5782d4c774da11ad0976f90d8bdee11d811c7d4c69da1af26277e29541b763a1204b70daa6bb4950fb48f76e8c0abab7c8a363afa9ddf0fad1af927f904a863b64e19d0c9e273af37bc1ccad68d013325bcadf340a4a2c845204c05bf0b6cf90aaed18d94988583cf53d24044907f8d0abe4c7bc82eb8cecea639ce5f19c646a86a3f31600402f22be4538ea3ed57c7ffe80d72cc0c91c5501e6bb576c7e1e7838d5d59a583a619d0a543f52afba6c89c061b80910f00fb2e08e211e21bb484e32f6ff464a0579dea04be3576b8eece574022cb6e5ab62902a9ff94ffb1e67cbab9a8b90c9d84732bdd368f9fc9f58a6aab9bf20c5e36d7a795c05206ba7b377d4722e09b6a09f0ea5800164ec890147a66677ba4cd884e10fd421556629952895425871ddd35885082246f394c53952ae76be7980589b6e93408065c5574c3a2ca066972978612ed545849a6f8391ebbf4b082977bdf91b0dc55961099c9a683c77bd5b31c2d1ab8f49c9a63230e42a6ec06b34964d332e65ca9cbc056469e9f8e8b9fb9f5d3d07ff0406f9811c44749a0ac72617589beef94a6e229a375ba778e5cf598b3c5b72a9beab711bccc41dac31a1c770899ea52b60e2ecdb0944c98892bf366403baba4271a8cf48412c1893a548dd0b1605f63051191fe561181fa6bed2158c7a7d33585574bb82f5cc1a22353cf3e4ba6cff508230aca87712772c5d761eaa7defae12c43beb91a545acfc789983ed49a04599bd076e839ab20758630349299dfa09e4ac84eff38b99b12f43e487396c3293b3a12c9511b723f2bf6bc7faa3d756945fba7c490c480fbfab201ea2423a0de197ca293fd84f92e86d94127c03896a039206d3e53febba1c84b9c426354cb5332371df0a5e95d10575df9b12efdf9e2e765d3829c6c01b318d5c9863d890570eb7918496440758a8563816654d514b17b0c6f7d7f3ae6ab6725819d9a4b8c1ae766a199b27ea5c6f0ac50aea4fc9c693e24f652cf4d3d9f0ae504f4121f1efa41ddf56996cadabb2bc86bb481d3b39c43c693b57f461e117a07dea93dea9cf7f1a14ade03aa06e05f0f8cf942e4657765390d4df661501d3d9e566860eba2fd03d34e35da7d9f478a2fcbfe388672840907c1573fc707f2609851ae8f48c2d24a9ddfb7f0e5b57454bbad4ae5f809ef0671c9a28356a5dceab7e8b8ddd1152d0f164dbe7f1c0c0e332da29d443e148b361982f15c9d996394ee54f5e54886b7ad7b35b390fd5134f5fdd2ba1fa8ed1bd566a6573d097e77f7b33591b6a8b4d326ff7c2fe8012fa47d2f4f3c2db3abe2d543b2bf41ad5f318f45e618e23476d58dd092701748e16a62e2fb34b9c766450f83f114bcb0c15cb2f76f9a03783f72c5d7f0b6b905dbdd2d8674bef9e5ef9efa924d9d8b6b02146bc83add2a0b82a330eab8bd68f500959fc6fd776cf3a1b783dc585c8acfebd1a3691bf3f1ecceb82d7367cafe9abdf8965981bcb8ac9747241e5042c9ed3f1881debd9cbfa8e5d5891aa9cfad5158f26e4db9aa76272bf86791d997d74da76797a87aeb868cc80ef7397c943a048e18a2b229d360accc064952c506c8d366dbd5ccb5d171ee327e1706807b2b07be0ee9d522e79fc4f914f265ba34fc5a88643924364640e2d21845f8300762bf38aa7eb422dfdf2c120acecec41cf468fd2a667f09636fce91b56f87d7b0343acbe61ac06db65178d4aff5fb0ef67ec2eaa9b5ff256e89751aa88c2d74a6fe09d118aabca88e980d6b16e8996a8d22bac8f4a2e70ca237ff66db0802dbb1ddf0e59787ed3e8fa24eccfdaf906827e85fa077cb216497c2e90e992e35760adb3096ec8df417b0e09e45fced23d627083c39b8dd9b5da3cbd796e9251987e70d94a86ad0fd833f607345399c1cd02915cb62c30a4cf6e795131f2d99b26fdd31de2df66714a1cdcffbf42d37f47772f59a11bba6f92a8abf0399cfd987889f74581af10b91bafe67e4724b75d85dc032230a2e974b73b230629733a2d22dbb2aa1ceed1fe67f2c4e4ac1e89a1faac36e089c2362677cf0b0f44911111c7d4328f0673048091c5da18449c7cef279244ddd9e60d46fc6530ed820821b3bae9fe3c007e0a788a945177680f00f2274b1a07c81d8dbd05e6f275ce0821664b9428e526f4613f2232a55d3e24c1ecac21d5f2d3264dd6df610b429145ade42107f70c9ba035ab6562e5f292e1e1d2f4a32cbac8d49d3fd9e2b3920111bd4ddea8f3cd409573f425a4799bb66917b62a703520fb904331bcabd4af316761444ca491e1651029a07b453eb36daa2f9f20efaad2dbfd16f730893aa8ea421a09fbf760da382b81528b5d337464abdee29ca428cb370accfb92e6aa75db9fb661fa80b219b25687c50e5f9d95c6b0ec57c6a0508c20956959ac1f5a90659c91216a3d4c7ec213ed58c3add9d7cfa9263e61346169fdc4cfd0dea8e4bd3f260ce5f7da42c0bdc8835f7475617f7ed22f7d570aaea7c243114dddefa27e98ed6e83f39d760e927008d0eb02d9b4957af50da71adab8b7cc5b51d6592f8f78941d3e67b06482b134d354b24578998c91a45dd388f425b7370028024efa369c1ba3b91c6383c9cc527f68c7c2628a436f9a54f6b0d49f5c8bc4e4bf49236f0966e944714750437a730f1619b7d0c07f0c6167c7cb298ce8e1c240eaf773cf9c008e86ffcea2b341a4dd57733f931f08b814576c6c7b2476c505372cc81bace2f7fd76610d7d7252e519a52f89eddec8756184638bdc6846e3fa573488b1cf879f4b13559abe336c8707b375881f1ad3381bd9989a96ee9a7c837f016f9d1374cd429fc75979e3180d7deb7fc5262be2f68491c1fbfd7363a73c3a9a977b8bf2b9ff525809b4ca9594417840a2d34f9c218f6830297effd0c8967f9ff7111d45a78cbde1d9aae12cbc4ced17b071732bf58444d1ac8d3e68be7acfbae232fba2ae445f46d2c5f5a3c1af8abc53c562469d0dca04366b4ce65910854fba38309264d6e5e81e95fa93becae71765a66294cb529666473a236ac84aef7725f961062cf0826fbed8c52c1d8d28a2cfea06b07ed2822a2c896b88dee3b63927d19430c606f2005f39bbb9e9b92adca564d116faad27e7972e79039516d55104381f462abaae28f56c42786f84769c723b1e7ab73f6c02006d9a30837e383db030095ded4217d0f975"}}, &(0x7f00000019c0)) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) setsockopt$inet_opts(r0, 0x29, 0x6, &(0x7f0000000380)='\a', 0x1) 2.05151616s ago: executing program 3 (id=1729): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x5, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0xf2, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x80007f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0xf0e6, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28010}, 0x4008800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 548.42µs ago: executing program 0 (id=1730): openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80661, 0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6", 0x0, 0x9c}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x5000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 147.331µs ago: executing program 1 (id=1731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x0, 0x4, 0x4e22, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0xf, 0x2000000000000, 0x7fffffff, 0xfffffffffffffdfd, 0x50, 0x3}, {0x5, 0x0, 0x4, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x48881) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 0s ago: executing program 3 (id=1732): r0 = syz_clone(0x20000091, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='status\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000480)={@void, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0xb0, 0x65, 0x0, 0x82, 0x11, 0x0, @empty=0x7f000000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4e22, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "450000000000000800ed031548ef8e16a76a9457e32200", "0168f352121fbef418440c9e003cedf246e3c6b2ad5cb2bc744846e08c53b1af4ac85232872f8adbd44cad506a53486e", "069800950000000000000000007200", {"85546bb9e58d06d8255b0ea21fbf326c", "af659269a76f00dc95932477597427de"}}}}}}}}, 0xc6) kernel console output (not intermixed with test programs): riptor of length 0, skipping remainder of the config [ 251.920820][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.931266][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.940378][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.948403][ T64] usb 2-1: Product: syz [ 251.952734][ T64] usb 2-1: Manufacturer: syz [ 251.957364][ T64] usb 2-1: SerialNumber: syz [ 252.019513][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 252.060945][ T702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 252.071850][ T702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 252.169590][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 252.175241][ T64] usb 2-1: cannot find UAC_HEADER [ 252.182222][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.191570][ T64] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 252.200938][ T9] usb 3-1: config 0 has no interface number 0 [ 252.207066][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 252.215075][ T64] usb 2-1: USB disconnect, device number 88 [ 252.225310][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.227478][ T2548] udevd[2548]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 252.249586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.258581][ T9] usb 3-1: Product: syz [ 252.263112][ T9] usb 3-1: Manufacturer: syz [ 252.268002][ T9] usb 3-1: SerialNumber: syz [ 252.274211][ T9] usb 3-1: config 0 descriptor?? [ 252.281736][ T9] smsc75xx v1.0.0 [ 252.882368][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 252.893308][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 253.289482][ T423] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 253.297687][ T702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 253.308667][ T702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 253.318419][ T702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 253.328071][ T702] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 253.469542][ T423] usb 2-1: Using ep0 maxpacket: 16 [ 253.475972][ T423] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.490408][ T423] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 253.499610][ T423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.507629][ T423] usb 2-1: Product: syz [ 253.512010][ T423] usb 2-1: Manufacturer: 廧늲ୄ도旒悀௛灻稤퐙ꗲஒ䛱♉뚙⷟襫灭൛杜㎞옝ꛑ앀ꗳ鶎︇떕 [ 253.516882][ T64] usb 1-1: USB disconnect, device number 94 [ 253.524415][ T423] usb 2-1: SerialNumber: syz [ 253.746154][ T423] usbhid 2-1:1.0: can't add hid device: -71 [ 253.752197][ T423] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 253.761325][ T423] usb 2-1: USB disconnect, device number 89 [ 254.113707][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 254.124657][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 254.134361][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 254.143921][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 254.344164][ T36] audit: type=1400 audit(1788479499.690:450): avc: denied { ioctl } for pid=3391 comm="syz.0.1032" path="socket:[36159]" dev="sockfs" ino=36159 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.519514][ T9] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 254.670907][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 254.679498][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.689666][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.702263][ T9] usb 2-1: string descriptor 0 read error: -22 [ 254.708509][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 254.717598][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.126008][ T423] usb 3-1: USB disconnect, device number 89 [ 255.170842][ T3390] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2574735089 (82391522848 ns) > initial count (3154944 ns). Using initial count to start timer. [ 255.206798][ T702] usb 2-1: USB disconnect, device number 90 [ 255.529506][ T9] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 255.609526][ T423] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 255.659497][ T9] usb 1-1: device descriptor read/64, error -71 [ 255.759484][ T423] usb 3-1: Using ep0 maxpacket: 32 [ 255.765788][ T423] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 255.774015][ T423] usb 3-1: config 0 has no interface number 0 [ 255.780186][ T423] usb 3-1: config 0 interface 184 has no altsetting 0 [ 255.788552][ T423] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.797728][ T423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.805791][ T423] usb 3-1: Product: syz [ 255.810013][ T423] usb 3-1: Manufacturer: syz [ 255.814626][ T423] usb 3-1: SerialNumber: syz [ 255.820074][ T423] usb 3-1: config 0 descriptor?? [ 255.825847][ T423] smsc75xx v1.0.0 [ 255.919463][ T9] usb 1-1: device descriptor read/64, error -71 [ 256.028395][ T3445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 256.169491][ T9] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 256.299485][ T9] usb 1-1: device descriptor read/64, error -71 [ 256.427611][ T423] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 256.438600][ T423] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.539524][ T9] usb 1-1: device descriptor read/64, error -71 [ 256.649555][ T9] usb usb1-port1: attempt power cycle [ 256.999494][ T9] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 257.020638][ T9] usb 1-1: device descriptor read/8, error -71 [ 257.150613][ T9] usb 1-1: device descriptor read/8, error -71 [ 257.219488][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 257.369466][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 257.375815][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.386159][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 257.395288][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 257.406307][ T9] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 257.413981][ T10] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 257.427315][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.437035][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 257.445197][ T9] usb 1-1: device descriptor read/8, error -71 [ 257.451841][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 257.460976][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.468990][ T10] usb 2-1: Product: syz [ 257.473207][ T10] usb 2-1: Manufacturer: syz [ 257.477826][ T10] usb 2-1: SerialNumber: syz [ 257.580513][ T9] usb 1-1: device descriptor read/8, error -71 [ 257.652016][ T423] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 257.662927][ T423] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 257.672617][ T423] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 257.682140][ T423] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 257.692741][ T10] usb 2-1: selecting invalid altsetting 0 [ 257.699761][ T9] usb usb1-port1: unable to enumerate USB device [ 257.898896][ T3452] binder: Bad value for 'defcontext' [ 257.904727][ T10] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 257.911187][ T36] audit: type=1400 audit(1788479503.250:451): avc: denied { mounton } for pid=3450 comm="syz.1.1054" path="/254/file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 258.135558][ T10] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 258.145083][ T10] usb 2-1: USB disconnect, device number 91 [ 258.155171][ T2543] udevd[2543]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 258.675060][ T423] usb 3-1: USB disconnect, device number 90 [ 258.683801][ T64] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 258.784860][ T36] audit: type=1400 audit(1788479504.130:452): avc: denied { read } for pid=3470 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.819478][ T64] usb 1-1: device descriptor read/64, error -71 [ 259.019525][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 259.059540][ T64] usb 1-1: device descriptor read/64, error -71 [ 259.139488][ T423] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 259.169488][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 259.175752][ T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 259.183928][ T10] usb 2-1: config 0 has no interface number 0 [ 259.191563][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 259.200696][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.208737][ T10] usb 2-1: Product: syz [ 259.212952][ T10] usb 2-1: Manufacturer: syz [ 259.217567][ T10] usb 2-1: SerialNumber: syz [ 259.222892][ T10] usb 2-1: config 0 descriptor?? [ 259.290671][ T423] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 259.298885][ T423] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.299606][ T64] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 259.309028][ T423] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.324571][ T423] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.333724][ T423] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.341957][ T423] usb 3-1: Product: syz [ 259.346155][ T423] usb 3-1: Manufacturer: syz [ 259.350848][ T423] usb 3-1: SerialNumber: syz [ 259.356375][ T423] usb 3-1: config 0 descriptor?? [ 259.362314][ T423] hub 3-1:0.0: bad descriptor, ignoring hub [ 259.368251][ T423] hub 3-1:0.0: probe with driver hub failed with error -5 [ 259.376026][ T423] usb 3-1: selecting invalid altsetting 0 [ 259.429957][ T10] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 259.436771][ T10] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 259.452481][ T64] usb 1-1: device descriptor read/64, error -71 [ 259.460513][ T10] usb 2-1: USB disconnect, device number 92 [ 259.559685][ T3480] fuse: Bad value for 'fd' [ 259.669610][ T9] usb 3-1: USB disconnect, device number 91 [ 259.699508][ T64] usb 1-1: device descriptor read/64, error -71 [ 259.809626][ T64] usb usb1-port1: attempt power cycle [ 260.159516][ T64] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 260.191573][ T64] usb 1-1: device descriptor read/8, error -71 [ 260.240068][ T3504] kvm: pic: non byte write [ 260.320640][ T64] usb 1-1: device descriptor read/8, error -71 [ 260.559511][ T64] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 260.580592][ T64] usb 1-1: device descriptor read/8, error -71 [ 260.710504][ T64] usb 1-1: device descriptor read/8, error -71 [ 260.788811][ T3539] tipc: Enabling of bearer rejected, failed to enable media [ 260.811720][ T3542] syz.3.1092 (3542): attempted to duplicate a private mapping with mremap. This is not supported. [ 260.822853][ T64] usb usb1-port1: unable to enumerate USB device [ 260.879491][ T702] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 260.891712][ T36] audit: type=1400 audit(1788479506.240:453): avc: denied { accept } for pid=3551 comm="syz.3.1096" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 260.915673][ T3555] rust_binder: 3540:3555 error while translating object: EPERM [ 260.923827][ T3555] rust_binder: Failure in copy_transaction_data: EPERM [ 260.924134][ T3555] rust_binder: 3540:3555 transaction call to 3540:0 failed EPERM, code 0 size 72-24 [ 261.005438][ T423] rust_binder: 3540: undelivered TRANSACTION_ERROR: 29201 [ 261.041451][ T702] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.050108][ T702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.062882][ T702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.074159][ T702] usb 3-1: string descriptor 0 read error: -22 [ 261.080601][ T702] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 261.093023][ T702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.339459][ T423] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 261.396665][ T36] audit: type=1326 audit(1788479506.740:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.0.1105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7885d9e159 code=0x7ffc0000 [ 261.422062][ T36] audit: type=1326 audit(1788479506.740:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.0.1105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7885d9e159 code=0x7ffc0000 [ 261.447716][ T36] audit: type=1326 audit(1788479506.740:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.0.1105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7885d9e159 code=0x7ffc0000 [ 261.473975][ T36] audit: type=1326 audit(1788479506.740:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.0.1105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7885d9e159 code=0x7ffc0000 [ 261.500423][ T36] audit: type=1326 audit(1788479506.740:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.0.1105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7885d9e159 code=0x7ffc0000 [ 261.525893][ T36] audit: type=1326 audit(1788479506.740:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.0.1105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7885d9e159 code=0x7ffc0000 [ 261.529799][ T423] usb 2-1: Using ep0 maxpacket: 32 [ 261.552101][ T36] audit: type=1326 audit(1788479506.740:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.0.1105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7885d9e159 code=0x7ffc0000 [ 261.583780][ T423] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 261.592141][ T423] usb 2-1: config 0 has no interface number 0 [ 261.598490][ T423] usb 2-1: config 0 interface 184 has no altsetting 0 [ 261.602501][ T9] usb 3-1: USB disconnect, device number 92 [ 261.621359][ T423] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 261.630821][ T423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.639397][ T423] usb 2-1: Product: syz [ 261.644081][ T423] usb 2-1: Manufacturer: syz [ 261.648743][ T423] usb 2-1: SerialNumber: syz [ 261.657234][ T423] usb 2-1: config 0 descriptor?? [ 261.663002][ T423] smsc75xx v1.0.0 [ 261.861265][ T3607] SELinux: failed to load policy [ 261.886796][ T3610] rust_binder: 3609:3610 no such ref 1 [ 261.892466][ T3610] rust_binder: 3609:3610 no such ref 3 [ 261.899380][ T3610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 262.268101][ T423] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 262.279211][ T423] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.429495][ T702] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 262.489266][ T423] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 262.500362][ T423] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 262.510464][ T423] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 262.520000][ T423] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 262.569461][ T702] usb 3-1: device descriptor read/64, error -71 [ 262.809515][ T702] usb 3-1: device descriptor read/64, error -71 [ 262.839500][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 262.969489][ T9] usb 1-1: device descriptor read/64, error -71 [ 263.049509][ T702] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 263.179499][ T702] usb 3-1: device descriptor read/64, error -71 [ 263.209499][ T9] usb 1-1: device descriptor read/64, error -71 [ 263.396189][ T3627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.404764][ T3627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.419491][ T702] usb 3-1: device descriptor read/64, error -71 [ 263.449506][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 263.529618][ T702] usb usb3-port1: attempt power cycle [ 263.579502][ T9] usb 1-1: device descriptor read/64, error -71 [ 263.829502][ T9] usb 1-1: device descriptor read/64, error -71 [ 263.869617][ T702] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 263.890713][ T702] usb 3-1: device descriptor read/8, error -71 [ 263.939609][ T9] usb usb1-port1: attempt power cycle [ 264.020489][ T702] usb 3-1: device descriptor read/8, error -71 [ 264.259523][ T702] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 264.279522][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 264.280909][ T702] usb 3-1: device descriptor read/8, error -71 [ 264.300798][ T9] usb 1-1: device descriptor read/8, error -71 [ 264.420600][ T702] usb 3-1: device descriptor read/8, error -71 [ 264.431020][ T9] usb 1-1: device descriptor read/8, error -71 [ 264.529633][ T702] usb usb3-port1: unable to enumerate USB device [ 264.669526][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 264.690532][ T9] usb 1-1: device descriptor read/8, error -71 [ 264.820560][ T9] usb 1-1: device descriptor read/8, error -71 [ 264.929589][ T9] usb usb1-port1: unable to enumerate USB device [ 265.128811][ T702] usb 2-1: USB disconnect, device number 93 [ 265.144236][ T3646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 265.509505][ T702] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 265.592028][ T3656] fuse: Unknown parameter '$տqs)#LÔ6wQr2N)[3s)|_SYQ2LNvY}(Ys70x0000000000000006' [ 265.606457][ T9] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 265.661308][ T702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.670119][ T702] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 265.682670][ T702] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 265.692378][ T702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.700475][ T702] usb 2-1: Product: syz [ 265.704683][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 265.704701][ T36] audit: type=1400 audit(1788479511.050:561): avc: denied { connect } for pid=3666 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.730414][ T702] usb 2-1: Manufacturer: syz [ 265.735459][ T702] usb 2-1: SerialNumber: syz [ 265.742709][ T3670] netlink: 'syz.3.1141': attribute type 17 has an invalid length. [ 265.771003][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.779648][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.790210][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.801858][ T9] usb 3-1: string descriptor 0 read error: -22 [ 265.808127][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 265.817493][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.989503][ T423] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 266.035338][ T702] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 266.042831][ T702] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 266.053763][ T702] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 266.064187][ T702] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 266.070054][ T702] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 266.079966][ T702] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 266.087345][ T702] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 266.099508][ T702] usb 2-1: USB disconnect, device number 94 [ 266.108518][ T2592] udevd[2592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 266.139479][ T423] usb 1-1: Using ep0 maxpacket: 16 [ 266.147465][ T423] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 266.156571][ T423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.164722][ T423] usb 1-1: Product: syz [ 266.168897][ T423] usb 1-1: Manufacturer: syz [ 266.174446][ T423] usb 1-1: SerialNumber: syz [ 266.251154][ T3654] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2574735089 (82391522848 ns) > initial count (3154944 ns). Using initial count to start timer. [ 266.272242][ T9] usb 3-1: USB disconnect, device number 97 [ 266.464230][ T36] audit: type=1326 audit(1788479511.810:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1147" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c239e159 code=0x0 [ 266.516036][ T36] audit: type=1400 audit(1788479511.860:563): avc: denied { relabelfrom } for pid=3683 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 266.536033][ T36] audit: type=1400 audit(1788479511.860:564): avc: denied { relabelto } for pid=3683 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 266.756603][ T36] audit: type=1400 audit(1788479512.100:565): avc: denied { lock } for pid=3686 comm="syz.3.1148" path="socket:[39070]" dev="sockfs" ino=39070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.209511][ T31] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 267.339511][ T31] usb 3-1: device descriptor read/64, error -71 [ 267.477958][ T36] audit: type=1400 audit(1788479512.820:566): avc: denied { remount } for pid=3724 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 267.499672][ T36] audit: type=1400 audit(1788479512.850:567): avc: denied { execheap } for pid=3722 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 267.589496][ T31] usb 3-1: device descriptor read/64, error -71 [ 267.783394][ T423] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 267.793175][ T423] usb 1-1: USB disconnect, device number 107 [ 267.829493][ T31] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 267.959535][ T31] usb 3-1: device descriptor read/64, error -71 [ 268.199495][ T31] usb 3-1: device descriptor read/64, error -71 [ 268.295867][ T3740] 9p: Unknown uid 00000000004294967295 [ 268.310130][ T31] usb usb3-port1: attempt power cycle [ 268.628222][ T3758] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 268.659538][ T31] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 268.687205][ T31] usb 3-1: device descriptor read/8, error -71 [ 268.739477][ T9] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 268.828849][ T31] usb 3-1: device descriptor read/8, error -71 [ 268.900971][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 268.909611][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.919915][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 268.931653][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=5007, bcdDevice= 0.40 [ 268.941122][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.949200][ T9] usb 1-1: Product: syz [ 268.953720][ T9] usb 1-1: Manufacturer: syz [ 268.958402][ T9] usb 1-1: SerialNumber: syz [ 269.069586][ T31] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 269.090601][ T31] usb 3-1: device descriptor read/8, error -71 [ 269.220613][ T31] usb 3-1: device descriptor read/8, error -71 [ 269.329556][ T31] usb usb3-port1: unable to enumerate USB device [ 269.829489][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 269.979492][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 269.990637][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 270.004144][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.014089][ T10] usb 2-1: Product: syz [ 270.018768][ T10] usb 2-1: Manufacturer: syz [ 270.023609][ T10] usb 2-1: SerialNumber: syz [ 270.143267][ T3790] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1189'. [ 270.143308][ T36] audit: type=1400 audit(1788479515.490:568): avc: denied { bind } for pid=3789 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.178359][ T36] audit: type=1400 audit(1788479515.490:569): avc: denied { setopt } for pid=3789 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.230105][ T3788] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 270.239835][ T3788] SELinux: failed to load policy [ 271.439470][ T45] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 271.458945][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 271.472142][ T9] usb 1-1: USB disconnect, device number 108 [ 271.481308][ T3840] netlink: 'syz.0.1208': attribute type 40 has an invalid length. [ 271.484909][ T2592] udevd[2592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 271.590736][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.600673][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.612343][ T45] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 271.621691][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.629898][ T45] usb 3-1: Product: syz [ 271.634375][ T45] usb 3-1: Manufacturer: syz [ 271.639029][ T45] usb 3-1: SerialNumber: syz [ 271.646655][ T45] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 271.658550][ T45] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 271.658550][ T45] Please send a copy of this message to and [ 271.685136][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 271.705045][ T10] usb 2-1: USB disconnect, device number 95 [ 272.047114][ T36] audit: type=1400 audit(1788479517.390:570): avc: denied { execute } for pid=3827 comm="syz.2.1203" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 272.097260][ T36] audit: type=1400 audit(1788479517.420:571): avc: denied { map } for pid=3827 comm="syz.2.1203" path="/proc/775/maps" dev="proc" ino=39767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 272.181799][ T45] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 272.217592][ T574] usb 3-1: USB disconnect, device number 102 [ 272.376809][ T3859] tipc: Enabling of bearer rejected, failed to enable media [ 272.387933][ T3861] tipc: Enabling of bearer rejected, failed to enable media [ 272.990638][ T3880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2574735089 (82391522848 ns) > initial count (62696711872 ns). Using initial count to start timer. [ 273.295137][ T36] audit: type=1400 audit(1788479518.640:572): avc: denied { read } for pid=3888 comm="syz.0.1223" path="socket:[41063]" dev="sockfs" ino=41063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.318380][ T45] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 273.320973][ T36] audit: type=1400 audit(1788479518.640:573): avc: denied { shutdown } for pid=3888 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.367037][ T36] audit: type=1400 audit(1788479518.710:574): avc: denied { read } for pid=3896 comm="syz.1.1224" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 273.391769][ T36] audit: type=1400 audit(1788479518.740:575): avc: denied { open } for pid=3896 comm="syz.1.1224" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 273.415663][ T36] audit: type=1400 audit(1788479518.740:576): avc: denied { ioctl } for pid=3896 comm="syz.1.1224" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 273.469463][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 273.476943][ T45] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 273.486533][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.495013][ T45] usb 3-1: Product: syz [ 273.499265][ T45] usb 3-1: Manufacturer: syz [ 273.504108][ T45] usb 3-1: SerialNumber: syz [ 273.531816][ T3903] kvm: apic: phys broadcast and lowest prio [ 274.489482][ T423] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 274.649515][ T423] usb 2-1: Using ep0 maxpacket: 16 [ 274.657012][ T423] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 274.669449][ T423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.689476][ T423] usb 2-1: Product: syz [ 274.693740][ T423] usb 2-1: Manufacturer: syz [ 274.698391][ T423] usb 2-1: SerialNumber: syz [ 274.901719][ T3927] FAULT_INJECTION: forcing a failure. [ 274.901719][ T3927] name failslab, interval 1, probability 0, space 0, times 0 [ 274.914508][ T3927] CPU: 0 UID: 0 PID: 3927 Comm: syz.0.1234 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 274.914544][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.914560][ T3927] Call Trace: [ 274.914568][ T3927] [ 274.914577][ T3927] __dump_stack+0x21/0x30 [ 274.914620][ T3927] dump_stack_lvl+0x140/0x1c0 [ 274.914651][ T3927] ? __cfi_dump_stack_lvl+0x10/0x10 [ 274.914683][ T3927] ? kernel_text_address+0xa9/0xe0 [ 274.914820][ T3927] ? unwind_get_return_address+0x51/0x90 [ 274.914899][ T3927] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.914958][ T3927] dump_stack+0x19/0x20 [ 274.914987][ T3927] should_fail_ex+0x3c2/0x510 [ 274.915021][ T3927] should_failslab+0xac/0x100 [ 274.915053][ T3927] __kmalloc_node_noprof+0x69/0x500 [ 274.915079][ T3927] ? __kvmalloc_node_noprof+0x128/0x300 [ 274.915126][ T3927] ? kstrtoull+0x13b/0x1e0 [ 274.915144][ T3927] __kvmalloc_node_noprof+0x128/0x300 [ 274.915174][ T3927] ? __kasan_check_write+0x18/0x20 [ 274.915198][ T3927] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 274.915220][ T3927] ? kstrtouint_from_user+0x117/0x170 [ 274.915259][ T3927] ? avc_policy_seqno+0xd/0x30 [ 274.915287][ T3927] ? selinux_file_permission+0x318/0xb60 [ 274.915313][ T3927] seq_read_iter+0x215/0xf30 [ 274.915345][ T3927] ? __cfi_selinux_file_permission+0x10/0x10 [ 274.915370][ T3927] ? proc_fail_nth_write+0x184/0x220 [ 274.915402][ T3927] kernfs_fop_read_iter+0x149/0x570 [ 274.915487][ T3927] vfs_read+0x60e/0xc70 [ 274.915512][ T3927] ? __cfi_vfs_read+0x10/0x10 [ 274.915538][ T3927] ? __cfi_mutex_lock+0x10/0x10 [ 274.915561][ T3927] ksys_read+0x145/0x260 [ 274.915579][ T3927] ? __cfi_ksys_read+0x10/0x10 [ 274.915610][ T3927] ? __kasan_check_read+0x15/0x20 [ 274.915634][ T3927] __x64_sys_read+0x7f/0x90 [ 274.915659][ T3927] x64_sys_call+0x2638/0x2ee0 [ 274.915683][ T3927] do_syscall_64+0x57/0xf0 [ 274.915708][ T3927] ? clear_bhb_loop+0x50/0xa0 [ 274.915729][ T3927] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 274.915762][ T3927] RIP: 0033:0x7f7885d9e159 [ 274.915783][ T3927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.915803][ T3927] RSP: 002b:00007f7886c85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.915831][ T3927] RAX: ffffffffffffffda RBX: 00007f7886025fa0 RCX: 00007f7885d9e159 [ 274.915844][ T3927] RDX: 000000000000005b RSI: 00002000000002c0 RDI: 0000000000000003 [ 274.915856][ T3927] RBP: 00007f7886c85090 R08: 0000000000000000 R09: 0000000000000000 [ 274.915867][ T3927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.915878][ T3927] R13: 00007f7886026038 R14: 00007f7886025fa0 R15: 00007ffc974ef6d8 [ 274.915906][ T3927] [ 275.208477][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 275.224741][ T45] usb 3-1: USB disconnect, device number 103 [ 275.329649][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 275.726036][ T3967] : renamed from xfrm0 (while UP) [ 276.033255][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 276.293935][ T45] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 276.310315][ T3998] ./dev/sda1: Can't lookup blockdev [ 276.450574][ T45] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 276.469564][ T45] usb 3-1: config 0 has no interface number 0 [ 276.485987][ T45] usb 3-1: config 0 interface 41 has no altsetting 0 [ 276.500875][ T45] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 276.514868][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.532792][ T45] usb 3-1: Product: syz [ 276.543278][ T45] usb 3-1: Manufacturer: syz [ 276.552156][ T45] usb 3-1: SerialNumber: syz [ 276.568526][ T45] usb 3-1: config 0 descriptor?? [ 276.606437][ T423] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 276.624006][ T423] usb 2-1: USB disconnect, device number 96 [ 276.644480][ T36] audit: type=1400 audit(1788479521.980:577): avc: denied { mounton } for pid=4008 comm="syz.3.1261" path="/382/file0" dev="tmpfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 276.857269][ T9] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 277.009461][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 277.017304][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 277.026435][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.034485][ T9] usb 1-1: Product: syz [ 277.038688][ T9] usb 1-1: Manufacturer: syz [ 277.043332][ T9] usb 1-1: SerialNumber: syz [ 277.122838][ T36] audit: type=1400 audit(1788479522.470:578): avc: denied { getopt } for pid=4011 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.387136][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 277.602723][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 277.615252][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 277.625510][ T45] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 277.637258][ T45] usb 3-1: USB disconnect, device number 104 [ 277.664699][ T4034] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 277.674663][ T36] audit: type=1400 audit(1788479523.020:579): avc: denied { relabelto } for pid=4033 comm="syz.1.1271" name="289" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 277.701348][ T36] audit: type=1400 audit(1788479523.020:580): avc: denied { associate } for pid=4033 comm="syz.1.1271" name="289" dev="tmpfs" ino=1558 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 277.836258][ T36] audit: type=1400 audit(1788479523.180:581): avc: denied { write } for pid=295 comm="syz-executor" name="289" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 277.862610][ T36] audit: type=1400 audit(1788479523.180:582): avc: denied { remove_name } for pid=295 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 277.890150][ T36] audit: type=1400 audit(1788479523.180:583): avc: denied { rmdir } for pid=295 comm="syz-executor" name="289" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 277.901663][ T4039] FAULT_INJECTION: forcing a failure. [ 277.901663][ T4039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.929773][ T4039] CPU: 1 UID: 0 PID: 4039 Comm: syz.1.1272 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 277.929807][ T4039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.929819][ T4039] Call Trace: [ 277.929825][ T4039] [ 277.929847][ T4039] __dump_stack+0x21/0x30 [ 277.929888][ T4039] dump_stack_lvl+0x140/0x1c0 [ 277.929928][ T4039] ? __cfi_dump_stack_lvl+0x10/0x10 [ 277.929952][ T4039] ? kvm_make_all_cpus_request+0x231/0x2b0 [ 277.929979][ T4039] ? __cfi_kvm_make_all_cpus_request+0x10/0x10 [ 277.930027][ T4039] ? _raw_spin_unlock+0x45/0x60 [ 277.930062][ T4039] dump_stack+0x19/0x20 [ 277.930092][ T4039] should_fail_ex+0x3c2/0x510 [ 277.930113][ T4039] should_fail_alloc_page+0xec/0x110 [ 277.930154][ T4039] __alloc_pages_noprof+0x1c0/0x7e0 [ 277.930191][ T4039] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 277.930230][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.930249][ T4039] ? folio_add_lru+0x116/0x400 [ 277.930353][ T4039] ? rcuwait_wake_up+0x60/0x70 [ 277.930426][ T4039] __folio_alloc_noprof+0x14/0x80 [ 277.930451][ T4039] folio_prealloc+0x46/0x220 [ 277.930520][ T4039] do_wp_page+0x187e/0x2e80 [ 277.930554][ T4039] ? __calc_delta+0x2b0/0x2b0 [ 277.930593][ T4039] ? folio_put+0x90/0x90 [ 277.930627][ T4039] ? __cfi__raw_spin_lock+0x10/0x10 [ 277.930669][ T4039] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 277.930716][ T4039] handle_mm_fault+0x1017/0x1ba0 [ 277.930736][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.930756][ T4039] ? __cfi_handle_mm_fault+0x10/0x10 [ 277.930796][ T4039] ? vm_normal_page+0x1fa/0x220 [ 277.930821][ T4039] ? follow_page_pte+0x8fb/0xba0 [ 277.930878][ T4039] ? gup_must_unshare+0x1e0/0x1e0 [ 277.930901][ T4039] ? vma_is_secretmem+0x11/0x50 [ 277.930959][ T4039] ? check_vma_flags+0x36d/0x3a0 [ 277.930992][ T4039] __get_user_pages+0x114b/0x22d0 [ 277.931024][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.931043][ T4039] ? populate_vma_page_range+0x220/0x220 [ 277.931080][ T4039] ? get_user_pages_fast_only+0xc0/0xc0 [ 277.931114][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.931138][ T4039] get_user_pages_unlocked+0x1ab/0x6c0 [ 277.931172][ T4039] __hva_to_pfn+0x25b/0xb80 [ 277.931190][ T4039] ? __cfi___hva_to_pfn+0x10/0x10 [ 277.931206][ T4039] ? kvm_tdp_mmu_fast_pf_get_last_sptep+0x231/0x2d0 [ 277.931257][ T4039] __gfn_to_pfn_memslot+0x2a1/0x330 [ 277.931282][ T4039] kvm_faultin_pfn+0x60e/0x1620 [ 277.931310][ T4039] ? fast_page_fault+0x1170/0x1170 [ 277.931326][ T4039] ? __kvm_mmu_topup_memory_cache+0x449/0x7e0 [ 277.931352][ T4039] ? get_guest_cr3+0xc0/0xc0 [ 277.931382][ T4039] ? kvm_io_bus_write+0x52f/0x5e0 [ 277.931413][ T4039] kvm_tdp_page_fault+0x204/0x320 [ 277.931441][ T4039] kvm_mmu_do_page_fault+0x2bf/0x640 [ 277.931469][ T4039] ? kvm_arch_async_page_ready+0x480/0x480 [ 277.931492][ T4039] ? kvm_fast_pio+0x48d/0x610 [ 277.931524][ T4039] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 277.931608][ T4039] kvm_mmu_page_fault+0x150/0x9a0 [ 277.931630][ T4039] handle_ept_violation+0x256/0x450 [ 277.931654][ T4039] ? vmx_vcpu_run+0x1116/0x1f70 [ 277.931701][ T4039] ? __cfi_handle_ept_violation+0x10/0x10 [ 277.931728][ T4039] vmx_handle_exit+0x1376/0x1c00 [ 277.931764][ T4039] ? xfd_validate_state+0x68/0x140 [ 277.931809][ T4039] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 277.931858][ T4039] vcpu_run+0x4c14/0x7830 [ 277.931908][ T4039] ? signal_pending+0xc0/0xc0 [ 277.931930][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.931947][ T4039] ? xfd_validate_state+0x68/0x140 [ 277.931988][ T4039] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 277.932016][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.932039][ T4039] ? fpregs_mark_activate+0x68/0x160 [ 277.932067][ T4039] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 277.932086][ T4039] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 277.932107][ T4039] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 277.932151][ T4039] ? _parse_integer_limit+0x195/0x1e0 [ 277.932178][ T4039] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 277.932212][ T4039] ? kstrtoull+0x13b/0x1e0 [ 277.932234][ T4039] ? kstrtouint+0x78/0xf0 [ 277.932251][ T4039] ? ioctl_has_perm+0x1bc/0x500 [ 277.932285][ T4039] ? __asan_memcpy+0x5a/0x80 [ 277.932309][ T4039] ? ioctl_has_perm+0x408/0x500 [ 277.932332][ T4039] ? has_cap_mac_admin+0xd0/0xd0 [ 277.932359][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.932375][ T4039] ? mutex_lock_killable+0x97/0x1d0 [ 277.932395][ T4039] ? __cfi_mutex_lock_killable+0x10/0x10 [ 277.932430][ T4039] ? proc_fail_nth_write+0x184/0x220 [ 277.932465][ T4039] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 277.932504][ T4039] kvm_vcpu_ioctl+0xa43/0x1000 [ 277.932522][ T4039] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 277.932539][ T4039] ? __cfi_vfs_write+0x10/0x10 [ 277.932570][ T4039] ? __kasan_check_write+0x18/0x20 [ 277.932594][ T4039] ? mutex_unlock+0x90/0x240 [ 277.932619][ T4039] ? __cfi_mutex_unlock+0x10/0x10 [ 277.932663][ T4039] ? __fget_files+0x2bc/0x330 [ 277.932684][ T4039] ? bpf_lsm_file_ioctl+0xd/0x20 [ 277.932720][ T4039] ? security_file_ioctl+0x3e/0x110 [ 277.932743][ T4039] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 277.932765][ T4039] __se_sys_ioctl+0x126/0x1b0 [ 277.932799][ T4039] __x64_sys_ioctl+0x7f/0xa0 [ 277.932820][ T4039] x64_sys_call+0x1878/0x2ee0 [ 277.932835][ T4039] do_syscall_64+0x57/0xf0 [ 277.932874][ T4039] ? clear_bhb_loop+0x50/0xa0 [ 277.932902][ T4039] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 277.932927][ T4039] RIP: 0033:0x7f72c239e159 [ 277.932952][ T4039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.932966][ T4039] RSP: 002b:00007f72c332b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.932984][ T4039] RAX: ffffffffffffffda RBX: 00007f72c2625fa0 RCX: 00007f72c239e159 [ 277.932997][ T4039] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 277.933023][ T4039] RBP: 00007f72c332b090 R08: 0000000000000000 R09: 0000000000000000 [ 277.933040][ T4039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.933053][ T4039] R13: 00007f72c2626038 R14: 00007f72c2625fa0 R15: 00007ffc1e0a3d98 [ 277.933073][ T4039] [ 278.622354][ T4047] netlink: 'syz.2.1274': attribute type 8 has an invalid length. [ 278.835177][ T4059] kvm: user requested TSC rate below hardware speed [ 278.850463][ T4059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 278.885322][ T36] audit: type=1400 audit(1788479524.230:584): avc: denied { map } for pid=4054 comm="syz.2.1278" path="socket:[44080]" dev="sockfs" ino=44080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 278.909190][ T36] audit: type=1400 audit(1788479524.230:585): avc: denied { read write } for pid=4054 comm="syz.2.1278" path="socket:[44080]" dev="sockfs" ino=44080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 279.310406][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 279.320383][ T9] usb 1-1: USB disconnect, device number 109 [ 279.789497][ T4092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1291'. [ 279.899570][ T45] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 280.049472][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 280.055677][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.066875][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.076929][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 280.086170][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.097126][ T45] usb 3-1: config 0 descriptor?? [ 280.139500][ T9] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 280.289459][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 280.295725][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.306670][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.319505][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 280.326149][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 280.335271][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.344109][ T9] usb 1-1: config 0 descriptor?? [ 280.508614][ T45] savu 0003:1E7D:2D5A.001A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 280.567946][ T36] audit: type=1400 audit(1788479525.910:586): avc: denied { map } for pid=4119 comm="syz.3.1302" path="socket:[44518]" dev="sockfs" ino=44518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 280.757112][ T9] input: HID 046d:c262 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C262.001B/input/input35 [ 280.772152][ T45] usb 3-1: USB disconnect, device number 105 [ 280.795315][ T9] logitech-hidpp-device 0003:046D:C262.001B: input,hidraw0: USB HID v40.00 Joystick [HID 046d:c262] on usb-dummy_hcd.0-1/input0 [ 280.956940][ T9] usb 1-1: USB disconnect, device number 110 [ 281.023700][ T36] audit: type=1400 audit(1788479526.370:587): avc: denied { sqpoll } for pid=4134 comm="syz.1.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 281.499087][ T4159] tipc: Enabling of bearer rejected, failed to enable media [ 281.801985][ T4184] tipc: Enabling of bearer rejected, failed to enable media [ 281.852206][ T4189] batadv_slave_1: entered promiscuous mode [ 281.942241][ T4198] tipc: Enabling of bearer rejected, failed to enable media [ 281.966774][ T4202] netlink: 'syz.2.1330': attribute type 16 has an invalid length. [ 282.199487][ T45] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 282.311500][ T4209] IPv4: Oversized IP packet from 127.0.0.1 [ 282.317491][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 282.359749][ T45] usb 3-1: Invalid ep0 maxpacket: 9 [ 282.489470][ T45] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 282.639474][ T45] usb 3-1: Invalid ep0 maxpacket: 9 [ 282.644884][ T45] usb usb3-port1: attempt power cycle [ 282.665305][ T4188] batadv_slave_1: left promiscuous mode [ 282.719491][ T702] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 282.879442][ T702] usb 1-1: Using ep0 maxpacket: 16 [ 282.885817][ T702] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 282.897031][ T702] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 282.910370][ T702] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.917014][ T702] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 282.926368][ T702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.935524][ T702] usb 1-1: config 0 descriptor?? [ 282.989485][ T45] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 283.019823][ T45] usb 3-1: Invalid ep0 maxpacket: 9 [ 283.159464][ T45] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 283.179804][ T45] usb 3-1: Invalid ep0 maxpacket: 9 [ 283.185292][ T45] usb usb3-port1: unable to enumerate USB device [ 283.239184][ T4223] veth1: entered allmulticast mode [ 283.354925][ T702] lg-g15 0003:046D:C227.001C: ignoring exceeding usage max [ 283.374813][ T702] lg-g15 0003:046D:C227.001C: hidraw0: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.0-1/input0 [ 283.543569][ T4222] veth1: left allmulticast mode [ 283.721616][ T4233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4233 comm=syz.1.1342 [ 283.969472][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 284.109695][ T9] usb 2-1: device descriptor read/64, error -71 [ 284.349524][ T9] usb 2-1: device descriptor read/64, error -71 [ 284.599473][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 284.729474][ T9] usb 2-1: device descriptor read/64, error -71 [ 284.979452][ T9] usb 2-1: device descriptor read/64, error -71 [ 285.010498][ T4245] rust_binder: Failure in copy_transaction_data: EFAULT [ 285.010526][ T4245] rust_binder: 4244:4245 transaction call to 4244:0 failed EFAULT, code 0 size 1792-4120 [ 285.028636][ T10] rust_binder: 4244: undelivered TRANSACTION_ERROR: 29201 [ 285.089587][ T9] usb usb2-port1: attempt power cycle [ 285.429500][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 285.442994][ T10] usb 1-1: USB disconnect, device number 111 [ 285.450430][ T702] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 285.454937][ T9] usb 2-1: device descriptor read/8, error -71 [ 285.482717][ T4264] SELinux: Context system_u:object_r:dhcpd_var_run_t:s0 is not valid (left unmapped). [ 285.493028][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 285.493047][ T36] audit: type=1400 audit(1788479530.840:591): avc: denied { relabelto } for pid=4263 comm="syz.0.1355" name="file0" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 285.534290][ T36] audit: type=1400 audit(1788479530.850:592): avc: denied { associate } for pid=4263 comm="syz.0.1355" name="file0" dev="tmpfs" ino=1761 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 285.579616][ T4268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1357'. [ 285.590701][ T9] usb 2-1: device descriptor read/8, error -71 [ 285.629812][ T702] usb 3-1: Using ep0 maxpacket: 32 [ 285.636187][ T702] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 285.645219][ T702] usb 3-1: config 0 has no interface number 0 [ 285.651469][ T702] usb 3-1: config 0 interface 184 has no altsetting 0 [ 285.659882][ T702] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.668973][ T702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.677159][ T702] usb 3-1: Product: syz [ 285.681456][ T702] usb 3-1: Manufacturer: syz [ 285.686075][ T702] usb 3-1: SerialNumber: syz [ 285.695869][ T702] usb 3-1: config 0 descriptor?? [ 285.703344][ T702] smsc75xx v1.0.0 [ 285.845059][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 285.870528][ T9] usb 2-1: device descriptor read/8, error -71 [ 285.881000][ T4280] SELinux: failed to load policy [ 285.943328][ T4282] kvm: kvm [4281]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 285.952242][ T4282] kvm: kvm [4281]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 286.000639][ T9] usb 2-1: device descriptor read/8, error -71 [ 286.071530][ T36] audit: type=1400 audit(1788479531.420:593): avc: denied { execmem } for pid=4284 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 286.109686][ T9] usb usb2-port1: unable to enumerate USB device [ 286.146516][ T4285] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 286.156216][ T4285] SELinux: failed to load policy [ 286.304400][ T702] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 286.315260][ T702] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 286.409469][ T9] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 286.560622][ T9] usb 1-1: config 240 has an invalid interface number: 170 but max is 0 [ 286.569107][ T9] usb 1-1: config 240 has no interface number 0 [ 286.575519][ T9] usb 1-1: config 240 interface 170 has no altsetting 0 [ 286.584094][ T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.2a [ 286.593216][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.601265][ T9] usb 1-1: Product: syz [ 286.605463][ T9] usb 1-1: Manufacturer: syz [ 286.610128][ T9] usb 1-1: SerialNumber: syz [ 286.847042][ T36] audit: type=1400 audit(1788479532.190:594): avc: denied { create } for pid=4300 comm="syz.1.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.867388][ T36] audit: type=1400 audit(1788479532.190:595): avc: denied { setopt } for pid=4300 comm="syz.1.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.889383][ T36] audit: type=1400 audit(1788479532.190:596): avc: denied { write } for pid=4300 comm="syz.1.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.909730][ T36] audit: type=1400 audit(1788479532.190:597): avc: denied { nlmsg_write } for pid=4300 comm="syz.1.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.947957][ T4305] SELinux: failed to load policy [ 287.145447][ T4313] netlink: 'syz.1.1374': attribute type 7 has an invalid length. [ 287.153295][ T4313] netlink: 'syz.1.1374': attribute type 5 has an invalid length. [ 287.161224][ T4313] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1374'. [ 287.186285][ T4315] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1375'. [ 287.338352][ T702] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 287.352506][ T702] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 287.365620][ T9] usb_ehset_test 1-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 287.376365][ T702] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 287.378936][ T9] usb 1-1: USB disconnect, device number 112 [ 287.402087][ T702] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 287.417972][ T702] usb 3-1: USB disconnect, device number 110 [ 287.679496][ T45] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 287.807804][ T36] audit: type=1400 audit(1788479533.150:598): avc: denied { mount } for pid=4350 comm="syz.3.1388" name="/" dev="ramfs" ino=46367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 287.850390][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 287.856694][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 287.865163][ T45] usb 2-1: config 0 has no interface number 0 [ 287.872803][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 287.882466][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 287.884924][ T4356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1390: No space for directory leaf checksum. Please run e2fsck -D. [ 287.892061][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.907514][ T4356] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1390: checksumming directory block 0 [ 287.919507][ T45] usb 2-1: Product: syz [ 287.928069][ T4356] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 287.931833][ T45] usb 2-1: Manufacturer: syz [ 287.943057][ T4356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1390: No space for directory leaf checksum. Please run e2fsck -D. [ 287.947303][ T45] usb 2-1: SerialNumber: syz [ 287.962807][ T4356] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1390: checksumming directory block 0 [ 287.978071][ T45] usb 2-1: config 0 descriptor?? [ 287.979772][ T4356] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 287.989065][ T45] smsc75xx v1.0.0 [ 287.995227][ T4356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1390: No space for directory leaf checksum. Please run e2fsck -D. [ 288.013370][ T4356] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1390: checksumming directory block 0 [ 288.025780][ T4356] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 288.036208][ T4356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1390: No space for directory leaf checksum. Please run e2fsck -D. [ 288.051769][ T4356] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1390: checksumming directory block 0 [ 288.064092][ T4356] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 288.073524][ T4356] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 288.349487][ T31] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 288.509578][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 288.515803][ T31] usb 3-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 288.526192][ T31] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.539163][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.545845][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.00 [ 288.555072][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.571033][ T31] usb 3-1: config 0 descriptor?? [ 288.583015][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 288.591797][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 288.606205][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.638453][ T4381] SELinux: Context KNDd5Q3Bkٔybs,~;c3pofPҸ62Ai] [ 288.638453][ T4381] is not valid (left unmapped). [ 288.654566][ T36] audit: type=1400 audit(1788479534.000:599): avc: denied { create } for pid=4380 comm="syz.3.1401" name="mem" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0FCA373D0FFBF84012C9D7EFAD43B6333981F70086F9ABAD06650D7D2B83632F2F94169AE115DDD0A [ 288.687544][ T36] audit: type=1400 audit(1788479534.000:600): avc: denied { associate } for pid=4380 comm="syz.3.1401" name="mem" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0FCA373D0FFBF84012C9D7EFAD43B6333981F70086F9ABAD06650D7D2B83632F2F94169AE115DDD0A [ 288.700181][ T4383] bridge0: port 3(veth0_vlan) entered blocking state [ 288.728027][ T4383] bridge0: port 3(veth0_vlan) entered disabled state [ 288.734998][ T4383] veth0_vlan: entered allmulticast mode [ 288.741329][ T4383] bridge0: port 3(veth0_vlan) entered blocking state [ 288.748063][ T4383] bridge0: port 3(veth0_vlan) entered forwarding state [ 288.755170][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 288.774243][ T4384] bridge0: port 3(veth0_vlan) entered disabled state [ 288.794857][ T4384] veth0_vlan (unregistering): left allmulticast mode [ 288.801861][ T4384] bridge0: port 3(veth0_vlan) entered disabled state [ 288.962498][ T4394] bridge0: entered promiscuous mode [ 288.967818][ T4394] bridge0: entered allmulticast mode [ 289.299468][ T4385] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 289.449483][ T4385] usb 1-1: Using ep0 maxpacket: 32 [ 289.455911][ T4385] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.466062][ T4385] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 289.475418][ T4385] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 289.486440][ T4385] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 289.499748][ T4385] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.509473][ T4385] usb 1-1: config 1 interface 1 has no altsetting 0 [ 289.517611][ T4385] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 289.526746][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.534784][ T4385] usb 1-1: Product: syz [ 289.538960][ T4385] usb 1-1: Manufacturer: syz [ 289.543612][ T4385] usb 1-1: SerialNumber: syz [ 289.753594][ T4385] usb 1-1: selecting invalid altsetting 0 [ 289.821750][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 289.832658][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 289.842455][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 289.852009][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 289.964094][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.972740][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.201135][ T4385] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 290.210912][ T4385] usb 1-1: USB disconnect, device number 113 [ 290.221234][ T2548] udevd[2548]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 290.375410][ T4430] fuse: Bad value for 'fd' [ 290.518077][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 290.518095][ T36] audit: type=1400 audit(1788479535.860:606): avc: denied { execute_no_trans } for pid=4445 comm="syz.3.1426" path="/448/file0" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 290.564586][ T4450] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1428'. [ 290.597350][ T4454] bridge_slave_0: default FDB implementation only supports local addresses [ 291.078311][ T31] usb 2-1: USB disconnect, device number 101 [ 291.136129][ T45] usb 3-1: USB disconnect, device number 111 [ 291.210987][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 291.519366][ T36] audit: type=1400 audit(1788479536.860:607): avc: denied { create } for pid=4487 comm="syz.3.1441" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.540186][ T45] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 291.550102][ T36] audit: type=1400 audit(1788479536.900:608): avc: denied { read write } for pid=4487 comm="syz.3.1441" name="file2" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.574401][ T36] audit: type=1400 audit(1788479536.900:609): avc: denied { open } for pid=4487 comm="syz.3.1441" path="/456/file2" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.598453][ T4488] block device autoloading is deprecated and will be removed. [ 291.627590][ T36] audit: type=1400 audit(1788479536.960:610): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.650364][ T31] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 291.709496][ T45] usb 3-1: device descriptor read/64, error -71 [ 291.790386][ T31] usb 2-1: device descriptor read/64, error -71 [ 291.949484][ T45] usb 3-1: device descriptor read/64, error -71 [ 291.959223][ T4509] IPv4: Oversized IP packet from 127.0.0.1 [ 291.965251][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 292.029517][ T31] usb 2-1: device descriptor read/64, error -71 [ 292.115643][ T4515] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 292.125306][ T4515] SELinux: failed to load policy [ 292.199503][ T45] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 292.269472][ T31] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 292.329483][ T45] usb 3-1: device descriptor read/64, error -71 [ 292.345417][ T4517] fuse: Bad value for 'group_id' [ 292.350472][ T4517] fuse: Bad value for 'group_id' [ 292.399485][ T31] usb 2-1: device descriptor read/64, error -71 [ 292.569496][ T45] usb 3-1: device descriptor read/64, error -71 [ 292.639506][ T31] usb 2-1: device descriptor read/64, error -71 [ 292.679584][ T45] usb usb3-port1: attempt power cycle [ 292.749727][ T31] usb usb2-port1: attempt power cycle [ 293.019487][ T45] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 293.040526][ T45] usb 3-1: device descriptor read/8, error -71 [ 293.089480][ T31] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 293.110555][ T31] usb 2-1: device descriptor read/8, error -71 [ 293.139519][ T4385] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 293.170576][ T45] usb 3-1: device descriptor read/8, error -71 [ 293.240644][ T31] usb 2-1: device descriptor read/8, error -71 [ 293.289477][ T4385] usb 1-1: Using ep0 maxpacket: 16 [ 293.295784][ T4385] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 293.305730][ T4385] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 293.314911][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.322957][ T4385] usb 1-1: Product: syz [ 293.327144][ T4385] usb 1-1: Manufacturer: syz [ 293.331793][ T4385] usb 1-1: SerialNumber: syz [ 293.339047][ T4385] r8152-cfgselector 1-1: Unknown version 0x0000 [ 293.345368][ T4385] r8152-cfgselector 1-1: config 0 descriptor?? [ 293.419484][ T45] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 293.440552][ T45] usb 3-1: device descriptor read/8, error -71 [ 293.499477][ T31] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 293.525401][ T31] usb 2-1: device descriptor read/8, error -71 [ 293.570498][ T45] usb 3-1: device descriptor read/8, error -71 [ 293.660527][ T31] usb 2-1: device descriptor read/8, error -71 [ 293.679578][ T45] usb usb3-port1: unable to enumerate USB device [ 293.769607][ T31] usb usb2-port1: unable to enumerate USB device [ 294.219798][ T36] audit: type=1400 audit(1788479539.570:611): avc: denied { mount } for pid=4536 comm="syz.3.1461" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 294.345676][ T4551] IPv4: Oversized IP packet from 127.0.0.1 [ 294.351718][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 294.368595][ T4552] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.3.1463: No space for directory leaf checksum. Please run e2fsck -D. [ 294.384080][ T4552] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.3.1463: checksumming directory block 0 [ 294.396310][ T4552] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 294.407318][ T4552] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.3.1463: No space for directory leaf checksum. Please run e2fsck -D. [ 294.422754][ T4552] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.3.1463: checksumming directory block 0 [ 294.434946][ T4552] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 294.445113][ T4552] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.3.1463: No space for directory leaf checksum. Please run e2fsck -D. [ 294.460537][ T4552] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.3.1463: checksumming directory block 0 [ 294.472747][ T4552] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 294.483045][ T4552] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.3.1463: No space for directory leaf checksum. Please run e2fsck -D. [ 294.498481][ T4552] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.3.1463: checksumming directory block 0 [ 294.510891][ T4552] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 294.520271][ T4552] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 294.574190][ T4564] fuse: Bad value for 'user_id' [ 294.579162][ T4564] fuse: Bad value for 'user_id' [ 294.641220][ T4569] kvm: apic: phys broadcast and lowest prio [ 295.912446][ T31] r8152-cfgselector 1-1: USB disconnect, device number 114 [ 296.089493][ T4385] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 296.249463][ T4385] usb 2-1: Using ep0 maxpacket: 32 [ 296.255835][ T4385] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 296.264211][ T4385] usb 2-1: config 0 has no interface number 0 [ 296.270483][ T4385] usb 2-1: config 0 interface 184 has no altsetting 0 [ 296.278624][ T4385] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 296.279735][ T31] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 296.288825][ T4385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.303844][ T4385] usb 2-1: Product: syz [ 296.308008][ T4385] usb 2-1: Manufacturer: syz [ 296.312649][ T4385] usb 2-1: SerialNumber: syz [ 296.318012][ T4385] usb 2-1: config 0 descriptor?? [ 296.324075][ T4385] smsc75xx v1.0.0 [ 296.349456][ T45] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 296.439451][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 296.447392][ T31] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 296.456689][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.464807][ T31] usb 1-1: Product: syz [ 296.469000][ T31] usb 1-1: Manufacturer: syz [ 296.473646][ T31] usb 1-1: SerialNumber: syz [ 296.499483][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 296.505728][ T45] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 296.515984][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.524991][ T45] usb 3-1: config 1 has no interface number 1 [ 296.531152][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 296.544072][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 296.555169][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 59152, setting to 1024 [ 296.567872][ T45] usb 3-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 296.577118][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.585177][ T45] usb 3-1: Product: syz [ 296.589367][ T45] usb 3-1: Manufacturer: syz [ 296.594584][ T45] usb 3-1: SerialNumber: syz [ 296.803734][ T45] usb 3-1: 0:1 : does not exist [ 296.808696][ T45] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 296.816706][ T45] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 296.822953][ T45] usb 3-1: 2:1 : invalid channels 0 [ 296.831441][ T45] usb 3-1: USB disconnect, device number 116 [ 296.846185][ T2543] udevd[2543]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 296.929210][ T4385] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 296.940189][ T4385] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 297.351266][ T4611] tipc: Trying to set illegal importance in message [ 297.381288][ T36] audit: type=1400 audit(1788479542.726:612): avc: denied { connect } for pid=4608 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 297.816092][ T36] audit: type=1400 audit(1788479543.156:613): avc: denied { ioctl } for pid=4637 comm="syz.3.1502" path="socket:[47481]" dev="sockfs" ino=47481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.884094][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 297.900230][ T31] usb 1-1: USB disconnect, device number 115 [ 298.104733][ T4641] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 298.114823][ T4641] SELinux: failed to load policy [ 298.709447][ T45] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 298.811652][ T4385] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 298.823141][ T4385] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 298.834880][ T4385] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 298.852177][ T4385] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 298.862725][ T4385] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 298.873808][ T4385] usb 2-1: USB disconnect, device number 106 [ 298.885521][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.900936][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 298.909478][ T45] usb 1-1: config 1 has an invalid interface number: 116 but max is 0 [ 298.920421][ T45] usb 1-1: config 1 has no interface number 0 [ 298.926623][ T45] usb 1-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 298.938531][ T45] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 298.950144][ T45] usb 1-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 298.962463][ T45] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 298.974602][ T45] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.986079][ T45] usb 1-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.999775][ T45] usb 1-1: config 1 interface 116 has no altsetting 0 [ 299.008586][ T45] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 299.018046][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.026259][ T45] usb 1-1: Product: syz [ 299.031160][ T45] usb 1-1: Manufacturer: syz [ 299.035879][ T45] usb 1-1: SerialNumber: syz [ 299.042108][ T4657] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.049322][ T4657] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.126916][ T36] audit: type=1400 audit(1788479544.466:614): avc: denied { bind } for pid=4686 comm="syz.3.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.155700][ T36] audit: type=1400 audit(1788479544.486:615): avc: denied { name_bind } for pid=4686 comm="syz.3.1525" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 299.177038][ T36] audit: type=1400 audit(1788479544.486:616): avc: denied { node_bind } for pid=4686 comm="syz.3.1525" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 299.263791][ T45] ums-usbat 1-1:1.116: USB Mass Storage device detected [ 299.311552][ T45] ums-usbat 1-1:1.116: probe with driver ums-usbat failed with error -5 [ 299.321441][ T45] usb 1-1: USB disconnect, device number 116 [ 299.349818][ T4706] Invalid argument reading file caps for ./file0 [ 299.372573][ T36] audit: type=1326 audit(1788479544.716:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.1532" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c239e159 code=0x0 [ 299.424929][ T4707] kvm: pic: non byte write [ 299.589473][ T31] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 299.740855][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 299.749294][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 299.761634][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 299.770723][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.778744][ T31] usb 3-1: Product: syz [ 299.783017][ T31] usb 3-1: Manufacturer: syz [ 299.787652][ T31] usb 3-1: SerialNumber: syz [ 300.004529][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 300.011514][ T31] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 300.019994][ T31] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 300.027963][ T31] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 300.042817][ T31] usb 3-1: USB disconnect, device number 117 [ 300.055889][ T2592] udevd[2592]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 300.489512][ T31] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 300.517474][ T4737] tipc: Enabling of bearer rejected, failed to enable media [ 300.650977][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 300.669854][ T31] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 300.680880][ T31] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 300.691643][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 300.699470][ T45] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 300.709471][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 300.718552][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.731801][ T31] usb 2-1: Product: syz [ 300.736016][ T31] usb 2-1: Manufacturer: ఊ [ 300.740819][ T31] usb 2-1: SerialNumber: syz [ 300.746588][ T4725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.756198][ T4725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.879467][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 300.885907][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 300.894435][ T45] usb 1-1: config 0 has no interface number 0 [ 300.900841][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 300.909156][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 300.918646][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.926873][ T45] usb 1-1: Product: syz [ 300.931340][ T45] usb 1-1: Manufacturer: syz [ 300.936004][ T45] usb 1-1: SerialNumber: syz [ 300.945894][ T45] usb 1-1: config 0 descriptor?? [ 300.953796][ T45] smsc75xx v1.0.0 [ 300.965136][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.973850][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.990724][ T31] usbhid 2-1:1.0: can't add hid device: -71 [ 301.000693][ T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 301.033837][ T31] usb 2-1: USB disconnect, device number 107 [ 301.561475][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 301.580948][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 301.759466][ T31] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 301.944024][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 301.952467][ T31] usb 2-1: can't read configurations, error -71 [ 302.197393][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 302.208405][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 302.218271][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 302.227998][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 302.718977][ T36] audit: type=1400 audit(1788479548.056:618): avc: denied { write } for pid=4760 comm="syz.1.1556" name="sockstat6" dev="proc" ino=4026532562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 302.840738][ T4765] ip6gre0: mtu less than device minimum [ 303.199466][ T31] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 303.369851][ T31] usb 2-1: no configurations [ 303.374671][ T31] usb 2-1: can't read configurations, error -22 [ 303.529439][ T31] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 303.580379][ T45] usb 1-1: USB disconnect, device number 117 [ 303.699818][ T31] usb 2-1: no configurations [ 303.706745][ T31] usb 2-1: can't read configurations, error -22 [ 303.729580][ T31] usb usb2-port1: attempt power cycle [ 304.069469][ T31] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 304.090232][ T31] usb 2-1: no configurations [ 304.094993][ T31] usb 2-1: can't read configurations, error -22 [ 304.229480][ T31] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 304.250270][ T31] usb 2-1: no configurations [ 304.254968][ T31] usb 2-1: can't read configurations, error -22 [ 304.261730][ T31] usb usb2-port1: unable to enumerate USB device [ 304.388371][ T4780] overlayfs: empty lowerdir [ 304.663960][ T4795] syzkaller1: entered promiscuous mode [ 304.669716][ T4795] syzkaller1: entered allmulticast mode [ 305.336121][ T4806] ./dev/sda1: Can't lookup blockdev [ 305.341581][ T4805] ./dev/sda1: Can't lookup blockdev [ 305.829469][ T702] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 305.945522][ T36] audit: type=1400 audit(1788479551.286:619): avc: denied { remount } for pid=4816 comm="syz.3.1578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 305.966238][ T36] audit: type=1400 audit(1788479551.286:620): avc: denied { associate } for pid=4820 comm="syz.3.1578" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 305.999426][ T36] audit: type=1400 audit(1788479551.336:621): avc: denied { execute } for pid=4816 comm="syz.3.1578" name="file0" dev="rootfs" ino=48801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 306.032371][ T702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.041033][ T36] audit: type=1400 audit(1788479551.336:622): avc: denied { execute_no_trans } for pid=4816 comm="syz.3.1578" path="/file0" dev="rootfs" ino=48801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 306.069599][ T702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.079834][ T702] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.081465][ T36] audit: type=1400 audit(1788479551.376:623): avc: denied { ioctl } for pid=4807 comm="syz.0.1575" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.088815][ T702] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 306.182343][ T702] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 306.209433][ T702] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 306.230458][ T702] usb 1-1: config 1 interface 1 has no altsetting 0 [ 306.251088][ T702] usb 1-1: string descriptor 0 read error: -22 [ 306.257353][ T702] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 306.266547][ T702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.756541][ T4831] FAULT_INJECTION: forcing a failure. [ 306.756541][ T4831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.773752][ T4831] CPU: 0 UID: 0 PID: 4831 Comm: syz.1.1582 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 306.773795][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.773826][ T4831] Call Trace: [ 306.773836][ T4831] [ 306.773848][ T4831] __dump_stack+0x21/0x30 [ 306.773901][ T4831] dump_stack_lvl+0x140/0x1c0 [ 306.773940][ T4831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 306.773978][ T4831] dump_stack+0x19/0x20 [ 306.774012][ T4831] should_fail_ex+0x3c2/0x510 [ 306.774044][ T4831] should_fail_alloc_page+0xec/0x110 [ 306.774078][ T4831] __alloc_pages_noprof+0x1c0/0x7e0 [ 306.774117][ T4831] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 306.774159][ T4831] __folio_alloc_noprof+0x14/0x80 [ 306.774196][ T4831] folio_prealloc+0x46/0x220 [ 306.774231][ T4831] do_pte_missing+0x16af/0x4440 [ 306.774264][ T4831] ? schedule+0xc5/0x240 [ 306.774299][ T4831] ? __futex_wait+0x330/0x3d0 [ 306.774408][ T4831] ? pte_marker_clear+0x1b0/0x1b0 [ 306.774442][ T4831] ? __cfi_futex_wake_mark+0x10/0x10 [ 306.774465][ T4831] ? futex_wake+0x666/0x950 [ 306.774486][ T4831] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 306.774514][ T4831] handle_mm_fault+0x1189/0x1ba0 [ 306.774547][ T4831] ? __cfi_handle_mm_fault+0x10/0x10 [ 306.774576][ T4831] ? lock_vma_under_rcu+0x4cf/0x590 [ 306.774610][ T4831] ? __se_sys_futex+0x13c/0x320 [ 306.774680][ T4831] do_user_addr_fault+0x951/0x1230 [ 306.774720][ T4831] ? __cfi_ksys_write+0x10/0x10 [ 306.774750][ T4831] ? fpregs_restore_userregs+0x11c/0x260 [ 306.774785][ T4831] exc_page_fault+0x58/0xc0 [ 306.774816][ T4831] asm_exc_page_fault+0x2b/0x30 [ 306.774844][ T4831] RIP: 0033:0x7f72c22659e6 [ 306.774871][ T4831] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 11 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 306.774894][ T4831] RSP: 002b:00007f72c3328f60 EFLAGS: 00010206 [ 306.774926][ T4831] RAX: 0000000000000000 RBX: 00007f72c2625fa0 RCX: 0000000000000000 [ 306.774945][ T4831] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007f72c2435ae1 [ 306.774965][ T4831] RBP: 00007f72c2435024 R08: 00007f72c2252850 R09: 0000000000000000 [ 306.774983][ T4831] R10: 0000000000000000 R11: 0000200000000000 R12: 0000000000000036 [ 306.775000][ T4831] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffc1e0a3d98 [ 306.775024][ T4831] [ 306.775043][ T4831] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 307.020227][ T36] audit: type=1400 audit(1788479552.366:624): avc: denied { read write } for pid=4830 comm="syz.1.1582" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.060205][ T36] audit: type=1400 audit(1788479552.396:625): avc: denied { open } for pid=4830 comm="syz.1.1582" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.290519][ T4385] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 307.460984][ T4385] usb 2-1: config index 0 descriptor too short (expected 21284, got 36) [ 307.469489][ T4385] usb 2-1: config 74 has too many interfaces: 170, using maximum allowed: 32 [ 307.478435][ T4385] usb 2-1: config 74 has an invalid descriptor of length 56, skipping remainder of the config [ 307.489021][ T4385] usb 2-1: config 74 has 0 interfaces, different from the descriptor's value: 170 [ 307.498432][ T4385] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.507748][ T4385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.508520][ T4808] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 307.525747][ T4808] SELinux: failed to load policy [ 307.547137][ T502] usb 1-1: USB disconnect, device number 118 [ 307.735056][ T4385] usb 2-1: string descriptor 0 read error: -71 [ 307.746098][ T4385] usb 2-1: USB disconnect, device number 114 [ 308.029111][ T4869] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 308.038401][ T4869] overlay: Unknown parameter 'smackfsroot' [ 308.312513][ T4884] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 308.322846][ T4884] overlayfs: failed to clone lowerpath [ 308.559499][ T4385] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 308.709530][ T31] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 308.719456][ T4385] usb 2-1: Using ep0 maxpacket: 16 [ 308.725845][ T4385] usb 2-1: config 0 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.738955][ T4385] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.745664][ T4385] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 308.754817][ T4385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.769704][ T4385] usb 2-1: config 0 descriptor?? [ 308.859465][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 308.865937][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 308.878756][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 308.887976][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.896202][ T31] usb 1-1: Product: syz [ 308.900708][ T31] usb 1-1: Manufacturer: syz [ 308.912676][ T31] usb 1-1: SerialNumber: syz [ 308.943630][ T4901] netlink: 'syz.3.1608': attribute type 39 has an invalid length. [ 308.952886][ T4901] 9p: Unknown uid 00000000004294967295 [ 309.127488][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 309.137844][ T31] usb 1-1: 2:1 : bogus bTerminalLink 13 [ 309.149137][ T31] usb 1-1: 0:3 : does not exist [ 309.158405][ T31] usb 1-1: 0:4 : does not exist [ 309.168796][ T31] usb 1-1: unit 6 not found! [ 309.177899][ T31] usb 1-1: unit 7 not found! [ 309.186653][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x1 [ 309.196867][ T4385] magicmouse 0003:05AC:0265.001D: ignoring exceeding usage max [ 309.206316][ T31] usb 1-1: USB disconnect, device number 119 [ 309.220071][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.233430][ T2592] udevd[2592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 309.238007][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.274927][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.290554][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.305609][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.320548][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.335533][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.350546][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.368132][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.380979][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.398187][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.413209][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.429488][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.447061][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.459440][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.466832][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.489443][ T4385] magicmouse 0003:05AC:0265.001D: unknown main item tag 0x0 [ 309.507871][ T4385] magicmouse 0003:05AC:0265.001D: hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 309.539599][ T4385] usb 2-1: USB disconnect, device number 115 [ 309.597227][ T4907] fido_id[4907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 309.643334][ T4913] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1613'. [ 309.669443][ T36] audit: type=1400 audit(1788479555.006:626): avc: denied { bpf } for pid=4912 comm="syz.3.1613" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.714879][ T4918] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1615'. [ 309.979476][ T4385] usb 1-1: new low-speed USB device number 120 using dummy_hcd [ 310.130988][ T4385] usb 1-1: unable to get BOS descriptor or descriptor too short [ 310.148876][ T4385] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.169269][ T4385] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.181592][ T4385] usb 1-1: string descriptor 0 read error: -22 [ 310.187866][ T4385] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 310.202624][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.525518][ T4945] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 310.632765][ T4385] usb 1-1: USB disconnect, device number 120 [ 311.337849][ T4959] overlayfs: failed to clone upperpath [ 311.387564][ T4963] netlink: 'syz.3.1633': attribute type 4 has an invalid length. [ 311.396817][ T4963] netlink: 'syz.3.1633': attribute type 21 has an invalid length. [ 311.404782][ T4963] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1633'. [ 311.441224][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 312.281920][ T36] audit: type=1400 audit(1788479557.604:627): avc: denied { create } for pid=4992 comm="syz.1.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 312.332581][ T4385] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 312.480812][ T5005] FAULT_INJECTION: forcing a failure. [ 312.480812][ T5005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.494000][ T4385] usb 1-1: device descriptor read/64, error -71 [ 312.500403][ T5005] CPU: 0 UID: 0 PID: 5005 Comm: syz.1.1652 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 312.500442][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.500457][ T5005] Call Trace: [ 312.500466][ T5005] [ 312.500476][ T5005] __dump_stack+0x21/0x30 [ 312.500516][ T5005] dump_stack_lvl+0x140/0x1c0 [ 312.500558][ T5005] ? __cfi_dump_stack_lvl+0x10/0x10 [ 312.500593][ T5005] ? do_vfs_ioctl+0x1824/0x2010 [ 312.500625][ T5005] ? check_stack_object+0x10f/0x150 [ 312.500653][ T5005] dump_stack+0x19/0x20 [ 312.500683][ T5005] should_fail_ex+0x3c2/0x510 [ 312.500713][ T5005] should_fail+0xf/0x20 [ 312.500739][ T5005] should_fail_usercopy+0x1e/0x30 [ 312.500770][ T5005] _copy_from_user+0x20/0xa0 [ 312.500805][ T5005] kvm_vm_ioctl+0x657/0xc40 [ 312.500840][ T5005] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 312.500875][ T5005] ? ioctl_has_perm+0x1bc/0x500 [ 312.500900][ T5005] ? __asan_memcpy+0x5a/0x80 [ 312.500926][ T5005] ? ioctl_has_perm+0x408/0x500 [ 312.500954][ T5005] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 312.500992][ T5005] ? selinux_file_ioctl+0x732/0x1480 [ 312.501016][ T5005] ? vfs_write+0xbcf/0xfd0 [ 312.501041][ T5005] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 312.501067][ T5005] ? __cfi_vfs_write+0x10/0x10 [ 312.501093][ T5005] ? __kasan_check_write+0x18/0x20 [ 312.501118][ T5005] ? mutex_unlock+0x90/0x240 [ 312.501146][ T5005] ? __cfi_mutex_unlock+0x10/0x10 [ 312.501175][ T5005] ? __fget_files+0x2bc/0x330 [ 312.501205][ T5005] ? bpf_lsm_file_ioctl+0xd/0x20 [ 312.501246][ T5005] ? security_file_ioctl+0x3e/0x110 [ 312.501270][ T5005] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 312.501304][ T5005] __se_sys_ioctl+0x126/0x1b0 [ 312.501335][ T5005] __x64_sys_ioctl+0x7f/0xa0 [ 312.501363][ T5005] x64_sys_call+0x1878/0x2ee0 [ 312.501386][ T5005] do_syscall_64+0x57/0xf0 [ 312.501421][ T5005] ? clear_bhb_loop+0x50/0xa0 [ 312.501450][ T5005] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 312.501477][ T5005] RIP: 0033:0x7f72c239ddeb [ 312.501497][ T5005] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 312.501520][ T5005] RSP: 002b:00007f72c3329450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.501546][ T5005] RAX: ffffffffffffffda RBX: 0000200000fd6000 RCX: 00007f72c239ddeb [ 312.501566][ T5005] RDX: 00007f72c3329bd0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 312.501583][ T5005] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000004 [ 312.501599][ T5005] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000 [ 312.501615][ T5005] R13: 00007f72c3329bd0 R14: 0000200000fd8000 R15: 0000000000000002 [ 312.501637][ T5005] [ 312.847832][ T5015] 9pnet_virtio: no channels available for device ./file0 [ 312.856471][ T36] audit: type=1400 audit(1788479558.180:628): avc: denied { mounton } for pid=5014 comm="syz.1.1658" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 312.906822][ T4385] usb 1-1: device descriptor read/64, error -71 [ 313.188963][ T4385] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 313.319957][ T4385] usb 1-1: device descriptor read/64, error -71 [ 313.571870][ T4385] usb 1-1: device descriptor read/64, error -71 [ 313.692782][ T4385] usb usb1-port1: attempt power cycle [ 314.042614][ T5034] kvm: apic: phys broadcast and lowest prio [ 314.048692][ T4385] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 314.086839][ T4385] usb 1-1: device descriptor read/8, error -71 [ 314.210139][ T5047] FAULT_INJECTION: forcing a failure. [ 314.210139][ T5047] name failslab, interval 1, probability 0, space 0, times 0 [ 314.223076][ T5047] CPU: 0 UID: 0 PID: 5047 Comm: syz.1.1671 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 314.223116][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.223131][ T5047] Call Trace: [ 314.223139][ T5047] [ 314.223149][ T5047] __dump_stack+0x21/0x30 [ 314.223190][ T5047] dump_stack_lvl+0x140/0x1c0 [ 314.223225][ T5047] ? __cfi_dump_stack_lvl+0x10/0x10 [ 314.223261][ T5047] dump_stack+0x19/0x20 [ 314.223292][ T5047] should_fail_ex+0x3c2/0x510 [ 314.223322][ T5047] should_failslab+0xac/0x100 [ 314.223354][ T5047] kmem_cache_alloc_node_noprof+0x45/0x420 [ 314.223381][ T5047] ? dup_task_struct+0xc1/0xd80 [ 314.223493][ T5047] ? kasan_save_alloc_info+0x3a/0x50 [ 314.223516][ T5047] ? __kasan_kmalloc+0x96/0xb0 [ 314.223545][ T5047] ? __kmalloc_cache_noprof+0x23c/0x470 [ 314.223579][ T5047] dup_task_struct+0xc1/0xd80 [ 314.223610][ T5047] ? __kasan_check_write+0x18/0x20 [ 314.223635][ T5047] ? _raw_spin_lock_irq+0x93/0x120 [ 314.223670][ T5047] ? copy_process+0x3350/0x3350 [ 314.223700][ T5047] ? __kasan_check_write+0x18/0x20 [ 314.223726][ T5047] copy_process+0x57c/0x3350 [ 314.223760][ T5047] ? kasan_save_alloc_info+0x3a/0x50 [ 314.223783][ T5047] ? __cfi_copy_process+0x10/0x10 [ 314.223813][ T5047] ? __kmalloc_cache_noprof+0x23c/0x470 [ 314.223841][ T5047] ? __kasan_check_write+0x18/0x20 [ 314.223865][ T5047] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 314.223895][ T5047] vhost_task_create+0x1f7/0x3f0 [ 314.223921][ T5047] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 314.223955][ T5047] ? __cfi_vhost_task_create+0x10/0x10 [ 314.223983][ T5047] ? __cfi_vhost_task_fn+0x10/0x10 [ 314.224008][ T5047] ? __kasan_check_write+0x18/0x20 [ 314.224033][ T5047] ? mutex_lock+0x97/0x1d0 [ 314.224059][ T5047] ? __cfi_mutex_lock+0x10/0x10 [ 314.224085][ T5047] ? kernel_text_address+0xa9/0xe0 [ 314.224121][ T5047] kvm_mmu_post_init_vm+0x161/0x300 [ 314.224157][ T5047] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 314.224192][ T5047] ? _parse_integer_limit+0x195/0x1e0 [ 314.224220][ T5047] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 314.224254][ T5047] ? kstrtoull+0x13b/0x1e0 [ 314.224280][ T5047] ? kstrtouint+0x78/0xf0 [ 314.224305][ T5047] ? ioctl_has_perm+0x1bc/0x500 [ 314.224329][ T5047] ? __asan_memcpy+0x5a/0x80 [ 314.224354][ T5047] ? ioctl_has_perm+0x408/0x500 [ 314.224378][ T5047] ? has_cap_mac_admin+0xd0/0xd0 [ 314.224403][ T5047] ? __kasan_check_write+0x18/0x20 [ 314.224428][ T5047] ? mutex_lock_killable+0x97/0x1d0 [ 314.224457][ T5047] ? __cfi_mutex_lock_killable+0x10/0x10 [ 314.224485][ T5047] ? proc_fail_nth_write+0x184/0x220 [ 314.224524][ T5047] kvm_vcpu_ioctl+0xa43/0x1000 [ 314.224549][ T5047] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 314.224581][ T5047] ? __cfi_vfs_write+0x10/0x10 [ 314.224608][ T5047] ? __kasan_check_write+0x18/0x20 [ 314.224632][ T5047] ? mutex_unlock+0x90/0x240 [ 314.224658][ T5047] ? __cfi_mutex_unlock+0x10/0x10 [ 314.224688][ T5047] ? __fget_files+0x2bc/0x330 [ 314.224719][ T5047] ? bpf_lsm_file_ioctl+0xd/0x20 [ 314.224751][ T5047] ? security_file_ioctl+0x3e/0x110 [ 314.224775][ T5047] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 314.224803][ T5047] __se_sys_ioctl+0x126/0x1b0 [ 314.224834][ T5047] __x64_sys_ioctl+0x7f/0xa0 [ 314.224864][ T5047] x64_sys_call+0x1878/0x2ee0 [ 314.224888][ T5047] do_syscall_64+0x57/0xf0 [ 314.224923][ T5047] ? clear_bhb_loop+0x50/0xa0 [ 314.224952][ T5047] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 314.224978][ T5047] RIP: 0033:0x7f72c239e159 [ 314.225000][ T5047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.225021][ T5047] RSP: 002b:00007f72c332b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.225048][ T5047] RAX: ffffffffffffffda RBX: 00007f72c2625fa0 RCX: 00007f72c239e159 [ 314.225068][ T5047] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 314.225084][ T5047] RBP: 00007f72c332b090 R08: 0000000000000000 R09: 0000000000000000 [ 314.225100][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.225116][ T5047] R13: 00007f72c2626038 R14: 00007f72c2625fa0 R15: 00007ffc1e0a3d98 [ 314.225138][ T5047] [ 314.636223][ T4385] usb 1-1: device descriptor read/8, error -71 [ 314.810844][ T5050] rust_binder: 5049:5050 got transaction to invalid handle 1 [ 314.818418][ T5050] rust_binder: 5049:5050 transaction call to 0:0 failed ENOENT, code 0 size 96-24 [ 314.891685][ T4385] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 314.938172][ T4385] usb 1-1: device descriptor read/8, error -71 [ 315.062925][ T45] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 315.077682][ T4385] usb 1-1: device descriptor read/8, error -71 [ 315.195788][ T4385] usb usb1-port1: unable to enumerate USB device [ 315.205138][ T45] usb 2-1: device descriptor read/64, error -71 [ 315.286030][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 315.286396][ T36] audit: type=1400 audit(1788479560.601:629): avc: denied { nlmsg_read } for pid=5066 comm="syz.3.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 315.385917][ T5071] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1681'. [ 315.418331][ T5061] block device autoloading is deprecated and will be removed. [ 315.424716][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 315.497733][ T45] usb 2-1: device descriptor read/64, error -71 [ 315.747955][ T45] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 315.798619][ T5083] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.92.0), cmd(14) [ 315.802644][ T5081] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.839250][ T5081] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 315.870290][ T5085] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.889901][ T5085] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 315.902792][ T45] usb 2-1: device descriptor read/64, error -71 [ 315.911129][ T3043] bridge_slave_1: left allmulticast mode [ 315.924727][ T5088] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.929350][ T3043] bridge_slave_1: left promiscuous mode [ 315.941147][ T5088] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 315.962710][ T5087] kvm: pic: non byte read [ 315.973820][ T5090] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.977610][ T3043] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.993040][ T5090] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 315.997357][ T5087] kvm: pic: non byte read [ 316.016285][ T3043] bridge_slave_0: left allmulticast mode [ 316.022144][ T3043] bridge_slave_0: left promiscuous mode [ 316.028892][ T3043] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.037846][ T5087] kvm: pic: non byte read [ 316.047913][ T5087] kvm: pic: non byte read [ 316.058137][ T5087] kvm: pic: non byte read [ 316.064191][ T5087] kvm: pic: non byte read [ 316.069193][ T5087] kvm: pic: non byte read [ 316.073805][ T5087] kvm: pic: non byte read [ 316.078478][ T5087] kvm: pic: non byte read [ 316.084175][ T5087] kvm: pic: non byte read [ 316.150860][ T45] usb 2-1: device descriptor read/64, error -71 [ 316.203147][ T3043] tipc: Disabling bearer [ 316.218991][ T3043] tipc: Left network mode [ 316.224539][ T3043] veth1_macvtap: left promiscuous mode [ 316.230186][ T3043] veth0_vlan: left promiscuous mode [ 316.261766][ T45] usb usb2-port1: attempt power cycle [ 316.429880][ T5091] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 316.446435][ T5091] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 316.614204][ T45] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 316.645410][ T45] usb 2-1: device descriptor read/8, error -71 [ 316.776647][ T45] usb 2-1: device descriptor read/8, error -71 [ 316.974773][ T5094] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 316.991468][ T5094] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 317.005678][ T5096] netlink: 'syz.0.1689': attribute type 4 has an invalid length. [ 317.022516][ T45] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 317.058631][ T45] usb 2-1: device descriptor read/8, error -71 [ 317.189477][ T45] usb 2-1: device descriptor read/8, error -71 [ 317.299297][ T45] usb usb2-port1: unable to enumerate USB device [ 317.633668][ T5100] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 317.649503][ T5100] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 318.380963][ T5108] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 318.407805][ T5108] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 318.437069][ T36] audit: type=1400 audit(1788479563.719:630): avc: denied { bind } for pid=5110 comm="syz.1.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.638510][ T4385] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 318.801143][ T4385] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.817266][ T4385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.838404][ T4385] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.857639][ T4385] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 318.876573][ T4385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.890237][ T4385] usb 2-1: Product: syz [ 318.894516][ T4385] usb 2-1: Manufacturer: syz [ 318.899205][ T4385] usb 2-1: SerialNumber: syz [ 318.911959][ T4385] usb 2-1: selecting invalid altsetting 1 [ 318.917983][ T4385] usb 2-1: unit 6 not found! [ 319.252040][ T5129] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 319.271674][ T5131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 319.288769][ T5129] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 319.382150][ T4385] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 319.393397][ T4385] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 319.403216][ T4385] usb 2-1: USB disconnect, device number 120 [ 319.415125][ T2592] udevd[2592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 320.273247][ T36] audit: type=1400 audit(1788479565.546:631): avc: denied { map } for pid=5134 comm="syz.0.1699" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.296489][ T5133] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 320.314413][ T5133] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 320.521434][ T45] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 320.683795][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.691883][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 320.700620][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 320.713937][ T45] usb 1-1: language id specifier not provided by device, defaulting to English [ 320.724078][ T45] usb 1-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 320.733202][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.741227][ T45] usb 1-1: Product: syz [ 320.745446][ T45] usb 1-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 320.769894][ T45] usb 1-1: SerialNumber: syz [ 320.980920][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 320.987921][ T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 320.997463][ T45] usb 1-1: USB disconnect, device number 125 [ 321.010249][ T2592] udevd[2592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 321.349016][ T5142] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 321.365695][ T5142] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 322.499690][ T5149] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 322.517852][ T5149] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 323.757139][ T5158] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 323.777918][ T5158] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 324.014381][ T502] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 324.022273][ T4385] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 324.175423][ T502] usb 1-1: Using ep0 maxpacket: 32 [ 324.180675][ T4385] usb 2-1: Using ep0 maxpacket: 16 [ 324.187048][ T502] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 324.195255][ T502] usb 1-1: config 0 has no interface number 0 [ 324.201420][ T4385] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 324.209710][ T4385] usb 2-1: config 0 has no interface number 0 [ 324.215886][ T502] usb 1-1: config 0 interface 184 has no altsetting 0 [ 324.222725][ T4385] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 324.232810][ T4385] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 324.244140][ T502] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 324.253385][ T4385] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 324.262521][ T502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.270571][ T4385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.278633][ T502] usb 1-1: Product: syz [ 324.282794][ T502] usb 1-1: Manufacturer: syz [ 324.287433][ T4385] usb 2-1: Product: syz [ 324.291608][ T4385] usb 2-1: Manufacturer: syz [ 324.296248][ T502] usb 1-1: SerialNumber: syz [ 324.301202][ T4385] usb 2-1: SerialNumber: syz [ 324.306427][ T502] usb 1-1: config 0 descriptor?? [ 324.311886][ T4385] usb 2-1: config 0 descriptor?? [ 324.317380][ T502] smsc75xx v1.0.0 [ 324.321940][ T5162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.329215][ T5162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.538733][ T5162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.545973][ T5162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.755737][ T4385] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 324.765863][ T4385] asix 2-1:0.34: probe with driver asix failed with error -61 [ 324.918270][ T502] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 324.929158][ T502] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 325.111919][ T5168] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 325.127722][ T5168] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 325.314303][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.322980][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.350914][ T502] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 326.361946][ T502] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 326.371835][ T502] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 326.381371][ T502] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 326.390845][ T502] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 326.404492][ T502] usb 1-1: USB disconnect, device number 126 [ 326.561462][ T5179] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 326.577156][ T5179] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 326.798117][ T45] usb 2-1: USB disconnect, device number 121 [ 328.109434][ T5182] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 328.126772][ T5182] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 329.769339][ T5191] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 329.786359][ T5191] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 331.525750][ T5200] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 331.546047][ T5200] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 331.664260][ T5208] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 331.685528][ T5208] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 331.700304][ T5208] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 331.716869][ T5208] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 331.739324][ T5210] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 331.755510][ T5210] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 331.769020][ T5210] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 331.785103][ T5210] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 331.807486][ T5211] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 331.823474][ T502] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 331.825335][ T5211] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 331.844450][ T5211] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 331.860711][ T5211] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 331.993350][ T502] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 332.007013][ T502] usb 1-1: can't read configurations, error -71 [ 333.381473][ T5212] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 333.398293][ T5212] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 333.651600][ T64] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 333.802503][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 333.809104][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.817464][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.827591][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.836501][ T64] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 87, using maximum allowed: 30 [ 333.847223][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 87 [ 333.861503][ T64] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 333.870609][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.878646][ T64] usb 2-1: Product: syz [ 333.882861][ T64] usb 2-1: Manufacturer: syz [ 333.887453][ T64] usb 2-1: SerialNumber: syz [ 334.096295][ T36] audit: type=1400 audit(1788479579.292:632): avc: denied { execute } for pid=5215 comm="syz.1.1725" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.120850][ T64] usb 2-1: unknown interface protocol 0xa5, assuming v1 [ 334.127863][ T64] usb 2-1: cannot find UAC_HEADER [ 334.134759][ T64] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 334.144637][ T64] usb 2-1: USB disconnect, device number 122 [ 334.153341][ T2592] udevd[2592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 335.333478][ T5222] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 335.349719][ T5222] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 335.397848][ T5227] netlink: 'syz.1.1728': attribute type 9 has an invalid length. SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: repeatedly failed to execute the program proc=4 req=1685 state=1 status=67 (errno 9: Bad file descriptor) [ 337.387051][ T5229] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 337.406231][ T5229] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 337.432151][ T36] audit: type=1400 audit(1788479582.594:633): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1984]" dev="pipefs" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 337.624675][ T3937] bridge_slave_1: left allmulticast mode [ 337.630385][ T3937] bridge_slave_1: left promiscuous mode [ 337.647237][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.663495][ T3937] bridge_slave_0: left allmulticast mode [ 337.669185][ T3937] bridge_slave_0: left promiscuous mode [ 337.693136][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.826178][ T3937] tipc: Left network mode [ 337.831896][ T3937] veth1_macvtap: left promiscuous mode [ 337.843881][ T3937] veth0_vlan: left promiscuous mode [ 338.117535][ T3937] bridge_slave_1: left allmulticast mode [ 338.123212][ T3937] bridge_slave_1: left promiscuous mode [ 338.128902][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.136495][ T3937] bridge_slave_0: left allmulticast mode [ 338.142138][ T3937] bridge_slave_0: left promiscuous mode [ 338.147802][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.155558][ T3937] bridge_slave_1: left allmulticast mode [ 338.161244][ T3937] bridge_slave_1: left promiscuous mode [ 338.166922][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.174403][ T3937] bridge_slave_0: left allmulticast mode [ 338.180125][ T3937] bridge_slave_0: left promiscuous mode [ 338.185791][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.339134][ T3937] tipc: Left network mode [ 338.343750][ T3937] tipc: Disabling bearer [ 338.349152][ T3937] tipc: Left network mode [ 338.354909][ T3937] veth1_macvtap: left promiscuous mode [ 338.360594][ T3937] veth0_vlan: left promiscuous mode [ 338.366000][ T3937] veth1_macvtap: left promiscuous mode