last executing test programs: 31.510549288s ago: executing program 0 (id=1): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcda87000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x40) 31.372125111s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0xdddd0000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.316553213s ago: executing program 0 (id=9): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @multicast1}, 0x6, 0x0, 0x2}}, 0x2e) fcntl$dupfd(r0, 0x0, r0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) 31.315268273s ago: executing program 0 (id=10): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x7, 0x0, 0x626}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000280)='./file0/../file0\x00', 0x0) fchownat(r5, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x8, 0x9, 0x3}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f00000000c0)) 29.962299523s ago: executing program 3 (id=20): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x10880) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write$P9_RCREATE(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x100000001}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) listen(r5, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002440)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f0000002480)=ANY=[@ANYBLOB="94000000020601010000000000000000010000097000078008000a40fffffffc08000b4000000002080017400000053b1800018014000240fc0200000000004d797c468f3a24ec0108000840000000521800018014000240ff010000000000d84000000000000001080009400000010108000b40000000040c00028008000140e000000110000300686173683a69702c6d616b0025264b875de1ab3664d7eb29cae11356c73d9657c5b5acb5113497c2f2c0972238eb002fc0943e428c630fd98d51db98"], 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x0, r7, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) pwritev2(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x17) 29.858165116s ago: executing program 3 (id=21): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x101000, 0x91) unlinkat(r0, &(0x7f0000000080)='./cgroup\x00', 0x0) 29.792342918s ago: executing program 3 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='2', 0x49) mount$9p_unix(0x0, 0x0, 0x0, 0x100800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0xfffffffc, 0xfffffffe, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040080}, 0x240440e0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5833, 0x1000000000000008, 0xab9f, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x5, 0xcc78, 0x200001, 0x1, 0x5c], 0x8080000, 0x429d0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007e0000/0x2000)=nil, &(0x7f00008db000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008ae000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000dd000/0x4000)=nil, &(0x7f00005d0000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000ef000/0x3000)=nil, &(0x7f0000e67000/0x1000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1321, 0x4000, 0x3, 0x3cb}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000040)={0x9, 0x6, 0x4, 0x2, 0x5}) 29.733172099s ago: executing program 3 (id=23): signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x80010, 0xffffffffffffffff, 0x28f43000) timer_create(0x3, &(0x7f0000000280)={0x0, 0x17, 0x1}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xc0, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in=@local, 0x4e24, 0x0, 0x4e25, 0x0, 0x2, 0x20, 0x20, 0xc6}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}}, 0x0) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r2, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) socket(0x1e, 0x4, 0x4) 29.703678359s ago: executing program 0 (id=24): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)={0xffffffff, 0xa, 0x0, [{0xffffffff, 0xe297, 0x2, 0x2e, 0x4, 0x44, 0x1, '\x00', 0x3}, {0x100000000, 0xfffffffffffffff8, 0xfffffffffffffffd, 0xff, 0x9, 0x7, 0xa, '\x00', 0xa91}, {0x200, 0x9, 0x90, 0x3, 0x4, 0x0, 0xfe, '\x00', 0x62}, {0x0, 0xb, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x5, '\x00', 0xfffffffffffffffe}, {0x200, 0xda, 0x800, 0xb3, 0x6, 0x39, 0x5, '\x00', 0x6}, {0x1000, 0x0, 0x6, 0x8, 0x8, 0x4, 0x6, '\x00', 0x2}, {0x4, 0x401, 0x3, 0xb8, 0xa, 0x9, 0x8, '\x00', 0x1}, {0x6, 0x7, 0x6, 0x2, 0x2, 0x5, 0x9, '\x00', 0x5}, {0x3ff, 0x8, 0x79, 0x2, 0xf, 0x8, 0x4, '\x00', 0x7}, {0x7, 0x7, 0xffffffffffff0001, 0x1d, 0x4, 0xc0, 0x7, '\x00', 0xb}]}) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1108080, &(0x7f0000000400)={[{@xattr}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@favordynmods}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@none}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@clone_children}, {@none}], [{@dont_measure}, {@uid_lt={'uid<', r1}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/hwrng\x00'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/hwrng\x00'}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x4, 0x3, 0x5}, {0x6, 0x5, 0x9, 0x6}]}) move_mount(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', r0, &(0x7f00000005c0)='./file0\x00', 0x140) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000640)='silent\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x0, @none, 0x7, 0x1}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(r2, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/69, 0x45}, {&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000000980)=""/230, 0xe6}, {&(0x7f0000000a80)=""/252, 0xfc}, {&(0x7f0000000b80)=""/60, 0x3c}], 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000c80)='syz1\x00', 0x1ff) mount$bind(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x60, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000d80)) recvmsg$can_bcm(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/121, 0x79}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/48, 0x30}], 0x4, &(0x7f0000001f00)=""/223, 0xdf}, 0x2000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000002140)={r3, &(0x7f0000002040)='\x00', 0x40000, &(0x7f0000002080)={@align=0x9d2f, {0x1, 0x9, 0x4, 0x3}}, 0x8f, &(0x7f00000020c0), &(0x7f0000002100)}) recvmsg(r2, &(0x7f0000002580)={&(0x7f0000002180)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002200)=""/13, 0xd}, {&(0x7f0000002240)=""/95, 0x5f}, {&(0x7f00000022c0)=""/106, 0x6a}, {&(0x7f0000002340)=""/62, 0x3e}, {&(0x7f0000002380)=""/163, 0xa3}, {&(0x7f0000002440)=""/24, 0x18}], 0x6, &(0x7f0000002500)=""/107, 0x6b}, 0x40) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) ioctl$BLKRASET(r4, 0x1262, &(0x7f00000025c0)=0xf) syz_pidfd_open(0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000002600)={0x79, 0x0, 0xc51}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000026c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2e6}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004081}, 0x1000) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f00000027c0)={0xc}) openat(r0, &(0x7f0000002800)='./file0\x00', 0x10000, 0x3) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 29.655044641s ago: executing program 3 (id=25): prlimit64(0x0, 0x8, &(0x7f0000000600)={0x9, 0x20000008e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) sendfile(r3, r3, 0x0, 0x1000000201005) 29.599144082s ago: executing program 0 (id=26): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000340)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x175, 0x0, 0x3}]}) (async, rerun: 32) r6 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) (async) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x70bd23}, 0x10}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) (async) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) (async, rerun: 32) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000240)) (rerun: 32) 29.513527724s ago: executing program 32 (id=26): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000340)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x175, 0x0, 0x3}]}) (async, rerun: 32) r6 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) (async) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x70bd23}, 0x10}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) (async) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) (async, rerun: 32) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000240)) (rerun: 32) 28.80292506s ago: executing program 3 (id=31): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x4) shutdown(r3, 0x1) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='\'#&$-*}\x85+\x00', 0x80800, &(0x7f0000000040)={@align=0x46, {0x3, 0x1b5, 0xfff, 0x4}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x79}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c2eddd9", @ANYRES16=0x0, @ANYBLOB="04032abd7000fbdbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000600000008000b0003000000060016000800000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b003307000006001600080000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b001a340000060016000700000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0006000000060016000200000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000500000006001600000100000500120000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000300), 0x43, 0x4000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(r5, &(0x7f0000000440)='./file0\x00', 0xbf) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x40) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x40) readv(r6, &(0x7f0000001740)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1) (async) readv(r6, &(0x7f0000001740)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000200), 0x5ad841, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cache=']) (async) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cache=']) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 19.732394834s ago: executing program 1 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r2 = getpid() r3 = getpid() kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) connect$unix(r0, &(0x7f0000003600)=@abs={0x1, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_connect$uac1(0x4, 0xb1, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x6, 0x20, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x6, 0x7, 0x28, 0xf}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x7f, 0x2, {0x7, 0x25, 0x1, 0xc, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x6, 0x100d}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x2, "72a7e02e214b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0xa, 0x5, "72f9a93a"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x5, "c1474e", '0$'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x6, 0xa, {0x7, 0x25, 0x1, 0xc, 0x9, 0x7}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0x5c, 0x7, 0x20, 0x5}, 0x71, &(0x7f00000001c0)={0x5, 0xf, 0x71, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xb, 0x5, 0x6, 0xffff, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x7, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7, 0x7800, 0xfffc, [0x0]}, @generic={0x26, 0x10, 0x2, "3eaee61b9d63d37400c00ae8d85ec174e306c67e2cda978cdd143ac80c6a21da8c8fad"}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x0, 0x0, 0x0, [0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "1e4f5eba36dbb423ae03acd2c2d072a0"}]}, 0x2, [{0x74, &(0x7f0000000240)=@string={0x74, 0x3, "9754eb4029d8c3f90b3becb9769ff06f6ec217185dd4898fc962b49c01ddcccdb4171c5dd1d4bf52f985057f237e2362e2505bf874a2a826cdd66fa18fd436b83fbf9a54c9813f010ff77f334c21062899a4e2e410d12bbc69f4222b4381750f82edaf94e904f713f03886c3b3fe774b0f52"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001340)={0xfffffffffffffcdb, [], 0xb, "6650fecefab7ac"}) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) utimensat(r0, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f00000033c0)={{r4, r5/1000+10000}, {r6, r7/1000+10000}}, 0x100) write(r0, &(0x7f0000000080)='4', 0x1) syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) 19.159328507s ago: executing program 1 (id=76): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 17.384091718s ago: executing program 1 (id=84): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r2 = getpid() r3 = getpid() kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) connect$unix(r0, &(0x7f0000003600)=@abs={0x1, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_connect$uac1(0x4, 0xb1, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x6, 0x20, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x6, 0x7, 0x28, 0xf}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x7f, 0x2, {0x7, 0x25, 0x1, 0xc, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x6, 0x100d}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x2, "72a7e02e214b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0xa, 0x5, "72f9a93a"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x5, "c1474e", '0$'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x6, 0xa, {0x7, 0x25, 0x1, 0xc, 0x9, 0x7}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0x5c, 0x7, 0x20, 0x5}, 0x71, &(0x7f00000001c0)={0x5, 0xf, 0x71, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xb, 0x5, 0x6, 0xffff, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x7, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7, 0x7800, 0xfffc, [0x0]}, @generic={0x26, 0x10, 0x2, "3eaee61b9d63d37400c00ae8d85ec174e306c67e2cda978cdd143ac80c6a21da8c8fad"}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x0, 0x0, 0x0, [0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "1e4f5eba36dbb423ae03acd2c2d072a0"}]}, 0x2, [{0x74, &(0x7f0000000240)=@string={0x74, 0x3, "9754eb4029d8c3f90b3becb9769ff06f6ec217185dd4898fc962b49c01ddcccdb4171c5dd1d4bf52f985057f237e2362e2505bf874a2a826cdd66fa18fd436b83fbf9a54c9813f010ff77f334c21062899a4e2e410d12bbc69f4222b4381750f82edaf94e904f713f03886c3b3fe774b0f52"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001340)={0xfffffffffffffcdb, [], 0xb, "6650fecefab7ac"}) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) utimensat(r0, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f00000033c0)={{r4, r5/1000+10000}, {r6, r7/1000+10000}}, 0x100) write(r0, &(0x7f0000000080)='4', 0x1) syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) 16.847179479s ago: executing program 1 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)) r4 = openat(r3, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = mmap$IORING_OFF_PBUF_RING(0x0, 0x2, 0x2000000, 0x1010, r3, 0x875a8662) syz_ublk_add_dev(r4, 0x0, r6, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x4) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x8, 0xc3, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x2, 0x0, 0x3, 0xfffffffc, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$KVM_RUN(r7, 0xae80, 0x0) 16.772181651s ago: executing program 1 (id=89): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x1bfda74f9957307a, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) lseek(r2, 0xffffffffffffffff, 0x0) mknodat$loop(r0, &(0x7f0000000480)='./proc\x00', 0x8, 0x1) write(r2, &(0x7f0000000180)="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", 0x1a2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16.769399161s ago: executing program 1 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl(0xffffffffffffffff, 0x2c4d, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x21, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146e00000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, 0x40}, [@tmpl={0x104, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x2, 0x0}, 0xfffffffc, 0x32}, 0x0, @in6=@dev, 0x3, 0x0, 0x0, 0x7c}, {{@in6=@loopback, 0x1, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x1000, 0x2, 0x0, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x9, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x20004000) 13.573983163s ago: executing program 33 (id=31): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x4) shutdown(r3, 0x1) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='\'#&$-*}\x85+\x00', 0x80800, &(0x7f0000000040)={@align=0x46, {0x3, 0x1b5, 0xfff, 0x4}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x79}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c2eddd9", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000300), 0x43, 0x4000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(r5, &(0x7f0000000440)='./file0\x00', 0xbf) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x40) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x40) readv(r6, &(0x7f0000001740)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1) (async) readv(r6, &(0x7f0000001740)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000200), 0x5ad841, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cache=']) (async) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cache=']) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 11.732452855s ago: executing program 2 (id=119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x69, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x80, 0xb7ab2a91efe40429, 0x80, 0x7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@loopback, @broadcast, 0x0}, &(0x7f0000000380)=0xc) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x488d, 0x4) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f00000004c0)='q', 0x5e0, 0x881, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x87, 0x6, @broadcast}, 0x14) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'wg1\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x38, r3}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x78, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r8) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000001580)={&(0x7f0000000580)=""/4096, 0x1101000, 0x1000, 0xc030, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x7, 0x0, 0xffff71b0}, 0x1c) r11 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0x0) ioctl$RTC_SET_TIME(r11, 0x4024700a, &(0x7f0000000140)={0x34, 0x1a, 0x13, 0x15, 0x6, 0xfc6, 0x3, 0x122, 0x1}) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}]}]}, 0x20}, {&(0x7f0000000180)={0x10, 0x10, 0x100, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0xc010}, 0x40080) 11.712912915s ago: executing program 2 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf0ef53a4dbd5535cc00", @ANYRES32=0x0, @ANYBLOB="0c009900090000002b000000"], 0x28}, 0x1, 0x0, 0x0, 0x20045040}, 0x2401a810) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000ffdbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="0800270500000005001801020000000400b8000800b700d40000000800b70018000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0xc000) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000003c0)={&(0x7f0000000300)='\x02\x02\x00', &(0x7f0000000380)='\x00', 0x8}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a000100030002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) (async) epoll_create1(0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0xfffffffe, 0x930}, 0x10) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@flushpolicy={0x1c, 0x1d, 0xc263e8d1d5446edb, 0x70bd2c, 0x25dfdbff, "", [@policy_type={0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000540)={0x1, "741c59"}, 0x6) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)={0x54, 0x20, 0x15, 0x0, 0x25dfdbfc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x37, 0x10, 0x0, 0x1, [@generic="117b1f9495dae466886be4b969d602b4719af7605bda652983de3614a778e5e3007c75e2b487e44cb64586613422bf74782b4e"]}]}, 0x54}], 0x1, 0x0, 0x0, 0x4c}, 0x800) (async) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x43, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="fbd0ae2a9ce9462234a9a5d07801bdcb13358db3b18c06bc44ab141b7d9ae2da3008cf5a97e0702981e7e3fd01c92a4a7640ccd0c88ab628c7ee3965efddcf7b9601c2514bcc78a3c89c0aa078cfe9bd7ff6f19d56f5c5c17938cbf04d35518c7ae93de22d4a289c472a361c3f6b53f7d93160bb09d9eaccbedbc5415436c5c18cf16ba7a7fb5eda0b819ab8a8a2ec01d1e5cfe0fcf294860a2c2600"/168], 0x20}, 0x1, 0x0, 0x0, 0x42040}, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x129061, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2e) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) write$input_event(r5, &(0x7f0000000340)={{0x0, 0x2710}, 0x12, 0x6, 0x3}, 0x18) recvmmsg(r6, &(0x7f0000001140), 0x0, 0x0, 0x0) (async) sendmsg$sock(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff0014970000000000000010000200766574682b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 11.604575748s ago: executing program 2 (id=122): r0 = epoll_create(0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd6c6, 0x7, r1}) 11.603612578s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) (async) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r2, r8, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) (async, rerun: 32) write(r0, &(0x7f0000000000)='1', 0x1) (rerun: 32) 10.6213454s ago: executing program 2 (id=126): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r2 = getpid() r3 = getpid() kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) connect$unix(r0, &(0x7f0000003600)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001340)={0xfffffffffffffcdb, [], 0xb, "6650fecefab7ac"}) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) utimensat(r0, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f00000033c0)={{r4, r5/1000+10000}, {r6, r7/1000+10000}}, 0x100) write(r0, &(0x7f0000000080)='4', 0x1) syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.500615228s ago: executing program 2 (id=138): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = inotify_init() r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) (async) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x940000fe) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x10000, 0x80000100008b}, 0x0) (async) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) (async) openat(r7, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) (async) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x20000412) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) (async, rerun: 64) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x47, &(0x7f0000000200)=0x7) (async) fcntl$setpipe(r9, 0x407, 0x2) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f00000000c0)={0x1, 0x1}) 4.43944578s ago: executing program 34 (id=138): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = inotify_init() r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) (async) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x940000fe) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x10000, 0x80000100008b}, 0x0) (async) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) (async) openat(r7, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) (async) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x20000412) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) (async, rerun: 64) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x47, &(0x7f0000000200)=0x7) (async) fcntl$setpipe(r9, 0x407, 0x2) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f00000000c0)={0x1, 0x1}) 3.830410773s ago: executing program 6 (id=146): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r2 = getpid() r3 = getpid() kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) connect$unix(r0, &(0x7f0000003600)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001340)={0xfffffffffffffcdb, [], 0xb, "6650fecefab7ac"}) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) utimensat(r0, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f00000033c0)={{r4, r5/1000+10000}, {r6, r7/1000+10000}}, 0x100) write(r0, &(0x7f0000000080)='4', 0x1) syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.276492906s ago: executing program 4 (id=143): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) r0 = socket$inet6(0x10, 0x3, 0xf) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x4, 0x7, 0x34, 0xffffff95}, {0x6, 0x6, 0x2, 0x7ff}, {0xcb, 0x1, 0x9, 0x8}, {0x6, 0x5, 0x2, 0x8}, {0x4, 0x6, 0x0, 0xfffffff7}]}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x5393, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r3, 0x0, r4, 0x0, 0x8000, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r5, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000) 3.276169016s ago: executing program 5 (id=144): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000080)='./mnt\x00', 0x100) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt/events/cdns3/cdns3_ep0_queue/format\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d3970323030302c00a01aeaf905988a49e3821719ed8941ad938438529306429a68b4b72823fd2e5ee35ba31819be642295458a3abfcd09dd73724bcf4b6657f02c66ab7bc05c26c6ca1fd163f4aa64b55a1268e576e8a63436a648c85a4e75a19dfb65c775acc6f269"]) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0xd, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) futex_waitv(&(0x7f0000000440)=[{0x6bfe, 0x0, 0x82}, {0x5, &(0x7f00000002c0)=0x6, 0x82}, {0x0, &(0x7f0000000300)=0x4, 0x80}, {0x4, &(0x7f0000000340), 0x2}, {0x7fffffffffffffff, &(0x7f0000000380)=0x6, 0x2}, {0x4, &(0x7f00000003c0)=0xffffffff, 0x82}], 0x6, 0x0, 0x0, 0x1) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) r10 = geteuid() mount$overlay(0x0, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', &(0x7f0000000240), 0x1308040, &(0x7f0000000600)={[], [{@obj_type={'obj_type', 0x3d, 'tracefs\x00\n\x95\xe2\xf4\xe8\f\xc1\xf3(\xec9\xe9\xbfWQ\x13\xaa\x86\x98_@\xc3\xfc\xf9\xfd\x0f\x1f\x8b\x90\x1a\x10\xe0\xc9\xf9R\xbd\r\xd2\xc9\x04UPd\xbc\xe6\xa6~\x8d\xa7\xc7\\]a\xe4tuY\x13\xc3\xc9\x9d-oQ\x9b\xf0\x18\xd3\xa6\x04M\xedf\xa68a\x84_\x03\xd5gb\xafJ|\x82\x02\xff\a\x00\x00\x00\x00\x00\x00x\xa6\x16j\x15G%5\x11\x8d\x97\xdb:\xf1\x80)Ck\xd1\x94\xa2\xb5\xd2\x14\xb6\a(\x00\xc6\x93U\xbd\x13nF\xfe\x9d\xda\x8c\xae\a\xcd\xa2\x1f\x9d\xe6i\xd1PNu\xe30\xefv\x92\xd4\x88\'\x8c,~\xc1Kr(\x17\xee\xecZ4\xe3\x1en\x19!:gw8\xf2P\xb5!\xefAxT\x02\xa4m\xbe\xa3W\xf4\xdd\x16\xd9\xdb~\xfe\xa4i\xa7\\'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_lt}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@permit_directio}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role={'obj_role', 0x3d, '/dev/kvm\x00'}}, {@uid_gt={'uid>', r10}}]}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r7, 0x8008ae9d, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) write(r0, &(0x7f0000000040)='\a', 0x1) 2.800437507s ago: executing program 4 (id=145): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @mcast1, @empty, 0x0, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x81, 0x8b8, 0xff42, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x8000, 0x8, 0x1}}) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) mkdir(&(0x7f0000000100)='./file0\x00', 0x197) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ftruncate(r4, 0x4) sendfile(r0, r4, 0x0, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x7, 0x0, 0x406, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa8, 0x2, 0x0, 0x5, 0xffffffffffffffff, 0x4}, {0x2, 0x3, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0}, 0xc4) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d40)=ANY=[@ANYBLOB], 0xb8}}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000008517cf581ce0e5d71aba96a260e3000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000002b883ca39201640400000000020000"], 0xb8}}, 0x2c000010) 2.799277767s ago: executing program 5 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000001700)={0x2c, &(0x7f00000011c0)={0x40, 0x4, 0x2, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = dup(r1) (async) r4 = fsopen(&(0x7f0000000080)='9p\x00', 0x1) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x4283cafe) r7 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) write$cgroup_int(r5, &(0x7f0000000000), 0x12) (async) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) (async) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r12, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) syz_fuse_handle_req(r12, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x4, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x5, 0x800001, 0x8, 0x81, 0xffffffff, 0x0, 0x7, 0xc000, 0x0, 0x0, 0xee01, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r12, &(0x7f0000000380)={0x50, 0x0, r13, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) (async) syz_fuse_handle_req(r12, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x2, 0x0, 0x100, 0xfffffffe, {0x1, 0xfffffffffffffff1, 0x9, 0x8, 0x100000000, 0xffffffff80000001, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r12, &(0x7f000000a280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0xf, 0x1, 0xc15, 0x20000, 0x0, 0x0, 0xa000, 0x1, r14, 0x0, 0x453}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x290808, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffff7fffffff}}], [{@uid_eq={'uid', 0x3d, r11}}, {@uid_lt={'uid<', r14}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '-W'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}]}}) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file0\x00', 0xffffffffffffffff) 2.179447211s ago: executing program 4 (id=148): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.179104301s ago: executing program 5 (id=149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) fsmount(r0, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0xaa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x3, 0xb}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x1, 0x0) write$cgroup_pid(r8, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) splice(r6, 0x0, r5, 0x0, 0x20000000000002, 0xa) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) read$FUSE(r1, &(0x7f00000013c0)={0x2020}, 0x2020) 1.420581488s ago: executing program 4 (id=150): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000040)={0x0, 0x81, 0x51b, 0x2, 0xfffffffa}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.420430068s ago: executing program 35 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl(0xffffffffffffffff, 0x2c4d, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x21, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146e00000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, 0x40}, [@tmpl={0x104, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x2, 0x0}, 0xfffffffc, 0x32}, 0x0, @in6=@dev, 0x3, 0x0, 0x0, 0x7c}, {{@in6=@loopback, 0x1, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x1000, 0x2, 0x0, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x9, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x20004000) 1.387434179s ago: executing program 5 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x100000000000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x2a, 0x0, 0x0, 0x0, r0}]) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 450.3702ms ago: executing program 4 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r2, r2, 0x0) setregid(0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14d87e, 0x0) unshare(0x22020600) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x82440, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) fstat(r7, &(0x7f00000002c0)) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7fffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0000800fbef86c4e7b5d59729262d99094db8ebe602000000cd51294d0300682d0d0a3faaa47f3eb22f", @ANYRES16=r9, @ANYBLOB="00042cbd7000fddbdf25090000004c000380080003000400000014000600fe8000000000000000000000000000aa08000500ac14141b060004000700000008000100010000001400020076657468305f746f5f6261746164760040000180060002003a000000060004004e210000080009005f0000001400030000000000000000000000000000000001060001000a0000000600020033000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8081) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x10000, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x48084) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0xf4}) 392.374521ms ago: executing program 5 (id=154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "a75a2231db6c52c3", "193c3de020ef104da58526580a6793b0", "39cada6a", "eca1a97d111a89ff"}, 0x28) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000040), 0x4) r1 = socket$netlink(0x10, 0x3, 0xb) sendto(r0, &(0x7f0000000080)="b5817f18320a73128a5b659c4642a85a63d5913aa87db2ca3a57e06073c9cfea7fde751c5b225b84b09cbb9737b47ec545498e9eb427623a9cec45bd71525ca503f72b71256a9c8a871c6133698625cdd773fd356d77a5e24679a4a79321d5d74464290f8ad4dbe4adb75b515ee22f2d956853b750b6d8a2d51adb4a883e6e4dc671532a258817a49603ff3ec2198701ed9000538435ba2f37007e", 0x9b, 0x44040, &(0x7f0000000140)=@llc={0x1a, 0x303, 0x1, 0x5, 0x5, 0x1, @multicast}, 0x80) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x76, @ipv4={'\x00', '\xff\xff', @remote}, 0x2123}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000200)={0x7, 'geneve1\x00', {0x1}, 0x5}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x57}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x4000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x3, 0x2, 0x2, 0x1, 0x0, 0x2}, &(0x7f0000000480)=0x20) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000004c0)={0x6, 0xffffffffffffffff}) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000500)={r1, 0x0, 0x10001, 0xffffffffffffffff, 0xc83d, 0x2}) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000000580)=""/94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x6003, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) ioctl$KVM_ASSIGN_SET_MSIX_NR(r7, 0x4008ae73, &(0x7f0000000640)={0x0, 0x6}) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40814) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000005, 0x40010, r5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', 0x2000}) r9 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) setns(r9, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000a40)={0x2, 0x2, 0x0, 0x3, 0x9913, 0x0, 0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000c40)=0xe8) mount$fuse(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x400, &(0x7f0000000cc0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}], [{@measure}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfshat={'smackfshat', 0x3d, ',#%@'}}, {@smackfshat={'smackfshat', 0x3d, '[\\'}}]}}) 8.485ms ago: executing program 4 (id=155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8003, @local, 0x7}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) listen(r2, 0xfffffffd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x7ffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = dup(r8) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f00000001c0)={'macsec0\x00', 0xfff}) ptrace$pokeuser(0x6, r7, 0x358, 0xfffffffffffffffe) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) dup(r9) 0s ago: executing program 5 (id=156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x19, {0x19, 0x22, "6b961cb28f5720dd6bf636589720474f653f3d71d3782f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x0000000000000000,\x00']) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 21.036016][ T36] audit: type=1400 audit(1791048112.429:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.037167][ T286] cgroup: Unknown subsys name 'net' [ 21.058729][ T36] audit: type=1400 audit(1791048112.429:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.085946][ T36] audit: type=1400 audit(1791048112.459:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.086111][ T286] cgroup: Unknown subsys name 'devices' [ 21.218841][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.224445][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.337578][ T36] audit: type=1400 audit(1791048112.739:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.360741][ T36] audit: type=1400 audit(1791048112.739:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.385486][ T36] audit: type=1400 audit(1791048112.739:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.414212][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.422979][ T36] audit: type=1400 audit(1791048112.819:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.448394][ T36] audit: type=1400 audit(1791048112.819:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.469512][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.474093][ T36] audit: type=1400 audit(1791048112.859:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.508099][ T36] audit: type=1400 audit(1791048112.859:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.342406][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.349509][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.356661][ T296] bridge_slave_0: entered allmulticast mode [ 22.362894][ T296] bridge_slave_0: entered promiscuous mode [ 22.372014][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.379094][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.386135][ T296] bridge_slave_1: entered allmulticast mode [ 22.392415][ T296] bridge_slave_1: entered promiscuous mode [ 22.407708][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.414746][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.421855][ T293] bridge_slave_0: entered allmulticast mode [ 22.428118][ T293] bridge_slave_0: entered promiscuous mode [ 22.434455][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.441517][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.448586][ T293] bridge_slave_1: entered allmulticast mode [ 22.454857][ T293] bridge_slave_1: entered promiscuous mode [ 22.477863][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.484904][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.491985][ T294] bridge_slave_0: entered allmulticast mode [ 22.498284][ T294] bridge_slave_0: entered promiscuous mode [ 22.510301][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.517385][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.524444][ T294] bridge_slave_1: entered allmulticast mode [ 22.530709][ T294] bridge_slave_1: entered promiscuous mode [ 22.556345][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.563439][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.570529][ T295] bridge_slave_0: entered allmulticast mode [ 22.576686][ T295] bridge_slave_0: entered promiscuous mode [ 22.585756][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.592818][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.599922][ T295] bridge_slave_1: entered allmulticast mode [ 22.606087][ T295] bridge_slave_1: entered promiscuous mode [ 22.732679][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.739754][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.747046][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.754065][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.767928][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.774967][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.782232][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.789272][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.807333][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.814382][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.821690][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.828745][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.855314][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.862374][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.869654][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.876677][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.900911][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.908389][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.916033][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.923585][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.931013][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.938428][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.945654][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.952907][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.969947][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.976969][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.984532][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.991578][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.014202][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.021269][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.029832][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.036861][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.058513][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.065547][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.073126][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.080167][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.099944][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.107021][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.114766][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.121811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.135429][ T296] veth0_vlan: entered promiscuous mode [ 23.162637][ T293] veth0_vlan: entered promiscuous mode [ 23.183997][ T296] veth1_macvtap: entered promiscuous mode [ 23.191913][ T294] veth0_vlan: entered promiscuous mode [ 23.203253][ T293] veth1_macvtap: entered promiscuous mode [ 23.213024][ T295] veth0_vlan: entered promiscuous mode [ 23.234367][ T294] veth1_macvtap: entered promiscuous mode [ 23.252255][ T295] veth1_macvtap: entered promiscuous mode [ 23.272970][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.334412][ T318] rust_binder: Write failure EINVAL in pid:4 [ 23.424261][ T325] size and base must be multiples of 4 kiB [ 23.442432][ T325] CPU: 1 UID: 0 PID: 325 Comm: syz.2.6 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 23.442464][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 23.442484][ T325] Call Trace: [ 23.442490][ T325] [ 23.442498][ T325] __dump_stack+0x21/0x30 [ 23.442538][ T325] dump_stack_lvl+0x140/0x1c0 [ 23.442560][ T325] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.442589][ T325] dump_stack+0x19/0x20 [ 23.442615][ T325] mtrr_add+0xd8/0x100 [ 23.442637][ T325] mtrr_ioctl+0xbd8/0x1170 [ 23.442657][ T325] ? do_futex+0x37d/0x510 [ 23.442680][ T325] ? __cfi_mtrr_ioctl+0x10/0x10 [ 23.442702][ T325] ? __fget_files+0x2bc/0x330 [ 23.442724][ T325] ? __cfi_mtrr_ioctl+0x10/0x10 [ 23.442744][ T325] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 23.442768][ T325] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 23.442790][ T325] __se_sys_ioctl+0x126/0x1b0 [ 23.442815][ T325] __x64_sys_ioctl+0x7f/0xa0 [ 23.442839][ T325] x64_sys_call+0x1878/0x2ee0 [ 23.442858][ T325] do_syscall_64+0x57/0xf0 [ 23.442878][ T325] ? clear_bhb_loop+0x50/0xa0 [ 23.442904][ T325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.442928][ T325] RIP: 0033:0x7fef9cf9e159 [ 23.442953][ T325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.442971][ T325] RSP: 002b:00007fef9de85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 23.443000][ T325] RAX: ffffffffffffffda RBX: 00007fef9d225fa0 RCX: 00007fef9cf9e159 [ 23.443015][ T325] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 23.443029][ T325] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 23.443042][ T325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.443056][ T325] R13: 00007fef9d226038 R14: 00007fef9d225fa0 R15: 00007ffff305c678 [ 23.443074][ T325] [ 23.667768][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.717072][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.827110][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 23.833494][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.844466][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.854840][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 23.863990][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.872987][ T9] usb 4-1: config 0 descriptor?? [ 23.877998][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 23.884066][ T9] hub 4-1:0.0: USB hub found [ 23.889477][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.900408][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.910194][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 23.923421][ T64] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 23.934765][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.944392][ T64] usb 1-1: config 0 descriptor?? [ 23.972587][ T354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.084945][ T9] hub 4-1:0.0: 19 ports detected [ 24.097942][ T9] hub 4-1:0.0: insufficient power available to use all downstream ports [ 24.284754][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 24.291209][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 24.307840][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 24.313798][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 24.347190][ T9] usb 4-1: USB disconnect, device number 2 [ 24.553904][ T335] ======================================================= [ 24.553904][ T335] WARNING: The mand mount option has been deprecated and [ 24.553904][ T335] and is ignored by this kernel. Remove the mand [ 24.553904][ T335] option from the mount to silence this warning. [ 24.553904][ T335] ======================================================= [ 24.591774][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 24.598781][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 24.607702][ T64] usb 1-1: USB disconnect, device number 2 [ 24.852565][ T378] netlink: 5 bytes leftover after parsing attributes in process `syz.3.20'. [ 24.867234][ T310] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.038273][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.055747][ T310] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 25.065210][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.073668][ T310] usb 3-1: Product: syz [ 25.078367][ T310] usb 3-1: Manufacturer: syz [ 25.082979][ T310] usb 3-1: SerialNumber: syz [ 25.109383][ T310] usb 3-1: config 0 descriptor?? [ 25.121962][ T310] asix 3-1:0.0: probe with driver asix failed with error -22 [ 25.209838][ T13] bridge_slave_1: left allmulticast mode [ 25.216286][ T13] bridge_slave_1: left promiscuous mode [ 25.226806][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.246069][ T13] bridge_slave_0: left allmulticast mode [ 25.261908][ T13] bridge_slave_0: left promiscuous mode [ 25.279442][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.324079][ T437] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 25.352951][ T31] usb 3-1: USB disconnect, device number 2 [ 25.474988][ T13] veth1_macvtap: left promiscuous mode [ 25.480807][ T13] veth0_vlan: left promiscuous mode [ 25.550669][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.560386][ T440] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.573262][ T440] bridge_slave_0: entered allmulticast mode [ 25.579619][ T440] bridge_slave_0: entered promiscuous mode [ 25.586293][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.593434][ T440] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.600642][ T440] bridge_slave_1: entered allmulticast mode [ 25.606981][ T440] bridge_slave_1: entered promiscuous mode [ 25.665611][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.672686][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.679982][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.687026][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.713000][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.720664][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.731554][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.738619][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.748108][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.755148][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.788288][ T440] veth0_vlan: entered promiscuous mode [ 25.801001][ T440] veth1_macvtap: entered promiscuous mode [ 25.836839][ T445] syzkaller0: entered promiscuous mode [ 25.842936][ T445] syzkaller0: entered allmulticast mode [ 25.849296][ T445] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 25.988747][ T461] capability: warning: `syz.4.30' uses deprecated v2 capabilities in a way that may be insecure [ 26.021953][ T471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.047318][ T36] kauditd_printk_skb: 114 callbacks suppressed [ 26.047332][ T36] audit: type=1400 audit(1791048117.449:188): avc: denied { name_bind } for pid=460 comm="syz.4.30" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 26.074597][ T472] SELinux: failed to load policy [ 26.086517][ T466] 9p: Unknown Cache mode or invalid value ebugfs [ 26.095243][ T36] audit: type=1400 audit(1791048117.449:189): avc: denied { setopt } for pid=460 comm="syz.4.30" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.135676][ T36] audit: type=1400 audit(1791048117.449:190): avc: denied { connect } for pid=460 comm="syz.4.30" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.161477][ T36] audit: type=1400 audit(1791048117.449:191): avc: denied { bpf } for pid=460 comm="syz.4.30" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.182303][ T36] audit: type=1400 audit(1791048117.459:192): avc: denied { read } for pid=460 comm="syz.4.30" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.208132][ T36] audit: type=1400 audit(1791048117.469:193): avc: denied { load_policy } for pid=460 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 26.228666][ T36] audit: type=1400 audit(1791048117.479:194): avc: denied { ioctl } for pid=464 comm="syz.3.31" path="socket:[4412]" dev="sockfs" ino=4412 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.263397][ T477] Zero length message leads to an empty skb [ 26.283945][ T36] audit: type=1400 audit(1791048117.679:195): avc: denied { ioctl } for pid=476 comm="syz.4.32" path="socket:[4559]" dev="sockfs" ino=4559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.332634][ T478] kvm: user requested TSC rate below hardware speed [ 26.340087][ T477] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 26.579766][ T36] audit: type=1400 audit(1791048117.979:196): avc: denied { execute } for pid=489 comm="syz.4.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.626124][ T495] fuse: Bad value for 'rootmode' [ 26.634350][ T496] 9pnet_fd: Insufficient options for proto=fd [ 26.726217][ T36] audit: type=1400 audit(1791048118.119:197): avc: denied { read write } for pid=500 comm="syz.4.38" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 26.728149][ T501] FAULT_INJECTION: forcing a failure. [ 26.728149][ T501] name failslab, interval 1, probability 0, space 0, times 0 [ 26.762300][ T501] CPU: 1 UID: 0 PID: 501 Comm: syz.4.38 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 26.762330][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.762342][ T501] Call Trace: [ 26.762349][ T501] [ 26.762356][ T501] __dump_stack+0x21/0x30 [ 26.762386][ T501] dump_stack_lvl+0x140/0x1c0 [ 26.762401][ T501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.762416][ T501] ? kasan_save_track+0x4f/0x80 [ 26.762428][ T501] ? kasan_save_track+0x3e/0x80 [ 26.762439][ T501] ? kasan_save_alloc_info+0x3a/0x50 [ 26.762449][ T501] dump_stack+0x19/0x20 [ 26.762463][ T501] should_fail_ex+0x3c2/0x510 [ 26.762476][ T501] should_failslab+0xac/0x100 [ 26.762492][ T501] __kmalloc_node_noprof+0x69/0x500 [ 26.762504][ T501] ? mempool_init_node+0x13d/0x5c0 [ 26.762520][ T501] ? xas_start+0x317/0x3e0 [ 26.762532][ T501] mempool_init_node+0x13d/0x5c0 [ 26.762547][ T501] ? __cfi_mempool_free_slab+0x10/0x10 [ 26.762557][ T501] ? __cfi_mempool_free_slab+0x10/0x10 [ 26.762566][ T501] ? __cfi_mempool_alloc_slab+0x10/0x10 [ 26.762581][ T501] mempool_init_noprof+0x41/0x60 [ 26.762596][ T501] bioset_init+0x296/0x980 [ 26.762607][ T501] ? __cfi_bioset_init+0x10/0x10 [ 26.762618][ T501] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 26.762629][ T501] ? __alloc_disk_node+0x6b/0x530 [ 26.762642][ T501] __alloc_disk_node+0x89/0x530 [ 26.762654][ T501] __blk_alloc_disk+0x103/0x1c0 [ 26.762666][ T501] ? __cfi___blk_alloc_disk+0x10/0x10 [ 26.762680][ T501] ? init_srcu_struct_fields+0x74f/0xac0 [ 26.762692][ T501] dm_create+0x4ba/0xf10 [ 26.762708][ T501] dev_create+0x1f8/0x400 [ 26.762719][ T501] ? __cfi_dev_create+0x10/0x10 [ 26.762730][ T501] ? __cfi_dev_create+0x10/0x10 [ 26.762740][ T501] ? __cfi_dev_create+0x10/0x10 [ 26.762750][ T501] ? __kasan_check_write+0x18/0x20 [ 26.762761][ T501] ? __cfi_dev_create+0x10/0x10 [ 26.762771][ T501] dm_ctl_ioctl+0x8f3/0xde0 [ 26.762782][ T501] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 26.762802][ T501] ? xfd_validate_state+0x68/0x140 [ 26.762827][ T501] ? bpf_lsm_file_ioctl+0xd/0x20 [ 26.762851][ T501] ? security_file_ioctl+0x3e/0x110 [ 26.762871][ T501] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 26.762888][ T501] __se_sys_ioctl+0x126/0x1b0 [ 26.762902][ T501] __x64_sys_ioctl+0x7f/0xa0 [ 26.762915][ T501] x64_sys_call+0x1878/0x2ee0 [ 26.762929][ T501] do_syscall_64+0x57/0xf0 [ 26.762948][ T501] ? clear_bhb_loop+0x50/0xa0 [ 26.762973][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.763004][ T501] RIP: 0033:0x7f9640f9e159 [ 26.763017][ T501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.763026][ T501] RSP: 002b:00007f9641dc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.763039][ T501] RAX: ffffffffffffffda RBX: 00007f9641225fa0 RCX: 00007f9640f9e159 [ 26.763047][ T501] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 26.763054][ T501] RBP: 00007f964103506b R08: 0000000000000000 R09: 0000000000000000 [ 26.763061][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.763068][ T501] R13: 00007f9641226038 R14: 00007f9641225fa0 R15: 00007ffc3592deb8 [ 26.763076][ T501] [ 27.094916][ T504] fuse: Unknown parameter 'r' [ 27.357091][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.373399][ T516] batadv_slave_1: entered promiscuous mode [ 27.379662][ T516] batadv_slave_1: left promiscuous mode [ 27.497229][ T64] usb 5-1: device descriptor read/64, error -71 [ 27.557090][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.707056][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 27.713442][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.721899][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.733102][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.742090][ T64] usb 5-1: device descriptor read/64, error -71 [ 27.749894][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 27.759061][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.767233][ T10] usb 2-1: Product: syz [ 27.771399][ T10] usb 2-1: Manufacturer: syz [ 27.775989][ T10] usb 2-1: SerialNumber: syz [ 27.985547][ T10] usb 2-1: 0:1 : does not exist [ 27.990546][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.998482][ T10] usb 2-1: 0:2 : does not exist [ 28.006446][ T10] usb 2-1: USB disconnect, device number 2 [ 28.019901][ T525] udevd[525]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.137065][ T64] usb 5-1: device descriptor read/64, error -71 [ 28.197058][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.348150][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.359085][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.368882][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 28.377942][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.386452][ T31] usb 3-1: config 0 descriptor?? [ 28.388166][ T64] usb 5-1: device descriptor read/64, error -71 [ 28.507188][ T64] usb usb5-port1: attempt power cycle [ 28.787070][ T527] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.796226][ T31] playstation 0003:054C:0DF2.0001: item fetching failed at offset 1/5 [ 28.804795][ T31] playstation 0003:054C:0DF2.0001: Parse failed [ 28.811505][ T31] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 28.847142][ T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 28.868039][ T64] usb 5-1: device descriptor read/8, error -71 [ 28.947099][ T527] usb 2-1: Using ep0 maxpacket: 32 [ 28.953268][ T527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.964212][ T527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.974304][ T527] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.983482][ T527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.992040][ T527] usb 2-1: config 0 descriptor?? [ 28.999298][ T9] usb 3-1: USB disconnect, device number 3 [ 28.999418][ T527] hub 2-1:0.0: USB hub found [ 29.007957][ T64] usb 5-1: device descriptor read/8, error -71 [ 29.199274][ T527] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 29.247081][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 29.268126][ T64] usb 5-1: device descriptor read/8, error -71 [ 29.398053][ T64] usb 5-1: device descriptor read/8, error -71 [ 29.413990][ T529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.422688][ T529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.507142][ T64] usb usb5-port1: unable to enumerate USB device [ 29.548775][ T541] FAULT_INJECTION: forcing a failure. [ 29.548775][ T541] name failslab, interval 1, probability 0, space 0, times 0 [ 29.561550][ T541] CPU: 0 UID: 0 PID: 541 Comm: syz.2.50 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 29.561596][ T541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.561609][ T541] Call Trace: [ 29.561614][ T541] [ 29.561620][ T541] __dump_stack+0x21/0x30 [ 29.561641][ T541] dump_stack_lvl+0x140/0x1c0 [ 29.561656][ T541] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.561672][ T541] dump_stack+0x19/0x20 [ 29.561697][ T541] should_fail_ex+0x3c2/0x510 [ 29.561721][ T541] should_failslab+0xac/0x100 [ 29.561746][ T541] __kmalloc_node_noprof+0x69/0x500 [ 29.561767][ T541] ? __kvmalloc_node_noprof+0x128/0x300 [ 29.561786][ T541] __kvmalloc_node_noprof+0x128/0x300 [ 29.561805][ T541] ? __cfi_dev_addr_init+0x10/0x10 [ 29.561833][ T541] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 29.561853][ T541] ? __asan_memset+0x39/0x50 [ 29.561873][ T541] alloc_netdev_mqs+0xaf4/0x13d0 [ 29.561895][ T541] loopback_net_init+0x3d/0x160 [ 29.561910][ T541] ops_init+0x302/0x5d0 [ 29.561921][ T541] ? __kasan_check_write+0x18/0x20 [ 29.561931][ T541] ? rwsem_read_trylock+0x275/0x5a0 [ 29.561949][ T541] setup_net+0x227/0x9b0 [ 29.561963][ T541] ? copy_net_ns+0xa20/0xa20 [ 29.561991][ T541] ? down_read_killable+0x7f/0x100 [ 29.562019][ T541] ? __cfi_down_read_killable+0x10/0x10 [ 29.562042][ T541] copy_net_ns+0x4fc/0xa20 [ 29.562053][ T541] create_new_namespaces+0x390/0x6f0 [ 29.562070][ T541] unshare_nsproxy_namespaces+0x124/0x180 [ 29.562086][ T541] ksys_unshare+0x4f9/0x920 [ 29.562105][ T541] ? __cfi_ksys_unshare+0x10/0x10 [ 29.562131][ T541] ? __kasan_check_write+0x18/0x20 [ 29.562152][ T541] __x64_sys_unshare+0x3c/0x50 [ 29.562177][ T541] x64_sys_call+0x2998/0x2ee0 [ 29.562188][ T541] do_syscall_64+0x57/0xf0 [ 29.562199][ T541] ? clear_bhb_loop+0x50/0xa0 [ 29.562213][ T541] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.562226][ T541] RIP: 0033:0x7fef9cf9e159 [ 29.562236][ T541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.562248][ T541] RSP: 002b:00007fef9de85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 29.562271][ T541] RAX: ffffffffffffffda RBX: 00007fef9d225fa0 RCX: 00007fef9cf9e159 [ 29.562287][ T541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 29.562300][ T541] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 29.562313][ T541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.562324][ T541] R13: 00007fef9d226038 R14: 00007fef9d225fa0 R15: 00007ffff305c678 [ 29.562333][ T541] [ 29.978749][ T527] usbhid 2-1:0.0: can't add hid device: -71 [ 29.984783][ T527] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.007953][ T527] usb 2-1: USB disconnect, device number 3 [ 30.297068][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.458091][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.468285][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.480593][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.489889][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.498092][ T310] usb 3-1: Product: syz [ 30.502267][ T310] usb 3-1: Manufacturer: syz [ 30.506877][ T310] usb 3-1: SerialNumber: syz [ 30.513207][ T310] cdc_mbim 3-1:1.0: skipping garbage [ 30.518563][ T310] cdc_mbim 3-1:1.0: skipping garbage [ 30.523866][ T310] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 30.530780][ T310] cdc_mbim 3-1:1.0: bind() failure [ 30.716425][ T9] usb 3-1: USB disconnect, device number 4 [ 30.907061][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.057048][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 31.063503][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.073312][ T310] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 31.082504][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.090519][ T310] usb 2-1: Product: syz [ 31.094673][ T310] usb 2-1: Manufacturer: syz [ 31.099277][ T310] usb 2-1: SerialNumber: syz [ 31.117055][ T560] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 31.234729][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 31.234746][ T36] audit: type=1400 audit(1791048122.629:224): avc: denied { setattr } for pid=576 comm="syz.2.61" path="socket:[5025]" dev="sockfs" ino=5025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.263794][ T36] audit: type=1400 audit(1791048122.629:225): avc: denied { block_suspend } for pid=576 comm="syz.2.61" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.267081][ T560] usb 5-1: Using ep0 maxpacket: 32 [ 31.291698][ T560] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.302694][ T560] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.314396][ T560] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 31.315581][ T573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.323720][ T560] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 31.332801][ T573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.340557][ T560] usb 5-1: Product: syz [ 31.352851][ T560] usb 5-1: Manufacturer: syz [ 31.359502][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.366710][ T560] hub 5-1:4.0: USB hub found [ 31.371932][ T310] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 31.381250][ T310] usb 2-1: USB disconnect, device number 4 [ 31.394413][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.537054][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.559723][ T560] hub 5-1:4.0: 2 ports detected [ 31.667096][ T9] usb 3-1: device descriptor read/64, error -71 [ 31.765906][ T560] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 31.772364][ T560] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 31.798660][ T560] usb 5-1: USB disconnect, device number 6 [ 31.907050][ T9] usb 3-1: device descriptor read/64, error -71 [ 32.107094][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 32.147115][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.237071][ T10] usb 2-1: device descriptor read/64, error -71 [ 32.277048][ T9] usb 3-1: device descriptor read/64, error -71 [ 32.477049][ T10] usb 2-1: device descriptor read/64, error -71 [ 32.517092][ T9] usb 3-1: device descriptor read/64, error -71 [ 32.627180][ T9] usb usb3-port1: attempt power cycle [ 32.717063][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 32.847076][ T10] usb 2-1: device descriptor read/64, error -71 [ 32.967458][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 32.988008][ T9] usb 3-1: device descriptor read/8, error -71 [ 33.067072][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 33.087098][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.118138][ T9] usb 3-1: device descriptor read/8, error -71 [ 33.197184][ T10] usb usb2-port1: attempt power cycle [ 33.217411][ T64] usb 5-1: too many configurations: 40, using maximum allowed: 8 [ 33.231842][ T64] usb 5-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 33.240961][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.248970][ T64] usb 5-1: Product: syz [ 33.253127][ T64] usb 5-1: Manufacturer: syz [ 33.257750][ T64] usb 5-1: SerialNumber: syz [ 33.264291][ T64] ums-datafab 5-1:1.0: USB Mass Storage device detected [ 33.272367][ T64] ums-datafab 5-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 33.272367][ T64] Please send a copy of this message to and [ 33.299041][ T64] scsi host1: usb-storage 5-1:1.0 [ 33.357079][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 33.378088][ T9] usb 3-1: device descriptor read/8, error -71 [ 33.518070][ T9] usb 3-1: device descriptor read/8, error -71 [ 33.537072][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 33.558044][ T10] usb 2-1: device descriptor read/8, error -71 [ 33.627123][ T9] usb usb3-port1: unable to enumerate USB device [ 33.688057][ T10] usb 2-1: device descriptor read/8, error -71 [ 33.947054][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 33.968038][ T10] usb 2-1: device descriptor read/8, error -71 [ 34.098054][ T10] usb 2-1: device descriptor read/8, error -71 [ 34.207424][ T10] usb usb2-port1: unable to enumerate USB device [ 34.327456][ T46] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 34.337104][ T46] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 34.805605][ T36] audit: type=1400 audit(1791048126.199:226): avc: denied { execute } for pid=603 comm="syz.2.68" dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.805674][ T604] process 'syz.2.68' launched '/dev/fd/4' with NULL argv: empty string added [ 34.835238][ T36] audit: type=1400 audit(1791048126.229:227): avc: denied { execute_no_trans } for pid=603 comm="syz.2.68" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.878501][ T36] audit: type=1400 audit(1791048126.279:228): avc: denied { connect } for pid=607 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.894485][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 34.898446][ T36] audit: type=1400 audit(1791048126.279:229): avc: denied { create } for pid=611 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.909198][ T613] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.944843][ T36] audit: type=1400 audit(1791048126.339:230): avc: denied { name_bind } for pid=605 comm="syz.2.69" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.966194][ T36] audit: type=1400 audit(1791048126.339:231): avc: denied { ioctl } for pid=605 comm="syz.2.69" path="socket:[5804]" dev="sockfs" ino=5804 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.990732][ T36] audit: type=1400 audit(1791048126.339:232): avc: denied { getopt } for pid=605 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.013734][ T618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 35.845239][ T64] usb 5-1: USB disconnect, device number 7 [ 35.877229][ T13] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 35.886570][ T12] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 35.887415][ T13] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 35.900375][ T10] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 35.906838][ T13] sd 1:0:0:1: [sdc] Sense not available. [ 35.914659][ T12] sd 1:0:0:0: [sdb] Sense not available. [ 35.919752][ T13] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 35.932495][ T12] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 35.940022][ T12] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 35.941824][ T13] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 35.946441][ T12] sd 1:0:0:0: [sdb] Write Protect is off [ 35.952621][ T13] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 35.957780][ T36] audit: type=1400 audit(1791048127.359:233): avc: denied { set_context_mgr } for pid=631 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 35.964927][ T13] sd 1:0:0:1: [sdc] Asking for cache data failed [ 35.990387][ T12] sd 1:0:0:0: [sdb] Asking for cache data failed [ 35.990913][ T13] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 35.997047][ T12] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 36.016087][ T12] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 36.026528][ T13] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 36.033576][ T526] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 36.046466][ T635] FAULT_INJECTION: forcing a failure. [ 36.046466][ T635] name failslab, interval 1, probability 0, space 0, times 0 [ 36.059260][ T635] CPU: 1 UID: 0 PID: 635 Comm: syz.4.80 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 36.059292][ T635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.059305][ T635] Call Trace: [ 36.059311][ T635] [ 36.059319][ T635] __dump_stack+0x21/0x30 [ 36.059352][ T635] dump_stack_lvl+0x140/0x1c0 [ 36.059375][ T635] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.059403][ T635] dump_stack+0x19/0x20 [ 36.059427][ T635] should_fail_ex+0x3c2/0x510 [ 36.059451][ T635] should_failslab+0xac/0x100 [ 36.059475][ T635] kmem_cache_alloc_noprof+0x42/0x410 [ 36.059497][ T635] ? alloc_empty_file+0xbf/0x270 [ 36.059522][ T635] ? _raw_spin_unlock+0x45/0x60 [ 36.059543][ T635] alloc_empty_file+0xbf/0x270 [ 36.059567][ T635] ? _raw_spin_unlock+0x45/0x60 [ 36.059586][ T635] alloc_file_pseudo+0x142/0x1f0 [ 36.059612][ T635] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 36.059640][ T635] sock_alloc_file+0xbe/0x2b0 [ 36.059662][ T635] __sys_socket+0x14c/0x1c0 [ 36.059685][ T635] __x64_sys_socket+0x7e/0x90 [ 36.059707][ T635] x64_sys_call+0x2608/0x2ee0 [ 36.059726][ T635] do_syscall_64+0x57/0xf0 [ 36.059745][ T635] ? clear_bhb_loop+0x50/0xa0 [ 36.059770][ T635] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.059794][ T635] RIP: 0033:0x7f9640f9e159 [ 36.059820][ T635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.059836][ T635] RSP: 002b:00007f9641dc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 36.059856][ T635] RAX: ffffffffffffffda RBX: 00007f9641225fa0 RCX: 00007f9640f9e159 [ 36.059870][ T635] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 36.059882][ T635] RBP: 00007f964103506b R08: 0000000000000000 R09: 0000000000000000 [ 36.059895][ T635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.059907][ T635] R13: 00007f9641226038 R14: 00007f9641225fa0 R15: 00007ffc3592deb8 [ 36.059922][ T635] [ 36.061418][ T635] cgroup: Unknown subsys name 'uid<00000000000000016832' [ 36.062405][ T525] udevd[525]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 36.283362][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 36.283377][ T36] audit: type=1400 audit(1791048127.679:235): avc: denied { setopt } for pid=636 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.283920][ T637] sock: sock_set_timeout: `syz.2.81' (pid 637) tries to set negative timeout [ 36.300330][ T36] audit: type=1400 audit(1791048127.689:236): avc: denied { create } for pid=639 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 36.309551][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.338067][ T328] udevd[328]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 36.350624][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 36.360924][ T36] audit: type=1400 audit(1791048127.749:237): avc: denied { read } for pid=636 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.396380][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.398141][ T36] audit: type=1400 audit(1791048127.789:238): avc: denied { write } for pid=643 comm="syz.4.83" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.406040][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 36.428345][ T36] audit: type=1400 audit(1791048127.829:239): avc: denied { create } for pid=643 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 36.436423][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.454802][ T36] audit: type=1400 audit(1791048127.829:240): avc: denied { write } for pid=643 comm="syz.4.83" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.465360][ T10] usb 2-1: config 0 descriptor?? [ 36.490606][ T626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.508938][ T328] udevd[328]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 36.627089][ T597] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.777050][ T597] usb 3-1: Using ep0 maxpacket: 16 [ 36.783237][ T597] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.794272][ T597] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.804139][ T597] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 36.817218][ T64] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 36.824777][ T597] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.831471][ T597] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 36.840709][ T597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.849564][ T597] usb 3-1: config 0 descriptor?? [ 36.900275][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 36.906270][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.916587][ T10] usb 2-1: USB disconnect, device number 9 [ 36.989813][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.998438][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.010358][ T64] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 37.017974][ T64] usb 5-1: can't read configurations, error -71 [ 37.457809][ T36] audit: type=1400 audit(1791048128.859:241): avc: denied { write } for pid=636 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.531545][ T36] audit: type=1400 audit(1791048128.929:242): avc: denied { mounton } for pid=654 comm="syz.4.85" path="/20/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 37.605599][ T36] audit: type=1400 audit(1791048128.999:243): avc: denied { write } for pid=654 comm="syz.4.85" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 37.689839][ T660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.698769][ T660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.001916][ T36] audit: type=1400 audit(1791048129.399:244): avc: denied { accept } for pid=665 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.057077][ T64] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 38.098489][ T672] FAULT_INJECTION: forcing a failure. [ 38.098489][ T672] name failslab, interval 1, probability 0, space 0, times 0 [ 38.111173][ T672] CPU: 1 UID: 0 PID: 672 Comm: syz.2.91 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 38.111217][ T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.111230][ T672] Call Trace: [ 38.111237][ T672] [ 38.111244][ T672] __dump_stack+0x21/0x30 [ 38.111278][ T672] dump_stack_lvl+0x140/0x1c0 [ 38.111305][ T672] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.111333][ T672] dump_stack+0x19/0x20 [ 38.111358][ T672] should_fail_ex+0x3c2/0x510 [ 38.111383][ T672] should_failslab+0xac/0x100 [ 38.111408][ T672] kmem_cache_alloc_noprof+0x42/0x410 [ 38.111429][ T672] ? dup_fd+0x63/0x9c0 [ 38.111470][ T672] ? __cfi_lockref_get+0x10/0x10 [ 38.111492][ T672] ? _raw_spin_lock+0x92/0x120 [ 38.111514][ T672] dup_fd+0x63/0x9c0 [ 38.111535][ T672] ? copy_fs_struct+0x160/0x2d0 [ 38.111557][ T672] ? _raw_spin_unlock+0x45/0x60 [ 38.111578][ T672] ksys_unshare+0x46a/0x920 [ 38.111604][ T672] ? fput+0x1a4/0x230 [ 38.111629][ T672] ? __cfi_ksys_unshare+0x10/0x10 [ 38.111655][ T672] ? __kasan_check_write+0x18/0x20 [ 38.111676][ T672] __x64_sys_unshare+0x3c/0x50 [ 38.111702][ T672] x64_sys_call+0x2998/0x2ee0 [ 38.111720][ T672] do_syscall_64+0x57/0xf0 [ 38.111739][ T672] ? clear_bhb_loop+0x50/0xa0 [ 38.111764][ T672] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.111789][ T672] RIP: 0033:0x7fef9cf9e159 [ 38.111806][ T672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.111822][ T672] RSP: 002b:00007fef9de85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 38.111843][ T672] RAX: ffffffffffffffda RBX: 00007fef9d225fa0 RCX: 00007fef9cf9e159 [ 38.111859][ T672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 38.111872][ T672] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 38.111885][ T672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.111898][ T672] R13: 00007fef9d226038 R14: 00007fef9d225fa0 R15: 00007ffff305c678 [ 38.111915][ T672] [ 38.208060][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.335240][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.346567][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.347385][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.360440][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.376914][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.388721][ T64] usb 5-1: config 0 descriptor?? [ 38.396553][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.607429][ T64] usbhid 5-1:0.0: can't add hid device: -71 [ 38.613412][ T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 38.637310][ T64] usb 5-1: USB disconnect, device number 9 [ 39.145761][ T685] kvm: kvm [684]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 39.154598][ T685] kvm: kvm [684]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 39.230160][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.487057][ T527] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 39.590695][ T696] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.598757][ T696] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 39.607391][ T696] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.615587][ T696] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 39.637842][ T698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.647458][ T527] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 39.658516][ T698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.667283][ T527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 39.681741][ T527] usb 5-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 39.691085][ T527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.707275][ T527] usb 5-1: config 0 descriptor?? [ 40.121642][ T527] wacom 0003:056A:0318.0003: unknown main item tag 0x0 [ 40.195402][ T700] FAULT_INJECTION: forcing a failure. [ 40.195402][ T700] name failslab, interval 1, probability 0, space 0, times 0 [ 40.208168][ T700] CPU: 1 UID: 0 PID: 700 Comm: syz.2.102 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 40.208200][ T700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.208212][ T700] Call Trace: [ 40.208218][ T700] [ 40.208225][ T700] __dump_stack+0x21/0x30 [ 40.208257][ T700] dump_stack_lvl+0x140/0x1c0 [ 40.208282][ T700] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.208306][ T700] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 40.208327][ T700] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 40.208348][ T700] dump_stack+0x19/0x20 [ 40.208372][ T700] should_fail_ex+0x3c2/0x510 [ 40.208396][ T700] should_failslab+0xac/0x100 [ 40.208421][ T700] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 40.208443][ T700] ? __sock_create+0x3a5/0x810 [ 40.208465][ T700] ? __sys_socket+0xe1/0x1c0 [ 40.208487][ T700] ? __d_alloc+0x42/0x8c0 [ 40.208506][ T700] ? expand_files+0xda/0x6f0 [ 40.208531][ T700] __d_alloc+0x42/0x8c0 [ 40.208550][ T700] d_alloc_pseudo+0x23/0xc0 [ 40.208570][ T700] alloc_file_pseudo+0xde/0x1f0 [ 40.208596][ T700] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 40.208622][ T700] ? _raw_spin_unlock+0x45/0x60 [ 40.208643][ T700] sock_alloc_file+0xbe/0x2b0 [ 40.208664][ T700] __sys_socket+0x14c/0x1c0 [ 40.208687][ T700] __x64_sys_socket+0x7e/0x90 [ 40.208710][ T700] x64_sys_call+0x2608/0x2ee0 [ 40.208729][ T700] do_syscall_64+0x57/0xf0 [ 40.208748][ T700] ? clear_bhb_loop+0x50/0xa0 [ 40.208774][ T700] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.208799][ T700] RIP: 0033:0x7fef9cf9e159 [ 40.208816][ T700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.208831][ T700] RSP: 002b:00007fef9de85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 40.208854][ T700] RAX: ffffffffffffffda RBX: 00007fef9d225fa0 RCX: 00007fef9cf9e159 [ 40.208870][ T700] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 40.208883][ T700] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 40.208896][ T700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.208909][ T700] R13: 00007fef9d226038 R14: 00007fef9d225fa0 R15: 00007ffff305c678 [ 40.208927][ T700] [ 40.444040][ T527] usb 5-1: USB disconnect, device number 10 [ 40.688911][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.698168][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.724788][ T709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.738169][ T709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.788102][ T709] kvm: apic: phys broadcast and lowest prio [ 41.009502][ T712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.106'. [ 41.127543][ T715] netlink: 176 bytes leftover after parsing attributes in process `syz.4.106'. [ 41.429236][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.436303][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.443741][ T721] bridge_slave_0: entered allmulticast mode [ 41.451088][ T721] bridge_slave_0: entered promiscuous mode [ 41.457874][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.464923][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.472393][ T721] bridge_slave_1: entered allmulticast mode [ 41.478901][ T721] bridge_slave_1: entered promiscuous mode [ 41.583890][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.591012][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.598332][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.605368][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.674330][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.686001][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.704235][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.711402][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.719401][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.726447][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.770451][ T721] veth0_vlan: entered promiscuous mode [ 41.790555][ T721] veth1_macvtap: entered promiscuous mode [ 41.821181][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 41.821198][ T36] audit: type=1400 audit(1791048133.219:255): avc: denied { mounton } for pid=721 comm="syz-executor" path="/root/syzkaller.JS7kSi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.861608][ T736] sit0: entered promiscuous mode [ 41.868670][ T736] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 41.876319][ T736] netlink: 1 bytes leftover after parsing attributes in process `syz.2.111'. [ 42.005157][ T36] audit: type=1400 audit(1791048133.399:256): avc: denied { search } for pid=739 comm="syz.2.112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.029686][ T36] audit: type=1400 audit(1791048133.399:257): avc: denied { append } for pid=739 comm="syz.2.112" name="uprobe_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.067224][ T527] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 42.075073][ T745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.090627][ T745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.101242][ T36] audit: type=1400 audit(1791048133.499:258): avc: denied { create } for pid=744 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.121876][ T36] audit: type=1400 audit(1791048133.499:259): avc: denied { bind } for pid=744 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.142015][ T36] audit: type=1400 audit(1791048133.519:260): avc: denied { listen } for pid=744 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.147076][ T560] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.162036][ T36] audit: type=1400 audit(1791048133.519:261): avc: denied { connect } for pid=744 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.258176][ T527] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.271136][ T527] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 42.281879][ T527] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.292000][ T527] usb 5-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 42.302679][ T527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.315152][ T527] usb 5-1: config 0 descriptor?? [ 42.320473][ T730] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.327838][ T560] usb 6-1: Using ep0 maxpacket: 8 [ 42.334932][ T560] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 42.345145][ T560] usb 6-1: config 1 interface 0 has no altsetting 0 [ 42.353246][ T560] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 42.363536][ T560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.371606][ T560] usb 6-1: Product: syz [ 42.376912][ T560] usb 6-1: Manufacturer: 폚䪕쒈ᜌ贁꤁슑⤆᩟ꥊ嫠嬮횴뉤쭖马䄣ዘꂱ徨쀂ﯖ쇑吟㮄㈉ꏙ嚘⽃鋔犿솗啒⑫箆ꪈ買熪ꔭ嘌ൎ㳕깠켺訲⫻ⶽᓳꪤ㗷좡ᱲ褆뜷橲㌙뷧铭ઃ筕폔㨥坯⦊⮘約혖ᢹዻۘ䤗Ⓡ埭ᓤ䴈ĉ╺玣軩稃鵆૩ [ 42.404273][ T560] usb 6-1: SerialNumber: syz [ 42.411374][ T738] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 42.624712][ T560] usb 6-1: USB disconnect, device number 2 [ 42.696447][ T36] audit: type=1400 audit(1791048134.089:262): avc: denied { write } for pid=752 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.726375][ T36] audit: type=1400 audit(1791048134.119:263): avc: denied { ioctl } for pid=752 comm="syz.2.115" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 42.740802][ T527] usbhid 5-1:0.0: can't add hid device: -71 [ 42.757516][ T755] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(8) [ 42.775471][ T527] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 42.791618][ T527] usb 5-1: USB disconnect, device number 11 [ 42.816133][ T755] syzkaller0: entered promiscuous mode [ 42.821911][ T755] syzkaller0: entered allmulticast mode [ 42.830840][ T36] audit: type=1400 audit(1791048134.229:264): avc: denied { mounton } for pid=754 comm="syz.2.116" path="/48/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 42.853165][ T757] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1986356271.1952804399.1853191215), cmd(8) [ 43.009730][ T763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 43.099800][ T770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.120'. [ 43.108751][ T770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 43.119553][ T770] netlink: 'syz.2.120': attribute type 16 has an invalid length. [ 43.128838][ T771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 43.162608][ T775] rust_binder: 774:775 FDA parent offset not aligned correctly [ 43.171591][ T775] rust_binder: 774:775 error while translating object: EINVAL [ 43.185268][ T775] rust_binder: Failure in copy_transaction_data: EINVAL [ 43.185324][ T775] rust_binder: 774:775 transaction call to 774:0 failed EINVAL, code 0 size 96-24 [ 43.203230][ T64] rust_binder: 774: undelivered TRANSACTION_ERROR: 29201 [ 43.225972][ T785] netlink: 'syz.5.124': attribute type 3 has an invalid length. [ 43.234101][ T780] FAULT_INJECTION: forcing a failure. [ 43.234101][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.277065][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.277099][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.277114][ T780] Call Trace: [ 43.277120][ T780] [ 43.277128][ T780] __dump_stack+0x21/0x30 [ 43.277160][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.277185][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.277211][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.277233][ T780] ? check_stack_object+0x10f/0x150 [ 43.277254][ T780] dump_stack+0x19/0x20 [ 43.277278][ T780] should_fail_ex+0x3c2/0x510 [ 43.277301][ T780] should_fail+0xf/0x20 [ 43.277322][ T780] should_fail_usercopy+0x1e/0x30 [ 43.277346][ T780] _copy_from_user+0x20/0xa0 [ 43.277373][ T780] kstrtouint_from_user+0xde/0x170 [ 43.277395][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.277417][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.277439][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.277460][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.277486][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.277513][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.277538][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.277565][ T780] vfs_write+0x3c1/0xfd0 [ 43.277587][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.277607][ T780] ? __kasan_check_write+0x18/0x20 [ 43.277627][ T780] ? mutex_lock+0x97/0x1d0 [ 43.277651][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.277677][ T780] ksys_write+0x145/0x260 [ 43.277697][ T780] ? xfd_validate_state+0x68/0x140 [ 43.277723][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.277745][ T780] ? __kasan_check_read+0x15/0x20 [ 43.277765][ T780] __x64_sys_write+0x7f/0x90 [ 43.277793][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.277812][ T780] do_syscall_64+0x57/0xf0 [ 43.277831][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.277857][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.277881][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.277898][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.277914][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.277936][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.277951][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.277963][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.277976][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.277988][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.278005][ T780] [ 43.278026][ T780] FAULT_INJECTION: forcing a failure. [ 43.278026][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.457038][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 43.460549][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.460577][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.460588][ T780] Call Trace: [ 43.460594][ T780] [ 43.460601][ T780] __dump_stack+0x21/0x30 [ 43.460629][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.460654][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.460679][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.460700][ T780] ? check_stack_object+0x10f/0x150 [ 43.460721][ T780] dump_stack+0x19/0x20 [ 43.460743][ T780] should_fail_ex+0x3c2/0x510 [ 43.460773][ T780] should_fail+0xf/0x20 [ 43.460793][ T780] should_fail_usercopy+0x1e/0x30 [ 43.460816][ T780] _copy_from_user+0x20/0xa0 [ 43.460841][ T780] kstrtouint_from_user+0xde/0x170 [ 43.460862][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.460882][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.460905][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.460925][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.460954][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.460981][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.461005][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.461029][ T780] vfs_write+0x3c1/0xfd0 [ 43.461049][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.461068][ T780] ? __kasan_check_write+0x18/0x20 [ 43.461087][ T780] ? mutex_lock+0x97/0x1d0 [ 43.461109][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.461133][ T780] ksys_write+0x145/0x260 [ 43.461151][ T780] ? xfd_validate_state+0x68/0x140 [ 43.461176][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.461195][ T780] ? __kasan_check_read+0x15/0x20 [ 43.461214][ T780] __x64_sys_write+0x7f/0x90 [ 43.461233][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.461250][ T780] do_syscall_64+0x57/0xf0 [ 43.461268][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.461291][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.461314][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.461329][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.461345][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.461364][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.461379][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.461391][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.461403][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.461415][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.461431][ T780] [ 43.461493][ T780] FAULT_INJECTION: forcing a failure. [ 43.461493][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.497259][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 43.506908][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.506936][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.506947][ T780] Call Trace: [ 43.506953][ T780] [ 43.506960][ T780] __dump_stack+0x21/0x30 [ 43.506995][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.507019][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.507043][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.507064][ T780] ? check_stack_object+0x10f/0x150 [ 43.507085][ T780] dump_stack+0x19/0x20 [ 43.507108][ T780] should_fail_ex+0x3c2/0x510 [ 43.507130][ T780] should_fail+0xf/0x20 [ 43.507149][ T780] should_fail_usercopy+0x1e/0x30 [ 43.507172][ T780] _copy_from_user+0x20/0xa0 [ 43.507197][ T780] kstrtouint_from_user+0xde/0x170 [ 43.507218][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.507253][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.507274][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.507294][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.507320][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.507347][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.507370][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.507395][ T780] vfs_write+0x3c1/0xfd0 [ 43.507415][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.507434][ T780] ? __kasan_check_write+0x18/0x20 [ 43.507452][ T780] ? mutex_lock+0x97/0x1d0 [ 43.507474][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.507498][ T780] ksys_write+0x145/0x260 [ 43.507517][ T780] ? xfd_validate_state+0x68/0x140 [ 43.507541][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.507561][ T780] ? __kasan_check_read+0x15/0x20 [ 43.507579][ T780] __x64_sys_write+0x7f/0x90 [ 43.507599][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.507616][ T780] do_syscall_64+0x57/0xf0 [ 43.507634][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.507658][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.507680][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.507696][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.507711][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.507731][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.507746][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.507758][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.507770][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.507781][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.507797][ T780] [ 43.510182][ T780] FAULT_INJECTION: forcing a failure. [ 43.510182][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.617042][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 43.617481][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.617508][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.617519][ T780] Call Trace: [ 43.617525][ T780] [ 43.617532][ T780] __dump_stack+0x21/0x30 [ 43.617562][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.617586][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.617611][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.617632][ T780] ? check_stack_object+0x10f/0x150 [ 43.617653][ T780] dump_stack+0x19/0x20 [ 43.617675][ T780] should_fail_ex+0x3c2/0x510 [ 43.617697][ T780] should_fail+0xf/0x20 [ 43.617717][ T780] should_fail_usercopy+0x1e/0x30 [ 43.617740][ T780] _copy_from_user+0x20/0xa0 [ 43.617765][ T780] kstrtouint_from_user+0xde/0x170 [ 43.617786][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.617806][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.617827][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.617847][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.617873][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.617899][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.617923][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.617948][ T780] vfs_write+0x3c1/0xfd0 [ 43.617968][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.617986][ T780] ? __kasan_check_write+0x18/0x20 [ 43.618005][ T780] ? mutex_lock+0x97/0x1d0 [ 43.618027][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.618064][ T780] ksys_write+0x145/0x260 [ 43.618083][ T780] ? xfd_validate_state+0x68/0x140 [ 43.618108][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.618128][ T780] ? __kasan_check_read+0x15/0x20 [ 43.618146][ T780] __x64_sys_write+0x7f/0x90 [ 43.618166][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.618183][ T780] do_syscall_64+0x57/0xf0 [ 43.618200][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.618224][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.618247][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.618263][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.618284][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.618304][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.618318][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.618330][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.618342][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.618354][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.618370][ T780] [ 43.618393][ T780] FAULT_INJECTION: forcing a failure. [ 43.618393][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.630683][ T64] usb 6-1: unable to get BOS descriptor or descriptor too short [ 43.633370][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.633396][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.633407][ T780] Call Trace: [ 43.633414][ T780] [ 43.633420][ T780] __dump_stack+0x21/0x30 [ 43.633450][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.633474][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.633499][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.633520][ T780] ? check_stack_object+0x10f/0x150 [ 43.633541][ T780] dump_stack+0x19/0x20 [ 43.633564][ T780] should_fail_ex+0x3c2/0x510 [ 43.633585][ T780] should_fail+0xf/0x20 [ 43.633605][ T780] should_fail_usercopy+0x1e/0x30 [ 43.633628][ T780] _copy_from_user+0x20/0xa0 [ 43.633652][ T780] kstrtouint_from_user+0xde/0x170 [ 43.633673][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.633694][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.633715][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.633735][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.633762][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.633788][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.633812][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.633839][ T780] vfs_write+0x3c1/0xfd0 [ 43.633859][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.633878][ T780] ? __kasan_check_write+0x18/0x20 [ 43.633898][ T780] ? mutex_lock+0x97/0x1d0 [ 43.633921][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.633946][ T780] ksys_write+0x145/0x260 [ 43.633964][ T780] ? xfd_validate_state+0x68/0x140 [ 43.633989][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.634009][ T780] ? __kasan_check_read+0x15/0x20 [ 43.634027][ T780] __x64_sys_write+0x7f/0x90 [ 43.634047][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.634064][ T780] do_syscall_64+0x57/0xf0 [ 43.634082][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.634106][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.634129][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.634146][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.634162][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.634182][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.634197][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.634210][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.634222][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.634234][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.634250][ T780] [ 43.634272][ T780] FAULT_INJECTION: forcing a failure. [ 43.634272][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.636336][ T64] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 43.643047][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.643074][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.643086][ T780] Call Trace: [ 43.643092][ T780] [ 43.643099][ T780] __dump_stack+0x21/0x30 [ 43.643129][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.643154][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.643179][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.643200][ T780] ? check_stack_object+0x10f/0x150 [ 43.643222][ T780] dump_stack+0x19/0x20 [ 43.643247][ T780] should_fail_ex+0x3c2/0x510 [ 43.643268][ T780] should_fail+0xf/0x20 [ 43.643316][ T780] should_fail_usercopy+0x1e/0x30 [ 43.643339][ T780] _copy_from_user+0x20/0xa0 [ 43.643365][ T780] kstrtouint_from_user+0xde/0x170 [ 43.643386][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.643408][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.643430][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.643451][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.643478][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.643504][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.643528][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.643555][ T780] vfs_write+0x3c1/0xfd0 [ 43.643575][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.643594][ T780] ? __kasan_check_write+0x18/0x20 [ 43.643613][ T780] ? mutex_lock+0x97/0x1d0 [ 43.643636][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.643660][ T780] ksys_write+0x145/0x260 [ 43.643679][ T780] ? xfd_validate_state+0x68/0x140 [ 43.643703][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.643724][ T780] ? __kasan_check_read+0x15/0x20 [ 43.643743][ T780] __x64_sys_write+0x7f/0x90 [ 43.643762][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.643779][ T780] do_syscall_64+0x57/0xf0 [ 43.643797][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.643821][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.643844][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.643860][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.643876][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.643896][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.643911][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.643924][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.643936][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.643948][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.643964][ T780] [ 43.643988][ T780] FAULT_INJECTION: forcing a failure. [ 43.643988][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.657042][ T10] usb 5-1: device descriptor read/64, error -71 [ 43.659928][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.659955][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.659967][ T780] Call Trace: [ 43.659973][ T780] [ 43.659980][ T780] __dump_stack+0x21/0x30 [ 43.660009][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.660034][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.660059][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.660081][ T780] ? check_stack_object+0x10f/0x150 [ 43.660101][ T780] dump_stack+0x19/0x20 [ 43.660125][ T780] should_fail_ex+0x3c2/0x510 [ 43.660146][ T780] should_fail+0xf/0x20 [ 43.660166][ T780] should_fail_usercopy+0x1e/0x30 [ 43.660189][ T780] _copy_from_user+0x20/0xa0 [ 43.660214][ T780] kstrtouint_from_user+0xde/0x170 [ 43.660237][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.660257][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.660285][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.660305][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.660331][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.660358][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.660382][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.660407][ T780] vfs_write+0x3c1/0xfd0 [ 43.660428][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.660446][ T780] ? __kasan_check_write+0x18/0x20 [ 43.660465][ T780] ? mutex_lock+0x97/0x1d0 [ 43.660488][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.660512][ T780] ksys_write+0x145/0x260 [ 43.660531][ T780] ? xfd_validate_state+0x68/0x140 [ 43.660556][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.660575][ T780] ? __kasan_check_read+0x15/0x20 [ 43.660594][ T780] __x64_sys_write+0x7f/0x90 [ 43.660613][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.660631][ T780] do_syscall_64+0x57/0xf0 [ 43.660649][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.660673][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.660696][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.660712][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.660729][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.660749][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.660764][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.660776][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.660788][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.660799][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.660816][ T780] [ 43.660839][ T780] FAULT_INJECTION: forcing a failure. [ 43.660839][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.670990][ T64] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 43.676806][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.676835][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.676848][ T780] Call Trace: [ 43.676853][ T780] [ 43.676861][ T780] __dump_stack+0x21/0x30 [ 43.676891][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.676915][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.676941][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.676963][ T780] ? check_stack_object+0x10f/0x150 [ 43.676988][ T780] dump_stack+0x19/0x20 [ 43.677009][ T780] should_fail_ex+0x3c2/0x510 [ 43.677032][ T780] should_fail+0xf/0x20 [ 43.677052][ T780] should_fail_usercopy+0x1e/0x30 [ 43.677074][ T780] _copy_from_user+0x20/0xa0 [ 43.677099][ T780] kstrtouint_from_user+0xde/0x170 [ 43.677120][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.677141][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.677162][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.677182][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.677208][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.677234][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.677258][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.677291][ T780] vfs_write+0x3c1/0xfd0 [ 43.677311][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.677330][ T780] ? __kasan_check_write+0x18/0x20 [ 43.677348][ T780] ? mutex_lock+0x97/0x1d0 [ 43.677371][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.677396][ T780] ksys_write+0x145/0x260 [ 43.677414][ T780] ? xfd_validate_state+0x68/0x140 [ 43.677438][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.677458][ T780] ? __kasan_check_read+0x15/0x20 [ 43.677476][ T780] __x64_sys_write+0x7f/0x90 [ 43.677495][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.677513][ T780] do_syscall_64+0x57/0xf0 [ 43.677531][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.677554][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.677576][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.677592][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.677608][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.677628][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.677643][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.677655][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.677667][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.677678][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.677695][ T780] [ 43.680000][ T780] FAULT_INJECTION: forcing a failure. [ 43.680000][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.684101][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.717076][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.717110][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.717122][ T780] Call Trace: [ 43.717129][ T780] [ 43.717136][ T780] __dump_stack+0x21/0x30 [ 43.717166][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.717191][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.717216][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.717237][ T780] ? check_stack_object+0x10f/0x150 [ 43.717258][ T780] dump_stack+0x19/0x20 [ 43.717287][ T780] should_fail_ex+0x3c2/0x510 [ 43.717309][ T780] should_fail+0xf/0x20 [ 43.717329][ T780] should_fail_usercopy+0x1e/0x30 [ 43.717353][ T780] _copy_from_user+0x20/0xa0 [ 43.717378][ T780] kstrtouint_from_user+0xde/0x170 [ 43.717399][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.717420][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.717442][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.717463][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.717489][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.717515][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.717540][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.717564][ T780] vfs_write+0x3c1/0xfd0 [ 43.717582][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.717600][ T780] ? __kasan_check_write+0x18/0x20 [ 43.717619][ T780] ? mutex_lock+0x97/0x1d0 [ 43.717642][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.717667][ T780] ksys_write+0x145/0x260 [ 43.717686][ T780] ? xfd_validate_state+0x68/0x140 [ 43.717712][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.717731][ T780] ? __kasan_check_read+0x15/0x20 [ 43.717750][ T780] __x64_sys_write+0x7f/0x90 [ 43.717770][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.717787][ T780] do_syscall_64+0x57/0xf0 [ 43.717806][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.717829][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.717852][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.717869][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.717886][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.717906][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.717920][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.717933][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.717945][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.717957][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.717974][ T780] [ 43.718000][ T780] FAULT_INJECTION: forcing a failure. [ 43.718000][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.722863][ T64] usb 6-1: Product: syz [ 43.738946][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.738974][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.738987][ T780] Call Trace: [ 43.738992][ T780] [ 43.738999][ T780] __dump_stack+0x21/0x30 [ 43.739031][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.739053][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.739078][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.739099][ T780] ? check_stack_object+0x10f/0x150 [ 43.739120][ T780] dump_stack+0x19/0x20 [ 43.739143][ T780] should_fail_ex+0x3c2/0x510 [ 43.739165][ T780] should_fail+0xf/0x20 [ 43.739186][ T780] should_fail_usercopy+0x1e/0x30 [ 43.739213][ T780] _copy_from_user+0x20/0xa0 [ 43.739238][ T780] kstrtouint_from_user+0xde/0x170 [ 43.739260][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.739287][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.739309][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.739329][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.739356][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.739382][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.739407][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.739432][ T780] vfs_write+0x3c1/0xfd0 [ 43.739453][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.739472][ T780] ? __kasan_check_write+0x18/0x20 [ 43.739491][ T780] ? mutex_lock+0x97/0x1d0 [ 43.739513][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.739537][ T780] ksys_write+0x145/0x260 [ 43.739557][ T780] ? xfd_validate_state+0x68/0x140 [ 43.739581][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.739601][ T780] ? __kasan_check_read+0x15/0x20 [ 43.739619][ T780] __x64_sys_write+0x7f/0x90 [ 43.739638][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.739656][ T780] do_syscall_64+0x57/0xf0 [ 43.739674][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.739699][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.739721][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.739737][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.739753][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.739774][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.739788][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.739801][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.739812][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.739824][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.739840][ T780] [ 43.739902][ T780] FAULT_INJECTION: forcing a failure. [ 43.739902][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.741200][ T64] usb 6-1: Manufacturer: syz [ 43.751287][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.751316][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.751328][ T780] Call Trace: [ 43.751335][ T780] [ 43.751342][ T780] __dump_stack+0x21/0x30 [ 43.751369][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.751391][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.751416][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.751437][ T780] ? check_stack_object+0x10f/0x150 [ 43.751459][ T780] dump_stack+0x19/0x20 [ 43.751482][ T780] should_fail_ex+0x3c2/0x510 [ 43.751506][ T780] should_fail+0xf/0x20 [ 43.751527][ T780] should_fail_usercopy+0x1e/0x30 [ 43.751548][ T780] _copy_from_user+0x20/0xa0 [ 43.751573][ T780] kstrtouint_from_user+0xde/0x170 [ 43.751595][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.751616][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.751638][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.751658][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.751684][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.751710][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.751734][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.751759][ T780] vfs_write+0x3c1/0xfd0 [ 43.751779][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.751798][ T780] ? __kasan_check_write+0x18/0x20 [ 43.751817][ T780] ? mutex_lock+0x97/0x1d0 [ 43.751840][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.751864][ T780] ksys_write+0x145/0x260 [ 43.751882][ T780] ? xfd_validate_state+0x68/0x140 [ 43.751908][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.751928][ T780] ? __kasan_check_read+0x15/0x20 [ 43.751947][ T780] __x64_sys_write+0x7f/0x90 [ 43.751966][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.751983][ T780] do_syscall_64+0x57/0xf0 [ 43.752002][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.752025][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.752049][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.752065][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.752081][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.752101][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.752116][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.752129][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.752141][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.752153][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.752169][ T780] [ 43.752193][ T780] FAULT_INJECTION: forcing a failure. [ 43.752193][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.771427][ T64] usb 6-1: SerialNumber: syz [ 43.867080][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 43.867113][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.867125][ T780] Call Trace: [ 43.867131][ T780] [ 43.867138][ T780] __dump_stack+0x21/0x30 [ 43.867168][ T780] dump_stack_lvl+0x140/0x1c0 [ 43.867194][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.867234][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 43.867256][ T780] ? check_stack_object+0x10f/0x150 [ 43.867277][ T780] dump_stack+0x19/0x20 [ 43.867300][ T780] should_fail_ex+0x3c2/0x510 [ 43.867325][ T780] should_fail+0xf/0x20 [ 43.867345][ T780] should_fail_usercopy+0x1e/0x30 [ 43.867368][ T780] _copy_from_user+0x20/0xa0 [ 43.867393][ T780] kstrtouint_from_user+0xde/0x170 [ 43.867414][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.867435][ T780] ? selinux_file_permission+0x318/0xb60 [ 43.867456][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 43.867476][ T780] proc_fail_nth_write+0x8f/0x220 [ 43.867501][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.867528][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 43.867552][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.867578][ T780] vfs_write+0x3c1/0xfd0 [ 43.867597][ T780] ? __cfi_vfs_write+0x10/0x10 [ 43.867616][ T780] ? __kasan_check_write+0x18/0x20 [ 43.867636][ T780] ? mutex_lock+0x97/0x1d0 [ 43.867659][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 43.867683][ T780] ksys_write+0x145/0x260 [ 43.867702][ T780] ? xfd_validate_state+0x68/0x140 [ 43.867727][ T780] ? __cfi_ksys_write+0x10/0x10 [ 43.867747][ T780] ? __kasan_check_read+0x15/0x20 [ 43.867766][ T780] __x64_sys_write+0x7f/0x90 [ 43.867786][ T780] x64_sys_call+0x271c/0x2ee0 [ 43.867803][ T780] do_syscall_64+0x57/0xf0 [ 43.867822][ T780] ? clear_bhb_loop+0x50/0xa0 [ 43.867845][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.867868][ T780] RIP: 0033:0x7fef9cf9e159 [ 43.867885][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.867900][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.867921][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 43.867936][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.867955][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 43.867967][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.867980][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 43.867996][ T780] [ 43.870330][ T780] FAULT_INJECTION: forcing a failure. [ 43.870330][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.067049][ T10] usb 5-1: device descriptor read/64, error -71 [ 44.070650][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.2.123 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 44.070682][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.070694][ T780] Call Trace: [ 44.070701][ T780] [ 44.070708][ T780] __dump_stack+0x21/0x30 [ 44.070738][ T780] dump_stack_lvl+0x140/0x1c0 [ 44.070762][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.070804][ T780] ? _parse_integer_limit+0x195/0x1e0 [ 44.070826][ T780] ? check_stack_object+0x10f/0x150 [ 44.070846][ T780] dump_stack+0x19/0x20 [ 44.070869][ T780] should_fail_ex+0x3c2/0x510 [ 44.070892][ T780] should_fail+0xf/0x20 [ 44.070913][ T780] should_fail_usercopy+0x1e/0x30 [ 44.070935][ T780] _copy_from_user+0x20/0xa0 [ 44.070960][ T780] kstrtouint_from_user+0xde/0x170 [ 44.070982][ T780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 44.071004][ T780] ? selinux_file_permission+0x318/0xb60 [ 44.071026][ T780] ? __cfi_selinux_file_permission+0x10/0x10 [ 44.071046][ T780] proc_fail_nth_write+0x8f/0x220 [ 44.071073][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.071099][ T780] ? bpf_lsm_file_permission+0xd/0x20 [ 44.071124][ T780] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.071150][ T780] vfs_write+0x3c1/0xfd0 [ 44.071170][ T780] ? __cfi_vfs_write+0x10/0x10 [ 44.071189][ T780] ? __kasan_check_write+0x18/0x20 [ 44.071212][ T780] ? mutex_lock+0x97/0x1d0 [ 44.071235][ T780] ? __cfi_mutex_lock+0x10/0x10 [ 44.071259][ T780] ksys_write+0x145/0x260 [ 44.071277][ T780] ? xfd_validate_state+0x68/0x140 [ 44.071298][ T780] ? __cfi_ksys_write+0x10/0x10 [ 44.071317][ T780] ? __kasan_check_read+0x15/0x20 [ 44.071336][ T780] __x64_sys_write+0x7f/0x90 [ 44.071356][ T780] x64_sys_call+0x271c/0x2ee0 [ 44.071373][ T780] do_syscall_64+0x57/0xf0 [ 44.071392][ T780] ? clear_bhb_loop+0x50/0xa0 [ 44.071415][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.071439][ T780] RIP: 0033:0x7fef9cf9e159 [ 44.071455][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.071472][ T780] RSP: 002b:00007fef9de64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.071492][ T780] RAX: ffffffffffffffda RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 44.071507][ T780] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 44.071519][ T780] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 44.071532][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.071544][ T780] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 44.071560][ T780] [ 46.941158][ T64] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.977065][ T64] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.003793][ T64] usb 6-1: USB disconnect, device number 3 [ 47.024863][ T807] syz.2.126 invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=1000 [ 47.055018][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.2.126 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 47.055052][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.055066][ T807] Call Trace: [ 47.055073][ T807] [ 47.055081][ T807] __dump_stack+0x21/0x30 [ 47.055115][ T807] dump_stack_lvl+0x140/0x1c0 [ 47.055143][ T807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.055169][ T807] ? ___ratelimit+0x41c/0x5c0 [ 47.055194][ T807] ? __kasan_check_write+0x18/0x20 [ 47.055218][ T807] dump_stack+0x19/0x20 [ 47.055244][ T807] dump_header+0xd9/0x460 [ 47.055271][ T807] oom_kill_process+0x35d/0x640 [ 47.055296][ T807] out_of_memory+0x5d1/0xa20 [ 47.055318][ T807] ? __cfi_out_of_memory+0x10/0x10 [ 47.055340][ T807] ? mutex_lock_killable+0x97/0x1d0 [ 47.055366][ T807] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.055392][ T807] mem_cgroup_out_of_memory+0x2c5/0x390 [ 47.055414][ T807] ? css_next_descendant_pre+0x1ec/0x210 [ 47.055438][ T807] ? __kasan_check_write+0x18/0x20 [ 47.055459][ T807] ? drain_obj_stock+0xec0/0xec0 [ 47.055481][ T807] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 47.055502][ T807] try_charge_memcg+0x925/0xe10 [ 47.055540][ T807] ? __cfi_try_charge_memcg+0x10/0x10 [ 47.055570][ T807] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 47.055593][ T807] __read_swap_cache_async+0x496/0x860 [ 47.055620][ T807] ? __cfi___read_swap_cache_async+0x10/0x10 [ 47.055644][ T807] ? __asan_memset+0x39/0x50 [ 47.055664][ T807] ? blk_start_plug+0x71/0x1c0 [ 47.055689][ T807] swap_cluster_readahead+0x321/0x570 [ 47.055713][ T807] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 47.055736][ T807] ? is_bpf_text_address+0x17b/0x1a0 [ 47.055765][ T807] ? unwind_get_return_address+0x51/0x90 [ 47.055791][ T807] swapin_readahead+0x102/0x840 [ 47.055815][ T807] ? __cfi___filemap_get_folio+0x10/0x10 [ 47.055839][ T807] ? __cfi_swapin_readahead+0x10/0x10 [ 47.055862][ T807] ? stack_depot_save_flags+0x38/0x800 [ 47.055888][ T807] ? __kasan_check_write+0x18/0x20 [ 47.055908][ T807] ? get_swap_device+0x10f/0x290 [ 47.055931][ T807] do_swap_page+0x4bc/0x4b30 [ 47.055956][ T807] ? __cfi_do_swap_page+0x10/0x10 [ 47.055979][ T807] ? __cfi_default_wake_function+0x10/0x10 [ 47.056007][ T807] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 47.056027][ T807] handle_mm_fault+0x1238/0x1ba0 [ 47.056053][ T807] ? __cfi_handle_mm_fault+0x10/0x10 [ 47.056075][ T807] ? lock_vma_under_rcu+0x4cf/0x590 [ 47.056101][ T807] ? __kasan_check_write+0x18/0x20 [ 47.056122][ T807] do_user_addr_fault+0x951/0x1230 [ 47.056142][ T807] ? fpregs_restore_userregs+0x11c/0x260 [ 47.056167][ T807] exc_page_fault+0x58/0xc0 [ 47.056191][ T807] asm_exc_page_fault+0x2b/0x30 [ 47.056215][ T807] RIP: 0033:0x7fef9cf9e161 [ 47.056232][ T807] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 47.056250][ T807] RSP: 002b:00007fef9de64028 EFLAGS: 00010207 [ 47.056270][ T807] RAX: 0000000000000001 RBX: 00007fef9d226090 RCX: 00007fef9cf9e159 [ 47.056285][ T807] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 47.056299][ T807] RBP: 00007fef9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 47.056313][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.056326][ T807] R13: 00007fef9d226128 R14: 00007fef9d226090 R15: 00007ffff305c678 [ 47.056344][ T807] [ 47.056824][ T807] memory: usage 0kB, limit 0kB, failcnt 55 [ 47.327056][ T64] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 47.345871][ T807] memory+swap: usage 520kB, limit 9007199254740988kB, failcnt 0 [ 47.415563][ T807] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 47.422456][ T807] Memory cgroup stats for /syz2: [ 47.422597][ T807] cache 0 [ 47.430528][ T807] rss 0 [ 47.433302][ T807] rss_huge 0 [ 47.436523][ T807] shmem 0 [ 47.439689][ T807] mapped_file 0 [ 47.443149][ T807] dirty 0 [ 47.446083][ T807] writeback 0 [ 47.449584][ T807] workingset_refault_anon 64 [ 47.454174][ T807] workingset_refault_file 125 [ 47.459016][ T807] swap 532480 [ 47.462338][ T807] swapcached 0 [ 47.465705][ T807] pgpgin 41724 [ 47.469263][ T807] pgpgout 41724 [ 47.472722][ T807] pgfault 18959 [ 47.476179][ T807] pgmajfault 49 [ 47.479793][ T807] inactive_anon 0 [ 47.483430][ T807] active_anon 0 [ 47.486962][ T807] inactive_file 0 [ 47.490766][ T807] active_file 0 [ 47.494222][ T807] unevictable 0 [ 47.497817][ T807] hierarchical_memory_limit 0 [ 47.502498][ T807] hierarchical_memsw_limit 9223372036854771712 [ 47.508794][ T807] total_cache 0 [ 47.512254][ T807] total_rss 0 [ 47.515539][ T807] total_rss_huge 0 [ 47.519438][ T807] total_shmem 0 [ 47.522900][ T807] total_mapped_file 0 [ 47.526880][ T807] total_dirty 0 [ 47.528265][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.530549][ T807] total_writeback 0 [ 47.541481][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 47.545219][ T807] total_workingset_refault_anon 64 [ 47.560325][ T64] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.561170][ T807] total_workingset_refault_file 125 [ 47.579450][ T807] total_swap 532480 [ 47.583312][ T807] total_swapcached 0 [ 47.587365][ T807] total_pgpgin 41724 [ 47.591312][ T807] total_pgpgout 41724 [ 47.594474][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 47.595329][ T807] total_pgfault 18959 [ 47.606034][ T807] total_pgmajfault 49 [ 47.606067][ T64] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 47.610373][ T807] total_inactive_anon 0 [ 47.623451][ T807] total_active_anon 0 [ 47.627583][ T807] total_inactive_file 0 [ 47.631790][ T807] total_active_file 0 [ 47.635823][ T807] total_unevictable 0 [ 47.637049][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.640114][ T807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.126,pid=801,uid=0 [ 47.665306][ T64] usb 6-1: config 0 descriptor?? [ 47.677293][ T64] usb 6-1: can't set config #0, error -71 [ 47.678964][ T807] Memory cgroup out of memory: Killed process 801 (syz.2.126) total-vm:94236kB, anon-rss:1364kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 47.683602][ T64] usb 6-1: USB disconnect, device number 4 [ 47.715137][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 47.715154][ T36] audit: type=1400 audit(1791048139.099:272): avc: denied { accept } for pid=809 comm="syz.5.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 47.850281][ T818] FAULT_INJECTION: forcing a failure. [ 47.850281][ T818] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.877899][ T296] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 47.902203][ T818] CPU: 0 UID: 0 PID: 818 Comm: syz.4.133 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 47.902240][ T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.902254][ T818] Call Trace: [ 47.902261][ T818] [ 47.902270][ T818] __dump_stack+0x21/0x30 [ 47.902304][ T818] dump_stack_lvl+0x140/0x1c0 [ 47.902332][ T818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.902361][ T818] ? __mod_memcg_lruvec_state+0x186/0x460 [ 47.902388][ T818] dump_stack+0x19/0x20 [ 47.902413][ T818] should_fail_ex+0x3c2/0x510 [ 47.902438][ T818] should_fail_alloc_page+0xec/0x110 [ 47.902463][ T818] __alloc_pages_noprof+0x1c0/0x7e0 [ 47.902492][ T818] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.902521][ T818] ? filemap_get_entry+0x41b/0x490 [ 47.902548][ T818] __folio_alloc_noprof+0x14/0x80 [ 47.902575][ T818] __filemap_get_folio+0x798/0xe80 [ 47.902600][ T818] ? __kasan_check_write+0x18/0x20 [ 47.902621][ T818] ? __cfi___filemap_get_folio+0x10/0x10 [ 47.902645][ T818] ? __cfi_folio_end_read+0x10/0x10 [ 47.902668][ T818] ? aio_setup_ring+0x2f4/0xc60 [ 47.902694][ T818] aio_setup_ring+0x38e/0xc60 [ 47.902719][ T818] ? free_ioctx_reqs+0x170/0x170 [ 47.902746][ T818] ioctx_alloc+0x337/0x840 [ 47.902770][ T818] __se_sys_io_setup+0x6f/0x230 [ 47.902793][ T818] __x64_sys_io_setup+0x5f/0x80 [ 47.902817][ T818] x64_sys_call+0x26a4/0x2ee0 [ 47.902835][ T818] do_syscall_64+0x57/0xf0 [ 47.902856][ T818] ? clear_bhb_loop+0x50/0xa0 [ 47.902881][ T818] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.902906][ T818] RIP: 0033:0x7f9640f9e159 [ 47.902924][ T818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.902942][ T818] RSP: 002b:00007f9641dc5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 47.902964][ T818] RAX: ffffffffffffffda RBX: 00007f9641225fa0 RCX: 00007f9640f9e159 [ 47.902980][ T818] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000007fff [ 47.902994][ T818] RBP: 00007f964103506b R08: 0000000000000000 R09: 0000000000000000 [ 47.903008][ T818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.903022][ T818] R13: 00007f9641226038 R14: 00007f9641225fa0 R15: 00007ffc3592deb8 [ 47.903047][ T818] [ 47.967412][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 47.967444][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.967456][ T296] Call Trace: [ 47.967462][ T296] [ 47.967470][ T296] __dump_stack+0x21/0x30 [ 47.967500][ T296] dump_stack_lvl+0x140/0x1c0 [ 47.967534][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.967559][ T296] ? ___ratelimit+0x41c/0x5c0 [ 47.967581][ T296] ? __kasan_check_write+0x18/0x20 [ 47.967601][ T296] dump_stack+0x19/0x20 [ 47.967624][ T296] dump_header+0xd9/0x460 [ 47.967649][ T296] oom_kill_process+0x35d/0x640 [ 47.967672][ T296] out_of_memory+0x5d1/0xa20 [ 47.967693][ T296] ? __cfi_out_of_memory+0x10/0x10 [ 47.967713][ T296] ? mutex_lock_killable+0x97/0x1d0 [ 47.967737][ T296] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.967761][ T296] mem_cgroup_out_of_memory+0x2c5/0x390 [ 47.967782][ T296] ? css_next_descendant_pre+0x1ec/0x210 [ 47.967804][ T296] ? __kasan_check_write+0x18/0x20 [ 47.967823][ T296] ? drain_obj_stock+0xec0/0xec0 [ 47.967844][ T296] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 47.967864][ T296] try_charge_memcg+0x925/0xe10 [ 47.967891][ T296] ? __cfi_try_charge_memcg+0x10/0x10 [ 47.967919][ T296] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 47.967939][ T296] __read_swap_cache_async+0x496/0x860 [ 47.967963][ T296] ? __cfi___read_swap_cache_async+0x10/0x10 [ 47.967986][ T296] ? __asan_memset+0x39/0x50 [ 47.968004][ T296] ? blk_start_plug+0x71/0x1c0 [ 47.968025][ T296] swap_cluster_readahead+0x321/0x570 [ 47.968048][ T296] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 47.968071][ T296] ? sched_clock_noinstr+0xd/0x30 [ 47.968095][ T296] swapin_readahead+0x102/0x840 [ 47.968117][ T296] ? __cfi___filemap_get_folio+0x10/0x10 [ 47.968139][ T296] ? __cfi_swapin_readahead+0x10/0x10 [ 47.968160][ T296] ? __kasan_check_write+0x18/0x20 [ 47.968179][ T296] ? finish_task_switch+0x1d9/0x770 [ 47.968204][ T296] ? get_swap_device+0x10f/0x290 [ 47.968225][ T296] do_swap_page+0x4bc/0x4b30 [ 47.968247][ T296] ? __sched_text_start+0x10/0x10 [ 47.968268][ T296] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 47.968288][ T296] ? __cfi_do_swap_page+0x10/0x10 [ 47.968310][ T296] ? __cfi_default_wake_function+0x10/0x10 [ 47.968334][ T296] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 47.968354][ T296] handle_mm_fault+0x1238/0x1ba0 [ 47.968378][ T296] ? __cfi_handle_mm_fault+0x10/0x10 [ 47.968400][ T296] ? lock_vma_under_rcu+0x4cf/0x590 [ 47.968425][ T296] do_user_addr_fault+0x951/0x1230 [ 47.968444][ T296] ? fpregs_restore_userregs+0x11c/0x260 [ 47.968467][ T296] exc_page_fault+0x58/0xc0 [ 47.968490][ T296] asm_exc_page_fault+0x2b/0x30 [ 47.968513][ T296] RIP: 0033:0x7fef9cf592d7 [ 47.968536][ T296] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 47.968552][ T296] RSP: 002b:00007ffff305c970 EFLAGS: 00010202 [ 47.968570][ T296] RAX: 0000000000000000 RBX: 000055557520c500 RCX: 00007fef9cf592d7 [ 47.968584][ T296] RDX: 00007ffff305c9b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.968598][ T296] RBP: 00007ffff305ca1c R08: 0000000000000000 R09: 0000000000000000 [ 47.968610][ T296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 47.968622][ T296] R13: 00000000000927c0 R14: 000000000000b792 R15: 00007ffff305ca70 [ 47.968637][ T296] [ 47.968645][ T296] memory: usage 0kB, limit 0kB, failcnt 695 [ 48.477959][ T296] memory+swap: usage 476kB, limit 9007199254740988kB, failcnt 0 [ 48.485609][ T296] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.492492][ T296] Memory cgroup stats for /syz2: [ 48.492607][ T296] cache 0 [ 48.500513][ T296] rss 0 [ 48.503289][ T296] rss_huge 0 [ 48.506482][ T296] shmem 0 [ 48.509452][ T296] mapped_file 0 [ 48.512907][ T296] dirty 0 [ 48.515844][ T296] writeback 0 [ 48.519182][ T296] workingset_refault_anon 64 [ 48.523766][ T296] workingset_refault_file 125 [ 48.528452][ T296] swap 532480 [ 48.531730][ T296] swapcached 0 [ 48.535097][ T296] pgpgin 41724 [ 48.569198][ T296] pgpgout 41724 [ 48.572696][ T296] pgfault 18959 [ 48.576155][ T296] pgmajfault 49 [ 48.582395][ T296] inactive_anon 0 [ 48.586452][ T296] active_anon 0 [ 48.589973][ T296] inactive_file 0 [ 48.593605][ T296] active_file 0 [ 48.597089][ T296] unevictable 0 [ 48.600547][ T296] hierarchical_memory_limit 0 [ 48.605244][ T296] hierarchical_memsw_limit 9223372036854771712 [ 48.611430][ T296] total_cache 0 [ 48.614906][ T296] total_rss 0 [ 48.618215][ T296] total_rss_huge 0 [ 48.621933][ T296] total_shmem 0 [ 48.625386][ T296] total_mapped_file 0 [ 48.629403][ T296] total_dirty 0 [ 48.632851][ T296] total_writeback 0 [ 48.636654][ T296] total_workingset_refault_anon 64 [ 48.641789][ T296] total_workingset_refault_file 125 [ 48.647007][ T296] total_swap 532480 [ 48.650808][ T296] total_swapcached 0 [ 48.654692][ T296] total_pgpgin 41724 [ 48.658624][ T296] total_pgpgout 41724 [ 48.662595][ T296] total_pgfault 18959 [ 48.666571][ T296] total_pgmajfault 49 [ 48.670572][ T296] total_inactive_anon 0 [ 48.674718][ T296] total_active_anon 0 [ 48.678718][ T296] total_inactive_file 0 [ 48.682861][ T296] total_active_file 0 [ 48.686836][ T296] total_unevictable 0 [ 48.690963][ T296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.81,pid=653,uid=0 [ 48.707012][ T296] Memory cgroup out of memory: Killed process 653 (syz.2.81) total-vm:94236kB, anon-rss:1288kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 48.732215][ T45] usb 3-1: USB disconnect, device number 9 [ 48.740204][ T36] audit: type=1400 audit(1791048140.139:273): avc: denied { create } for pid=825 comm="syz.4.135" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.762730][ T296] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 48.775435][ T36] audit: type=1400 audit(1791048140.139:274): avc: denied { link } for pid=825 comm="syz.4.135" name="#9" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.797438][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 48.797472][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.797484][ T296] Call Trace: [ 48.797489][ T296] [ 48.797497][ T296] __dump_stack+0x21/0x30 [ 48.797528][ T296] dump_stack_lvl+0x140/0x1c0 [ 48.797554][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.797580][ T296] ? ___ratelimit+0x41c/0x5c0 [ 48.797603][ T296] ? __kasan_check_write+0x18/0x20 [ 48.797624][ T296] dump_stack+0x19/0x20 [ 48.797649][ T296] dump_header+0xd9/0x460 [ 48.797672][ T296] oom_kill_process+0x35d/0x640 [ 48.797693][ T296] out_of_memory+0x5d1/0xa20 [ 48.797713][ T296] ? __cfi_out_of_memory+0x10/0x10 [ 48.797734][ T296] ? mutex_lock_killable+0x97/0x1d0 [ 48.797757][ T296] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.797782][ T296] mem_cgroup_out_of_memory+0x2c5/0x390 [ 48.797801][ T296] ? css_next_descendant_pre+0x1ec/0x210 [ 48.797825][ T296] ? __kasan_check_write+0x18/0x20 [ 48.797842][ T296] ? drain_obj_stock+0xec0/0xec0 [ 48.797863][ T296] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 48.797881][ T296] try_charge_memcg+0x925/0xe10 [ 48.797907][ T296] ? __cfi_try_charge_memcg+0x10/0x10 [ 48.797934][ T296] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 48.797965][ T296] __read_swap_cache_async+0x496/0x860 [ 48.797990][ T296] ? __cfi___read_swap_cache_async+0x10/0x10 [ 48.798013][ T296] ? __asan_memset+0x39/0x50 [ 48.798032][ T296] ? blk_start_plug+0x71/0x1c0 [ 48.798056][ T296] swap_cluster_readahead+0x321/0x570 [ 48.798081][ T296] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 48.798105][ T296] ? sched_clock_noinstr+0xd/0x30 [ 48.798130][ T296] swapin_readahead+0x102/0x840 [ 48.798153][ T296] ? __cfi___filemap_get_folio+0x10/0x10 [ 48.798177][ T296] ? __cfi_swapin_readahead+0x10/0x10 [ 48.798200][ T296] ? __kasan_check_write+0x18/0x20 [ 48.798220][ T296] ? finish_task_switch+0x1d9/0x770 [ 48.798245][ T296] ? get_swap_device+0x10f/0x290 [ 48.798268][ T296] do_swap_page+0x4bc/0x4b30 [ 48.798291][ T296] ? __sched_text_start+0x10/0x10 [ 48.798312][ T296] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 48.798333][ T296] ? __cfi_do_swap_page+0x10/0x10 [ 48.798354][ T296] ? __cfi_default_wake_function+0x10/0x10 [ 48.798381][ T296] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 48.798401][ T296] handle_mm_fault+0x1238/0x1ba0 [ 48.798427][ T296] ? __cfi_handle_mm_fault+0x10/0x10 [ 48.798447][ T296] ? lock_vma_under_rcu+0x4cf/0x590 [ 48.798475][ T296] do_user_addr_fault+0x951/0x1230 [ 48.798495][ T296] ? fpregs_restore_userregs+0x11c/0x260 [ 48.798520][ T296] exc_page_fault+0x58/0xc0 [ 48.798546][ T296] asm_exc_page_fault+0x2b/0x30 [ 48.798571][ T296] RIP: 0033:0x7fef9cf592d7 [ 48.798588][ T296] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 48.798605][ T296] RSP: 002b:00007ffff305c970 EFLAGS: 00010202 [ 48.798624][ T296] RAX: 0000000000000000 RBX: 000055557520c500 RCX: 00007fef9cf592d7 [ 48.798640][ T296] RDX: 00007ffff305c9b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.798653][ T296] RBP: 00007ffff305ca1c R08: 0000000000000000 R09: 0000000000000000 [ 48.798666][ T296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 48.798679][ T296] R13: 00000000000927c0 R14: 000000000000b792 R15: 00007ffff305ca70 [ 48.798696][ T296] [ 48.801244][ T296] memory: usage 0kB, limit 0kB, failcnt 712 [ 48.817043][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 48.823589][ T36] audit: type=1400 audit(1791048140.139:275): avc: denied { rename } for pid=825 comm="syz.4.135" name="#a" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.897055][ T296] memory+swap: usage 424kB, limit 9007199254740988kB, failcnt 0 [ 48.900855][ T36] audit: type=1400 audit(1791048140.199:276): avc: denied { unmount } for pid=440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.903870][ T296] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 49.209961][ T296] Memory cgroup stats for /syz2: [ 49.210086][ T296] cache 0 [ 49.218010][ T296] rss 0 [ 49.221641][ T296] rss_huge 0 [ 49.224844][ T296] shmem 0 [ 49.227830][ T296] mapped_file 0 [ 49.231282][ T296] dirty 0 [ 49.234215][ T296] writeback 0 [ 49.237532][ T296] workingset_refault_anon 64 [ 49.242117][ T296] workingset_refault_file 125 [ 49.246786][ T296] swap 532480 [ 49.250115][ T296] swapcached 0 [ 49.253478][ T296] pgpgin 41724 [ 49.256845][ T296] pgpgout 41724 [ 49.260337][ T296] pgfault 18959 [ 49.263786][ T296] pgmajfault 49 [ 49.267348][ T296] inactive_anon 0 [ 49.271053][ T296] active_anon 0 [ 49.274511][ T296] inactive_file 0 [ 49.278372][ T296] active_file 0 [ 49.281835][ T296] unevictable 0 [ 49.285284][ T296] hierarchical_memory_limit 0 [ 49.290045][ T296] hierarchical_memsw_limit 9223372036854771712 [ 49.296277][ T296] total_cache 0 [ 49.299896][ T296] total_rss 0 [ 49.303247][ T296] total_rss_huge 0 [ 49.307097][ T296] total_shmem 0 [ 49.310617][ T296] total_mapped_file 0 [ 49.314669][ T10] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 49.325707][ T10] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 49.336343][ T296] total_dirty 0 [ 49.339867][ T520] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 49.347531][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 49.354220][ T296] total_writeback 0 [ 49.358244][ T296] total_workingset_refault_anon 64 [ 49.363358][ T296] total_workingset_refault_file 125 [ 49.368654][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 49.377716][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.386093][ T296] total_swap 532480 [ 49.389982][ T296] total_swapcached 0 [ 49.393874][ T296] total_pgpgin 41724 [ 49.398042][ T10] usb 6-1: config 0 descriptor?? [ 49.403447][ T824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 49.413632][ T296] total_pgpgout 41724 [ 49.419865][ T296] total_pgfault 18959 [ 49.423876][ T296] total_pgmajfault 49 [ 49.428111][ T296] total_inactive_anon 0 [ 49.432291][ T296] total_active_anon 0 [ 49.436303][ T296] total_inactive_file 0 [ 49.440523][ T296] total_active_file 0 [ 49.444524][ T296] total_unevictable 0 [ 49.448777][ T296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.12,pid=342,uid=0 [ 49.463428][ T296] Memory cgroup out of memory: Killed process 342 (syz.2.12) total-vm:90264kB, anon-rss:1240kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 49.509499][ T520] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 49.527129][ T520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.545869][ T296] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 49.557852][ T520] usb 5-1: Product: syz [ 49.562048][ T520] usb 5-1: Manufacturer: syz [ 49.566664][ T520] usb 5-1: SerialNumber: syz [ 49.571477][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 49.571504][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.571516][ T296] Call Trace: [ 49.571522][ T296] [ 49.571529][ T296] __dump_stack+0x21/0x30 [ 49.571559][ T296] dump_stack_lvl+0x140/0x1c0 [ 49.571583][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.571605][ T296] ? ___ratelimit+0x41c/0x5c0 [ 49.571625][ T296] ? __kasan_check_write+0x18/0x20 [ 49.571643][ T296] dump_stack+0x19/0x20 [ 49.571663][ T296] dump_header+0xd9/0x460 [ 49.571683][ T296] oom_kill_process+0x35d/0x640 [ 49.571703][ T296] out_of_memory+0x5d1/0xa20 [ 49.571721][ T296] ? __cfi_out_of_memory+0x10/0x10 [ 49.571739][ T296] ? mutex_lock_killable+0x97/0x1d0 [ 49.571760][ T296] ? __cfi_mutex_lock_killable+0x10/0x10 [ 49.571781][ T296] mem_cgroup_out_of_memory+0x2c5/0x390 [ 49.571800][ T296] ? css_next_descendant_pre+0x1ec/0x210 [ 49.571821][ T296] ? __kasan_check_write+0x18/0x20 [ 49.571838][ T296] ? drain_obj_stock+0xec0/0xec0 [ 49.571856][ T296] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 49.571875][ T296] try_charge_memcg+0x925/0xe10 [ 49.571898][ T296] ? __cfi_try_charge_memcg+0x10/0x10 [ 49.571921][ T296] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 49.571939][ T296] __read_swap_cache_async+0x496/0x860 [ 49.571960][ T296] ? __cfi___read_swap_cache_async+0x10/0x10 [ 49.571979][ T296] ? __asan_memset+0x39/0x50 [ 49.571996][ T296] ? blk_start_plug+0x71/0x1c0 [ 49.572015][ T296] swap_cluster_readahead+0x321/0x570 [ 49.572034][ T296] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 49.572054][ T296] ? sched_clock_noinstr+0xd/0x30 [ 49.572074][ T296] swapin_readahead+0x102/0x840 [ 49.572094][ T296] ? __cfi___filemap_get_folio+0x10/0x10 [ 49.572114][ T296] ? __cfi_swapin_readahead+0x10/0x10 [ 49.572133][ T296] ? __kasan_check_write+0x18/0x20 [ 49.572149][ T296] ? finish_task_switch+0x1d9/0x770 [ 49.572171][ T296] ? get_swap_device+0x10f/0x290 [ 49.572191][ T296] do_swap_page+0x4bc/0x4b30 [ 49.572212][ T296] ? __sched_text_start+0x10/0x10 [ 49.572234][ T296] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.572254][ T296] ? __cfi_do_swap_page+0x10/0x10 [ 49.572277][ T296] ? __cfi_default_wake_function+0x10/0x10 [ 49.572302][ T296] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 49.572323][ T296] handle_mm_fault+0x1238/0x1ba0 [ 49.572359][ T296] ? __cfi_handle_mm_fault+0x10/0x10 [ 49.572382][ T296] ? lock_vma_under_rcu+0x4cf/0x590 [ 49.572410][ T296] do_user_addr_fault+0x951/0x1230 [ 49.572431][ T296] ? fpregs_restore_userregs+0x11c/0x260 [ 49.572457][ T296] exc_page_fault+0x58/0xc0 [ 49.572483][ T296] asm_exc_page_fault+0x2b/0x30 [ 49.572508][ T296] RIP: 0033:0x7fef9cf592d7 [ 49.572524][ T296] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 49.572542][ T296] RSP: 002b:00007ffff305c970 EFLAGS: 00010202 [ 49.572560][ T296] RAX: 0000000000000000 RBX: 000055557520c500 RCX: 00007fef9cf592d7 [ 49.572574][ T296] RDX: 00007ffff305c9b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.572587][ T296] RBP: 00007ffff305ca1c R08: 0000000000000000 R09: 0000000000000000 [ 49.572601][ T296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 49.572613][ T296] R13: 00000000000927c0 R14: 000000000000b792 R15: 00007ffff305ca70 [ 49.572629][ T296] [ 49.572706][ T296] memory: usage 0kB, limit 0kB, failcnt 848 [ 49.919193][ T296] memory+swap: usage 404kB, limit 9007199254740988kB, failcnt 0 [ 49.927230][ T296] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 49.927931][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 49.934840][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 49.941087][ T296] Memory cgroup stats for /syz2 [ 49.949101][ T520] usb-storage 5-1:1.0: USB Mass Storage device detected [ 49.957214][ T296] : [ 49.960968][ T296] cache 0 [ 49.962550][ T10] usb 6-1: USB disconnect, device number 5 [ 49.966384][ T296] rss 0 [ 49.975489][ T520] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 49.985099][ T296] rss_huge 0 [ 49.987460][ T520] scsi host1: usb-storage 5-1:1.0 [ 49.994116][ T296] shmem 0 [ 49.997135][ T296] mapped_file 0 [ 50.000649][ T296] dirty 0 [ 50.003586][ T296] writeback 0 [ 50.006862][ T296] workingset_refault_anon 64 [ 50.013324][ T296] workingset_refault_file 125 [ 50.018926][ T296] swap 413696 [ 50.022721][ T296] swapcached 0 [ 50.026557][ T296] pgpgin 41724 [ 50.029973][ T296] pgpgout 41724 [ 50.033509][ T296] pgfault 18968 [ 50.036967][ T296] pgmajfault 49 [ 50.040461][ T296] inactive_anon 0 [ 50.049574][ T296] active_anon 0 [ 50.053054][ T296] inactive_file 0 [ 50.056762][ T296] active_file 0 [ 50.060308][ T296] unevictable 0 [ 50.063762][ T296] hierarchical_memory_limit 0 [ 50.068515][ T296] hierarchical_memsw_limit 9223372036854771712 [ 50.074728][ T296] total_cache 0 [ 50.078215][ T296] total_rss 0 [ 50.081545][ T296] total_rss_huge 0 [ 50.085308][ T296] total_shmem 0 [ 50.089199][ T296] total_mapped_file 0 [ 50.093377][ T296] total_dirty 0 [ 50.096910][ T296] total_writeback 0 [ 50.100757][ T296] total_workingset_refault_anon 64 [ 50.105917][ T296] total_workingset_refault_file 125 [ 50.116317][ T296] total_swap 413696 [ 50.120198][ T296] total_swapcached 0 [ 50.124144][ T296] total_pgpgin 41724 [ 50.128218][ T296] total_pgpgout 41724 [ 50.132192][ T296] total_pgfault 18968 [ 50.136223][ T296] total_pgmajfault 49 [ 50.140276][ T296] total_inactive_anon 0 [ 50.144430][ T296] total_active_anon 0 [ 50.148485][ T296] total_inactive_file 0 [ 50.152717][ T296] total_active_file 0 [ 50.156698][ T296] total_unevictable 0 [ 50.160757][ T296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor,pid=296,uid=0 [ 50.162990][ T520] usb 5-1: USB disconnect, device number 14 [ 50.176070][ T296] Memory cgroup out of memory: Killed process 296 (syz-executor) total-vm:90132kB, anon-rss:1228kB, file-rss:21652kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0 [ 50.261007][ T12] bridge_slave_1: left allmulticast mode [ 50.266687][ T12] bridge_slave_1: left promiscuous mode [ 50.272602][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.280372][ T12] bridge_slave_0: left allmulticast mode [ 50.286890][ T12] bridge_slave_0: left promiscuous mode [ 50.293320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.380610][ T36] audit: type=1400 audit(1791048141.769:277): avc: denied { write } for pid=837 comm="syz.5.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.417039][ T36] audit: type=1400 audit(1791048141.769:278): avc: denied { bind } for pid=837 comm="syz.5.139" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.457062][ T36] audit: type=1400 audit(1791048141.779:279): avc: denied { name_bind } for pid=837 comm="syz.5.139" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 50.480252][ T12] veth1_macvtap: left promiscuous mode [ 50.485789][ T12] veth0_vlan: left promiscuous mode [ 50.507035][ T36] audit: type=1400 audit(1791048141.779:280): avc: denied { node_bind } for pid=837 comm="syz.5.139" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 50.591051][ T839] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.598154][ T839] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.605224][ T839] bridge_slave_0: entered allmulticast mode [ 50.611744][ T839] bridge_slave_0: entered promiscuous mode [ 50.617035][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 50.618901][ T839] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.632169][ T839] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.639361][ T839] bridge_slave_1: entered allmulticast mode [ 50.645708][ T839] bridge_slave_1: entered promiscuous mode [ 50.679220][ T36] audit: type=1400 audit(1791048142.079:281): avc: denied { write } for pid=843 comm="syz.4.140" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.702812][ T839] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.709880][ T839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.717186][ T839] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.724221][ T839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.797031][ T839] veth0_vlan: entered promiscuous mode [ 50.797051][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 50.830135][ T839] veth1_macvtap: entered promiscuous mode [ 50.977448][ T12] bridge_slave_1: left allmulticast mode [ 50.983127][ T12] bridge_slave_1: left promiscuous mode [ 50.988806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.007809][ T12] bridge_slave_0: left allmulticast mode [ 51.013487][ T12] bridge_slave_0: left promiscuous mode [ 51.037092][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.199600][ T12] veth1_macvtap: left promiscuous mode [ 51.205167][ T12] veth0_vlan: left promiscuous mode [ 51.334085][ T10] usb 6-1: device descriptor read/all, error -71 [ 53.152333][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 53.152350][ T36] audit: type=1400 audit(1791048144.549:354): avc: denied { read } for pid=440 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.365512][ T36] audit: type=1400 audit(1791048144.759:355): avc: denied { execmem } for pid=872 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 53.394201][ T36] audit: type=1400 audit(1791048144.779:356): avc: denied { execmem } for pid=875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 53.423971][ T36] audit: type=1400 audit(1791048144.819:357): avc: denied { execmem } for pid=876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 53.452685][ T36] audit: type=1400 audit(1791048144.839:358): avc: denied { execmem } for pid=877 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 53.472158][ T36] audit: type=1400 audit(1791048144.839:359): avc: denied { mounton } for pid=878 comm="syz.5.152" path="/11/bus" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 53.494143][ T36] audit: type=1400 audit(1791048144.849:360): avc: denied { read } for pid=721 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.517605][ T36] audit: type=1400 audit(1791048144.859:361): avc: denied { read } for pid=440 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.571155][ T12] bridge_slave_1: left allmulticast mode [ 53.576827][ T12] bridge_slave_1: left promiscuous mode [ 53.582474][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.589884][ T12] bridge_slave_0: left allmulticast mode [ 53.595512][ T12] bridge_slave_0: left promiscuous mode [ 53.601209][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.688502][ T12] veth1_macvtap: left promiscuous mode [ 53.694035][ T12] veth0_vlan: left promiscuous mode [ 54.358658][ T36] audit: type=1400 audit(1791048145.759:362): avc: denied { read write } for pid=881 comm="syz.4.153" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 54.393481][ T36] audit: type=1400 audit(1791048145.759:363): avc: denied { create } for pid=881 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 55.088562][ T12] bridge_slave_1: left allmulticast mode [ 55.094213][ T12] bridge_slave_1: left promiscuous mode [ 55.100029][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.107562][ T12] bridge_slave_0: left allmulticast mode [ 55.113195][ T12] bridge_slave_0: left promiscuous mode [ 55.118801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.218689][ T12] veth1_macvtap: left promiscuous mode [ 55.224206][ T12] veth0_vlan: left promiscuous mode [ 55.437717][ T12] bridge_slave_1: left allmulticast mode [ 55.443372][ T12] bridge_slave_1: left promiscuous mode [ 55.449213][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.456657][ T12] bridge_slave_0: left allmulticast mode [ 55.462386][ T12] bridge_slave_0: left promiscuous mode [ 55.468360][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.598623][ T12] veth1_macvtap: left promiscuous mode [ 55.604133][ T12] veth0_vlan: left promiscuous mode