last executing test programs: 8.201022611s ago: executing program 0 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd(0xfffffffa) fsetxattr$system_posix_acl(r1, &(0x7f0000002740)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x100, 0x2c, "", [{{0x9, 0x4, 0x0, 0xb, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x87, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000001040)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0001180000001801c010cc936599fc7e380600000000000000de5ef4154a71ff0436ab13e39c57a934642352e4516ece99e18d5873f97bb63c24e8e61244e97e85a6238cfa7a5e2afa0f8f86f7ac32d6fd2f02a8e5e0c5432db719179b66"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0x24, {0x24, 0x23, "56d4ecb65b890c936e164c33cb74f553c3c7b1e9e3adccb4927f4293d61bfff53dcb"}}, &(0x7f0000000040)={0x0, 0x3, 0x32, @string={0x32, 0x3, "607358b7fa136ff87b40988f9b7eb3fb4c7609d7f07bd22cc2720b24bcf26a1c56ba55dccfbbed8d4c42676cfc85b082"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x3, 0x8, 'P4jv', "8bf92991"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x4, 0x3, 0x0, 0xfff, 0x1}}}, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x17, 0x96, "91ebd7e56fe6658ea6e2e8fb29c81dee6bd22c5f12caed28496dd837a061a588d01cbcf80a72051e24e94f373304686b7627c1a27a61ce888635b1eab2935838cb0ced4c3ebedcae3ff06084737c09feaf638971489fd35295c6afa7dec0f72b20eb52296fff7d00ec16c4f1d6f03d9e0499890667119eb8df025c3710d52375ca42c422025fec816e22a1be23e232c8d2585011b538"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0xe6, 0x8}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000440)={0x40, 0xb, 0x2, "e79c"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "9028"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xfffa}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) (rerun: 64) 8.200287801s ago: executing program 1 (id=171): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) syslog(0x4, &(0x7f00000001c0), 0x0) syslog(0x1, &(0x7f0000000080)=""/235, 0xeb) userfaultfd(0x80001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x88, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000000000000001, 0xffffffffffffffff], 0x1000, 0x206040}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff28bbe044ff092403f3", @ANYRES8=r0, @ANYRES64=r7], 0x0) 6.773320546s ago: executing program 1 (id=180): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@sr0, r1, 0x0) 6.686563628s ago: executing program 1 (id=181): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x6, 0x0, 0xfd, 0xe}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@canfd={{0x3, 0x1}, 0x20, 0x1, 0x0, 0x0, "c9d909693a364e15dfe2e03281d3c6527c9cfad1d39f6b1917d9c7e86be50a0aee6fb50f5ed126ec6a912d143456d140b5a8d81c1ed98a0d692f6d1f9fa478e8"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0xd209f6d814827b17) read(r0, &(0x7f0000002fc0)=""/52, 0x34) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) unlink(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000540)=0x8) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000180)={0xffffff81, 0x200, 0x9, 0x3}) 6.5893789s ago: executing program 1 (id=182): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/stat\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x98, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000b40)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x1, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x15}, @flat=@weak_binder}, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) read$FUSE(r0, &(0x7f000001d400)={0x2020}, 0x2020) 6.576705511s ago: executing program 1 (id=183): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000003c0)={0x2001, {{0x2, 0x4e23, @multicast1}}, {{0x2002, 0x4e24, @loopback}}}, 0x108) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000040)={0xffff8000, 0x2, 0x2, 0x1, 0x1}, 0x8) 6.557434321s ago: executing program 1 (id=184): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f000000af40)={0xa000000a}) r1 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r1, 0x409, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x4e650000) 5.215690214s ago: executing program 0 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) statx(r2, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x800, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x4000, 0x24000, 0x10000a}}) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000080), 0x38}) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x3}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0xa, 0x0, [{0x80000008, 0x18, 0x6, 0x7ff, 0xc8, 0x5, 0x80000001}, {0x80000000, 0x4, 0x5, 0x9, 0x10001, 0x6, 0x6}, {0x4, 0x8, 0x2, 0x8, 0x2, 0x80, 0xfffffff9}, {0x80000007, 0x3, 0x0, 0xa8d, 0xfffffffe, 0x4, 0x7}, {0x80000008, 0x8, 0x6, 0x7, 0x2, 0x7, 0xd8e}, {0x80000007, 0x3, 0x0, 0x0, 0x0, 0x3, 0x2b}, {0x1, 0x53e, 0x4, 0x0, 0x8, 0x9, 0xffffff9d}, {0x0, 0x7e, 0x5, 0x4, 0xeb, 0x3, 0x7}, {0x6, 0xd4a, 0x2, 0x511, 0x0, 0x3, 0x1}, {0xc0000000, 0x16a6, 0x2, 0x8, 0x7, 0xffff, 0xfffffff1}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) (async) statx(r2, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x800, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) (async) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x4000, 0x24000, 0x10000a}}) (async) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000080), 0x38}) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x3}) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0xa, 0x0, [{0x80000008, 0x18, 0x6, 0x7ff, 0xc8, 0x5, 0x80000001}, {0x80000000, 0x4, 0x5, 0x9, 0x10001, 0x6, 0x6}, {0x4, 0x8, 0x2, 0x8, 0x2, 0x80, 0xfffffff9}, {0x80000007, 0x3, 0x0, 0xa8d, 0xfffffffe, 0x4, 0x7}, {0x80000008, 0x8, 0x6, 0x7, 0x2, 0x7, 0xd8e}, {0x80000007, 0x3, 0x0, 0x0, 0x0, 0x3, 0x2b}, {0x1, 0x53e, 0x4, 0x0, 0x8, 0x9, 0xffffff9d}, {0x0, 0x7e, 0x5, 0x4, 0xeb, 0x3, 0x7}, {0x6, 0xd4a, 0x2, 0x511, 0x0, 0x3, 0x1}, {0xc0000000, 0x16a6, 0x2, 0x8, 0x7, 0xffff, 0xfffffff1}]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 5.027290179s ago: executing program 0 (id=199): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0xd, 0x101, 0x2, 0xace3, 0x4, 0x8, 0x4}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x4a, 0x10, 0x0, 0x1, @loopback, @private0, 0x10, 0x80, 0x1c, 0x7}}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r7, 0x5393, &(0x7f0000000100)=0x3) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f00000007c0)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x7, 0x14, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x44, 0x6, "c631cbb6"}, @generic={0x44, 0x2}]}}, {0x2000, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xa8, 0x100}}}}}}}}, 0x3e) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) writev(r8, &(0x7f0000000340)=[{&(0x7f00000001c0)='X\x00\x00\x00', 0x4}], 0x1) 4.824703183s ago: executing program 0 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) setuid(0xee01) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000010007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 3.881427716s ago: executing program 0 (id=209): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x6, 0xfd}}}}}]}}]}}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) read(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.149109222s ago: executing program 2 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000180)=[{r0, 0x4c0}, {0xffffffffffffffff, 0x1058}, {0xffffffffffffffff, 0x8024}, {r0, 0x123}, {0xffffffffffffffff, 0x208}, {r0, 0xa380}, {r0}, {0xffffffffffffffff, 0xc}, {r0, 0x2080}], 0x9, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) 862.938599ms ago: executing program 0 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r1 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124020101020000000000000000020d000924030201010001"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x20, 0x4, 0x6, {0x6, 0x10, "c5ababde"}}, 0x0}, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x81, 0x3, "054468"}, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x1000000) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='erofs\x00', 0x28841b, 0x0) 587.995886ms ago: executing program 3 (id=231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000840)=@vmx={0xc, 0x0, 0x2080, {0xdddd0000, 0x3000, {0x2}}, {"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", "ef10706905ca0c644587649520d11530ae38e9445049f8ff2dab70ca3dc283cbcbd78ef6ea17581605439d1f3bc83530acf8bb745ed32f87df679feb0c33958d5ac03afbfbe6bbe2a9e2427acedde1d230b7ff16a88176b1e583b3a3a47956d49af4d3a5fec739352ef1b109439f93a1f8655c54c0faeb42bbf41e4947d55c563b317c55dacbfbb2110bf209a7034d7825e216d5e85e85f74ce407de7da34205efbb650e0606fd6c8fc6fb4f84bf4acc44194182bbdf94f667e5654c613b8035f3473d04cb8143b48238764d46aed2b6ab3fdbea5474f1c2aab4d6cfe6f8efd62b1825fbbd2814f5dd1facafdeb6e96262143b9f557652ea149d4ffe72203b0c58f616edbd9ffff5945537721e8272b344cadf06db541e455cc6a05ccb5a362b04e044d8d412972d949196eaf318caf41e81fd9b268ccb738f607345af6a8919190c1ec52c77c625867ed5e9787f827f6f77b98ef87710c581a98a6bf5b420dcc747e50cc4a435c78011b3462ce0a971b63b9fe8194eab924a1f7d9b182359b3377381bed8abd26e09c1846150d91cfd2d7d08558be9191e92c711f851e12402a3f3326a3ef596c6df17df03b40c505b549065205eec758db40187562f126303db1d6de6db07188e4c544284414e0a5ec3f0e36fe05eb3bd1aceb8add66b83e61bd20449cbd7f0f3a9e60c7737ebaf5d3843a34cc9777a29b140f96663e7f1e6c7a3decba2dbe7e728986979ebebf629c60a3ae348dba6e112573828c05788ad60ed71e96055ff81c39ee666cdd1685e7675b61ea30096d49deee5eb3edcaa89c8a80ae514435f57ff44cd9c30b7bde49b168f1a6768d9fc1c9267f640cb5f7190e0e0be5905db554de53faa3d0ae5ce15b18c3656bda36273f0dcf109b0ac7448443289007164b0d6e73fb8644e5305acf2e8df910732b1d6a9ad9094e66777be6879033b46cbc200d442dfd632b354baa309dbecb4a67c4a92ba847d0ae0eb50273664e79721a37e660bcaf5c2b45c6837712de0c749d3836a9d8a5a9ea5468f3f46be3bdb11c5c80dd860b023e4a8c932a8eda751cf3dd8b1c58a1a7af19f189d51a952c6e309f0ac907d25adb436ff082599ab36d24fcc8ee4cab46b20e971030f05658b8f281a88a57ed6930e33ed3bd8c55d5217a9369a6ecd5fbda793769b717447b7f573f3499ec3a2283e0d9e0448605b672d74f54f4240bd6cc315dab1044dba675e6e5254058678b27fa43b6fe6bc12774a371cee410b057336e9af5a896149edeb38f409dbcf0ad4a5cbf646df5916cce5f4104a2dee23ee686d12cab81457582cb82fac9225101765d6ee77f6727b4b0c4d6c8a3f3794f60f7b9c9fb0ce7f217c268efed9e764267b9627ef104fb2932a6bc2fc0224ed4e76ebd0e9f549d8b235539508cbee63769bd2c49894d1a855f9a38dda062941d526879bfb9de6e23e18ae54b7b579966bd5452f7ebdb095c754980b7703c09089b08f536cee01a1c3c51fa30e122619becae3da5573ef631949a9f7d2367cea597a2905f184a49d4e45c1904211a6b80e1adfd71ae73aebc1e1a7b4ecb001ab930e06b17cd0ea3b434e550c5ec82d2bb396892015954c28604870c68a7cc6dd0060df91ad58471111f90ed603540fdc6dd2ac5f66792d61dfc18826daf519acb45d6d73012bf49c7524e438dee65ea5e0d20483a1e51f7d3155494b97a2d3f17088f5b6cf36507756a15932ab357c4279c4252d28d5068c2284ef176aefe297109bc4db5a7911c01744015301b46673415422deb8c987510b640cfc429860d4caed5a3b3d9cd0187418f977cfb9dc5cf529e02aa5d7899b89bb62410f3b32847757266d65e2a548b76bd2fe1742f88345e618c6c49acfc8ea96498a41986cc5be045a232013aecb75de12b7cf33e79fce01435caedf2cf56c8b1e7255cc2c20a9ae337d29c33a01cfcbd254446ad6ae5fc90d0ed6167b210e921ae4f1297c994b9c078c301afad7b78962f96b095259eb334e1b6972b69929bb30a845d0b3cc84014948d0dac0e55753b5d2c49d9742ebc2fc72bb61875bc9ea19337a1ea3cb68f6adb687ee9f86dba0a79d501d1b857014c4649d8c48c8c18ebe4774b73af079627480b6891ef4775b78f9f23afab73ddb920abbb38fdda60b544c81f0d754dbaf66ed96cc20e07ec394b88e67a97739a1dcd131af171b25c18484b7074ed26c70c680da7356ab17b049601bf6a059000e7e167db5953872222ece003b3047f930b602bc0e7382fe3d2c515530fce26191c8f2b7f2bc03c4186becbdf975bcc6559d3ffa94c16b0d1be0d527cf6398f5efddb13ada58015567d6495704fb605fee1d7afdd8b73fe72d3629f618433b632f765dff207e132161803530e7f3abd4153940a00e1004dfea4b72baeb89c2e764d963300ac682c6fe07a282c6482b50f1737942a69dcaaa1ff678fca8495661f217c24bd31600cf4c66311916fb1ce650a671bde49e5ac1d064c19c8393a8c226c1dafae4ebfeb6ff8152ee0ce6af14ab4f9336af4f05018a433332df96b827e03307d2b64a5135c70e2c5b615919002f57ab0882266dbd7ef330b93449c797929def55e0ff792f07c7b450fd8eb1f4c4e9d98f8f76ad7c74762f8367ae729b1c0f6ecb44607ee70b3a6eeab604c7d0bbcc068f870b301cbe903ba699566ae6a7804216842f4a266f5def115953dbef1b5d4394df220f6d2865ed8c5087404678b5e114cda0a2d631b777c263dd0140bd529771aeebf3f2331850681787c2ad1872e81fcc037c90fd5ca13fe70b32701ae103266a0c954d99524b0c5975a8f55e004a90bec8ab5cc503e8a1794195f3697f48dc46abce893145d23b6c70e750346b10e4737ec716f178aa914f5018a90c6e92b4bac942516bd146f0864ed271111d0bf5bd0b18ef1bbebe51d6aaffafd496baf6723d25f1dc655f4977e7c92dc493f537504ae8fc7bc667e7f425c32a0b13547874d476d4a800baee4ab4cb8d86cfa48c1f6c1cb8d1c0f7205bbb8a21010aa53bec24de427bc4c8d6942e3e68ac8dfeb5a6a330f1a1434742f46cc2daac275ab56d2f47fa70cf78e6b1b253e96e32dbf8291895329bf76628bc978171fc7a71f087509fdf02820da7bf463e9308b00a892db2b00b5d1fd549ddd44e184a576c7ce038109870d38370a27f01224ecc1cdd7f6c61fc23e2a95008b9d49612d8fe2247fdb0d993eef900e5b4a4c569c67e695b5acc2f0a6676b92e1744fd8a740c1ef4785eb2616432951a12377d836f9e9d7b3d8f40580d540c39b19fc3e58a60b29287b638e693ba669b2d0cf1c797e28e0c720c72580e7e754593ce1ad43551dad6ab0cb9613c62eb7b9de7e9ebe50d3864728a7656faefc7d5f9c976dc1a0554db256ea7fc04f3d7b614e36a5409dd5b853e59a651a71f2a2fad2e6dc0589580dc1460afe4d2fc7c8cbb0355789b7d3bb5e65e4ec22520767563a718d347c16a6ed79409a9cb7acdd72e339d806a46b5500637aa19706dc4ac8616fa600e4092955dce6e9b99c56f9f47bbf5988d6ef1ac2a5f80f560e5ddc37d6f1d7f9160fcff8fd98a62116ffad749004c4cf4edcbc3ead3e1900bb15ddee7f4621701372d544e4cff475acf8e41f1c55c6f7293d92171095c0e02a319a04d83515f869509a9108a2893a41aad81e1a6fdc32f1a1e7b3ee47b3bcf3533a7312075700f74283adbfc3eb82a4aeae52ce30385e41ac5589dc1fe310bceb23c9447f3577d9ac801a6c3f6479ceb7516a76adb94e80fc260f4158966bb56ca81b6c3b7000fff4f99ab30360bb0f19612f9dbf301b690e6cbc511dc764cb9f1a14fe50e68cc14f1102cba074f7c136a2b40f02ee778d4e1d68b8f66caa0ebd688614f35a826a532da2e48b36ee24601f2ebefc3875fc4e735c54e6fb1e3dcb9db6222681df342db20f325cf506e47968f1767de4f5a8a8a1494c27481c83a2b9158bafdc7bde4751b62cad5649eb270a31c7afd13228b64e0055aaa1f1da4ad638f0910b4dcee741132097a3092724699a170d11e7b6315750b0dae0b3df422675678b9d6c151621b2b17776a35cf1ae84cf68a3cef78cf82070a06a42ee478022a2a6d7792020e3db74f236264a0e9c47311ca63f61a150591e71c039ba92427b66b5066f49aa249162cfc1c2021f1f78da78a4fe29e0cc2a51d88458a25362ae013af2953906692d77e7219d838358e8939d1f4760578649ba211023f44e964f5b7cd48ecccb00644328c6abe78a2ea6ccba43e85822b7034d5995b8e0d76af2159b01b1de0a0fb96753341ae5f6875deb89a049a2ff8c17f42e7f470e4bcf9362f3a2610c4f961a99e6b3ffc961159c5f63b670d73347b530de446d1625ff7b917db0c53b420c1ae73f643e48c43f51e85a29d22cd9b9f70b2ffda156f36c409bff0637e7763a44f956fbf7b37cc6b68a3c4adc38d144cef0ca7821b92ae01ddae0e8c731dcd1ece06526074bc266ac88799e00b6b247f46135e25067e413747c57150f800c4268fba7ac11e492b06cdb32f7f811315e02e9168cb5254c9231803189ac30bd8e8bee3d5b38f750b630de399934318e90353d5af7de88a74cad57d904f8e3e071f2791eaaeedb45a91cfd04bb557ae2da41cce9847c188f958ad24ccb33ed51bd6a06be0494c251f6f8a155a66ab03ab660c73eb80fba000b85bed2167188b3f247c86926408db10fdea6416b3faf29b84f10f690c2bd21f73a8fa9f610d404d63c3067bc68dd3554ae77c9e3bd13aeae5101e25d91f9e68a61786a295e0fdee8ec440026d22acff4d2be70e4aed098cf766c31738faa6c92426656a829138a97716c57146358c35cb7cdac23017d8fdd27879267004211fb573d83c76cf7f7c5689c043f1984c17e3a719e3ecb40e75cf333ec6b8b541b1817f868af1d0e32e41f7a6fc9e9a6c3d1519a33f0712938ddff2c48803970878358d7b5b2b965255a0537637141ed14fe8dca0e0876aa44398064494855812dc10fc1f374050faf843d118ebb969b38087003873af514b97c0f329b06b6f834fff82393eadf6129582e47f8cc3b8312f89f12ce2976c91efdac78d88d1a8f23f05b5b7ad0280aaf9e0b77d7a2784cdbd8b3f4d3924e338b182385d610ad3038276a39798bc1b7236805a4360d4398814465eb28a3cc4d8bf6dd1ab347252dea6367c660e1f0fe76a3595d20313ce0cff8e1b61cd78f6c6b3fc84fb0b42a89584efe258e715e4379aac466fbc0bfc48163e3b15755e446a1eec09899b5961cf1121a2977c626417b2c465a3fe41ef81ac192544344e7ee5301e4d9f281730496e1ac4272fb324dfb15ce64525fdc0bd7240bd275c6696bad29cb4b29c3e925f0997ae4df1d9872ecad3538105b3cf8319a9c42c9eb85365da27d53ae33d0e33d6988b18d236ba2a3455a4c9dc40e07ae65de31bcd82c6df15e95893fc744e2dfc0407827c70d673b0176bb13b758602830ed6016c05b1ad4f15ae50c53bb07e266baf0b0078faff0f52ed19a7ad2ff3720c8cfefd43bfc7d843f446c35c7439416f348019a3c804fd3cf4640f3d4e62dc909b93190811aa6c5c44fedf2ee6ed7fa888bac2dab843297702ffc19816fddf6b6c8193b850ce1caaca6c48dca964ef2ec4deab565c32f9e32c0bf7be05601c3c09b0e26a6bf00f19887cdbf8e7b8a6d37e8fc7c586275c47e3bfe55ea46614eaf58658468c21b22ad50cb52a1ee073e618f99e2be613115b5df8a3358baa42b1b0913aa5e7fdfefd111a39bbf4800598304e1d6f9b"}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x2000413, &(0x7f00000001c0)=ANY=[]) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200)={0x2, 0x30000, 0x3, 0x7, 0x5}) fcntl$setflags(r3, 0x2, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) mknodat$loop(r4, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000000)=0x5a, 0x4) sendmmsg$inet6(r5, &(0x7f0000006000)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x1ff, @remote}, 0x1c, 0x0}}], 0x1, 0x40048c0) open$dir(&(0x7f0000000140)='./file0\x00', 0x100800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x203f00, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000300)={0x4, 0x7, 0x200, 0x0, 0x3}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000060000000000000001"], 0x29) 497.321268ms ago: executing program 2 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000002780)={{0x0, 0x3f, 0x5, 0xab, 0x239, 0xfffffff9, 0x78, 0x1ff}, "cfdf5a662ae75caca982646a52dbd333681ad37597905c8b7cfa425d6d4b7462c268a95198d8024adc90e7a72ae4e93df54e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa52) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r4, 0x289e0cb5, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x0) 453.064479ms ago: executing program 3 (id=233): r0 = gettid() mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0xf44}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f}) gettid() (async) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) (async) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0xf44}, 0x0) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f}) (async) 378.931101ms ago: executing program 3 (id=234): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x200, 0x1, [0x7, 0x4, 0x1000, 0x0, 0x7], [0x0, 0xfffffffffffffffa, 0x9, 0x800, 0x80000000, 0xffffffffffffffff, 0x73, 0x2, 0x10, 0x799, 0x3, 0x8, 0x2, 0x0, 0xe, 0xdf42, 0x100000001, 0x3, 0x5, 0x8000000000000001, 0x3, 0x6, 0x100000001, 0x7fffffff, 0xb, 0x8, 0x1f, 0x7, 0xe0, 0x7, 0x2, 0xfff, 0x3, 0x80, 0xffffffffffffffff, 0x8, 0x2, 0x2, 0x2, 0x427fa7bc, 0x1, 0x0, 0x0, 0x4, 0x9, 0x2de, 0x3, 0x7, 0x5, 0x80000001, 0x285f2ade, 0xffffffff, 0x4, 0x19, 0x5, 0x0, 0x400, 0x0, 0x6, 0x4, 0x8000000000000000, 0x9b, 0xfffffffffffffffe, 0x4, 0x9, 0x7, 0x8, 0x8, 0x5, 0x8, 0x80, 0x100000000, 0xb1, 0x800, 0x10, 0x7, 0xad, 0x1, 0x9, 0x3ff7, 0x5, 0x5, 0x2, 0xbde, 0x6, 0x5, 0x1000, 0x31370809, 0xa55, 0x4, 0x545c, 0x8, 0x0, 0x8, 0x9, 0x5, 0x6, 0x3, 0x401, 0xa580, 0x1, 0x4, 0x3, 0x7, 0x5, 0xe1, 0x8, 0xffffffff, 0x3, 0x2, 0xdc, 0xd, 0x5, 0x2, 0x4, 0x2, 0x800, 0xc, 0x50, 0x9065, 0x45]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={0x0, "a1150744ada262e0721fba56f132d50a"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001480)={0x3, 0x3, {0x1, @usage=0x1, 0x0, 0x4, 0xffffffffffffffff, 0x5, 0x100000001, 0xba, 0x40, @struct={0x3, 0x80000001}, 0x5, 0x10, [0x7f, 0x180, 0x60a, 0x80000001, 0x40, 0x7]}, {0x80, @usage=0x83, 0x0, 0x200, 0x4, 0xe, 0x7, 0x7, 0x0, @usage=0x6, 0x200, 0x5, [0x0, 0x300000000000, 0x100000001, 0x6, 0xea8, 0x8]}, {0x3, @struct={0x6, 0x49b}, 0x0, 0x8000, 0x6, 0x9, 0x81, 0x8, 0x0, @struct={0x0, 0x4}, 0x4, 0x400, [0x1000000000000, 0x3, 0x9d0, 0x1, 0x2, 0x4]}, {0xc60, 0x0, 0xd2a6}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001880)={0xf, 0x4, {0x8, @usage=0x8, r1, 0x3, 0x8000000000000000, 0x0, 0xfffffffffffffffc, 0x3, 0x400, @struct={0x1, 0x3}, 0x268, 0x9, [0x8, 0x0, 0xaf1, 0x3c, 0xfffffffffffffe00, 0x3]}, {0x8c, @struct={0x5, 0xc}, r2, 0x30, 0x80000001, 0x2, 0x40, 0x1, 0x20, @usage=0x5, 0x300000, 0x7, [0x7, 0x3, 0x9, 0x8001, 0xa, 0x3]}, {0x800000000000, @usage=0x5, r3, 0x1, 0x401, 0x3ff, 0x8, 0xff, 0x36, @struct={0x5, 0x6}, 0xd3, 0x2803cf54, [0x5da, 0xffffffff, 0x5, 0x2, 0xf4, 0xfffffffffffffffb]}, {0xfffffffffffffffa, 0x9, 0x8}}) r4 = openat2(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x40, 0xa, 0x1}, 0x18) r5 = dup2(r4, r0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000001d00)={0x110, 0x4}) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001d40)=0x3, 0x2) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001d80)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001dc0)) ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, &(0x7f0000001e80)={&(0x7f0000001e00)=[{0x8, 0x200}, {0x2, 0x3}, {0x3ff, 0x8001, 0x5cc7a203ce2ef6fd}, {0x5, 0x5, 0x2}, {0x2, 0x7, 0x1}, {0x8, 0x5}, {0x400, 0x9, 0x2}], 0x7, 0x10, 0xc2e, 0x7}) r6 = openat(r5, &(0x7f0000001ec0)='./file0\x00', 0x2800, 0x0) r7 = geteuid() quotactl_fd$Q_SETINFO(r6, 0xffffffff80000602, r7, &(0x7f0000001f00)={0x7, 0xe6c, 0x1}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001f40)=@req3={0x9, 0x6d05, 0x81, 0x1ab6f668, 0x1, 0x80000001, 0x5}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f00000020c0)={&(0x7f0000001f80), 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x34, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4040840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000002100), 0x3) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2c) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r11, 0x4068aea3, &(0x7f0000002140)={0xcc, 0x0, 0x1}) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r12, 0x5000940a, &(0x7f00000021c0)={{r0}, "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"}) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000031c0)=0x3, 0x2) r13 = accept4$inet(r4, 0x0, &(0x7f0000003200), 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003240)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000003340)=0xe8) quotactl_fd$Q_GETINFO(r13, 0xffffffff80000500, r14, &(0x7f0000003380)) sendfile(r5, r12, 0x0, 0x8a) 272.983023ms ago: executing program 3 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}]}]}, 0x60}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x6100204) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f00000010c0)={0x4c4, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc4, 0x3, "8c48b3c1240591360b3f30e18a2081437070f159ae26b99c911e54c3de96ef7fde2c8c9f0a3c89e05cf6fcb2440e5777d2b1493452b6b8aabc350000005affe8e70dfe24a11bc249c6cbc56a785cd0a7640694901550f1f478afa7c500695c80f4c17b4dc867f0c15b1218b5746b1e4f6b5ef2060c77d622e0bc261ccb6965c6f98928e978494bc449b0f10eb0c6cad8e38c96c36ff9838c46e1311724c06081c931ef4cc5fda06e6270e67e9b97ab5fca2d49a98a6efa7611ed02f3deacd285"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xf3, 0x3, "91fedee7a048497cbb2dfed5b227be8bfe0cfee4e6fe844a5fffa1929d555959afa3466bc57df6b0acf5ef857b7fa01474cebf1f5b357e798d11f60317a627d4f46780a6a96973fb4376a9226d38dc2dc991c627ad465290d9b1559c7877c45242c063cab7a97a9e49832a5c595a8ec9241457042414a25fbe4f1164161229111a9c380a4dade4b41f6d709780f1f84273a5b040b46e4409b423ef60885e799b9b18c755ccc8eb091042d45c500bc25ab02324ac6bacb86ec7566667e487237dc09af5a1f96dffc6f1d3ba345fa28d56536393e021116cb05efaea797dee6581d19b79eaea086627088d09dca5d255"}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff4f6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x99}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6f6aec43}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) pwritev(r6, &(0x7f0000000940)=[{&(0x7f0000000240)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b7218e7b646242c0647411cb5bca8dfbc84aeee64bc05e7014dbb599bad1be2d8ced", 0xbc}], 0x1, 0x73a, 0xade) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000140)=""/30, 0x1e}], 0x2, 0x6, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 242.141854ms ago: executing program 2 (id=236): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$inet6(0xa, 0x2, 0x3a) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="2c17266c6f42ca71a06567c190fc281b07d23ea47626971a3367c3346e1b1c8e694e97dd86fcf762183d793400699b23aa3a3a94840cf278655cbfcaea257fb4ee0b999bf1c36d1e6be405faf0e0744d6ebc60308436d7f327574efae65ad82243910da95d5d168216aac17ce11b9f5d3bc195403da562a68f4f6fc20e61f650849bd6892a6d33dd6d5c2da607c84a9a32d971df56c1c03b3aa259c47eda4f407aadcbd4d827278001011164b109e4bab5", 0xb1, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @private0, 0x2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xb, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="90f2c99f8f9b487d0a1091164a814a508fb7ed5d1a9899", 0x17, 0x40011, 0x0, 0x0) 194.726545ms ago: executing program 2 (id=237): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1c) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [{0x20, '('}, {0x20, '-'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#% '}]}, 0x14) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 109.365747ms ago: executing program 2 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0xa, 0x0, [{0x911, 0x0, 0xfffffffffffffff7}, {0x109, 0x0, 0x5}, {0x2db, 0x0, 0x268}, {0x9e0, 0x0, 0x77722dda}, {0x96e, 0x0, 0xe9b9}, {0x777, 0x0, 0x2}, {0xb0b, 0x0, 0xe3}, {0x207, 0x0, 0x9}, {0x40000094, 0x0, 0x89}, {0x9c3, 0x0, 0x7fffffffffffffff}]}) (async) timer_create(0x6, &(0x7f0000000040)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000002c0)="66b9030100c066b8a500000066ba000000000f302e67660f38372d070000000f0094005066b80c0000000f23c00f21f86635020007000f23f8f30fc77604baa00066b80600000066ef0f79720abaa000ed3e670f01c32e0f01ca", 0xfffffffffffffd1f}], 0x0, 0x46, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x5da, 0x9, 0xff, 0x10001}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000001c0)={{r4, r5+10000000}, {r6, r7+60000000}}, &(0x7f0000000200)) 108.904547ms ago: executing program 3 (id=239): open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x83, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) write(r11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = eventfd2(0xe5c, 0x80000) r15 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000240)={r15, 0x7, 0x2, r14}) r16 = eventfd2(0xe5c, 0x80000) r17 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000080)={r16, 0x7, 0x2, r17}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 107.501977ms ago: executing program 2 (id=240): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x41, 0xc5, "ff623543b3572775211991ea3c0b8f61043c1fc67b66ecd0eb81648fcbb71fea855b5e2cded95c2fe930deed3d34681c546cc013a191f9ec13b92706bd"}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x20000010) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000004c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000500)={0xd000, 0x102000, 0x1}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000009, 0x100010, r1, 0x5e1af000) r5 = syz_usb_connect$uac1(0x4, 0xd2, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x0, 0xc0, 0xf7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x395, 0x2c}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x6, 0xe6}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0x2, 0x3, 0x6, 0x1, 0x7], 0x6}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x1, 0x9, "ad"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xa5, 0x2, 0x5, 0x5, "82eda907220fdf41"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0xe, 0x4, {0x7, 0x25, 0x1, 0x0, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0x2, 0x3, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x4, 0x9, 0x6}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x23, 0x1, 0x6, 0x9, "bf"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x1, 0x0, "6dcd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x5, 0xa0, {0x7, 0x25, 0x1, 0x8, 0x3, 0x800}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x6, 0x5, 0x0, 0x40, 0xd6}, 0xf, &(0x7f0000000680)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x6, 0x2, 0x7}]}, 0x4, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x820}}, {0xad, &(0x7f0000000740)=@string={0xad, 0x3, "634bb1a9dbc29babf1a800772e7e7d8c6143b623ede6b250c8383c4832fff9c46fa4dad8808180c938aeaf31e0a8e5b55b23bb77660ec99adf253c9069dcd2191bbebe2657e6c997bd08f2b8856e2926d981d0ecfe798f5b10ef795408fddf538687a9533e998a1a262405c63244045e9532006d179eee2a0ffa5628d595805083f3b4f325e98c47f73d16c14e150ea715652cdc04c3f5599e7511f527e64edd4e0c8a377752fdfa1551a5"}}, {0x6c, &(0x7f0000000800)=@string={0x6c, 0x3, "99d9ce957a2edcc813398de8d29591f31db2cfdf59fe1c3d0b3a877f882b2cee29d72e19961e3e343b8378a26b99c2750a8a34ebf312886dc1e5373b5fd8cb183a8ea128e5fcff6c4410aad76485cfc80c93a38dca2b1ee83b0d41f6ee9484637288371049e331009dac"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x20, 0x31, 0xe4, {0xe4, 0x2, "9f5419fd803e28630147dde981de3a61395b89dd11647e891ea8dc25bb4c61aaebb20ab2f7efc816c4b86f2e78528ae3d917c313784eb36c106a00f7e732c860e519592bc390734e014c4b89523f4e712960c285bdef509cbd9aef47ba0c2cfe0bdd386cddaba7e3030c6c111d324c9c2bd4ef791a273b32de35bd32a240ff09924fd3cfc6f4caabc8d4dccbeb6469063c8970c9883e9e37d2483f56429f85226660965f3cf7f77c890ad495df6e939142f4a59f194b472422f1e63a353f1a04b1ecfee8e01411472a7d86f611e401a46621b649b15b328509a4082e5940d57051c4"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000a80)={0x0, 0x17, 0x1a, "3f0ed70522f648491b6bc5c717d417fdc5ae07a8cfcb47479fdb"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000b40)={0x20, 0x81, 0x1, 'O'}, &(0x7f0000000b80)={0x20, 0x82, 0x2, "e7e2"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "598f91"}, &(0x7f0000000c00)={0x20, 0x84, 0x3, "bc5bd2"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "6070a5"}}) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {0x31, 0x1, 0x7, 0x506}, 0x25, [0x5, 0x7, 0x8001, 0x7, 0x2, 0x1, 0xfffff001, 0x0, 0x7, 0xd79, 0x9, 0x7, 0xa, 0x7, 0x8001, 0x80, 0xa, 0x6, 0xd, 0x4e, 0x5, 0x3, 0x4, 0xfffffc00, 0x80000001, 0x2d0c276a, 0x6, 0xd, 0x800, 0x0, 0x7, 0x29, 0x10, 0x8, 0x8000, 0x66e, 0x7, 0x5, 0x1ff, 0x1, 0x6, 0x6, 0xae5f, 0xfffffffa, 0x4, 0x1, 0x0, 0x9, 0x9, 0x3, 0xffffcf6d, 0xfff, 0x8, 0x40, 0x7, 0x7, 0xeb72, 0x1000, 0xde, 0x37, 0xe7, 0xb3, 0xd, 0x3], [0xe730, 0x4, 0x100, 0x4, 0x2fc96e87, 0x7f, 0x9, 0x8a, 0x2, 0x6, 0xa2e, 0x0, 0xa7, 0x4, 0x839, 0x7f, 0x74, 0x6, 0x800, 0x8, 0x80000000, 0x262, 0xc, 0x2, 0x4, 0x7, 0x80000000, 0x0, 0x4, 0x6, 0xbc1c, 0x3, 0x4, 0xc0, 0x5, 0x658, 0x7, 0x3, 0xfffffffe, 0x25, 0x97, 0x0, 0x2, 0x3, 0xe, 0x10001, 0x1, 0x2, 0x3, 0xc33, 0x4, 0x0, 0x7, 0x2, 0x10001, 0x2, 0xf, 0x8, 0xa, 0xe, 0x3, 0x40, 0x6, 0xe0a4], [0x9, 0xb36f, 0x5, 0x40, 0x3, 0x1e000, 0xfffffff9, 0xbe7, 0x100, 0x0, 0x4, 0x2, 0x402, 0x6, 0x5, 0xffff7fff, 0x7, 0x3ff, 0x6, 0x800, 0x13, 0x7fff, 0x7, 0x6, 0x8, 0x401, 0x8, 0x1, 0x0, 0x3, 0x800, 0x4, 0x5, 0x9, 0x6, 0x6, 0x9, 0x3, 0xd6d9, 0x2, 0x4, 0xde4, 0x6, 0x2, 0x8, 0xff, 0xfffffeff, 0xc, 0xffffffff, 0x7f, 0x9add, 0x796, 0x8, 0x3ff, 0x5, 0x7, 0x1, 0xa, 0x7, 0x300000, 0x4, 0xfffffa2f, 0x3, 0x8], [0x5, 0x3, 0xe7, 0xf, 0x80000001, 0xf, 0x95f6, 0x7, 0xb54b, 0x7, 0x8, 0x6, 0x10001, 0x9, 0x9, 0x2, 0x1a4, 0x400, 0x8, 0x4, 0x9, 0x4, 0x9, 0x9, 0x80000001, 0x80, 0xdc3, 0x8, 0x9, 0x10000, 0x9, 0x8, 0x0, 0xb, 0xd, 0x7, 0x1000, 0x7, 0x2, 0x401, 0x3, 0x3, 0xd8, 0x5, 0x3, 0xfffffff9, 0xc5, 0x9, 0x2, 0x7, 0xc, 0x0, 0x293, 0x3, 0x0, 0x3, 0x5, 0x9, 0x0, 0x8, 0x6, 0xffff4ed7, 0x5, 0xab8]}, 0x45c) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xf0, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @void, @val={0xc, 0x99, {0x400, 0x48}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9090d9df5292ccf4bd5531841ff7972b475ccb5036613b51"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a8c7cfb4e6f75588e9ef3731bb211b94ed0c589617d63781"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c1740eb05322eb9060cdb8f0c69beffad7264dadaa146320"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xf0}}, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) write$tun(r6, &(0x7f0000001340)={@void, @val={0x3, 0x1, 0x2, 0x7a2, 0xb6a, 0x8}, @mpls={[{0x7f, 0x0, 0x1}], @llc={@snap={0x0, 0xab, '\rO', "b44fed", 0x3001, "cf8367ab338bb5cc5e14cf98630bc066c6f9b0c39a329e83e9bc34d400c50ddf79ce40295042b79b544ee925dc9e5a9fe33027bc9cf50b9694bb6e6c2cea3046e220563ee44d9789d7338d66b4d2ccda6fe323fed7ce146baa8a5f349e9e960981c2a359f1687212fee6a437144a200a62d2a435ceab95b32e0a722e1830b6fb8f2bbc1600e963cc36b3f2b1f335252b8491a1b793fa2e7e0d7575d1c60b789b7445e70abb57285b15ca0ca30fa1ebba925eb2cf0b384bba"}}}}, 0xcf) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000001440)={0xa8, 0x0, 0x1}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000001500), r6) sendmsg$FOU_CMD_GET(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x19}, 0x4000804) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000001600)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000018c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x1b0, r8, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xf}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1000}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x9a, 0x6, 0x0, 0x5, 0x3, 0x1, 0x8]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x3, 0x1}, {0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x4, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x1}, {0x0, 0x6}, {0x7, 0x9}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x48, 0x4, 0x9, 0x12, 0xb, 0x16, 0x60, 0x36, 0x60, 0x3, 0x36, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0x8}, {}, {0x4, 0x8}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0xa}, {0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x5, 0x60, 0x24, 0x6c, 0x30, 0x4, 0x24, 0x48, 0xb, 0x1, 0x4, 0x1b, 0x4, 0x18, 0x24, 0x60, 0x48, 0x12, 0x48, 0x16, 0x6, 0x6, 0xe12ea08a6f3769b4, 0x1b, 0xe36ced68de922613, 0x36, 0x12, 0x2, 0x24, 0x30]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x945d, 0x1, 0xfff7, 0x3, 0xbfb8, 0x80, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x1b, 0x12, 0x12, 0x18, 0x4, 0x1, 0x6, 0x4, 0x16, 0x1b, 0x5, 0x12, 0xb, 0x12, 0x6c, 0x36, 0x30, 0xb, 0x1b, 0x7e, 0x1, 0x4, 0x2, 0x1, 0x3]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x6, 0x6, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x0, 0x8, 0x7, 0x3, 0xffff, 0xc652]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfe}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r6) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, r9, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008000}, 0x8000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000001a40)='wlan1\x00') r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044894}, 0x20004006) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 0s ago: executing program 3 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') lseek(r0, 0xffffffffffffffff, 0x1) lremovexattr(&(0x7f0000000180)='./config/usb_gadget/g1\x00', &(0x7f00000001c0)=@random={'system.', ',\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) close(r1) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$packet_int(r1, 0x65, 0x8, 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='./config\x00', 0x1ff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000140)={0xfec00000, 0x9000, 0xff, 0x8, 0x6}) statx(r0, &(0x7f0000000240)='./config\x00', 0x2000, 0x8, &(0x7f0000000340)) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1\x00', &(0x7f0000000080)={0x0, 0x60, 0x20}, 0x18) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') kernel console output (not intermixed with test programs): cess permissive=1 [ 21.021717][ T36] audit: type=1400 audit(1788649013.090:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 29.063889][ T36] audit: type=1400 audit(1788649021.140:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.067664][ T287] cgroup: Unknown subsys name 'net' [ 29.086624][ T36] audit: type=1400 audit(1788649021.140:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.114975][ T36] audit: type=1400 audit(1788649021.170:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.115427][ T287] cgroup: Unknown subsys name 'devices' [ 29.239883][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.245530][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.361169][ T36] audit: type=1400 audit(1788649021.440:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.384383][ T36] audit: type=1400 audit(1788649021.440:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.409404][ T36] audit: type=1400 audit(1788649021.440:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.433832][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.442685][ T36] audit: type=1400 audit(1788649021.520:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.468288][ T36] audit: type=1400 audit(1788649021.520:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.523745][ T36] audit: type=1400 audit(1788649021.600:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.549431][ T36] audit: type=1400 audit(1788649021.600:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.552003][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.435982][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.443170][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.450571][ T294] bridge_slave_0: entered allmulticast mode [ 30.456912][ T294] bridge_slave_0: entered promiscuous mode [ 30.465195][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.472323][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.479838][ T294] bridge_slave_1: entered allmulticast mode [ 30.486349][ T294] bridge_slave_1: entered promiscuous mode [ 30.513478][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.520641][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.527927][ T296] bridge_slave_0: entered allmulticast mode [ 30.534422][ T296] bridge_slave_0: entered promiscuous mode [ 30.550905][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.558097][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.565198][ T296] bridge_slave_1: entered allmulticast mode [ 30.571728][ T296] bridge_slave_1: entered promiscuous mode [ 30.618376][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.625616][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.632787][ T297] bridge_slave_0: entered allmulticast mode [ 30.639088][ T297] bridge_slave_0: entered promiscuous mode [ 30.645856][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.652981][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.660166][ T297] bridge_slave_1: entered allmulticast mode [ 30.666471][ T297] bridge_slave_1: entered promiscuous mode [ 30.688031][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.695127][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.702327][ T295] bridge_slave_0: entered allmulticast mode [ 30.708659][ T295] bridge_slave_0: entered promiscuous mode [ 30.731460][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.738582][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.745720][ T295] bridge_slave_1: entered allmulticast mode [ 30.752094][ T295] bridge_slave_1: entered promiscuous mode [ 30.868616][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.875912][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.883320][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890391][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.908706][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.915774][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.923101][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.930180][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.942719][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.949830][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.957152][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.964349][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.995730][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.002893][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.010239][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.017393][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.060625][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.068263][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.075798][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.083749][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.091428][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.098966][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.106315][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.132085][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.139187][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.147139][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.154335][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.162184][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.169466][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.177044][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.184240][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.192027][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.199217][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.222483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.229647][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.245840][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.253079][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.285270][ T297] veth0_vlan: entered promiscuous mode [ 31.304544][ T297] veth1_macvtap: entered promiscuous mode [ 31.320653][ T295] veth0_vlan: entered promiscuous mode [ 31.343712][ T294] veth0_vlan: entered promiscuous mode [ 31.352604][ T296] veth0_vlan: entered promiscuous mode [ 31.377413][ T295] veth1_macvtap: entered promiscuous mode [ 31.386523][ T296] veth1_macvtap: entered promiscuous mode [ 31.393965][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.411014][ T294] veth1_macvtap: entered promiscuous mode [ 31.515297][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.535372][ T318] syzkaller1: entered promiscuous mode [ 31.542176][ T318] syzkaller1: entered allmulticast mode [ 31.898139][ T315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.987583][ T67] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.048053][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 32.054444][ T315] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.062785][ T315] usb 4-1: config 0 has no interface number 0 [ 32.069554][ T315] usb 4-1: config 0 interface 184 has no altsetting 0 [ 32.078146][ T315] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 32.087297][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.095495][ T315] usb 4-1: Product: syz [ 32.099765][ T315] usb 4-1: Manufacturer: syz [ 32.104470][ T315] usb 4-1: SerialNumber: syz [ 32.110365][ T315] usb 4-1: config 0 descriptor?? [ 32.116307][ T315] smsc75xx v1.0.0 [ 32.148714][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.159775][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.169598][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 32.180576][ T67] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.189682][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.198587][ T67] usb 2-1: config 0 descriptor?? [ 32.662910][ T67] usbhid 2-1:0.0: can't add hid device: -71 [ 32.668988][ T67] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.678281][ T67] usb 2-1: USB disconnect, device number 2 [ 32.718441][ T315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 32.729493][ T315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.770517][ T315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 32.781445][ T315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 32.791274][ T315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 32.801601][ T315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 32.811423][ T315] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 34.700835][ T345] usb 4-1: USB disconnect, device number 2 [ 41.463940][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 41.463963][ T36] audit: type=1400 audit(1788649033.540:132): avc: denied { accept } for pid=357 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.513493][ T355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2574735089 (82391522848 ns) > initial count (62696711872 ns). Using initial count to start timer. [ 41.531888][ T36] audit: type=1400 audit(1788649033.610:133): avc: denied { mounton } for pid=363 comm="syz.3.13" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.532114][ T364] 9pnet_fd: Insufficient options for proto=fd [ 41.581059][ T36] audit: type=1400 audit(1788649033.640:134): avc: denied { ioctl } for pid=353 comm="syz.0.9" path="pid:[4026532294]" dev="nsfs" ino=4026532294 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.667430][ T36] audit: type=1400 audit(1788649033.740:135): avc: denied { create } for pid=375 comm="syz.0.16" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.689683][ T376] fuse: Unknown parameter '&d<0x0000000000000003' [ 41.701268][ T36] audit: type=1400 audit(1788649033.750:136): avc: denied { read write } for pid=375 comm="syz.0.16" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 41.725157][ T36] audit: type=1400 audit(1788649033.750:137): avc: denied { open } for pid=375 comm="syz.0.16" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 41.756147][ T36] audit: type=1400 audit(1788649033.770:138): avc: denied { mounton } for pid=375 comm="syz.0.16" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.779655][ T36] audit: type=1400 audit(1788649033.770:139): avc: denied { mount } for pid=375 comm="syz.0.16" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 41.803829][ T36] audit: type=1400 audit(1788649033.770:140): avc: denied { search } for pid=375 comm="syz.0.16" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 41.807594][ T378] syzkaller1: entered promiscuous mode [ 41.836549][ T378] syzkaller1: entered allmulticast mode [ 41.837689][ T315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 41.860175][ T36] audit: type=1400 audit(1788649033.770:141): avc: denied { read write } for pid=375 comm="syz.0.16" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.008831][ T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.020128][ T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.030257][ T315] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 42.039924][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.310232][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.318939][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.347587][ T346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.498725][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.509801][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.522922][ T346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.551215][ T346] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.597191][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.617186][ T346] usb 3-1: config 0 descriptor?? [ 42.696443][ T404] netlink: 228 bytes leftover after parsing attributes in process `syz.3.23'. [ 42.737605][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.770134][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.778815][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.847014][ T315] usbhid 2-1:1.0: can't add hid device: -71 [ 42.853328][ T315] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 42.863171][ T315] usb 2-1: USB disconnect, device number 3 [ 42.887557][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 42.895249][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 42.904675][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.912874][ T10] usb 1-1: Product: syz [ 42.917106][ T10] usb 1-1: Manufacturer: syz [ 42.922004][ T10] usb 1-1: SerialNumber: syz [ 42.927518][ T10] usb 1-1: config 0 descriptor?? [ 42.933803][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 42.941962][ T10] usb 1-1: Detected FT-X [ 43.026815][ T346] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 43.035816][ T346] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 43.047753][ T346] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 43.134388][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 43.633835][ T400] kvm: pic: level sensitive irq not supported [ 43.638506][ T400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 43.688515][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 43.857550][ T346] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.970866][ T67] usb 1-1: USB disconnect, device number 2 [ 43.984870][ T67] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 43.998418][ T67] ftdi_sio 1-1:0.0: device disconnected [ 44.054715][ T346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.065025][ T346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.074972][ T346] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 44.084373][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 44.093042][ T346] usb 4-1: SerialNumber: syz [ 44.251341][ T314] usb 3-1: USB disconnect, device number 2 [ 44.311028][ T395] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.312750][ T472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.323165][ T395] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.326633][ T472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.342922][ T346] usb 4-1: 0:2 : does not exist [ 44.348020][ T346] usb 4-1: unit 252 not found! [ 44.354497][ T346] usb 4-1: USB disconnect, device number 3 [ 44.414927][ T474] udevd[474]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.667640][ T346] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 44.686190][ T346] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.777609][ T314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.927542][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 44.934028][ T314] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 44.942716][ T314] usb 1-1: config 1 has no interface number 0 [ 44.948970][ T314] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 44.959901][ T314] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 44.970441][ T314] usb 1-1: config 1 interface 105 has no altsetting 0 [ 44.978709][ T314] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 44.988065][ T314] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 44.996267][ T314] usb 1-1: Product: syz [ 45.000529][ T314] usb 1-1: Manufacturer: syz [ 45.005173][ T314] usb 1-1: SerialNumber: syz [ 45.011037][ T564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.018357][ T564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.427149][ T564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.434561][ T564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.633788][ T582] syzkaller1: entered promiscuous mode [ 45.639637][ T582] syzkaller1: entered allmulticast mode [ 45.648133][ T314] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 45.662017][ T314] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 45.671526][ T314] usb 1-1: USB disconnect, device number 3 [ 45.722079][ T584] process 'syz.1.38' launched './file0' with NULL argv: empty string added [ 46.257509][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.378189][ T555] Bluetooth: hci0: command 0x1003 tx timeout [ 46.384395][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.427562][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 46.443054][ T46] usb 2-1: too many configurations: 15, using maximum allowed: 8 [ 46.463556][ T46] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 46.477493][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.496123][ T46] usb 2-1: config 0 descriptor?? [ 46.508126][ T46] hub 2-1:0.0: Invalid hub with more than one config or interface [ 46.516095][ T46] hub 2-1:0.0: probe with driver hub failed with error -22 [ 46.718830][ T46] usb 2-1: USB disconnect, device number 4 [ 46.736586][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 46.736604][ T36] audit: type=1400 audit(1788649038.810:196): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.835013][ T36] audit: type=1400 audit(1788649038.910:197): avc: denied { connect } for pid=613 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.922832][ T36] audit: type=1400 audit(1788649039.000:198): avc: denied { read } for pid=616 comm="syz.3.48" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.949943][ T36] audit: type=1400 audit(1788649039.000:199): avc: denied { open } for pid=616 comm="syz.3.48" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.993378][ T36] audit: type=1400 audit(1788649039.020:200): avc: denied { ioctl } for pid=616 comm="syz.3.48" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.113737][ T36] audit: type=1400 audit(1788649039.190:201): avc: denied { bind } for pid=618 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.154004][ T36] audit: type=1400 audit(1788649039.190:202): avc: denied { ioctl } for pid=618 comm="syz.2.49" path="socket:[5086]" dev="sockfs" ino=5086 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.179539][ T36] audit: type=1400 audit(1788649039.220:203): avc: denied { setopt } for pid=618 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.199699][ T36] audit: type=1400 audit(1788649039.220:204): avc: denied { read write } for pid=622 comm="syz.0.50" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.223570][ T36] audit: type=1400 audit(1788649039.220:205): avc: denied { open } for pid=622 comm="syz.0.50" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.299249][ T631] syzkaller1: entered promiscuous mode [ 47.316842][ T631] syzkaller1: entered allmulticast mode [ 47.325163][ T639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 47.338600][ T639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 47.380519][ T648] syzkaller1: entered promiscuous mode [ 47.386140][ T648] syzkaller1: entered allmulticast mode [ 47.567620][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 47.637574][ T345] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.717564][ T314] usb 2-1: Using ep0 maxpacket: 32 [ 47.723943][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.735188][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.745374][ T314] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 47.754556][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.763408][ T314] usb 2-1: config 0 descriptor?? [ 47.769564][ T314] hub 2-1:0.0: USB hub found [ 47.798759][ T345] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 47.810438][ T345] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.821445][ T345] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 47.832729][ T345] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 47.841828][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.851029][ T650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 47.970303][ T631] FAULT_INJECTION: forcing a failure. [ 47.970303][ T631] name failslab, interval 1, probability 0, space 0, times 1 [ 47.983142][ T631] CPU: 0 UID: 0 PID: 631 Comm: syz.1.51 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 47.983186][ T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.983207][ T631] Call Trace: [ 47.983214][ T631] [ 47.983223][ T631] __dump_stack+0x21/0x30 [ 47.983271][ T631] dump_stack_lvl+0x140/0x1c0 [ 47.983295][ T631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.983345][ T631] dump_stack+0x19/0x20 [ 47.983375][ T631] should_fail_ex+0x3c2/0x510 [ 47.983405][ T631] should_failslab+0xac/0x100 [ 47.983434][ T631] kmem_cache_alloc_noprof+0x42/0x410 [ 47.983451][ T631] ? irqentry_exit+0x4a/0x60 [ 47.983490][ T631] ? getname_kernel+0x6b/0x450 [ 47.983518][ T631] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 47.983547][ T631] getname_kernel+0x6b/0x450 [ 47.983576][ T631] ? strncpy_from_user+0xea/0x280 [ 47.983604][ T631] kern_path+0x23/0x60 [ 47.983642][ T631] lookup_bdev+0xc9/0x290 [ 47.983674][ T631] ? __cfi_lookup_bdev+0x10/0x10 [ 47.983706][ T631] __se_sys_quotactl+0x21c/0x7e0 [ 47.983739][ T631] ? __x64_sys_quotactl+0xc0/0xc0 [ 47.983771][ T631] ? __kasan_check_write+0x18/0x20 [ 47.983809][ T631] ? fpregs_restore_userregs+0x11c/0x260 [ 47.983840][ T631] __x64_sys_quotactl+0x9f/0xc0 [ 47.983877][ T631] x64_sys_call+0x2818/0x2ee0 [ 47.983893][ T631] do_syscall_64+0x57/0xf0 [ 47.983917][ T631] ? clear_bhb_loop+0x50/0xa0 [ 47.983954][ T631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.983981][ T631] RIP: 0033:0x7ff72499e159 [ 47.984007][ T631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.984031][ T631] RSP: 002b:00007ff7258a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 47.984075][ T631] RAX: ffffffffffffffda RBX: 00007ff724c25fa0 RCX: 00007ff72499e159 [ 47.984095][ T631] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000901 [ 47.984112][ T631] RBP: 00007ff724a35024 R08: 0000000000000000 R09: 0000000000000000 [ 47.984127][ T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.984141][ T631] R13: 00007ff724c26038 R14: 00007ff724c25fa0 R15: 00007ffda417c4f8 [ 47.984160][ T631] [ 47.985347][ T314] hub 2-1:0.0: 9 ports detected [ 48.213569][ T314] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 48.223365][ T314] usbhid 2-1:0.0: can't add hid device: -71 [ 48.229664][ T314] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.258518][ T314] usb 2-1: USB disconnect, device number 5 [ 48.510065][ T665] fuse: Bad value for 'fd' [ 49.107605][ T67] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 49.257984][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 49.264472][ T67] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 49.275592][ T67] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 49.289195][ T67] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 49.298333][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.307249][ T67] usb 2-1: config 0 descriptor?? [ 49.486808][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.496153][ T681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.505222][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.515367][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.524823][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.534638][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.543683][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.552586][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.561502][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.570523][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.732159][ T67] itetech 0003:048D:8595.0003: ignoring exceeding usage max [ 49.741780][ T67] itetech 0003:048D:8595.0003: hidraw0: USB HID v1.00 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0 [ 49.837569][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 49.932387][ T67] usb 2-1: USB disconnect, device number 6 [ 49.988547][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.999544][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.009514][ T46] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 50.018847][ T345] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 50.026467][ T345] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 50.035602][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.046130][ T46] usb 4-1: config 0 descriptor?? [ 50.054509][ T345] usb 1-1: USB disconnect, device number 4 [ 50.054729][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.361788][ T690] FAULT_INJECTION: forcing a failure. [ 50.361788][ T690] name failslab, interval 1, probability 0, space 0, times 0 [ 50.374616][ T690] CPU: 0 UID: 0 PID: 690 Comm: syz.2.66 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 50.374649][ T690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.374663][ T690] Call Trace: [ 50.374669][ T690] [ 50.374676][ T690] __dump_stack+0x21/0x30 [ 50.374708][ T690] dump_stack_lvl+0x140/0x1c0 [ 50.374734][ T690] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.374766][ T690] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 50.374790][ T690] dump_stack+0x19/0x20 [ 50.374816][ T690] should_fail_ex+0x3c2/0x510 [ 50.374840][ T690] should_failslab+0xac/0x100 [ 50.374864][ T690] kmem_cache_alloc_noprof+0x42/0x410 [ 50.374883][ T690] ? __kernfs_new_node+0xf1/0x740 [ 50.374920][ T690] __kernfs_new_node+0xf1/0x740 [ 50.374947][ T690] ? down_write+0xee/0x2b0 [ 50.374969][ T690] ? kernfs_new_node+0x280/0x280 [ 50.374993][ T690] ? __kasan_check_write+0x18/0x20 [ 50.375011][ T690] ? down_write+0xee/0x2b0 [ 50.375033][ T690] ? __cfi_down_write+0x10/0x10 [ 50.375057][ T690] ? __kasan_check_write+0x18/0x20 [ 50.375079][ T690] kernfs_new_node+0x154/0x280 [ 50.375104][ T690] __kernfs_create_file+0x52/0x280 [ 50.375132][ T690] cgroup_addrm_files+0x775/0xac0 [ 50.375160][ T690] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 50.375192][ T690] ? __kasan_check_write+0x18/0x20 [ 50.375214][ T690] ? _raw_spin_lock_irq+0x93/0x120 [ 50.375240][ T690] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 50.375268][ T690] css_populate_dir+0x2be/0x3d0 [ 50.375288][ T690] cgroup_mkdir+0x124d/0x1600 [ 50.375313][ T690] ? __cfi_cgroup_mkdir+0x10/0x10 [ 50.375344][ T690] kernfs_iop_mkdir+0x1be/0x2d0 [ 50.375370][ T690] vfs_mkdir+0x58e/0x810 [ 50.375397][ T690] do_mkdirat+0x240/0x530 [ 50.375422][ T690] ? __cfi_do_mkdirat+0x10/0x10 [ 50.375448][ T690] ? __kasan_check_write+0x18/0x20 [ 50.375468][ T690] ? getname_flags+0x203/0x6b0 [ 50.375489][ T690] ? __kasan_check_write+0x18/0x20 [ 50.375509][ T690] __x64_sys_mkdirat+0x8b/0xa0 [ 50.375535][ T690] x64_sys_call+0x2ba8/0x2ee0 [ 50.375551][ T690] do_syscall_64+0x57/0xf0 [ 50.375578][ T690] ? clear_bhb_loop+0x50/0xa0 [ 50.375603][ T690] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.375624][ T690] RIP: 0033:0x7f0db839e159 [ 50.375640][ T690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.375656][ T690] RSP: 002b:00007f0db6df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 50.375676][ T690] RAX: ffffffffffffffda RBX: 00007f0db8625fa0 RCX: 00007f0db839e159 [ 50.375690][ T690] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 50.375703][ T690] RBP: 00007f0db8435024 R08: 0000000000000000 R09: 0000000000000000 [ 50.375715][ T690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.375726][ T690] R13: 00007f0db8626038 R14: 00007f0db8625fa0 R15: 00007ffed5bb80a8 [ 50.375746][ T690] [ 50.375763][ T690] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 50.499505][ T686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.697784][ T686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.967523][ T314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 51.137522][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 51.154763][ T314] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 51.169148][ T314] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 51.178619][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.187230][ T314] usb 3-1: Product: syz [ 51.192088][ T314] usb 3-1: Manufacturer: syz [ 51.196747][ T314] usb 3-1: SerialNumber: syz [ 51.348038][ T727] 9pnet_fd: Insufficient options for proto=fd [ 51.412207][ T314] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.421094][ T314] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 51.430068][ T314] usb 3-1: 0:3 : does not exist [ 51.435012][ T314] usb 3-1: 0:4 : does not exist [ 51.440417][ T314] usb 3-1: unit 7 not found! [ 51.452594][ T314] usb 3-1: USB disconnect, device number 3 [ 51.473547][ T474] udevd[474]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.524663][ T732] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 51.535538][ T732] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 52.044689][ T768] ======================================================= [ 52.044689][ T768] WARNING: The mand mount option has been deprecated and [ 52.044689][ T768] and is ignored by this kernel. Remove the mand [ 52.044689][ T768] option from the mount to silence this warning. [ 52.044689][ T768] ======================================================= [ 52.083335][ T36] kauditd_printk_skb: 190 callbacks suppressed [ 52.083354][ T36] audit: type=1400 audit(1788649044.160:396): avc: denied { mounton } for pid=767 comm="syz.1.85" path="/25/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 52.083360][ T768] overlay: Bad value for 'verity' [ 52.121276][ T768] incfs: Can't find or create .index dir in ./file0 [ 52.128381][ T768] incfs: mount failed -1 [ 52.169201][ T36] audit: type=1400 audit(1788649044.250:397): avc: denied { setattr } for pid=771 comm="syz.1.87" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.192928][ T36] audit: type=1400 audit(1788649044.270:398): avc: denied { getattr } for pid=771 comm="syz.1.87" path="/27/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 52.198460][ T67] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.220882][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.233796][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.368543][ T67] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.379228][ T67] usb 3-1: config 0 has no interfaces? [ 52.384759][ T67] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 52.393999][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.402875][ T67] usb 3-1: config 0 descriptor?? [ 52.407961][ T345] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.535422][ T36] audit: type=1400 audit(1788649044.610:399): avc: denied { sqpoll } for pid=779 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.554751][ T345] usb 2-1: device descriptor read/64, error -71 [ 52.678542][ T764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 52.807537][ T345] usb 2-1: device descriptor read/64, error -71 [ 52.891859][ T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.901068][ T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.909855][ T315] usb 3-1: USB disconnect, device number 4 [ 52.916115][ T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.925953][ T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.047545][ T345] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 53.177795][ T345] usb 2-1: device descriptor read/64, error -71 [ 53.432850][ T345] usb 2-1: device descriptor read/64, error -71 [ 53.449730][ T36] audit: type=1400 audit(1788649045.530:400): avc: denied { name_bind } for pid=788 comm="syz.2.91" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 53.489081][ T797] FAULT_INJECTION: forcing a failure. [ 53.489081][ T797] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.502336][ T797] CPU: 1 UID: 0 PID: 797 Comm: syz.2.93 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 53.502375][ T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.502391][ T797] Call Trace: [ 53.502399][ T797] [ 53.502408][ T797] __dump_stack+0x21/0x30 [ 53.502452][ T797] dump_stack_lvl+0x140/0x1c0 [ 53.502483][ T797] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.502515][ T797] ? check_stack_object+0x10f/0x150 [ 53.502538][ T797] dump_stack+0x19/0x20 [ 53.502567][ T797] should_fail_ex+0x3c2/0x510 [ 53.502591][ T797] should_fail+0xf/0x20 [ 53.502614][ T797] should_fail_usercopy+0x1e/0x30 [ 53.502641][ T797] _copy_from_user+0x20/0xa0 [ 53.502671][ T797] copy_clone_args_from_user+0x20c/0x740 [ 53.502704][ T797] ? futex_wait+0x2b8/0x7c0 [ 53.502723][ T797] ? __delayed_free_task+0x40/0x40 [ 53.502756][ T797] __se_sys_clone3+0x143/0x360 [ 53.502784][ T797] ? do_futex+0x32a/0x510 [ 53.502812][ T797] ? __x64_sys_clone3+0x80/0x80 [ 53.502842][ T797] ? __se_sys_futex+0x13c/0x320 [ 53.502870][ T797] ? fput+0x1a4/0x230 [ 53.502899][ T797] ? __kasan_check_write+0x18/0x20 [ 53.502921][ T797] __x64_sys_clone3+0x5f/0x80 [ 53.502949][ T797] x64_sys_call+0x28fc/0x2ee0 [ 53.502968][ T797] do_syscall_64+0x57/0xf0 [ 53.503000][ T797] ? clear_bhb_loop+0x50/0xa0 [ 53.503033][ T797] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.503056][ T797] RIP: 0033:0x7f0db839e159 [ 53.503074][ T797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.503093][ T797] RSP: 002b:00007f0db6df6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 53.503115][ T797] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0db839e159 [ 53.503131][ T797] RDX: 00007f0db6df6f10 RSI: 0000000000000058 RDI: 00007f0db6df6f10 [ 53.503145][ T797] RBP: 00007f0db8435024 R08: 0000000000000000 R09: 0000000000000058 [ 53.503159][ T797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.503171][ T797] R13: 00007f0db8626038 R14: 00007f0db8625fa0 R15: 00007ffed5bb80a8 [ 53.503189][ T797] [ 53.722378][ T345] usb usb2-port1: attempt power cycle [ 53.735085][ T794] kvm: pic: non byte write [ 53.740653][ T793] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (8589803520 ns) > initial count (5726535680 ns). Using initial count to start timer. [ 53.833663][ T36] audit: type=1400 audit(1788649045.910:401): avc: denied { setopt } for pid=807 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.852995][ T36] audit: type=1400 audit(1788649045.920:402): avc: denied { map } for pid=807 comm="syz.3.95" path="socket:[6834]" dev="sockfs" ino=6834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.875939][ T36] audit: type=1400 audit(1788649045.920:403): avc: denied { read write } for pid=807 comm="syz.3.95" path="socket:[6834]" dev="sockfs" ino=6834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.067575][ T345] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 54.088873][ T345] usb 2-1: device descriptor read/8, error -71 [ 54.207508][ T315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 54.218729][ T345] usb 2-1: device descriptor read/8, error -71 [ 54.399965][ T315] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.411033][ T315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 54.417950][ T315] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 54.427298][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.437755][ T315] usb 3-1: config 0 descriptor?? [ 54.453873][ T36] audit: type=1400 audit(1788649046.530:404): avc: denied { bind } for pid=823 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.473336][ T345] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 54.481112][ T36] audit: type=1400 audit(1788649046.530:405): avc: denied { listen } for pid=823 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.518657][ T345] usb 2-1: device descriptor read/8, error -71 [ 54.648666][ T345] usb 2-1: device descriptor read/8, error -71 [ 54.758127][ T345] usb usb2-port1: unable to enumerate USB device [ 54.840001][ T830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.848812][ T830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.858676][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.863435][ T830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.867691][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.884145][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.891982][ T830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.900341][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.907599][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.915075][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.922398][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.930088][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.937261][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.944741][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.952244][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.959594][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.966902][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.974661][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.981946][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.989164][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 54.996335][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.003644][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.011381][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.018603][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.025780][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.033214][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.040438][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.047946][ T315] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 55.056711][ T315] logitech 0003:046D:C298.0004: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.2-1/input0 [ 55.069517][ T315] logitech 0003:046D:C298.0004: no inputs found [ 55.080680][ T315] usb 3-1: USB disconnect, device number 5 [ 55.100820][ T839] fido_id[839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 55.281132][ T845] FAULT_INJECTION: forcing a failure. [ 55.281132][ T845] name failslab, interval 1, probability 0, space 0, times 0 [ 55.294099][ T845] CPU: 1 UID: 0 PID: 845 Comm: syz.1.102 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 55.294137][ T845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.294151][ T845] Call Trace: [ 55.294158][ T845] [ 55.294167][ T845] __dump_stack+0x21/0x30 [ 55.294208][ T845] dump_stack_lvl+0x140/0x1c0 [ 55.294240][ T845] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.294271][ T845] ? avc_has_perm_noaudit+0x289/0x360 [ 55.294300][ T845] dump_stack+0x19/0x20 [ 55.294322][ T845] should_fail_ex+0x3c2/0x510 [ 55.294342][ T845] should_failslab+0xac/0x100 [ 55.294363][ T845] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 55.294383][ T845] ? sock_alloc_inode+0x48/0x150 [ 55.294400][ T845] sock_alloc_inode+0x48/0x150 [ 55.294414][ T845] ? __cfi_sock_alloc_inode+0x10/0x10 [ 55.294430][ T845] alloc_inode+0x7d/0x270 [ 55.294453][ T845] ? bpf_lsm_socket_create+0xd/0x20 [ 55.294471][ T845] new_inode_pseudo+0x19/0x40 [ 55.294492][ T845] __sock_create+0x130/0x810 [ 55.294510][ T845] __sys_socket+0xe1/0x1c0 [ 55.294527][ T845] __x64_sys_socket+0x7e/0x90 [ 55.294544][ T845] x64_sys_call+0x2608/0x2ee0 [ 55.294558][ T845] do_syscall_64+0x57/0xf0 [ 55.294582][ T845] ? clear_bhb_loop+0x50/0xa0 [ 55.294602][ T845] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.294619][ T845] RIP: 0033:0x7ff72499e159 [ 55.294634][ T845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.294647][ T845] RSP: 002b:00007ff7258a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 55.294665][ T845] RAX: ffffffffffffffda RBX: 00007ff724c25fa0 RCX: 00007ff72499e159 [ 55.294677][ T845] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 55.294686][ T845] RBP: 00007ff724a35024 R08: 0000000000000000 R09: 0000000000000000 [ 55.294697][ T845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.294706][ T845] R13: 00007ff724c26038 R14: 00007ff724c25fa0 R15: 00007ffda417c4f8 [ 55.294720][ T845] [ 55.294754][ T845] socket: no more sockets [ 55.348691][ T846] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 55.378511][ T845] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 55.550546][ T855] capability: warning: `syz.1.104' uses deprecated v2 capabilities in a way that may be insecure [ 55.607662][ T861] syz.3.105 uses obsolete (PF_INET,SOCK_PACKET) [ 55.827739][ T46] usbhid 4-1:0.0: can't add hid device: -110 [ 55.834363][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -110 [ 56.615671][ T889] kvm: kvm [881]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000051) [ 56.869988][ T931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.879249][ T931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.957540][ T315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 57.107510][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 57.116675][ T315] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.128239][ T315] usb 3-1: config 0 has an invalid interface number: 206 but max is 0 [ 57.140039][ T315] usb 3-1: config 0 has no interface number 0 [ 57.150623][ T315] usb 3-1: config 0 interface 206 has no altsetting 0 [ 57.164687][ T315] usb 3-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d9.93 [ 57.174126][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.182608][ T315] usb 3-1: Product: syz [ 57.187199][ T315] usb 3-1: Manufacturer: syz [ 57.192147][ T315] usb 3-1: SerialNumber: syz [ 57.198255][ T315] usb 3-1: config 0 descriptor?? [ 57.351853][ T937] ./dev/sda1: Can't lookup blockdev [ 57.359266][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 57.359286][ T36] audit: type=1400 audit(1788649049.440:417): avc: denied { nlmsg_read } for pid=936 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.386262][ T938] __nla_validate_parse: 24 callbacks suppressed [ 57.386288][ T938] netlink: 104 bytes leftover after parsing attributes in process `syz.1.118'. [ 57.417679][ T315] rndis_host 3-1:0.206: skipping garbage [ 57.423461][ T315] usb 3-1: bad CDC descriptors [ 57.428948][ T315] cdc_acm 3-1:0.206: skipping garbage [ 57.437797][ T315] usb 3-1: USB disconnect, device number 6 [ 57.499427][ T942] loop3: detected capacity change from 0 to 7 [ 57.522979][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.534055][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.543282][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.553512][ T944] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 57.557609][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.570833][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.579815][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.583515][ T944] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 57.589037][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.607042][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.607759][ T942] loop3: unable to read partition table [ 57.616253][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.627925][ T942] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 57.643730][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.652947][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.662191][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.671426][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.680677][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.689903][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.897004][ T962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 57.907679][ T966] mmap: syz.3.124 (966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.958959][ T968] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 58.011517][ T970] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 58.077911][ T974] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.126'. [ 58.271167][ T977] netlink: 'syz.3.128': attribute type 12 has an invalid length. [ 58.347146][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.356196][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.369353][ T983] Zero length message leads to an empty skb [ 58.457596][ T31] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 58.618698][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 58.629870][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 58.641329][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 58.657579][ T31] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 58.677184][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.686809][ T31] usb 3-1: config 0 descriptor?? [ 58.702547][ T973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.897837][ T36] audit: type=1400 audit(1788649050.980:418): avc: denied { append } for pid=988 comm="syz.3.130" name="uprobe_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.921725][ T36] audit: type=1400 audit(1788649050.980:419): avc: denied { append } for pid=988 comm="syz.3.130" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.944878][ T36] audit: type=1400 audit(1788649050.980:420): avc: denied { ioctl } for pid=988 comm="syz.3.130" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.033668][ T926] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.042044][ T36] audit: type=1400 audit(1788649051.120:421): avc: denied { mounton } for pid=991 comm="syz.0.131" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 59.123393][ T31] pantherlord 0003:0810:0002.0005: ignoring exceeding usage max [ 59.137676][ T31] pantherlord 0003:0810:0002.0005: hidraw0: USB HID v0.05 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 59.170536][ T31] pantherlord 0003:0810:0002.0005: no output reports found [ 59.375882][ T31] usb 3-1: USB disconnect, device number 7 [ 59.418794][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.428110][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.573029][ T1010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.585633][ T36] audit: type=1400 audit(1788649051.660:422): avc: denied { getopt } for pid=1009 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.608014][ T36] audit: type=1400 audit(1788649051.690:423): avc: denied { search } for pid=1009 comm="syz.1.135" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.704617][ T36] audit: type=1400 audit(1788649051.780:424): avc: denied { setopt } for pid=1014 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.724506][ T36] audit: type=1400 audit(1788649051.780:425): avc: denied { accept } for pid=1014 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.744608][ T36] audit: type=1400 audit(1788649051.780:426): avc: denied { read } for pid=1014 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.973418][ T1024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.985006][ T1024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.367556][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.700897][ T1037] ./dev/sda1: Can't lookup blockdev [ 60.765369][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.774280][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.783889][ T1044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.792970][ T1044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.098229][ T555] Bluetooth: hci0: command 0x1003 tx timeout [ 61.098780][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.324633][ T1050] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 61.352043][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.360844][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.904188][ T1056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.913164][ T1056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.438905][ T1061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.448131][ T1061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.490382][ T1061] FAULT_INJECTION: forcing a failure. [ 62.490382][ T1061] name failslab, interval 1, probability 0, space 0, times 0 [ 62.503168][ T1061] CPU: 1 UID: 60928 PID: 1061 Comm: syz.3.151 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 62.503208][ T1061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.503223][ T1061] Call Trace: [ 62.503231][ T1061] [ 62.503241][ T1061] __dump_stack+0x21/0x30 [ 62.503285][ T1061] dump_stack_lvl+0x140/0x1c0 [ 62.503314][ T1061] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.503340][ T1061] dump_stack+0x19/0x20 [ 62.503363][ T1061] should_fail_ex+0x3c2/0x510 [ 62.503383][ T1061] should_failslab+0xac/0x100 [ 62.503406][ T1061] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 62.503425][ T1061] ? widen_string+0x41/0x2e0 [ 62.503450][ T1061] ? kstrdup_const+0x45/0x60 [ 62.503465][ T1061] kstrdup+0x4d/0x130 [ 62.503490][ T1061] ? kstrdup_const+0x3a/0x60 [ 62.503504][ T1061] kstrdup_const+0x45/0x60 [ 62.503518][ T1061] __kernfs_new_node+0xaa/0x740 [ 62.503542][ T1061] ? kernfs_new_node+0x280/0x280 [ 62.503564][ T1061] ? kvasprintf+0x126/0x260 [ 62.503579][ T1061] ? __cfi_down_write+0x10/0x10 [ 62.503600][ T1061] ? __cfi_kvasprintf+0x10/0x10 [ 62.503616][ T1061] ? __kasan_check_write+0x18/0x20 [ 62.503633][ T1061] ? up_write+0x66/0x280 [ 62.503659][ T1061] kernfs_new_node+0x154/0x280 [ 62.503682][ T1061] kernfs_create_link+0xa8/0x200 [ 62.503697][ T1061] sysfs_do_create_link_sd+0x8a/0x120 [ 62.503716][ T1061] sysfs_create_link+0x6c/0x90 [ 62.503734][ T1061] module_add_driver+0x285/0x340 [ 62.503755][ T1061] bus_add_driver+0x3ea/0x730 [ 62.503777][ T1061] driver_register+0x2b7/0x3c0 [ 62.503793][ T1061] usb_gadget_register_driver_owner+0xfc/0x270 [ 62.503815][ T1061] raw_ioctl+0x144c/0x37a0 [ 62.503840][ T1061] ? __cfi_raw_ioctl+0x10/0x10 [ 62.503862][ T1061] ? selinux_file_ioctl+0x732/0x1480 [ 62.503878][ T1061] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 62.503897][ T1061] ? __fget_files+0x2bc/0x330 [ 62.503917][ T1061] ? bpf_lsm_file_ioctl+0xd/0x20 [ 62.503937][ T1061] ? security_file_ioctl+0x3e/0x110 [ 62.503952][ T1061] ? __cfi_raw_ioctl+0x10/0x10 [ 62.503973][ T1061] __se_sys_ioctl+0x126/0x1b0 [ 62.503993][ T1061] __x64_sys_ioctl+0x7f/0xa0 [ 62.504012][ T1061] x64_sys_call+0x1878/0x2ee0 [ 62.504027][ T1061] do_syscall_64+0x57/0xf0 [ 62.504049][ T1061] ? clear_bhb_loop+0x50/0xa0 [ 62.504067][ T1061] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.504084][ T1061] RIP: 0033:0x7fd06e59ddeb [ 62.504098][ T1061] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 62.504111][ T1061] RSP: 002b:00007fd06f3b5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.504128][ T1061] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fd06e59ddeb [ 62.504139][ T1061] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000b [ 62.504148][ T1061] RBP: 00007fd06f3b6fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 62.504159][ T1061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.504168][ T1061] R13: 00002000000000c0 R14: 0000000000000000 R15: 00000000000010d0 [ 62.504181][ T1061] [ 62.504225][ T1061] bus_add_driver: failed to create module links for raw-gadget.4 [ 62.821705][ T1061] UDC core: USB Raw Gadget: driver registration failed: -12 [ 62.832808][ T1061] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 63.190692][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 63.190713][ T36] audit: type=1400 audit(1788649055.260:434): avc: denied { read } for pid=1065 comm="syz.2.153" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.219733][ T36] audit: type=1400 audit(1788649055.260:435): avc: denied { open } for pid=1065 comm="syz.2.153" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.604281][ T36] audit: type=1400 audit(1788649055.680:436): avc: denied { mounton } for pid=1082 comm="syz.3.157" path="/63/file0" dev="incremental-fs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.676495][ T1087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.686826][ T1087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.699059][ T1088] kvm: pic: non byte read [ 63.703863][ T1088] kvm: pic: level sensitive irq not supported [ 63.703926][ T1088] kvm: pic: non byte read [ 63.715406][ T1088] kvm: pic: level sensitive irq not supported [ 63.715467][ T1088] kvm: pic: non byte read [ 63.729103][ T1088] kvm: pic: level sensitive irq not supported [ 63.729160][ T1088] kvm: pic: non byte read [ 63.743642][ T1088] kvm: pic: level sensitive irq not supported [ 63.743705][ T1088] kvm: pic: non byte read [ 63.754786][ T1088] kvm: pic: level sensitive irq not supported [ 63.754843][ T1088] kvm: pic: non byte read [ 63.756288][ T1091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.160'. [ 63.763790][ T1088] kvm: pic: level sensitive irq not supported [ 63.774873][ T1088] kvm: pic: non byte read [ 63.786281][ T1088] kvm: pic: level sensitive irq not supported [ 63.786341][ T1088] kvm: pic: non byte read [ 63.797510][ T1088] kvm: pic: level sensitive irq not supported [ 63.797587][ T1088] kvm: pic: non byte read [ 63.860307][ T36] audit: type=1400 audit(1788649055.940:437): avc: denied { connect } for pid=1097 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.890516][ T36] audit: type=1400 audit(1788649055.970:438): avc: denied { getopt } for pid=1100 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.966838][ T36] audit: type=1400 audit(1788649056.040:439): avc: denied { connect } for pid=1105 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.986426][ T36] audit: type=1400 audit(1788649056.050:440): avc: denied { write } for pid=1105 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.197920][ T1117] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 64.264923][ T1120] kvm: pic: non byte write [ 64.298112][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 64.333882][ T1120] kvm_intel: kvm [1119]: vcpu5, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x212002 [ 64.375335][ T36] audit: type=1400 audit(1788649056.450:441): avc: denied { mounton } for pid=1123 comm="syz.3.172" path="/66/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 64.411940][ T1126] FAULT_INJECTION: forcing a failure. [ 64.411940][ T1126] name fail_futex, interval 1, probability 0, space 0, times 1 [ 64.425535][ T1126] CPU: 0 UID: 0 PID: 1126 Comm: syz.3.173 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 64.425588][ T1126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.425602][ T1126] Call Trace: [ 64.425610][ T1126] [ 64.425618][ T1126] __dump_stack+0x21/0x30 [ 64.425656][ T1126] dump_stack_lvl+0x140/0x1c0 [ 64.425687][ T1126] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.425719][ T1126] dump_stack+0x19/0x20 [ 64.425746][ T1126] should_fail_ex+0x3c2/0x510 [ 64.425783][ T1126] should_fail+0xf/0x20 [ 64.425806][ T1126] get_futex_key+0x178/0x940 [ 64.425852][ T1126] ? kasan_save_track+0x3e/0x80 [ 64.425883][ T1126] ? __cfi_get_futex_key+0x10/0x10 [ 64.425902][ T1126] ? do_sys_openat2+0x170/0x1d0 [ 64.425938][ T1126] ? x64_sys_call+0x131a/0x2ee0 [ 64.425964][ T1126] ? do_syscall_64+0x57/0xf0 [ 64.425998][ T1126] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.426018][ T1126] futex_wake+0x150/0x950 [ 64.426033][ T1126] ? __cfi_futex_wake+0x10/0x10 [ 64.426051][ T1126] do_futex+0x37d/0x510 [ 64.426073][ T1126] ? __cfi_do_futex+0x10/0x10 [ 64.426095][ T1126] __se_sys_futex+0x13c/0x320 [ 64.426129][ T1126] ? fput+0x1a4/0x230 [ 64.426160][ T1126] ? __x64_sys_futex+0x110/0x110 [ 64.426196][ T1126] ? __cfi_ksys_write+0x10/0x10 [ 64.426214][ T1126] __x64_sys_futex+0xe9/0x110 [ 64.426236][ T1126] x64_sys_call+0x227f/0x2ee0 [ 64.426251][ T1126] do_syscall_64+0x57/0xf0 [ 64.426276][ T1126] ? clear_bhb_loop+0x50/0xa0 [ 64.426295][ T1126] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.426313][ T1126] RIP: 0033:0x7fd06e59e159 [ 64.426326][ T1126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.426340][ T1126] RSP: 002b:00007fd06f3b80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 64.426357][ T1126] RAX: ffffffffffffffda RBX: 00007fd06e825fa8 RCX: 00007fd06e59e159 [ 64.426370][ T1126] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd06e825fac [ 64.426380][ T1126] RBP: 00007fd06e825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 64.426391][ T1126] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 64.426401][ T1126] R13: 00007fd06e826038 R14: 00007ffd93d50cd0 R15: 00007ffd93d50db8 [ 64.426415][ T1126] [ 64.447614][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 64.587701][ T314] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 64.608701][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.683063][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.701424][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.710545][ T1129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.710859][ T1129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.720770][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.735493][ T1129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.746164][ T31] usb 3-1: config 0 descriptor?? [ 64.746380][ T1129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.760305][ T314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.765316][ T1129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.774050][ T36] audit: type=1400 audit(1788649056.840:442): avc: denied { write } for pid=1128 comm="syz.3.174" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.781010][ T1129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.803559][ T314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.819601][ T314] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.828919][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.836948][ T314] usb 2-1: SerialNumber: syz [ 65.045160][ T314] usb 2-1: 0:2 : does not exist [ 65.057279][ T314] usb 2-1: USB disconnect, device number 12 [ 65.069749][ T474] udevd[474]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.159672][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 65.169109][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input8 [ 65.183266][ T31] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 65.468517][ T36] audit: type=1400 audit(1788649057.550:443): avc: denied { mounton } for pid=1142 comm="syz.3.176" path=2F37302F6275732FE91F7189591E9233614B dev="overlay" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 65.469028][ T1143] 9pnet_fd: p9_fd_create_unix (1143): problem connecting socket: qY3aK: -111 [ 65.567389][ T1151] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 65.575199][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 65.661432][ T1159] 9pnet_fd: p9_fd_create_tcp (1159): problem connecting socket to 127.0.0.1 [ 65.670838][ T1159] 9pnet_fd: p9_fd_create_tcp (1159): problem connecting socket to 127.0.0.1 [ 65.680438][ T1159] 9pnet_fd: p9_fd_create_tcp (1159): problem connecting socket to 127.0.0.1 [ 65.689986][ T1159] 9pnet_fd: p9_fd_create_tcp (1159): problem connecting socket to 127.0.0.1 [ 65.699901][ T1159] 9pnet_fd: p9_fd_create_tcp (1159): problem connecting socket to 127.0.0.1 [ 65.709359][ T1159] 9pnet_fd: p9_fd_create_tcp (1159): problem connecting socket to 127.0.0.1 [ 65.719338][ T1159] 9pnet_fd: p9_fd_create_tcp (1159): problem connecting socket to 127.0.0.1 [ 65.772305][ T314] usb 3-1: USB disconnect, device number 9 [ 65.805044][ T1164] rust_binder: Failure in copy_transaction_data: EINVAL [ 65.805098][ T1164] rust_binder: 1163:1164 transaction async to 1163:0 failed EINVAL, code 0 size 0-24 [ 65.823621][ T67] rust_binder: 1163: undelivered TRANSACTION_COMPLETE [ 65.836480][ T67] rust_binder: 1163: undelivered TRANSACTION_ERROR: 29201 [ 66.458397][ T1176] FAULT_INJECTION: forcing a failure. [ 66.458397][ T1176] name failslab, interval 1, probability 0, space 0, times 0 [ 66.471586][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.2.188 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 66.471626][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.471649][ T1176] Call Trace: [ 66.471658][ T1176] [ 66.471667][ T1176] __dump_stack+0x21/0x30 [ 66.471712][ T1176] dump_stack_lvl+0x140/0x1c0 [ 66.471747][ T1176] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.471783][ T1176] ? stack_depot_save_flags+0x38/0x800 [ 66.471818][ T1176] dump_stack+0x19/0x20 [ 66.471851][ T1176] should_fail_ex+0x3c2/0x510 [ 66.471880][ T1176] should_failslab+0xac/0x100 [ 66.471913][ T1176] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 66.471940][ T1176] ? __d_alloc+0x42/0x8c0 [ 66.471975][ T1176] __d_alloc+0x42/0x8c0 [ 66.472016][ T1176] ? selinux_socket_post_create+0x2d7/0x490 [ 66.472052][ T1176] d_alloc_pseudo+0x23/0xc0 [ 66.472078][ T1176] alloc_file_pseudo+0xde/0x1f0 [ 66.472113][ T1176] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 66.472148][ T1176] ? bpf_lsm_socket_post_create+0xd/0x20 [ 66.472176][ T1176] ? security_socket_post_create+0x48/0x140 [ 66.472212][ T1176] ? __kasan_check_write+0x18/0x20 [ 66.472238][ T1176] sock_alloc_file+0xbe/0x2b0 [ 66.472262][ T1176] __sys_socketpair+0x2e1/0x5c0 [ 66.472290][ T1176] __x64_sys_socketpair+0x9f/0xc0 [ 66.472316][ T1176] x64_sys_call+0x2081/0x2ee0 [ 66.472337][ T1176] do_syscall_64+0x57/0xf0 [ 66.472391][ T1176] ? clear_bhb_loop+0x50/0xa0 [ 66.472421][ T1176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.472448][ T1176] RIP: 0033:0x7f0db839e159 [ 66.472470][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.472493][ T1176] RSP: 002b:00007f0db6df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 66.472519][ T1176] RAX: ffffffffffffffda RBX: 00007f0db8625fa0 RCX: 00007f0db839e159 [ 66.472539][ T1176] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 66.472554][ T1176] RBP: 00007f0db8435024 R08: 0000000000000000 R09: 0000000000000000 [ 66.472570][ T1176] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.472586][ T1176] R13: 00007f0db8626038 R14: 00007f0db8625fa0 R15: 00007ffed5bb80a8 [ 66.472608][ T1176] [ 67.448232][ T555] Bluetooth: hci0: sending frame failed (-49) [ 67.454503][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 67.597089][ T1237] capability: warning: `syz.0.202' uses 32-bit capabilities (legacy support in use) [ 67.843481][ T1240] netlink: 'syz.0.202': attribute type 15 has an invalid length. [ 67.883619][ T1240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'. [ 68.455342][ T1255] bridge0: port 3(erspan0) entered blocking state [ 68.477530][ T1255] bridge0: port 3(erspan0) entered disabled state [ 68.484167][ T1255] erspan0: entered allmulticast mode [ 68.518855][ T1255] erspan0: entered promiscuous mode [ 68.524440][ T1255] bridge0: port 3(erspan0) entered blocking state [ 68.530950][ T1255] bridge0: port 3(erspan0) entered forwarding state [ 68.557485][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 68.557503][ T36] audit: type=1400 audit(1788649060.630:457): avc: denied { create } for pid=1260 comm="syz.3.210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.588146][ T36] audit: type=1400 audit(1788649060.670:458): avc: denied { mounton } for pid=1260 comm="syz.3.210" path="/84/file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.624090][ T36] audit: type=1400 audit(1788649060.700:459): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.687572][ T314] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 68.714358][ T36] audit: type=1400 audit(1788649060.790:460): avc: denied { bind } for pid=1262 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.742857][ T36] audit: type=1400 audit(1788649060.810:461): avc: denied { ioctl } for pid=1262 comm="syz.3.211" path="socket:[12094]" dev="sockfs" ino=12094 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.847527][ T314] usb 3-1: Using ep0 maxpacket: 8 [ 68.855346][ T314] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 68.864789][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.873045][ T314] usb 3-1: Product: syz [ 68.877326][ T314] usb 3-1: Manufacturer: syz [ 68.882036][ T314] usb 3-1: SerialNumber: syz [ 69.101247][ T1251] veth1_macvtap: left promiscuous mode [ 69.636230][ T1270] incfs: Options parsing error. -22 [ 69.641583][ T1270] incfs: mount failed -22 [ 70.009327][ T36] audit: type=1400 audit(1788649062.090:462): avc: denied { append } for pid=1292 comm="syz.2.222" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.050769][ T36] audit: type=1400 audit(1788649062.110:463): avc: denied { write } for pid=1292 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.159830][ T36] audit: type=1400 audit(1788649062.240:464): avc: denied { mount } for pid=1295 comm="syz.3.223" name="/" dev="configfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.214829][ T36] audit: type=1400 audit(1788649062.260:465): avc: denied { search } for pid=1295 comm="syz.3.223" name="/" dev="configfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.241612][ T1298] netlink: 'syz.3.224': attribute type 4 has an invalid length. [ 70.267235][ T1298] netlink: 'syz.3.224': attribute type 6 has an invalid length. [ 70.269079][ T36] audit: type=1400 audit(1788649062.260:466): avc: denied { write } for pid=1295 comm="syz.3.223" name="usb_gadget" dev="configfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.287769][ T1298] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.224'. [ 70.407099][ T1304] FAULT_INJECTION: forcing a failure. [ 70.407099][ T1304] name failslab, interval 1, probability 0, space 0, times 0 [ 70.419865][ T1304] CPU: 1 UID: 0 PID: 1304 Comm: syz.2.226 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 70.419908][ T1304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.419924][ T1304] Call Trace: [ 70.419932][ T1304] [ 70.419942][ T1304] __dump_stack+0x21/0x30 [ 70.419986][ T1304] dump_stack_lvl+0x140/0x1c0 [ 70.420023][ T1304] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.420061][ T1304] dump_stack+0x19/0x20 [ 70.420095][ T1304] should_fail_ex+0x3c2/0x510 [ 70.420125][ T1304] should_failslab+0xac/0x100 [ 70.420157][ T1304] __kmalloc_cache_noprof+0x41/0x470 [ 70.420185][ T1304] ? alloc_super+0x67/0x950 [ 70.420220][ T1304] ? _raw_spin_lock+0x92/0x120 [ 70.420259][ T1304] alloc_super+0x67/0x950 [ 70.420293][ T1304] ? kernfs_test_super+0xb0/0x100 [ 70.420323][ T1304] ? __cfi_kernfs_test_super+0x10/0x10 [ 70.420350][ T1304] sget_fc+0x325/0xa70 [ 70.420386][ T1304] ? __cfi_kernfs_set_super+0x10/0x10 [ 70.420415][ T1304] kernfs_get_tree+0x1ff/0x9a0 [ 70.420444][ T1304] ? __kasan_check_write+0x18/0x20 [ 70.420470][ T1304] ? __cfi_kernfs_get_tree+0x10/0x10 [ 70.420498][ T1304] ? selinux_capable+0x38/0x50 [ 70.420531][ T1304] ? bpf_lsm_capable+0xd/0x20 [ 70.420568][ T1304] ? security_capable+0x44/0x130 [ 70.420596][ T1304] sysfs_get_tree+0x44/0x110 [ 70.420634][ T1304] vfs_get_tree+0x9e/0x290 [ 70.420660][ T1304] do_new_mount+0x251/0xb40 [ 70.420687][ T1304] ? security_capable+0x44/0x130 [ 70.420717][ T1304] path_mount+0x66a/0xff0 [ 70.420742][ T1304] ? putname+0x113/0x150 [ 70.420771][ T1304] __se_sys_mount+0x2bf/0x480 [ 70.420800][ T1304] ? __x64_sys_mount+0xf0/0xf0 [ 70.420828][ T1304] ? __kasan_check_write+0x18/0x20 [ 70.420854][ T1304] ? fpregs_restore_userregs+0x11c/0x260 [ 70.420887][ T1304] __x64_sys_mount+0xc3/0xf0 [ 70.420914][ T1304] x64_sys_call+0x2021/0x2ee0 [ 70.420937][ T1304] do_syscall_64+0x57/0xf0 [ 70.420973][ T1304] ? clear_bhb_loop+0x50/0xa0 [ 70.421004][ T1304] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.421031][ T1304] RIP: 0033:0x7f0db839e159 [ 70.421052][ T1304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.421072][ T1304] RSP: 002b:00007f0db6df7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.421105][ T1304] RAX: ffffffffffffffda RBX: 00007f0db8625fa0 RCX: 00007f0db839e159 [ 70.421126][ T1304] RDX: 0000200000000300 RSI: 0000200000000200 RDI: 0000000000000000 [ 70.421144][ T1304] RBP: 00007f0db8435024 R08: 0000000000000000 R09: 0000000000000000 [ 70.421160][ T1304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.421176][ T1304] R13: 00007f0db8626038 R14: 00007f0db8625fa0 R15: 00007ffed5bb80a8 [ 70.421199][ T1304] [ 70.426306][ T1305] sock: sock_timestamping_bind_phc: sock not bind to device [ 70.951371][ T1308] FAULT_INJECTION: forcing a failure. [ 70.951371][ T1308] name failslab, interval 1, probability 0, space 0, times 0 [ 70.964524][ T1308] CPU: 0 UID: 0 PID: 1308 Comm: syz.2.227 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 70.964569][ T1308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.964590][ T1308] Call Trace: [ 70.964599][ T1308] [ 70.964610][ T1308] __dump_stack+0x21/0x30 [ 70.964655][ T1308] dump_stack_lvl+0x140/0x1c0 [ 70.964692][ T1308] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.964729][ T1308] ? avc_has_perm_noaudit+0x289/0x360 [ 70.964876][ T1308] dump_stack+0x19/0x20 [ 70.964915][ T1308] should_fail_ex+0x3c2/0x510 [ 70.964944][ T1308] should_failslab+0xac/0x100 [ 70.964976][ T1308] kmem_cache_alloc_noprof+0x42/0x410 [ 70.965004][ T1308] ? copy_fs_struct+0x5d/0x2d0 [ 70.965031][ T1308] ? __kasan_check_write+0x18/0x20 [ 70.965058][ T1308] copy_fs_struct+0x5d/0x2d0 [ 70.965082][ T1308] ? copy_fs+0x67/0x160 [ 70.965114][ T1308] copy_fs+0x6f/0x160 [ 70.965144][ T1308] copy_process+0x1220/0x3350 [ 70.965178][ T1308] ? __cfi_copy_process+0x10/0x10 [ 70.965212][ T1308] kernel_clone+0x233/0x810 [ 70.965244][ T1308] ? __cfi_kernel_clone+0x10/0x10 [ 70.965276][ T1308] ? do_futex+0x32a/0x510 [ 70.965312][ T1308] __x64_sys_clone+0x1b7/0x230 [ 70.965346][ T1308] ? __cfi___x64_sys_clone+0x10/0x10 [ 70.965383][ T1308] ? __kasan_check_write+0x18/0x20 [ 70.965409][ T1308] ? fpregs_restore_userregs+0x11c/0x260 [ 70.965441][ T1308] ? switch_fpu_return+0x12/0x20 [ 70.965472][ T1308] x64_sys_call+0x2b3c/0x2ee0 [ 70.965496][ T1308] do_syscall_64+0x57/0xf0 [ 70.965533][ T1308] ? clear_bhb_loop+0x50/0xa0 [ 70.965600][ T1308] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.965629][ T1308] RIP: 0033:0x7f0db839e159 [ 70.965652][ T1308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.965676][ T1308] RSP: 002b:00007f0db6df6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 70.965704][ T1308] RAX: ffffffffffffffda RBX: 00007f0db8625fa0 RCX: 00007f0db839e159 [ 70.965724][ T1308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000180400 [ 70.965739][ T1308] RBP: 00007f0db8435024 R08: 0000000000000000 R09: 0000000000000000 [ 70.965754][ T1308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 70.965769][ T1308] R13: 00007f0db8626038 R14: 00007f0db8625fa0 R15: 00007ffed5bb80a8 [ 70.965790][ T1308] [ 71.222241][ T1310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.233427][ T1310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.264450][ T65] device offline error, dev sda, sector 1114638 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.276143][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139329) [ 71.287844][ T65] Buffer I/O error on device sda1, logical block 139291 [ 71.294969][ T65] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.305620][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143398) [ 71.317298][ T65] Buffer I/O error on device sda1, logical block 143360 [ 71.324400][ T65] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.335216][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144421) [ 71.346900][ T65] Buffer I/O error on device sda1, logical block 144383 [ 71.354026][ T65] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.364671][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 147494) [ 71.376595][ T399] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.387235][ T65] Buffer I/O error on device sda1, logical block 147456 [ 71.394306][ T65] device offline error, dev sda, sector 1180462 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.405029][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 147557) [ 71.417023][ T65] Buffer I/O error on device sda1, logical block 147519 [ 71.424200][ T399] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 142374) [ 71.424221][ T65] device offline error, dev sda, sector 1188142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.435869][ T399] Buffer I/O error on device sda1, logical block 142336 [ 71.446945][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 148517) [ 71.454010][ T399] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 71.465733][ T65] Buffer I/O error on device sda1, logical block 148479 [ 71.476223][ T399] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 142886) [ 71.487710][ T65] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.494885][ T399] Buffer I/O error on device sda1, logical block 142848 [ 71.505643][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 149542) [ 71.515179][ T399] Buffer I/O error on device sda1, logical block 142849 [ 71.530997][ T65] Buffer I/O error on device sda1, logical block 149504 [ 71.538105][ T65] device offline error, dev sda, sector 1204526 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 71.548722][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 150565) [ 71.578226][ T74] Aborting journal on device sda1-8. [ 71.589918][ T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 71.608515][ T74] JBD2: I/O error when updating journal superblock for sda1-8. [ 71.635632][ T1312] EXT4-fs (sda1): shut down requested (2) Sep 5 22:57:43 syzkaller kern.alert kernel: [ 71.635632][ T1312] EXT4-fs (sda1): shut down requested (2) [ 71.681622][ T1312] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 71.895854][ T1317] fuse: Unknown parameter '@' [ 71.972507][ T1320] Write-error on swap-device (8:0:790022) [ 71.986693][ T1320] Write-error on swap-device (8:0:790046) Sep 5 22:57:44 syzkaller kern.alert kernel: [ [ 71.997282][ T1320] Write-error on swap-device (8:0:790054) 71.972507][ T13[ 72.004575][ T1320] Write-error on swap-device (8:0:790062) 20] Write-error on swap-device (8:0:790022) Sep 5 22:57:44 syzkaller kern.aler[ 72.017573][ T1320] Write-error on swap-device (8:0:790070) t kernel: [ 71.986693][ T1320] Write-error on swap-device (8:0:790046) Sep 5[ 72.029918][ T1320] Write-error on swap-device (8:0:790078) 22:57:44 syzkal[ 72.036881][ T1320] Write-error on swap-device (8:0:790086) ler kern.alert kernel: [ 71.997282][ T1320] Write-error on swap-device (8:0:790054) Sep 5 22:57:44 syzkaller kern.alert kernel: [ 72.004575][ T1320] Write-error on swap-device (8:0:79006[ 72.060017][ T1320] Write-error on swap-device (8:0:790094) 2) Sep 5 22:57[ 72.066766][ T1320] Write-error on swap-device (8:0:790102) :44 syzkaller ke[ 72.074857][ T1320] Write-error on swap-device (8:0:790110) rn.alert kernel: [ 72.017573][ T1320] Write-error on swap-device (8:0:790070) Sep 5 22:57:44 syzkaller kern.alert kernel: [ 72.029918][ T1320] Write-error on swap-device (8:0:790078) Sep 5 22:57:44 syzkaller kern.alert kernel: [ 72.036881][ T1320] Write-error on swap-device (8:0:790086) Sep 5 22:57:44 syzkaller kern.alert kernel: [ 72.060017][ T1320] Write-error on swap-device (8:0:790094) Sep 5 22:57:44 syzkaller kern.alert kernel: [ 72.066766][ T1320] Writ[ 72.121482][ T1332] tipc: Started in network mode e-error on swap-device (8:0:7901[ 72.129449][ T1332] tipc: Node identity , cluster identity 4711 02) Sep 5 22:5[ 72.136531][ T1332] tipc: Failed to obtain node identity 7:44 syzkaller k[ 72.143352][ T1332] tipc: Enabling of bearer rejected, failed to enable media ern.alert kernel: [ 72.074857][ T1320] Write-error on swap-device (8:0:790110) [ 72.163368][ T1331] tipc: Started in network mode [ 72.171465][ T1331] tipc: Node identity , cluster identity 4711 [ 72.181701][ T1331] tipc: Failed to obtain node identity [ 72.187390][ T1331] tipc: Enabling of bearer rejected, failed to enable media [ 72.200347][ T1332] tipc: Started in network mode [ 72.205807][ T1332] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 72.226124][ T1332] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.234660][ T1332] tipc: Enabled bearer , priority 10 [ 72.442249][ T1351] BUG: scheduling while atomic: syz.3.241/1351/0x00000002 [ 72.449497][ T1351] Modules linked in: [ 72.453544][ T1351] CPU: 0 UID: 0 PID: 1351 Comm: syz.3.241 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 72.453583][ T1351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.453599][ T1351] Call Trace: [ 72.453607][ T1351] [ 72.453618][ T1351] __dump_stack+0x21/0x30 [ 72.453666][ T1351] dump_stack_lvl+0x140/0x1c0 [ 72.453701][ T1351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.453740][ T1351] dump_stack+0x19/0x20 [ 72.453774][ T1351] __schedule_bug+0x12b/0x200 [ 72.453802][ T1351] ? find_proxy_task+0x2460/0x2460 [ 72.453829][ T1351] ? kernel_text_address+0xa9/0xe0 [ 72.453864][ T1351] ? __kernel_text_address+0x11/0x40 [ 72.453897][ T1351] ? unwind_get_return_address+0x51/0x90 [ 72.453929][ T1351] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 72.453961][ T1351] __schedule+0xb85/0x20b0 [ 72.453988][ T1351] ? stack_trace_save+0xaa/0x100 [ 72.454018][ T1351] ? __sched_text_start+0x10/0x10 [ 72.454042][ T1351] ? __kasan_check_read+0x15/0x20 [ 72.454068][ T1351] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 72.454107][ T1351] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 72.454138][ T1351] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 72.454170][ T1351] schedule+0xc5/0x240 [ 72.454193][ T1351] schedule_preempt_disabled+0x14/0x30 [ 72.454219][ T1351] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 72.454253][ T1351] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 72.454286][ T1351] ? try_to_wake_up+0x111a/0x1fd0 [ 72.454317][ T1351] ? __kasan_check_write+0x18/0x20 [ 72.454342][ T1351] ? wake_q_add_safe+0x29/0x100 [ 72.454365][ T1351] ? __cfi_try_to_wake_up+0x10/0x10 [ 72.454394][ T1351] ? rwsem_mark_wake+0x507/0x770 [ 72.454441][ T1351] ? rwsem_read_trylock+0x275/0x5a0 [ 72.454480][ T1351] ? wake_up_q+0x10a/0x1c0 [ 72.454503][ T1351] ? downgrade_write+0x470/0x470 [ 72.454541][ T1351] down_write+0x163/0x2b0 [ 72.454571][ T1351] ? __cfi_down_write+0x10/0x10 [ 72.454601][ T1351] ? down_read+0x7f/0xe0 [ 72.454629][ T1351] ? __cfi_down_read+0x10/0x10 [ 72.454661][ T1351] kernfs_remove_by_name_ns+0x8c/0x180 [ 72.454699][ T1351] sysfs_unmerge_group+0xd7/0x130 [ 72.454729][ T1351] dpm_sysfs_remove+0x7b/0xd0 [ 72.454765][ T1351] device_del+0x241/0xcf0 [ 72.454802][ T1351] ? __cfi_class_find_device+0x10/0x10 [ 72.454831][ T1351] ? __cfi_device_del+0x10/0x10 [ 72.454867][ T1351] ? __kasan_check_write+0x18/0x20 [ 72.454893][ T1351] ? kobject_put+0x1cc/0x2a0 [ 72.454928][ T1351] device_destroy+0xb0/0x100 [ 72.454951][ T1351] ? __cfi_device_destroy+0x10/0x10 [ 72.454975][ T1351] ? __kasan_check_write+0x18/0x20 [ 72.455002][ T1351] android_device_destroy+0x118/0x180 [ 72.455040][ T1351] gadgets_drop+0x1d/0x30 [ 72.455065][ T1351] ? __cfi_gadgets_drop+0x10/0x10 [ 72.455090][ T1351] configfs_rmdir+0x8ba/0x9b0 [ 72.455126][ T1351] vfs_rmdir+0x3de/0x560 [ 72.455162][ T1351] do_rmdir+0x29a/0x590 [ 72.455198][ T1351] ? __cfi_do_rmdir+0x10/0x10 [ 72.455233][ T1351] ? __kasan_check_write+0x18/0x20 [ 72.455260][ T1351] __x64_sys_rmdir+0x4b/0x60 [ 72.455296][ T1351] x64_sys_call+0xaf7/0x2ee0 [ 72.455320][ T1351] do_syscall_64+0x57/0xf0 [ 72.455356][ T1351] ? clear_bhb_loop+0x50/0xa0 [ 72.455385][ T1351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.455413][ T1351] RIP: 0033:0x7fd06e59e159 [ 72.455443][ T1351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.455466][ T1351] RSP: 002b:00007fd06f3b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 72.455494][ T1351] RAX: ffffffffffffffda RBX: 00007fd06e825fa0 RCX: 00007fd06e59e159 [ 72.455514][ T1351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 72.455532][ T1351] RBP: 00007fd06e635024 R08: 0000000000000000 R09: 0000000000000000 [ 72.455549][ T1351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.455565][ T1351] R13: 00007fd06e826038 R14: 00007fd06e825fa0 R15: 00007ffd93d50db8 [ 72.455587][ T1351] [ 72.658432][ T1351] ------------[ cut here ]------------ [ 72.658471][ T1351] WARNING: CPU: 1 PID: 1351 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 72.862224][ T1351] Modules linked in: [ 72.866644][ T1351] CPU: 1 UID: 0 PID: 1351 Comm: syz.3.241 Tainted: G W syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 72.879887][ T1351] Tainted: [W]=WARN [ 72.883763][ T1351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.894257][ T1351] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 72.900606][ T1351] Code: 48 83 3d f4 e5 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c 47 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 72.920483][ T1351] RSP: 0018:ffffc9000f5bf980 EFLAGS: 00010206 [ 72.926727][ T1351] RAX: 000000007fffffff RBX: ffff8881f5642e00 RCX: 0000000000442e00 [ 72.934823][ T1351] RDX: ffff8881f5642e00 RSI: 0000000000000001 RDI: 0000000070808076 [ 72.943000][ T1351] RBP: ffffc9000f5bf9e0 R08: 00000000d1100d3c R09: 00000000a3e3935a [ 72.951065][ T1351] R10: 000000000000000d R11: ffffffff8175a5e0 R12: 00000000d37442e0 [ 72.959115][ T1351] R13: 0000000000000000 R14: ffffc9000f5bf9f0 R15: 000000000000000d [ 72.967161][ T1351] FS: 00007fd06f3b86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 72.976454][ T1351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.983183][ T1351] CR2: 00007fd06e827dac CR3: 0000000132c0a000 CR4: 00000000003526b0 [ 72.991251][ T1351] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 72.999379][ T1351] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 73.007405][ T1351] Call Trace: [ 73.010876][ T1351] [ 73.013889][ T1351] ? do_syscall_64+0x57/0xf0 [ 73.018622][ T1351] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.024771][ T1351] kasan_save_track+0x4f/0x80 [ 73.029720][ T1351] ? kasan_save_track+0x3e/0x80 [ 73.034640][ T1351] ? kasan_save_free_info+0x44/0x50 [ 73.040193][ T1351] ? __kasan_slab_free+0x5f/0x80 [ 73.045212][ T1351] ? kfree+0x158/0x440 [ 73.049495][ T1351] ? gadget_info_attr_release+0xcb/0x130 [ 73.055263][ T1351] ? config_item_put+0x175/0x240 [ 73.060395][ T1351] ? configfs_rmdir+0x8e8/0x9b0 [ 73.065304][ T1351] ? vfs_rmdir+0x3de/0x560 [ 73.069827][ T1351] ? do_rmdir+0x29a/0x590 [ 73.074219][ T1351] ? __x64_sys_rmdir+0x4b/0x60 [ 73.079100][ T1351] ? x64_sys_call+0xaf7/0x2ee0 [ 73.083925][ T1351] ? do_syscall_64+0x57/0xf0 [ 73.088669][ T1351] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.094840][ T1351] kasan_save_free_info+0x44/0x50 [ 73.099962][ T1351] __kasan_slab_free+0x5f/0x80 [ 73.105080][ T1351] kfree+0x158/0x440 [ 73.109078][ T1351] ? gadget_info_attr_release+0xcb/0x130 [ 73.114767][ T1351] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 73.121010][ T1351] gadget_info_attr_release+0xcb/0x130 [ 73.126529][ T1351] config_item_put+0x175/0x240 [ 73.131412][ T1351] ? __cfi_gadgets_drop+0x10/0x10 [ 73.136583][ T1351] configfs_rmdir+0x8e8/0x9b0 [ 73.141371][ T1351] vfs_rmdir+0x3de/0x560 [ 73.145779][ T1351] do_rmdir+0x29a/0x590 [ 73.150094][ T1351] ? __cfi_do_rmdir+0x10/0x10 [ 73.154938][ T1351] ? __kasan_check_write+0x18/0x20 [ 73.160154][ T1351] __x64_sys_rmdir+0x4b/0x60 [ 73.164808][ T1351] x64_sys_call+0xaf7/0x2ee0 [ 73.169499][ T1351] do_syscall_64+0x57/0xf0 [ 73.173976][ T1351] ? clear_bhb_loop+0x50/0xa0 [ 73.178782][ T1351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.184744][ T1351] RIP: 0033:0x7fd06e59e159 [ 73.189247][ T1351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.208933][ T1351] RSP: 002b:00007fd06f3b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 73.217412][ T1351] RAX: ffffffffffffffda RBX: 00007fd06e825fa0 RCX: 00007fd06e59e159 [ 73.225485][ T1351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 73.233553][ T1351] RBP: 00007fd06e635024 R08: 0000000000000000 R09: 0000000000000000 [ 73.241623][ T1351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.249675][ T1351] R13: 00007fd06e826038 R14: 00007fd06e825fa0 R15: 00007ffd93d50db8 [ 73.257923][ T1351] [ 73.260989][ T1351] ---[ end trace 0000000000000000 ]--- [ 73.268658][ T1351] BUG: scheduling while atomic: syz.3.241/1351/0x00000000 [ 73.275826][ T1351] Modules linked in: [ 73.279808][ T1351] CPU: 1 UID: 0 PID: 1351 Comm: syz.3.241 Tainted: G W syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 73.279849][ T1351] Tainted: [W]=WARN [ 73.279864][ T1351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.279878][ T1351] Call Trace: [ 73.279886][ T1351] [ 73.279894][ T1351] __dump_stack+0x21/0x30 [ 73.279935][ T1351] dump_stack_lvl+0x140/0x1c0 [ 73.279969][ T1351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.280006][ T1351] ? kernel_text_address+0xa9/0xe0 [ 73.280040][ T1351] dump_stack+0x19/0x20 [ 73.280074][ T1351] __schedule_bug+0x12b/0x200 [ 73.280102][ T1351] ? find_proxy_task+0x2460/0x2460 [ 73.280130][ T1351] ? is_bpf_text_address+0x17b/0x1a0 [ 73.280167][ T1351] __schedule+0xb85/0x20b0 [ 73.280193][ T1351] ? __kernel_text_address+0x11/0x40 [ 73.280228][ T1351] ? plist_check_list+0x2a1/0x2c0 [ 73.280266][ T1351] ? __sched_text_start+0x10/0x10 [ 73.280290][ T1351] ? plist_add+0x4d4/0x570 [ 73.280327][ T1351] ? __futex_queue+0x19f/0x350 [ 73.280362][ T1351] ? __cfi___futex_queue+0x10/0x10 [ 73.280395][ T1351] schedule+0xc5/0x240 [ 73.280418][ T1351] futex_wait_queue+0xfc/0x240 [ 73.280442][ T1351] __futex_wait+0x15b/0x3d0 [ 73.280467][ T1351] ? __cfi___futex_wait+0x10/0x10 [ 73.280491][ T1351] ? __cfi_futex_wake_mark+0x10/0x10 [ 73.280515][ T1351] ? __kasan_check_read+0x15/0x20 [ 73.280542][ T1351] ? futex_wake+0x627/0x950 [ 73.280563][ T1351] futex_wait+0x128/0x7c0 [ 73.280586][ T1351] ? __cfi_futex_wait+0x10/0x10 [ 73.280613][ T1351] do_futex+0x32a/0x510 [ 73.280647][ T1351] ? __cfi_do_futex+0x10/0x10 [ 73.280679][ T1351] ? __kasan_slab_free+0x6a/0x80 [ 73.280710][ T1351] ? kmem_cache_free+0x1bd/0x4f0 [ 73.280738][ T1351] __se_sys_futex+0x13c/0x320 [ 73.280770][ T1351] ? putname+0x113/0x150 [ 73.280798][ T1351] ? __x64_sys_futex+0x110/0x110 [ 73.280833][ T1351] __x64_sys_futex+0xe9/0x110 [ 73.280874][ T1351] x64_sys_call+0x227f/0x2ee0 [ 73.280897][ T1351] do_syscall_64+0x57/0xf0 [ 73.280932][ T1351] ? clear_bhb_loop+0x50/0xa0 [ 73.280961][ T1351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.280987][ T1351] RIP: 0033:0x7fd06e59e159 [ 73.281008][ T1351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.281030][ T1351] RSP: 002b:00007fd06f3b80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.281055][ T1351] RAX: ffffffffffffffda RBX: 00007fd06e825fa8 RCX: 00007fd06e59e159 [ 73.281074][ T1351] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd06e825fa8 [ 73.281090][ T1351] RBP: 00007fd06e825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 73.281106][ T1351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.281122][ T1351] R13: 00007fd06e826038 R14: 00007ffd93d50cd0 R15: 00007ffd93d50db8 [ 73.281144][ T1351] [ 73.397719][ T1321] tipc: Node number set to 1 [ 73.899744][ T314] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 73.919106][ T314] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.942548][ T474] udevd[474]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory