last executing test programs: 5m44.457777044s ago: executing program 0 (id=15): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m43.477305452s ago: executing program 0 (id=19): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x74, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m43.331175638s ago: executing program 0 (id=22): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000c0881fb33e2175b0067024ce163dab311df7d04b4ea0bcedb88fe73292488466e427856e93bae5e7bd787cfdf3643c292c85cc7381111e8e63b896afd591bc0869e3bbf", @ANYRES16=r1, @ANYBLOB="010000000000000000001b0000000600210061000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0e000000000000de04000600000061f8076744863dd3daaa0815bf891f92949a66000302cd8cab928faa58d83846f2afe899b430ccc05a2b1b13ca8298cb9d56e5ecc457d43080f3b57e9513fa2d7e24", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@random={0xd4, 0x6, "090103030000"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './bus\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f00000008c0)="ac", 0x1}], 0x1) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m42.66137307s ago: executing program 0 (id=23): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m42.546561886s ago: executing program 0 (id=24): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x8000000) 5m42.45951364s ago: executing program 0 (id=25): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m27.437792671s ago: executing program 32 (id=25): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m26.486769086s ago: executing program 2 (id=98): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m26.278790116s ago: executing program 2 (id=100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m25.322948962s ago: executing program 2 (id=106): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m24.341328869s ago: executing program 2 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x1ff, 0x81, 0xfffffff6}}, 0x50) statfs(&(0x7f0000002080)='./file0/file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xd0cd1, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r2}, 0x10) 5m23.47883325s ago: executing program 2 (id=120): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x74, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m23.325383958s ago: executing program 2 (id=122): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m23.248801182s ago: executing program 33 (id=122): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m13.013281602s ago: executing program 3 (id=199): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x2, 0x1, 0x1, 'i<'}, @local=@item_012={0x2, 0x2, 0x2, '\x00 '}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x4, "a6df31d2"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 5m11.340305603s ago: executing program 3 (id=213): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_io_timeout/interval\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)={0x2, 'batadv_slave_0\x00', {0x1d3a}, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') copy_file_range(r0, &(0x7f0000000140)=0x2, r0, &(0x7f0000000180)=0xfffffffffffffff9, 0x8, 0x0) pread64(r2, &(0x7f0000000540)=""/102385, 0x18ff1, 0x41e) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xd) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f00000001c0)={0xfb7f, 0xc1, 0x0, 0x0}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0x1c) 5m11.251736607s ago: executing program 3 (id=214): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x88, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m11.158739671s ago: executing program 3 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x1810d9, 0x0) (async, rerun: 64) chroot(&(0x7f0000000100)='./file0\x00') (async, rerun: 64) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x3a39081, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101000, 0x12c) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000001f80)=[@cpuid={0x64, 0x18, {0xc, 0xe2c}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x314}}, @nested_load_code={0x12e, 0x5d, {0x3, "b9040400000f324a0fc719653e640fc7a97e01c62bc42280f52e8f8958909c0f0c000000c744240051000000c744240200000000ff2c240f07d9eb0f79d42666440fde580a"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x3d, 0x8000000006}}, @rdmsr={0x66, 0x18, {0x82b}}], 0xed}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000480)="f30f0966b84f0000000f23c00f21f8663502000c000f23f80f32660f6cea0f47bf2425f20f2d09baf80c66b8649f028766efbafc0c66ed9a4507f800650f181f0f35", 0x42}], 0x1, 0x0, &(0x7f0000000040)=[@efer={0x2, 0x4000}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20240, 0x0) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000029c0), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002a00)={'wpan0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x55}]}, 0x24}}, 0xc000) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_vif\x00') pread64$ublk_ch(r10, &(0x7f0000000540), 0x101a, 0x4) (async) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000007, 0x13, r11, 0xbcaf8000) (async, rerun: 64) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (rerun: 64) 5m11.031985038s ago: executing program 3 (id=216): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m10.885346935s ago: executing program 3 (id=217): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m10.788138319s ago: executing program 34 (id=217): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 38.255222281s ago: executing program 4 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x4801) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000080005"], 0x40}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x20, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="110000001900010026bd7000000000001d"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x30) 38.125192187s ago: executing program 4 (id=1849): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 37.155611003s ago: executing program 4 (id=1854): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 36.208589868s ago: executing program 4 (id=1861): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x74, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 36.081044314s ago: executing program 4 (id=1862): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x1f000000) 35.988021348s ago: executing program 4 (id=1864): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x4c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20.794562877s ago: executing program 35 (id=1864): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x4c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.108260819s ago: executing program 5 (id=2018): syz_usb_connect$uac2(0x5, 0x80, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb0825f2010305f9ff090402000001022000090400010101"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 9.107695559s ago: executing program 6 (id=2019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x8000000000000000, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.496579706s ago: executing program 1 (id=2020): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 7.495076186s ago: executing program 5 (id=2021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x1000000}) 7.493558306s ago: executing program 6 (id=2022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) 5.779944797s ago: executing program 1 (id=2023): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) socket(0x1e, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 5.779173367s ago: executing program 5 (id=2024): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 5.778481017s ago: executing program 6 (id=2025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @flat=@binder={0x73622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x400001, 0x0, 0x0, 0x1, 0x12}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) 5.71343304s ago: executing program 1 (id=2026): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.943118893s ago: executing program 1 (id=2027): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r0, &(0x7f0000000140)='n', 0x1) pwrite64(r0, &(0x7f0000000180)='Yxz', 0x3, 0x4) 3.936302304s ago: executing program 5 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.936003324s ago: executing program 6 (id=2029): syz_usb_connect$uac2(0x5, 0x80, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb0825f2010305f9ff090402000001022000090400010101"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 2.027175224s ago: executing program 1 (id=2030): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.026863324s ago: executing program 5 (id=2031): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) open(0x0, 0x20000, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) 2.024504914s ago: executing program 6 (id=2032): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 2.02321ms ago: executing program 1 (id=2033): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) socket(0x1e, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 572.26µs ago: executing program 5 (id=2034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff01000000000000000000000000000164"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=2035): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xc, 0x8012, r0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) kernel console output (not intermixed with test programs): iled with error -71 [ 176.017786][ T920] usb 7-1: USB disconnect, device number 20 [ 176.210610][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 176.217460][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 176.236846][ T10] usb 6-1: USB disconnect, device number 19 [ 177.966351][ T394] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 178.167222][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.186113][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.195916][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 178.226132][ T394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.236509][ T394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.245448][ T394] usb 6-1: config 0 descriptor?? [ 178.265804][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.274557][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.855880][ T394] usbhid 6-1:0.0: can't add hid device: -71 [ 178.866247][ T394] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 178.875962][ T394] usb 6-1: USB disconnect, device number 20 [ 180.091301][ T3536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.118029][ T3536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.186142][ T394] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 180.357586][ T394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.376175][ T394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.401936][ T394] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.417245][ T394] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.426589][ T394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.440157][ T394] usb 7-1: config 0 descriptor?? [ 181.049680][ T394] usbhid 7-1:0.0: can't add hid device: -71 [ 181.058446][ T394] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 181.077781][ T394] usb 7-1: USB disconnect, device number 21 [ 182.176152][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 182.340628][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.362711][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.382633][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 182.405832][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.423840][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.447038][ T10] usb 6-1: config 0 descriptor?? [ 183.073211][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 183.088361][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 183.111743][ T10] usb 6-1: USB disconnect, device number 21 [ 183.766134][ T31] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 183.947256][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.966095][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.985836][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.015813][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.033728][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.058987][ T31] usb 7-1: config 0 descriptor?? [ 184.672427][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 184.678571][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 184.697274][ T31] usb 7-1: USB disconnect, device number 22 [ 185.449145][ T920] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 185.617251][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.636453][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.656171][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 185.679082][ T920] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.695862][ T920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.713518][ T920] usb 7-1: config 0 descriptor?? [ 186.329438][ T920] usbhid 7-1:0.0: can't add hid device: -71 [ 186.339148][ T920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 186.357835][ T920] usb 7-1: USB disconnect, device number 23 [ 186.756135][ T1141] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 186.918374][ T1141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.946139][ T1141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.956015][ T1141] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.988112][ T1141] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.011559][ T1141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.036895][ T1141] usb 6-1: config 0 descriptor?? [ 187.669233][ T1141] usbhid 6-1:0.0: can't add hid device: -71 [ 187.675268][ T1141] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 187.688684][ T1141] usb 6-1: USB disconnect, device number 22 [ 188.446142][ T920] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 188.627301][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.646129][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.655930][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 188.686142][ T920] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.695260][ T920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.717167][ T920] usb 6-1: config 0 descriptor?? [ 189.332988][ T920] usbhid 6-1:0.0: can't add hid device: -71 [ 189.343439][ T920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 189.384081][ T920] usb 6-1: USB disconnect, device number 23 [ 190.146143][ T394] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 190.327369][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.346169][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.356473][ T394] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.369608][ T394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.378833][ T394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.389592][ T394] usb 6-1: config 0 descriptor?? [ 191.007286][ T394] usbhid 6-1:0.0: can't add hid device: -71 [ 191.017536][ T394] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 191.037021][ T394] usb 6-1: USB disconnect, device number 24 [ 191.500452][ T3750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.516775][ T3750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.876169][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 193.926712][ T920] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 194.046921][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.066110][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.084949][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.098115][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.107891][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.110323][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.131753][ T46] usb 5-1: config 0 descriptor?? [ 194.138684][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.150366][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 194.161347][ T920] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.170503][ T920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.191044][ T920] usb 6-1: config 0 descriptor?? [ 194.740500][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 194.756332][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 194.770066][ T46] usb 5-1: USB disconnect, device number 18 [ 194.818427][ T920] usbhid 6-1:0.0: can't add hid device: -71 [ 194.824446][ T920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 194.846897][ T920] usb 6-1: USB disconnect, device number 25 [ 196.796115][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 196.957253][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.979273][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.000606][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.027001][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.045912][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.063632][ T9] usb 6-1: config 0 descriptor?? [ 197.236773][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 197.400290][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.419473][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.430618][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 197.442428][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.452518][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.462293][ T10] usb 7-1: config 0 descriptor?? [ 197.678552][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 197.694702][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 197.707007][ T9] usb 6-1: USB disconnect, device number 26 [ 198.076825][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 198.082860][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 198.107840][ T10] usb 7-1: USB disconnect, device number 24 [ 199.852032][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 200.017332][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.032873][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.052661][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.077898][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.094963][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.115323][ T10] usb 7-1: config 0 descriptor?? [ 200.720543][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 200.733882][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 200.740282][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 200.756399][ T10] usb 7-1: USB disconnect, device number 25 [ 200.887354][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.904935][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.925080][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 200.948425][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.966441][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.984242][ T9] usb 6-1: config 0 descriptor?? [ 201.600186][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 201.618043][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 201.628324][ T9] usb 6-1: USB disconnect, device number 27 [ 202.936137][ T920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.087318][ T920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.106101][ T920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.136329][ T920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.161390][ T920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.180696][ T920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.200254][ T920] usb 5-1: config 0 descriptor?? [ 203.813982][ T920] usbhid 5-1:0.0: can't add hid device: -71 [ 203.822718][ T920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 203.847720][ T920] usb 5-1: USB disconnect, device number 19 [ 203.966170][ T31] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 204.147265][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.167153][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.186876][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 204.208751][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.218150][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.227449][ T31] usb 7-1: config 0 descriptor?? [ 204.845396][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 204.851667][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 204.868394][ T31] usb 7-1: USB disconnect, device number 26 [ 206.152540][ T920] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 206.317313][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.338977][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.358997][ T920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.385742][ T920] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.405046][ T920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.423174][ T920] usb 6-1: config 0 descriptor?? [ 207.037710][ T920] usbhid 6-1:0.0: can't add hid device: -71 [ 207.049249][ T920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 207.078930][ T920] usb 6-1: USB disconnect, device number 28 [ 207.506115][ T394] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.680417][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.704287][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.715014][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 207.726445][ T394] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.735526][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.745222][ T394] usb 5-1: config 0 descriptor?? [ 208.369485][ T394] usbhid 5-1:0.0: can't add hid device: -71 [ 208.375937][ T394] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 208.397875][ T394] usb 5-1: USB disconnect, device number 20 [ 208.738741][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.747943][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.126109][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 210.287224][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.307194][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.326110][ T31] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 210.327323][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 210.383173][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.392347][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.406358][ T9] usb 5-1: config 0 descriptor?? [ 210.493604][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.518043][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.529422][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.543024][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.566663][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.588195][ T31] usb 6-1: config 0 descriptor?? [ 211.021451][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 211.030502][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 211.042280][ T9] usb 5-1: USB disconnect, device number 21 [ 211.197770][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 211.214429][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 211.228343][ T31] usb 6-1: USB disconnect, device number 29 [ 212.581512][ T4169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.605880][ T4169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.966112][ T314] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 213.127370][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.155455][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.169591][ T314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.182590][ T314] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.195859][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.208583][ T314] usb 6-1: config 0 descriptor?? [ 213.827685][ T314] usbhid 6-1:0.0: can't add hid device: -71 [ 213.840930][ T314] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 213.862683][ T314] usb 6-1: USB disconnect, device number 30 [ 214.435895][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.474569][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.046669][ T4237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.077109][ T4237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.428054][ T314] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 216.597278][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.615008][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.636347][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 216.656127][ T314] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.672942][ T314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.688990][ T314] usb 7-1: config 0 descriptor?? [ 216.941063][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.959590][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.302951][ T314] usbhid 7-1:0.0: can't add hid device: -71 [ 217.309046][ T314] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 217.318614][ T314] usb 7-1: USB disconnect, device number 27 [ 218.727079][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 218.892123][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.903113][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.912920][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.925788][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.934916][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.948897][ T31] usb 6-1: config 0 descriptor?? [ 218.976118][ T920] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 219.137253][ T920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.154901][ T920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.174856][ T920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 219.196929][ T920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.215112][ T920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.233209][ T920] usb 5-1: config 0 descriptor?? [ 219.559451][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 219.565494][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 219.590077][ T31] usb 6-1: USB disconnect, device number 31 [ 219.648416][ T920] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 219.668064][ T920] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 219.859741][ T920] usb 5-1: USB disconnect, device number 22 [ 221.188192][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.216332][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.026111][ T394] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 222.207422][ T394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.223871][ T394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.244941][ T394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 222.266962][ T394] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.286404][ T394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.300318][ T394] usb 7-1: config 0 descriptor?? [ 222.717700][ T394] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 222.743527][ T394] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 222.928705][ T394] usb 7-1: USB disconnect, device number 28 [ 223.726150][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 223.877127][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.888209][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.908125][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.941341][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.960072][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.978391][ T10] usb 7-1: config 0 descriptor?? [ 224.591375][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 224.597501][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 224.618785][ T10] usb 7-1: USB disconnect, device number 29 [ 225.406107][ T394] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 225.577255][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.595906][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.616083][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 225.636118][ T394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.655371][ T394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.676548][ T394] usb 6-1: config 0 descriptor?? [ 226.089921][ T394] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 226.115568][ T394] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 226.294006][ T394] usb 6-1: USB disconnect, device number 32 [ 226.626099][ T920] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 226.787249][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.806994][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.829178][ T920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.858820][ T920] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.877606][ T920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.895922][ T920] usb 7-1: config 0 descriptor?? [ 227.509853][ T920] usbhid 7-1:0.0: can't add hid device: -71 [ 227.526723][ T920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 227.537676][ T920] usb 7-1: USB disconnect, device number 30 [ 228.596105][ T394] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 228.757228][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.773696][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.796502][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 228.807539][ T394] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.816680][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.839676][ T394] usb 5-1: config 0 descriptor?? [ 229.258298][ T394] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 229.276541][ T394] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 229.476314][ T314] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 229.526848][ T31] usb 5-1: USB disconnect, device number 23 [ 229.637240][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.654298][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.676138][ T314] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.689022][ T314] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.698153][ T314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.714575][ T314] usb 7-1: config 0 descriptor?? [ 230.323652][ T314] usbhid 7-1:0.0: can't add hid device: -71 [ 230.343183][ T314] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 230.362840][ T314] usb 7-1: USB disconnect, device number 31 [ 231.526119][ T314] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 231.687170][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.706176][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.722298][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 231.743647][ T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.761692][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.776974][ T314] usb 5-1: config 0 descriptor?? [ 232.199253][ T314] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 232.234627][ T314] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 232.466987][ T46] usb 5-1: USB disconnect, device number 24 [ 233.066106][ T314] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 233.237273][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.262695][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.282805][ T314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.309482][ T314] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.326311][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.346642][ T314] usb 6-1: config 0 descriptor?? [ 233.957988][ T314] usbhid 6-1:0.0: can't add hid device: -71 [ 233.978717][ T314] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 233.993392][ T314] usb 6-1: USB disconnect, device number 33 [ 234.846121][ T314] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 235.027353][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.038485][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.048722][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 235.059945][ T314] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.084511][ T314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.104884][ T314] usb 7-1: config 0 descriptor?? [ 235.113000][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.136681][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.524923][ T314] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 235.546340][ T314] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 235.786748][ T31] usb 7-1: USB disconnect, device number 32 [ 235.833752][ T4719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.842817][ T4719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.603890][ T4775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.627843][ T4775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.506623][ T314] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 239.677301][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.702633][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.731627][ T314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.766773][ T314] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.785920][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.805332][ T314] usb 6-1: config 0 descriptor?? [ 240.426800][ T314] usbhid 6-1:0.0: can't add hid device: -71 [ 240.432825][ T314] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 240.460142][ T314] usb 6-1: USB disconnect, device number 34 [ 242.252532][ T36] audit: type=1400 audit(2000000158.910:217): avc: denied { mount } for pid=4883 comm="syz.1.1256" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 242.292755][ T4884] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.305320][ T36] audit: type=1400 audit(2000000158.930:218): avc: denied { unmount } for pid=4883 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 244.128807][ T4936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.157055][ T4936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.676094][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 245.847251][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.866928][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.877219][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 245.888371][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.897654][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.915977][ T31] usb 5-1: config 0 descriptor?? [ 246.324799][ T31] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 246.344600][ T31] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 246.534927][ T31] usb 5-1: USB disconnect, device number 25 [ 247.638453][ T36] audit: type=1400 audit(2000000164.300:219): avc: denied { block_suspend } for pid=5036 comm="syz.1.1296" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.306114][ T394] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 248.467256][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.488379][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.509654][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 248.532531][ T394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.550667][ T394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.568641][ T394] usb 6-1: config 0 descriptor?? [ 248.984821][ T394] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 249.006265][ T394] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 249.185252][ T920] usb 6-1: USB disconnect, device number 35 [ 251.239755][ T920] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 251.407240][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.438436][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.456105][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 251.477628][ T920] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.496124][ T920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.505246][ T920] usb 7-1: config 0 descriptor?? [ 251.914137][ T920] usbhid 7-1:0.0: can't add hid device: -71 [ 251.923310][ T920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 251.943899][ T920] usb 7-1: USB disconnect, device number 33 [ 252.449850][ T5131] FAULT_INJECTION: forcing a failure. [ 252.449850][ T5131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.479108][ T5131] CPU: 1 UID: 0 PID: 5131 Comm: syz.4.1323 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 252.479142][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.479157][ T5131] Call Trace: [ 252.479164][ T5131] [ 252.479172][ T5131] __dump_stack+0x21/0x30 [ 252.479295][ T5131] dump_stack_lvl+0x140/0x1c0 [ 252.479327][ T5131] ? __cfi_dump_stack_lvl+0x10/0x10 [ 252.479358][ T5131] ? check_stack_object+0x138/0x150 [ 252.479502][ T5131] dump_stack+0x19/0x20 [ 252.479531][ T5131] should_fail_ex+0x3c2/0x510 [ 252.479633][ T5131] should_fail+0xf/0x20 [ 252.479657][ T5131] should_fail_usercopy+0x1e/0x30 [ 252.479706][ T5131] _copy_to_user+0x24/0xa0 [ 252.479782][ T5131] simple_read_from_buffer+0xed/0x160 [ 252.479864][ T5131] proc_fail_nth_read+0x1aa/0x220 [ 252.479957][ T5131] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 252.479990][ T5131] ? bpf_lsm_file_permission+0xd/0x20 [ 252.480066][ T5131] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 252.480117][ T5131] vfs_read+0x28b/0xc70 [ 252.480144][ T5131] ? __cfi_vfs_read+0x10/0x10 [ 252.480165][ T5131] ? __kasan_check_write+0x18/0x20 [ 252.480220][ T5131] ? mutex_lock+0x97/0x1d0 [ 252.480303][ T5131] ? __cfi_mutex_lock+0x10/0x10 [ 252.480330][ T5131] ksys_read+0x145/0x260 [ 252.480353][ T5131] ? __cfi_ksys_read+0x10/0x10 [ 252.480373][ T5131] ? __kasan_check_write+0x18/0x20 [ 252.480393][ T5131] ? fput+0x1a4/0x230 [ 252.480450][ T5131] ? __kasan_check_read+0x15/0x20 [ 252.480494][ T5131] __x64_sys_read+0x7f/0x90 [ 252.480519][ T5131] x64_sys_call+0x2638/0x2ee0 [ 252.480539][ T5131] do_syscall_64+0x57/0xf0 [ 252.480585][ T5131] ? clear_bhb_loop+0x50/0xa0 [ 252.480672][ T5131] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.480699][ T5131] RIP: 0033:0x7f8a1255e98e [ 252.480718][ T5131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.480737][ T5131] RSP: 002b:00007f8a1345cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.480760][ T5131] RAX: ffffffffffffffda RBX: 00007f8a1345d6c0 RCX: 00007f8a1255e98e [ 252.480776][ T5131] RDX: 000000000000000f RSI: 00007f8a1345d0a0 RDI: 0000000000000006 [ 252.480789][ T5131] RBP: 00007f8a1345d090 R08: 0000000000000000 R09: 0000000000000000 [ 252.480802][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.480814][ T5131] R13: 00007f8a12826038 R14: 00007f8a12825fa0 R15: 00007ffc14a1b0d8 [ 252.480833][ T5131] [ 254.296176][ T394] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 254.457218][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.468367][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.486114][ T394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 254.506154][ T394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.523054][ T394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.539783][ T394] usb 6-1: config 0 descriptor?? [ 254.954042][ T394] usbhid 6-1:0.0: can't add hid device: -71 [ 254.960371][ T394] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 254.970101][ T394] usb 6-1: USB disconnect, device number 36 [ 256.339224][ T36] audit: type=1400 audit(2000000173.000:220): avc: denied { search } for pid=5208 comm="syz.6.1344" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.399380][ T36] audit: type=1400 audit(2000000173.000:221): avc: denied { write } for pid=5208 comm="syz.6.1344" name="buffer_size_kb" dev="tracefs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 256.455964][ T36] audit: type=1400 audit(2000000173.000:222): avc: denied { open } for pid=5208 comm="syz.6.1344" path="/265/tracefs_dir/buffer_size_kb" dev="tracefs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 257.253959][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.308470][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.856147][ T920] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 260.017194][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.041788][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.057170][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 260.081471][ T920] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.098274][ T920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.114908][ T920] usb 7-1: config 0 descriptor?? [ 260.530743][ T920] usbhid 7-1:0.0: can't add hid device: -71 [ 260.547248][ T920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 260.569181][ T920] usb 7-1: USB disconnect, device number 34 [ 262.406139][ T314] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 262.567221][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.584384][ T314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.605553][ T314] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.632049][ T314] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.651182][ T314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.668824][ T314] usb 7-1: config 0 descriptor?? [ 262.951934][ T5326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.960638][ T5326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.283191][ T314] usbhid 7-1:0.0: can't add hid device: -71 [ 263.296342][ T314] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 263.316670][ T314] usb 7-1: USB disconnect, device number 35 [ 264.946117][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 265.117308][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.129650][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.149798][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 265.179872][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.199045][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.215822][ T10] usb 5-1: config 0 descriptor?? [ 265.327699][ T36] audit: type=1400 audit(2000000181.990:223): avc: denied { write } for pid=5368 comm="syz.5.1389" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 265.358890][ T5369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.376173][ T36] audit: type=1400 audit(2000000182.020:224): avc: denied { set_context_mgr } for pid=5368 comm="syz.5.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 265.410986][ T36] audit: type=1400 audit(2000000182.020:225): avc: denied { map } for pid=5368 comm="syz.5.1389" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 265.435203][ T36] audit: type=1400 audit(2000000182.030:226): avc: denied { map } for pid=5368 comm="syz.5.1389" path="socket:[154450]" dev="sockfs" ino=154450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 265.458960][ T36] audit: type=1400 audit(2000000182.030:227): avc: denied { read } for pid=5368 comm="syz.5.1389" path="socket:[154450]" dev="sockfs" ino=154450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 265.509495][ T5371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.518657][ T5371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.606139][ T314] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 265.637139][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 265.646160][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 265.656694][ T10] usb 5-1: USB disconnect, device number 26 [ 265.736553][ T314] usb 6-1: device descriptor read/64, error -71 [ 265.976119][ T314] usb 6-1: device descriptor read/64, error -71 [ 266.216122][ T314] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 266.361833][ T314] usb 6-1: device descriptor read/64, error -71 [ 266.616084][ T314] usb 6-1: device descriptor read/64, error -71 [ 266.726227][ T314] usb usb6-port1: attempt power cycle [ 267.096138][ T314] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 267.127140][ T314] usb 6-1: device descriptor read/8, error -71 [ 267.257166][ T314] usb 6-1: device descriptor read/8, error -71 [ 267.513143][ T314] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 267.557190][ T314] usb 6-1: device descriptor read/8, error -71 [ 267.687158][ T314] usb 6-1: device descriptor read/8, error -71 [ 267.806789][ T314] usb usb6-port1: unable to enumerate USB device [ 268.376213][ T314] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 268.527173][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.543809][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.563426][ T314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.576490][ T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.585614][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.598960][ T314] usb 5-1: config 0 descriptor?? [ 269.213192][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 269.226255][ T314] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 269.238084][ T314] usb 5-1: USB disconnect, device number 27 [ 270.769618][ T5446] netlink: 'syz.4.1411': attribute type 10 has an invalid length. [ 270.867634][ T5453] FAULT_INJECTION: forcing a failure. [ 270.867634][ T5453] name failslab, interval 1, probability 0, space 0, times 0 [ 270.901804][ T5453] CPU: 1 UID: 0 PID: 5453 Comm: syz.4.1413 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 270.901849][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.901866][ T5453] Call Trace: [ 270.901874][ T5453] [ 270.901885][ T5453] __dump_stack+0x21/0x30 [ 270.901925][ T5453] dump_stack_lvl+0x140/0x1c0 [ 270.901957][ T5453] ? __cfi_dump_stack_lvl+0x10/0x10 [ 270.901991][ T5453] dump_stack+0x19/0x20 [ 270.902021][ T5453] should_fail_ex+0x3c2/0x510 [ 270.902048][ T5453] should_failslab+0xac/0x100 [ 270.902076][ T5453] kmem_cache_alloc_noprof+0x42/0x410 [ 270.902165][ T5453] ? __kernfs_new_node+0xf1/0x740 [ 270.902220][ T5453] __kernfs_new_node+0xf1/0x740 [ 270.902257][ T5453] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 270.902289][ T5453] ? kernfs_new_node+0x280/0x280 [ 270.902319][ T5453] ? __kasan_check_write+0x18/0x20 [ 270.902343][ T5453] ? down_write+0xee/0x2b0 [ 270.902371][ T5453] ? rpm_resume+0xb92/0x1670 [ 270.902476][ T5453] kernfs_new_node+0x154/0x280 [ 270.902505][ T5453] kernfs_create_link+0xa8/0x200 [ 270.902526][ T5453] sysfs_do_create_link_sd+0x8a/0x120 [ 270.902574][ T5453] sysfs_create_link+0x6c/0x90 [ 270.902598][ T5453] driver_sysfs_add+0x91/0x240 [ 270.902665][ T5453] really_probe+0x178/0x8b0 [ 270.902707][ T5453] __driver_probe_device+0x193/0x280 [ 270.902730][ T5453] driver_probe_device+0x54/0x3f0 [ 270.902752][ T5453] __driver_attach+0x422/0x5e0 [ 270.902773][ T5453] bus_for_each_dev+0x249/0x2d0 [ 270.902799][ T5453] ? __cfi___driver_attach+0x10/0x10 [ 270.902819][ T5453] ? __cfi_bus_for_each_dev+0x10/0x10 [ 270.902846][ T5453] ? __kasan_kmalloc+0x96/0xb0 [ 270.902895][ T5453] ? _raw_spin_unlock+0x45/0x60 [ 270.902940][ T5453] ? klist_add_tail+0x1dd/0x220 [ 270.903012][ T5453] driver_attach+0x46/0x50 [ 270.903032][ T5453] bus_add_driver+0x393/0x730 [ 270.903062][ T5453] driver_register+0x2b7/0x3c0 [ 270.903086][ T5453] usb_gadget_register_driver_owner+0xfc/0x270 [ 270.903182][ T5453] raw_ioctl+0x144c/0x37a0 [ 270.903252][ T5453] ? __cfi_raw_ioctl+0x10/0x10 [ 270.903273][ T5453] ? selinux_file_ioctl+0x732/0x1480 [ 270.903339][ T5453] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 270.903368][ T5453] ? __fget_files+0x2bc/0x330 [ 270.903419][ T5453] ? bpf_lsm_file_ioctl+0xd/0x20 [ 270.903448][ T5453] ? security_file_ioctl+0x3e/0x110 [ 270.903530][ T5453] ? __cfi_raw_ioctl+0x10/0x10 [ 270.903549][ T5453] __se_sys_ioctl+0x126/0x1b0 [ 270.903621][ T5453] __x64_sys_ioctl+0x7f/0xa0 [ 270.903648][ T5453] x64_sys_call+0x1878/0x2ee0 [ 270.903667][ T5453] do_syscall_64+0x57/0xf0 [ 270.903686][ T5453] ? clear_bhb_loop+0x50/0xa0 [ 270.903716][ T5453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 270.903742][ T5453] RIP: 0033:0x7f8a1259ddeb [ 270.903827][ T5453] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 270.903853][ T5453] RSP: 002b:00007f8a1345af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.903879][ T5453] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f8a1259ddeb [ 270.903895][ T5453] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 270.903916][ T5453] RBP: 00007f8a1345bfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 270.903936][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.903951][ T5453] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000000 [ 270.903971][ T5453] [ 271.310407][ T5453] raw-gadget.1 gadget.4: really_probe: driver_sysfs_add failed [ 271.318250][ T5453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.326840][ T5453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.394351][ T5459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.417334][ T5459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.978678][ T36] audit: type=1400 audit(2000000188.640:228): avc: denied { mount } for pid=5468 comm="syz.1.1418" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 273.629656][ T46] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 273.740928][ T5501] FAULT_INJECTION: forcing a failure. [ 273.740928][ T5501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.755383][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.1.1427 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 273.755418][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.755433][ T5501] Call Trace: [ 273.755447][ T5501] [ 273.755456][ T5501] __dump_stack+0x21/0x30 [ 273.755492][ T5501] dump_stack_lvl+0x140/0x1c0 [ 273.755522][ T5501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 273.755552][ T5501] ? check_stack_object+0x138/0x150 [ 273.755578][ T5501] dump_stack+0x19/0x20 [ 273.755608][ T5501] should_fail_ex+0x3c2/0x510 [ 273.755635][ T5501] should_fail+0xf/0x20 [ 273.755658][ T5501] should_fail_usercopy+0x1e/0x30 [ 273.755685][ T5501] _copy_to_user+0x24/0xa0 [ 273.755718][ T5501] simple_read_from_buffer+0xed/0x160 [ 273.755750][ T5501] proc_fail_nth_read+0x1aa/0x220 [ 273.755785][ T5501] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 273.755816][ T5501] ? bpf_lsm_file_permission+0xd/0x20 [ 273.755844][ T5501] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 273.755875][ T5501] vfs_read+0x28b/0xc70 [ 273.755896][ T5501] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 273.755923][ T5501] ? __cfi_vfs_read+0x10/0x10 [ 273.755944][ T5501] ? __kasan_check_write+0x18/0x20 [ 273.755965][ T5501] ? mutex_lock+0x97/0x1d0 [ 273.755989][ T5501] ? __cfi_mutex_lock+0x10/0x10 [ 273.756016][ T5501] ksys_read+0x145/0x260 [ 273.756044][ T5501] ? __cfi_ksys_read+0x10/0x10 [ 273.756064][ T5501] ? __kasan_check_write+0x18/0x20 [ 273.756085][ T5501] ? fput+0x1a4/0x230 [ 273.756110][ T5501] ? __kasan_check_read+0x15/0x20 [ 273.756131][ T5501] __x64_sys_read+0x7f/0x90 [ 273.756153][ T5501] x64_sys_call+0x2638/0x2ee0 [ 273.756173][ T5501] do_syscall_64+0x57/0xf0 [ 273.756192][ T5501] ? clear_bhb_loop+0x50/0xa0 [ 273.756219][ T5501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 273.756243][ T5501] RIP: 0033:0x7f74a3d5e98e [ 273.756262][ T5501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.756280][ T5501] RSP: 002b:00007f74a4b9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.756303][ T5501] RAX: ffffffffffffffda RBX: 00007f74a4b9f6c0 RCX: 00007f74a3d5e98e [ 273.756318][ T5501] RDX: 000000000000000f RSI: 00007f74a4b9f0a0 RDI: 0000000000000004 [ 273.756333][ T5501] RBP: 00007f74a4b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 273.756347][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.756360][ T5501] R13: 00007f74a4026038 R14: 00007f74a4025fa0 R15: 00007fffe818d6e8 [ 273.756379][ T5501] [ 274.059931][ T36] audit: type=1400 audit(2000000190.720:229): avc: denied { getopt } for pid=5504 comm="syz.1.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 274.080592][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.091543][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.101322][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.114173][ T46] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.123258][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.132095][ T46] usb 6-1: config 0 descriptor?? [ 274.747908][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 274.757258][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 274.779519][ T46] usb 6-1: USB disconnect, device number 41 [ 276.200768][ T5546] FAULT_INJECTION: forcing a failure. [ 276.200768][ T5546] name failslab, interval 1, probability 0, space 0, times 0 [ 276.224318][ T5546] CPU: 1 UID: 0 PID: 5546 Comm: syz.1.1439 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 276.224351][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.224365][ T5546] Call Trace: [ 276.224373][ T5546] [ 276.224381][ T5546] __dump_stack+0x21/0x30 [ 276.224415][ T5546] dump_stack_lvl+0x140/0x1c0 [ 276.224446][ T5546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 276.224476][ T5546] ? avc_has_perm+0x155/0x240 [ 276.224577][ T5546] ? __cfi_avc_has_perm+0x10/0x10 [ 276.224605][ T5546] dump_stack+0x19/0x20 [ 276.224632][ T5546] should_fail_ex+0x3c2/0x510 [ 276.224656][ T5546] should_failslab+0xac/0x100 [ 276.224683][ T5546] __kmalloc_cache_noprof+0x41/0x470 [ 276.224740][ T5546] ? vhost_task_create+0x12c/0x3f0 [ 276.224828][ T5546] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 276.224869][ T5546] vhost_task_create+0x12c/0x3f0 [ 276.224891][ T5546] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 276.224918][ T5546] ? __cfi_vhost_task_create+0x10/0x10 [ 276.224941][ T5546] ? __cfi_vhost_task_fn+0x10/0x10 [ 276.224963][ T5546] ? __kasan_check_write+0x18/0x20 [ 276.224983][ T5546] ? mutex_lock+0x97/0x1d0 [ 276.225007][ T5546] ? __cfi_mutex_lock+0x10/0x10 [ 276.225030][ T5546] ? kernel_text_address+0xa9/0xe0 [ 276.225088][ T5546] kvm_mmu_post_init_vm+0x161/0x300 [ 276.225120][ T5546] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 276.225158][ T5546] ? _parse_integer_limit+0x195/0x1e0 [ 276.225184][ T5546] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 276.225212][ T5546] ? kstrtoull+0x13b/0x1e0 [ 276.225234][ T5546] ? kstrtouint+0x78/0xf0 [ 276.225256][ T5546] ? ioctl_has_perm+0x1bc/0x500 [ 276.225347][ T5546] ? __asan_memcpy+0x5a/0x80 [ 276.225372][ T5546] ? ioctl_has_perm+0x408/0x500 [ 276.225399][ T5546] ? has_cap_mac_admin+0xd0/0xd0 [ 276.225423][ T5546] ? __kasan_check_write+0x18/0x20 [ 276.225450][ T5546] ? mutex_lock_killable+0x97/0x1d0 [ 276.225482][ T5546] ? __cfi_mutex_lock_killable+0x10/0x10 [ 276.225514][ T5546] ? proc_fail_nth_write+0x184/0x220 [ 276.225553][ T5546] kvm_vcpu_ioctl+0xa43/0x1000 [ 276.225583][ T5546] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 276.225607][ T5546] ? __cfi_vfs_write+0x10/0x10 [ 276.225639][ T5546] ? __kasan_check_write+0x18/0x20 [ 276.225663][ T5546] ? mutex_unlock+0x90/0x240 [ 276.225694][ T5546] ? __cfi_mutex_unlock+0x10/0x10 [ 276.225725][ T5546] ? __fget_files+0x2bc/0x330 [ 276.225760][ T5546] ? bpf_lsm_file_ioctl+0xd/0x20 [ 276.225801][ T5546] ? security_file_ioctl+0x3e/0x110 [ 276.225826][ T5546] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 276.225866][ T5546] __se_sys_ioctl+0x126/0x1b0 [ 276.225902][ T5546] __x64_sys_ioctl+0x7f/0xa0 [ 276.225932][ T5546] x64_sys_call+0x1878/0x2ee0 [ 276.225959][ T5546] do_syscall_64+0x57/0xf0 [ 276.225982][ T5546] ? clear_bhb_loop+0x50/0xa0 [ 276.226015][ T5546] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 276.226043][ T5546] RIP: 0033:0x7f74a3d9e159 [ 276.226062][ T5546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.226081][ T5546] RSP: 002b:00007f74a4b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.226104][ T5546] RAX: ffffffffffffffda RBX: 00007f74a4025fa0 RCX: 00007f74a3d9e159 [ 276.226120][ T5546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 276.226134][ T5546] RBP: 00007f74a4b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.226147][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.226160][ T5546] R13: 00007f74a4026038 R14: 00007f74a4025fa0 R15: 00007fffe818d6e8 [ 276.226178][ T5546] [ 278.210037][ T36] audit: type=1400 audit(2000000194.870:230): avc: denied { write } for pid=5596 comm="syz.1.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.604674][ T5630] FAULT_INJECTION: forcing a failure. [ 279.604674][ T5630] name failslab, interval 1, probability 0, space 0, times 0 [ 279.631855][ T5630] CPU: 1 UID: 0 PID: 5630 Comm: syz.1.1461 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 279.631904][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.631923][ T5630] Call Trace: [ 279.631932][ T5630] [ 279.631944][ T5630] __dump_stack+0x21/0x30 [ 279.631993][ T5630] dump_stack_lvl+0x140/0x1c0 [ 279.632032][ T5630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 279.632076][ T5630] dump_stack+0x19/0x20 [ 279.632117][ T5630] should_fail_ex+0x3c2/0x510 [ 279.632155][ T5630] should_failslab+0xac/0x100 [ 279.632192][ T5630] __kmalloc_cache_noprof+0x41/0x470 [ 279.632228][ T5630] ? tty_alloc_file+0x5f/0x140 [ 279.632362][ T5630] tty_alloc_file+0x5f/0x140 [ 279.632392][ T5630] ptmx_open+0x59/0x2f0 [ 279.632507][ T5630] ? selinux_file_open+0x46c/0x630 [ 279.632538][ T5630] chrdev_open+0x4e8/0x610 [ 279.632575][ T5630] ? __cfi_chrdev_open+0x10/0x10 [ 279.632607][ T5630] ? bpf_lsm_file_open+0xd/0x20 [ 279.632648][ T5630] ? __cfi_chrdev_open+0x10/0x10 [ 279.632682][ T5630] do_dentry_open+0x97c/0x1510 [ 279.632726][ T5630] vfs_open+0x86/0x240 [ 279.632767][ T5630] ? __cfi_vfs_open+0x10/0x10 [ 279.632809][ T5630] ? may_open+0x352/0x430 [ 279.632846][ T5630] path_openat+0x2c49/0x35a0 [ 279.632890][ T5630] ? schedule+0xc5/0x240 [ 279.632922][ T5630] ? kasan_save_alloc_info+0x3a/0x50 [ 279.632950][ T5630] ? getname+0x1b/0x30 [ 279.632983][ T5630] ? x64_sys_call+0xe69/0x2ee0 [ 279.633008][ T5630] ? do_syscall_64+0x57/0xf0 [ 279.633038][ T5630] ? do_filp_open+0x440/0x440 [ 279.633079][ T5630] do_filp_open+0x1f2/0x440 [ 279.633122][ T5630] ? __cfi_do_filp_open+0x10/0x10 [ 279.633165][ T5630] ? alloc_fd+0x4c1/0x570 [ 279.633202][ T5630] do_sys_openat2+0x134/0x1d0 [ 279.633246][ T5630] ? do_sys_open+0x100/0x100 [ 279.633290][ T5630] __x64_sys_openat+0x13a/0x170 [ 279.633330][ T5630] x64_sys_call+0xe69/0x2ee0 [ 279.633359][ T5630] do_syscall_64+0x57/0xf0 [ 279.633383][ T5630] ? clear_bhb_loop+0x50/0xa0 [ 279.633421][ T5630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 279.633455][ T5630] RIP: 0033:0x7f74a3d9e159 [ 279.633480][ T5630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.633514][ T5630] RSP: 002b:00007f74a4b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.633546][ T5630] RAX: ffffffffffffffda RBX: 00007f74a4025fa0 RCX: 00007f74a3d9e159 [ 279.633569][ T5630] RDX: 0000000000082581 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 279.633593][ T5630] RBP: 00007f74a3e3503b R08: 0000000000000000 R09: 0000000000000000 [ 279.633613][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.633633][ T5630] R13: 00007f74a4026038 R14: 00007f74a4025fa0 R15: 00007fffe818d6e8 [ 279.633660][ T5630] [ 280.205544][ T36] audit: type=1400 audit(2000000196.860:231): avc: denied { read write } for pid=5633 comm="syz.1.1463" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 280.223010][ T5635] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 280.229483][ T36] audit: type=1400 audit(2000000196.860:232): avc: denied { open } for pid=5633 comm="syz.1.1463" path="/414/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 280.264121][ T36] audit: type=1400 audit(2000000196.870:233): avc: denied { bind } for pid=5633 comm="syz.1.1463" lport=126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.286076][ T36] audit: type=1400 audit(2000000196.870:234): avc: denied { name_bind } for pid=5633 comm="syz.1.1463" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 280.307140][ T36] audit: type=1400 audit(2000000196.870:235): avc: denied { node_bind } for pid=5633 comm="syz.1.1463" saddr=2001::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 280.329446][ T36] audit: type=1400 audit(2000000196.870:236): avc: denied { ioctl } for pid=5633 comm="syz.1.1463" path="/414/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 281.678488][ T5678] FAULT_INJECTION: forcing a failure. [ 281.678488][ T5678] name fail_futex, interval 1, probability 0, space 0, times 1 [ 281.716160][ T5678] CPU: 0 UID: 0 PID: 5678 Comm: syz.6.1475 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 281.716208][ T5678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.716227][ T5678] Call Trace: [ 281.716237][ T5678] [ 281.716248][ T5678] __dump_stack+0x21/0x30 [ 281.716297][ T5678] dump_stack_lvl+0x140/0x1c0 [ 281.716339][ T5678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 281.716379][ T5678] dump_stack+0x19/0x20 [ 281.716418][ T5678] should_fail_ex+0x3c2/0x510 [ 281.716458][ T5678] should_fail+0xf/0x20 [ 281.716489][ T5678] get_futex_key+0x178/0x940 [ 281.716620][ T5678] ? __cfi___futex_wait+0x10/0x10 [ 281.716716][ T5678] ? __cfi_get_futex_key+0x10/0x10 [ 281.716754][ T5678] ? __cfi_futex_wake_mark+0x10/0x10 [ 281.716779][ T5678] futex_wake+0x150/0x950 [ 281.716811][ T5678] ? futex_wait+0x2b8/0x7c0 [ 281.716842][ T5678] ? __cfi_futex_wake+0x10/0x10 [ 281.716874][ T5678] ? vfs_write+0xbcf/0xfd0 [ 281.716908][ T5678] do_futex+0x37d/0x510 [ 281.716948][ T5678] ? __cfi_do_futex+0x10/0x10 [ 281.716989][ T5678] __se_sys_futex+0x13c/0x320 [ 281.717028][ T5678] ? fput+0x1a4/0x230 [ 281.717063][ T5678] ? __x64_sys_futex+0x110/0x110 [ 281.717106][ T5678] __x64_sys_futex+0xe9/0x110 [ 281.717145][ T5678] x64_sys_call+0x227f/0x2ee0 [ 281.717168][ T5678] do_syscall_64+0x57/0xf0 [ 281.717192][ T5678] ? clear_bhb_loop+0x50/0xa0 [ 281.717225][ T5678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 281.717260][ T5678] RIP: 0033:0x7f376fd9e159 [ 281.717284][ T5678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.717308][ T5678] RSP: 002b:00007f3770c0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.717339][ T5678] RAX: ffffffffffffffda RBX: 00007f3770025fa8 RCX: 00007f376fd9e159 [ 281.717360][ T5678] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3770025fac [ 281.717383][ T5678] RBP: 00007f3770025fa0 R08: 4000000000000000 R09: 0000000000000000 [ 281.717401][ T5678] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 281.717419][ T5678] R13: 00007f3770026038 R14: 00007ffe8b540ab0 R15: 00007ffe8b540b98 [ 281.717445][ T5678] [ 281.953627][ T5678] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1475'. [ 281.963150][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1475'. [ 281.972555][ T36] audit: type=1400 audit(2000000198.630:237): avc: denied { write } for pid=5677 comm="syz.6.1475" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 282.289556][ T46] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 282.484976][ T46] usb 7-1: config 1 has an invalid interface number: 174 but max is 0 [ 282.507022][ T46] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 282.519942][ T46] usb 7-1: config 1 has no interface number 0 [ 282.526637][ T46] usb 7-1: config 1 interface 174 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 282.538013][ T46] usb 7-1: config 1 interface 174 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 282.549317][ T46] usb 7-1: config 1 interface 174 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 282.570863][ T46] usb 7-1: config 1 interface 174 has no altsetting 0 [ 282.571558][ T36] audit: type=1400 audit(2000000199.230:238): avc: denied { mount } for pid=5697 comm="syz.4.1480" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 282.604100][ T46] usb 7-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=92.9b [ 282.614422][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.622609][ T46] usb 7-1: Product: 뿍錔놟꾖혗⎭쳪탖ഃ걓٥ᖰ㡉䥎㈌序孯ᠿ [ 282.631900][ T46] usb 7-1: Manufacturer: 綊ꊨ㞽捯둫탶셒迶ﳙ駥詹ꋧ࿿屍䁁빽ʡᏋᣦ梔ﶛ⍅ྗ﷬묌羓䉞∉딦먞鎾稚竆歺池칅厵莑飫只鍅갂膌⢱堐橺茠扒┓׆ሌ郘ᩧ༲騩෫짴䱐姎⊕阗㴖頩ꣂ뜩Хፂዩ翜쯷텍ૂ궟嬢﬒틝뙥򑩹籱蜒¡弊ᐕ鍮噷⼣๏뱟ࡒ᪙寝뺽ꕌ㮡 [ 282.663178][ T46] usb 7-1: SerialNumber: О [ 283.146132][ T46] usb 7-1: USB disconnect, device number 36 [ 284.044010][ T36] audit: type=1400 audit(2000000200.700:239): avc: denied { mount } for pid=5732 comm="syz.5.1490" name="/" dev="configfs" ino=2454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 284.098344][ T36] audit: type=1400 audit(2000000200.710:240): avc: denied { search } for pid=5732 comm="syz.5.1490" name="/" dev="configfs" ino=2454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.156101][ T36] audit: type=1400 audit(2000000200.710:241): avc: denied { write } for pid=5732 comm="syz.5.1490" name="usb_gadget" dev="configfs" ino=2455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.216692][ T36] audit: type=1400 audit(2000000200.710:242): avc: denied { add_name } for pid=5732 comm="syz.5.1490" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.269765][ T36] audit: type=1400 audit(2000000200.710:243): avc: denied { create } for pid=5732 comm="syz.5.1490" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 284.291281][ T36] audit: type=1400 audit(2000000200.730:244): avc: denied { create } for pid=5732 comm="syz.5.1490" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 284.320871][ T36] audit: type=1400 audit(2000000200.730:245): avc: denied { setattr } for pid=5732 comm="syz.5.1490" name="h" dev="configfs" ino=165527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.343752][ T36] audit: type=1400 audit(2000000200.800:246): avc: denied { unmount } for pid=766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 285.955050][ T36] audit: type=1400 audit(2000000202.610:247): avc: denied { name_bind } for pid=5772 comm="syz.1.1501" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 286.157399][ T36] audit: type=1400 audit(2000000202.820:248): avc: denied { execstack } for pid=5785 comm="syz.5.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 287.551307][ T5820] tipc: Started in network mode [ 287.562344][ T5820] tipc: Node identity 2000004, cluster identity 4711 [ 287.577791][ T5820] tipc: Node number set to 33554436 [ 291.284634][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 291.284652][ T36] audit: type=1400 audit(2000000207.940:250): avc: denied { append } for pid=5900 comm="syz.4.1536" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 292.488169][ T36] audit: type=1400 audit(2000000209.150:251): avc: denied { bind } for pid=5925 comm="syz.4.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 292.544923][ T36] audit: type=1400 audit(2000000209.150:252): avc: denied { ioctl } for pid=5925 comm="syz.4.1544" path="socket:[170522]" dev="sockfs" ino=170522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 292.586102][ T36] audit: type=1400 audit(2000000209.240:253): avc: denied { bind } for pid=5919 comm="syz.5.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.736106][ T394] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 292.866123][ T394] usb 5-1: device descriptor read/64, error -71 [ 293.106067][ T394] usb 5-1: device descriptor read/64, error -71 [ 293.356073][ T394] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 293.486113][ T394] usb 5-1: device descriptor read/64, error -71 [ 293.726083][ T394] usb 5-1: device descriptor read/64, error -71 [ 293.837047][ T394] usb usb5-port1: attempt power cycle [ 294.186086][ T394] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 294.237136][ T394] usb 5-1: device descriptor read/8, error -71 [ 294.367260][ T394] usb 5-1: device descriptor read/8, error -71 [ 294.606112][ T394] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 294.637173][ T394] usb 5-1: device descriptor read/8, error -71 [ 294.767125][ T394] usb 5-1: device descriptor read/8, error -71 [ 294.876224][ T394] usb usb5-port1: unable to enumerate USB device [ 295.476095][ T394] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 295.526463][ T36] audit: type=1400 audit(2000000212.190:254): avc: denied { read append } for pid=5975 comm="syz.4.1557" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.579642][ T36] audit: type=1400 audit(2000000212.190:255): avc: denied { open } for pid=5975 comm="syz.4.1557" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.624644][ T36] audit: type=1400 audit(2000000212.210:256): avc: denied { ioctl } for pid=5975 comm="syz.4.1557" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.676061][ T36] audit: type=1400 audit(2000000212.220:257): avc: denied { map } for pid=5975 comm="syz.4.1557" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.680318][ T394] usb 6-1: Using ep0 maxpacket: 16 [ 295.722616][ T36] audit: type=1400 audit(2000000212.230:258): avc: denied { getopt } for pid=5975 comm="syz.4.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 295.740032][ T394] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 295.751163][ T394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.759987][ T394] usb 6-1: Product: syz [ 295.764290][ T394] usb 6-1: Manufacturer: syz [ 295.769099][ T394] usb 6-1: SerialNumber: syz [ 295.976791][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.994232][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.008056][ T36] audit: type=1400 audit(2000000212.670:259): avc: denied { read write } for pid=5973 comm="syz.5.1556" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 296.119958][ T394] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 296.139174][ T394] usb 6-1: USB disconnect, device number 42 [ 297.276071][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 297.458747][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.489284][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.526476][ T9] usb 7-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 297.556131][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.564202][ T9] usb 7-1: Product: syz [ 297.568831][ T9] usb 7-1: Manufacturer: syz [ 297.573466][ T9] usb 7-1: SerialNumber: syz [ 297.589437][ T9] zaurus 7-1:1.0: probe with driver zaurus failed with error -22 [ 298.029485][ T6035] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1576'. [ 300.023607][ T10] usb 7-1: USB disconnect, device number 37 [ 301.071716][ T6089] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1592'. [ 304.556078][ T314] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 304.727217][ T314] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 304.751505][ T314] usb 5-1: config 127 has an invalid descriptor of length 112, skipping remainder of the config [ 304.773590][ T314] usb 5-1: config 127 has no interface number 0 [ 304.785464][ T314] usb 5-1: config 127 interface 57 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.817548][ T314] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 304.842207][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.866047][ T314] usb 5-1: Product: syz [ 304.870305][ T314] usb 5-1: Manufacturer: syz [ 304.874945][ T314] usb 5-1: SerialNumber: syz [ 305.100970][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.118416][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.338876][ T314] asix 5-1:127.57: probe with driver asix failed with error -22 [ 305.357598][ T314] usb 5-1: USB disconnect, device number 32 [ 306.370584][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 306.370603][ T36] audit: type=1400 audit(2000000223.030:262): avc: denied { accept } for pid=6195 comm="syz.5.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.432460][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1624'. [ 306.450724][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1624'. [ 307.046400][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.077354][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.923459][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1635'. [ 307.948904][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1635'. [ 312.077729][ T1296] Bluetooth: hci0: Frame reassembly failed (-84) [ 313.615670][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1678'. [ 313.637635][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1678'. [ 314.116074][ T6332] Bluetooth: hci0: command 0x1003 tx timeout [ 314.116102][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 314.636236][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1689'. [ 314.662822][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1689'. [ 315.775338][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'. [ 315.784310][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1699'. [ 315.829714][ T36] audit: type=1400 audit(2000000232.490:263): avc: denied { create } for pid=6431 comm="syz.6.1700" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 315.852273][ T36] audit: type=1400 audit(2000000232.490:264): avc: denied { write } for pid=6431 comm="syz.6.1700" name="file0" dev="tmpfs" ino=1766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 315.875776][ T36] audit: type=1400 audit(2000000232.490:265): avc: denied { open } for pid=6431 comm="syz.6.1700" path="/347/file0" dev="tmpfs" ino=1766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 315.905540][ T36] audit: type=1400 audit(2000000232.490:266): avc: denied { setattr } for pid=6431 comm="syz.6.1700" name="file0" dev="tmpfs" ino=1766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 315.929336][ T36] audit: type=1400 audit(2000000232.510:267): avc: denied { unlink } for pid=1085 comm="syz-executor" name="file0" dev="tmpfs" ino=1766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.479643][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'. [ 316.498775][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1710'. [ 317.086918][ T394] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 317.262081][ T394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.282972][ T394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.302714][ T394] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.329323][ T394] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.348494][ T394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.366340][ T394] usb 7-1: config 0 descriptor?? [ 317.406193][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 317.429397][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1719'. [ 317.883918][ T6508] FAULT_INJECTION: forcing a failure. [ 317.883918][ T6508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.916091][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.4.1724 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 317.916136][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.916152][ T6508] Call Trace: [ 317.916160][ T6508] [ 317.916172][ T6508] __dump_stack+0x21/0x30 [ 317.916253][ T6508] dump_stack_lvl+0x140/0x1c0 [ 317.916305][ T6508] ? __cfi_dump_stack_lvl+0x10/0x10 [ 317.916345][ T6508] ? selinux_file_ioctl+0x732/0x1480 [ 317.916373][ T6508] dump_stack+0x19/0x20 [ 317.916412][ T6508] should_fail_ex+0x3c2/0x510 [ 317.916448][ T6508] should_fail+0xf/0x20 [ 317.916477][ T6508] should_fail_usercopy+0x1e/0x30 [ 317.916517][ T6508] _copy_from_user+0x20/0xa0 [ 317.916553][ T6508] get_user_ifreq+0x70/0x180 [ 317.916716][ T6508] sock_ioctl+0x6f3/0x7e0 [ 317.916742][ T6508] ? __cfi_sock_ioctl+0x10/0x10 [ 317.916769][ T6508] ? __fget_files+0x2bc/0x330 [ 317.916803][ T6508] ? bpf_lsm_file_ioctl+0xd/0x20 [ 317.916842][ T6508] ? security_file_ioctl+0x3e/0x110 [ 317.916869][ T6508] ? __cfi_sock_ioctl+0x10/0x10 [ 317.916897][ T6508] __se_sys_ioctl+0x126/0x1b0 [ 317.916929][ T6508] __x64_sys_ioctl+0x7f/0xa0 [ 317.916966][ T6508] x64_sys_call+0x1878/0x2ee0 [ 317.916989][ T6508] do_syscall_64+0x57/0xf0 [ 317.917017][ T6508] ? clear_bhb_loop+0x50/0xa0 [ 317.917047][ T6508] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 317.917091][ T6508] RIP: 0033:0x7f8a1259e159 [ 317.917137][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.917156][ T6508] RSP: 002b:00007f8a1345d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.917196][ T6508] RAX: ffffffffffffffda RBX: 00007f8a12825fa0 RCX: 00007f8a1259e159 [ 317.917215][ T6508] RDX: 0000200000001040 RSI: 00000000000089f0 RDI: 0000000000000003 [ 317.917237][ T6508] RBP: 00007f8a1345d090 R08: 0000000000000000 R09: 0000000000000000 [ 317.917253][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.917270][ T6508] R13: 00007f8a12826038 R14: 00007f8a12825fa0 R15: 00007ffc14a1b0d8 [ 317.917297][ T6508] [ 318.135622][ T394] usbhid 7-1:0.0: can't add hid device: -71 [ 318.141668][ T394] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 318.150646][ T394] usb 7-1: USB disconnect, device number 38 [ 318.696836][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1728'. [ 318.708699][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1728'. [ 319.086742][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.115908][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.698987][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1740'. [ 319.741506][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1740'. [ 320.246421][ T36] audit: type=1400 audit(2000000236.910:268): avc: denied { read } for pid=6580 comm="syz.6.1745" name="/" dev="configfs" ino=2454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.293282][ T36] audit: type=1400 audit(2000000236.910:269): avc: denied { open } for pid=6580 comm="syz.6.1745" path="/356/config" dev="configfs" ino=2454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.626117][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 320.787334][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.798550][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.808769][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.822291][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.841551][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.851462][ T10] usb 5-1: config 0 descriptor?? [ 321.472682][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 321.480000][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.492200][ T10] usb 5-1: USB disconnect, device number 33 [ 321.554972][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1754'. [ 321.773943][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 321.783063][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1758'. [ 322.070512][ T36] audit: type=1400 audit(2000000238.730:270): avc: denied { connect } for pid=6643 comm="syz.5.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 322.195580][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1769'. [ 322.222358][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1769'. [ 322.516048][ T36] audit: type=1400 audit(2000000239.170:271): avc: denied { bind } for pid=6662 comm="syz.6.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.070222][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 323.114823][ T36] audit: type=1400 audit(2000000239.770:272): avc: denied { create } for pid=6689 comm="syz.4.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 323.198159][ T6698] FAULT_INJECTION: forcing a failure. [ 323.198159][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 323.236157][ T6698] CPU: 0 UID: 0 PID: 6698 Comm: syz.5.1784 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 323.236199][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.236214][ T6698] Call Trace: [ 323.236223][ T6698] [ 323.236232][ T6698] __dump_stack+0x21/0x30 [ 323.236271][ T6698] dump_stack_lvl+0x140/0x1c0 [ 323.236304][ T6698] ? __cfi_dump_stack_lvl+0x10/0x10 [ 323.236335][ T6698] ? avc_has_perm_noaudit+0x289/0x360 [ 323.236367][ T6698] dump_stack+0x19/0x20 [ 323.236398][ T6698] should_fail_ex+0x3c2/0x510 [ 323.236426][ T6698] should_failslab+0xac/0x100 [ 323.236455][ T6698] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 323.236487][ T6698] ? sock_alloc_inode+0x48/0x150 [ 323.236514][ T6698] sock_alloc_inode+0x48/0x150 [ 323.236537][ T6698] ? __cfi_sock_alloc_inode+0x10/0x10 [ 323.236561][ T6698] alloc_inode+0x7a/0x270 [ 323.236590][ T6698] ? bpf_lsm_socket_create+0xd/0x20 [ 323.236684][ T6698] new_inode_pseudo+0x19/0x40 [ 323.236713][ T6698] __sock_create+0x130/0x810 [ 323.236749][ T6698] __sys_socket+0xe1/0x1c0 [ 323.236774][ T6698] __x64_sys_socket+0x7e/0x90 [ 323.236800][ T6698] x64_sys_call+0x2608/0x2ee0 [ 323.236822][ T6698] do_syscall_64+0x57/0xf0 [ 323.236843][ T6698] ? clear_bhb_loop+0x50/0xa0 [ 323.236870][ T6698] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 323.236895][ T6698] RIP: 0033:0x7f35a379e159 [ 323.236915][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.236933][ T6698] RSP: 002b:00007f35a46f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 323.236958][ T6698] RAX: ffffffffffffffda RBX: 00007f35a3a25fa0 RCX: 00007f35a379e159 [ 323.236975][ T6698] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 323.236989][ T6698] RBP: 00007f35a383503b R08: 0000000000000000 R09: 0000000000000000 [ 323.237004][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.237017][ T6698] R13: 00007f35a3a26038 R14: 00007f35a3a25fa0 R15: 00007ffe42f844c8 [ 323.237038][ T6698] [ 323.237075][ T6698] socket: no more sockets [ 323.626085][ T46] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 323.798543][ T46] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 323.820432][ T46] usb 6-1: config 0 interface 0 has no altsetting 0 [ 323.836097][ T46] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 323.855622][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.870416][ T46] usb 6-1: config 0 descriptor?? [ 324.100719][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 324.109881][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 324.121791][ T46] usb 6-1: USB disconnect, device number 43 [ 327.957084][ T6802] FAULT_INJECTION: forcing a failure. [ 327.957084][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 327.985746][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.5.1813 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 327.985790][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.985806][ T6802] Call Trace: [ 327.985817][ T6802] [ 327.985829][ T6802] __dump_stack+0x21/0x30 [ 327.985870][ T6802] dump_stack_lvl+0x140/0x1c0 [ 327.985909][ T6802] ? __cfi_dump_stack_lvl+0x10/0x10 [ 327.985949][ T6802] ? avc_has_perm+0x155/0x240 [ 327.985983][ T6802] ? __cfi_avc_has_perm+0x10/0x10 [ 327.986021][ T6802] dump_stack+0x19/0x20 [ 327.986049][ T6802] should_fail_ex+0x3c2/0x510 [ 327.986076][ T6802] should_failslab+0xac/0x100 [ 327.986109][ T6802] __kmalloc_cache_noprof+0x41/0x470 [ 327.986135][ T6802] ? vhost_task_create+0x12c/0x3f0 [ 327.986169][ T6802] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 327.986202][ T6802] vhost_task_create+0x12c/0x3f0 [ 327.986232][ T6802] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 327.986260][ T6802] ? __cfi_vhost_task_create+0x10/0x10 [ 327.986288][ T6802] ? __cfi_vhost_task_fn+0x10/0x10 [ 327.986315][ T6802] ? __kasan_check_write+0x18/0x20 [ 327.986345][ T6802] ? mutex_lock+0x97/0x1d0 [ 327.986376][ T6802] ? __cfi_mutex_lock+0x10/0x10 [ 327.986408][ T6802] ? kernel_text_address+0xa9/0xe0 [ 327.986448][ T6802] kvm_mmu_post_init_vm+0x161/0x300 [ 327.986496][ T6802] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 327.986535][ T6802] ? _parse_integer_limit+0x195/0x1e0 [ 327.986571][ T6802] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 327.986606][ T6802] ? kstrtoull+0x13b/0x1e0 [ 327.986638][ T6802] ? kstrtouint+0x78/0xf0 [ 327.986667][ T6802] ? ioctl_has_perm+0x1bc/0x500 [ 327.986697][ T6802] ? __asan_memcpy+0x5a/0x80 [ 327.986733][ T6802] ? ioctl_has_perm+0x408/0x500 [ 327.986764][ T6802] ? has_cap_mac_admin+0xd0/0xd0 [ 327.986790][ T6802] ? __kasan_check_write+0x18/0x20 [ 327.986821][ T6802] ? mutex_lock_killable+0x97/0x1d0 [ 327.986851][ T6802] ? __cfi_mutex_lock_killable+0x10/0x10 [ 327.986888][ T6802] ? proc_fail_nth_write+0x184/0x220 [ 327.986930][ T6802] kvm_vcpu_ioctl+0xa43/0x1000 [ 327.986957][ T6802] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 327.986982][ T6802] ? __cfi_vfs_write+0x10/0x10 [ 327.987014][ T6802] ? __kasan_check_write+0x18/0x20 [ 327.987039][ T6802] ? mutex_unlock+0x90/0x240 [ 327.987072][ T6802] ? __cfi_mutex_unlock+0x10/0x10 [ 327.987104][ T6802] ? __fget_files+0x2bc/0x330 [ 327.987138][ T6802] ? bpf_lsm_file_ioctl+0xd/0x20 [ 327.987170][ T6802] ? security_file_ioctl+0x3e/0x110 [ 327.987195][ T6802] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 327.987221][ T6802] __se_sys_ioctl+0x126/0x1b0 [ 327.987255][ T6802] __x64_sys_ioctl+0x7f/0xa0 [ 327.987290][ T6802] x64_sys_call+0x1878/0x2ee0 [ 327.987315][ T6802] do_syscall_64+0x57/0xf0 [ 327.987341][ T6802] ? clear_bhb_loop+0x50/0xa0 [ 327.987376][ T6802] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 327.987409][ T6802] RIP: 0033:0x7f35a379e159 [ 327.987431][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.987453][ T6802] RSP: 002b:00007f35a46f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.987485][ T6802] RAX: ffffffffffffffda RBX: 00007f35a3a25fa0 RCX: 00007f35a379e159 [ 327.987505][ T6802] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 327.987525][ T6802] RBP: 00007f35a46f3090 R08: 0000000000000000 R09: 0000000000000000 [ 327.987544][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.987559][ T6802] R13: 00007f35a3a26038 R14: 00007f35a3a25fa0 R15: 00007ffe42f844c8 [ 327.987579][ T6802] [ 328.701267][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 328.877859][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 328.887209][ T10] usb 7-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 520 [ 328.899526][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 328.914913][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 328.933478][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.945327][ T10] usb 7-1: Product: syz [ 328.950208][ T10] usb 7-1: Manufacturer: syz [ 328.954890][ T10] usb 7-1: SerialNumber: syz [ 328.966151][ T6805] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 329.333710][ T10] usb 7-1: USB disconnect, device number 39 [ 330.186677][ T31] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 330.347250][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.366039][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.385989][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.409063][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.426079][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.446550][ T31] usb 6-1: config 0 descriptor?? [ 331.060559][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 331.072001][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 331.091733][ T31] usb 6-1: USB disconnect, device number 44 [ 331.386083][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 331.534476][ T6868] FAULT_INJECTION: forcing a failure. [ 331.534476][ T6868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.547865][ T6868] CPU: 1 UID: 0 PID: 6868 Comm: syz.6.1833 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 331.547907][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.547924][ T6868] Call Trace: [ 331.547959][ T6868] [ 331.547971][ T6868] __dump_stack+0x21/0x30 [ 331.548019][ T6868] dump_stack_lvl+0x140/0x1c0 [ 331.548058][ T6868] ? __cfi_dump_stack_lvl+0x10/0x10 [ 331.548102][ T6868] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 331.548208][ T6868] dump_stack+0x19/0x20 [ 331.548248][ T6868] should_fail_ex+0x3c2/0x510 [ 331.548303][ T6868] should_fail_alloc_page+0xec/0x110 [ 331.548340][ T6868] __alloc_pages_noprof+0x1c0/0x7e0 [ 331.548442][ T6868] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 331.548487][ T6868] ? folio_add_lru+0x116/0x400 [ 331.548581][ T6868] ? __cfi_folio_add_lru+0x10/0x10 [ 331.548624][ T6868] __folio_alloc_noprof+0x14/0x80 [ 331.548667][ T6868] folio_prealloc+0x46/0x220 [ 331.548727][ T6868] do_pte_missing+0x16af/0x4440 [ 331.548763][ T6868] ? pte_marker_clear+0x1b0/0x1b0 [ 331.548803][ T6868] ? cgroup_rstat_updated+0x144/0x800 [ 331.548836][ T6868] ? __schedule+0x149e/0x20b0 [ 331.548872][ T6868] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 331.548901][ T6868] handle_mm_fault+0x1189/0x1ba0 [ 331.548951][ T6868] ? __cfi_handle_mm_fault+0x10/0x10 [ 331.548987][ T6868] ? find_vma+0xd3/0x120 [ 331.549046][ T6868] ? lock_mm_and_find_vma+0xb8/0x390 [ 331.549076][ T6868] do_user_addr_fault+0x4ee/0x1230 [ 331.549189][ T6868] exc_page_fault+0x58/0xc0 [ 331.549228][ T6868] asm_exc_page_fault+0x2b/0x30 [ 331.549261][ T6868] RIP: 0010:rep_stos_alternative+0x5b/0x80 [ 331.549327][ T6868] Code: 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 90 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 <48> 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 83 f9 08 73 [ 331.549355][ T6868] RSP: 0018:ffffc90002977cd8 EFLAGS: 00050202 [ 331.549381][ T6868] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 00000000fffefe4b [ 331.549403][ T6868] RDX: 0000000000000002 RSI: 0000200000000002 RDI: 000020000000ffc2 [ 331.549424][ T6868] RBP: ffffc90002977ed0 R08: 0000000000000001 R09: 0000000000000002 [ 331.549441][ T6868] R10: dffffc0000000000 R11: fffffbfff0c9ae74 R12: 1ffff9200052efa0 [ 331.549460][ T6868] R13: 0000200000000002 R14: 00007ffffffff001 R15: 00002000fffffe0d [ 331.549486][ T6868] ? __se_sys_keyctl+0xa9f/0xe40 [ 331.549580][ T6868] ? __x64_sys_keyctl+0xf0/0xf0 [ 331.549617][ T6868] ? file_init_path+0x434/0x590 [ 331.549655][ T6868] ? __cfi_do_futex+0x10/0x10 [ 331.549695][ T6868] ? alloc_file_pseudo+0x191/0x1f0 [ 331.549734][ T6868] ? __se_sys_futex+0x13c/0x320 [ 331.549773][ T6868] ? xfd_validate_state+0x68/0x140 [ 331.549843][ T6868] ? __kasan_check_write+0x18/0x20 [ 331.549872][ T6868] ? fpregs_restore_userregs+0x11c/0x260 [ 331.549910][ T6868] __x64_sys_keyctl+0xc3/0xf0 [ 331.549956][ T6868] x64_sys_call+0x996/0x2ee0 [ 331.549981][ T6868] do_syscall_64+0x57/0xf0 [ 331.550004][ T6868] ? clear_bhb_loop+0x50/0xa0 [ 331.550043][ T6868] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.550074][ T6868] RIP: 0033:0x7f376fd9e159 [ 331.550100][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.550123][ T6868] RSP: 002b:00007f3770c0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 331.550154][ T6868] RAX: ffffffffffffffda RBX: 00007f3770025fa0 RCX: 00007f376fd9e159 [ 331.550176][ T6868] RDX: 00000000fffffe0d RSI: 0000200000000000 RDI: 000000000000001f [ 331.550195][ T6868] RBP: 00007f376fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 331.550217][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.550237][ T6868] R13: 00007f3770026038 R14: 00007f3770025fa0 R15: 00007ffe8b540b98 [ 331.550262][ T6868] [ 331.556106][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 331.935296][ T10] usb 5-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 520 [ 331.959477][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 331.967759][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 331.983743][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.996038][ T10] usb 5-1: Product: syz [ 332.000245][ T10] usb 5-1: Manufacturer: syz [ 332.004889][ T10] usb 5-1: SerialNumber: syz [ 332.011754][ T6859] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 332.297047][ T6859] FAULT_INJECTION: forcing a failure. [ 332.297047][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 332.321558][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.4.1830 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 332.321601][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.321616][ T6859] Call Trace: [ 332.321624][ T6859] [ 332.321635][ T6859] __dump_stack+0x21/0x30 [ 332.321678][ T6859] dump_stack_lvl+0x140/0x1c0 [ 332.321717][ T6859] ? __cfi_dump_stack_lvl+0x10/0x10 [ 332.321752][ T6859] ? avc_has_perm+0x155/0x240 [ 332.321787][ T6859] ? __cfi_avc_has_perm+0x10/0x10 [ 332.321819][ T6859] dump_stack+0x19/0x20 [ 332.321864][ T6859] should_fail_ex+0x3c2/0x510 [ 332.321894][ T6859] should_failslab+0xac/0x100 [ 332.321931][ T6859] __kmalloc_cache_noprof+0x41/0x470 [ 332.321959][ T6859] ? vhost_task_create+0x12c/0x3f0 [ 332.321992][ T6859] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 332.322038][ T6859] vhost_task_create+0x12c/0x3f0 [ 332.322068][ T6859] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 332.322101][ T6859] ? __cfi_vhost_task_create+0x10/0x10 [ 332.322135][ T6859] ? __cfi_vhost_task_fn+0x10/0x10 [ 332.322162][ T6859] ? __kasan_check_write+0x18/0x20 [ 332.322190][ T6859] ? mutex_lock+0x97/0x1d0 [ 332.322222][ T6859] ? __cfi_mutex_lock+0x10/0x10 [ 332.322253][ T6859] ? kernel_text_address+0xa9/0xe0 [ 332.322290][ T6859] kvm_mmu_post_init_vm+0x161/0x300 [ 332.322329][ T6859] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 332.322365][ T6859] ? _parse_integer_limit+0x195/0x1e0 [ 332.322399][ T6859] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 332.322433][ T6859] ? kstrtoull+0x13b/0x1e0 [ 332.322459][ T6859] ? kstrtouint+0x78/0xf0 [ 332.322492][ T6859] ? ioctl_has_perm+0x1bc/0x500 [ 332.322519][ T6859] ? __asan_memcpy+0x5a/0x80 [ 332.322549][ T6859] ? ioctl_has_perm+0x408/0x500 [ 332.322576][ T6859] ? has_cap_mac_admin+0xd0/0xd0 [ 332.322610][ T6859] ? __kasan_check_write+0x18/0x20 [ 332.322638][ T6859] ? mutex_lock_killable+0x97/0x1d0 [ 332.322671][ T6859] ? __cfi_mutex_lock_killable+0x10/0x10 [ 332.322704][ T6859] ? proc_fail_nth_write+0x184/0x220 [ 332.322745][ T6859] kvm_vcpu_ioctl+0xa43/0x1000 [ 332.322774][ T6859] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 332.322800][ T6859] ? __cfi_vfs_write+0x10/0x10 [ 332.322831][ T6859] ? __kasan_check_write+0x18/0x20 [ 332.322867][ T6859] ? mutex_unlock+0x90/0x240 [ 332.322901][ T6859] ? __cfi_mutex_unlock+0x10/0x10 [ 332.322932][ T6859] ? __fget_files+0x2bc/0x330 [ 332.322968][ T6859] ? bpf_lsm_file_ioctl+0xd/0x20 [ 332.323001][ T6859] ? security_file_ioctl+0x3e/0x110 [ 332.323031][ T6859] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 332.323056][ T6859] __se_sys_ioctl+0x126/0x1b0 [ 332.323092][ T6859] __x64_sys_ioctl+0x7f/0xa0 [ 332.323124][ T6859] x64_sys_call+0x1878/0x2ee0 [ 332.323147][ T6859] do_syscall_64+0x57/0xf0 [ 332.323175][ T6859] ? clear_bhb_loop+0x50/0xa0 [ 332.323207][ T6859] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 332.323255][ T6859] RIP: 0033:0x7f8a1259e159 [ 332.323275][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.323294][ T6859] RSP: 002b:00007f8a1345d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.323323][ T6859] RAX: ffffffffffffffda RBX: 00007f8a12825fa0 RCX: 00007f8a1259e159 [ 332.323340][ T6859] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 332.323358][ T6859] RBP: 00007f8a1345d090 R08: 0000000000000000 R09: 0000000000000000 [ 332.323373][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.323386][ T6859] R13: 00007f8a12826038 R14: 00007f8a12825fa0 R15: 00007ffc14a1b0d8 [ 332.323405][ T6859] [ 332.880840][ T10] usb 5-1: USB disconnect, device number 34 [ 333.437385][ T36] audit: type=1400 audit(2000000250.100:273): avc: denied { write } for pid=6917 comm="syz.4.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.906058][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 336.027295][ T6985] __nla_validate_parse: 1 callbacks suppressed [ 336.027319][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1867'. [ 336.046100][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1867'. [ 336.062080][ T6985] ./dev/sda1: Can't lookup blockdev [ 336.087957][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.106047][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.115847][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.156101][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.176040][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.184867][ T10] usb 7-1: config 0 descriptor?? [ 336.799372][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 336.805456][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 336.825960][ T10] usb 7-1: USB disconnect, device number 40 [ 338.427623][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1881'. [ 338.456056][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1881'. [ 341.823440][ T7107] futex_wake_op: syz.1.1903 tries to shift op by 144; fix this program [ 341.887819][ T7109] FAULT_INJECTION: forcing a failure. [ 341.887819][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 341.921487][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.1.1904 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 341.921541][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.921566][ T7109] Call Trace: [ 341.921575][ T7109] [ 341.921585][ T7109] __dump_stack+0x21/0x30 [ 341.921635][ T7109] dump_stack_lvl+0x140/0x1c0 [ 341.921676][ T7109] ? __cfi_dump_stack_lvl+0x10/0x10 [ 341.921714][ T7109] dump_stack+0x19/0x20 [ 341.921747][ T7109] should_fail_ex+0x3c2/0x510 [ 341.921785][ T7109] should_failslab+0xac/0x100 [ 341.921820][ T7109] kmem_cache_alloc_noprof+0x42/0x410 [ 341.921855][ T7109] ? ep_insert+0x46c/0x1600 [ 341.921976][ T7109] ep_insert+0x46c/0x1600 [ 341.922020][ T7109] ? ep_loop_check+0xa0/0xa0 [ 341.922070][ T7109] ? mutex_lock+0x97/0x1d0 [ 341.922110][ T7109] do_epoll_ctl+0x955/0xcf0 [ 341.922147][ T7109] __x64_sys_epoll_ctl+0x166/0x1b0 [ 341.922197][ T7109] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 341.922238][ T7109] ? switch_fpu_return+0x12/0x20 [ 341.922277][ T7109] x64_sys_call+0x2c44/0x2ee0 [ 341.922307][ T7109] do_syscall_64+0x57/0xf0 [ 341.922334][ T7109] ? clear_bhb_loop+0x50/0xa0 [ 341.922371][ T7109] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 341.922407][ T7109] RIP: 0033:0x7f74a3d9e159 [ 341.922432][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.922459][ T7109] RSP: 002b:00007f74a4b9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 341.922492][ T7109] RAX: ffffffffffffffda RBX: 00007f74a4025fa0 RCX: 00007f74a3d9e159 [ 341.922520][ T7109] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 341.922539][ T7109] RBP: 00007f74a3e3503b R08: 0000000000000000 R09: 0000000000000000 [ 341.922559][ T7109] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 341.922580][ T7109] R13: 00007f74a4026038 R14: 00007f74a4025fa0 R15: 00007fffe818d6e8 [ 341.922606][ T7109] [ 342.130847][ T394] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 342.203810][ T36] audit: type=1400 audit(2000000258.860:274): avc: denied { connect } for pid=7112 comm="syz.1.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 342.286356][ T7119] tracefs: Bad value for 'uid' [ 342.291233][ T7119] tracefs: Bad value for 'uid' [ 342.307427][ T394] usb 6-1: unable to get BOS descriptor or descriptor too short [ 342.315815][ T394] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.326028][ T394] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.335008][ T394] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 342.347272][ T394] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 342.356426][ T394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.364433][ T394] usb 6-1: Product: syz [ 342.377518][ T36] audit: type=1400 audit(2000000259.040:275): avc: denied { read } for pid=7120 comm="syz.1.1909" path="socket:[205211]" dev="sockfs" ino=205211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.387004][ T394] usb 6-1: Manufacturer: syz [ 342.416056][ T394] usb 6-1: SerialNumber: syz [ 342.640118][ T36] audit: type=1400 audit(2000000259.300:276): avc: denied { search } for pid=7098 comm="syz.5.1899" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 342.672564][ T394] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 342.686247][ T394] usb 6-1: 0:2 : does not exist [ 342.697236][ T36] audit: type=1400 audit(2000000259.300:277): avc: denied { read } for pid=7098 comm="syz.5.1899" name="error_log" dev="tracefs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 342.724542][ T394] usb 6-1: USB disconnect, device number 45 [ 342.750259][ T36] audit: type=1400 audit(2000000259.300:278): avc: denied { ioctl } for pid=7098 comm="syz.5.1899" path="/419/trace/error_log" dev="tracefs" ino=1117 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 342.950925][ T36] audit: type=1400 audit(2000000259.610:279): avc: denied { ioctl } for pid=7130 comm="syz.6.1914" path="socket:[204486]" dev="sockfs" ino=204486 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 343.157590][ T36] audit: type=1400 audit(2000000259.820:280): avc: denied { read } for pid=7136 comm="syz.6.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.731192][ T7160] futex_wake_op: syz.6.1925 tries to shift op by 144; fix this program [ 344.828609][ T7166] FAULT_INJECTION: forcing a failure. [ 344.828609][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 344.841451][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.5.1928 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 344.841490][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.841505][ T7166] Call Trace: [ 344.841513][ T7166] [ 344.841522][ T7166] __dump_stack+0x21/0x30 [ 344.841563][ T7166] dump_stack_lvl+0x140/0x1c0 [ 344.841596][ T7166] ? __cfi_dump_stack_lvl+0x10/0x10 [ 344.841630][ T7166] dump_stack+0x19/0x20 [ 344.841658][ T7166] should_fail_ex+0x3c2/0x510 [ 344.841688][ T7166] should_failslab+0xac/0x100 [ 344.841718][ T7166] kmem_cache_alloc_noprof+0x42/0x410 [ 344.841742][ T7166] ? ep_insert+0x46c/0x1600 [ 344.841773][ T7166] ep_insert+0x46c/0x1600 [ 344.841805][ T7166] ? ep_loop_check+0xa0/0xa0 [ 344.841833][ T7166] ? mutex_lock+0x97/0x1d0 [ 344.841862][ T7166] do_epoll_ctl+0x955/0xcf0 [ 344.841892][ T7166] __x64_sys_epoll_ctl+0x166/0x1b0 [ 344.841921][ T7166] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 344.841952][ T7166] ? switch_fpu_return+0x12/0x20 [ 344.841981][ T7166] x64_sys_call+0x2c44/0x2ee0 [ 344.842002][ T7166] do_syscall_64+0x57/0xf0 [ 344.842022][ T7166] ? clear_bhb_loop+0x50/0xa0 [ 344.842052][ T7166] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 344.842078][ T7166] RIP: 0033:0x7f35a379e159 [ 344.842099][ T7166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.842118][ T7166] RSP: 002b:00007f35a46f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 344.842143][ T7166] RAX: ffffffffffffffda RBX: 00007f35a3a25fa0 RCX: 00007f35a379e159 [ 344.842160][ T7166] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 344.842175][ T7166] RBP: 00007f35a383503b R08: 0000000000000000 R09: 0000000000000000 [ 344.842190][ T7166] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 344.842206][ T7166] R13: 00007f35a3a26038 R14: 00007f35a3a25fa0 R15: 00007ffe42f844c8 [ 344.842225][ T7166] [ 345.145490][ T7178] futex_wake_op: syz.5.1934 tries to shift op by 144; fix this program [ 345.166077][ T1141] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 345.316425][ T1141] usb 7-1: Using ep0 maxpacket: 32 [ 345.322812][ T1141] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.333875][ T1141] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.344611][ T1141] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 345.360373][ T1141] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.378642][ T1141] usb 7-1: config 0 descriptor?? [ 345.391361][ T1141] hub 7-1:0.0: USB hub found [ 345.592922][ T1141] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 345.796510][ T1141] usbhid 7-1:0.0: can't add hid device: -71 [ 345.804661][ T1141] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 345.846432][ T1141] usb 7-1: USB disconnect, device number 41 [ 346.344930][ T7211] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 346.344957][ T7211] rust_binder: Read failure Err(EFAULT) in pid:1496 [ 346.354672][ T7211] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 346.361339][ T7211] rust_binder: Read failure Err(EFAULT) in pid:1496 [ 346.370799][ T36] audit: type=1400 audit(2000000263.030:281): avc: denied { call } for pid=7210 comm="syz.6.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 346.371672][ T7211] rust_binder: 7210:7211 error while translating object: EINVAL [ 346.393927][ T36] audit: type=1400 audit(2000000263.030:282): avc: denied { transfer } for pid=7210 comm="syz.6.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 346.396809][ T7211] rust_binder: Failure in copy_transaction_data: EINVAL [ 346.423150][ T7211] rust_binder: 7210:7211 transaction call to 7210:0 failed EINVAL, code 0 size 104-24 [ 346.446092][ T9] rust_binder: 7210: undelivered TRANSACTION_ERROR: 29201 [ 346.484713][ T7215] syz.6.1951 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 347.508968][ T36] audit: type=1400 audit(2000000264.170:283): avc: denied { read } for pid=7230 comm="syz.1.1958" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 347.537614][ T7233] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 347.537640][ T7233] rust_binder: Read failure Err(EFAULT) in pid:1523 [ 347.557331][ T7233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.564332][ T7233] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 347.570811][ T7233] rust_binder: Read failure Err(EFAULT) in pid:1523 [ 347.579566][ T7233] rust_binder: 7232:7233 got transaction to invalid handle 1 [ 347.593614][ T7233] rust_binder: 7232:7233 transaction call to 0:0 failed ENOENT, code 0 size 104-24 [ 347.612133][ T1141] rust_binder: 7232: undelivered TRANSACTION_ERROR: 29201 [ 347.635485][ T36] audit: type=1400 audit(2000000264.170:284): avc: denied { open } for pid=7230 comm="syz.1.1958" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.022869][ T1295] tipc: Subscription rejected, illegal request [ 348.036079][ T31] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 348.158576][ T7262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 348.196323][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 348.206770][ T31] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.217586][ T31] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 348.240791][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.260751][ T31] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 348.279620][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.296862][ T31] usb 6-1: config 0 descriptor?? [ 348.393573][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.416402][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.558710][ T36] audit: type=1400 audit(2000000265.220:285): avc: denied { bind } for pid=7270 comm="syz.6.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 348.582645][ T36] audit: type=1400 audit(2000000265.220:286): avc: denied { name_bind } for pid=7270 comm="syz.6.1976" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 348.606033][ T36] audit: type=1400 audit(2000000265.220:287): avc: denied { node_bind } for pid=7270 comm="syz.6.1976" saddr=::ffff:100.1.1.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 348.714315][ T31] input: HID 0810:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0810:0001.000B/input/input21 [ 348.737849][ T31] pantherlord 0003:0810:0001.000B: input,hidraw0: USB HID v0.0a Joystick [HID 0810:0001] on usb-dummy_hcd.5-1/input0 [ 348.760555][ T31] pantherlord 0003:0810:0001.000B: no output reports found [ 348.777277][ T7274] fido_id[7274]: Failed to get parent HID device: No such file or directory [ 348.935069][ T31] usb 6-1: USB disconnect, device number 46 [ 351.027722][ T1198] bridge_slave_1: left allmulticast mode [ 351.033461][ T1198] bridge_slave_1: left promiscuous mode [ 351.039163][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.046848][ T1198] bridge_slave_0: left allmulticast mode [ 351.052517][ T1198] bridge_slave_0: left promiscuous mode [ 351.058200][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.129221][ T1198] veth1_macvtap: left promiscuous mode [ 351.134757][ T1198] veth0_vlan: left promiscuous mode [ 353.220224][ T7332] 9pnet_fd: Insufficient options for proto=fd [ 355.965504][ T36] audit: type=1400 audit(2000000272.620:288): avc: denied { setcheckreqprot } for pid=7352 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 359.613406][ T7372] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.625889][ T7373] 9pnet_fd: Insufficient options for proto=fd [ 361.027746][ T36] audit: type=1400 audit(2000000277.690:289): avc: denied { write } for pid=7378 comm="syz.5.2015" name="idProduct" dev="configfs" ino=206199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 361.053714][ T36] audit: type=1400 audit(2000000277.690:290): avc: denied { open } for pid=7378 comm="syz.5.2015" path="/459/config/usb_gadget/g1/idProduct" dev="configfs" ino=206199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 361.054337][ T7380] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 361.079111][ T7380] rust_binder: Read failure Err(EFAULT) in pid:1953 [ 361.089024][ T7380] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 361.095653][ T7380] rust_binder: Read failure Err(EFAULT) in pid:1953 [ 361.104041][ T7380] rust_binder: 7376:7380 got transaction to invalid handle 1 [ 361.118140][ T7380] rust_binder: 7376:7380 transaction call to 0:0 failed ENOENT, code 0 size 104-24 [ 361.127975][ T1141] rust_binder: 7376: undelivered TRANSACTION_ERROR: 29201 [ 362.776162][ T1141] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 362.927652][ T1141] usb 6-1: unable to get BOS descriptor or descriptor too short [ 362.936121][ T1141] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.946303][ T1141] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.960726][ T1141] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 362.969798][ T1141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.977810][ T1141] usb 6-1: Product: syz [ 362.982008][ T1141] usb 6-1: Manufacturer: syz [ 362.986663][ T1141] usb 6-1: SerialNumber: syz [ 363.197964][ T1141] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 363.208784][ T1141] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 363.223102][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 363.240378][ T1141] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 363.250388][ T1141] usb 6-1: USB disconnect, device number 47 [ 365.872103][ T7405] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 365.872129][ T7405] rust_binder: Read failure Err(EFAULT) in pid:1556 [ 365.880612][ T7405] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 365.887260][ T7405] rust_binder: Read failure Err(EFAULT) in pid:1556 [ 365.895668][ T7405] rust_binder: 7404:7405 got transaction to invalid handle 1 [ 365.909736][ T7405] rust_binder: 7404:7405 transaction call to 0:0 failed ENOENT, code 0 size 104-24 [ 365.920761][ T1141] rust_binder: 7404: undelivered TRANSACTION_ERROR: 29201 [ 366.106091][ T314] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 366.256082][ T314] usb 6-1: Using ep0 maxpacket: 16 [ 366.262343][ T314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.272526][ T314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.282995][ T314] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.292120][ T314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.300157][ T314] usb 6-1: Product: syz [ 366.304335][ T314] usb 6-1: Manufacturer: syz [ 366.308974][ T314] usb 6-1: SerialNumber: syz [ 366.517732][ T314] usb 6-1: 0:2 : does not exist [ 366.524554][ T314] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 366.535410][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 366.535793][ T314] usb 6-1: USB disconnect, device number 48 [ 367.946108][ T46] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 368.097464][ T46] usb 7-1: unable to get BOS descriptor or descriptor too short [ 368.105879][ T46] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.116052][ T46] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.130421][ T46] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 368.139526][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.147576][ T46] usb 7-1: Product: syz [ 368.151736][ T46] usb 7-1: Manufacturer: syz [ 368.156383][ T46] usb 7-1: SerialNumber: syz [ 368.366716][ T46] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 368.377523][ T46] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 368.390720][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 368.392109][ T46] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 368.417587][ T46] usb 7-1: USB disconnect, device number 42 [ 369.616800][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.625420][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.866173][ T1141] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 370.016073][ T1141] usb 6-1: Using ep0 maxpacket: 32 [ 370.022437][ T1141] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 370.030688][ T1141] usb 6-1: config 0 has no interface number 0 [ 370.036873][ T1141] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 370.048626][ T1141] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 370.057737][ T1141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.065758][ T1141] usb 6-1: Product: syz [ 370.069958][ T1141] usb 6-1: Manufacturer: syz [ 370.074570][ T1141] usb 6-1: SerialNumber: syz [ 370.079878][ T1141] usb 6-1: config 0 descriptor?? [ 370.085156][ T7420] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 370.294475][ T7420] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 370.703628][ T1141] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 370.713834][ T1141] asix 6-1:0.188: probe with driver asix failed with error -71 [ 370.722356][ T1141] usb 6-1: USB disconnect, device number 49 SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=7 req=1982 state=1 status=67 (errno 9: Bad file descriptor) [ 371.647093][ T36] audit: type=1400 audit(2000000288.310:291): avc: denied { accept } for pid=7425 comm="syz.6.2035" path="socket:[206305]" dev="sockfs" ino=206305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.706075][ T36] audit: type=1400 audit(2000000288.330:292): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1519]" dev="pipefs" ino=1519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 371.834735][ T1198] bridge_slave_1: left allmulticast mode [ 371.837461][ T314] usb 2-1: USB disconnect, device number 9 [ 371.846472][ T1198] bridge_slave_1: left promiscuous mode [ 371.852136][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.876238][ T1198] bridge_slave_0: left allmulticast mode [ 371.881949][ T1198] bridge_slave_0: left promiscuous mode [ 371.896094][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.035778][ T1198] tipc: Left network mode [ 372.040897][ T1198] veth1_macvtap: left promiscuous mode [ 372.046579][ T1198] veth0_vlan: left promiscuous mode [ 372.318191][ T1198] bridge_slave_1: left allmulticast mode [ 372.323861][ T1198] bridge_slave_1: left promiscuous mode [ 372.329543][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.337125][ T1198] bridge_slave_0: left allmulticast mode [ 372.342775][ T1198] bridge_slave_0: left promiscuous mode [ 372.348463][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.356140][ T1198] bridge_slave_1: left allmulticast mode [ 372.361812][ T1198] bridge_slave_1: left promiscuous mode [ 372.367470][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.374880][ T1198] bridge_slave_0: left allmulticast mode [ 372.380594][ T1198] bridge_slave_0: left promiscuous mode [ 372.386269][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.559350][ T1198] veth1_macvtap: left promiscuous mode [ 372.564909][ T1198] veth0_vlan: left promiscuous mode [ 372.570580][ T1198] veth1_macvtap: left promiscuous mode [ 372.576179][ T1198] veth0_vlan: left promiscuous mode