last executing test programs: 4.116123101s ago: executing program 3 (id=135): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)={0x4, 0x0, 0xffce, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}, 0x1, 0x0, 0x0, 0x100400a1}, 0x410) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000140)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000400)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={&(0x7f0000000080), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, 0x11, 0x400, 0x70bd2b, 0x25dfdbff, {0xb}, [@typed={0x8, 0xcb, 0x0, 0x0, @uid=r7}, @nested={0x102, 0xf9, 0x0, 0x1, [@nested={0x4, 0x12a}, @generic="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"]}]}, 0x120}, 0x1, 0x0, 0x0, 0x200088c0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r10, 0x29, 0x49, 0x0, &(0x7f0000000900)) syz_ublk_setup_queues(r9, r5, 0x0, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4690, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x135, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.216369322s ago: executing program 3 (id=138): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x1, 0x38, 0x4000006, 0x81, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000200)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4113, 0x1011}, {&(0x7f0000001400)=""/200, 0xc8}, {&(0x7f0000001500)=""/280, 0x118}, {&(0x7f0000001640)=""/138, 0x8a}, {&(0x7f0000001700)=""/211, 0xd3}, {&(0x7f0000001800)=""/76, 0x4c}, {&(0x7f0000001880)=""/225, 0xe1}, {&(0x7f0000001b40)=""/133, 0x85}, {&(0x7f0000001a40)=""/62, 0x3e}], 0x9}, 0x1207}], 0x2, 0x40000042, 0x0) 3.188656815s ago: executing program 3 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000000880), 0x2000, &(0x7f0000002880)={&(0x7f0000002940)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000029c0)="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", 0x2000, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004a80)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000004b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)='<', 0x1}, {&(0x7f0000000300)="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", 0x400}], 0x2, 0x1, 0x3) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) lseek(r2, 0x2, 0x3) 3.116482443s ago: executing program 0 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000700)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000740)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000780)=0x120008c) pwritev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000880)="002145000b2cfe0b0000400600000a0000010a00000900000000000000020000ffff601003e80000000001010301", 0x2e}], 0x1, 0x0, 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000600)={[0x7]}, 0x8, 0x80800) renameat(r1, &(0x7f0000000640)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000680)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="7f0200"], 0x178) close(r2) execveat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000400)={{0x4000, 0xe000, 0xd, 0x79, 0xc, 0x3, 0xca, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0xee, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0x25000, 0xffe, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x4, 0x3, 0x4, 0xfc}, {0x6000, 0x0, 0x9, 0x9, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0xeeee8000, 0xffff1000, 0x3, 0x6, 0x2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0x3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0x4, 0x0, 0xc, 0x20, 0x0, 0x0, 0x2}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0xffff1000, 0xfffe}, 0x9df8ffff, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./tracing\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 3.059322948s ago: executing program 3 (id=142): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x14e24, 0x0, @empty, 0x3973abd4}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x14, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=' ', 0x100120}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000009c0), 0x4ff, 0x0) 3.04089123s ago: executing program 3 (id=143): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$msr(r0, &(0x7f0000000280)=""/175, 0xaf) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 2.924680782s ago: executing program 0 (id=144): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40082104, &(0x7f0000000540)={0x0, 0x1, r5, 0x6}) write$binfmt_script(r4, &(0x7f0000000280), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) getitimer(0x1, &(0x7f00000003c0)) get_robust_list(r1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = socket(0x10, 0x803, 0x0) splice(r7, 0x0, r6, &(0x7f0000000480)=0x4, 0x100000001, 0x2) 2.924276202s ago: executing program 3 (id=145): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x400, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x2) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x8e4, 0x163, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x3, 0x10, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x4, 0x2, {0xa, 0x25, 0x25, 0x1, 0x7, 0x83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7f, 0x0, 0xde, {0xa, 0x25, 0x25, 0x6, 0x80, 0x7}}}}}}}}]}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x400, 0x116) pread64(r1, &(0x7f0000000240)=""/23, 0x17, 0x1) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201010102"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000010000c2000905", @ANYRES32], 0x0) 2.056315611s ago: executing program 0 (id=147): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x1, 0x38, 0x4000006, 0x81, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000200)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4113, 0x1011}, {&(0x7f0000001400)=""/200, 0xc8}, {&(0x7f0000001500)=""/280, 0x118}, {&(0x7f0000001640)=""/138, 0x8a}, {&(0x7f0000001700)=""/211, 0xd3}, {&(0x7f0000001800)=""/76, 0x4c}, {&(0x7f0000001880)=""/225, 0xe1}, {&(0x7f0000001b40)=""/133, 0x85}, {&(0x7f0000001a40)=""/62, 0x3e}], 0x9}, 0x1207}], 0x2, 0x40000042, 0x0) 1.926249974s ago: executing program 0 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x180) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x8, 0x80000003) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x8, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000500)='./bus\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x0, 0x0, 0x2) mount(0x0, &(0x7f00000014c0)='./dev\x00', &(0x7f0000001500)='devtmpfs\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), 0x600080, &(0x7f0000000080)={[{@default_permissions}, {@uuid_on}, {@xino_auto}, {@index_on}, {@uuid_auto}, {@xino_on}, {@redirect_dir_on}, {@metacopy_on}, {@default_permissions}, {@verity_off}], [{@seclabel}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./mnt\x00', 0x5) r0 = syz_open_pts(0xffffffffffffffff, 0x21) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) mount(&(0x7f00000015c0)=@filename='./dev/sda1\x00', &(0x7f0000001600)='./mnt\x00', &(0x7f0000001640)='ext4\x00', 0x8018, 0x0) lstat(&(0x7f00000001c0)='./dev/sda1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000280)) chdir(&(0x7f0000001680)='./mnt\x00') r2 = open(&(0x7f00000016c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000001700)=[{&(0x7f0000001740)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) 1.780663469s ago: executing program 0 (id=149): syz_clone3(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac3(0x3, 0xa9, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2a, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @processing_unit={0xd, 0x24, 0x9, 0x6, 0x1, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7f, 0x0, 0xdf}]}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) r1 = openat(r0, &(0x7f0000000b00)='root/proc/sys\x00', 0x10000, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x3f) 1.76514052s ago: executing program 0 (id=150): r0 = userfaultfd(0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, 0x0, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x2f2, r0, 'id1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x40) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) userfaultfd(0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) (async) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_int(r4, 0x29, 0x43, 0x0, &(0x7f0000000140)) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x2f2, r0, 'id1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) (async) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x40) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) 1.724733054s ago: executing program 32 (id=150): r0 = userfaultfd(0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, 0x0, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x2f2, r0, 'id1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x40) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) userfaultfd(0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) (async) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_int(r4, 0x29, 0x43, 0x0, &(0x7f0000000140)) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x2f2, r0, 'id1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) (async) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x40) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) 1.344685283s ago: executing program 2 (id=152): wait4(0x0, 0x0, 0x40000000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='6', 0x1}], 0x1, 0x0, 0x30, 0x40045}}], 0x1, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000140)) ptrace$cont(0x21, r0, 0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file2\x00', 0x207) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) flock(r1, 0x5) close(0x3) capset(&(0x7f0000000a00)={0x19980330}, &(0x7f0000000a40)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mount$overlay(0x0, &(0x7f0000000a80)='./file2\x00', &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0xfffffffc, 0x40dd, 0x7aae, 0xc, r0}) syz_open_procfs(r2, &(0x7f0000000280)='attr/prev\x00') mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.08072346s ago: executing program 1 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000008c0), 0x82, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) mount$overlay(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0x201fff6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1.077350881s ago: executing program 2 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000039c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003980)={&(0x7f0000002940)={0x1018, r1, 0x101, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="bc03199074c82218cf1b9937f644e6e62b5c302faa4a2a6e4ff115374aeee5c3d3599f11d9815a3635f838feefce10a04f1f76455196b520df14b1949ae3782563320c622bb3bee5412e72425bcf923faed7ece2bd46b975fa4fb62ac307d7c0cf1966188ad239065ca70292b23eda82d18ce4be17918271f7767d7238b94c272cfc8845a70dcd2351e1d81731bebe815b717456fabc0e316bdfb0bc05d7df3d520aa1112f63f2561c29304fb20545d5578f6d51f5591aff445f40b374960adce33a12f52eabb1b8fae4ea796d19727686771eba231291b439c288ea2b625772046ea81f5cfce70c77020cc3d09eb8f709894724deddf080930768d6b0a25d019e9b8eb8f0cd348b2f6eccc3219531973cb10fd47155801082de6b5037500da07d0022797da82b3440a39adde22159e0e2beafc9ae12419a20785a010967ca4e886e92e4ac4dfcf84f0e3a6b91ba1b2f6b569df40fb4b6b89c5e4e8db9bf3f6173b9a4cd562e48cc48923df2254faa0810c303e0479f7fb8f139dff4e25d9cc53302880905c4d9b594f97521d84a5dec8687bd259dac74c38bc31a88220c3d69535d0eeb666160b669fe7ff452c8b23a09bac96fd5c38dc6f368d42276f7768fb53357b871c8ce7112d2b50d0347e7bb4e6fc189ceb0d423fd5d56efbd6d38b842919052c169c0d5cda984b2cc188f9d4096b00e83dcb04f547ba00336de357e2ed26899efd2574159d5eef48c64dcb2dec10ecaf55be5db68661aa1079662cc5fbbb39c39bd9f3f3753d45ee1e361511abe623803a8413e60c5008251d9ae2ccf8647c2e5b34c29edd91aca9df6d25baa05599e3d06a727231d4323c435c8d73385e611bc32cd86d3369545d2a0a56abda3e84e18809d97be5dca88e00b137d62b0d4dc61a1d5b4b12a38cec2f2feece4aa47d9a0bbe5b8ca458e10045070c01e93eae8d95b91b5f1fe067558b54bec403f3fcc321fd65a06202943fb298881546fd254420fcae96ef5fa8660507a471b9af26e4af33ac6e88f45edc7506f13b8d6b468969bd32504d57487ae7bef9429b7e78a0fd09a2cb57e658989ab55e1a7e2a8e0727632cc7884cb53097bb38c0d9b235ef20ad19ca19988628a9741bfecf0b73d75a614dfbf53df87bb790ce8447e75d6afca72d901c03d00c0385665bfc3ddbf35eab5b9406d89d1210ad0b7b616aa26a0d534df3155afcb6dfbf770f738be496c7292d696f0e065b9f6cd0489425957673d434f643f86cd95e040226bdf1c66f743b4de3a583aaca93aebf63c127983efa33bf62c0b2c41358c41875a778ef4269cb335c704b120cb2080db16bb87fa9d90132e14408bbf349716bfa5e40c95fb7aec1eec44124e93a6329844574f1af3c1c7bc224deadde4fc16ae49a3a4f73323a9cec05eb11e38243cf69b75fc52150a5f5fe91e5e9794ebe542f138a24dec6f87032a3472b7513ce55e9c71527ea3ff3d25354ca7414a7f0b69c064549526c17be46f57a78caa71528f2fad7986ee4aca113c16429df5f4324f79d5d1373f709f3f828572091850d697fb6fd1619be5390935e171bfaf5788ff8a1fb099f8f8178db51f4a3b2f49add5320502b3a5524dfa3cb191e7fb1bc32cbf3ddf9214067c7ba2399d67b0f6315be1ce181f0e388115a43bdb8c865766bb7c84d45e373bcc29d047d6c93708e8eb8cb416ccfbcec4d7520b28765693f7b460fdcd442c6a17e764a9855e60d901d4628e3325159912ab7cb7ccf359a72494481934b1bbc87579e65a1cacd0e3e9fb58917d44b318dc73144e6eb66fa8e55a89855dd6ada6c0515def94b64ce0d725813105d56dc3c98e2453776ee1d9bd39ce6fc5948d6ee8ab1b30d30892c5c72704b2d39e8860886374b4446fdc1a850b65e4161022c170cee7b19df119e5885b066160e108da9c54bee70ffcb56e327d79a44f44d8ceb2b18e00347a3b63e3969aad7da3a3ca94b9273e82d4d370099ac6ea43785aba310d4e1c394c61080307ab35138f5c86df7e3be0395ea0065cf01ebe8d4d0ac4f2c2822d0dfd97570f1cd227aa74346b1bfe7f7f1243c52f79df244bfd823e8ea55bc73271e16c239781f6b954348170b97b26eb771b3ea0fc6cb37ef42b68ca774c04b663752d459e60a6c29d2454f7bfa285129b5238116a4372e786a4e0674ea478c56f3ad6ef83fc161180fa66c1d5d492e9afc94d639f7d0a8ec6004f5ae1b6d237a20b14147202911d89b856552a0af9050eb805a87311cba8aa07c2312f48c225d27d931910208062362c1b812159ed454832ddfe277994a9af4c518fdec788309f60389bcdcfeecb22f34315f3e8fe36427efa47cda4fbee42a4641fae0410cecb2c4625003848407131c324cc6e2391b92f4194577ddc7c6c53fffcc66203aeea52af769d5760f020283343ce27a3f3ecbd542056993b82c0a36d4cf8d11dc9bb428d7305abe527fea3d58c89e20c591a6cfc2f5057bed64c693afeeb5cb5c45327126ffcdd3bcc9e0363eadf1b88df43e9cd94011ae57b20d46021208fe95bdcd25a21fdf7f888b48172a53ea0afa03cc6cdcea4e4f9e356ad657da93a7e17470fa24f37020b3db3dc9a61055e6d9f2bfcb238a8bb1cc6cf4580cbce116515b1de9beea3cca348ec5e209ea5449631db4125787399a6de38e4d3dcd37e4982fc9513b523a9aa997e1d0f1b1d021b009f813af6d49b3fb360b0622cc00f18d23ed444c26ed156ce8dcb05ec8322b8553da846cb30661d5f5093f333f3b31fc182d214c9ef5dde3d5d742d9b50854a12aa9fc1e1f417fcb034f8f6e6f55c27d86e282038b6f047b925646e01052010a09d8eb3960dcb9628a0585d079ad7fe45a67c740037fb8cd265a9f01a7c273cef22f32e6e601a9cc81aa8c756ad614995ddda40dcb1d3428ff054407c1fa00ffc9ea101d3012242f50bf210170005d32082a8e9654f9a9d4e17d71d1ff9cf25f53385b09fbceb8100691ca612ae0915d114584150994f7dbaea233d406e53230067eaf0053216b329eccdc56e421d0a066bb131a97589ab27d89fa5a8b06567f84b4af8b3322d377199cd77f1d1f03abd0bb495adf866b9c96cb6058d37b914278a437db7d3397a01d550fd343445488bd2d1c157ecb1c8538b6c15148ce1f968f45fd03c4384078e89ae040b63d9b6e973e33a8eb0e3e21ea4780deacef49369576970eedcb1df895d8a841c0616eedbcde3b4b3cf560b0759637d2a75be68b774e710cc7e1478f92564a5b77c80d52642d169ccc6c10abdf14dec957d5155365232fa9775ed5603335da1394d3d69ca3f2c14067fe64a4099e07f99fa0c5eed8d7fd73abd0e71eab752d6097baf94791d45f5ac7df7b81f03cc07852d37e958bbe2ec436b7ecb9e8f4a455dcf58af00d2c20cedfd2a9e67ab5f72030ef2be46cc397fd68d6e6d01d43e1d4fe22f7daf08ee9930b53e6beb4d342f7d4f3f8f65b9beec3e69152c880eec81d49e9ccfc605253121837782675ff5eea379cb7623cdf84a34f0938f00385e48e892d663f6fd0714f3e5ee1d85ab99c9210e7eda556aaed90f29ef9743ce06a4cef9e7c6d13e9b2bdec033806d556277073fbe6b2c8314afe519ecb65c9b4c9770de9580ea8989b0002a5d51d56e5300f63cc69280c603b35ee3c2713fb5e733e1f2a529c35e736ab188bca67c67a15fa7595ede0759f3c222d2150fea99f7e71970f852046a027f0e354ae0d693a86d5230b89eb76c4cb455c71abfd2c8cb22b4e777ccc633fcbe9e16ad0ebbf3cfc665fdde544da2d4950d103f20a95abb777308e11340eeb69fcf702bbd84d9f15d161f0825b034b88d551c363ed408f446de866411a4bdfb0e868ee7cf17ab4b2cf028c29c37b1f62b643737a16f34246431c083d2e1d5ffa2bfbe9cba68a0dd07f84dfaceae40f6bb47211d5fb753228b9b12483ce609005cd276e2b803f9d493db870e0e5015bb52ff183a3556bd5397ac4c884a3efe456b9c96e24041c8b0602451d8fd744a5ac5f38431ebdb84725f63cff2b0066401916441c6e115b7c3d202d6850e802cce61476268460306ebbe65bd4839abeb0ea79279dd1d684e16215cd7d8afc7eb7bcefd22ae43063a395fe9d206dfe188d6187a16d2d7b01fb460a0063cad1ff92e93348b6db04119940814a367a9947ab7db14f35a80b989d954718067cfa0bfc6f05cdee21674d7affbd9c6b38142f629650b4dd45541a10f7a731570bdcc86aa3e790459855f61f1a9fc48d7c26ff9bde4288ed59f4dcfa72872247fca9e1b55d5302e2b9d8ea6bd2dea28cbaad79cd92670858c09adeb839fdadba1adf5a4f63ec5e8a36ac7f07ba9327757d5147547ddd5769ba2954cacf61078c3ac183748795c2f25e278a01099f3fab4cefb7c5f4eabe2a2b796744d946de2aa471bb53e11ba54d809b01c5c91cce99c574d1b57ad227ae3d59c667ef3fe242974bdbf9af4c07f2f3ab8b5e586fff257c339509c7bf85a7483b25a3b2f9bb06587a6e43c34fc3d88118d98539653452f000b9363df1bf131e918e3793b6272816e03873cdaad2a03441ab070f3c569d26b39a23fd526a6beb8aa1c44022c92656aee8eab7f2c260da61d0cc4c461eae237f1c8454855261315782f2856a7da9d2564448ecbf468ae7ff908461b305437bfb954ba25465bebb0778004d44cf24d7cde902a2f43a6c46011a23161263fec456bf1b27cccacb8ba16131d6bd1f4148e870aa1ab140c170ad6bab0deb7944aa58117d90838f8ea8d8356a809e7eec9630ef137a76fc941590ab9ffe9a6b51e90511b1111879d0ddc0285b03719dbf8ec6d086e57c65cb03993effd2a40866f6873022a368aa3bf7102691609d8d7f0cc0e9316900029464f0724b99eff8d616ceba775a076c31e9ec9506b566cd954b02cdaf5aa42833835f004a1def9aaac2c59112ecf538b486b9330d1cdca9e199a57b4713df8d4eac5f3e37c2ed4327246f3c4a72696fffebec6d26d64ca9e9801301f5c7ad3c2d7552e0d373df90e84319f1b1fa3bf4ee86709d35db89b9823d77f7f45170328726087277bde9aff74907208f5367c17fc0601211ca57697fdb8cc152f2c812632171c07bc19b3a8b6848745eec939eaab64d97ee22302365ee9c0d7ed09376496793440839231b298a0ffe718a72cfbd3ef448e59dac4486214344859d6f92a08d4cc7d2ee2af70b10c62b5e543cd61fe458540e60da30332879fbc7c8666b086381213020a048da5eb486de2c272a2e0dcc355b92681a9d57c2129b930f54fcdcfba25e1373f0831a1cb848817252559d49b6ef7a003231e69ebf405ef4e83c5012179b7d1c0226152ebf33069976c579c1f2e1317df3aba182a2ff9a3631f118b561968c0a9fa9ea39493fe776b05acef38a74899af7a7d87b9dcf5cccec29303177ac623226e045d7abe556bbdc2e11c7dcc29a771ff69621f1e88225c89bd1a13c6e57e9058ceee81115e8552943baa46445e64f350cd1bc81610e331e869a56d2099137739f5173e7bfc346522150dfa3914cf857f2e77302a175b4ef15ce49175ef7f1ab08ece05e6c42683b1e51ee8e9e9ffd6c3fe38170360fa50e56cd5ff361e9da2eea9b49f79c4b57f503e098fba1ce9f9cdf0b4dd8014518cb4fbeb96c33f60db9f392697333b41ce022bcf546a5dfb1338f59eaa39dc4e74d65fecc498993727728b926c162b90930ef4c76a378390a9b1ee6fe601843193debb5fc1d8cd12a440a6a5c0a0d06f6782bddadcc26fd499fdaacb7e8a3e41fba43a"}]}, 0x1018}}, 0x9725ba798135442) (async) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) (async) read$FUSE(r3, &(0x7f0000000900)={0x2020}, 0xd484acc5) 1.039410254s ago: executing program 1 (id=155): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00004aa000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x4, 0x0, [{0x29f, 0x0, 0x3}, {0x275, 0x0, 0x5e0}, {0x587, 0x0, 0x5}, {0xb37, 0x0, 0xffff}]}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000240)=@req3={0x7, 0x3a, 0x1000, 0x3a, 0x7ff, 0xcae, 0xfffff800}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x6e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x40) sendto$inet(r6, &(0x7f0000000400)="e8", 0x1, 0x32040014, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) getpid() r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) syz_clone(0xb10e7180, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DM_DEV_CREATE(r8, 0xc138fd03, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) 1.035498565s ago: executing program 4 (id=151): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x14, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=' ', 0x100120}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000009c0), 0x4ff, 0x0) 1.001070418s ago: executing program 2 (id=156): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x1, 0x38, 0x4000006, 0x81, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000200)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4113, 0x1011}, {&(0x7f0000001400)=""/200, 0xc8}, {&(0x7f0000001500)=""/280, 0x118}, {&(0x7f0000001640)=""/138, 0x8a}, {&(0x7f0000001700)=""/211, 0xd3}, {&(0x7f0000001800)=""/76, 0x4c}, {&(0x7f0000001880)=""/225, 0xe1}, {&(0x7f0000001b40)=""/133, 0x85}, {&(0x7f0000001a40)=""/62, 0x3e}], 0x9}, 0x1207}], 0x2, 0x40000042, 0x0) 1.000033078s ago: executing program 4 (id=157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5a4, 0x1700, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x15, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x20, 0xd, 0xb9, {0xb9, 0xb, "1eae8d3f504fee8e5287736b7e50d04bacd701513e87dc5e92cf1b0a0de41be83bd6de0b9f377aa573dacb5faa452ffb7ecbc305a8a1cfa68501ef51896125428a9f600388a08599d2ed4ad051b2afad7ca86d98a6b420843992a6d86e8605c74330c639e654ecd806d444e1a8e0feaca53ef612e026b1a572affb0c445c4c7465fcb680aa63094efa886ca5665f9c8c662ce434f919f3499db0c047680eb9818b0cc62b072025f8bdd3949ddee7fa20823f5fd9647a1f"}}, &(0x7f0000000540)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "dc08a4cdcd3d3449453d17313e873e079249ef6e12af0881c17943ba1ef869d92f01e7ae1f93fbe5db565036e457325f744f012a98750c8e17149e5d17753100c4c6480e0095fd0f6d1d35399a8467f684f4ca5f79601e16051922231982f444ec876dd2aec864e843264436bf62a2bf7d9e94ad0c0a53e6df891af368fd93dcc9a958a9ccbf765ff5b23d6af8e6bdc1c15a1c0029d5d1782058e1e8debfa690eb4634d789dec3c31663f6eb64f7a72ee820e9e1217f0d3a60d1abf92f7d7b7ec2bae6196ae4b78cdb11233e987cf663fd7d551b00c987"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x40, 0x16, 0xec, "319e79d5701529c68a413b65de39389c6b4ea0a06a49b0fca0b93689e73e53400331c662e80554a9757dae1532dd715c35fac1b92dc43d378df4128dafcc72694ef54d98cf854c0b3567c3bfdf67e40de811fde086d3b5b6b1b588071ee1207fa03ea228dd150ba332839fd573934103fbc86bf6db7dd1721cbff2ef5de509604f62cbd20e3b0ac93b714ea0aad588f434afc9fcd76f2e5c41929e4e69cbaa289329d5545a70a685dfee982fcba3e5fe3423e49d0894c1aefb50376e0b3b557c3dd3c7db770ec5394a45c9536599fe2afa07073307d1e925dd0c1655bb287039d0afd295aecb4ffcca7a2a53"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000440)={0x0, 0x8, 0xffffff7a, 0xfc}, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)={0x40, 0x5, 0x5, "ad11b1f8d8"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0}, 0x0) 944.515684ms ago: executing program 1 (id=158): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8000, 0x49, 0x3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private0, @local, 0x3, 0xe}}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000100)=@vmx={0x100, 0x0, 0x2080, {0xf000, 0x10000, {}, 0x0, 0x6}, {"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", "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"}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002180)={0x0, 0x0, {0xfffffffffffffffb, @struct={0x4, 0x7}, 0x0, 0x200, 0x0, 0x44116a5c, 0x7, 0x1, 0x23, @usage=0x9, 0x2, 0x4a8f, [0xffffffffffffd17a, 0x8, 0x1, 0xddd, 0x4fb, 0x9]}, {0x5, @usage=0xffffffff, 0x0, 0xee, 0x6, 0x6680000000000, 0x1, 0x5, 0x0, @struct={0x620e070f, 0x80000000}, 0x60d, 0xc9, [0x6636353f, 0xedd, 0x0, 0x1, 0x5, 0x401]}, {0x4, @struct={0x1, 0xa}, 0x0, 0x8, 0x9, 0x101, 0x4, 0x8, 0xc6, @usage=0x42, 0x3, 0x5, [0x2, 0x401, 0x5, 0x7b, 0x101]}, {0x80, 0x2d, 0xa372}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002580)={r1, 0x9, 0x3f9}) rt_sigprocmask(0x0, &(0x7f0000002980)={[0xfffffffffffff435]}, &(0x7f00000029c0), 0x8) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000002a00)={0x43, 0x2, 0x2}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000002a40)={0x0, 0x4, 0x0, 0x9, @vifc_lcl_addr=@remote, @multicast2}, 0x10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000002a80)) ioctl$BLKRASET(r0, 0x1262, &(0x7f0000002ac0)=0x7f) pselect6(0x40, &(0x7f0000002b00)={0x1, 0x9, 0x5, 0x5, 0x2f7, 0x6, 0x0, 0x5}, &(0x7f0000002b40)={0x401, 0x100, 0x0, 0xe06, 0x1, 0x8a7b, 0x42c, 0xb5}, &(0x7f0000002b80)={0xd6e, 0x5, 0x5, 0x6, 0xb, 0x7, 0x150, 0x4}, &(0x7f0000002bc0), &(0x7f0000002c40)={&(0x7f0000002c00)={[0x6]}, 0x8}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000002cc0)={'sit0\x00', &(0x7f0000002c80)={@private=0xa010102, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000002d40), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002d80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002e40)={'syztnl2\x00', &(0x7f0000002dc0)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0xfe, 0x1ff, 0x1, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x8, 0x7, 0x3de4488}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002ec0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002f80)={'syztnl2\x00', &(0x7f0000002f00)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x2, 0xff, 0x84, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x8, 0xb209, 0x309fe86e}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002fc0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000003000)={@empty, 0x0}, &(0x7f0000003040)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000003080)={@broadcast, @broadcast, 0x0}, &(0x7f00000030c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003480)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003440)={&(0x7f0000003100)={0x330, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x118, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xffff, 0xba, 0x7, 0x5}, {0x4, 0x9, 0x9, 0x4eb}, {0x6, 0x7, 0xff, 0x7ff}, {0x6b, 0x40, 0x4, 0x9781}, {0x401, 0x81, 0x7, 0x800}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_INFO(r12, 0x29, 0x40, &(0x7f00000034c0)={'security\x00', 0x0, [0x3, 0x0, 0x90, 0xde3, 0x9]}, &(0x7f0000003540)=0x54) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) sendmsg$nl_generic(r0, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x54, 0x30, 0x400, 0x70bd2c, 0x25dfdbff, {0x5}, [@generic="cc24412d0c9cd1de08518e06d71bb9f4b5d162436798ebe17c6dfcd59d4b7f38a673eab2ae65be6a0d7d0f1ac434047a62e8d8bc2c5de8831b5156c994250ca2"]}, 0x54}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f00000036c0), 0x202c40, 0x0) ioctl$PPPIOCATTACH(r13, 0x4004743d, &(0x7f0000003700)=0x3) 943.689724ms ago: executing program 2 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000379000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01725900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x65}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000480)={{0xe000, 0x1000, 0xa, 0xff, 0x4, 0x3, 0x3b, 0x24, 0x18, 0x9, 0x10, 0x5}, {0x58000, 0x1000, 0xb, 0x64, 0x6, 0x10, 0x81, 0x29, 0x2, 0x3, 0x0, 0x2}, {0xeeef0000, 0x5000, 0x0, 0x0, 0x53, 0x6, 0x0, 0x54, 0x4, 0x3, 0x2b, 0x81}, {0x21000, 0xd000, 0x8, 0xee, 0x75, 0x7, 0x6, 0xc, 0x6, 0xff, 0xf0, 0x1b}, {0x4000, 0xffffffff, 0x8, 0x1, 0x7, 0x6, 0x0, 0x2, 0xf0, 0x6, 0x2, 0xe0}, {0x3000, 0x80a0000, 0xd, 0x3, 0x9, 0xb3, 0x8, 0xe, 0xfb, 0x9, 0x4, 0x80}, {0x8000000, 0x0, 0x8, 0x2, 0x3, 0xc9, 0x2, 0x1, 0x1, 0x2, 0x9, 0xb}, {0x25000, 0x40000, 0xa, 0x25, 0xc, 0xc, 0xd6, 0xb7, 0xc, 0x4, 0x0, 0x8}, {0x7000, 0x2}, {0x25000, 0x101}, 0x80010007, 0x0, 0x54000, 0x110, 0x9, 0xc000, 0xffffffff, [0x7, 0x5, 0x1, 0xf97]}) (async) mmap$IORING_OFF_PBUF_RING(0x0, 0x32, 0xc, 0x4000010, 0xffffffffffffffff, 0x8271452f) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0x4}, {r5, 0x90}], 0x2, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000680)={0x1, 0x1, 0x7, 0x5}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 888.62318ms ago: executing program 1 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, r1, 0xdcacf000) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x4e20, 0x80a, @empty, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000280)={[{0x659, 0x6aa, 0x3, 0x9, 0xe, 0x8, 0x1, 0x7f, 0x3, 0x4, 0x12, 0x5, 0x1}, {0x0, 0xa, 0x81, 0x9, 0x2, 0x7, 0x87, 0x6, 0x10, 0x1, 0x10, 0x9, 0x101}, {0x4, 0x0, 0xf9, 0x92, 0x9, 0x3, 0xff, 0xc0, 0x80, 0x4, 0x4, 0x40, 0x7}], 0xa9}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 594.44506ms ago: executing program 1 (id=161): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x860100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000d80)=0x5) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, 0x0, &(0x7f0000000d00)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e40)=[@text64={0x40, &(0x7f0000000e80)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000f00)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000200)={{0x0, 0x2000, 0x3, 0x6}, 'syz0\x00', 0x38}) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) r10 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r10) (async) request_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000680)='asymmetric\x00', &(0x7f00000006c0)=@keyring={'key_or_keyring:', r10}) add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x559, r9) (async) add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000740)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe66747b96fa68029be6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b6091e5893532f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d0b041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38e868905b6403b70ae3d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f262", 0x559, r9) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000280)={{0x0, 0xea60}, 0x12, 0x207, 0x100000a}, 0x18) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000300)=0x30) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000300)=0x30) ioctl$int_in(r4, 0x5421, &(0x7f0000000cc0)) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x3eb002, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x488, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 371.264732ms ago: executing program 1 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='ramfs\x00', 0x91, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0), 0x64) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000540)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000600)={'bridge0\x00', &(0x7f0000000640)=@ethtool_wolinfo={0x5, 0x0, 0x9, "c20e045fddca"}}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="0f20c035000000200f22c0b9b1030000b8f0ffffffbaffffff7f0f3066baf80cb8bb0e708bef66bafc0cb044ee440f20c03507000000440f22c0410f185e4666b86a008ed8440f0748b80d180000000000000f23c00f21f835010002000f23f8c4217d29d9a20068000000000000", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x2}) timer_create(0x0, &(0x7f0000000380)={0x0, 0x24, 0x2, @thr={&(0x7f0000000200)="260c6e45e85f141da77f604be15411bbb087c30b9890d1f023d14bf4df5c1bb50de2afaf1b5bd7e1375915042646b34bc38f8a2b69c5a3a8c120b9479aa7eef4a8b4d5742068618cf7d2d56a54d60b92e4b1e96b02b9764ebe41af7a7e4a3034fc827d8187a0f7ab878fc6ba070c2a58bcf9debcad47d8a9d86b6eebf99af46877a033fd6f150d6d99238de04e3fc66f2c6d78455ea596fa90250bc0cb33f5e6a9a4e0e1e70e4e04d99c68b1664cb110ebfd2c4d8bd438165c293a3f", &(0x7f00000002c0)="3bedfdec360db10b46d77a870c310fa8119d478e82a97901890836039a9448d02b3583375e2fa96adc4deb61f885b619742f1acac8e295a2c1880cf3e05c02b636b00571bed893ad9fedd1f45bec89b5eaf29aad6331d2360a16db4994838e4525efc0c51b3839262048f5dc7886da52913e591865940b0c761145f2e20abfd0966b2f6ba34e8ddce4df5ee2b44baec2647ef3b4c009"}}, &(0x7f00000003c0)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$KVM_RUN(r9, 0xae80, 0x0) 44.529036ms ago: executing program 2 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="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", 0x1bf}, {&(0x7f0000000600)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd50", 0x14c}, {&(0x7f0000000780)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444", 0x1d}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000007c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000800)=[{{&(0x7f0000000840)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/102, 0x365}, {&(0x7f00000009c0)=""/76, 0x14c}, {&(0x7f0000000a40)=""/4096, 0x197}, {&(0x7f0000001a40)=""/92, 0x645}, {&(0x7f0000001ac0)=""/73, 0x1b}, {&(0x7f0000001b40)=""/77, 0x188}, {&(0x7f0000001bc0)=""/154, 0x2c}, {&(0x7f0000001c80)=""/17, 0x1d8}], 0x21, &(0x7f0000001cc0)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000001d80)={0x77359400}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000400)={0x0, 0x2}) 0s ago: executing program 2 (id=164): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000e80), 0x100, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000f00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002080)=0x40) r5 = getpgrp(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250b00000008000100", @ANYRES32=r6], 0x1c}}, 0x0) setpgid(r3, r5) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x20200, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0x2880, 0x0, 0x68, 'snapshot\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'PO', 0x20, '256', ' 1 discard_zeroes_cow'}}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 26.345448][ T36] audit: type=1400 audit(1794185491.170:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.368562][ T36] audit: type=1400 audit(1794185491.200:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.372036][ T287] cgroup: Unknown subsys name 'net' [ 26.396433][ T36] audit: type=1400 audit(1794185491.230:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.397015][ T287] cgroup: Unknown subsys name 'devices' [ 26.502619][ T287] cgroup: Unknown subsys name 'hugetlb' [ 26.508256][ T287] cgroup: Unknown subsys name 'rlimit' [ 26.664094][ T36] audit: type=1400 audit(1794185491.490:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.687750][ T36] audit: type=1400 audit(1794185491.490:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.712608][ T36] audit: type=1400 audit(1794185491.490:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.737927][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.746758][ T36] audit: type=1400 audit(1794185491.570:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.772293][ T36] audit: type=1400 audit(1794185491.570:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.805221][ T36] audit: type=1400 audit(1794185491.630:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.806468][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.831270][ T36] audit: type=1400 audit(1794185491.630:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.751156][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.758304][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.765641][ T297] bridge_slave_0: entered allmulticast mode [ 27.772102][ T297] bridge_slave_0: entered promiscuous mode [ 27.779674][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.786800][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.794050][ T297] bridge_slave_1: entered allmulticast mode [ 27.800441][ T297] bridge_slave_1: entered promiscuous mode [ 27.822460][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.829574][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.836789][ T296] bridge_slave_0: entered allmulticast mode [ 27.843070][ T296] bridge_slave_0: entered promiscuous mode [ 27.860367][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.867541][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.874831][ T296] bridge_slave_1: entered allmulticast mode [ 27.881213][ T296] bridge_slave_1: entered promiscuous mode [ 27.923894][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.931065][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.938323][ T295] bridge_slave_0: entered allmulticast mode [ 27.944730][ T295] bridge_slave_0: entered promiscuous mode [ 27.951422][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.958488][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.965622][ T295] bridge_slave_1: entered allmulticast mode [ 27.972004][ T295] bridge_slave_1: entered promiscuous mode [ 28.002364][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.009449][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.016629][ T294] bridge_slave_0: entered allmulticast mode [ 28.022955][ T294] bridge_slave_0: entered promiscuous mode [ 28.032430][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.039579][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.046706][ T294] bridge_slave_1: entered allmulticast mode [ 28.053020][ T294] bridge_slave_1: entered promiscuous mode [ 28.160907][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.167996][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.175369][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.182436][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.209519][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.216721][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.224045][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.231136][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.268924][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.276029][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.283367][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.290423][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.306663][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.314298][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.322407][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.329644][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.336951][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.344474][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.359275][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.366457][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.374306][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.381387][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.427435][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.434551][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.448749][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.455852][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.463614][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.470725][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.495522][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.502590][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.510278][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.517336][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.528584][ T297] veth0_vlan: entered promiscuous mode [ 28.541996][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.549087][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.579630][ T297] veth1_macvtap: entered promiscuous mode [ 28.603986][ T294] veth0_vlan: entered promiscuous mode [ 28.616474][ T296] veth0_vlan: entered promiscuous mode [ 28.638753][ T294] veth1_macvtap: entered promiscuous mode [ 28.654160][ T296] veth1_macvtap: entered promiscuous mode [ 28.662821][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.701343][ T295] veth0_vlan: entered promiscuous mode [ 28.740981][ T295] veth1_macvtap: entered promiscuous mode [ 28.792455][ T327] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 28.800817][ T329] syz.1.6: attempt to access beyond end of device [ 28.800817][ T329] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 28.812790][ T327] overlayfs: conflicting lowerdir path [ 28.825218][ T329] EXT4-fs (loop1): unable to read superblock [ 28.868752][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.911145][ T336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 28.948194][ T336] macsec0: entered promiscuous mode [ 28.964864][ T336] macsec0: entered allmulticast mode [ 28.980078][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.022410][ T347] kvm: kvm [346]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 29.032561][ T347] kvm: kvm [346]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 29.141444][ T67] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.149039][ T150] dummy0: entered promiscuous mode [ 29.159880][ T67] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 29.159921][ T150] dummy0: entered allmulticast mode [ 29.171358][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.203861][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.258839][ T369] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 29.363020][ T310] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 29.372230][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.380305][ T310] usb 2-1: Product: syz [ 29.385099][ T310] usb 2-1: Manufacturer: syz [ 29.389751][ T310] usb 2-1: SerialNumber: syz [ 29.597554][ T338] x_tables: duplicate entry at hook 2 [ 29.603678][ T338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.609070][ T67] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 29.613070][ T338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.630366][ T67] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 29.643400][ T67] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0001/input/input5 [ 29.754573][ T381] can0: slcan on ptm0. [ 29.790650][ T381] can0 (unregistered): slcan off ptm0. [ 29.815126][ T388] netlink: 'syz.2.15': attribute type 8 has an invalid length. [ 29.954242][ T394] mmap: syz.3.17 (394): VmData 29069312 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 29.969104][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 29.983118][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 29.992809][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 30.002064][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 30.014846][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 30.024358][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 30.033842][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 30.046295][ T394] kvm: kvm [393]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 30.170722][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.300290][ T67] usb 1-1: USB disconnect, device number 2 [ 30.330287][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 30.336666][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.348407][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.360374][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.373736][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.383497][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.396855][ T31] usb 3-1: config 0 descriptor?? [ 30.808807][ T398] Bluetooth: ISO socket layer initialized [ 30.817633][ T31] microsoft 0003:045E:07DA.0002: item fetching failed at offset 13/34 [ 30.826514][ T424] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 30.833414][ T31] microsoft 0003:045E:07DA.0002: parse failed [ 30.840619][ T31] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 31.070090][ T67] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 31.127299][ T310] rtl8150 2-1:1.0: couldn't reset the device [ 31.133575][ T310] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 31.155717][ T427] FAULT_INJECTION: forcing a failure. [ 31.155717][ T427] name failslab, interval 1, probability 0, space 0, times 1 [ 31.168452][ T427] CPU: 0 UID: 0 PID: 427 Comm: syz.3.24 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 31.168477][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 31.168493][ T427] Call Trace: [ 31.168499][ T427] [ 31.168506][ T427] __dump_stack+0x21/0x30 [ 31.168525][ T427] dump_stack_lvl+0x140/0x1c0 [ 31.168540][ T427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.168556][ T427] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 31.168583][ T427] dump_stack+0x19/0x20 [ 31.168596][ T427] should_fail_ex+0x3c2/0x510 [ 31.168612][ T427] should_failslab+0xac/0x100 [ 31.168629][ T427] kmem_cache_alloc_noprof+0x42/0x410 [ 31.168654][ T427] ? __kernfs_new_node+0xf1/0x740 [ 31.168672][ T427] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 31.168691][ T427] __kernfs_new_node+0xf1/0x740 [ 31.168714][ T427] ? __kasan_check_write+0x18/0x20 [ 31.168738][ T427] ? kernfs_new_node+0x280/0x280 [ 31.168755][ T427] ? down_write+0xee/0x2b0 [ 31.168778][ T427] ? __cfi_down_write+0x10/0x10 [ 31.168800][ T427] ? __kasan_check_write+0x18/0x20 [ 31.168824][ T427] ? up_write+0x66/0x280 [ 31.168843][ T427] ? kernfs_activate+0x1ee/0x200 [ 31.168861][ T427] kernfs_new_node+0x154/0x280 [ 31.168879][ T427] __kernfs_create_file+0x52/0x280 [ 31.168900][ T427] sysfs_add_file_mode_ns+0x1d2/0x280 [ 31.168924][ T427] internal_create_group+0x66c/0xe70 [ 31.168941][ T427] ? sysfs_create_group+0x40/0x40 [ 31.168957][ T427] ? kernfs_remove_by_name_ns+0x146/0x180 [ 31.168977][ T427] sysfs_create_group+0x23/0x40 [ 31.168992][ T427] sysfs_slab_add+0x158/0x280 [ 31.169007][ T427] do_kmem_cache_create+0x40a/0x550 [ 31.169023][ T427] __kmem_cache_create_args+0x16f/0x310 [ 31.169048][ T427] copy_pid_ns+0x47a/0xa60 [ 31.169066][ T427] ? __cfi_copy_pid_ns+0x10/0x10 [ 31.169084][ T427] ? __kasan_check_write+0x18/0x20 [ 31.169108][ T427] create_new_namespaces+0x275/0x6f0 [ 31.169125][ T427] unshare_nsproxy_namespaces+0x124/0x180 [ 31.169143][ T427] ksys_unshare+0x4f9/0x920 [ 31.169156][ T427] ? fput+0x1a4/0x230 [ 31.169175][ T427] ? __cfi_ksys_unshare+0x10/0x10 [ 31.169189][ T427] ? __kasan_check_write+0x18/0x20 [ 31.169238][ T427] __x64_sys_unshare+0x3c/0x50 [ 31.169259][ T427] x64_sys_call+0x2998/0x2ee0 [ 31.169283][ T427] do_syscall_64+0x57/0xf0 [ 31.169300][ T427] ? clear_bhb_loop+0x50/0xa0 [ 31.169325][ T427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.169347][ T427] RIP: 0033:0x7fe34cf9fb19 [ 31.169367][ T427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.169380][ T427] RSP: 002b:00007fe34debb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 31.169400][ T427] RAX: ffffffffffffffda RBX: 00007fe34d225fa0 RCX: 00007fe34cf9fb19 [ 31.169413][ T427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 31.169424][ T427] RBP: 00007fe34d037b70 R08: 0000000000000000 R09: 0000000000000000 [ 31.169435][ T427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.169445][ T427] R13: 00007fe34d226038 R14: 00007fe34d225fa0 R15: 00007fffb279f1c8 [ 31.169459][ T427] [ 31.169561][ T427] __kmem_cache_create_args(pid_3) failed with error -12 [ 31.450112][ T310] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 31.456690][ T67] usb 1-1: device descriptor read/64, error -71 [ 31.464316][ T427] CPU: 1 UID: 0 PID: 427 Comm: syz.3.24 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 31.464403][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 31.464447][ T427] Call Trace: [ 31.464461][ T427] [ 31.464490][ T427] __dump_stack+0x21/0x30 [ 31.464586][ T427] dump_stack_lvl+0x140/0x1c0 [ 31.464641][ T427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.464698][ T427] ? mutex_unlock+0x90/0x240 [ 31.464775][ T427] ? __cfi_mutex_unlock+0x10/0x10 [ 31.464853][ T427] dump_stack+0x19/0x20 [ 31.464908][ T427] __kmem_cache_create_args+0x244/0x310 [ 31.465006][ T427] copy_pid_ns+0x47a/0xa60 [ 31.465080][ T427] ? __cfi_copy_pid_ns+0x10/0x10 [ 31.465150][ T427] ? __kasan_check_write+0x18/0x20 [ 31.465254][ T427] create_new_namespaces+0x275/0x6f0 [ 31.465319][ T427] unshare_nsproxy_namespaces+0x124/0x180 [ 31.465378][ T427] ksys_unshare+0x4f9/0x920 [ 31.465447][ T427] ? fput+0x1a4/0x230 [ 31.465499][ T427] ? __cfi_ksys_unshare+0x10/0x10 [ 31.465555][ T427] ? __kasan_check_write+0x18/0x20 [ 31.465649][ T427] __x64_sys_unshare+0x3c/0x50 [ 31.465695][ T427] x64_sys_call+0x2998/0x2ee0 [ 31.465759][ T427] do_syscall_64+0x57/0xf0 [ 31.465822][ T427] ? clear_bhb_loop+0x50/0xa0 [ 31.465908][ T427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.465986][ T427] RIP: 0033:0x7fe34cf9fb19 [ 31.466047][ T427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.466100][ T427] RSP: 002b:00007fe34debb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 31.466164][ T427] RAX: ffffffffffffffda RBX: 00007fe34d225fa0 RCX: 00007fe34cf9fb19 [ 31.466218][ T427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 31.466260][ T427] RBP: 00007fe34d037b70 R08: 0000000000000000 R09: 0000000000000000 [ 31.466302][ T427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.466336][ T427] R13: 00007fe34d226038 R14: 00007fe34d225fa0 R15: 00007fffb279f1c8 [ 31.466392][ T427] [ 31.634106][ T310] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 31.718523][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.726653][ T310] usb 4-1: Product: syz [ 31.730914][ T310] usb 4-1: Manufacturer: syz [ 31.735534][ T310] usb 4-1: SerialNumber: syz [ 31.880065][ T67] usb 1-1: device descriptor read/64, error -71 [ 31.917267][ T9] usb 2-1: USB disconnect, device number 2 [ 31.940188][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 31.940206][ T36] audit: type=1400 audit(1794185496.770:155): avc: denied { create } for pid=429 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.966242][ T36] audit: type=1400 audit(1794185496.770:156): avc: denied { bind } for pid=429 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.985849][ T36] audit: type=1400 audit(1794185496.770:157): avc: denied { listen } for pid=429 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.006111][ T36] audit: type=1400 audit(1794185496.770:158): avc: denied { connect } for pid=429 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.025578][ T36] audit: type=1400 audit(1794185496.780:159): avc: denied { append } for pid=429 comm="syz.1.25" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.048142][ T36] audit: type=1400 audit(1794185496.780:160): avc: denied { create } for pid=429 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.140056][ T67] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.198765][ T310] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 32.280122][ T67] usb 1-1: device descriptor read/64, error -71 [ 32.520110][ T67] usb 1-1: device descriptor read/64, error -71 [ 32.549469][ T36] audit: type=1400 audit(1794185497.370:161): avc: denied { read write } for pid=426 comm="syz.3.24" name="lp0" dev="devtmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 32.558801][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.573846][ T36] audit: type=1400 audit(1794185497.370:162): avc: denied { open } for pid=426 comm="syz.3.24" path="/dev/usb/lp0" dev="devtmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 32.584759][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.608179][ T36] audit: type=1400 audit(1794185497.370:163): avc: denied { ioctl } for pid=426 comm="syz.3.24" path="/dev/usb/lp0" dev="devtmpfs" ino=451 ioctlcmd=0x5b0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 32.629042][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.639982][ T67] usb usb1-port1: attempt power cycle [ 32.648977][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.660445][ T36] audit: type=1400 audit(1794185497.490:164): avc: denied { accept } for pid=426 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.948409][ T310] usb 3-1: USB disconnect, device number 2 [ 32.990446][ T67] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 33.011073][ T67] usb 1-1: device descriptor read/8, error -71 [ 33.141300][ T67] usb 1-1: device descriptor read/8, error -71 [ 33.280072][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.380092][ T67] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 33.401217][ T67] usb 1-1: device descriptor read/8, error -71 [ 33.441122][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.451369][ T310] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 33.461246][ T310] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.475331][ T310] usb 3-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 33.484449][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.492515][ T310] usb 3-1: Product: syz [ 33.496698][ T310] usb 3-1: Manufacturer: syz [ 33.501332][ T310] usb 3-1: SerialNumber: syz [ 33.507703][ T310] usb-storage 3-1:1.0: USB Mass Storage device detected [ 33.516195][ T310] scsi host1: usb-storage 3-1:1.0 [ 33.541163][ T67] usb 1-1: device descriptor read/8, error -71 [ 33.650191][ T67] usb usb1-port1: unable to enumerate USB device [ 34.163616][ T315] usb 4-1: USB disconnect, device number 2 [ 34.170920][ T315] usblp0: removed [ 34.200065][ T67] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.236741][ T506] rust_binder: 505:506 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 34.241310][ T310] usb 3-1: USB disconnect, device number 3 [ 34.253823][ T506] rust_binder: Write failure EINVAL in pid:31 [ 34.290160][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 34.350072][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 34.356534][ T67] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.364922][ T67] usb 2-1: config 0 has no interface number 0 [ 34.371130][ T67] usb 2-1: config 0 interface 184 has no altsetting 0 [ 34.380095][ T67] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.389276][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.397593][ T67] usb 2-1: Product: syz [ 34.401968][ T67] usb 2-1: Manufacturer: syz [ 34.406599][ T67] usb 2-1: SerialNumber: syz [ 34.412667][ T67] usb 2-1: config 0 descriptor?? [ 34.418714][ T67] smsc75xx v1.0.0 [ 34.451650][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.459796][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 34.468433][ T45] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 34.478401][ T45] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 34.488652][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.499587][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 34.508880][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.510242][ T315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.517866][ T45] usb 1-1: Product: syz [ 34.528962][ T45] usb 1-1: Manufacturer: syz [ 34.533790][ T45] usb 1-1: SerialNumber: syz [ 34.701194][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.712285][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.722226][ T315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.735064][ T315] usb 4-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 34.744317][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.753411][ T315] usb 4-1: config 0 descriptor?? [ 34.963222][ T315] usbhid 4-1:0.0: can't add hid device: -71 [ 34.969334][ T315] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.978921][ T315] usb 4-1: USB disconnect, device number 3 [ 35.020738][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 35.032560][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.306156][ T518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 35.505631][ T528] futex_wake_op: syz.3.41 tries to shift op by 144; fix this program [ 35.515623][ T528] futex_wake_op: syz.3.41 tries to shift op by 144; fix this program [ 35.576777][ T536] tc_dump_action: action bad kind [ 35.590055][ T310] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 35.741153][ T310] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 35.752744][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 35.763768][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1297, setting to 64 [ 35.776052][ T310] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 35.785261][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.793510][ T310] usb 3-1: Product: syz [ 35.797737][ T310] usb 3-1: Manufacturer: syz [ 35.802411][ T310] usb 3-1: SerialNumber: syz [ 35.807982][ T310] usb 3-1: config 0 descriptor?? [ 35.813411][ T525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.850046][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.001218][ T31] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.012456][ T31] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.025270][ T524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.025849][ T524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.036897][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.047720][ T315] usb 3-1: USB disconnect, device number 4 [ 36.053985][ T31] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 36.054015][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.072695][ T31] usb 4-1: config 0 descriptor?? [ 36.283209][ T539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.292038][ T539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.473037][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 36.483941][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 36.493651][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 36.503387][ T67] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 36.514917][ T67] usb 2-1: USB disconnect, device number 3 [ 36.585762][ T542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 36.610997][ T545] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 36.845191][ T45] usb 1-1: invalid UAC_HEADER (v1) [ 36.852583][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.863619][ T45] usb 1-1: USB disconnect, device number 7 [ 36.874731][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.905078][ T553] device-mapper: table: 252:1: crypt: Device size is not multiple of sector_size feature (-EINVAL) [ 36.916066][ T553] device-mapper: ioctl: error adding target to table [ 36.924113][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 36.931786][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.941056][ T31] usb 4-1: USB disconnect, device number 4 [ 37.037928][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 37.037946][ T36] audit: type=1400 audit(1794185501.860:203): avc: denied { read write } for pid=559 comm="syz.1.51" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.068376][ T36] audit: type=1400 audit(1794185501.880:204): avc: denied { open } for pid=559 comm="syz.1.51" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.092423][ T36] audit: type=1400 audit(1794185501.880:205): avc: denied { open } for pid=559 comm="syz.1.51" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.117390][ T36] audit: type=1400 audit(1794185501.930:206): avc: denied { unlink } for pid=559 comm="syz.1.51" name="#5" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.190099][ T310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.280088][ T315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.340055][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 37.346472][ T310] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 37.354892][ T310] usb 3-1: config 0 has no interface number 0 [ 37.361091][ T310] usb 3-1: config 0 interface 184 has no altsetting 0 [ 37.369485][ T310] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 37.378608][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.386638][ T310] usb 3-1: Product: syz [ 37.390847][ T310] usb 3-1: Manufacturer: syz [ 37.395459][ T310] usb 3-1: SerialNumber: syz [ 37.400822][ T310] usb 3-1: config 0 descriptor?? [ 37.406659][ T310] smsc75xx v1.0.0 [ 37.447179][ T315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.465208][ T36] audit: type=1400 audit(1794185502.290:207): avc: denied { name_bind } for pid=567 comm="syz.0.52" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 37.500073][ T315] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 37.531145][ T315] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 37.540481][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.557909][ T315] usb 2-1: Product: syz [ 37.562408][ T315] usb 2-1: Manufacturer: syz [ 37.567042][ T315] usb 2-1: SerialNumber: syz [ 37.573847][ T563] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.788865][ T315] usb 2-1: MIDIStreaming interface descriptor not found [ 37.801958][ T315] usb 2-1: USB disconnect, device number 4 [ 37.812649][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 37.825024][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 37.835601][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 37.846204][ T310] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 37.857388][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.873306][ T310] usb 3-1: USB disconnect, device number 5 [ 38.417725][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.428364][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.460644][ T591] device-mapper: table: 252:2: snapshot: Cannot get COW device (-ENOENT) [ 38.461487][ T36] audit: type=1400 audit(1794185503.280:208): avc: denied { write } for pid=592 comm="syz.1.61" name="fib_trie" dev="proc" ino=4026532327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.480234][ T591] device-mapper: ioctl: error adding target to table [ 38.520997][ T36] audit: type=1400 audit(1794185503.330:209): avc: denied { write } for pid=592 comm="syz.1.61" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.560068][ T315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.653497][ T604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.670060][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.710420][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 38.716850][ T315] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 38.725114][ T315] usb 3-1: config 0 has no interface number 0 [ 38.731303][ T315] usb 3-1: config 0 interface 184 has no altsetting 0 [ 38.739691][ T315] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 38.748906][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.757015][ T315] usb 3-1: Product: syz [ 38.761263][ T315] usb 3-1: Manufacturer: syz [ 38.765946][ T315] usb 3-1: SerialNumber: syz [ 38.771405][ T315] usb 3-1: config 0 descriptor?? [ 38.777258][ T315] smsc75xx v1.0.0 [ 38.810071][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.840075][ T443] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 38.991229][ T443] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 64 [ 39.002260][ T443] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.015240][ T443] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.021979][ T443] usb 4-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.00 [ 39.031086][ T443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.039902][ T443] usb 4-1: config 0 descriptor?? [ 39.047656][ T603] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 39.050230][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.300074][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.379149][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 39.390116][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 39.399635][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 39.411795][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 39.421659][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 39.432244][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.438585][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 39.448316][ T315] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 39.466573][ T443] usbhid 4-1:0.0: can't add hid device: -71 [ 39.472650][ T443] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.481978][ T443] usb 4-1: USB disconnect, device number 5 [ 39.670073][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.740064][ T315] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 39.750338][ T36] audit: type=1400 audit(1794185504.580:210): avc: denied { write } for pid=586 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 39.780213][ T10] usb usb2-port1: attempt power cycle [ 39.890947][ T315] usb 1-1: not running at top speed; connect to a high speed hub [ 39.899533][ T315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.910924][ T315] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 39.920042][ T315] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 39.928468][ T315] usb 1-1: Product: syz [ 39.932691][ T315] usb 1-1: Manufacturer: syz [ 39.940567][ T315] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 39.946976][ T315] usb 1-1: No streaming interface found for terminal 2. [ 40.054319][ T613] FAULT_INJECTION: forcing a failure. [ 40.054319][ T613] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 40.067672][ T613] CPU: 1 UID: 0 PID: 613 Comm: syz.3.66 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 40.067705][ T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 40.067717][ T613] Call Trace: [ 40.067724][ T613] [ 40.067732][ T613] __dump_stack+0x21/0x30 [ 40.067758][ T613] dump_stack_lvl+0x140/0x1c0 [ 40.067782][ T613] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.067805][ T613] dump_stack+0x19/0x20 [ 40.067824][ T613] should_fail_ex+0x3c2/0x510 [ 40.067844][ T613] should_fail_alloc_page+0xec/0x110 [ 40.067869][ T613] __alloc_pages_noprof+0x1c0/0x7e0 [ 40.067901][ T613] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.067924][ T613] __folio_alloc_noprof+0x14/0x80 [ 40.067951][ T613] folio_prealloc+0x46/0x220 [ 40.067968][ T613] do_pte_missing+0x16af/0x4440 [ 40.067987][ T613] ? __futex_wait+0x330/0x3d0 [ 40.068009][ T613] ? pte_marker_clear+0x1b0/0x1b0 [ 40.068026][ T613] ? __cfi_futex_wake_mark+0x10/0x10 [ 40.068047][ T613] ? futex_wake+0x666/0x950 [ 40.068067][ T613] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 40.068090][ T613] handle_mm_fault+0x1189/0x1ba0 [ 40.068109][ T613] ? __cfi_handle_mm_fault+0x10/0x10 [ 40.068124][ T613] ? lock_vma_under_rcu+0x4cf/0x590 [ 40.068143][ T613] ? __se_sys_futex+0x13c/0x320 [ 40.068161][ T613] do_user_addr_fault+0x951/0x1230 [ 40.068178][ T613] ? __cfi_ksys_write+0x10/0x10 [ 40.068192][ T613] ? fpregs_restore_userregs+0x11c/0x260 [ 40.068216][ T613] exc_page_fault+0x58/0xc0 [ 40.068238][ T613] asm_exc_page_fault+0x2b/0x30 [ 40.068260][ T613] RIP: 0033:0x7fe34ce66ec6 [ 40.068273][ T613] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d ba 17 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 40.068286][ T613] RSP: 002b:00007fe34deb8f60 EFLAGS: 00010206 [ 40.068301][ T613] RAX: 0000000000000000 RBX: 00007fe34d225fa0 RCX: 0000000000000000 [ 40.068312][ T613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fe34d03866a [ 40.068322][ T613] RBP: 00007fe34d037b70 R08: 00007fe34ce53a30 R09: 0000000000000000 [ 40.068333][ T613] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000046 [ 40.068343][ T613] R13: 0000000000000000 R14: 0000000000000003 R15: 00007fffb279f1c8 [ 40.068355][ T613] [ 40.068408][ T613] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 40.130290][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.147676][ T31] usb 1-1: USB disconnect, device number 8 [ 40.151732][ T36] audit: type=1400 audit(1794185504.970:211): avc: denied { mounton } for pid=612 comm="syz.3.66" path="/21/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 40.160569][ T613] FAULT_INJECTION: forcing a failure. [ 40.160569][ T613] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.191801][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.199628][ T613] CPU: 1 UID: 0 PID: 613 Comm: syz.3.66 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 40.199713][ T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 40.199754][ T613] Call Trace: [ 40.199774][ T613] [ 40.199795][ T613] __dump_stack+0x21/0x30 [ 40.199869][ T613] dump_stack_lvl+0x140/0x1c0 [ 40.199921][ T613] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.199984][ T613] ? fpu__alloc_mathframe+0xb7/0x150 [ 40.200079][ T613] dump_stack+0x19/0x20 [ 40.200133][ T613] should_fail_ex+0x3c2/0x510 [ 40.200195][ T613] should_fail+0xf/0x20 [ 40.200247][ T613] should_fail_usercopy+0x1e/0x30 [ 40.200303][ T613] _copy_from_user+0x20/0xa0 [ 40.200391][ T613] restore_altstack+0xaf/0x500 [ 40.200472][ T613] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 40.200536][ T613] ? __kasan_check_write+0x18/0x20 [ 40.200613][ T613] ? __cfi_restore_altstack+0x10/0x10 [ 40.200685][ T613] ? __set_current_blocked+0x281/0x2d0 [ 40.200749][ T613] __ia32_sys_rt_sigreturn+0x1cf/0x830 [ 40.200813][ T613] ? _raw_spin_unlock_irq+0x45/0x70 [ 40.200887][ T613] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 40.200963][ T613] ? signal_setup_done+0x201/0x2e0 [ 40.201017][ T613] ? arch_do_signal_or_restart+0x40a/0x700 [ 40.201081][ T613] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.201169][ T613] ? __kasan_check_read+0x15/0x20 [ 40.201257][ T613] x64_sys_call+0x2c14/0x2ee0 [ 40.201280][ T613] do_syscall_64+0x57/0xf0 [ 40.201301][ T613] ? clear_bhb_loop+0x50/0xa0 [ 40.201349][ T613] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.201440][ T613] RIP: 0033:0x7fe34cf40e99 [ 40.201517][ T613] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 40.201563][ T613] RSP: 002b:00007fe34debab40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 40.201625][ T613] RAX: ffffffffffffffda RBX: 00007fe34d225fa8 RCX: 00007fe34cf40e99 [ 40.201668][ T613] RDX: 00007fe34debab40 RSI: 00007fe34debac70 RDI: 0000000000000021 [ 40.201710][ T613] RBP: 00007fe34d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 40.201751][ T613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.201784][ T613] R13: 00007fe34d226038 R14: 00007fffb279f0e0 R15: 00007fffb279f1c8 [ 40.201838][ T613] [ 40.550149][ T36] audit: type=1400 audit(1794185505.280:212): avc: denied { search } for pid=619 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.681121][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.920099][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.941341][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.960110][ T322] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 41.071202][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.121189][ T322] usb 1-1: descriptor type invalid, skip [ 41.127339][ T322] usb 1-1: not running at top speed; connect to a high speed hub [ 41.138302][ T322] usb 1-1: string descriptor 0 read error: -22 [ 41.144607][ T322] usb 1-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40 [ 41.153731][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.190273][ T10] usb usb2-port1: unable to enumerate USB device [ 41.337963][ T322] usb 3-1: USB disconnect, device number 6 [ 41.363450][ T31] usb 1-1: USB disconnect, device number 9 [ 41.410094][ T315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.461313][ T651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.467853][ T651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.474966][ T310] rust_binder: 649: undelivered TRANSACTION_ERROR: 29189 [ 41.510475][ T661] ======================================================= [ 41.510475][ T661] WARNING: The mand mount option has been deprecated and [ 41.510475][ T661] and is ignored by this kernel. Remove the mand [ 41.510475][ T661] option from the mount to silence this warning. [ 41.510475][ T661] ======================================================= [ 41.545709][ T661] overlayfs: failed to resolve './bus': -2 [ 41.600042][ T315] usb 4-1: device descriptor read/64, error -71 [ 41.609666][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.618305][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.626549][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.635098][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.840065][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 41.847627][ T315] usb 4-1: device descriptor read/64, error -71 [ 42.021510][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.030093][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 42.039106][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 4 [ 42.057991][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 42.067870][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.075984][ T10] usb 3-1: Product: 淈ᄕ탟樤京庭ꑋ閠截蟴﫪኶輇൛믯᪹൷䬘薶ꃰ濼攃껱涇㘚࠵㞔죷ꍘ퇌鯂꿝늩퀠妄ꇫੑ⦡䇄拣ં䝃肏ဟ툦嘄⭼⫷垸味捖扝㷞䵖⎺ﶆኲ㠳查또觙㠉쪵顼蛷멶迯㦩窜挙쮐쿡﫷겷縞昲比찟흊荽ꊹ嗑鸊 [ 42.078104][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 42.078145][ T36] audit: type=1400 audit(1794185506.900:229): avc: denied { setopt } for pid=689 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.106251][ T10] usb 3-1: Manufacturer: 碲ﵦ뉴⻐䳨胉㵣黯ꮛ熡ᐆ⭺丆뭽骤ुꈷﹴ饵릴舜襩톛ೃ甀풀靏ௗΐ妼篢뷶侰꠼롭櫞⥭馢ᐩ堦砼⑗஡頋泛蠵岍쉿ഉ䪞烽欲넮蛖ᵢᕸ䩦ꧠ [ 42.115011][ T690] new mount options do not match the existing superblock, will be ignored [ 42.132261][ T315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 42.193358][ T690] netlink: 'syz.0.85': attribute type 4 has an invalid length. [ 42.201081][ T690] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.85'. [ 42.300052][ T315] usb 4-1: device descriptor read/64, error -71 [ 42.373203][ T10] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 42.383278][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.394267][ T10] usb 3-1: USB disconnect, device number 7 [ 42.404470][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.420288][ T322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.540119][ T315] usb 4-1: device descriptor read/64, error -71 [ 42.570103][ T322] usb 2-1: Using ep0 maxpacket: 32 [ 42.576959][ T322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 42.586986][ T322] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 42.596128][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.604367][ T322] usb 2-1: Product: syz [ 42.608572][ T322] usb 2-1: Manufacturer: syz [ 42.613469][ T322] usb 2-1: SerialNumber: syz [ 42.650171][ T315] usb usb4-port1: attempt power cycle [ 42.968046][ T708] device-mapper: core: Start sector is beyond the geometry limits. [ 42.990145][ T718] device-mapper: core: Start sector is beyond the geometry limits. [ 42.993084][ T716] device-mapper: ioctl: Invalid ioctl structure: name syza2, dev fc03 [ 43.000327][ T315] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 43.040861][ T315] usb 4-1: device descriptor read/8, error -71 [ 43.171097][ T315] usb 4-1: device descriptor read/8, error -71 [ 43.243566][ T735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.258964][ T735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.269918][ T735] Zero length message leads to an empty skb [ 43.420154][ T315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.437451][ T322] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 43.449662][ T315] usb 4-1: device descriptor read/8, error -71 [ 43.452570][ T322] usb 2-1: USB disconnect, device number 9 [ 43.616314][ T315] usb 4-1: device descriptor read/8, error -71 [ 43.730186][ T315] usb usb4-port1: unable to enumerate USB device [ 44.005649][ T749] mmap: syz.0.100 (749) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.018807][ T749] rust_binder: 748:749 no such ref 0 [ 44.024242][ T749] rust_binder: 748:749 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 44.194429][ T36] audit: type=1400 audit(1794185509.020:230): avc: denied { ioctl } for pid=753 comm="syz.3.102" path="socket:[6322]" dev="sockfs" ino=6322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.218847][ T36] audit: type=1400 audit(1794185509.020:231): avc: denied { setopt } for pid=753 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.239053][ T36] audit: type=1400 audit(1794185509.060:232): avc: denied { write } for pid=753 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.258314][ T31] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 44.290310][ T322] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.410164][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 44.440056][ T322] usb 3-1: Using ep0 maxpacket: 16 [ 44.446432][ T322] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 44.456963][ T322] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 44.466034][ T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.474066][ T322] usb 3-1: Product: syz [ 44.478265][ T322] usb 3-1: Manufacturer: syz [ 44.483023][ T322] usb 3-1: SerialNumber: syz [ 44.488415][ T322] usb 3-1: config 0 descriptor?? [ 44.494562][ T322] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 44.502581][ T322] usb 3-1: Detected FT232R [ 44.540093][ T31] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 44.580064][ T422] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.690049][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 44.695609][ T31] usb usb2-port1: attempt power cycle [ 44.701166][ T322] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 44.730040][ T422] usb 4-1: Using ep0 maxpacket: 32 [ 44.736433][ T422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.747402][ T422] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.756515][ T422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.765349][ T422] usb 4-1: config 0 descriptor?? [ 44.771877][ T422] hub 4-1:0.0: USB hub found [ 44.910362][ T322] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.972570][ T422] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 45.040116][ T31] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 45.060374][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 45.110740][ T322] usb 3-1: USB disconnect, device number 8 [ 45.119528][ T322] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 45.129908][ T322] ftdi_sio 3-1:0.0: device disconnected [ 45.130700][ T315] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 45.183138][ T422] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 45.191449][ T31] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 45.199151][ T422] hid-generic 0003:046D:C31C.0003: probe with driver hid-generic failed with error -22 [ 45.220589][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 45.226106][ T31] usb usb2-port1: unable to enumerate USB device [ 45.291158][ T315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.302668][ T315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 45.315396][ T315] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 45.324598][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.332657][ T315] usb 1-1: Product: syz [ 45.336881][ T315] usb 1-1: Manufacturer: syz [ 45.341547][ T315] usb 1-1: SerialNumber: syz [ 45.347107][ T761] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 45.390255][ T756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.398951][ T756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.407536][ T756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.416176][ T756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.530192][ T9] usb 4-1: USB disconnect, device number 10 [ 45.556813][ T315] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 45.567879][ T315] usb 1-1: USB disconnect, device number 10 [ 45.860105][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.011332][ T9] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 46.019508][ T9] usb 3-1: config 0 has no interface number 0 [ 46.026095][ T9] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.037132][ T9] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.046999][ T9] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.059903][ T9] usb 3-1: config 0 interface 16 has no altsetting 0 [ 46.066652][ T9] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 46.075818][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.084724][ T9] usb 3-1: config 0 descriptor?? [ 46.117869][ T767] x_tables: duplicate underflow at hook 1 [ 46.170097][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 46.320793][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 46.329380][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.339749][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 46.349006][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.361058][ T31] usb 4-1: Found UVC 1.00 device (046d:0825) [ 46.367998][ T31] usb 4-1: No streaming interface found for terminal 2. [ 46.493910][ T9] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/0003:06A3:0CD0.0004/input/input9 [ 46.506524][ T36] audit: type=1400 audit(1794185511.340:233): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.528837][ T36] audit: type=1400 audit(1794185511.340:234): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.538118][ T9] saitek 0003:06A3:0CD0.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input16 [ 46.570376][ T36] audit: type=1400 audit(1794185511.400:235): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=516 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.675246][ T765] netlink: 'syz.3.107': attribute type 28 has an invalid length. [ 46.688656][ T36] audit: type=1400 audit(1794185511.510:236): avc: denied { cmd } for pid=764 comm="syz.3.107" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 46.717024][ T763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.727336][ T763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.773860][ T31] usb 4-1: USB disconnect, device number 11 [ 46.789747][ T778] FAULT_INJECTION: forcing a failure. [ 46.789747][ T778] name failslab, interval 1, probability 0, space 0, times 0 [ 46.803508][ T778] CPU: 0 UID: 0 PID: 778 Comm: syz.0.111 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 46.803543][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 46.803558][ T778] Call Trace: [ 46.803565][ T778] [ 46.803574][ T778] __dump_stack+0x21/0x30 [ 46.803601][ T778] dump_stack_lvl+0x140/0x1c0 [ 46.803622][ T778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.803645][ T778] dump_stack+0x19/0x20 [ 46.803665][ T778] should_fail_ex+0x3c2/0x510 [ 46.803687][ T778] ? security_sk_alloc+0x65/0x260 [ 46.803715][ T778] should_failslab+0xac/0x100 [ 46.803739][ T778] __kmalloc_noprof+0x69/0x510 [ 46.803771][ T778] ? kasan_save_alloc_info+0x3a/0x50 [ 46.803803][ T778] ? security_sk_alloc+0x65/0x260 [ 46.803831][ T778] ? __kasan_slab_alloc+0x73/0x90 [ 46.803854][ T778] security_sk_alloc+0x65/0x260 [ 46.803884][ T778] sk_prot_alloc+0x123/0x3a0 [ 46.803913][ T778] sk_alloc+0x40/0x590 [ 46.803939][ T778] tipc_sk_create+0x165/0x2150 [ 46.803965][ T778] ? kasan_save_alloc_info+0x3a/0x50 [ 46.803995][ T778] ? __kasan_slab_alloc+0x73/0x90 [ 46.804018][ T778] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 46.804050][ T778] ? security_inode_alloc+0x51/0x230 [ 46.804077][ T778] ? security_inode_alloc+0xc2/0x230 [ 46.804104][ T778] ? inode_init_always_gfp+0x76e/0x9e0 [ 46.804128][ T778] ? __cfi_tipc_sk_create+0x10/0x10 [ 46.804153][ T778] ? __cfi_sock_alloc_inode+0x10/0x10 [ 46.804175][ T778] ? alloc_inode+0xdb/0x270 [ 46.804200][ T778] __sock_create+0x3a5/0x810 [ 46.804226][ T778] __sys_socket+0xe1/0x1c0 [ 46.804251][ T778] __x64_sys_socket+0x7e/0x90 [ 46.804275][ T778] x64_sys_call+0x2608/0x2ee0 [ 46.804308][ T778] do_syscall_64+0x57/0xf0 [ 46.804332][ T778] ? clear_bhb_loop+0x50/0xa0 [ 46.804365][ T778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.804396][ T778] RIP: 0033:0x7f84bed9fb19 [ 46.804415][ T778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.804434][ T778] RSP: 002b:00007f84bfc2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 46.804458][ T778] RAX: ffffffffffffffda RBX: 00007f84bf026090 RCX: 00007f84bed9fb19 [ 46.804474][ T778] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 46.804488][ T778] RBP: 00007f84bee37b70 R08: 0000000000000000 R09: 0000000000000000 [ 46.804502][ T778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.804516][ T778] R13: 00007f84bf026128 R14: 00007f84bf026090 R15: 00007ffebadcc378 [ 46.804534][ T778] [ 46.805810][ T36] audit: type=1400 audit(1794185511.640:237): avc: denied { setopt } for pid=776 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.081250][ T36] audit: type=1400 audit(1794185511.890:238): avc: denied { setopt } for pid=779 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.090436][ T780] netlink: 64 bytes leftover after parsing attributes in process `syz.1.112'. [ 47.119355][ T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.133991][ T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.134075][ T781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.142858][ T36] audit: type=1400 audit(1794185511.960:239): avc: denied { mounton } for pid=762 comm="syz.2.106" path="/26/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.156084][ T781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.430159][ T422] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.460356][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 47.560057][ T422] usb 1-1: device descriptor read/64, error -71 [ 47.590064][ T10] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 47.597727][ T9] usb 2-1: device descriptor read/64, error -71 [ 47.750252][ T31] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 47.753512][ T10] usb 4-1: unable to get BOS descriptor set [ 47.764862][ T10] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 47.775176][ T10] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 47.786766][ T10] usb 4-1: string descriptor 0 read error: -22 [ 47.793129][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 47.802251][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.810172][ T422] usb 1-1: device descriptor read/64, error -71 [ 47.840061][ T9] usb 2-1: device descriptor read/64, error -71 [ 48.040130][ T422] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.080136][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 48.210056][ T9] usb 2-1: device descriptor read/64, error -71 [ 48.450148][ T9] usb 2-1: device descriptor read/64, error -71 [ 48.561972][ T9] usb usb2-port1: attempt power cycle [ 48.569909][ T36] audit: type=1400 audit(1794185513.390:240): avc: denied { write } for pid=807 comm="syz.0.120" name="anycast6" dev="proc" ino=4026532518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.617848][ T800] usb 4-1: USB disconnect, device number 12 [ 48.628712][ T36] audit: type=1400 audit(1794185513.400:241): avc: denied { map } for pid=807 comm="syz.0.120" path="/proc/99/net/anycast6" dev="proc" ino=4026532518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.664972][ T36] audit: type=1400 audit(1794185513.490:242): avc: denied { mounton } for pid=811 comm="syz.2.121" path="/29/file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.740467][ T322] usb 3-1: USB disconnect, device number 9 [ 48.777298][ T818] process 'syz.2.121' launched './file0' with NULL argv: empty string added [ 48.920068][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 48.941095][ T9] usb 2-1: device descriptor read/8, error -71 [ 49.071123][ T9] usb 2-1: device descriptor read/8, error -71 [ 49.235274][ T36] audit: type=1400 audit(1794185514.060:243): avc: denied { mount } for pid=819 comm="syz.3.123" name="/" dev="configfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 49.257873][ T36] audit: type=1400 audit(1794185514.060:244): avc: denied { search } for pid=819 comm="syz.3.123" name="/" dev="configfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.280311][ T36] audit: type=1400 audit(1794185514.060:245): avc: denied { write } for pid=819 comm="syz.3.123" name="usb_gadget" dev="configfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.303115][ T36] audit: type=1400 audit(1794185514.060:246): avc: denied { add_name } for pid=819 comm="syz.3.123" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.323293][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 49.323298][ T36] audit: type=1400 audit(1794185514.070:247): avc: denied { create } for pid=819 comm="syz.3.123" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 49.371150][ T9] usb 2-1: device descriptor read/8, error -71 [ 49.385915][ T824] overlayfs: missing 'lowerdir' [ 49.501081][ T9] usb 2-1: device descriptor read/8, error -71 [ 49.610136][ T9] usb usb2-port1: unable to enumerate USB device [ 49.730062][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 49.880070][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 49.886436][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.897585][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 49.908618][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 49.922582][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 49.931747][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.940688][ T10] usb 1-1: config 0 descriptor?? [ 50.361641][ T10] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 50.368820][ T10] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 50.376411][ T10] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 50.383684][ T10] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 50.391081][ T10] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 50.407877][ T10] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 50.460147][ T858] fuse: Unknown parameter ':#`^7' [ 50.559116][ C0] usb 1-1: input irq status -75 received [ 50.630062][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 50.760283][ T10] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 50.772005][ T10] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 50.781172][ T10] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 50.791542][ T10] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 50.798220][ T10] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 50.808593][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.820737][ T10] usb 1-1: USB disconnect, device number 13 [ 50.826733][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.839698][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.849180][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 50.857469][ T9] usb 2-1: SerialNumber: syz [ 50.970069][ T315] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.131136][ T315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 51.150013][ T315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 51.159842][ T315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 51.184141][ T315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 51.200244][ T315] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 51.209364][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.227743][ T864] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 51.247724][ T864] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 51.258615][ T315] pl2303 3-1:1.0: pl2303 converter detected [ 51.277968][ T315] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 51.640265][ T864] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 51.647626][ T864] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 51.654889][ T864] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 51.663233][ T864] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 51.900078][ T315] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.050053][ T315] usb 4-1: Using ep0 maxpacket: 8 [ 52.056343][ T315] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 52.069203][ T315] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 52.078337][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.086384][ T315] usb 4-1: Product: syz [ 52.090629][ T315] usb 4-1: Manufacturer: syz [ 52.095256][ T315] usb 4-1: SerialNumber: syz [ 52.240007][ T67] usb 3-1: USB disconnect, device number 10 [ 52.250174][ T67] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 52.259977][ T67] pl2303 3-1:1.0: device disconnected [ 52.275817][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 52.275835][ T36] audit: type=1400 audit(1794185517.100:305): avc: denied { ioctl } for pid=892 comm="syz.2.146" path="socket:[7945]" dev="sockfs" ino=7945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.311661][ T36] audit: type=1326 audit(1794185517.140:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.336891][ T36] audit: type=1326 audit(1794185517.140:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.362035][ T36] audit: type=1326 audit(1794185517.140:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.389661][ T36] audit: type=1326 audit(1794185517.140:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.415295][ T36] audit: type=1326 audit(1794185517.140:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.441514][ T895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.450926][ T895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.459363][ T36] audit: type=1326 audit(1794185517.140:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.463662][ T895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.496382][ T895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.506446][ T36] audit: type=1326 audit(1794185517.140:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.532228][ T36] audit: type=1326 audit(1794185517.140:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.557808][ T36] audit: type=1326 audit(1794185517.140:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bed9fb19 code=0x7fc00000 [ 52.771084][ T12] bridge_slave_1: left allmulticast mode [ 52.776959][ T12] bridge_slave_1: left promiscuous mode [ 52.783026][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.791668][ T12] bridge_slave_0: left allmulticast mode [ 52.797432][ T12] bridge_slave_0: left promiscuous mode [ 52.803545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.915637][ T12] veth1_macvtap: left promiscuous mode [ 52.921332][ T12] veth0_vlan: left promiscuous mode [ 52.983221][ T902] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.990462][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.997673][ T902] bridge_slave_0: entered allmulticast mode [ 53.004276][ T902] bridge_slave_0: entered promiscuous mode [ 53.010906][ T902] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.017983][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.027573][ T902] bridge_slave_1: entered allmulticast mode [ 53.034800][ T902] bridge_slave_1: entered promiscuous mode [ 53.095476][ T902] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.102571][ T902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.109951][ T902] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.117049][ T902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.146391][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.164942][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.165446][ T907] capability: warning: `syz.2.152' uses 32-bit capabilities (legacy support in use) [ 53.203002][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.210112][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.232215][ T907] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.243350][ T907] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.259559][ T907] overlayfs: overlapping lowerdir path [ 53.269334][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.276441][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.292093][ T9] usb 2-1: skipping empty audio interface (v1) [ 53.312538][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 53.339333][ T9] usb 2-1: USB disconnect, device number 18 [ 53.348595][ T902] veth0_vlan: entered promiscuous mode [ 53.373696][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.391470][ T902] veth1_macvtap: entered promiscuous mode [ 53.730067][ T322] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.890024][ T322] usb 5-1: Using ep0 maxpacket: 16 [ 53.899290][ T322] usb 5-1: config 0 interface 0 has no altsetting 0 [ 53.912666][ T322] usb 5-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 53.932490][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.950897][ T322] usb 5-1: config 0 descriptor?? [ 54.006985][ T937] input: syz0 as /devices/virtual/input/input10 [ 54.350060][ T800] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 54.362898][ T322] usbhid 5-1:0.0: can't add hid device: -71 [ 54.368939][ T322] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 54.377722][ T322] usb 5-1: USB disconnect, device number 2 [ 54.492363][ T947] ================================================================== [ 54.500517][ T947] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 54.508151][ T947] Read of size 8 at addr ffff88810bb40f18 by task syz.2.164/947 [ 54.515835][ T947] [ 54.518194][ T947] CPU: 1 UID: 0 PID: 947 Comm: syz.2.164 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 54.518236][ T947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 54.518253][ T947] Call Trace: [ 54.518261][ T947] [ 54.518270][ T947] __dump_stack+0x21/0x30 [ 54.518300][ T947] dump_stack_lvl+0x140/0x1c0 [ 54.518336][ T947] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.518377][ T947] ? __cfi__printk+0x10/0x10 [ 54.518424][ T947] print_address_description+0x71/0x210 [ 54.518448][ T947] print_report+0x4a/0x70 [ 54.518469][ T947] kasan_report+0x162/0x1a0 [ 54.518495][ T947] ? snapshot_ctr+0x586/0x1350 [ 54.518524][ T947] ? snapshot_ctr+0x586/0x1350 [ 54.518551][ T947] __asan_report_load8_noabort+0x18/0x20 [ 54.518584][ T947] snapshot_ctr+0x586/0x1350 [ 54.518611][ T947] ? dm_split_args+0xa1/0x740 [ 54.518634][ T947] ? __cfi_snapshot_ctr+0x10/0x10 [ 54.518662][ T947] ? dm_split_args+0x5d0/0x740 [ 54.518686][ T947] dm_table_add_target+0x59f/0xcb0 [ 54.518712][ T947] table_load+0x2eb/0x7d0 [ 54.518744][ T947] ? __check_object_size+0x99/0x870 [ 54.518782][ T947] ? __cfi_table_load+0x10/0x10 [ 54.518815][ T947] ? __kasan_check_write+0x18/0x20 [ 54.518848][ T947] ? __cfi_table_load+0x10/0x10 [ 54.518880][ T947] dm_ctl_ioctl+0x8f3/0xde0 [ 54.518915][ T947] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 54.518953][ T947] ? __fget_files+0x2bc/0x330 [ 54.518978][ T947] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.519004][ T947] ? security_file_ioctl+0x3e/0x110 [ 54.519039][ T947] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 54.519072][ T947] __se_sys_ioctl+0x123/0x1b0 [ 54.519097][ T947] __x64_sys_ioctl+0x7f/0xa0 [ 54.519123][ T947] x64_sys_call+0x1878/0x2ee0 [ 54.519147][ T947] do_syscall_64+0x57/0xf0 [ 54.519172][ T947] ? clear_bhb_loop+0x50/0xa0 [ 54.519264][ T947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.519297][ T947] RIP: 0033:0x7f280219fb19 [ 54.519319][ T947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.519339][ T947] RSP: 002b:00007f28030bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.519365][ T947] RAX: ffffffffffffffda RBX: 00007f2802425fa0 RCX: 00007f280219fb19 [ 54.519384][ T947] RDX: 0000200000000340 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 54.519400][ T947] RBP: 00007f2802237b70 R08: 0000000000000000 R09: 0000000000000000 [ 54.519415][ T947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.519429][ T947] R13: 00007f2802426038 R14: 00007f2802425fa0 R15: 00007ffc918ab428 [ 54.519449][ T947] [ 54.519457][ T947] [ 54.780680][ T947] Allocated by task 947: [ 54.784955][ T947] kasan_save_track+0x3e/0x80 [ 54.789683][ T947] kasan_save_alloc_info+0x3a/0x50 [ 54.794843][ T947] __kasan_kmalloc+0x96/0xb0 [ 54.799477][ T947] __kmalloc_cache_node_noprof+0x225/0x430 [ 54.805333][ T947] dm_get_table_device+0x1e3/0x6c0 [ 54.810476][ T947] dm_get_device+0x32b/0x7f0 [ 54.815104][ T947] snapshot_ctr+0x292/0x1350 [ 54.819742][ T947] dm_table_add_target+0x59f/0xcb0 [ 54.824888][ T947] table_load+0x2eb/0x7d0 [ 54.829250][ T947] dm_ctl_ioctl+0x8f3/0xde0 [ 54.833792][ T947] __se_sys_ioctl+0x123/0x1b0 [ 54.838502][ T947] __x64_sys_ioctl+0x7f/0xa0 [ 54.843125][ T947] x64_sys_call+0x1878/0x2ee0 [ 54.847838][ T947] do_syscall_64+0x57/0xf0 [ 54.852289][ T947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.858238][ T947] [ 54.860598][ T947] Freed by task 947: [ 54.864517][ T947] kasan_save_track+0x3e/0x80 [ 54.869225][ T947] kasan_save_free_info+0x44/0x50 [ 54.874305][ T947] __kasan_slab_free+0x5f/0x80 [ 54.879121][ T947] kfree+0x158/0x440 [ 54.883054][ T947] dm_put_table_device+0x298/0x2e0 [ 54.888215][ T947] dm_get_device+0x571/0x7f0 [ 54.892832][ T947] snapshot_ctr+0x435/0x1350 [ 54.897462][ T947] dm_table_add_target+0x59f/0xcb0 [ 54.902607][ T947] table_load+0x2eb/0x7d0 [ 54.906982][ T947] dm_ctl_ioctl+0x8f3/0xde0 [ 54.911535][ T947] __se_sys_ioctl+0x123/0x1b0 [ 54.916248][ T947] __x64_sys_ioctl+0x7f/0xa0 [ 54.920865][ T947] x64_sys_call+0x1878/0x2ee0 [ 54.925578][ T947] do_syscall_64+0x57/0xf0 [ 54.930039][ T947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.935972][ T947] [ 54.938317][ T947] The buggy address belongs to the object at ffff88810bb40f00 [ 54.938317][ T947] which belongs to the cache kmalloc-96 of size 96 [ 54.952249][ T947] The buggy address is located 24 bytes inside of [ 54.952249][ T947] freed 96-byte region [ffff88810bb40f00, ffff88810bb40f60) [ 54.965916][ T947] [ 54.968265][ T947] The buggy address belongs to the physical page: [ 54.974709][ T947] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bb40 [ 54.983582][ T947] flags: 0x4000000000000000(zone=1) [ 54.988819][ T947] page_type: f5(slab) [ 54.992827][ T947] raw: 4000000000000000 ffff888100041280 ffffea000429fe80 dead000000000002 [ 55.001438][ T947] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 55.010041][ T947] page dumped because: kasan: bad access detected [ 55.016486][ T947] page_owner tracks the page as allocated [ 55.022403][ T947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (init), ts 5740710417, free_ts 5730800583 [ 55.040335][ T947] post_alloc_hook+0x37d/0x3b0 [ 55.045137][ T947] prep_new_page+0x2d/0x180 [ 55.049676][ T947] get_page_from_freelist+0x4aea/0x4ba0 [ 55.055520][ T947] __alloc_pages_noprof+0x35a/0x7e0 [ 55.060771][ T947] alloc_slab_page+0x6b/0x1e0 [ 55.065494][ T947] allocate_slab+0x69/0x430 [ 55.070043][ T947] ___slab_alloc+0x591/0x8c0 [ 55.074667][ T947] __kmalloc_cache_node_noprof+0x2ae/0x430 [ 55.080509][ T947] __get_vm_area_node+0x150/0x390 [ 55.085565][ T947] __vmalloc_node_range_noprof+0x340/0x1300 [ 55.091497][ T947] dup_task_struct+0x5d6/0xd80 [ 55.096302][ T947] copy_process+0x579/0x33a0 [ 55.100936][ T947] kernel_clone+0x233/0x810 [ 55.105483][ T947] __ia32_sys_vfork+0xdb/0x150 [ 55.110289][ T947] x64_sys_call+0x2620/0x2ee0 [ 55.115004][ T947] do_syscall_64+0x57/0xf0 [ 55.119463][ T947] page last free pid 20 tgid 20 stack trace: [ 55.125462][ T947] free_unref_page+0xb99/0xf50 [ 55.130349][ T947] __free_pages+0x6b/0x3b0 [ 55.134799][ T947] free_pages+0x86/0x90 [ 55.138990][ T947] tlb_remove_table_rcu+0x366/0x3d0 [ 55.144216][ T947] rcu_do_batch+0x56a/0xcb0 [ 55.148777][ T947] rcu_nocb_cb_kthread+0x533/0xb60 [ 55.153959][ T947] kthread+0x2c7/0x360 [ 55.158102][ T947] ret_from_fork+0x64/0xa0 [ 55.162555][ T947] ret_from_fork_asm+0x1a/0x30 [ 55.167361][ T947] [ 55.169713][ T947] Memory state around the buggy address: [ 55.175375][ T947] ffff88810bb40e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.183473][ T947] ffff88810bb40e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.191567][ T947] >ffff88810bb40f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.199684][ T947] ^ [ 55.204564][ T947] ffff88810bb40f80: 00 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc [ 55.212747][ T947] ffff88810bb41000: fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb [ 55.220941][ T947] ================================================================== [ 55.258142][ T800] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.280481][ T800] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.320018][ T947] Disabling lock debugging due to kernel taint [ 55.326319][ T947] device-mapper: table: 252:5: device 1:5 not in table devices list [ 55.334686][ T947] device-mapper: table: 252:5: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 55.345589][ T947] device-mapper: ioctl: error adding target to table [ 55.353338][ T947] device-mapper: table: 252:5: dm_table_destroy: dm_put_device call missing for 1:5 [ 55.525007][ T12] bridge_slave_1: left allmulticast mode [ 55.531486][ T12] bridge_slave_1: left promiscuous mode [ 55.531709][ T315] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 55.537438][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.550814][ T315] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 55.560292][ T12] bridge_slave_0: left allmulticast mode [ 55.570055][ T800] usb 2-1: string descriptor 0 read error: -71 [ 55.576374][ T800] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.593456][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.600429][ T315] usb 4-1: USB disconnect, device number 13 [ 55.609271][ T12] bridge_slave_0: left promiscuous mode [ 55.621336][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 55.630033][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.638054][ T800] usb 2-1: can't set config #1, error -71 [ 55.670110][ T800] usb 2-1: USB disconnect, device number 19 [ 55.782271][ T12] veth1_macvtap: left promiscuous mode [ 55.787829][ T12] veth0_vlan: left promiscuous mode [ 56.003486][ T12] bridge_slave_1: left allmulticast mode [ 56.009159][ T12] bridge_slave_1: left promiscuous mode [ 56.014839][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.022473][ T12] bridge_slave_0: left allmulticast mode [ 56.028215][ T12] bridge_slave_0: left promiscuous mode [ 56.033945][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.041815][ T12] bridge_slave_1: left allmulticast mode [ 56.047552][ T12] bridge_slave_1: left promiscuous mode [ 56.053325][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.060870][ T12] bridge_slave_0: left allmulticast mode [ 56.066513][ T12] bridge_slave_0: left promiscuous mode [ 56.072266][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.080083][ T12] bridge_slave_1: left allmulticast mode [ 56.085755][ T12] bridge_slave_1: left promiscuous mode [ 56.091594][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.099029][ T12] bridge_slave_0: left allmulticast mode [ 56.104853][ T12] bridge_slave_0: left promiscuous mode [ 56.110529][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.365190][ T12] veth1_macvtap: left promiscuous mode [ 56.370778][ T12] veth0_vlan: left promiscuous mode [ 56.376327][ T12] veth1_macvtap: left promiscuous mode [ 56.381901][ T12] veth0_vlan: left promiscuous mode [ 56.387460][ T12] veth1_macvtap: left promiscuous mode [ 56.393053][ T12] veth0_vlan: left promiscuous mode