last executing test programs: 10.195221221s ago: executing program 0 (id=43): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'batadv0\x00', {'bridge_slave_1\x00'}, 0x800}) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000a40)=0x9, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x5d79, 0x3}) 10.156486964s ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) r0 = openat(0xffffffffffffff9c, &(0x7f0000003400)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000003440)='7', 0x1) r1 = getpid() umount2(&(0x7f0000003480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a000000000020103000000000000000002000002060003"], 0xa0}}, 0x2400484c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) mount$9p_unix(&(0x7f00000022c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000032c0)='.\x00', &(0x7f0000003300), 0x2000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000003380)={'bond_slave_1\x00', @random="0163014030d9"}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002200)={'\x00', 0x101, 0x2, 0x3, 0x101, 0xd, r1}) write$FUSE_LK(r3, &(0x7f0000002280)={0x28, 0xffffffffffffffda, r4, {{0x0, 0xeb39, 0x1, r6}}}, 0x28) 10.156180274s ago: executing program 0 (id=45): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000000280)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c840) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x2) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, 0x0, 0x0) write(r5, &(0x7f0000000140)="b4", 0x1) recvmmsg$unix(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000100)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xffffffff7ffffffc]}, 0x8) tkill(0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 10.140521986s ago: executing program 0 (id=46): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000f40)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000001280)="a68cde0d56b170df7710b54f17d9a38ac2547190000000000000000015603d1bf5c4de798ad1581055ad574f02a7f17144bd648802324363234ca0d9ed3d35e4066d79b79d53f39af5bb87d8167464b76929296b54bd901f0f4bed1c504e2ad664a774e6ef407fcc1e0284999e940941774a855457179f60cb420ad2dd59f159263776edcff02dc0a957ddea4577c492e424d15f9c55d4eea3b532deb8b002f115cb68b1de1af47a19e9672d7c9224861ca8ef11142137509f21eebc8558bce253566e1bd72939e797deeff0d0d2955570fb5af569a2c903fdca3491f012a9199a0e57a09f94a64a125166d551adfe1ea1602e563075fd3db9f63bd457e6e1676d744d2150ad09a8e402f9643c7396f9efdce5975a3a3a24111a13ccc295bd266e386c129598ed49f7678f84b333f1d541f4e0e07564efd89a94ddae9faa54bdfd0f555f077ff52a78553d01b4ac6e4081305e14e8b9fdbe2bf049adbe8f4b944268e48f29c699b8085ff7babb9491758dfd193106df09a2f95ff82d8c157916e8868d84a388b3b61fb5f8364913cfca342a161a7f3895e5dc9d54fdbfba993aab0c37da2358ebc0d4476d22699a158869cd9b604a9de02a4f27eecaa5af6a7fe03de3471828669c710635276c060660533ce3f4bf6afd90de64dabc2fed1d055f0cc09ceebfc60fdc88c24f8accb75692b95e767031610b38447aebc7ea123ba3d4f3b631c789e15463d95b21a48a9feee2d9f7c43e0ef8e10312b1039a", 0x21e}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000036c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f0000001180)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4e, [@remote]}, @end]}}}], 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0xd0000, 0x0) write(r2, &(0x7f0000000940)="dd5169166e385b7bc2e55d4b5fce22ace5d70b5f935c0d47387ada3071ce8abd130c42767556e424340461727873c526f60659574e5af46c7aa32687e887346639352aae862d38cd92de217b783db2cc1bdbd6b9000000000000d5080898f81409321f6e826c4c122129158c95836f709d6a45679e28550ba54b169e89d6db5c7494ee807094a3690090aa12c6958f07751ffbe72f00"/162, 0xa2) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) unshare(0x2000400) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000c00)={0x1000000000d1, 0x7ffffffffffffffd, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x100, 0xc5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x6, 0x81, 0x6, 0x2, 0x4d9, 0x8, 0x200, 0x8005, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000003280)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000a40)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x40, &(0x7f0000001080)={[{@workdir={'workdir', 0x3d, './sys/bus/pci/devices/0000:00:01.0/msi_bus'}}, {@lowerdir={'lowerdir', 0x3d, './sys/bus/pci/devices/0000:00:01.0/msi_bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000580)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0xffffffff}}, 0xb8}}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x2}, [@mark={0xc, 0x15, {0x350759, 0x401}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 9.252596926s ago: executing program 0 (id=47): close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000002ac0)='.\x00', &(0x7f0000002b00), 0x121484b, &(0x7f0000002b40)) 9.250605806s ago: executing program 0 (id=48): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000340)={0x3, 0x1, 0x80000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) setresuid(0x0, 0xee00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000003c0)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000440)={0x1, 0x0, [{0x7, 0x2, 0x1, 0x0, @adapter={0xd, 0x8001, 0x7fffffff, 0x6, 0x2}}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @empty, 0x2}, 0x1c) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x7, @empty, 0xfffffffa}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x408602, 0x0, 0x10}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140056eb6b78c0b1471800003e09283269c2a53d"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 9.178691873s ago: executing program 32 (id=48): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000340)={0x3, 0x1, 0x80000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) setresuid(0x0, 0xee00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000003c0)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000440)={0x1, 0x0, [{0x7, 0x2, 0x1, 0x0, @adapter={0xd, 0x8001, 0x7fffffff, 0x6, 0x2}}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @empty, 0x2}, 0x1c) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x7, @empty, 0xfffffffa}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x408602, 0x0, 0x10}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140056eb6b78c0b1471800003e09283269c2a53d"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 5.143340941s ago: executing program 1 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x800040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r0, &(0x7f00000001c0)='off', 0x3) write(r0, &(0x7f0000000200)='on', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 5.029244021s ago: executing program 1 (id=83): pipe2(0x0, 0x800) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000002ac0)='.\x00', &(0x7f0000002b00), 0x121484b, &(0x7f0000002b40)) 4.94705012s ago: executing program 1 (id=84): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000005c0)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0xc0, 0x2, 0x7fff0000}]}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x24, 0x1e, 0x305, 0x1000000, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000700)={0x2000, 0x0, 0x1}, 0x30, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6d) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000016c0)=ANY=[@ANYBLOB="4011040000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(0xffffffffffffffff) 4.774420776s ago: executing program 3 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xfe) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000780)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000800)={0x1, 0x0, [{0x7, 0x2, 0x1, 0x0, @adapter={0xd, 0x8001, 0x7fffffff, 0x6, 0x2}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 4.616620572s ago: executing program 3 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000002540)='./mnt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3568fd9e0c00a047, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000500)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e6fd78ac162b914c202ccb29c00b320a10700000600"/96, 0x60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x39, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000003c0)=0x2, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@local, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xaec}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x34}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x22}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000440)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'pim6reg1\x00', @broadcast}) close(0x3) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000180)={[0x36, 0x48000000788, 0x80000000002, 0x186, 0x400000004, 0xfffffffffffffffe, 0xee, 0x80000001, 0x3, 0x1000045, 0x1, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09043900e87afa712c09058202200007050209050c02ff"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x8, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') symlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x18) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x11, @string={0x11, 0x3, "5694baf552ec91814bc402aed5f2cb"}}, 0x0, 0x0}, 0x0) 4.280865666s ago: executing program 4 (id=94): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000000280)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c840) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x2) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000011a) write(r5, &(0x7f0000000140), 0x0) recvmmsg$unix(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000100)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xffffffff7ffffffc]}, 0x8) tkill(0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 4.256310958s ago: executing program 4 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000094, 0x0, 0xfffffffffffffffd}]}) r3 = socket$netlink(0x10, 0x3, 0x15) mknod$loop(0x0, 0x6000, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x84242, 0x1df2a23c5997fad6) r4 = socket$inet6(0xa, 0xa, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x34401, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000700)={'bond_slave_0\x00', 0x8000}) setresgid(0xffffffffffffffff, 0xee01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYRES8=r7, @ANYRESDEC=r7], 0x8) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x1f}, 0x1c) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x11102, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000001c0)=0x3, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x4000, &(0x7f00000002c0)={0xa, 0x4e1e, 0xfffffffa, @private2}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xf1ccccfcf8e49e42) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='ncpfs\x00', 0x0, 0x0) r8 = openat(r3, &(0x7f0000000400)='./sys/class/net/bridge0/bridge/flush\x00', 0x24641, 0x42) write(r8, &(0x7f0000000300)='0', 0x1) close_range(r5, r4, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000200)=0x2) 3.380864458s ago: executing program 4 (id=96): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x35f40000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080), 0x2000011a) write(r1, &(0x7f0000000140)="b4", 0x1) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) tkill(0x0, 0x4) 3.071586919s ago: executing program 3 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000500)=""/37, &(0x7f0000000540)=0x25) r1 = syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000004c0)='system_u:object_r:fuse_device_t:s0\x00', 0x11) r3 = fsopen(&(0x7f0000000140)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x27) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000003c0)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0xc0189436, &(0x7f0000000440)={0x20, 0x0, 0x0, 0x60, 0x3}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000100)={0x0, 0x200, 0x100, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 2.535663203s ago: executing program 4 (id=98): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x35f40000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080), 0x2000011a) write(r1, &(0x7f0000000140)="b4", 0x1) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) (fail_nth: 1) tkill(0x0, 0x4) 2.189826318s ago: executing program 1 (id=99): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x4080) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x35f40000) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080), 0x2000011a) write(r3, &(0x7f0000000140)="b4", 0x1) recvmmsg$unix(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) tkill(0x0, 0x4) 2.17807509s ago: executing program 2 (id=100): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) (async) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xe0702) (rerun: 64) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x883, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x1000, 0x0, 0x0, @by_dev={r3}, [@snapshot={0x0, 0x3008, 0x0, 0x70, 'snapshot\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'n', 0x20, '16', ' 1 discard_zeroes_cow'}}]}) fchdir(r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x0, 0x1012) mount$9p_tcp(&(0x7f0000000540), &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x8010, &(0x7f0000000000)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[], [{@appraise}]}}) 2.090088848s ago: executing program 2 (id=101): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000002b00), 0x121484b, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.089632538s ago: executing program 2 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03471b00003fba10e40007000000300002"], 0x44}}, 0x0) 2.028621813s ago: executing program 2 (id=103): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000000280)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c840) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x2) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000011a) write(r5, &(0x7f0000000140), 0x0) recvmmsg$unix(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000100)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xffffffff7ffffffc]}, 0x8) tkill(0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 2.028444953s ago: executing program 1 (id=104): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000000010104"], 0x38}}, 0x80) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@crypt={0x0, 0x2000, 0x0, 0xa0, 'crypt\x00', {'capi:rfc7539(chacha20,poly1305)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) 1.988926326s ago: executing program 1 (id=105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xaa, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x9, 0x1b0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "defa9b776769"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x1000, 0x70}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x7f, 0x8f, 0x6, 0xf1c7, 0xaf}, @mdlm={0x15, 0x24, 0x12, 0xfc00}, @mdlm={0x15, 0x24, 0x12, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0xb, 0x5}}}}}}}]}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x559, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000980)=@chain) r4 = add_key(&(0x7f00000009c0)='asymmetric\x00', 0x0, &(0x7f0000000a00)="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", 0x559, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000f80)=@keyring) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = userfaultfd(0x80001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r6, 0x0) keyctl$assume_authority(0x10, r4) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x26c}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x3}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x40000) 1.957632059s ago: executing program 4 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000002540)='./mnt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3568fd9e0c00a047, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000500)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e6fd78ac162b914c202ccb29c00b320a10700000600"/96, 0x60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x39, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000003c0)=0x2, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@local, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xaec}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x34}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x22}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000440)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'pim6reg1\x00', @broadcast}) close(0x3) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000180)={[0x36, 0x48000000788, 0x80000000002, 0x186, 0x400000004, 0xfffffffffffffffe, 0xee, 0x80000001, 0x3, 0x1000045, 0x1, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09043900e87afa712c09058202200007050209050c02ff"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x8, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') symlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x18) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x11, @string={0x11, 0x3, "5694baf552ec91814bc402aed5f2cb"}}, 0x0, 0x0}, 0x0) 1.901179734s ago: executing program 2 (id=107): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x3000000, 0x3}}, 0x14) 1.828590331s ago: executing program 2 (id=108): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000005c0)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0xc0, 0x2, 0x7fff0000}]}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x24, 0x1e, 0x305, 0x1000000, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000700)={0x2000, 0x0, 0x1}, 0x30, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6d) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000016c0)=ANY=[@ANYBLOB="4011040000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(0xffffffffffffffff) 439.245648ms ago: executing program 4 (id=109): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xaa, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x40, 0x1b0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "defa9b776769"}, {0xffffffffffffffc7, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x1000, 0x70}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x7f, 0x8f, 0x6, 0xf1c7, 0xaf}, @mdlm={0x15, 0x24, 0x12, 0xfc00}, @mdlm={0x15, 0x24, 0x12, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xb, 0x5}}}}}}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00ff0904a1010901a1007508950109308102c0c0f134ed0a98"], 0x0}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000000c0), 0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="05", 0x1}], 0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 105.853419ms ago: executing program 3 (id=110): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x8008af26, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000340)="4dfd5c3f", 0x4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x40, &(0x7f0000000040)=""/64}]}) 8.544729ms ago: executing program 3 (id=111): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000002b00), 0x121484b, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 3 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x68680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001280)=[@text32={0x20, &(0x7f00000012c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 30.565713][ T36] audit: type=1400 audit(1794063688.330:64): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.589285][ T36] audit: type=1400 audit(1794063688.360:65): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.592218][ T288] cgroup: Unknown subsys name 'net' [ 30.617331][ T36] audit: type=1400 audit(1794063688.380:66): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.617835][ T288] cgroup: Unknown subsys name 'devices' [ 30.721474][ T288] cgroup: Unknown subsys name 'hugetlb' [ 30.727113][ T288] cgroup: Unknown subsys name 'rlimit' [ 30.882489][ T36] audit: type=1400 audit(1794063688.650:67): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.905990][ T36] audit: type=1400 audit(1794063688.650:68): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.931013][ T36] audit: type=1400 audit(1794063688.650:69): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.952503][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.963278][ T36] audit: type=1400 audit(1794063688.740:70): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.988782][ T36] audit: type=1400 audit(1794063688.740:71): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.021311][ T36] audit: type=1400 audit(1794063688.790:72): avc: denied { read } for pid=288 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.022647][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.046950][ T36] audit: type=1400 audit(1794063688.790:73): avc: denied { open } for pid=288 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.913940][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.921285][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.928392][ T296] bridge_slave_0: entered allmulticast mode [ 31.934901][ T296] bridge_slave_0: entered promiscuous mode [ 31.944774][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.951982][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.959170][ T296] bridge_slave_1: entered allmulticast mode [ 31.965452][ T296] bridge_slave_1: entered promiscuous mode [ 31.983740][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.990871][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.997974][ T297] bridge_slave_0: entered allmulticast mode [ 32.004383][ T297] bridge_slave_0: entered promiscuous mode [ 32.011298][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.018374][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.025568][ T297] bridge_slave_1: entered allmulticast mode [ 32.032102][ T297] bridge_slave_1: entered promiscuous mode [ 32.052527][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.059699][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.066791][ T295] bridge_slave_0: entered allmulticast mode [ 32.073241][ T295] bridge_slave_0: entered promiscuous mode [ 32.082592][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.089756][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.096853][ T295] bridge_slave_1: entered allmulticast mode [ 32.103292][ T295] bridge_slave_1: entered promiscuous mode [ 32.138672][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.145816][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.152957][ T298] bridge_slave_0: entered allmulticast mode [ 32.159309][ T298] bridge_slave_0: entered promiscuous mode [ 32.168773][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.175837][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.182987][ T298] bridge_slave_1: entered allmulticast mode [ 32.189413][ T298] bridge_slave_1: entered promiscuous mode [ 32.340840][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.347925][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.355295][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.362540][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.376261][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.383498][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.390820][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.397887][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.407526][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.414641][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.422019][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.429093][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.453273][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.460388][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.467725][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.474847][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.518776][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.526477][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.534406][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.543276][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.550666][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.557979][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.565514][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.572919][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.585555][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.592672][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.606847][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.614001][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.621698][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.628791][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.641704][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.648806][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.656377][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.663486][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.677848][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.684978][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.692664][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.699752][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.713949][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.721057][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.766874][ T295] veth0_vlan: entered promiscuous mode [ 32.796136][ T296] veth0_vlan: entered promiscuous mode [ 32.802569][ T298] veth0_vlan: entered promiscuous mode [ 32.818687][ T296] veth1_macvtap: entered promiscuous mode [ 32.827237][ T295] veth1_macvtap: entered promiscuous mode [ 32.843156][ T297] veth0_vlan: entered promiscuous mode [ 32.851049][ T298] veth1_macvtap: entered promiscuous mode [ 32.895477][ T297] veth1_macvtap: entered promiscuous mode [ 32.916765][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.952743][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.015784][ T323] FAULT_INJECTION: forcing a failure. [ 33.015784][ T323] name failslab, interval 1, probability 0, space 0, times 1 [ 33.028970][ T323] CPU: 0 UID: 0 PID: 323 Comm: syz.0.5 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 33.029008][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.029032][ T323] Call Trace: [ 33.029046][ T323] [ 33.029055][ T323] __dump_stack+0x21/0x30 [ 33.029084][ T323] dump_stack_lvl+0x140/0x1c0 [ 33.029103][ T323] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.029126][ T323] dump_stack+0x19/0x20 [ 33.029145][ T323] should_fail_ex+0x3c2/0x510 [ 33.029166][ T323] ? security_inode_init_security+0x11c/0x600 [ 33.029194][ T323] should_failslab+0xac/0x100 [ 33.029216][ T323] __kmalloc_noprof+0x69/0x510 [ 33.029246][ T323] ? security_inode_init_security+0x11c/0x600 [ 33.029270][ T323] ? get_inode_acl+0x50/0x50 [ 33.029297][ T323] ? __cfi_shmem_initxattrs+0x10/0x10 [ 33.029323][ T323] security_inode_init_security+0x11c/0x600 [ 33.029349][ T323] ? __cfi_security_inode_init_security+0x10/0x10 [ 33.029372][ T323] ? __kasan_check_write+0x18/0x20 [ 33.029401][ T323] ? set_cached_acl+0xe1/0x1a0 [ 33.029427][ T323] ? simple_acl_create+0x190/0x1c0 [ 33.029467][ T323] shmem_mknod+0xd5/0x200 [ 33.029492][ T323] shmem_mkdir+0x3b/0x80 [ 33.029517][ T323] vfs_mkdir+0x58e/0x810 [ 33.029544][ T323] ovl_mkdir_real+0xcd/0x280 [ 33.029571][ T323] ovl_workdir_create+0x341/0x700 [ 33.029595][ T323] ? ovl_statfs+0x2d0/0x2d0 [ 33.029617][ T323] ? _raw_spin_lock+0x92/0x120 [ 33.029639][ T323] ? _raw_spin_unlock+0x45/0x60 [ 33.029659][ T323] ? mnt_want_write+0x321/0x510 [ 33.029684][ T323] ovl_fill_super+0x1827/0x51a0 [ 33.029705][ T323] ? shrinker_alloc+0x68/0xa60 [ 33.029734][ T323] ? kasan_save_track+0x3e/0x80 [ 33.029755][ T323] ? __cfi_ovl_fill_super+0x10/0x10 [ 33.029776][ T323] ? xas_store+0xb6e/0x17f0 [ 33.029800][ T323] ? xas_nomem+0x71/0x2c0 [ 33.029822][ T323] ? ida_alloc_range+0xa44/0xa80 [ 33.029851][ T323] ? __kmalloc_cache_noprof+0x23c/0x470 [ 33.029883][ T323] ? __kasan_check_write+0x18/0x20 [ 33.029911][ T323] ? mutex_unlock+0x90/0x240 [ 33.029936][ T323] ? __cfi_mutex_unlock+0x10/0x10 [ 33.029963][ T323] ? __kasan_check_write+0x18/0x20 [ 33.029993][ T323] ? sget_fc+0x97e/0xa70 [ 33.030017][ T323] ? __cfi_set_anon_super_fc+0x10/0x10 [ 33.030045][ T323] get_tree_nodev+0xce/0x170 [ 33.030070][ T323] ? __cfi_ovl_fill_super+0x10/0x10 [ 33.030091][ T323] ovl_get_tree+0x20/0x30 [ 33.030108][ T323] vfs_get_tree+0x9e/0x290 [ 33.030137][ T323] do_new_mount+0x251/0xb40 [ 33.030165][ T323] ? security_capable+0x44/0x130 [ 33.030186][ T323] path_mount+0x66a/0xff0 [ 33.030214][ T323] ? putname+0x113/0x150 [ 33.030234][ T323] __se_sys_mount+0x2bf/0x480 [ 33.030253][ T323] ? __x64_sys_mount+0xf0/0xf0 [ 33.030270][ T323] ? __kasan_check_write+0x18/0x20 [ 33.030298][ T323] ? fpregs_restore_userregs+0x11c/0x260 [ 33.030328][ T323] __x64_sys_mount+0xc3/0xf0 [ 33.030345][ T323] x64_sys_call+0x2021/0x2ee0 [ 33.030366][ T323] do_syscall_64+0x57/0xf0 [ 33.030386][ T323] ? clear_bhb_loop+0x50/0xa0 [ 33.030414][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.030440][ T323] RIP: 0033:0x7f427ad9fb19 [ 33.030474][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.030491][ T323] RSP: 002b:00007f427bc72028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.030517][ T323] RAX: ffffffffffffffda RBX: 00007f427b025fa0 RCX: 00007f427ad9fb19 [ 33.030533][ T323] RDX: 0000200000000740 RSI: 0000200000000700 RDI: 0000000000000000 [ 33.030547][ T323] RBP: 00007f427ae37b70 R08: 0000200000000000 R09: 0000000000000000 [ 33.030561][ T323] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 33.030573][ T323] R13: 00007f427b026038 R14: 00007f427b025fa0 R15: 00007ffe56d7ad98 [ 33.030591][ T323] [ 33.030630][ T323] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 33.289067][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.476672][ T328] FAULT_INJECTION: forcing a failure. [ 33.476672][ T328] name failslab, interval 1, probability 0, space 0, times 0 [ 33.490005][ T67] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.500529][ T328] CPU: 0 UID: 0 PID: 328 Comm: syz.0.6 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 33.500566][ T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.500580][ T328] Call Trace: [ 33.500589][ T328] [ 33.500597][ T328] __dump_stack+0x21/0x30 [ 33.500630][ T328] dump_stack_lvl+0x140/0x1c0 [ 33.500652][ T328] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.500675][ T328] ? ttwu_do_activate+0x620/0x620 [ 33.500706][ T328] ? activate_task+0x43b/0x480 [ 33.500733][ T328] dump_stack+0x19/0x20 [ 33.500753][ T328] should_fail_ex+0x3c2/0x510 [ 33.500776][ T328] should_failslab+0xac/0x100 [ 33.500800][ T328] kmem_cache_alloc_node_noprof+0x45/0x420 [ 33.500835][ T328] ? __alloc_skb+0x10c/0x360 [ 33.500862][ T328] __alloc_skb+0x10c/0x360 [ 33.500887][ T328] alloc_skb_with_frags+0xd0/0x8b0 [ 33.500913][ T328] ? __queue_work+0xb67/0x1130 [ 33.500946][ T328] virtio_transport_alloc_skb+0xdb/0xf90 [ 33.500972][ T328] ? queue_work_on+0x165/0x1e0 [ 33.501014][ T328] ? __cfi_queue_work_on+0x10/0x10 [ 33.501044][ T328] ? trace_raw_output_virtio_transport_recv_pkt+0x360/0x360 [ 33.501068][ T328] ? _raw_spin_lock_bh+0x96/0x130 [ 33.501091][ T328] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 33.501115][ T328] virtio_transport_send_pkt_info+0x6cf/0x1110 [ 33.501140][ T328] virtio_transport_stream_enqueue+0xc8/0x120 [ 33.501172][ T328] ? __cfi_virtio_transport_stream_enqueue+0x10/0x10 [ 33.501204][ T328] ? avc_has_perm+0x155/0x240 [ 33.501228][ T328] ? __cfi_avc_has_perm+0x10/0x10 [ 33.501250][ T328] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 33.501272][ T328] ? remove_wait_queue+0x132/0x150 [ 33.501303][ T328] vsock_connectible_sendmsg+0xb6b/0x10f0 [ 33.501331][ T328] ? __cfi_slow_avc_audit+0x10/0x10 [ 33.501353][ T328] ? __cfi_vsock_connectible_sendmsg+0x10/0x10 [ 33.501379][ T328] ? __cfi_woken_wake_function+0x10/0x10 [ 33.501400][ T328] ? avc_has_perm_noaudit+0x2bc/0x360 [ 33.501423][ T328] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 33.501443][ T328] ? security_socket_sendmsg+0x3d/0x100 [ 33.501470][ T328] ? __cfi_vsock_connectible_sendmsg+0x10/0x10 [ 33.501496][ T328] sock_write_iter+0x445/0x490 [ 33.501518][ T328] ? __cfi_sock_write_iter+0x10/0x10 [ 33.501541][ T328] ? selinux_file_permission+0x8a4/0xb60 [ 33.501575][ T328] do_iter_readv_writev+0x62f/0x820 [ 33.501598][ T328] ? vfs_iter_read+0x5e0/0x5e0 [ 33.501620][ T328] ? bpf_lsm_file_permission+0xd/0x20 [ 33.501646][ T328] vfs_writev+0x4a5/0xe90 [ 33.501671][ T328] ? do_writev+0x2e0/0x2e0 [ 33.501704][ T328] do_writev+0x151/0x2e0 [ 33.501730][ T328] ? vfs_readv+0xa00/0xa00 [ 33.501754][ T328] ? __kasan_check_write+0x18/0x20 [ 33.501786][ T328] ? fpregs_restore_userregs+0x11c/0x260 [ 33.501817][ T328] __x64_sys_writev+0x81/0x90 [ 33.501837][ T328] x64_sys_call+0x1fbb/0x2ee0 [ 33.501861][ T328] do_syscall_64+0x57/0xf0 [ 33.501883][ T328] ? clear_bhb_loop+0x50/0xa0 [ 33.501913][ T328] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.501941][ T328] RIP: 0033:0x7f427ad9fb19 [ 33.501960][ T328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.501978][ T328] RSP: 002b:00007f427bc72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 33.502013][ T328] RAX: ffffffffffffffda RBX: 00007f427b025fa0 RCX: 00007f427ad9fb19 [ 33.502029][ T328] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000006 [ 33.502044][ T328] RBP: 00007f427ae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 33.502058][ T328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.502071][ T328] R13: 00007f427b026038 R14: 00007f427b025fa0 R15: 00007ffe56d7ad98 [ 33.502089][ T328] [ 33.507062][ T328] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6'. [ 33.640661][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.728922][ T67] usb 3-1: Using ep0 maxpacket: 16 [ 33.736919][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 33.748508][ T67] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.788068][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 33.828842][ T67] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 33.842304][ T45] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.858444][ T67] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 33.869987][ T45] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 33.884520][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.886651][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.913136][ T67] usb 3-1: config 0 descriptor?? [ 33.922000][ T45] usb 4-1: Product: syz [ 33.998207][ T45] usb 4-1: Manufacturer: syz [ 34.002999][ T45] usb 4-1: SerialNumber: syz [ 34.009497][ T317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.016730][ T317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.026222][ T45] cdc_acm 4-1:1.1: probe with driver cdc_acm failed with error -22 [ 34.062432][ T333] ======================================================= [ 34.062432][ T333] WARNING: The mand mount option has been deprecated and [ 34.062432][ T333] and is ignored by this kernel. Remove the mand [ 34.062432][ T333] option from the mount to silence this warning. [ 34.062432][ T333] ======================================================= [ 34.104939][ T333] ./dev/sda1: Can't lookup blockdev [ 34.304747][ T317] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 34.325581][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.344876][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.366471][ T331] usb 4-1: USB disconnect, device number 2 [ 34.478665][ T342] FAULT_INJECTION: forcing a failure. [ 34.478665][ T342] name failslab, interval 1, probability 0, space 0, times 0 [ 34.507098][ T342] CPU: 0 UID: 0 PID: 342 Comm: syz.1.11 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 34.507145][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.507161][ T342] Call Trace: [ 34.507169][ T342] [ 34.507179][ T342] __dump_stack+0x21/0x30 [ 34.507209][ T342] dump_stack_lvl+0x140/0x1c0 [ 34.507231][ T342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.507254][ T342] ? check_stack_object+0x81/0x150 [ 34.507291][ T342] ? __check_object_size+0x99/0x870 [ 34.507326][ T342] dump_stack+0x19/0x20 [ 34.507347][ T342] should_fail_ex+0x3c2/0x510 [ 34.507369][ T342] should_failslab+0xac/0x100 [ 34.507394][ T342] __kmalloc_cache_noprof+0x41/0x470 [ 34.507428][ T342] ? getname_flags+0x2e5/0x6b0 [ 34.507451][ T342] ? strncpy_from_user+0x22c/0x280 [ 34.507473][ T342] getname_flags+0x2e5/0x6b0 [ 34.507496][ T342] user_path_at+0x2b/0x60 [ 34.507521][ T342] __x64_sys_umount+0xfa/0x180 [ 34.507553][ T342] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.507584][ T342] ? switch_fpu_return+0x12/0x20 [ 34.507617][ T342] x64_sys_call+0x2ab8/0x2ee0 [ 34.507642][ T342] do_syscall_64+0x57/0xf0 [ 34.507667][ T342] ? clear_bhb_loop+0x50/0xa0 [ 34.507698][ T342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.507729][ T342] RIP: 0033:0x7ff7ebf9fb19 [ 34.507749][ T342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.507769][ T342] RSP: 002b:00007ff7ece8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.507795][ T342] RAX: ffffffffffffffda RBX: 00007ff7ec225fa0 RCX: 00007ff7ebf9fb19 [ 34.507812][ T342] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000003480 [ 34.507827][ T342] RBP: 00007ff7ec037b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.507841][ T342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.507855][ T342] R13: 00007ff7ec226038 R14: 00007ff7ec225fa0 R15: 00007ffdb8076bb8 [ 34.507884][ T342] [ 34.540808][ T343] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 34.740828][ T342] @0Ù: renamed from bond_slave_1 [ 34.923781][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 34.957377][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 34.974473][ T358] futex_wake_op: syz.2.3 tries to shift op by -1; fix this program [ 34.989161][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.017509][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.038873][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.048483][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.057639][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.067241][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.076209][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.128777][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.137168][ T362] pim6reg1: entered promiscuous mode [ 35.147115][ T362] pim6reg1: entered allmulticast mode [ 35.289156][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 35.295606][ T45] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 35.304278][ T45] usb 1-1: config 0 has no interface number 0 [ 35.310716][ T45] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 35.322710][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 35.332210][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.340485][ T45] usb 1-1: Product: syz [ 35.344847][ T45] usb 1-1: Manufacturer: syz [ 35.349819][ T45] usb 1-1: SerialNumber: syz [ 35.356845][ T45] usb 1-1: config 0 descriptor?? [ 35.363349][ T337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 35.418828][ T98] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 35.570273][ T98] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 35.578698][ T98] usb 4-1: config 127 has no interface number 0 [ 35.582469][ T337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 35.585121][ T98] usb 4-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 35.603379][ T98] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 35.615088][ T98] usb 4-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 35.629948][ T98] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 35.639085][ T98] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.647627][ T98] usb 4-1: Product: syz [ 35.651914][ T98] usb 4-1: Manufacturer: syz [ 35.656557][ T98] usb 4-1: SerialNumber: syz [ 35.662388][ T360] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 35.767164][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 35.767192][ T36] audit: type=1400 audit(1794063693.530:151): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.873793][ T36] audit: type=1400 audit(1794063693.640:152): avc: denied { unlink } for pid=359 comm="syz.3.15" name="#1" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.021824][ T373] syz.1.26 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.031824][ T361] usb 3-1: USB disconnect, device number 2 [ 36.044015][ T373] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 36.059894][ T36] audit: type=1400 audit(1794063693.830:153): avc: denied { relabelto } for pid=372 comm="syz.1.26" name="file0" dev="cgroup2" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modem_device_t:s0" [ 36.095941][ T360] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 36.117987][ T36] audit: type=1400 audit(1794063693.830:154): avc: denied { associate } for pid=372 comm="syz.1.26" name="file0" dev="cgroup2" ino=156 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modem_device_t:s0" [ 36.146616][ T36] audit: type=1400 audit(1794063693.830:155): avc: denied { append } for pid=372 comm="syz.1.26" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.269536][ T380] FAULT_INJECTION: forcing a failure. [ 36.269536][ T380] name failslab, interval 1, probability 0, space 0, times 0 [ 36.282444][ T380] CPU: 0 UID: 0 PID: 380 Comm: syz.2.20 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 36.282481][ T380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 36.282496][ T380] Call Trace: [ 36.282504][ T380] [ 36.282514][ T380] __dump_stack+0x21/0x30 [ 36.282541][ T380] dump_stack_lvl+0x140/0x1c0 [ 36.282561][ T380] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.282583][ T380] ? check_stack_object+0x81/0x150 [ 36.282619][ T380] ? __check_object_size+0x99/0x870 [ 36.282655][ T380] dump_stack+0x19/0x20 [ 36.282676][ T380] should_fail_ex+0x3c2/0x510 [ 36.282711][ T380] should_failslab+0xac/0x100 [ 36.282736][ T380] __kmalloc_cache_noprof+0x41/0x470 [ 36.282771][ T380] ? getname_flags+0x2e5/0x6b0 [ 36.282795][ T380] ? strncpy_from_user+0x22c/0x280 [ 36.282818][ T380] getname_flags+0x2e5/0x6b0 [ 36.282840][ T380] user_path_at+0x2b/0x60 [ 36.282863][ T380] __x64_sys_umount+0xfa/0x180 [ 36.282898][ T380] ? __cfi___x64_sys_umount+0x10/0x10 [ 36.282921][ T380] ? switch_fpu_return+0x12/0x20 [ 36.282965][ T380] x64_sys_call+0x2ab8/0x2ee0 [ 36.282990][ T380] do_syscall_64+0x57/0xf0 [ 36.283013][ T380] ? clear_bhb_loop+0x50/0xa0 [ 36.283048][ T380] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.283071][ T380] RIP: 0033:0x7f60a879fb19 [ 36.283085][ T380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.283117][ T380] RSP: 002b:00007f60a71f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 36.283143][ T380] RAX: ffffffffffffffda RBX: 00007f60a8a25fa0 RCX: 00007f60a879fb19 [ 36.283159][ T380] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000003480 [ 36.283173][ T380] RBP: 00007f60a8837b70 R08: 0000000000000000 R09: 0000000000000000 [ 36.283189][ T380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.283204][ T380] R13: 00007f60a8a26038 R14: 00007f60a8a25fa0 R15: 00007fff14dac888 [ 36.283218][ T380] [ 36.285965][ T380] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 36.326437][ T98] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 36.336002][ T380] @0Ù: renamed from bond_slave_1 [ 36.339538][ T98] asix 4-1:127.57: probe with driver asix failed with error -61 [ 36.603521][ T45] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 70 [ 36.615306][ T45] usb 1-1: USB disconnect, device number 2 [ 36.630113][ T98] usb 4-1: USB disconnect, device number 3 [ 36.647824][ T36] audit: type=1400 audit(1794063694.410:156): avc: denied { create } for pid=382 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.667357][ T36] audit: type=1400 audit(1794063694.420:157): avc: denied { create } for pid=382 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.678985][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 36.694144][ T36] audit: type=1400 audit(1794063694.420:158): avc: denied { setopt } for pid=382 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.731604][ T36] audit: type=1400 audit(1794063694.490:159): avc: denied { accept } for pid=384 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 36.752354][ T36] audit: type=1400 audit(1794063694.490:160): avc: denied { setopt } for pid=384 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.861784][ T31] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 36.871005][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.879072][ T31] usb 2-1: Product: syz [ 36.883299][ T31] usb 2-1: Manufacturer: syz [ 36.887919][ T31] usb 2-1: SerialNumber: syz [ 36.988823][ T378] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.141084][ T378] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.151517][ T378] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 37.161977][ T378] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 37.172285][ T378] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.187124][ T378] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 37.197008][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.205427][ T378] usb 3-1: Product: syz [ 37.211091][ T378] usb 3-1: Manufacturer: syz [ 37.215898][ T378] usb 3-1: SerialNumber: syz [ 37.224614][ T389] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 37.225393][ T389] @0Ù: renamed from bond_slave_1 [ 37.230140][ T387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.329504][ T387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.338572][ T378] cdc_acm 3-1:1.1: probe with driver cdc_acm failed with error -22 [ 37.529382][ T31] (unnamed net_device) (uninitialized): Assigned a random MAC address: 6a:32:81:9e:86:81 [ 37.533616][ T376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.545511][ T31] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 37.554336][ T376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.621690][ T387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.658933][ T387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.680470][ T67] usb 3-1: USB disconnect, device number 3 [ 37.688807][ T378] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.743740][ T410] device-mapper: ioctl: Unable to rename non-existent device, syzd0 to uuid syzd0 [ 37.868781][ T378] usb 1-1: Using ep0 maxpacket: 16 [ 37.875282][ T378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.886378][ T378] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.897235][ T378] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.906742][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.915067][ T378] usb 1-1: Product: syz [ 37.919588][ T378] usb 1-1: Manufacturer: syz [ 37.924348][ T378] usb 1-1: SerialNumber: syz [ 38.138671][ T378] usb 1-1: 0:2 : does not exist [ 38.150338][ T378] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 38.171743][ T378] usb 1-1: USB disconnect, device number 3 [ 38.221265][ T434] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 38.578803][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.818802][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 38.825077][ T45] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 38.833401][ T45] usb 4-1: config 0 has no interface number 0 [ 38.839629][ T45] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 38.851232][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 38.860388][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.868453][ T45] usb 4-1: Product: syz [ 38.872684][ T45] usb 4-1: Manufacturer: syz [ 38.877345][ T45] usb 4-1: SerialNumber: syz [ 38.882763][ T45] usb 4-1: config 0 descriptor?? [ 38.888337][ T432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.913656][ T151] usb 2-1: device reset failed [ 38.920621][ C1] usb 2-1: eth1: intr status -71 [ 38.926424][ C1] usb 2-1: eth1: intr status -71 [ 38.931598][ T378] usb 2-1: USB disconnect, device number 2 [ 38.937485][ C1] usb 2-1: eth1: intr status -71 [ 39.127660][ T456] pim6reg1: entered promiscuous mode [ 39.133126][ T456] pim6reg1: entered allmulticast mode [ 39.133341][ T431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.388821][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 39.539940][ T31] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 39.558690][ T31] usb 3-1: config 127 has no interface number 0 [ 39.565459][ T31] usb 3-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 39.576913][ T31] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 39.588355][ T31] usb 3-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 39.609904][ T31] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 39.619188][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.627313][ T31] usb 3-1: Product: syz [ 39.631663][ T31] usb 3-1: Manufacturer: syz [ 39.636494][ T31] usb 3-1: SerialNumber: syz [ 39.642580][ T456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.701813][ T469] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 39.788804][ T331] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.952360][ T45] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 70 [ 39.970627][ T474] x_tables: unsorted entry at hook 2 [ 39.977482][ T474] overlay: ./sys/bus/pci/devices/0000:00:01.0/msi_bus is not a directory [ 40.039946][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.050989][ T331] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.060118][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.069110][ T331] usb 2-1: config 0 descriptor?? [ 40.091482][ T456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.171010][ T45] usb 4-1: USB disconnect, device number 4 [ 40.276406][ T331] usbhid 2-1:0.0: can't add hid device: -71 [ 40.283305][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 40.292311][ T331] usb 2-1: USB disconnect, device number 3 [ 40.300105][ T31] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 40.312491][ T31] asix 3-1:127.57: probe with driver asix failed with error -71 [ 40.321506][ T31] usb 3-1: USB disconnect, device number 4 [ 40.609511][ T457] bridge_slave_1: left allmulticast mode [ 40.615317][ T457] bridge_slave_1: left promiscuous mode [ 40.621091][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.628982][ T457] bridge_slave_0: left allmulticast mode [ 40.634929][ T457] bridge_slave_0: left promiscuous mode [ 40.640889][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.713821][ T331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.786112][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 40.786131][ T36] audit: type=1400 audit(1794063698.566:192): avc: denied { mounton } for pid=478 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 40.815481][ T457] veth1_macvtap: left promiscuous mode [ 40.821140][ T457] veth0_vlan: left promiscuous mode [ 40.843011][ T36] audit: type=1400 audit(1794063698.566:193): avc: denied { create } for pid=478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.871438][ T480] FAULT_INJECTION: forcing a failure. [ 40.871438][ T480] name failslab, interval 1, probability 0, space 0, times 0 [ 40.888367][ T480] CPU: 1 UID: 0 PID: 480 Comm: syz.3.51 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 40.888403][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 40.888417][ T480] Call Trace: [ 40.888424][ T480] [ 40.888433][ T480] __dump_stack+0x21/0x30 [ 40.888458][ T480] dump_stack_lvl+0x140/0x1c0 [ 40.888478][ T480] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.888498][ T480] ? release_sock+0x171/0x1f0 [ 40.888524][ T480] dump_stack+0x19/0x20 [ 40.888543][ T480] should_fail_ex+0x3c2/0x510 [ 40.888565][ T480] should_failslab+0xac/0x100 [ 40.888589][ T480] kmem_cache_alloc_node_noprof+0x45/0x420 [ 40.888624][ T480] ? netlink_data_ready+0x20/0x20 [ 40.888652][ T480] ? __alloc_skb+0x10c/0x360 [ 40.888677][ T480] __alloc_skb+0x10c/0x360 [ 40.888702][ T480] netlink_alloc_large_skb+0xf7/0x1b0 [ 40.888729][ T480] netlink_sendmsg+0x576/0xad0 [ 40.888759][ T480] ? __cfi_netlink_sendmsg+0x10/0x10 [ 40.888791][ T480] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 40.888811][ T480] ? security_socket_sendmsg+0x3d/0x100 [ 40.888842][ T480] ____sys_sendmsg+0x99e/0xa00 [ 40.888873][ T480] ? __import_iovec+0x5b9/0x7d0 [ 40.888900][ T480] ? __sys_sendmsg_sock+0x50/0x50 [ 40.888931][ T480] ? import_iovec+0x80/0xb0 [ 40.888958][ T480] ___sys_sendmsg+0x2a6/0x370 [ 40.888990][ T480] ? __sys_sendmsg+0x260/0x260 [ 40.889019][ T480] ? proc_fail_nth_write+0x184/0x220 [ 40.889048][ T480] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 40.889082][ T480] ? __fget_files+0x2bc/0x330 [ 40.889107][ T480] __x64_sys_sendmsg+0x1be/0x2a0 [ 40.889136][ T480] ? fput+0x1a4/0x230 [ 40.889159][ T480] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 40.889189][ T480] ? ksys_write+0x1f3/0x260 [ 40.889210][ T480] ? __kasan_check_read+0x15/0x20 [ 40.889242][ T480] x64_sys_call+0x2a4c/0x2ee0 [ 40.889275][ T480] do_syscall_64+0x57/0xf0 [ 40.889298][ T480] ? clear_bhb_loop+0x50/0xa0 [ 40.889328][ T480] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.889357][ T480] RIP: 0033:0x7f36b0b9fb19 [ 40.889375][ T480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.889393][ T480] RSP: 002b:00007f36b19ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.889415][ T480] RAX: ffffffffffffffda RBX: 00007f36b0e25fa0 RCX: 00007f36b0b9fb19 [ 40.889431][ T480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 40.889444][ T480] RBP: 00007f36b19ec090 R08: 0000000000000000 R09: 0000000000000000 [ 40.889457][ T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.889470][ T480] R13: 00007f36b0e26038 R14: 00007f36b0e25fa0 R15: 00007ffc1cf4cb68 [ 40.889489][ T480] [ 40.948696][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.014098][ T36] audit: type=1400 audit(1794063698.742:194): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.019168][ T331] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.019875][ T36] audit: type=1400 audit(1794063698.793:195): avc: denied { mount } for pid=481 comm="syz.3.53" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 41.024017][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.044730][ T331] usb 2-1: config 0 descriptor?? [ 41.046102][ T36] audit: type=1400 audit(1794063698.804:196): avc: denied { write } for pid=481 comm="syz.3.53" name="uprobe_events" dev="tracefs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 41.204950][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.230534][ T36] audit: type=1400 audit(1794063698.804:197): avc: denied { open } for pid=481 comm="syz.3.53" path="/10/tracing/uprobe_events" dev="tracefs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 41.242804][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.261043][ T36] audit: type=1400 audit(1794063699.030:198): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 41.268285][ T478] bridge_slave_0: entered allmulticast mode [ 41.338252][ T478] bridge_slave_0: entered promiscuous mode [ 41.345906][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.353155][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.361369][ T478] bridge_slave_1: entered allmulticast mode [ 41.368197][ T478] bridge_slave_1: entered promiscuous mode [ 41.464072][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.471222][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.478536][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.485673][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.527227][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.535143][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.545472][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.552595][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.562738][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.569866][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.603468][ T478] veth0_vlan: entered promiscuous mode [ 41.617854][ T36] audit: type=1400 audit(1794063699.432:199): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.641097][ T478] veth1_macvtap: entered promiscuous mode [ 41.646064][ T497] 9pnet_fd: Insufficient options for proto=fd [ 41.680140][ T36] audit: type=1400 audit(1794063699.494:200): avc: denied { create } for pid=498 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.720000][ T36] audit: type=1400 audit(1794063699.535:201): avc: denied { write } for pid=492 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.775588][ T500] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 41.775587][ T503] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 41.889121][ T331] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 41.898498][ T331] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 41.936933][ T378] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.085936][ T378] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 42.095631][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.104028][ T378] usb 5-1: Product: syz [ 42.108398][ T378] usb 5-1: Manufacturer: syz [ 42.113424][ T378] usb 5-1: SerialNumber: syz [ 42.196764][ T31] usb 2-1: USB disconnect, device number 4 [ 42.197042][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 42.387887][ T509] pim6reg1: entered promiscuous mode [ 42.393398][ T509] pim6reg1: entered allmulticast mode [ 42.504615][ T511] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 42.637337][ T331] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 42.701449][ T522] 9pnet_fd: Insufficient options for proto=fd [ 42.709752][ T378] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:b5:85:c4:5c:7a [ 42.735020][ T378] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 42.784490][ T331] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 42.811858][ T331] usb 4-1: config 127 has no interface number 0 [ 42.824034][ T331] usb 4-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 42.841751][ T331] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 42.864031][ T331] usb 4-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 42.893965][ T331] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 42.910104][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.931537][ T331] usb 4-1: Product: syz [ 42.935764][ T331] usb 4-1: Manufacturer: syz [ 42.940477][ T331] usb 4-1: SerialNumber: syz [ 42.953080][ T509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.367293][ T331] asix 4-1:127.57: probe with driver asix failed with error -71 [ 43.377170][ T331] usb 4-1: USB disconnect, device number 5 [ 44.086435][ T151] usb 5-1: device reset failed [ 44.092721][ T556] __nla_validate_parse: 25 callbacks suppressed [ 44.092744][ T556] netlink: 260 bytes leftover after parsing attributes in process `syz.1.69'. [ 44.108730][ C1] usb 5-1: eth1: intr status -71 [ 44.113856][ C1] usb 5-1: eth1: intr status -71 [ 44.118966][ C1] usb 5-1: eth1: intr status -71 [ 44.124738][ C1] usb 5-1: eth1: intr status -71 [ 44.130182][ C1] usb 5-1: eth1: intr status -71 [ 44.134245][ T561] netlink: 'syz.2.70': attribute type 46 has an invalid length. [ 44.135492][ T31] usb 5-1: USB disconnect, device number 2 [ 44.142902][ C1] usb 5-1: eth1: intr status -71 [ 44.300865][ T574] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 44.367871][ T584] 9pnet_fd: Insufficient options for proto=fd [ 44.385222][ T586] FAULT_INJECTION: forcing a failure. [ 44.385222][ T586] name failslab, interval 1, probability 0, space 0, times 0 [ 44.398550][ T586] CPU: 1 UID: 0 PID: 586 Comm: syz.1.75 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 44.398585][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 44.398601][ T586] Call Trace: [ 44.398607][ T586] [ 44.398612][ T586] __dump_stack+0x21/0x30 [ 44.398633][ T586] dump_stack_lvl+0x140/0x1c0 [ 44.398647][ T586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.398661][ T586] ? release_sock+0x171/0x1f0 [ 44.398679][ T586] dump_stack+0x19/0x20 [ 44.398692][ T586] should_fail_ex+0x3c2/0x510 [ 44.398707][ T586] should_failslab+0xac/0x100 [ 44.398724][ T586] kmem_cache_alloc_node_noprof+0x45/0x420 [ 44.398747][ T586] ? netlink_data_ready+0x20/0x20 [ 44.398766][ T586] ? __alloc_skb+0x10c/0x360 [ 44.398783][ T586] __alloc_skb+0x10c/0x360 [ 44.398800][ T586] netlink_alloc_large_skb+0xf7/0x1b0 [ 44.398818][ T586] netlink_sendmsg+0x576/0xad0 [ 44.398840][ T586] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.398861][ T586] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 44.398875][ T586] ? security_socket_sendmsg+0x3d/0x100 [ 44.398894][ T586] ____sys_sendmsg+0x99e/0xa00 [ 44.398916][ T586] ? __import_iovec+0x5b9/0x7d0 [ 44.398934][ T586] ? __sys_sendmsg_sock+0x50/0x50 [ 44.398955][ T586] ? import_iovec+0x80/0xb0 [ 44.398974][ T586] ___sys_sendmsg+0x2a6/0x370 [ 44.398995][ T586] ? __sys_sendmsg+0x260/0x260 [ 44.399015][ T586] ? proc_fail_nth_write+0x184/0x220 [ 44.399044][ T586] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.399068][ T586] ? __fget_files+0x2bc/0x330 [ 44.399086][ T586] __x64_sys_sendmsg+0x1be/0x2a0 [ 44.399108][ T586] ? fput+0x1a4/0x230 [ 44.399126][ T586] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 44.399150][ T586] ? ksys_write+0x1f3/0x260 [ 44.399166][ T586] ? __kasan_check_read+0x15/0x20 [ 44.399190][ T586] x64_sys_call+0x2a4c/0x2ee0 [ 44.399207][ T586] do_syscall_64+0x57/0xf0 [ 44.399223][ T586] ? clear_bhb_loop+0x50/0xa0 [ 44.399247][ T586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.399268][ T586] RIP: 0033:0x7ff7ebf9fb19 [ 44.399284][ T586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.399297][ T586] RSP: 002b:00007ff7ece8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.399314][ T586] RAX: ffffffffffffffda RBX: 00007ff7ec225fa0 RCX: 00007ff7ebf9fb19 [ 44.399326][ T586] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 44.399337][ T586] RBP: 00007ff7ece8d090 R08: 0000000000000000 R09: 0000000000000000 [ 44.399347][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.399356][ T586] R13: 00007ff7ec226038 R14: 00007ff7ec225fa0 R15: 00007ffdb8076bb8 [ 44.399370][ T586] [ 44.733425][ T378] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.757789][ T9] smpboot: CPU 1 is now offline [ 44.769654][ T596] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 44.847701][ T605] 9pnet_fd: Insufficient options for proto=fd [ 44.978687][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.997580][ T378] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 45.007091][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.016317][ T378] usb 3-1: config 0 descriptor?? [ 45.028714][ T611] tipc: Started in network mode [ 45.045991][ T611] tipc: Node identity 4, cluster identity 4711 [ 45.065691][ T611] tipc: Node number set to 4 [ 45.225424][ T378] usbhid 3-1:0.0: can't add hid device: -71 [ 45.231451][ T378] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.243029][ T378] usb 3-1: USB disconnect, device number 5 [ 45.271375][ T621] pim6reg1: entered promiscuous mode [ 45.291071][ T621] pim6reg1: entered allmulticast mode [ 45.495357][ T629] 9pnet_fd: Insufficient options for proto=fd [ 45.515673][ T631] device-mapper: table: 252:0: crypt: Error allocating crypto tfm (-EINVAL) [ 45.524519][ T631] device-mapper: ioctl: error adding target to table [ 45.544608][ T331] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 45.652216][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.661864][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 45.692270][ T331] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 45.700784][ T331] usb 4-1: config 127 has no interface number 0 [ 45.707282][ T331] usb 4-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 45.719043][ T331] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 45.730657][ T331] usb 4-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 45.745696][ T331] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 45.754968][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.763086][ T331] usb 4-1: Product: syz [ 45.767370][ T331] usb 4-1: Manufacturer: syz [ 45.772065][ T331] usb 4-1: SerialNumber: syz [ 45.777788][ T621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 45.808565][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 45.814649][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.825849][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 45.835090][ T10] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 45.844063][ T10] usb 2-1: config 0 has no interface number 0 [ 45.850282][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.858521][ T10] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 45.870040][ T9] usb 3-1: config 0 descriptor?? [ 45.875842][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 45.886278][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.894481][ T10] usb 2-1: Product: syz [ 45.898898][ T10] usb 2-1: Manufacturer: syz [ 45.903597][ T10] usb 2-1: SerialNumber: syz [ 45.909262][ T10] usb 2-1: config 0 descriptor?? [ 45.914617][ T614] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 46.122445][ T607] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 46.181648][ T331] asix 4-1:127.57: probe with driver asix failed with error -71 [ 46.195592][ T331] usb 4-1: USB disconnect, device number 6 [ 46.670192][ T9] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 46.677981][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 46.914772][ T10] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 46.925657][ T10] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 46.936271][ T10] asix 2-1:0.188: probe with driver asix failed with error -71 [ 46.945406][ T10] usb 2-1: USB disconnect, device number 5 [ 46.965176][ T67] usb 3-1: USB disconnect, device number 6 [ 46.965277][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 47.032118][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.159546][ T9] usb 4-1: device descriptor read/64, error -71 [ 47.385158][ T649] FAULT_INJECTION: forcing a failure. [ 47.385158][ T649] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.398414][ T9] usb 4-1: device descriptor read/64, error -71 [ 47.405556][ T649] CPU: 0 UID: 0 PID: 649 Comm: syz.4.98 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 47.405579][ T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 47.405590][ T649] Call Trace: [ 47.405595][ T649] [ 47.405600][ T649] __dump_stack+0x21/0x30 [ 47.405620][ T649] dump_stack_lvl+0x140/0x1c0 [ 47.405635][ T649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.405650][ T649] ? kernel_text_address+0xa9/0xe0 [ 47.405682][ T649] ? unwind_get_return_address+0x51/0x90 [ 47.405706][ T649] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 47.405729][ T649] dump_stack+0x19/0x20 [ 47.405743][ T649] should_fail_ex+0x3c2/0x510 [ 47.405758][ T649] should_fail+0xf/0x20 [ 47.405771][ T649] should_fail_usercopy+0x1e/0x30 [ 47.405787][ T649] _copy_from_user+0x20/0xa0 [ 47.405828][ T649] ___sys_recvmsg+0x174/0x590 [ 47.405851][ T649] ? kstrtoull+0x13b/0x1e0 [ 47.405873][ T649] ? __sys_recvmsg+0x260/0x260 [ 47.405896][ T649] ? kstrtouint_from_user+0x117/0x170 [ 47.405919][ T649] ? __x64_sys_openat+0x13a/0x170 [ 47.405944][ T649] do_recvmmsg+0x328/0x790 [ 47.405968][ T649] ? __sys_recvmmsg+0x2a0/0x2a0 [ 47.405990][ T649] ? __cfi_vfs_write+0x10/0x10 [ 47.406021][ T649] ? fput+0x1a4/0x230 [ 47.406040][ T649] __x64_sys_recvmmsg+0x199/0x250 [ 47.406063][ T649] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 47.406086][ T649] ? __kasan_check_read+0x15/0x20 [ 47.406110][ T649] x64_sys_call+0x292c/0x2ee0 [ 47.406127][ T649] do_syscall_64+0x57/0xf0 [ 47.406144][ T649] ? clear_bhb_loop+0x50/0xa0 [ 47.406166][ T649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.406187][ T649] RIP: 0033:0x7f47ab39fb19 [ 47.406201][ T649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.406214][ T649] RSP: 002b:00007f47ac25f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 47.406231][ T649] RAX: ffffffffffffffda RBX: 00007f47ab626090 RCX: 00007f47ab39fb19 [ 47.406243][ T649] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 47.406260][ T649] RBP: 00007f47ac25f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.406270][ T649] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000001 [ 47.406279][ T649] R13: 00007f47ab626128 R14: 00007f47ab626090 R15: 00007ffc26ab21e8 [ 47.406293][ T649] [ 47.749877][ T653] 9pnet_fd: p9_fd_create_tcp (653): problem connecting socket to 127.0.0.1 [ 47.781309][ T661] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'. [ 47.833021][ T665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 47.847439][ T665] device-mapper: table: 252:2: crypt: Error allocating crypto tfm (-EINVAL) [ 47.856213][ T665] device-mapper: ioctl: error adding target to table [ 47.865741][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.944430][ T672] pim6reg1: entered promiscuous mode [ 47.949946][ T672] pim6reg1: entered allmulticast mode [ 47.970307][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 47.970327][ T36] audit: type=1400 audit(1794063705.935:233): avc: denied { bind } for pid=673 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.032539][ T9] usb 4-1: device descriptor read/64, error -71 [ 48.110742][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 48.199229][ T67] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 48.267803][ T9] usb 4-1: device descriptor read/64, error -71 [ 48.275264][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.286592][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.295716][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.315245][ T10] usb 2-1: config 0 descriptor?? [ 48.357118][ T67] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 48.365555][ T67] usb 5-1: config 127 has no interface number 0 [ 48.371914][ T67] usb 5-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 48.384280][ T9] usb usb4-port1: attempt power cycle [ 48.389850][ T67] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 48.401483][ T67] usb 5-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 48.416429][ T67] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 48.425837][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.433878][ T67] usb 5-1: Product: syz [ 48.438242][ T331] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.445850][ T67] usb 5-1: Manufacturer: syz [ 48.450555][ T67] usb 5-1: SerialNumber: syz [ 48.456780][ T672] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 48.522566][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 48.528793][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.537760][ T10] usb 2-1: USB disconnect, device number 6 [ 48.601527][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 48.607835][ T331] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 48.616158][ T331] usb 3-1: config 0 has no interface number 0 [ 48.622720][ T331] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 48.634329][ T331] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 48.643560][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.651641][ T331] usb 3-1: Product: syz [ 48.655945][ T331] usb 3-1: Manufacturer: syz [ 48.660728][ T331] usb 3-1: SerialNumber: syz [ 48.669891][ T331] usb 3-1: config 0 descriptor?? [ 48.675428][ T677] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 48.729160][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.749769][ T9] usb 4-1: device descriptor read/8, error -71 [ 48.864698][ T67] asix 5-1:127.57: probe with driver asix failed with error -71 [ 48.877161][ T67] usb 5-1: USB disconnect, device number 3 [ 48.886151][ T9] usb 4-1: device descriptor read/8, error -71 [ 48.901839][ T676] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 48.954944][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 49.103282][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.114666][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 49.124365][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.132098][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.141026][ T10] usb 2-1: config 0 descriptor?? [ 49.152364][ T9] usb 4-1: device descriptor read/8, error -71 [ 49.280303][ T9] usb 4-1: device descriptor read/8, error -71 [ 49.387422][ T9] usb usb4-port1: unable to enumerate USB device [ 49.662493][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.705491][ T331] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 49.716519][ T331] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 49.727204][ T331] asix 3-1:0.188: probe with driver asix failed with error -71 [ 49.736170][ T331] usb 3-1: USB disconnect, device number 7 [ 49.764639][ T36] audit: type=1400 audit(1794063707.757:234): avc: denied { read write } for pid=680 comm="syz.3.110" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.788628][ T36] audit: type=1400 audit(1794063707.757:235): avc: denied { open } for pid=680 comm="syz.3.110" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.811862][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.813579][ T36] audit: type=1400 audit(1794063707.757:236): avc: denied { ioctl } for pid=680 comm="syz.3.110" path="socket:[6171]" dev="sockfs" ino=6171 ioctlcmd=0xaf26 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.840511][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 49.882080][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.891272][ T9] usb 5-1: config 0 descriptor?? [ 49.929341][ T685] kvm: kvm [684]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 49.939011][ T10] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 49.946710][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 49.956202][ T685] kvm: kvm [684]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 49.980430][ C1] ------------[ cut here ]------------ [ 49.985992][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 49.994642][ C1] index 21762 is out of range for type 'const int[34]' [ 50.001535][ C1] CPU: 1 UID: 0 PID: 369 Comm: udevd Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 50.001570][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 50.001617][ C1] Call Trace: [ 50.001625][ C1] [ 50.001635][ C1] __dump_stack+0x21/0x30 [ 50.001664][ C1] dump_stack_lvl+0x140/0x1c0 [ 50.001684][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.001706][ C1] dump_stack+0x19/0x20 [ 50.001724][ C1] ubsan_epilogue+0xe/0x40 [ 50.001767][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 50.001813][ C1] aiptek_irq+0x208d/0x2a00 [ 50.001841][ C1] ? _raw_spin_unlock+0x45/0x60 [ 50.001863][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 50.001894][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 50.001926][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 50.001952][ C1] dummy_timer+0xa3f/0x4900 [ 50.001989][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 50.002019][ C1] ? timerqueue_del+0xd7/0x130 [ 50.002036][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 50.002064][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 50.002092][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 50.002118][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 50.002141][ C1] ? read_tsc+0xd/0x20 [ 50.002158][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 50.002194][ C1] hrtimer_run_softirq+0x159/0x560 [ 50.002219][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 50.002239][ C1] handle_softirqs+0x1b0/0x5b0 [ 50.002263][ C1] __irq_exit_rcu+0x47/0xb0 [ 50.002286][ C1] irq_exit_rcu+0xd/0x30 [ 50.002307][ C1] sysvec_apic_timer_interrupt+0x44/0x90 [ 50.002338][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 50.002366][ C1] RIP: 0033:0x7fa2bdea7407 [ 50.002384][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 50.002400][ C1] RSP: 002b:00007fff25887780 EFLAGS: 00000202 [ 50.002417][ C1] RAX: 0000000000000000 RBX: 00007fa2be5aa880 RCX: 00007fa2bdea7407 [ 50.002431][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 50.002445][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.002458][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 50.002470][ C1] R13: 00007fa2be5aa770 R14: 0000000000000002 R15: 00005636805ae350 [ 50.002486][ C1] [ 50.002500][ C1] ---[ end trace ]--- [ 50.103549][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 50.103722][ C1] ------------[ cut here ]------------ [ 50.114967][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 50.119001][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 50.119025][ C1] index 21763 is out of range for type 'const int[34]' [ 50.119041][ C1] CPU: 1 UID: 0 PID: 369 Comm: udevd Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 50.119158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 50.119220][ C1] Call Trace: [ 50.119249][ C1] [ 50.119275][ C1] __dump_stack+0x21/0x30 [ 50.119351][ C1] dump_stack_lvl+0x140/0x1c0 [ 50.119414][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.119477][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 50.119555][ C1] dump_stack+0x19/0x20 [ 50.119616][ C1] ubsan_epilogue+0xe/0x40 [ 50.119681][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 50.119766][ C1] aiptek_irq+0x1f3c/0x2a00 [ 50.119843][ C1] ? _raw_spin_unlock+0x45/0x60 [ 50.119907][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 50.119988][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 50.120075][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 50.120160][ C1] dummy_timer+0xa3f/0x4900 [ 50.120272][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 50.120337][ C1] ? timerqueue_del+0xd7/0x130 [ 50.120391][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 50.120474][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 50.120593][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 50.120700][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 50.120776][ C1] ? read_tsc+0xd/0x20 [ 50.120838][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 50.120939][ C1] hrtimer_run_softirq+0x159/0x560 [ 50.120995][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 50.121020][ C1] handle_softirqs+0x1b0/0x5b0 [ 50.121066][ C1] __irq_exit_rcu+0x47/0xb0 [ 50.121141][ C1] irq_exit_rcu+0xd/0x30 [ 50.121206][ C1] sysvec_apic_timer_interrupt+0x44/0x90 [ 50.121300][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 50.121385][ C1] RIP: 0033:0x7fa2bdea7407 [ 50.121440][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 50.121504][ C1] RSP: 002b:00007fff25887780 EFLAGS: 00000202 [ 50.121567][ C1] RAX: 0000000000000000 RBX: 00007fa2be5aa880 RCX: 00007fa2bdea7407 [ 50.121611][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 50.121652][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.121704][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 50.121746][ C1] R13: 00007fa2be5aa770 R14: 0000000000000002 R15: 00005636805ae350 [ 50.121801][ C1] [ 50.121823][ C1] ---[ end trace ]--- [ 50.148663][ T9] usb 5-1: USB disconnect, device number 4 [ 50.735815][ T67] usb 2-1: USB disconnect, device number 7 [ 50.736019][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.862688][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.011440][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.022471][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 51.031573][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.040310][ T9] usb 5-1: config 0 descriptor?? [ 51.847779][ T9] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 51.855540][ T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 52.147991][ T9] usb 5-1: USB disconnect, device number 5 [ 52.148154][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19