last executing test programs: 8.062894646s ago: executing program 0 (id=60): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010001, 0x0, 0x200000000400}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xe}) syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010001, 0x0, 0x200000000400}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xe}) (async) syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) (async) 7.218230963s ago: executing program 0 (id=64): r0 = syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x26, @string={0x26, 0x3, "f2a0e0cac53482718f35dc7b15fd0e0fb0c2ce890921b50bdd8b2e1e1ed90944cc0c0dfe"}}, &(0x7f0000000100)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x1, 0x1}, @generic={0x34, 0x10, 0x1, "556fff2d553d785ff614494c211e6cd1e68f4403e0de08bd43f3cd193d7d9a77cf067507e91f4b9acb74c6e3ccae3cb70f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x6, 0x5f71, 0xd}]}}, 0x0, 0x0}, 0x0) 5.727051452s ago: executing program 0 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 5.566390368s ago: executing program 0 (id=83): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x22, 0x100, 0x70bd30, 0x25dfdbfb, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000400)={{0x0, 0x4}, 0x100, './file0\x00'}) inotify_init1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c000000", @ANYRES16, @ANYBLOB="10002dbd7000fbdbdf25010000005c00038008000500ac14143308000500e000000208000500ac1e000108000500646d76d8b85cf5099008000000000008000100010000000800010000000000140002006e657464657673696d3039e5f2dbcec008000000000000080006"], 0x9c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.410119923s ago: executing program 0 (id=84): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x1b4, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf27}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "2132d50900000045f3ba067585afe64e4f"}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x2}) 4.357089117s ago: executing program 1 (id=88): syz_usb_connect$uac3(0x2, 0x11f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d, 0x3, 0x1, 0x1a, 0xc0, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0xfe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x1e, 0x3ff}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x101, 0x3, 0x9, 0x8001, 0x8, 0x1, 0x2, 0x22}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x9, 0x62, 0xf6, 0x5}, @as_header={0x17, 0x24, 0x1, 0x1, 0x1, 0x5, 0x5, 0x3, 0xff, 0x86, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}, @as_header={0x17, 0x24, 0x1, 0x8, 0x4, 0xa90a, 0x1002, 0xc, 0x0, 0xbb6, 0xf9}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7ff, 0x5, 0xf, "5dc5a34613fc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x2, 0x4, {0xa, 0x25, 0x25, 0x15f3, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x28, 0xdf, "", "d500"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x80}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0xce, 0x3b, "6c3ab40c8fc144"}, @as_header={0x17, 0x24, 0x1, 0x80, 0x0, 0x6, 0x3, 0x5, 0xf2, 0xf99, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x2, 0xa, {0xa, 0x25, 0x25, 0x500000, 0xb, 0x2}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xe6, 0x4, 0x9, 0x20, 0x7}, 0x29, &(0x7f0000000180)={0x5, 0xf, 0x29, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b98a8ce142a50827ff2c780dd372c6a4"}, @ptm_cap={0x3}]}, 0x4, [{0x23, &(0x7f00000001c0)=@string={0x23, 0x3, "24c300a840ced8533a23261d94e4e25d4b538c5b00af5940d22e884e9fdfe50a2b"}}, {0x2f, &(0x7f0000000200)=@string={0x2f, 0x3, "e63e3ed72ea142c1fe7c576fd3780e121bea0e78f06815ef3f5e4b970011278e7a1240653d6f8a0daa8ed9dcf3"}}, {0xb0, &(0x7f0000000240)=@string={0xb0, 0x3, "039e75356f54095033eea267da330200d4c6215cd51f333a1fdfa500ee304f50bc039674465bd6a871936c4378cd4a988f3b47232316e025ef4115a0a1466a7d992ff7893bca90ff9f6b042e60d170482d9507fd7f2a6a6e0315aac2e6d44f5464426a00cd9ca79949d7c6c7cf726046d33e289da6df812eb3e0ba51e66a1b4bca3ee6c8b4ce0595113ecce0fbab7c83c60d96b041a05617616d1a24643fd671cda0792d35a3474bf85c0b078aaa"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x0, 0xd, 0x5a, {0x5a, 0x9, "561c0aac5619d2c58c99b0e9f4984ca4cfdaf61ce61f4951af83ca30450621ff34af0d4a861b1b0e44166531ec84de4726ee2a0e02b4d3b3f250669acdfdf7348caa98d4a2de058bc36661a5504f9b54258e095000223ebb"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x20, 0x14, 0x13, "ee3c86dfb6107d6da6cb14d4186be986a56cac"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0xc0, 0x5, 0x3, "103ff3"}, &(0x7f00000005c0)={0x40, 0x5, 0x4, "cd3a9985"}}) r0 = syz_usb_connect$uac3(0x6, 0x116, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x3, 0x1, 0x5, 0x20, 0x51, {0x8, 0xb, 0x0, 0x0, 0x1, 0x22, 0x30, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x38, 0x7}, [@power_domain={0xc, 0x24, 0x10, 0x4, 0x6, 0x86da, 0x3, "2a47b9"}, @source_unit={0xc, 0x24, 0xb, 0x5, 0x1, 0x0, 0x0, 0x2}, @power_domain={0xa, 0x24, 0x10, 0x4, 0xf6c, 0x9e, 0x4, "8e"}, @power_domain={0xc, 0x24, 0x10, 0x6, 0x7f, 0x5, 0xf4, "2bbe5b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x22, 0x0, 0x7, 0x1001, 0x1, 0x2, 0x3ff, 0xc7}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x10, 0xe, {0xa, 0x25, 0x25, 0x101, 0x52, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x86, 0x3, 0x0, 0x2}, @as_header={0x17, 0x24, 0x1, 0x7, 0x2, 0x3f5a, 0x3, 0x5, 0x8, 0x2, 0x66}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5b, 0x5, 0x9, 0x80, 0x60}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xb5, 0x2, 0x8, 0xb0}, @as_header={0x17, 0x24, 0x1, 0x7, 0x7, 0x2, 0x5, 0x2f, 0x6, 0x3, 0x8}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x81, 0xfff7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x5, 0x6, {0xa, 0x25, 0x25, 0x7ff, 0x79, 0x100}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x300, 0x4, 0xf7, 0x7, 0x8, 0x47}, 0x10, &(0x7f00000007c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x3, 0x2, 0xffff, 0x9}]}, 0x8, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2409}}, {0x48, &(0x7f0000000880)=@string={0x48, 0x3, "d5b4b8f80692b44f60b8aeb39350471a9ae2d695243ee2f9eae8e073d6a420f8cdc28f34b13998d5d16017e9e19e2df8a08b232ce7ff6ce43bbf339b77d45343b603adbbdd23"}}, {0x7a, &(0x7f0000000900)=@string={0x7a, 0x3, "764e5c36b366acf0673d95eb74a0c663c5da8ec89c6d7adc2dd2059e429ece4430cf59f0ae0b9843f1c0e2ba64dad32418116b635c9fd4167fc17ccd03751010eb2f21d642cef5c80219f17fb049356b5dc9cdc104a50796dd28969820be05451d9bdd4b25e5033cc27e3852d17a931eab569b886208c8e6"}}, {0xa9, &(0x7f0000000980)=@string={0xa9, 0x3, "f0e7d19a969cfc04c621f49efb156a01074fc707157819db0ae1d6e551555c98a7858773b48979f08adbc759a54bf93450073d7679ad3c7d2d486591fa62ce6034bec143952082682828a64bb13416366ecf7e8bdf498f5c977ee0de5de9f9f79567f773d1211a615352f921967f20b575729221175de45b0c8cc427d79f90df105658efdb53487d3e5bb27e7bcc2f325af68133a0dd35d0c05749bde64f89c09cc2fc9745300e"}}, {0xc, &(0x7f0000000a40)=@string={0xc, 0x3, "56f67008eb6b83fff9f2"}}, {0x84, &(0x7f0000000a80)=@string={0x84, 0x3, "13a3a04880e49aac8687f08d0d970be2e6cc86a39af2013514b30e0095bdcfdcab50fddc00260bc586081d11d59dc60660da7a7c75f9459cfd6d2082b18b305b93fb8021dca8d023d9695dd058dcdbaf807e98aa19f2ac7e94ef7fa417b6e94892876f905a5534263e025c55bf562db7071e8ad9ed2316ad94bc35e0715a799ba907"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x20, 0x24, 0x7b, {0x7b, 0x21, "5fb75e1e489ee3141b97f63b5bcd3aecc9b241c94bcdca2e034277fc8a661bec0e33b846d4d012370e7afb9b97060f901327b4135fc0c4b6716e643497627eec55a0bb625c7b2914106a76815fe482bbaf2fe7342e7cea5a3920530a8d6bba86aadc0b1cd52ed9e6f40d8aa7aaa1c13de317e3d323f0958b9e"}}, &(0x7f0000000cc0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "7fe845ba8c04e2ea4f98ea7a4180bd559ccbc92a5d5ccc7136889cb73b71eb9aab8ceacef79f9d3a33803c084c81143be46b429df0dba2393cf4d7ec4104970dabf6fd816e3cbc387b8496fd5a26e6f6228ea4daaec6eef9b83e5a898982da057d5caa602523805bd2be9efbb26f8544d5b3d9d9d0bebc805e9fe5ca7c061697a0432eef937b1f3e54f92b0c458826f972440df6545b220ec0d8b316ad613d621d01f3de2a5ba556afa0145598d39431eba35fc3bd32365facda90b4c5f5d0e7"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000e00)={0x0, 0x8, 0x44, "3394cc213f30eac03dca85a3cf5fc29f8db7cdb300468e787790c5facb3997094c0222d2b1fa7cfe257e2880d2078b8dab5d1f13535efb74c72e307c59b276665d0f90a8"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000f00)={0x20, 0x81, 0x1, "1d"}, &(0x7f0000000f40)={0x20, 0x82, 0x2, "2d8c"}, &(0x7f0000000f80)={0x20, 0x83, 0x1, '\a'}, &(0x7f0000000fc0)={0x20, 0x84, 0x2, "a724"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "b76db1"}}) syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, &(0x7f00000010c0)={0x0, 0x1, 0x1e, {0x1e, 0x22, "9332e78b8f05489e1f480b39984d281c0bd59da5706c95cba4083b36"}}, &(0x7f0000001100)={0x0, 0x3, 0xed, @string={0xed, 0x3, "867abb35c3e986bbad381a71acb5224142d35c8a5bee18135a2006a725d63a7009a1ff486f57cfbfd392d6263834a48d62c4b10d0b446ba048474471029564a11f5e499e81895c5dce2bed43bbea42c6a8d8403417abd208b4d95e788b1b80f7518ae623b03dc2d1426906a1dabe083f80f78e0908dcae9abe6756fdfb5af2ba7db28758c4455bf4fe0eb19394b31e0fe1e4b3c3d2f6905f8f4c032624b16db0277b120fd488f3e6edc816abfec08e7dfd7893826a4faa35556d8de7a55536d3fb4ce69d350f18e702a0998e942fec0e08842f4cd435599d62be61da22f62ebca3fb470846a30e18eba762"}}, &(0x7f0000001200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0x1, 0x6, "023cddcb", "77a7754a"}}, &(0x7f0000001280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x6, 0x7, 0x5, 0x401, 0x9}}}, &(0x7f0000001700)={0x84, &(0x7f0000001300)={0x40, 0x14, 0x2c, "0c2e5633323d7277fc04fda9fad1d0c64b0813c04b7f836c1edc5b1bfbc9dd5dc8ffc0f69f81a9fff0970a71"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000001440)={0x40, 0x7, 0x2, 0xfffe}, &(0x7f0000001480)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000014c0)={0x40, 0xb, 0x2, "fc09"}, &(0x7f0000001500)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000015c0)={0x40, 0x19, 0x2, "f044"}, &(0x7f0000001600)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001640)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000001680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000016c0)={0x40, 0x21, 0x1, 0x3}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000017c0)='sched\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001840)={'erspan0\x00', 0x0, 0x40, 0x1, 0x0, 0x6, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x64, 0x0, 0x5, 0x29, 0x0, @local, @empty, {[@timestamp={0x44, 0x20, 0xde, 0x0, 0x4, [0xaa25, 0x8, 0x2, 0xdf, 0x3ff, 0x7, 0x8]}, @generic={0x83, 0xd, "91cc3957444fbc9e137703"}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0x1, [0x4, 0x1000, 0x80]}]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001900)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000001a40)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000001cc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000100}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a80)=@getpolicy={0x1d4, 0x15, 0x10, 0x70bd2a, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@broadcast, 0x4e22, 0xd5, 0x4e22, 0x7, 0xa, 0x80, 0x20, 0x73, r2, r3}, 0x6e6bbe}, [@policy={0xac, 0x7, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x4e22, 0x8, 0x4e22, 0x1, 0xa, 0xe0, 0xa0, 0x5e}, {0x80, 0x70000, 0x5, 0x3ff, 0xd, 0x2, 0x5}, {0x6, 0x8574, 0x1, 0xfffffffffffff6f5}, 0x88c2, 0x0, 0x0, 0x1, 0x1}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in6=@local, 0x4e21, 0x1, 0x4e24, 0x800, 0xa, 0x0, 0x0, 0x8, 0x0, r4}, {0xffffffff7fffffff, 0x6, 0x2, 0x73d, 0x3, 0x3, 0x8000000000000000, 0x4}, {0x3, 0x9, 0x7, 0x2}, 0x7fffffff, 0x6e6bb4, 0x2, 0x1, 0x2, 0x3}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e20, @in=@broadcast}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffff5}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000001d00)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e80), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000002480)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8422000}, 0xc, &(0x7f0000002440)={&(0x7f0000001ec0)={0x57c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf357}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbfeacdeb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf535}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x2a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d10520048123886c2a379e920c17426247b7c20eef0b82"}}, @TIPC_NLA_NODE_ID={0x85, 0x3, "3823641b230db7fbc4d7ea020fd90a73bdc510e1d0326518dcc489422ff2023be8d20a6ba8ae20ab8ca5a663c64ad1b4dc55f78c4b69d3f98ab7993bca2eefed35ad9c7e364da701e3fd71deee55bfbf659135d30938a61afdd561a9624f8dee39f15aca657b987cb623a22b49aab0761f1ec9ba310d69d99b8d23acb2acaa9553"}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "1a71b25cadff742b6cf26a1070f7208156f34e1b412ee7fcbf3f025fda9e340e43c04637222354549d999726e8573b1022c8c682e73faf198c5027c8b31ba6fb1171dce34beb0367ccf6b3368b7819b142af9f01294ee21d9931ff2bd21c0116ba42a6401a5dfab8fbfd06dd7d3f07b92107513338d08cfdfa61cc529398228f1de0fce8dbe5"}, @TIPC_NLA_NODE_ID={0x44, 0x3, "c0c81501b3c185676a0ef43be8a8cb8655ec6c788fcd5f4317e776af4fad9aa8063a670f5fde22866be4ab43bacba13532a49622f06411073b02c6876dbbcad7"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "5c6e5e6ce8bbd05d0fa222e5ba66c05e40e55694bdb1e3750a8e7934a3fd56fafcdba775d61d8ba5808f94019e701dec8d7e83e81b973e65a68d3ec4e1c3dce4d481e5d3282cdfe3caa9b1583011c32edc4936c4d9502c9da1f46bc71c7078a882e15c7cf782acad8ab7ab9e64dffbad72a53433b8be2d251e9b1d1b533a44c5626a3e083d2b7de8e7be80e11a767df2b5980271ad2023419982edebd9d453a72075d4f958dcbee2c2147b89e5ee4b324d9876943d55182b22d0a97c5b5511b8a822b35f89671779166d7091be0a7a521dedf6f1bc888df26bad263ee832e74a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa63}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f05}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x572}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x924}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9830}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa666}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8422}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x57c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r6 = socket$inet6(0xa, 0x0, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f00000024c0)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000026c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002680)={&(0x7f0000002540)={0x118, 0x1e, 0x800, 0x70bd29, 0x25dfdbff, {0x14}, [@nested={0x14, 0x14e, 0x0, 0x1, [@typed={0x8, 0x11e, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x148}, @typed={0x4, 0xfd}]}, @nested={0xc0, 0x9d, 0x0, 0x1, [@generic="9dce14681b09546f2dec5e6f35067b612264fac9b486b5e1810c4d4c8bbc6d87e42d13a526bcfc087c7ad8024c9ef970ce7c1e34d388e6e7c082940d71eec515d69d00a67611658c9bab2203b72253487e92baba7bfa8bb894b35f28dc86e20e28abbeb30ad64d64bef332d9bf16303c2c416a59936c219e5245f1ee670f628731947335f5e8ef5fafef130cfec4cdf03ea67329831c64d8e8d05bc7be2a5266d4f35c3964ba7e083f40c6fadd88592419ab5ba430518a2705b4479c"]}, @generic="b3a64c3e4b18b08feafaa97fae9def8ae3e977a52b31a5e18ddf20a311a2a4", @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x122, 0x0, 0x0, @ipv4=@multicast1}]}, 0x118}, 0x1, 0x0, 0x0, 0x48000}, 0x8081) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000002700)={0x2, 0x0, {[0xffff, 0x6, 0x2, 0x0, 0xb, 0x42084e17, 0x4, 0x81]}}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000002780)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace(0x10, r8) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000002900)={r6, &(0x7f0000002800)=':,.-{^\x00', 0x0, &(0x7f0000002840)={@_ha_fsid={[0xe, 0x9]}, {0x2a72, 0x6, 0x7, 0x7fff}}, 0x20, &(0x7f0000002880)={@_ha_fsid}, &(0x7f00000028c0)=0xe69}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002940)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000002b40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000002b80)={"a951a4238955c4f1126fb9b03df305aa", r10, r11, {0x7, 0x4}, {0x5, 0x6}, 0x2, [0x6, 0x5, 0x0, 0xffffffffffffffff, 0xab0c, 0x6, 0x81, 0x30c6f9ba, 0xf, 0x6, 0x1, 0xc, 0x8, 0x1000, 0x2d3, 0x63]}) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000002c80), &(0x7f0000002cc0)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x88c4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000002e00)={[0x6, 0x6, 0x80000001, 0x7, 0x4, 0x3ff, 0x0, 0x200, 0x0, 0x8, 0x4, 0x5826, 0x8, 0x7, 0x0, 0xa], 0x58000, 0x40000}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000002ec0)) 4.113831855s ago: executing program 3 (id=89): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, 0x0, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0), 0x22000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x1f8c) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 3.95864929s ago: executing program 3 (id=90): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x5) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) 3.898299212s ago: executing program 3 (id=91): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x4, 0x4, 0x100000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) dup2(r0, r0) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f00000000c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0) 3.897143812s ago: executing program 3 (id=92): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'rose0\x00', {0x4}, 0x40}) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) read(r2, &(0x7f0000000080)=""/41, 0x29) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd(0xa500000) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=']) 3.847700074s ago: executing program 3 (id=93): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x3, 0xfb, 0x2, 0x101}, 0xc) add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="3863d5708e088a36783db5a5", 0xc, r0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) keyctl$search(0xa, r0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x0}, r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008961b12000000002000010902240001000080100904020009030001000921040000012228000905810300020007fe"], 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x3, 0xfb, 0x2, 0x101}, 0xc) (async) add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="3863d5708e088a36783db5a5", 0xc, r0) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) keyctl$search(0xa, r0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x0}, r0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008961b12000000002000010902240001000080100904020009030001000921040000012228000905810300020007fe"], 0x0) (async) 2.655968903s ago: executing program 3 (id=99): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x187101, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x7f, 0x7, 0x2, 0x7f, 0x7d, 0x1, 0xb, 0x31, 0x61, 0x3, 0x11, 0x4, 0x9, 0x7, 0x7, 0x5}}) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r6, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x12004804, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)="b0234fc841bfe166e691917ce38a182ea292d48291fa7cd7acf5b1cf5ef94b159892167a43c3130d9b7fb8b0fe1bc792dbcbaa7cbdf7071e459d68228138c51f6fde9d3b0592a86442dca5093e42c5136d17fd692f69c6fcddb1e48867053b2706e91c067196af1e3e4986a468bbcbfde9cf06b09c6a21626038317e53a73922e6f07d9b924afee60288502a22b5a3b691c5", 0x92}], 0x1, 0x2) r11 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r11, 0x29, 0x46, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) syz_usb_connect$cdc_ecm(0x3, 0x7e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x6, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "92c6"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x6780, 0xd, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xb, 0x6, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x7f}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x0, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xa, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x3, 0xfd}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x150, 0x6, 0xd, 0x2, 0x48, 0xfe}, 0x20, &(0x7f0000000500)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x7, 0x41}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0x0, 0x6, [0xfffff0, 0xff0000]}]}, 0x4, [{0xe9, &(0x7f0000000600)=@string={0xe9, 0x3, "378944dbd436a8e1bb8a45b439ef3923973b1e855b63f4f5ccd049f6dfa44ee688103f66927f601489b82679818f46f732a09d926fcdef7208e180a22c1a04e583630b05322720effc560941c08117d84c52c2be2c7400cacba7016577bd37a0481f1e88448f11d0c3ac449cef15b936e9e208be50f9049da66b6e956f700aa36fba07b00b8029b5b14cd7804541b4eeaed99cdb53884c8d7c70d7ace8fab602f982fed1367c35e904f1e5841b87f7e91d5f28578884cdec9660f4ee9dd54bc556331d40acd76e79433d0d8abecfa7b51f8779616cfa2061ab6bbae0a0fe4d131ad62689c6b7a8"}}, {0x49, &(0x7f0000000700)=@string={0x49, 0x3, "ac969c308dec005a2195d965b5dd977049829426beb4d8038b75828280a5129a5f74866e92ece06ed865c3241e16e8bf32f7e9ca3ccc5944ec74c0604a78a9e01786d3b8016bc0"}}, {0x6, &(0x7f0000000780)=@string={0x6, 0x3, "2099273d"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4001}}]}) sendmmsg(r11, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x1, 0x240040c4) sendfile(r9, r10, 0x0, 0x20000000000006) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001180)={{0x0, 0x118, 0x6, 0xb1, 0x6, 0x4, 0x2f1c, 0x0, 0x6, 0x0, 0x2, 0xfffffffffffffff7, 0x8000, 0xfffffffffffffffa, 0x303}}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002180)={r12, 0x9}) 2.43751556s ago: executing program 0 (id=100): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x9}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f00000000c0)='\x00', 0x101000, &(0x7f0000000180)={@align=0x5, {0x8, 0x1000, 0x2b5e4ba, 0x4}}, 0xa09d, &(0x7f0000000200), &(0x7f0000000240)=0x5}, {[0x6, 0x90a, 0xbcb, 0x1]}, 0x9, 0xb3, &(0x7f0000000280)=""/179}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) fcntl$getflags(r3, 0xb) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a0b2bd1b22862120011500e900b93303a32b42b6e266ca564d1addb8000000f5989d6b"], 0x0}) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x9}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f00000000c0)='\x00', 0x101000, &(0x7f0000000180)={@align=0x5, {0x8, 0x1000, 0x2b5e4ba, 0x4}}, 0xa09d, &(0x7f0000000200), &(0x7f0000000240)=0x5}, {[0x6, 0x90a, 0xbcb, 0x1]}, 0x9, 0xb3, &(0x7f0000000280)=""/179}) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) (async) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) (async) fcntl$getflags(r3, 0xb) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a0b2bd1b22862120011500e900b93303a32b42b6e266ca564d1addb8000000f5989d6b"], 0x0}) (async) 1.83007588s ago: executing program 2 (id=101): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) syz_clone3(&(0x7f0000000900)={0x123110800, &(0x7f00000006c0), 0x0, 0x0, {0x42b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) (async, rerun: 32) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async, rerun: 32) rt_sigprocmask(0x0, &(0x7f0000000100)={[0x2]}, &(0x7f0000000180), 0x8) (async) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="8a9b99fef714015eafe45aa1a9ae0bbf6369c834eafb0cd9327078c6c9a5cbb9860ea25734a1808d128052eca73034cd2c8fafae76a90b09a63f2edd36621f26", 0x40, 0x20000000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = socket(0x1e, 0x1, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x3) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007fb}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 32) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) getpeername$packet(r8, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="67f2aa0f011e0f2263c4c2f1ba3766baf80cb8e87d888cef66bafc0cedb808000000ef8eb81b6a00ba000000000f30c744240209000000c744240600000000b8000000800f23c80f21f8350000f0a0000023f80f07de0707360f79fe66ba4300b04aee0e22d2360ff2bd63cf0906", 0x6e}], 0x1, 0x15, 0x0, 0x0) 1.82942896s ago: executing program 2 (id=102): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) r0 = syz_usb_connect$hid(0xbab3762007b072e7, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a010000000018105e04090000000000000109022400010000000009040000090300000009210000000122220009058103", @ANYRES16=0x0], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x81) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000440)={0x99, 0x6, 0x0, 0x70, 0xd, 0x4, 0xb}) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) sendto(r3, &(0x7f0000000480)="67f4672686df3e6e388a8dd3ae8e05a194d9b3c5f1712073d8d92ba93afd54c1d1785aaeae4a0b20c7c6b1cc531d66b516cf951e98ecf7c7ee5f9fa039e8e43a83bab70e5eed30cd1df61787cbe42f07091fe6e52b82322004753e09427f1624d263bfa5c6991040c2845c1b83a01cc11a24a89f6d63bc023b43d767ec55a224e6a0647131f1a1f801c3", 0x8a, 0x20008001, &(0x7f0000000540)=@isdn={0x22, 0x3, 0x2, 0x8, 0x9}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESOCT=r3, @ANYRES32], 0x24}}, 0x40000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 1.816738051s ago: executing program 2 (id=103): syz_usb_connect(0x3, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xb4, 0xf3, 0x83, 0x20, 0x10f5, 0xf35a, 0x518b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x50, 0x7, "", [{{0x9, 0x4, 0x35, 0x21, 0x2, 0xff, 0x47, 0xd0, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x7f, 0x6, 0xaf}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xdc, 0x2, 0x7}}]}}]}}]}}, &(0x7f00000006c0)={0xfffffffffffffd4f, 0x0, 0x4, 0x0, 0x0, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x400a}}, {0x5a, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x40b}}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "8ba18b380aa50601761059b037ffd79aa647aec61761c767e285aabb7b90e17cc895dd310a6a74aca2a3622ad716668e634c60894eb0f645ac"}}, {0x0, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x3c0a}}, {0x0, &(0x7f00000001c0)=@string={0x0, 0x3, "4585ab490486545b3bc8e3430232b59a2a991d0c2f1414b8a290ecf3c7ad2a7be7e274c5177278863f76f98ed131db26aec80cbcdbb9dc4c9fd08b4a1db1bd3b51e2bb7d4d9d21eab9060617b6a2c42cf2278da5a5432278645d3f31d7e53a207112bf374d5f78d30b529d71c29349627a008d8ca0e99492c8f31323d69a4eab7e6c88f9b10b4c2ca161871cbedba526422600c434a55415bc41e94a79806af8243725c55e"}}, {0x0, &(0x7f0000000280)=@string={0x0, 0x3, "95cf0e74203a13fde7f85bedeb8c111432e2cafc012b9b74111c93763f7fa89080a9e10e54d3e16430daddced4154b87e981ec07a6d9a45f9c10328b3964afc81069963fa8da89e450a85bd1230030dcf40e571fa0a290dedafbc73ce6988b1554e49a28925c1f4fc5bf70b07483982b34432bd25818dffdaaff75caa907206b418005f085d2a94164a53a1a9ec6c674d584305c6ae5ccb4ca82cd3569144b766a3292cc78d59d184a9e02f7589d7b9b82ceac93d4cf9766d42f48086ef98ecbeba37e376e89d167576ce167e84fb0c161e38db6d2a0c697cbdb04d48b7dc61bee17ada20906d6d019f6825d0b18258d50578795c69ae20dee98"}}, {0x0, &(0x7f0000000380)=@string={0x0, 0x3, "80291d0a551124d1c0c0ffdb9197ef8c754f099737aa8ba20f431991f074f9f7022f19"}}, {0x0, &(0x7f00000003c0)=@string={0x0, 0x3, "18c0f29c806eed20325122592cfe22100a0767b0d603662281c5a81362c55a968954c309df508e5966c9aa45c4f4115a05c9bc1ffb983c7e161b779e5504f3ea26e29c26adb227a6f01dbc20308afc4441aa93036a7a23bdfe20b6638c185160764113e6275ec75d0885e7095acca6ecf063672a00e8bf6425d98b7734f998bff5c1434e8a7e2a1a2efc210e98a8bd5a49624e25575394665fdf8401612e"}}, {0x0, &(0x7f0000000780)=@string={0x0, 0x3, "445cc011897abeb251a8b3566c462d6ede5aee27c6a950321468dc8069d354a794e1212b4d52660bc86add5be9924e6693a448c51e2ba406fa4cc1b8c170b293dc08013798e8b100034575833691f70e5f5365a3422ae6129de09a258b309be40325823dec0a2505b4cfce7a12951171fde9ac104fa84e0ffdfe53404910cf3c0c04ebc0a70ccc3f287d5bea91bc4fb3477ee3776dee35d71f66ff080f41fd25aa0a87a951"}}, {0x0, &(0x7f0000000540)=@string={0x0, 0x3, "80a068fb437513662d5bb72699fecb75036b60741c8762d87fc5aba67f0dbd0a65bcb0fc86739e208c0d906d711b26b235558b3c99bf384d00189c583431aa17d789769af1888034220a406f129749a1f5c70d1f08d2ff99daebbf9ba20a57597a0dfc13b3e8ceed63e07dcbfbc3a3d77a5c97d1ec68897d20b49c9c2e818e7e4ea935345622ddfef56ca2b884f8d7403f7b733331515eec42c361a1f950"}}]}) r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[], 0x0) read$watch_queue(r1, &(0x7f00000000c0)=""/247, 0xf7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) r2 = syz_usb_connect$cdc_ecm(0x2, 0x16c, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15a, 0x1, 0x1, 0x2, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xa, 0x24, 0x6, 0x0, 0x0, "151f037eab"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0xf5, 0x5}, [@dmm={0x7, 0x24, 0x14, 0xd, 0x2}, @mdlm_detail={0xf2, 0x24, 0x13, 0xfa, "efafe5735918b7e01bc38f5a55f9b9bbd18a7f2fb8cfd287af0bc1b058361736325cc9fa5d2b33c7d49d3909b7b30c3d79bc98eae05105966fabda843e269a0f2db5c0e902b2051e6f7e674dfb381668713c85da7627a5b587170e9ef677a4ac5b280f9a9eda929080fe99c5d68256a8b180a9234026fbb2c8cd850d929ae4575c5b8b0ac136ddd8ecc83a8e18fcdd32636f69c0b4d522dda5f1eb3310fea081dab9f19bbfe6ea3e8519bf379a911f3917cf20fd41a6fa22667c5ba600cb85bdc716d67cf2d12d1b0abdd7bea1601b7da982b09ad3d096ada9ef7dd1b3375eb4985cf089d1877f49d7ea5624ca9a"}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x9, 0x3ff}, @acm={0x4, 0x24, 0x2, 0xe79150d09ead1e2a}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x5, 0x6, 0x0, 0x1000, 0xfd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x5c, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x32, 0xc2}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x4, 0x3, 0xff, 0x20, 0x7}, 0x44, &(0x7f0000000a00)={0x5, 0xf, 0x44, 0x1, [@generic={0x3f, 0x10, 0xa, "dab45348600c7b81855a53180c06ee3564a12c4e271f8933db9e76475ba920b7bd2b7d018df368ebf00c7cdb30c1f79140c93ebf9bf146fb67d0bf56"}]}, 0x2, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x300a}}, {0x7d, &(0x7f0000000ac0)=@string={0x7d, 0x3, "6321c0e753a94799062e0aabd4dd53f1ec57e1b5caaba42f3d1f7c3681b05f69f4ca752f42f7b2be0b8bb45819cdfb6ac70fde66b7d7e944b1b0f8174875c0fce67ca754dacc753f020f813b252ce790c3c8c1265dfba2a8b2b696089ba9d3c5ccd1b11c1d398786c03fdeb76789f19c7b245e85d88dfb5d9174f8"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x20, 0x3, 0xa3, {0xa3, 0x4, "9ea17642efe8b891aee02e81c94ec2e6dfa7b52a34975fc6aae0fcf9d1bf51c26cdbe6fbac1b872096cbe2ed00075a08bf5b8a95887c27db0a0aa34932bb965b4591eaf697d9f2822d94ebecb83aed1d972edf36c786e1fa84b2483e2917c66375be94a28c25ff71e7f2440996c4cd2e8b2b52c42b4b60da91e5fbf66725e0c1619aad39d38a809c29cb253ef81a3dbcd37dd4cca6487d74b095e2b556deb3d013"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000cc0)={0x20, 0x10, 0x4e, "59e453b831dee65b598905044e6e88b7b9a8913ea6692c4227aa6222e8f18c53ee5d8a9b291fb84af7e57aeb7f9d0dbad336959c685f73a8f837807a03ca2103fd0c72c1e7a10b0c9888040b29fe"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0xd}}) 1.348297216s ago: executing program 1 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1}, @multicast2, 0xffffff00, 0xff000000, 0x10, 0xf, {@mac=@link_local, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0x0, 0xff, 0xff, 0xff]}}, 0x1, 0x0, 0x8, 0x7, 0x1, 0x401, 'veth0_vlan\x00', 'rose0\x00', {}, {0xff}, 0x0, 0x1e0}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x2}}}}, {{@arp={@local, @private=0xa010100, 0xff, 0xffffff00, 0x1, 0xd, {@mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xab8b31b17a13128d]}}, 0x6, 0x3, 0x10, 0xc46f, 0x9, 0x4, 'vlan0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x240}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, 0xf, 0x1}}}, {{@arp={@broadcast, @empty, 0xff000000, 0xffffff00, 0x0, 0x1, {@empty, {[0xff, 0xed7bd5b0d8fcb0cd, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0x6a6e, 0x9, 0x7, 0x8, 0x1df9, 'wlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x105}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x1}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r0 = socket$inet6(0xa, 0x3, 0xfa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) capset(&(0x7f0000000700)={0x19980330, r1}, &(0x7f0000000740)={0x10001, 0x6, 0x1800000, 0x1, 0xb2a, 0xc0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40051, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff0000ffffffffffffffff0000000000000000002b00000000000000002d8f38"], 0xed) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) setuid(0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.266282189s ago: executing program 1 (id=105): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.265978909s ago: executing program 1 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$TUNSETVNETLE(r1, 0x5452, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x21) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0xc0800) dup3(r0, r2, 0x80000) 1.256265779s ago: executing program 1 (id=107): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 536.128843ms ago: executing program 2 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x14, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x4206, r3) (async) ptrace(0x8, r3) ptrace(0x4207, r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 286.213391ms ago: executing program 2 (id=109): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = syz_io_uring_complete(0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694fd2cd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fc0000000000000001fc01000000000000000000000000000100000000000000"], 0x62) 152.439915ms ago: executing program 2 (id=110): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f00000005c0)='./file1\x00', 0x20000, 0x718bb647156ec2f6) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1000) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x2, 0x4) 0s ago: executing program 1 (id=111): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0xfffffff7fffffffe}]}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0xfffffff7fffffffe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x4, 0x4, 0xe000, 0x1000, &(0x7f0000d83000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x4, 0x4, 0xe000, 0x1000, &(0x7f0000d83000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0xc000, 0x1000000000, 0x200000000001, 0x2, 0xffffffffffffffff, 0x5, 0x8000, 0x80001000, 0x1000, 0x7, 0x5, 0x8000000000000001, 0x7a99, 0x6, 0xfffffffffffffffd, 0x8], 0xffffffff, 0x200}) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r7, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) (async) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) accept$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000a40)=0x1c) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) (async) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x184, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f0000000180)) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f0000000180)) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @private=0xa010102}, 0x4, 0x0, 0x3}}, 0x26) (async) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @private=0xa010102}, 0x4, 0x0, 0x3}}, 0x26) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) recvfrom$inet(r10, 0x0, 0x0, 0x2022, 0x0, 0x0) write(r10, &(0x7f0000000240)="02000000b1fd5f0214f6ff020000080009000d000000c3fc9a6c14ec86d8c6b7658dff4535fe428ead0667f14203de60964fe464831c8a52594f29de24cc2c6a2cb25f7ac59434897658f1404d8bf22b7f39", 0xfffffffffffffd68) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 24.966786][ T36] audit: type=1400 audit(1780517147.340:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.970655][ T287] cgroup: Unknown subsys name 'net' [ 24.989477][ T36] audit: type=1400 audit(1780517147.340:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.016805][ T36] audit: type=1400 audit(1780517147.370:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.017322][ T287] cgroup: Unknown subsys name 'devices' [ 25.142073][ T287] cgroup: Unknown subsys name 'hugetlb' [ 25.147702][ T287] cgroup: Unknown subsys name 'rlimit' [ 25.242557][ T36] audit: type=1400 audit(1780517147.620:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.265839][ T36] audit: type=1400 audit(1780517147.620:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.290673][ T36] audit: type=1400 audit(1780517147.620:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.314502][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.323323][ T36] audit: type=1400 audit(1780517147.700:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.348830][ T36] audit: type=1400 audit(1780517147.700:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.383306][ T36] audit: type=1400 audit(1780517147.760:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.409003][ T36] audit: type=1400 audit(1780517147.760:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.409622][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.289464][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.296608][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.303793][ T294] bridge_slave_0: entered allmulticast mode [ 26.310251][ T294] bridge_slave_0: entered promiscuous mode [ 26.322093][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.329157][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.336406][ T294] bridge_slave_1: entered allmulticast mode [ 26.342971][ T294] bridge_slave_1: entered promiscuous mode [ 26.371600][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.378666][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.385913][ T295] bridge_slave_0: entered allmulticast mode [ 26.392320][ T295] bridge_slave_0: entered promiscuous mode [ 26.407933][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.415284][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.422443][ T297] bridge_slave_0: entered allmulticast mode [ 26.428789][ T297] bridge_slave_0: entered promiscuous mode [ 26.435107][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.442182][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.449263][ T295] bridge_slave_1: entered allmulticast mode [ 26.455651][ T295] bridge_slave_1: entered promiscuous mode [ 26.468044][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.475139][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.482230][ T296] bridge_slave_0: entered allmulticast mode [ 26.488500][ T296] bridge_slave_0: entered promiscuous mode [ 26.494826][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.501904][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.508982][ T297] bridge_slave_1: entered allmulticast mode [ 26.515371][ T297] bridge_slave_1: entered promiscuous mode [ 26.527572][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.534773][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.541951][ T296] bridge_slave_1: entered allmulticast mode [ 26.548219][ T296] bridge_slave_1: entered promiscuous mode [ 26.695761][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.702918][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.710243][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.717289][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.738193][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.745282][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.752614][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.759716][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.780512][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.787585][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.795045][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.802147][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.824666][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.831761][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.839061][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.846169][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.885847][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.893873][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.901283][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.908528][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.916532][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.924068][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.931609][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.938862][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.950759][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.957822][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.970853][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.977944][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.994775][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.001877][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.010150][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.017219][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.030760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.037826][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.051502][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.058565][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.081381][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.088429][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.096326][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.103374][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.145516][ T294] veth0_vlan: entered promiscuous mode [ 27.156421][ T295] veth0_vlan: entered promiscuous mode [ 27.180777][ T297] veth0_vlan: entered promiscuous mode [ 27.194849][ T296] veth0_vlan: entered promiscuous mode [ 27.202109][ T295] veth1_macvtap: entered promiscuous mode [ 27.210700][ T294] veth1_macvtap: entered promiscuous mode [ 27.234357][ T297] veth1_macvtap: entered promiscuous mode [ 27.264187][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.304634][ T296] veth1_macvtap: entered promiscuous mode [ 27.679854][ T310] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.831390][ T310] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 27.842298][ T310] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 27.852037][ T310] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 27.866012][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.875128][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.883234][ T310] usb 4-1: SerialNumber: syz [ 27.914800][ T340] Zero length message leads to an empty skb [ 27.942613][ T344] netlink: 'syz.2.11': attribute type 12 has an invalid length. [ 27.950366][ T344] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11'. [ 28.000672][ T347] capability: warning: `syz.2.12' uses 32-bit capabilities (legacy support in use) [ 28.031149][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.065206][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.090777][ T310] cdc_acm 4-1:1.0: skipping garbage [ 28.191302][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.202043][ T46] usb 2-1: string descriptor 0 read error: -22 [ 28.208272][ T46] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 28.217466][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.228059][ T46] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.292233][ T310] usb 4-1: USB disconnect, device number 2 [ 28.428238][ T358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.437070][ T358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.445501][ T46] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 28.460630][ T46] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 28.473976][ T46] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.483640][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.487987][ T46] usb 2-1: USB disconnect, device number 2 [ 28.836773][ T370] x_tables: duplicate underflow at hook 1 [ 28.863040][ T372] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.039804][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.193179][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.204370][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.214626][ T46] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 29.223963][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.233482][ T46] usb 1-1: config 0 descriptor?? [ 29.837251][ T392] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 30.044547][ T364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.053161][ T364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.062634][ T46] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 30.077720][ T46] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 30.079930][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.089866][ T355] Bluetooth: hci0: command 0x1003 tx timeout [ 30.106614][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 30.106631][ T36] audit: type=1400 audit(1780517152.480:162): avc: denied { getopt } for pid=400 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.133887][ T401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.134032][ T401] rust_binder: 400:401 transaction to 0 failed: ENOENT [ 30.146171][ T36] audit: type=1400 audit(1780517152.510:163): avc: denied { write } for pid=400 comm="syz.2.28" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.162576][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.176064][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.263517][ T357] usb 1-1: USB disconnect, device number 2 [ 30.305471][ T36] audit: type=1400 audit(1780517152.680:164): avc: denied { bind } for pid=409 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.349817][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 30.356444][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.359780][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 30.367761][ T311] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 30.371362][ T310] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 30.378559][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.387272][ T310] usb 4-1: config 1 has no interface number 0 [ 30.394553][ T311] usb 2-1: Product: syz [ 30.404007][ T310] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 30.405485][ T311] usb 2-1: Manufacturer: syz [ 30.415549][ T310] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 30.419400][ T311] usb 2-1: SerialNumber: syz [ 30.430007][ T310] usb 4-1: config 1 interface 105 has no altsetting 0 [ 30.454864][ T310] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 30.464266][ T310] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 30.472780][ T310] usb 4-1: Product: syz [ 30.476975][ T310] usb 4-1: Manufacturer: syz [ 30.481614][ T310] usb 4-1: SerialNumber: syz [ 30.487355][ T398] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.497084][ T398] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.579747][ T67] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.642128][ T36] audit: type=1400 audit(1780517153.020:165): avc: denied { connect } for pid=395 comm="syz.1.26" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.662386][ T36] audit: type=1400 audit(1780517153.020:166): avc: denied { write } for pid=395 comm="syz.1.26" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.739777][ T67] usb 3-1: device descriptor read/64, error -71 [ 30.767215][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.777095][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 30.803166][ T311] usb 2-1: USB disconnect, device number 3 [ 30.818696][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.839462][ T36] audit: type=1400 audit(1780517153.210:167): avc: denied { append } for pid=411 comm="syz.0.31" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.866895][ T36] audit: type=1400 audit(1780517153.210:168): avc: denied { create } for pid=411 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.887475][ T36] audit: type=1400 audit(1780517153.210:169): avc: denied { write } for pid=411 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.914961][ T398] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.922603][ T398] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.930261][ T36] audit: type=1400 audit(1780517153.210:170): avc: denied { nlmsg_write } for pid=411 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.972726][ T36] audit: type=1400 audit(1780517153.350:171): avc: denied { wake_alarm } for pid=413 comm="syz.0.32" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.009728][ T67] usb 3-1: device descriptor read/64, error -71 [ 31.153511][ T310] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 31.164313][ T310] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61 [ 31.249760][ T67] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.379763][ T67] usb 3-1: device descriptor read/64, error -71 [ 31.539763][ T311] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 31.619776][ T67] usb 3-1: device descriptor read/64, error -71 [ 31.670315][ T311] usb 2-1: device descriptor read/64, error -71 [ 31.724742][ T428] incfs: Error accessing: ./file0. [ 31.730061][ T428] incfs: mount failed -2 [ 31.732257][ T67] usb usb3-port1: attempt power cycle [ 31.804292][ T436] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 31.909916][ T311] usb 2-1: device descriptor read/64, error -71 [ 32.079781][ T67] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.100966][ T67] usb 3-1: device descriptor read/8, error -71 [ 32.150264][ T311] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 32.230995][ T67] usb 3-1: device descriptor read/8, error -71 [ 32.279806][ T311] usb 2-1: device descriptor read/64, error -71 [ 32.319796][ T421] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.449775][ T421] usb 1-1: device descriptor read/64, error -71 [ 32.470820][ T67] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.490895][ T67] usb 3-1: device descriptor read/8, error -71 [ 32.519766][ T311] usb 2-1: device descriptor read/64, error -71 [ 32.620878][ T67] usb 3-1: device descriptor read/8, error -71 [ 32.630682][ T311] usb usb2-port1: attempt power cycle [ 32.689741][ T421] usb 1-1: device descriptor read/64, error -71 [ 32.729922][ T67] usb usb3-port1: unable to enumerate USB device [ 32.939769][ T421] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.969771][ T311] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 32.990904][ T311] usb 2-1: device descriptor read/8, error -71 [ 33.069738][ T421] usb 1-1: device descriptor read/64, error -71 [ 33.120833][ T311] usb 2-1: device descriptor read/8, error -71 [ 33.309748][ T421] usb 1-1: device descriptor read/64, error -71 [ 33.359716][ T311] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 33.400817][ T311] usb 2-1: device descriptor read/8, error -71 [ 33.419857][ T421] usb usb1-port1: attempt power cycle [ 33.490944][ T67] usb 4-1: USB disconnect, device number 3 [ 33.531477][ T311] usb 2-1: device descriptor read/8, error -71 [ 33.649804][ T311] usb usb2-port1: unable to enumerate USB device [ 33.759738][ T421] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 33.790858][ T421] usb 1-1: device descriptor read/8, error -71 [ 33.920878][ T421] usb 1-1: device descriptor read/8, error -71 [ 34.169740][ T421] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 34.190836][ T421] usb 1-1: device descriptor read/8, error -71 [ 34.322652][ T421] usb 1-1: device descriptor read/8, error -71 [ 34.404088][ T477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 34.429837][ T421] usb usb1-port1: unable to enumerate USB device [ 34.475111][ T481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=481 comm=syz.2.48 [ 34.519574][ T492] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 34.555681][ T492] SELinux: failed to load policy [ 34.702124][ T500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=500 comm=syz.2.52 [ 34.779720][ T67] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.950581][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 34.961389][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.975860][ T67] usb 4-1: config 1 has an invalid interface number: 65 but max is 0 [ 34.988581][ T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.999220][ T67] usb 4-1: config 1 has no interface number 0 [ 35.007249][ T67] usb 4-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=82.a8 [ 35.016580][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.024835][ T67] usb 4-1: Product: syz [ 35.029116][ T67] usb 4-1: Manufacturer: syz [ 35.033909][ T67] usb 4-1: SerialNumber: syz [ 35.244681][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 35.244697][ T36] audit: type=1400 audit(1780517157.620:199): avc: denied { accept } for pid=494 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.278817][ T67] usb-storage 4-1:1.65: USB Mass Storage device detected [ 35.291381][ T67] usb-storage 4-1:1.65: Quirks match for vid 0781 pid 55e8: 800000 [ 35.343113][ T67] usb 4-1: USB disconnect, device number 4 [ 35.463882][ T36] audit: type=1400 audit(1780517157.840:200): avc: denied { mount } for pid=510 comm="syz.2.56" name="/" dev="ramfs" ino=4866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 35.485926][ T36] audit: type=1400 audit(1780517157.840:201): avc: denied { create } for pid=510 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 35.513510][ T36] audit: type=1400 audit(1780517157.890:202): avc: denied { setopt } for pid=512 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.538760][ T36] audit: type=1400 audit(1780517157.910:203): avc: denied { write } for pid=512 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.569711][ T357] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.730854][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.742017][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.751842][ T357] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 35.760942][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.769573][ T357] usb 2-1: config 0 descriptor?? [ 35.790863][ T36] audit: type=1400 audit(1780517158.170:204): avc: denied { create } for pid=524 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 35.812730][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.819307][ T525] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.825883][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.929733][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.079724][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 36.086416][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.094878][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.105043][ T311] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 36.115719][ T311] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 36.124811][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.132857][ T311] usb 1-1: Product: syz [ 36.137037][ T311] usb 1-1: Manufacturer: syz [ 36.141692][ T311] usb 1-1: SerialNumber: syz [ 36.177365][ T357] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 36.184878][ T357] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 36.192477][ T357] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 36.200033][ T357] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 36.207459][ T357] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 36.215836][ T357] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 36.280198][ T357] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0 [ 36.289795][ T357] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 36.299053][ T357] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 36.307819][ T357] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 36.316166][ T357] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -22 [ 36.370574][ T36] audit: type=1400 audit(1780517158.750:205): avc: denied { setopt } for pid=532 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.423480][ T311] usb 1-1: unit 2 not found! [ 36.433450][ T311] usb 1-1: USB disconnect, device number 7 [ 36.446079][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.480545][ T9] usb 2-1: USB disconnect, device number 8 [ 36.649807][ T421] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.799743][ T421] usb 3-1: Using ep0 maxpacket: 16 [ 36.806522][ T421] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.815058][ T421] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 [ 36.826215][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.835350][ T421] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 36.844483][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.852512][ T421] usb 3-1: Product: syz [ 36.856664][ T421] usb 3-1: Manufacturer: syz [ 36.861299][ T421] usb 3-1: SerialNumber: syz [ 36.979734][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 36.986044][ T311] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 36.994309][ T311] usb 1-1: config 0 has no interface number 0 [ 37.001920][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 37.011105][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.021609][ T311] usb 1-1: Product: syz [ 37.025850][ T311] usb 1-1: Manufacturer: syz [ 37.032321][ T311] usb 1-1: SerialNumber: syz [ 37.037127][ T36] audit: type=1400 audit(1780517159.410:206): avc: denied { create } for pid=542 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 37.047193][ T543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.65'. [ 37.060883][ T311] usb 1-1: config 0 descriptor?? [ 37.071886][ T36] audit: type=1400 audit(1780517159.410:207): avc: denied { write } for pid=542 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 37.107166][ T421] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.114328][ T547] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 37.119870][ T421] usb 3-1: unit 5: unexpected type 0x0d [ 37.139932][ T421] usb 3-1: USB disconnect, device number 6 [ 37.221000][ T555] fuse: Unknown parameter 'rootmod ' [ 37.308579][ T311] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 37.315401][ T311] usb 1-1: No valid video chain found. [ 37.511237][ T311] usb 1-1: USB disconnect, device number 8 [ 37.529709][ T36] audit: type=1400 audit(1780517159.900:208): avc: denied { mount } for pid=559 comm="syz.1.69" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 37.829762][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.829793][ T355] Bluetooth: hci0: command 0x1003 tx timeout [ 37.939748][ T311] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 38.029944][ T541] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.099156][ T311] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.114809][ T311] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.124685][ T311] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.137523][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.144195][ T311] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 38.153383][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.162133][ T311] usb 2-1: config 0 descriptor?? [ 38.169753][ T541] usb 3-1: device descriptor read/64, error -71 [ 38.190231][ T612] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 38.197826][ T612] SELinux: failed to load policy [ 38.203438][ T602] netlink: 'syz.3.81': attribute type 3 has an invalid length. [ 38.409751][ T541] usb 3-1: device descriptor read/64, error -71 [ 38.550314][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.571101][ T311] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 38.578321][ T311] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 38.585380][ T311] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 38.592644][ T311] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 38.599650][ T311] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 38.607580][ T311] holtek 0003:1241:5015.0003: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 38.618793][ T311] holtek 0003:1241:5015.0003: no inputs found [ 38.649739][ T541] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.689766][ T310] usb 1-1: device descriptor read/64, error -71 [ 38.727306][ T624] netlink: 'syz.3.85': attribute type 16 has an invalid length. [ 38.771174][ T46] usb 2-1: USB disconnect, device number 9 [ 38.779763][ T541] usb 3-1: device descriptor read/64, error -71 [ 38.929901][ T310] usb 1-1: device descriptor read/64, error -71 [ 38.979758][ T67] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.019747][ T541] usb 3-1: device descriptor read/64, error -71 [ 39.129735][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 39.130060][ T541] usb usb3-port1: attempt power cycle [ 39.138781][ T67] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 39.149457][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.157492][ T67] usb 4-1: Product: syz [ 39.161747][ T67] usb 4-1: Manufacturer: syz [ 39.166351][ T67] usb 4-1: SerialNumber: syz [ 39.171012][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 39.182055][ T67] r8152-cfgselector 4-1: Unknown version 0x0000 [ 39.188323][ T67] r8152-cfgselector 4-1: config 0 descriptor?? [ 39.292833][ T626] syzkaller1: entered promiscuous mode [ 39.298369][ T626] syzkaller1: entered allmulticast mode [ 39.309729][ T310] usb 1-1: device descriptor read/64, error -71 [ 39.396831][ T67] r8152-cfgselector 4-1: Needed 1 retries to read version [ 39.404136][ T67] r8152-cfgselector 4-1: Unknown version 0x0030 [ 39.410531][ T67] r8152-cfgselector 4-1: bad CDC descriptors [ 39.480043][ T541] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.500914][ T541] usb 3-1: device descriptor read/8, error -71 [ 39.559778][ T310] usb 1-1: device descriptor read/64, error -71 [ 39.597963][ T624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.607099][ T624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.617011][ T311] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 39.628675][ T9] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 39.643966][ T541] usb 3-1: device descriptor read/8, error -71 [ 39.669836][ T310] usb usb1-port1: attempt power cycle [ 39.759764][ T311] usb 2-1: device descriptor read/64, error -71 [ 39.893229][ T541] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 39.921036][ T541] usb 3-1: device descriptor read/8, error -71 [ 39.999777][ T311] usb 2-1: device descriptor read/64, error -71 [ 40.010051][ T310] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 40.030967][ T310] usb 1-1: device descriptor read/8, error -71 [ 40.051097][ T541] usb 3-1: device descriptor read/8, error -71 [ 40.139812][ T67] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.160071][ T541] usb usb3-port1: unable to enumerate USB device [ 40.167400][ T310] usb 1-1: device descriptor read/8, error -71 [ 40.239747][ T311] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 40.289735][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 40.296068][ T67] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 40.304144][ T67] usb 4-1: config 0 has no interface number 0 [ 40.310294][ T67] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.321197][ T67] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.334777][ T67] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 40.343904][ T67] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 40.352148][ T67] usb 4-1: Product: syz [ 40.357058][ T67] usb 4-1: config 0 descriptor?? [ 40.379733][ T311] usb 2-1: device descriptor read/64, error -71 [ 40.409738][ T310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.440762][ T310] usb 1-1: device descriptor read/8, error -71 [ 40.564072][ T706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.572777][ T706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.581392][ T310] usb 1-1: device descriptor read/8, error -71 [ 40.588474][ T67] usbhid 4-1:0.2: can't add hid device: -71 [ 40.594480][ T67] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 40.604537][ T67] usb 4-1: USB disconnect, device number 6 [ 40.619751][ T311] usb 2-1: device descriptor read/64, error -71 [ 40.689893][ T310] usb usb1-port1: unable to enumerate USB device [ 40.730260][ T311] usb usb2-port1: attempt power cycle [ 40.827419][ T712] syzkaller1: entered promiscuous mode [ 40.832996][ T712] syzkaller1: entered allmulticast mode [ 40.932202][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 40.932221][ T36] audit: type=1400 audit(1780517163.310:220): avc: denied { bind } for pid=715 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.079764][ T311] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 41.099068][ T36] audit: type=1400 audit(1780517163.470:221): avc: denied { write } for pid=721 comm="syz.3.99" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.124450][ T36] audit: type=1400 audit(1780517163.470:222): avc: denied { open } for pid=721 comm="syz.3.99" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.148221][ T311] usb 2-1: device descriptor read/8, error -71 [ 41.280929][ T311] usb 2-1: device descriptor read/8, error -71 [ 41.369775][ T67] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.519771][ T311] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 41.540902][ T311] usb 2-1: device descriptor read/8, error -71 [ 41.540900][ T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.540927][ T67] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.566949][ T67] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.576057][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 41.584179][ T67] usb 4-1: SerialNumber: syz [ 41.670845][ T311] usb 2-1: device descriptor read/8, error -71 [ 41.719825][ T541] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 41.779871][ T311] usb usb2-port1: unable to enumerate USB device [ 41.846347][ T722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.855069][ T722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.862871][ T541] usb 1-1: device descriptor read/64, error -71 [ 41.884517][ T36] audit: type=1400 audit(1780517164.260:223): avc: denied { ioctl } for pid=726 comm="syz.2.101" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6616 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.109862][ T541] usb 1-1: device descriptor read/64, error -71 [ 42.169730][ T311] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 42.319717][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 42.326459][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.334899][ T311] usb 3-1: config 8 has an invalid interface number: 53 but max is 0 [ 42.343035][ T311] usb 3-1: config 8 has no interface number 0 [ 42.349171][ T311] usb 3-1: config 8 interface 53 altsetting 33 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 42.360279][ T541] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 42.367902][ T311] usb 3-1: config 8 interface 53 has no altsetting 0 [ 42.376236][ T311] usb 3-1: New USB device found, idVendor=10f5, idProduct=f35a, bcdDevice=51.8b [ 42.392789][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.402052][ T311] usb 3-1: Product: syz [ 42.406373][ T311] usb 3-1: Manufacturer: syz [ 42.411065][ T311] usb 3-1: SerialNumber: syz [ 42.426495][ T736] overlayfs: missing 'lowerdir' [ 42.501818][ T541] usb 1-1: device descriptor read/64, error -71 [ 42.635848][ T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.646613][ T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.656858][ T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.666449][ T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.739911][ T541] usb 1-1: device descriptor read/64, error -71 [ 42.799731][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 42.849864][ T541] usb usb1-port1: attempt power cycle [ 42.961313][ T9] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 42.971710][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 82: 49, using maximum allowed: 30 [ 42.982883][ T9] usb 2-1: config 0 interface 0 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 42.996584][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 43.003439][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 43.012922][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.025876][ T9] usb 2-1: config 0 descriptor?? [ 43.199732][ T541] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 43.230759][ T541] usb 1-1: device descriptor read/8, error -71 [ 43.242905][ T9] usb 2-1: string descriptor 0 read error: -71 [ 43.260089][ T9] usb 2-1: cannot find UAC_HEADER [ 43.267440][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 43.277598][ T9] usb 2-1: USB disconnect, device number 14 [ 43.283787][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.380709][ T541] usb 1-1: device descriptor read/8, error -71 [ 43.442969][ T311] usb 3-1: USB disconnect, device number 11 [ 43.629732][ T541] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 43.660730][ T541] usb 1-1: device descriptor read/8, error -71 [ 43.800694][ T541] usb 1-1: device descriptor read/8, error -71 [ 43.840865][ T768] ------------[ cut here ]------------ [ 43.846565][ T768] WARNING: CPU: 1 PID: 768 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 43.856085][ T768] Modules linked in: [ 43.860078][ T768] CPU: 1 UID: 0 PID: 768 Comm: syz.1.111 Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 43.871514][ T768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 43.881650][ T768] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 43.887711][ T768] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b2 1a 0c 06 00 0f 85 c2 00 00 00 c6 05 a5 1a 0c 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 43.889821][ T311] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.907386][ T768] RSP: 0018:ffffc9000ef17560 EFLAGS: 00010246 [ 43.907411][ T768] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 0000000000000000 [ 43.907424][ T768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ef17618 [ 43.907439][ T768] RBP: ffffc9000ef176a0 R08: ffffc9000ef17617 R09: 0000000000000000 [ 43.907454][ T768] R10: ffffc9000ef17600 R11: fffff52001de2ec3 R12: ffffc9000ef175a0 [ 43.925789][ T541] usb usb1-port1: unable to enumerate USB device [ 43.929319][ T768] R13: dffffc0000000000 R14: 1ffff92001de2eb0 R15: 0000000000000000 [ 43.967823][ T768] FS: 00007fb438ab76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 43.976855][ T768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.983577][ T768] CR2: 0000200000001000 CR3: 000000011f168000 CR4: 00000000003526b0 [ 43.991698][ T768] Call Trace: [ 43.995023][ T768] [ 43.997992][ T768] ? vfs_write+0x3c5/0xf90 [ 44.002575][ T768] ? ksys_write+0x145/0x260 [ 44.007134][ T768] ? x64_sys_call+0x271c/0x2ee0 [ 44.012070][ T768] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 44.017859][ T768] ? hashtab_init+0xdb/0x1f0 [ 44.022563][ T768] ___kmalloc_large_node+0x81/0x210 [ 44.027817][ T768] ? hashtab_init+0xdb/0x1f0 [ 44.032547][ T768] __kmalloc_large_node_noprof+0x1e/0xd0 [ 44.038238][ T768] ? hashtab_init+0xdb/0x1f0 [ 44.042924][ T768] __kmalloc_noprof+0x326/0x500 [ 44.047820][ T768] ? kasan_save_alloc_info+0x40/0x50 [ 44.053200][ T768] hashtab_init+0xdb/0x1f0 [ 44.057672][ T768] ? common_read+0x175/0x490 [ 44.062597][ T768] symtab_init+0x44/0x70 [ 44.066899][ T768] common_read+0x1e6/0x490 [ 44.071396][ T768] ? hashtab_init+0xdb/0x1f0 [ 44.076041][ T768] ? __cfi_common_read+0x10/0x10 [ 44.081057][ T768] ? hashtab_init+0x105/0x1f0 [ 44.085793][ T768] policydb_read+0xabb/0x28b0 [ 44.090562][ T768] ? __kasan_kmalloc+0x96/0xb0 [ 44.095380][ T768] ? __cfi_policydb_read+0x10/0x10 [ 44.099779][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 44.100668][ T768] ? security_load_policy+0x130/0x12d0 [ 44.110876][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.111215][ T768] security_load_policy+0x16a/0x12d0 [ 44.123175][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.127357][ T768] ? irqentry_exit+0x4a/0x60 [ 44.141743][ T768] ? asm_exc_page_fault+0x2b/0x30 [ 44.145277][ T311] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 44.146820][ T768] ? __cfi_security_load_policy+0x10/0x10 [ 44.161657][ T768] ? rep_movs_alternative+0x4a/0xa0 [ 44.166923][ T768] sel_write_load+0x2a7/0x5f0 [ 44.170092][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.171726][ T768] ? __cfi_sel_write_load+0x10/0x10 [ 44.185027][ T768] ? _raw_spin_lock_irq+0x93/0x120 [ 44.190210][ T768] ? bpf_lsm_file_permission+0xd/0x20 [ 44.193882][ T311] usb 3-1: config 0 descriptor?? [ 44.195632][ T768] ? __cfi_sel_write_load+0x10/0x10 [ 44.205831][ T768] vfs_write+0x3c5/0xf90 [ 44.210159][ T768] ? __cfi_vfs_write+0x10/0x10 [ 44.214978][ T768] ? __kasan_check_write+0x18/0x20 [ 44.220168][ T768] ? mutex_lock+0x97/0x1d0 [ 44.224675][ T768] ? __cfi_mutex_lock+0x10/0x10 [ 44.229702][ T768] ? __fget_files+0x2c5/0x340 [ 44.234473][ T768] ksys_write+0x145/0x260 [ 44.238895][ T768] ? xfd_validate_state+0x68/0x140 [ 44.244098][ T768] ? __cfi_ksys_write+0x10/0x10 [ 44.249014][ T768] ? __kasan_check_write+0x18/0x20 [ 44.254192][ T768] ? fpregs_restore_userregs+0x11c/0x260 [ 44.259904][ T768] __x64_sys_write+0x7f/0x90 [ 44.264546][ T768] x64_sys_call+0x271c/0x2ee0 [ 44.269270][ T768] do_syscall_64+0x57/0xf0 [ 44.273763][ T768] ? clear_bhb_loop+0x50/0xa0 [ 44.278541][ T768] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.284516][ T768] RIP: 0033:0x7fb437b9ce59 [ 44.288970][ T768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.308634][ T768] RSP: 002b:00007fb438ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.317102][ T768] RAX: ffffffffffffffda RBX: 00007fb437e15fa0 RCX: 00007fb437b9ce59 [ 44.325123][ T768] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000008 [ 44.333161][ T768] RBP: 00007fb437c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 44.341186][ T768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.349191][ T768] R13: 00007fb437e16038 R14: 00007fb437e15fa0 R15: 00007ffcb5320ba8 [ 44.357225][ T768] [ 44.360294][ T768] ---[ end trace 0000000000000000 ]--- [ 44.382587][ T67] usb 4-1: 0:2 : does not exist [ 44.389403][ T67] usb 4-1: USB disconnect, device number 7 [ 44.396311][ T768] SELinux: failed to load policy [ 44.421305][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.639805][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 44.646021][ T311] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.659760][ T311] usb 3-1: USB disconnect, device number 12 [ 46.377514][ T750] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.399722][ T750] CPU: 1 UID: 0 PID: 750 Comm: syz.2.108 Tainted: G W syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 46.399760][ T750] Tainted: [W]=WARN [ 46.399767][ T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 46.399779][ T750] Call Trace: [ 46.399784][ T750] [ 46.399791][ T750] __dump_stack+0x21/0x30 [ 46.399826][ T750] dump_stack_lvl+0x140/0x1c0 [ 46.399853][ T750] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.399880][ T750] ? ___ratelimit+0x40e/0x5b0 [ 46.399904][ T750] dump_stack+0x19/0x20 [ 46.399930][ T750] dump_header+0xd6/0x490 [ 46.399955][ T750] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 46.399982][ T750] oom_kill_process+0x35d/0x640 [ 46.400005][ T750] out_of_memory+0x624/0xa30 [ 46.400027][ T750] ? __cfi_out_of_memory+0x10/0x10 [ 46.400048][ T750] ? mutex_lock_killable+0x97/0x1d0 [ 46.400073][ T750] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.400100][ T750] mem_cgroup_out_of_memory+0x2c8/0x390 [ 46.400121][ T750] ? css_next_descendant_pre+0x202/0x230 [ 46.400146][ T750] ? drain_obj_stock+0xed0/0xed0 [ 46.400167][ T750] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 46.400187][ T750] try_charge_memcg+0x91c/0xe10 [ 46.400215][ T750] ? __cfi_try_charge_memcg+0x10/0x10 [ 46.400242][ T750] ? __alloc_pages_noprof+0x35f/0x7e0 [ 46.400270][ T750] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.400299][ T750] __mem_cgroup_charge+0xfc/0x420 [ 46.400322][ T750] ? folio_add_lru+0x116/0x400 [ 46.400350][ T750] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 46.400369][ T750] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 46.400393][ T750] ? sysvec_call_function_single+0x4d/0x90 [ 46.400422][ T750] ? shmem_replace_folio+0x9b0/0x9b0 [ 46.400445][ T750] ? shmem_huge_global_enabled+0x2da/0x360 [ 46.400467][ T750] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 46.400489][ T750] ? __kasan_check_write+0x18/0x20 [ 46.400507][ T750] ? _raw_spin_lock+0x92/0x120 [ 46.400526][ T750] shmem_get_folio_gfp+0x607/0x1390 [ 46.400550][ T750] ? shmem_get_folio+0xc0/0xc0 [ 46.400570][ T750] ? follow_page_pte+0x90f/0xbc0 [ 46.400596][ T750] ? inode_to_bdi+0x6d/0x100 [ 46.400624][ T750] shmem_write_begin+0xf4/0x270 [ 46.400647][ T750] generic_perform_write+0x32b/0x970 [ 46.400675][ T750] ? __cfi_generic_perform_write+0x10/0x10 [ 46.400701][ T750] ? down_write+0xee/0x2b0 [ 46.400728][ T750] ? file_update_time+0xa3/0x210 [ 46.400755][ T750] shmem_file_write_iter+0x105/0x130 [ 46.400782][ T750] __kernel_write_iter+0x42f/0x8a0 [ 46.400802][ T750] ? __cfi___kernel_write_iter+0x10/0x10 [ 46.400822][ T750] ? get_dump_page+0x165/0x220 [ 46.400848][ T750] ? __asan_memset+0x39/0x50 [ 46.400866][ T750] ? iov_iter_bvec+0xc0/0x180 [ 46.400889][ T750] dump_user_range+0xb8b/0xe60 [ 46.400910][ T750] ? __cfi_dump_user_range+0x10/0x10 [ 46.400930][ T750] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 46.400961][ T750] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 46.400991][ T750] ? elf_core_dump+0x24c0/0x3960 [ 46.401016][ T750] elf_core_dump+0x2e7e/0x3960 [ 46.401043][ T750] ? __cfi_elf_core_dump+0x10/0x10 [ 46.401074][ T750] ? dump_interrupted+0xf0/0xf0 [ 46.401091][ T750] ? filp_open+0x199/0x1f0 [ 46.401117][ T750] ? 0xffffffffff600000 [ 46.401133][ T750] do_coredump+0x208a/0x2fe0 [ 46.401154][ T750] ? __cfi_do_coredump+0x10/0x10 [ 46.401172][ T750] ? asm_exc_page_fault+0x2b/0x30 [ 46.401201][ T750] ? __kasan_slab_free+0x6a/0x80 [ 46.401224][ T750] ? kmem_cache_free+0x1bd/0x4f0 [ 46.401244][ T750] ? get_signal+0xa74/0x14e0 [ 46.401271][ T750] get_signal+0x11f8/0x14e0 [ 46.401300][ T750] arch_do_signal_or_restart+0xbc/0x760 [ 46.401324][ T750] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 46.401347][ T750] irqentry_exit_to_user_mode+0x4d/0xb0 [ 46.401374][ T750] irqentry_exit+0x16/0x60 [ 46.401400][ T750] exc_page_fault+0x65/0xc0 [ 46.401425][ T750] asm_exc_page_fault+0x2b/0x30 [ 46.401446][ T750] RIP: 0033:0x7fc2acd9ce61 [ 46.401461][ T750] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 46.401476][ T750] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 46.401493][ T750] RAX: 0000000000000000 RBX: 00007fc2ad016180 RCX: 00007fc2acd9ce59 [ 46.401506][ T750] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 46.401518][ T750] RBP: 00007fc2ace32d6f R08: 0000000000000000 R09: 0000000000000000 [ 46.401530][ T750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.401541][ T750] R13: 00007fc2ad016218 R14: 00007fc2ad016180 R15: 00007ffef9d2f6c8 [ 46.401558][ T750] [ 46.401621][ T750] memory: usage 307200kB, limit 307200kB, failcnt 21641 [ 46.860764][ T750] memory+swap: usage 432108kB, limit 9007199254740988kB, failcnt 0 [ 46.868766][ T750] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 46.875837][ T750] Memory cgroup stats for /syz2: [ 46.875956][ T750] cache 314458112 [ 46.884597][ T750] rss 57344 [ 46.887734][ T750] rss_huge 0 [ 46.890977][ T750] shmem 314458112 [ 46.894622][ T750] mapped_file 0 [ 46.898086][ T750] dirty 0 [ 46.901064][ T750] writeback 0 [ 46.904359][ T750] workingset_refault_anon 24 [ 46.908936][ T750] workingset_refault_file 335 [ 46.913638][ T750] swap 127905792 [ 46.917202][ T750] swapcached 90112 [ 46.920950][ T750] pgpgin 137073 [ 46.924420][ T750] pgpgout 60273 [ 46.927866][ T750] pgfault 10998 [ 46.931356][ T750] pgmajfault 15 [ 46.934821][ T750] inactive_anon 153530368 [ 46.939140][ T750] active_anon 161042432 [ 46.943326][ T750] inactive_file 0 [ 46.946996][ T750] active_file 0 [ 46.950488][ T750] unevictable 0 [ 46.953957][ T750] hierarchical_memory_limit 314572800 [ 46.959320][ T750] hierarchical_memsw_limit 9223372036854771712 [ 46.965500][ T750] total_cache 314458112 [ 46.969732][ T750] total_rss 57344 [ 46.973367][ T750] total_rss_huge 0 [ 46.977079][ T750] total_shmem 314458112 [ 46.981278][ T750] total_mapped_file 0 [ 46.985293][ T750] total_dirty 0 [ 46.988778][ T750] total_writeback 0 [ 46.992613][ T750] total_workingset_refault_anon 24 [ 46.997737][ T750] total_workingset_refault_file 335 [ 47.002977][ T750] total_swap 127905792 [ 47.007079][ T750] total_swapcached 90112 [ 47.011370][ T750] total_pgpgin 137073 [ 47.015378][ T750] total_pgpgout 60273 [ 47.019351][ T750] total_pgfault 10998 [ 47.023356][ T750] total_pgmajfault 15 [ 47.027344][ T750] total_inactive_anon 153530368 [ 47.032277][ T750] total_active_anon 161042432 [ 47.036971][ T750] total_inactive_file 0 [ 47.041167][ T750] total_active_file 0 [ 47.045155][ T750] total_unevictable 0 [ 47.049128][ T750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.108,pid=754,uid=0 [ 47.063816][ T750] Memory cgroup out of memory: Killed process 754 (syz.2.108) total-vm:90508kB, anon-rss:1236kB, file-rss:22968kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 47.098200][ T759] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 47.114954][ T759] CPU: 0 UID: 0 PID: 759 Comm: syz.2.108 Tainted: G W syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 47.114994][ T759] Tainted: [W]=WARN [ 47.115002][ T759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 47.115015][ T759] Call Trace: [ 47.115022][ T759] [ 47.115030][ T759] __dump_stack+0x21/0x30 [ 47.115067][ T759] dump_stack_lvl+0x140/0x1c0 [ 47.115099][ T759] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.115131][ T759] ? ___ratelimit+0x40e/0x5b0 [ 47.115158][ T759] dump_stack+0x19/0x20 [ 47.115188][ T759] dump_header+0xd6/0x490 [ 47.115216][ T759] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 47.115247][ T759] oom_kill_process+0x35d/0x640 [ 47.115275][ T759] out_of_memory+0x624/0xa30 [ 47.115300][ T759] ? __cfi_out_of_memory+0x10/0x10 [ 47.115324][ T759] ? mutex_lock_killable+0x97/0x1d0 [ 47.115354][ T759] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.115385][ T759] mem_cgroup_out_of_memory+0x2c8/0x390 [ 47.115409][ T759] ? css_next_descendant_pre+0x202/0x230 [ 47.115438][ T759] ? drain_obj_stock+0xed0/0xed0 [ 47.115463][ T759] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 47.115487][ T759] try_charge_memcg+0x91c/0xe10 [ 47.115520][ T759] ? __cfi_try_charge_memcg+0x10/0x10 [ 47.115551][ T759] ? __alloc_pages_noprof+0x35f/0x7e0 [ 47.115585][ T759] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.115620][ T759] __mem_cgroup_charge+0xfc/0x420 [ 47.115642][ T759] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 47.115663][ T759] ? __switch_to_asm+0x3d/0x70 [ 47.115685][ T759] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 47.115716][ T759] ? shmem_replace_folio+0x9b0/0x9b0 [ 47.115743][ T759] ? shmem_huge_global_enabled+0x2da/0x360 [ 47.115777][ T759] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 47.115802][ T759] ? __kasan_check_write+0x18/0x20 [ 47.115824][ T759] ? _raw_spin_lock+0x92/0x120 [ 47.115847][ T759] shmem_get_folio_gfp+0x607/0x1390 [ 47.115875][ T759] ? shmem_get_folio+0xc0/0xc0 [ 47.115898][ T759] ? follow_page_pte+0x90f/0xbc0 [ 47.115928][ T759] ? inode_to_bdi+0x6d/0x100 [ 47.115961][ T759] shmem_write_begin+0xf4/0x270 [ 47.115988][ T759] generic_perform_write+0x32b/0x970 [ 47.116022][ T759] ? __cfi_generic_perform_write+0x10/0x10 [ 47.116052][ T759] ? down_write+0xee/0x2b0 [ 47.116083][ T759] ? file_update_time+0xa3/0x210 [ 47.116115][ T759] shmem_file_write_iter+0x105/0x130 [ 47.116146][ T759] __kernel_write_iter+0x42f/0x8a0 [ 47.116169][ T759] ? __cfi___kernel_write_iter+0x10/0x10 [ 47.116191][ T759] ? get_dump_page+0x165/0x220 [ 47.116221][ T759] ? __asan_memset+0x39/0x50 [ 47.116242][ T759] ? iov_iter_bvec+0xc0/0x180 [ 47.116269][ T759] dump_user_range+0xb8b/0xe60 [ 47.116294][ T759] ? __cfi_dump_user_range+0x10/0x10 [ 47.116318][ T759] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 47.116354][ T759] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 47.116389][ T759] ? elf_core_dump+0x24c0/0x3960 [ 47.116417][ T759] elf_core_dump+0x2e7e/0x3960 [ 47.116449][ T759] ? __cfi_elf_core_dump+0x10/0x10 [ 47.116484][ T759] ? dump_interrupted+0xf0/0xf0 [ 47.116505][ T759] ? filp_open+0x199/0x1f0 [ 47.116535][ T759] ? 0xffffffffff600000 [ 47.116553][ T759] do_coredump+0x208a/0x2fe0 [ 47.116578][ T759] ? __cfi_do_coredump+0x10/0x10 [ 47.116599][ T759] ? asm_exc_page_fault+0x2b/0x30 [ 47.116633][ T759] ? __kasan_slab_free+0x6a/0x80 [ 47.116659][ T759] ? kmem_cache_free+0x1bd/0x4f0 [ 47.116683][ T759] ? get_signal+0xa74/0x14e0 [ 47.116715][ T759] get_signal+0x11f8/0x14e0 [ 47.116749][ T759] arch_do_signal_or_restart+0xbc/0x760 [ 47.116779][ T759] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 47.116805][ T759] irqentry_exit_to_user_mode+0x4d/0xb0 [ 47.116837][ T759] irqentry_exit+0x16/0x60 [ 47.116867][ T759] exc_page_fault+0x65/0xc0 [ 47.116897][ T759] asm_exc_page_fault+0x2b/0x30 [ 47.116921][ T759] RIP: 0033:0x7fc2acd9ce61 [ 47.116939][ T759] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 47.116957][ T759] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 47.116977][ T759] RAX: 0000000000000000 RBX: 00007fc2ad016180 RCX: 00007fc2acd9ce59 [ 47.116992][ T759] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 47.117024][ T759] RBP: 00007fc2ace32d6f R08: 0000000000000000 R09: 0000000000000000 [ 47.117038][ T759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.117052][ T759] R13: 00007fc2ad016218 R14: 00007fc2ad016180 R15: 00007ffef9d2f6c8 [ 47.117072][ T759] [ 47.117080][ T759] memory: usage 307192kB, limit 307200kB, failcnt 21947 [ 47.571169][ T759] memory+swap: usage 373496kB, limit 9007199254740988kB, failcnt 0 [ 47.579142][ T759] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 47.586194][ T759] Memory cgroup stats for /syz2: [ 47.586347][ T759] cache 270450688 [ 47.595104][ T759] rss 57344 [ 47.598226][ T759] rss_huge 0 [ 47.601470][ T759] shmem 270450688 [ 47.605114][ T759] mapped_file 0 [ 47.608661][ T759] dirty 0 [ 47.611656][ T759] writeback 0 [ 47.614950][ T759] workingset_refault_anon 24 [ 47.619538][ T759] workingset_refault_file 335 [ 47.624277][ T759] swap 111894528 [ 47.627848][ T759] swapcached 73728 [ 47.631606][ T759] pgpgin 137073 [ 47.635073][ T759] pgpgout 71017 [ 47.638526][ T759] pgfault 10998 [ 47.642019][ T759] pgmajfault 15 [ 47.645508][ T759] inactive_anon 135794688 [ 47.649869][ T759] active_anon 134770688 [ 47.654029][ T759] inactive_file 0 [ 47.657657][ T759] active_file 0 [ 47.661143][ T759] unevictable 0 [ 47.664612][ T759] hierarchical_memory_limit 314572800 [ 47.670090][ T759] hierarchical_memsw_limit 9223372036854771712 [ 47.676366][ T759] total_cache 270450688 [ 47.680585][ T759] total_rss 57344 [ 47.684233][ T759] total_rss_huge 0 [ 47.687965][ T759] total_shmem 270450688 [ 47.705197][ T759] total_mapped_file 0 [ 47.709207][ T759] total_dirty 0 [ 47.712700][ T759] total_writeback 0 [ 47.716518][ T759] total_workingset_refault_anon 24 [ 47.721691][ T759] total_workingset_refault_file 335 [ 47.726896][ T759] total_swap 111894528 [ 47.731000][ T759] total_swapcached 73728 [ 47.735250][ T759] total_pgpgin 137073 [ 47.739223][ T759] total_pgpgout 71017 [ 47.743240][ T759] total_pgfault 10998 [ 47.747229][ T759] total_pgmajfault 15 [ 47.751297][ T759] total_inactive_anon 135794688 [ 47.756177][ T759] total_active_anon 134770688 [ 47.760891][ T759] total_inactive_file 0 [ 47.765055][ T759] total_active_file 0 [ 47.769026][ T759] total_unevictable 0 [ 47.773035][ T759] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.108,pid=757,uid=0 [ 47.787908][ T759] Memory cgroup out of memory: Killed process 757 (syz.2.108) total-vm:90508kB, anon-rss:1236kB, file-rss:22108kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000