last executing test programs: 23.664881239s ago: executing program 2 (id=52): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x10, 0x1, 0x0, 0x8, 0x0}) pipe2(&(0x7f0000000000), 0x80000) pipe2$9p(&(0x7f0000000000), 0x0) (async) fcntl$setpipe(r0, 0x407, 0x4000004) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x10, 0x1, 0x0, 0x8, 0x0}) (async) pipe2(&(0x7f0000000000), 0x80000) (async) 23.660729669s ago: executing program 2 (id=53): socket(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x2000000000, 0x1000000005, 0x20, 0x4, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380002, 0x2000008, 0x8, 0x8, 0x5, 0x8000], 0x50000, 0x3c4210}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000280)={0x0, 0x800, 0x7}) 23.544898151s ago: executing program 2 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}]}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r6, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) close(0x4) symlink(0x0, 0x0) process_vm_readv(0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/172, 0xac}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000000, 0x4000010, 0xffffffffffffffff, 0x0) connect$unix(r7, &(0x7f0000000140)=@abs, 0x6e) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000000c0)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r9, 0x40000) 22.686987873s ago: executing program 2 (id=60): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) unshare(0x26020580) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/174, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/4096, 0x8080000}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0xf000, 0x0, 0x1, {0xa, 0x4e20, 0x5, @local, 0xfffffff8}}}, 0x32) (async) write$FUSE_INIT(r0, 0x0, 0x0) (async) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) userfaultfd(0x801) 21.844885673s ago: executing program 2 (id=66): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000000858041950000000000001090224000100008808090400fe01030003000921810003012228000905810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (rerun: 32) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x7c, @remote, 0x19}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="51b6fbf0a3e123b32dccce307246a00eccd47ba07836c194cdb69b685ef5c7871e603470f0b9f865664da4be61e29dcfaafb2a3eedb03a0947dda813208d03ee559f8e719b5a0de8", 0x48}], 0x1}}], 0x1, 0x8004) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="0f08280000002805c2631385265a792c3cbdeace918d0fb74237cc7b02cb9e2fdce3b509c42d44ce2a5297"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet(0x2, 0xa, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x2, 0x3}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 21.820176134s ago: executing program 2 (id=68): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0xa, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="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", 0x559}], 0x3}}], 0x1, 0x80040c4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0x4, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x6000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0xe, 0x2, 0x6, 0x1, 0x9, 0xea, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xc, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x42, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x3, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xb000, 0x9}, 0x40040, 0x0, 0x0, 0x400488, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x8, 0x0, 0x0, 0x4, 0xeb, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0xa, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="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", 0x559}], 0x3}}], 0x1, 0x80040c4) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0x4, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x6000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0xe, 0x2, 0x6, 0x1, 0x9, 0xea, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xc, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x42, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x3, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xb000, 0x9}, 0x40040, 0x0, 0x0, 0x400488, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x8, 0x0, 0x0, 0x4, 0xeb, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) (async) 21.781826135s ago: executing program 32 (id=68): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0xa, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="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", 0x559}], 0x3}}], 0x1, 0x80040c4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0x4, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x6000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0xe, 0x2, 0x6, 0x1, 0x9, 0xea, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xc, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x42, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x3, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xb000, 0x9}, 0x40040, 0x0, 0x0, 0x400488, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x8, 0x0, 0x0, 0x4, 0xeb, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0xa, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="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", 0x559}], 0x3}}], 0x1, 0x80040c4) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0x4, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x6000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0xe, 0x2, 0x6, 0x1, 0x9, 0xea, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xc, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x42, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x3, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xb000, 0x9}, 0x40040, 0x0, 0x0, 0x400488, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x8, 0x0, 0x0, 0x4, 0xeb, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) (async) 18.376247809s ago: executing program 3 (id=95): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/100, 0x64}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000500)=""/14, 0xe}, {&(0x7f0000000540)=""/205, 0xcd}], 0x4, &(0x7f0000000680)=""/9, 0x9}, 0x8}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)="6fd9ef", 0x3) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0005020008"], 0xe) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r3, 0x0, 0x119) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) read(r4, &(0x7f0000002980)=""/4096, 0x1000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x6}, 0x67, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x45}, 0x0, 0x3, 0x1, 0xb7, 0x0, 0x8001, 0x3}}, 0xe8) r7 = socket(0x2, 0xa, 0x300) getpeername$packet(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'veth0\x00', 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r8, 0x8008662c, 0x0) 18.232911222s ago: executing program 3 (id=96): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4c, 0x0, 0x1, 0x3}, {0x16, 0x0, 0x0, 0xfffffffd}]}) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000004fcff", 0x58}], 0x1) 17.388873253s ago: executing program 3 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x5) write(r2, &(0x7f0000000200)='atkbd', 0x5) write(r1, &(0x7f0000000000)='7', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x5) (async) write(r2, &(0x7f0000000200)='atkbd', 0x5) (async) write(r1, &(0x7f0000000000)='7', 0x1) (async) 17.212867767s ago: executing program 1 (id=105): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120101000000000000000109022400010000c0060000000003030003000921000007012206000905810320000306f3"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x40, 0x8, 0xa, {0xa, 0x23, "4df95aef8325e7e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 16.763498258s ago: executing program 3 (id=106): getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r1, 0x400, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='270', 0x3) r3 = syz_open_dev$loop(0x0, 0x6, 0x14f882) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r7, 0x0, 0xf3a, 0x9) tee(r6, r10, 0xf3a, 0x4) write$binfmt_elf64(r8, &(0x7f0000000380)=ANY=[], 0x18c6) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000160a01080000000000000000070000001400000011000100000040000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x5, 0x0, 0x0, 0xb, 0xd, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800, 0x7ff]}}) unshare(0x40000000) 16.120907724s ago: executing program 4 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 16.101181505s ago: executing program 4 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000e35000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xfec08000, 0x40000, 0xc, 0xf4, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x6}, {0x1ffe, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xdddd1000, 0xf, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0xa, 0x5, 0x10, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x60000, 0xffff1000, 0xa, 0x0, 0x3, 0x9, 0x4, 0xc3, 0x4, 0x90, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xc, 0x1, 0xb3, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x6}, {0x40000, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14008a, 0x6, 0x0, 0xe6e70c00, [0x7, 0x401, 0x8, 0xc5]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) 15.804812532s ago: executing program 4 (id=115): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x440c0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="67650fae26660f5d7b00b8e6068ec0b800008ec8660f0d56170f01cf366705000066b9800000c00f326635008000000f300f01cbf00178f5", 0x38}], 0x1, 0x11, &(0x7f0000000080)=[@cr4={0x1, 0x80}, @flags={0x3, 0x1}], 0x2) 15.764289163s ago: executing program 4 (id=116): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af25, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000001840)={0x4, &(0x7f00000015c0)=[{}, {@none}, {}, {@none}]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x30b8, 0x1, 0x1, 0x201}, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa27, 0x8, 0x0, 0x22d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff6, 0x8000, 0x1, 0x20a}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5326, 0x6b4918b9ae7a8d75, 0x0, 0x2a0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x86a9, 0x1, 0x2, 0x27}}], 0x4, &(0x7f0000001500)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1ff}, 0x0, 0x0, '\x00', {0x1, 0x368, 0x0, &(0x7f0000000500)=@buf_1k="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"}}, &(0x7f0000001580)) mmap$IORING_OFF_SQ_RING(0x0, 0x94e, 0x2000007, 0x10, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) 15.242667516s ago: executing program 4 (id=119): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085400, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) wait4(0x0, &(0x7f0000000440), 0x40000000, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x10b) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x17) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x0) 15.07231102s ago: executing program 4 (id=120): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="110000005200010003000000000000000a"], 0x20}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @broadcast}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000080}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000001c0)=0x2, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001300), r5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000200)) lseek(r5, 0x2000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x1a, 0xfffffffd) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000140)=0x4) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x248, 0x21, 0x700, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x12, 0x14e, 0x0, 0x0, @str='/proc/cgroups\x00'}, @generic="f3d9826f0aa04ec1fc713dd18cde15f11a42b6c0202b5f284f75e1390d3dc2e3d31a333228e382d2bd7a78616757ba9366061d1be51e5487c82624e7bc32e5603089bf799141a8c71b613cb995d967120e56a7f58c9c0f2c9fb5f876cbe6f67927206604d3ce18f54f85eb3767558e2d419f03bc6c7883861c32a1314e2ef43f45e2d108f34f2601006fd433624a05d24172cdc8f983c675afa9ad", @typed={0xc, 0x17, 0x0, 0x0, @u64}, @nested={0xb1, 0xfb, 0x0, 0x1, [@generic="90fdd327bbd80edb0cf5aa30c61f9bbf1e29cdea6e43e7584a3b7bd8fc30b4eb4ce49d02fb833ea5ee917f7fdd392eee59d67ca68b797e5a6fd31242d201b91b41e64440b670cf9e44b550d880ff5aa5369094da", @generic="9d41d741eab38a0fefb1229881efe558c90847fd642f2240d23fce72f858a6d858f67c397a2fa08ef260bd5ea24a906bce86cdcc614a3f05804e634bcf67f920462edf200b4a4103bb0474059bfe308d9a5bbf75cff84dc9dd"]}, @generic="a5d37c5227bd360132e198f4f6de0548c1e61f390ecd2ad57d6eefbb5f07385e80c6fa2093eb4a61a473b51a255ba9834083792a7a142c3b9adced3c046734368459e2ef2f590011aeab38003ba0133990959ceb4ca5ffbaee49554cac957c9d91e59c884bcd1e09b320c826a4f1b188c62a919ab2230efd9261c9df9f7d4b7a7abf8616097d6772d7d74835e1996ee004f19621bec5737f0eb7b5cc81a978a706b87a5f589028fcc36f651a5e3d64b99979d600d19892d7bbd71c2a29646a963318ee"]}, 0x248}, 0x1, 0x0, 0x0, 0x67bef61d019553c6}, 0x0) close(r0) 14.333159348s ago: executing program 0 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0xffff) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0xffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) write(0xffffffffffffffff, &(0x7f00000000c0)="8aab7706cd585bd34b45e86b93c9faf838147dd85f14a5c0255fdf8ea6f4b33e9b884fad28f589900e", 0x29) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e2200000005002d0000000000000040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d00010075"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x50012) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xba187000) capset(&(0x7f0000000040)={0x20071026}, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$bpf(0x200000000000, 0x0, 0x0, 0x98d046, 0x0) 14.094802654s ago: executing program 1 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}]}}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x800, 0xbb3, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x20, 0x1}}, @code={0xa, 0x56, {"3e480fc7987a730000f30fa7d0430f0f7c2300a036f23e430f0204d4660f3821e466baf80cb82a5fd389ef66bafc0c66ed66b80c018ed00fc730410f2284b94c0a00000f32"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x55a, 0xd0b1, 0x5, 0xa}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x2, 0xfffffffffffffffc}}, @nested_amd_stgi={0x17e, 0x10}], 0x13e}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) 14.094483144s ago: executing program 1 (id=126): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xf6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = openat(r1, &(0x7f0000000080)='./sys/block/loop0/make-it-fail\x00', 0x4d4042, 0x0) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt/events/cdns3/cdns3_ep0_queue/format\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000008b80)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f000000ac80)={0x2020}, 0x2020) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x9, r3, 0x7ff, 0x3) ptrace$cont(0x7, r3, 0x80000001, 0x4) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000000)={0x4, 0x35, 0x89, 0x800000b, 0x44, "00ffff00000400", 0x40fff, 0xa8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xcb) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0xff) 14.094156964s ago: executing program 1 (id=127): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "232fff0f585f168aceebdfc02d393e52290b7bddb2d3dd92e2d2d5229742d0defe9e4ec14eb5c6d2070016f3f674cdf449f37014ad007e8f7f8ec4e8"}, 0x4c) 14.008847466s ago: executing program 0 (id=128): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='bRequestType= ', 0xe) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r4}, 0x14) ioctl$TUNSETIFF(r0, 0xc0506617, 0x0) 14.008658886s ago: executing program 1 (id=129): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, 0x0, 0x8, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x90) (async) r2 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@sg0, r3, &(0x7f0000000300)={0x7fff, 0x2, 0x1, 0x1, 0x7, 0x4, 0x7, 0x4}) lsetxattr$security_selinux(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)='system_u:object_r:vhost_device_t:s0\x00', 0x24, 0x2) 13.664585425s ago: executing program 3 (id=135): syz_usb_connect(0x3, 0x2d, &(0x7f00000016c0)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], 0x0) (async) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000016c0)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) userfaultfd(0x801) (async) r1 = userfaultfd(0x801) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x310}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000015000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f0000001540)=""/231, 0xe7}, &(0x7f0000001680)=0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0x3, "aa3d39"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x15555555555555bb}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x15555555555555bb}) write(0xffffffffffffffff, 0x0, 0x0) 11.02109522s ago: executing program 1 (id=136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x10000}) 0s ago: executing program 33 (id=120): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="110000005200010003000000000000000a"], 0x20}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @broadcast}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000080}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000001c0)=0x2, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001300), r5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000200)) lseek(r5, 0x2000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x1a, 0xfffffffd) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000140)=0x4) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x248, 0x21, 0x700, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x12, 0x14e, 0x0, 0x0, @str='/proc/cgroups\x00'}, @generic="f3d9826f0aa04ec1fc713dd18cde15f11a42b6c0202b5f284f75e1390d3dc2e3d31a333228e382d2bd7a78616757ba9366061d1be51e5487c82624e7bc32e5603089bf799141a8c71b613cb995d967120e56a7f58c9c0f2c9fb5f876cbe6f67927206604d3ce18f54f85eb3767558e2d419f03bc6c7883861c32a1314e2ef43f45e2d108f34f2601006fd433624a05d24172cdc8f983c675afa9ad", @typed={0xc, 0x17, 0x0, 0x0, @u64}, @nested={0xb1, 0xfb, 0x0, 0x1, [@generic="90fdd327bbd80edb0cf5aa30c61f9bbf1e29cdea6e43e7584a3b7bd8fc30b4eb4ce49d02fb833ea5ee917f7fdd392eee59d67ca68b797e5a6fd31242d201b91b41e64440b670cf9e44b550d880ff5aa5369094da", @generic="9d41d741eab38a0fefb1229881efe558c90847fd642f2240d23fce72f858a6d858f67c397a2fa08ef260bd5ea24a906bce86cdcc614a3f05804e634bcf67f920462edf200b4a4103bb0474059bfe308d9a5bbf75cff84dc9dd"]}, @generic="a5d37c5227bd360132e198f4f6de0548c1e61f390ecd2ad57d6eefbb5f07385e80c6fa2093eb4a61a473b51a255ba9834083792a7a142c3b9adced3c046734368459e2ef2f590011aeab38003ba0133990959ceb4ca5ffbaee49554cac957c9d91e59c884bcd1e09b320c826a4f1b188c62a919ab2230efd9261c9df9f7d4b7a7abf8616097d6772d7d74835e1996ee004f19621bec5737f0eb7b5cc81a978a706b87a5f589028fcc36f651a5e3d64b99979d600d19892d7bbd71c2a29646a963318ee"]}, 0x248}, 0x1, 0x0, 0x0, 0x67bef61d019553c6}, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 22.245194][ T36] audit: type=1400 audit(1791120441.810:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.246336][ T286] cgroup: Unknown subsys name 'net' [ 22.267828][ T36] audit: type=1400 audit(1791120441.810:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.295112][ T36] audit: type=1400 audit(1791120441.850:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.295257][ T286] cgroup: Unknown subsys name 'devices' [ 22.430215][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.435818][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.548274][ T36] audit: type=1400 audit(1791120442.110:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.571416][ T36] audit: type=1400 audit(1791120442.110:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.596089][ T36] audit: type=1400 audit(1791120442.120:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.616108][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.627960][ T36] audit: type=1400 audit(1791120442.190:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.653341][ T36] audit: type=1400 audit(1791120442.190:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.687069][ T36] audit: type=1400 audit(1791120442.250:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.712583][ T36] audit: type=1400 audit(1791120442.250:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.712863][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.397225][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.418544][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.425640][ T293] bridge_slave_0: entered allmulticast mode [ 23.432145][ T293] bridge_slave_0: entered promiscuous mode [ 23.438745][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.445790][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.452867][ T293] bridge_slave_1: entered allmulticast mode [ 23.459131][ T293] bridge_slave_1: entered promiscuous mode [ 23.586616][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.593711][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.600889][ T297] bridge_slave_0: entered allmulticast mode [ 23.607002][ T297] bridge_slave_0: entered promiscuous mode [ 23.615101][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.622179][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.629253][ T297] bridge_slave_1: entered allmulticast mode [ 23.635386][ T297] bridge_slave_1: entered promiscuous mode [ 23.641372][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.648384][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.655433][ T299] bridge_slave_0: entered allmulticast mode [ 23.661560][ T299] bridge_slave_0: entered promiscuous mode [ 23.668106][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.675160][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.682206][ T299] bridge_slave_1: entered allmulticast mode [ 23.688444][ T299] bridge_slave_1: entered promiscuous mode [ 23.722367][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.729418][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.736670][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.743702][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.786605][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.793666][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.800725][ T298] bridge_slave_0: entered allmulticast mode [ 23.806880][ T298] bridge_slave_0: entered promiscuous mode [ 23.813454][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.820517][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.827544][ T298] bridge_slave_1: entered allmulticast mode [ 23.833809][ T298] bridge_slave_1: entered promiscuous mode [ 23.929309][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.936347][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.943618][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.950667][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.962011][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.969479][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.976898][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.984189][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.998366][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.005433][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.013035][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.020072][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.071185][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.078234][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.087554][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.094625][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.109648][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.116676][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.124461][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.131498][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.165550][ T298] veth0_vlan: entered promiscuous mode [ 24.187791][ T299] veth0_vlan: entered promiscuous mode [ 24.197053][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.204102][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.214855][ T293] veth0_vlan: entered promiscuous mode [ 24.222175][ T298] veth1_macvtap: entered promiscuous mode [ 24.236730][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.243771][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.259289][ T293] veth1_macvtap: entered promiscuous mode [ 24.278502][ T299] veth1_macvtap: entered promiscuous mode [ 24.311463][ T297] veth0_vlan: entered promiscuous mode [ 24.320068][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.345911][ T297] veth1_macvtap: entered promiscuous mode [ 24.380152][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.419790][ T319] No source specified [ 24.572268][ T334] ./dev/sda1: Can't lookup blockdev [ 24.668609][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.819648][ T9] usb 1-1: config 7 has an invalid interface number: 177 but max is 1 [ 24.827851][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 24.848765][ T9] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 24.857666][ T9] usb 1-1: config 7 has no interface number 0 [ 24.863812][ T9] usb 1-1: config 7 interface 177 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 24.877229][ T9] usb 1-1: config 7 interface 177 has no altsetting 0 [ 24.888914][ T9] usb 1-1: New USB device found, idVendor=19d2, idProduct=0b70, bcdDevice=b8.3c [ 24.897960][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.918909][ T9] usb 1-1: Product: syz [ 24.923078][ T9] usb 1-1: Manufacturer: syz [ 24.927654][ T9] usb 1-1: SerialNumber: syz [ 25.217981][ T9] usb 1-1: bad CDC descriptors [ 25.226709][ T9] usb 1-1: USB disconnect, device number 2 [ 25.578583][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.607272][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.613719][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.627456][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.634012][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.643984][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.650920][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.657321][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.664671][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.673581][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.680286][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.686641][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.693229][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.699802][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.706279][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.712690][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.719204][ T10] usb 2-1: device descriptor read/64, error -71 [ 25.732000][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.738335][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.744782][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.755431][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.761840][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.768235][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.778580][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.784984][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.791521][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.798180][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.802906][ T381] ./dev/sda1: Can't lookup blockdev [ 25.811158][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.817497][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.832108][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.848638][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.858570][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.865171][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.871755][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.878186][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.887288][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.894098][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.900824][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.907182][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.913729][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.920144][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.926523][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.932977][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.939475][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.945851][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.952492][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.958886][ T10] usb 2-1: device descriptor read/64, error -71 [ 25.965443][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.972195][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.978683][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.985077][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.991801][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.998199][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.004686][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.011381][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.021879][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.028363][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.034796][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.041533][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.047884][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.055118][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.061505][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.067876][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.077751][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.084141][ T385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'. [ 26.084275][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.099865][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.106248][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.112629][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.119473][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.125972][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.134592][ T372] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.141487][ T373] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.158792][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.199670][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.319594][ T64] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 26.326837][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 26.336550][ T10] usb 2-1: device descriptor read/64, error -71 [ 26.342815][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 26.360665][ T64] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 26.370101][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.378223][ T64] usb 1-1: Product: syz [ 26.382428][ T64] usb 1-1: Manufacturer: syz [ 26.387019][ T64] usb 1-1: SerialNumber: syz [ 26.392259][ T64] usb 1-1: config 0 descriptor?? [ 26.398767][ T64] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 26.599790][ T10] usb 2-1: device descriptor read/64, error -71 [ 26.608787][ T64] usb 1-1: USB disconnect, device number 3 [ 26.630848][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.709009][ T10] usb usb2-port1: attempt power cycle [ 27.048600][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.079564][ T10] usb 2-1: device descriptor read/8, error -71 [ 27.219598][ T10] usb 2-1: device descriptor read/8, error -71 [ 27.257471][ T408] ./dev/sda1: Can't lookup blockdev [ 27.304855][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 27.304872][ T36] audit: type=1400 audit(1791120446.870:146): avc: denied { write } for pid=409 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.306772][ T411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.311164][ T36] audit: type=1400 audit(1791120446.870:147): avc: denied { read } for pid=409 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.362627][ T36] audit: type=1400 audit(1791120446.870:148): avc: denied { ioctl } for pid=409 comm="syz.2.27" path="socket:[4420]" dev="sockfs" ino=4420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.387786][ T36] audit: type=1400 audit(1791120446.870:149): avc: denied { setopt } for pid=409 comm="syz.2.27" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.410975][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.412480][ T36] audit: type=1400 audit(1791120446.910:150): avc: denied { ioctl } for pid=409 comm="syz.2.27" path="socket:[4084]" dev="sockfs" ino=4084 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.424555][ T416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=416 comm=syz.2.29 [ 27.450230][ T36] audit: type=1400 audit(1791120446.910:151): avc: denied { connect } for pid=409 comm="syz.2.27" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.466856][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.481551][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.493215][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.503157][ T422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 27.513872][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.521265][ T36] audit: type=1400 audit(1791120446.910:152): avc: denied { map } for pid=409 comm="syz.2.27" path="socket:[4084]" dev="sockfs" ino=4084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.533866][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.555871][ T36] audit: type=1400 audit(1791120446.910:153): avc: denied { read accept } for pid=409 comm="syz.2.27" path="socket:[4084]" dev="sockfs" ino=4084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.568779][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.603776][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.609235][ T10] usb 2-1: device descriptor read/8, error -71 [ 27.621303][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.634757][ T36] audit: type=1400 audit(1791120447.200:154): avc: denied { ioctl } for pid=423 comm="syz.0.31" path="socket:[5139]" dev="sockfs" ino=5139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.635244][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=417 comm=syz.2.29 [ 27.665342][ T378] Bluetooth: hci0: command 0x1003 tx timeout [ 27.677181][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.678757][ T36] audit: type=1400 audit(1791120447.230:155): avc: denied { connect } for pid=423 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.700141][ T426] tipc: Started in network mode [ 27.707442][ T426] tipc: Node identity 0ae2c19801f9, cluster identity 4711 [ 27.713636][ T31] rust_binder: 427: undelivered TRANSACTION_ERROR: 29189 [ 27.715184][ T426] tipc: Enabled bearer , priority 0 [ 27.734794][ T426] tipc: Disabling bearer [ 27.761473][ T10] usb 2-1: device descriptor read/8, error -71 [ 27.775326][ T432] ./dev/sda1: Can't lookup blockdev [ 27.833929][ T438] netlink: 104 bytes leftover after parsing attributes in process `syz.2.38'. [ 27.844328][ T442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 27.885642][ T10] usb usb2-port1: unable to enumerate USB device [ 27.978562][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.001091][ T451] rust_binder: 450 RLIMIT_NICE not set [ 28.001578][ T450] netlink: 'syz.3.41': attribute type 4 has an invalid length. [ 28.020693][ T9] rust_binder: 9:9 release transaction 2 in, still active [ 28.129664][ T310] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.140824][ T310] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.158560][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 28.165290][ T310] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 28.174397][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.184616][ T310] usb 1-1: config 0 descriptor?? [ 28.198855][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.361699][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 28.369419][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 28.376786][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 28.387167][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.409263][ T10] usb 3-1: config 129 has an invalid interface number: 9 but max is 0 [ 28.417444][ T10] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 28.438692][ T10] usb 3-1: config 129 has no interface number 0 [ 28.444989][ T10] usb 3-1: config 129 interface 9 has no altsetting 0 [ 28.462786][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 28.478544][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.486572][ T10] usb 3-1: Product: syz [ 28.498553][ T10] usb 3-1: Manufacturer: syz [ 28.503164][ T10] usb 3-1: SerialNumber: syz [ 28.598109][ T310] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:06A3:0CD0.0001/input/input4 [ 28.624720][ T310] saitek 0003:06A3:0CD0.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.0-1/input0 [ 28.719443][ T10] usb 3-1: USB disconnect, device number 2 [ 28.757165][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.9/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.798584][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.832336][ T310] usb 1-1: USB disconnect, device number 4 [ 28.958573][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 28.970289][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.981102][ T31] usb 2-1: config 151 has an invalid interface number: 33 but max is 0 [ 28.983567][ T471] capability: warning: `syz.3.48' uses deprecated v2 capabilities in a way that may be insecure [ 28.989857][ T31] usb 2-1: config 151 has no interface number 0 [ 29.006332][ T31] usb 2-1: config 151 interface 33 has no altsetting 0 [ 29.014740][ T31] usb 2-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 29.023831][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.031902][ T31] usb 2-1: Product: syz [ 29.036053][ T31] usb 2-1: Manufacturer: syz [ 29.041248][ T31] usb 2-1: SerialNumber: syz [ 29.250292][ T31] uvcvideo 2-1:151.33: Found multiple Units with ID 3 [ 29.257482][ T31] usb 2-1: Found UVC 0.0a device syz (1608:021b) [ 29.264026][ T31] usb 2-1: No valid video chain found. [ 29.270821][ T31] usb 2-1: USB disconnect, device number 6 [ 29.378558][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.418563][ T497] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.528555][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 29.534728][ T310] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 29.543070][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.553956][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.564394][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.577189][ T310] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 29.586281][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.594857][ T310] usb 4-1: config 0 descriptor?? [ 29.770295][ T500] netlink: 196 bytes leftover after parsing attributes in process `syz.1.57'. [ 30.002678][ T479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.011314][ T479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.039117][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 30.189694][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 30.200841][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.211850][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 30.221517][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 30.238565][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.248415][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.262360][ T9] usb 2-1: SerialNumber: syz [ 30.276131][ T508] ======================================================= [ 30.276131][ T508] WARNING: The mand mount option has been deprecated and [ 30.276131][ T508] and is ignored by this kernel. Remove the mand [ 30.276131][ T508] option from the mount to silence this warning. [ 30.276131][ T508] ======================================================= [ 30.476059][ T500] netlink: 240 bytes leftover after parsing attributes in process `syz.1.57'. [ 30.488842][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 30.510162][ T9] usb 2-1: USB disconnect, device number 7 [ 30.658935][ T310] sony 0003:1345:3008.0002: can't set operational mode: step 2 [ 30.680124][ T310] sony 0003:1345:3008.0002: Failed to set controller into operational mode [ 30.704354][ T310] sony 0003:1345:3008.0002: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 30.716542][ T310] sony 0003:1345:3008.0002: failed to claim input [ 30.727272][ T310] usb 4-1: USB disconnect, device number 2 [ 30.736020][ T521] fido_id[521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 31.088615][ T526] bridge0: port 3(erspan0) entered blocking state [ 31.095202][ T526] bridge0: port 3(erspan0) entered disabled state [ 31.101757][ T526] erspan0: entered allmulticast mode [ 31.107704][ T526] erspan0: entered promiscuous mode [ 31.113218][ T526] bridge0: port 3(erspan0) entered blocking state [ 31.119675][ T526] bridge0: port 3(erspan0) entered forwarding state [ 31.179333][ T311] bridge_slave_1: left allmulticast mode [ 31.185023][ T311] bridge_slave_1: left promiscuous mode [ 31.198646][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.206400][ T311] bridge_slave_0: left allmulticast mode [ 31.212380][ T311] bridge_slave_0: left promiscuous mode [ 31.218271][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.351174][ T311] tipc: Left network mode [ 31.365221][ T311] veth1_macvtap: left promiscuous mode [ 31.375884][ T311] veth0_vlan: left promiscuous mode [ 31.468741][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.484313][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.498555][ T547] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.505654][ T547] bridge_slave_0: entered allmulticast mode [ 31.512261][ T547] bridge_slave_0: entered promiscuous mode [ 31.518994][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.526132][ T547] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.533456][ T547] bridge_slave_1: entered allmulticast mode [ 31.539970][ T547] bridge_slave_1: entered promiscuous mode [ 31.581197][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.588228][ T547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.595485][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.602517][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.622702][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.630103][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.638585][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 31.645135][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.648008][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.652187][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.652535][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.663556][ T310] usb 4-1: config 0 has no interfaces? [ 31.669473][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.678117][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 31.696608][ T547] veth0_vlan: entered promiscuous mode [ 31.711195][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.714226][ T547] veth1_macvtap: entered promiscuous mode [ 31.719983][ T310] usb 4-1: Product: syz [ 31.734371][ T310] usb 4-1: Manufacturer: syz [ 31.739146][ T310] usb 4-1: SerialNumber: syz [ 31.749660][ T310] usb 4-1: config 0 descriptor?? [ 31.879006][ T566] No source specified [ 32.023616][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.040241][ T574] overlayfs: failed to resolve './file0': -2 [ 32.199611][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.213360][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.222884][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.231145][ T10] usb 1-1: SerialNumber: syz [ 32.289815][ T584] syzkaller1: entered promiscuous mode [ 32.295307][ T584] syzkaller1: entered allmulticast mode [ 32.322595][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 32.322610][ T36] audit: type=1400 audit(1791120451.890:212): avc: denied { create } for pid=527 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.347776][ T36] audit: type=1400 audit(1791120451.890:213): avc: denied { write } for pid=527 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.376267][ T36] audit: type=1400 audit(1791120451.940:214): avc: denied { mounton } for pid=586 comm="syz.4.79" path="/6/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 32.378914][ T588] FAULT_INJECTION: forcing a failure. [ 32.378914][ T588] name failslab, interval 1, probability 0, space 0, times 1 [ 32.410389][ T588] CPU: 1 UID: 0 PID: 588 Comm: syz.4.79 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 32.410417][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 32.410433][ T588] Call Trace: [ 32.410440][ T588] [ 32.410447][ T588] __dump_stack+0x21/0x30 [ 32.410483][ T588] dump_stack_lvl+0x140/0x1c0 [ 32.410509][ T588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.410535][ T588] ? __filename_parentat+0x458/0x660 [ 32.410557][ T588] dump_stack+0x19/0x20 [ 32.410580][ T588] should_fail_ex+0x3c2/0x510 [ 32.410604][ T588] should_failslab+0xac/0x100 [ 32.410628][ T588] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 32.410645][ T588] ? __d_alloc+0x42/0x8c0 [ 32.410663][ T588] ? __d_lookup+0x4e8/0x550 [ 32.410682][ T588] __d_alloc+0x42/0x8c0 [ 32.410700][ T588] d_alloc+0x4c/0x1c0 [ 32.410718][ T588] ? lookup_one_qstr_excl+0xba/0x280 [ 32.410741][ T588] lookup_one_qstr_excl+0xcf/0x280 [ 32.410764][ T588] filename_create+0x241/0x450 [ 32.410780][ T588] ? kern_path_create+0x70/0x70 [ 32.410795][ T588] do_mkdirat+0xa9/0x530 [ 32.410809][ T588] ? strncpy_from_user+0x14f/0x280 [ 32.410824][ T588] ? __cfi_do_mkdirat+0x10/0x10 [ 32.410846][ T588] ? getname_flags+0x203/0x6b0 [ 32.410869][ T588] __x64_sys_mkdir+0x70/0x80 [ 32.410895][ T588] x64_sys_call+0x26c8/0x2ee0 [ 32.410911][ T588] do_syscall_64+0x57/0xf0 [ 32.410923][ T588] ? clear_bhb_loop+0x50/0xa0 [ 32.410937][ T588] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.410950][ T588] RIP: 0033:0x7f292a79e159 [ 32.410965][ T588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.410976][ T588] RSP: 002b:00007f292b603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 32.411005][ T588] RAX: ffffffffffffffda RBX: 00007f292aa26090 RCX: 00007f292a79e159 [ 32.411020][ T588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 32.411033][ T588] RBP: 00007f292a83506b R08: 0000000000000000 R09: 0000000000000000 [ 32.411046][ T588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.411055][ T588] R13: 00007f292aa26128 R14: 00007f292aa26090 R15: 00007ffdd7eb7128 [ 32.411064][ T588] [ 32.476786][ T591] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 32.684912][ T36] audit: type=1400 audit(1791120452.250:215): avc: denied { ioctl } for pid=559 comm="syz.0.71" path="/17/tracing/uprobe_events" dev="tracefs" ino=45 ioctlcmd=0x5204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.911926][ T10] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 32.929065][ T36] audit: type=1400 audit(1791120452.500:216): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.950131][ T36] audit: type=1400 audit(1791120452.500:217): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.978096][ T36] audit: type=1400 audit(1791120452.500:218): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=644 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.999558][ T36] audit: type=1400 audit(1791120452.500:219): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=644 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.022624][ T36] audit: type=1400 audit(1791120452.500:220): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=644 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.045583][ T36] audit: type=1400 audit(1791120452.550:221): avc: denied { read } for pid=601 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.138564][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.213139][ T615] No source specified [ 33.282003][ T619] syzkaller0: entered promiscuous mode [ 33.287537][ T619] syzkaller0: entered allmulticast mode [ 33.288577][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 33.294843][ T619] FAULT_INJECTION: forcing a failure. [ 33.294843][ T619] name failslab, interval 1, probability 0, space 0, times 0 [ 33.299670][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.313034][ T619] CPU: 0 UID: 0 PID: 619 Comm: syz.4.85 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 33.313064][ T619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.313076][ T619] Call Trace: [ 33.313082][ T619] [ 33.313089][ T619] __dump_stack+0x21/0x30 [ 33.313124][ T619] dump_stack_lvl+0x140/0x1c0 [ 33.313150][ T619] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.313179][ T619] dump_stack+0x19/0x20 [ 33.313204][ T619] should_fail_ex+0x3c2/0x510 [ 33.313228][ T619] should_failslab+0xac/0x100 [ 33.313252][ T619] __kmalloc_cache_noprof+0x41/0x470 [ 33.313272][ T619] ? tty_open+0x16b/0x10b0 [ 33.313297][ T619] tty_open+0x16b/0x10b0 [ 33.313321][ T619] ? _raw_spin_lock+0x92/0x120 [ 33.313341][ T619] ? __cfi_tty_open+0x10/0x10 [ 33.313366][ T619] chrdev_open+0x4e8/0x610 [ 33.313387][ T619] ? __cfi_chrdev_open+0x10/0x10 [ 33.313409][ T619] ? bpf_lsm_file_open+0xd/0x20 [ 33.313433][ T619] ? __cfi_chrdev_open+0x10/0x10 [ 33.313453][ T619] do_dentry_open+0x97c/0x1510 [ 33.313481][ T619] vfs_open+0x86/0x240 [ 33.313505][ T619] ? __cfi_vfs_open+0x10/0x10 [ 33.313528][ T619] ? may_open+0x352/0x430 [ 33.313552][ T619] path_openat+0x2c49/0x35a0 [ 33.313577][ T619] ? schedule+0xc5/0x240 [ 33.313598][ T619] ? kasan_save_alloc_info+0x3a/0x50 [ 33.313616][ T619] ? getname+0x1b/0x30 [ 33.313635][ T619] ? x64_sys_call+0xe69/0x2ee0 [ 33.313652][ T619] ? do_syscall_64+0x57/0xf0 [ 33.313673][ T619] ? do_filp_open+0x440/0x440 [ 33.313699][ T619] do_filp_open+0x1f2/0x440 [ 33.313723][ T619] ? __cfi_do_filp_open+0x10/0x10 [ 33.313751][ T619] ? alloc_fd+0x4c1/0x570 [ 33.313783][ T619] do_sys_openat2+0x134/0x1d0 [ 33.313809][ T619] ? fput+0x1a4/0x230 [ 33.313834][ T619] ? do_sys_open+0x100/0x100 [ 33.313862][ T619] __x64_sys_openat+0x13a/0x170 [ 33.313891][ T619] x64_sys_call+0xe69/0x2ee0 [ 33.313909][ T619] do_syscall_64+0x57/0xf0 [ 33.313928][ T619] ? clear_bhb_loop+0x50/0xa0 [ 33.313954][ T619] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.313978][ T619] RIP: 0033:0x7f292a79e159 [ 33.313995][ T619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.314011][ T619] RSP: 002b:00007f292b624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.314032][ T619] RAX: ffffffffffffffda RBX: 00007f292aa25fa0 RCX: 00007f292a79e159 [ 33.314046][ T619] RDX: 0000000000101202 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 33.314060][ T619] RBP: 00007f292a83506b R08: 0000000000000000 R09: 0000000000000000 [ 33.314072][ T619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.314084][ T619] R13: 00007f292aa26038 R14: 00007f292aa25fa0 R15: 00007ffdd7eb7128 [ 33.314100][ T619] [ 33.326034][ T64] usb 1-1: USB disconnect, device number 5 [ 33.331929][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.340998][ T64] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 33.344442][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.628594][ T310] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.54 [ 33.637650][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.645845][ T310] usb 2-1: Product: syz [ 33.650054][ T310] usb 2-1: Manufacturer: syz [ 33.654665][ T310] usb 2-1: SerialNumber: syz [ 33.864334][ T310] usb 2-1: unit 0 not found! [ 33.872243][ T310] usb 2-1: USB disconnect, device number 8 [ 33.902475][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.018569][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 34.169588][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.180738][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.190655][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.203996][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.204395][ T310] usb 4-1: USB disconnect, device number 3 [ 34.213189][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.228668][ T10] usb 5-1: config 0 descriptor?? [ 34.243374][ T650] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 34.566795][ T710] No source specified [ 34.639730][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.648257][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.663663][ T716] syz.3.95 uses obsolete (PF_INET,SOCK_PACKET) [ 34.830055][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.859149][ T10] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 34.867920][ T10] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 34.989632][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 35.000847][ T9] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 35.009964][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.017953][ T9] usb 2-1: Product: syz [ 35.022176][ T9] usb 2-1: Manufacturer: syz [ 35.026766][ T9] usb 2-1: SerialNumber: syz [ 35.033430][ T9] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 35.128987][ T31] usb 5-1: USB disconnect, device number 2 [ 35.233902][ T9] usb 2-1: USB disconnect, device number 9 [ 35.598563][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.643651][ T741] binder: Bad value for 'max' [ 35.758574][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 35.764649][ T31] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.777535][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.784432][ T734] FAULT_INJECTION: forcing a failure. [ 35.784432][ T734] name failslab, interval 1, probability 0, space 0, times 0 [ 35.797073][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 35.797081][ T734] CPU: 0 UID: 0 PID: 734 Comm: syz.3.100 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 35.797108][ T734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.797119][ T734] Call Trace: [ 35.797126][ T734] [ 35.797133][ T734] __dump_stack+0x21/0x30 [ 35.797164][ T734] dump_stack_lvl+0x140/0x1c0 [ 35.797189][ T734] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.797215][ T734] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 35.797236][ T734] dump_stack+0x19/0x20 [ 35.797259][ T734] should_fail_ex+0x3c2/0x510 [ 35.797282][ T734] should_failslab+0xac/0x100 [ 35.797304][ T734] kmem_cache_alloc_noprof+0x42/0x410 [ 35.797324][ T734] ? __kernfs_new_node+0xf1/0x740 [ 35.797348][ T734] __kernfs_new_node+0xf1/0x740 [ 35.797371][ T734] ? __kasan_check_write+0x18/0x20 [ 35.797389][ T734] ? down_write+0xee/0x2b0 [ 35.797413][ T734] ? kernfs_new_node+0x280/0x280 [ 35.797436][ T734] ? __kasan_check_write+0x18/0x20 [ 35.797455][ T734] ? up_write+0x66/0x280 [ 35.797481][ T734] ? kernfs_activate+0x1ee/0x200 [ 35.797513][ T734] ? kernfs_add_one+0x301/0x400 [ 35.797536][ T734] kernfs_new_node+0x154/0x280 [ 35.797559][ T734] kernfs_create_dir_ns+0x4b/0x130 [ 35.797584][ T734] sysfs_create_dir_ns+0x127/0x210 [ 35.797604][ T734] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 35.797625][ T734] kobject_add_internal+0x71f/0xc20 [ 35.797646][ T734] kobject_add+0x169/0x240 [ 35.797663][ T734] ? mutex_unlock+0x90/0x240 [ 35.797686][ T734] ? __cfi_kobject_add+0x10/0x10 [ 35.797704][ T734] ? kobject_put+0x1cc/0x2a0 [ 35.797722][ T734] ? get_device_parent+0x43d/0x470 [ 35.797740][ T734] device_add+0x3b5/0xbf0 [ 35.797756][ T734] input_register_device+0x9af/0x1080 [ 35.797779][ T734] atkbd_connect+0x6fa/0xa20 [ 35.797799][ T734] ? __cfi_atkbd_connect+0x10/0x10 [ 35.797822][ T734] ? device_release_driver_internal+0x7cc/0x830 [ 35.797842][ T734] drvctl_store+0xe61/0x1210 [ 35.797866][ T734] ? __cfi_drvctl_store+0x10/0x10 [ 35.797889][ T734] dev_attr_store+0x73/0xa0 [ 35.797909][ T734] ? __cfi_dev_attr_store+0x10/0x10 [ 35.797929][ T734] sysfs_kf_write+0x13e/0x160 [ 35.797948][ T734] ? __cfi_sysfs_kf_write+0x10/0x10 [ 35.797966][ T734] kernfs_fop_write_iter+0x319/0x510 [ 35.797993][ T734] vfs_write+0x762/0xfd0 [ 35.798013][ T734] ? __cfi_vfs_write+0x10/0x10 [ 35.798032][ T734] ? __cfi_mutex_lock+0x10/0x10 [ 35.798056][ T734] ksys_write+0x145/0x260 [ 35.798075][ T734] ? __cfi_ksys_write+0x10/0x10 [ 35.798095][ T734] ? __kasan_check_write+0x18/0x20 [ 35.798113][ T734] ? fpregs_restore_userregs+0x11c/0x260 [ 35.798137][ T734] __x64_sys_write+0x7f/0x90 [ 35.798156][ T734] x64_sys_call+0x271c/0x2ee0 [ 35.798173][ T734] do_syscall_64+0x57/0xf0 [ 35.798191][ T734] ? clear_bhb_loop+0x50/0xa0 [ 35.798215][ T734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.798238][ T734] RIP: 0033:0x7f8860f9e159 [ 35.798254][ T734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.798269][ T734] RSP: 002b:00007f8861ee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.798290][ T734] RAX: ffffffffffffffda RBX: 00007f8861225fa0 RCX: 00007f8860f9e159 [ 35.798304][ T734] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000005 [ 35.798316][ T734] RBP: 00007f886103506b R08: 0000000000000000 R09: 0000000000000000 [ 35.798328][ T734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.798340][ T734] R13: 00007f8861226038 R14: 00007f8861225fa0 R15: 00007fffa2a2b798 [ 35.798356][ T734] [ 35.798444][ T734] kobject: kobject_add_internal failed for input7 (error: -12 parent: input) [ 35.806183][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.078826][ T735] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 36.119691][ T31] usb 1-1: config 0 descriptor?? [ 36.248762][ T310] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 36.378553][ T310] usb 2-1: device descriptor read/64, error -71 [ 36.393993][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 36.399948][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.410101][ T31] usb 1-1: USB disconnect, device number 6 [ 36.478577][ T354] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.608568][ T354] usb 4-1: device descriptor read/64, error -71 [ 36.618873][ T310] usb 2-1: device descriptor read/64, error -71 [ 36.775507][ T758] selinux_netlink_send: 24 callbacks suppressed [ 36.775525][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=758 comm=syz.4.109 [ 36.858593][ T354] usb 4-1: device descriptor read/64, error -71 [ 36.868980][ T310] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 36.931024][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.939171][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.946585][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.957392][ T769] No source specified [ 36.969137][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.976583][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.984036][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.992026][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.006540][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.014105][ T310] usb 2-1: device descriptor read/64, error -71 [ 37.020514][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.027900][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.035346][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.042793][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.050323][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.057705][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.065236][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.072739][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.080439][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.087831][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.095341][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.102850][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.110372][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.117761][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.118552][ T354] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.125307][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.150219][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.157619][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.167830][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.175605][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.183415][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.191129][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.198920][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.206385][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.214769][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.226224][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.239600][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.247055][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.254741][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.262672][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.270099][ T310] usb 2-1: device descriptor read/64, error -71 [ 37.276706][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.278552][ T354] usb 4-1: device descriptor read/64, error -71 [ 37.284200][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.297901][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.305377][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.312935][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.320801][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.328267][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.335770][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.343330][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.350804][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.358261][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.366377][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.374018][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.381583][ T310] usb usb2-port1: attempt power cycle [ 37.387321][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.394851][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.402634][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.410111][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.417545][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.425117][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.432631][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.440241][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.447683][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.455515][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.463716][ T31] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 37.485425][ T779] fido_id[779]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.507712][ T781] ./dev/sda1: Can't lookup blockdev [ 37.514717][ T781] Zero length message leads to an empty skb [ 37.548568][ T354] usb 4-1: device descriptor read/64, error -71 [ 37.626013][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 37.626030][ T36] audit: type=1400 audit(1791120457.190:258): avc: denied { block_suspend } for pid=782 comm="syz.0.118" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.678673][ T354] usb usb4-port1: attempt power cycle [ 37.718574][ T310] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 37.739504][ T310] usb 2-1: device descriptor read/8, error -71 [ 37.764583][ T792] overlayfs: failed to resolve './file1/file0': -2 [ 37.880117][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.038607][ T354] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.059542][ T354] usb 4-1: device descriptor read/8, error -71 [ 38.138565][ T310] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 38.159560][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.189536][ T354] usb 4-1: device descriptor read/8, error -71 [ 38.289685][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.398674][ T310] usb usb2-port1: unable to enumerate USB device [ 38.438612][ T354] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.468270][ T354] usb 4-1: device descriptor read/8, error -71 [ 38.476557][ T36] audit: type=1400 audit(1791120458.050:259): avc: denied { read write } for pid=798 comm="syz.0.122" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 38.500103][ T36] audit: type=1400 audit(1791120458.050:260): avc: denied { open } for pid=798 comm="syz.0.122" path="/27/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 38.500217][ T799] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 38.525494][ T36] audit: type=1400 audit(1791120458.050:261): avc: denied { ioctl } for pid=798 comm="syz.0.122" path="/27/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 38.533513][ T800] fuse: Unknown parameter 'groVu' [ 38.563879][ T36] audit: type=1326 audit(1791120458.130:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=798 comm="syz.0.122" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0d79e159 code=0x7ffc0000 [ 38.589174][ T36] audit: type=1326 audit(1791120458.130:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=798 comm="syz.0.122" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0d79e159 code=0x7ffc0000 [ 38.614391][ T36] audit: type=1326 audit(1791120458.130:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=798 comm="syz.0.122" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c0d79e159 code=0x7ffc0000 [ 38.639934][ T36] audit: type=1326 audit(1791120458.130:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=798 comm="syz.0.122" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5c0d79e159 code=0x7ffc0000 [ 38.669448][ T806] syzkaller1: entered promiscuous mode [ 38.674945][ T806] syzkaller1: entered allmulticast mode [ 38.833067][ T813] overlay: ./file0 is not a directory [ 38.838863][ T813] overlayfs: failed to resolve './file1': -2 [ 38.849760][ T36] audit: type=1400 audit(1791120458.420:266): avc: denied { search } for pid=812 comm="syz.1.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.907610][ T354] usb 4-1: device descriptor read/8, error -71 [ 38.910098][ T36] audit: type=1400 audit(1791120458.470:267): avc: denied { load_policy } for pid=815 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.934061][ T816] SELinux: failed to load policy [ 39.000287][ T819] process 'syz.1.129' launched '/dev/fd/5' with NULL argv: empty string added [ 39.018664][ T354] usb usb4-port1: unable to enumerate USB device [ 39.120906][ T827] tc_dump_action: action bad kind [ 39.272025][ T833] netlink: 316 bytes leftover after parsing attributes in process `syz.3.133'. [ 39.298629][ T833] netlink: 316 bytes leftover after parsing attributes in process `syz.3.133'. [ 39.317159][ T833] netlink: 316 bytes leftover after parsing attributes in process `syz.3.133'. [ 96.341846][ T110] udevd[110]: worker [345] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 165.238668][ T37] INFO: task kworker/u8:43:706 blocked for more than 122 seconds. [ 165.246516][ T37] Not tainted syzkaller #0 [ 165.251485][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 165.260184][ T37] task:kworker/u8:43 state:D stack:0 pid:706 tgid:706 ppid:2 flags:0x00004000 [ 165.270355][ T37] Workqueue: writeback wb_workfn (flush-8:0) [ 165.276359][ T37] Call Trace: [ 165.279662][ T37] [ 165.282601][ T37] __schedule+0x1496/0x20b0 [ 165.287096][ T37] ? __sched_text_start+0x10/0x10 [ 165.292136][ T37] ? __blk_flush_plug+0x425/0x4e0 [ 165.297228][ T37] ? __cfi___blk_flush_plug+0x10/0x10 [ 165.302622][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 165.308080][ T37] ? kthread_data+0x54/0xc0 [ 165.312646][ T37] ? wq_worker_sleeping+0x68/0x260 [ 165.317765][ T37] schedule+0xc5/0x240 [ 165.321848][ T37] io_schedule+0x85/0x150 [ 165.326179][ T37] bit_wait_io+0x17/0xd0 [ 165.330435][ T37] __wait_on_bit+0xb6/0x2e0 [ 165.334962][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.339998][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 165.345487][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.350444][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 165.356432][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 165.361993][ T37] ? __kasan_check_write+0x18/0x20 [ 165.367163][ T37] do_get_write_access+0x558/0xd70 [ 165.372304][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 165.378287][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 165.384450][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 165.391150][ T37] ? __kasan_check_read+0x15/0x20 [ 165.396178][ T37] ? ext4_wait_block_bitmap+0x7c/0x2a0 [ 165.401654][ T37] ext4_mb_mark_context+0x1f3/0xee0 [ 165.406851][ T37] ? __cfi_ext4_mb_mark_context+0x10/0x10 [ 165.412586][ T37] ext4_mb_mark_diskspace_used+0x3aa/0x830 [ 165.418396][ T37] ? ext4_discard_allocated_blocks+0x690/0x690 [ 165.424586][ T37] ? ext4_mb_new_blocks+0x3ec/0x36c0 [ 165.429890][ T37] ext4_mb_new_blocks+0x840/0x36c0 [ 165.435067][ T37] ? __kmalloc_noprof+0x261/0x510 [ 165.440146][ T37] ? ext4_find_extent+0x1f5/0xd80 [ 165.445175][ T37] ? ext4_ext_search_right+0x49e/0x880 [ 165.450782][ T37] ? ext4_inode_to_goal_block+0x34f/0x4c0 [ 165.456511][ T37] ext4_ext_map_blocks+0x14d9/0x6080 [ 165.461810][ T37] ? stack_depot_save_flags+0x399/0x800 [ 165.467361][ T37] ? kasan_save_track+0x4f/0x80 [ 165.472229][ T37] ? kasan_save_track+0x3e/0x80 [ 165.477078][ T37] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 165.482720][ T37] ? ext4_alloc_io_end_vec+0x42/0x1e0 [ 165.488093][ T37] ? ext4_do_writepages+0x106f/0x39f0 [ 165.493483][ T37] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 165.499121][ T37] ? writeback_sb_inodes+0x6a5/0xfb0 [ 165.504388][ T37] ? __writeback_inodes_wb+0x129/0x280 [ 165.509849][ T37] ? wb_writeback+0x3bb/0x850 [ 165.514521][ T37] ? wb_workfn+0xa03/0xef0 [ 165.518956][ T37] ? process_scheduled_works+0x7f4/0x1060 [ 165.524684][ T37] ? worker_thread+0xc99/0x13f0 [ 165.529541][ T37] ? kthread+0x2c4/0x360 [ 165.533788][ T37] ? ret_from_fork+0x67/0xa0 [ 165.538363][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 165.543322][ T37] ? ext4_es_lookup_extent+0x567/0x900 [ 165.548798][ T37] ext4_map_blocks+0x873/0x17f0 [ 165.553629][ T37] ? __cfi_ext4_map_blocks+0x10/0x10 [ 165.558909][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 165.564537][ T37] ? jbd2__journal_start+0x3c9/0x860 [ 165.569833][ T37] ? ext4_inode_journal_mode+0x392/0x480 [ 165.575473][ T37] ext4_do_writepages+0x1c4a/0x39f0 [ 165.580688][ T37] ? tun_net_xmit+0xab8/0x11a0 [ 165.585450][ T37] ? __kasan_check_read+0x15/0x20 [ 165.590484][ T37] ? ext4_normal_submit_inode_data_buffers+0x270/0x270 [ 165.597339][ T37] ? sch_direct_xmit+0x34f/0x9c0 [ 165.602286][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 165.608358][ T37] ext4_writepages+0x28c/0x550 [ 165.613126][ T37] ? __cfi_ext4_writepages+0x10/0x10 [ 165.618412][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 165.623615][ T37] ? _raw_spin_unlock+0x45/0x60 [ 165.628462][ T37] ? __cfi_ext4_writepages+0x10/0x10 [ 165.633773][ T37] do_writepages+0x3d7/0x7f0 [ 165.638365][ T37] ? __schedule+0x149e/0x20b0 [ 165.643064][ T37] ? __cfi_do_writepages+0x10/0x10 [ 165.648182][ T37] ? __kasan_check_write+0x18/0x20 [ 165.653295][ T37] ? _raw_spin_lock+0x92/0x120 [ 165.658072][ T37] __writeback_single_inode+0xc8/0xba0 [ 165.663557][ T37] writeback_sb_inodes+0x6a5/0xfb0 [ 165.668684][ T37] ? queue_io+0x690/0x690 [ 165.672995][ T37] ? dequeue_entity+0x88a/0x13b0 [ 165.677914][ T37] __writeback_inodes_wb+0x129/0x280 [ 165.683199][ T37] wb_writeback+0x3bb/0x850 [ 165.687702][ T37] ? inode_cgwb_move_to_attached+0x470/0x470 [ 165.693707][ T37] wb_workfn+0xa03/0xef0 [ 165.697947][ T37] ? __cfi_wb_workfn+0x10/0x10 [ 165.702712][ T37] ? _raw_spin_unlock+0x45/0x60 [ 165.707560][ T37] ? finish_task_switch+0x139/0x770 [ 165.712764][ T37] ? kick_pool+0xb9/0x540 [ 165.717097][ T37] process_scheduled_works+0x7f4/0x1060 [ 165.722767][ T37] worker_thread+0xc99/0x13f0 [ 165.727453][ T37] kthread+0x2c4/0x360 [ 165.731555][ T37] ? __cfi_worker_thread+0x10/0x10 [ 165.736659][ T37] ? __cfi_kthread+0x10/0x10 [ 165.741271][ T37] ret_from_fork+0x67/0xa0 [ 165.745693][ T37] ? __cfi_kthread+0x10/0x10 [ 165.750287][ T37] ret_from_fork_asm+0x1a/0x30 [ 165.755049][ T37] [ 165.758053][ T37] INFO: task syz.4.120:795 blocked for more than 123 seconds. [ 165.765510][ T37] Not tainted syzkaller #0 [ 165.770483][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 165.779166][ T37] task:syz.4.120 state:D stack:0 pid:795 tgid:794 ppid:547 flags:0x00000004 [ 165.789359][ T37] Call Trace: [ 165.792620][ T37] [ 165.795533][ T37] __schedule+0x1496/0x20b0 [ 165.800054][ T37] ? __sched_text_start+0x10/0x10 [ 165.805081][ T37] ? xas_start+0x317/0x3e0 [ 165.809538][ T37] ? xas_load+0x3a6/0x3d0 [ 165.813869][ T37] ? __kasan_check_write+0x18/0x20 [ 165.818991][ T37] schedule+0xc5/0x240 [ 165.823059][ T37] io_schedule+0x85/0x150 [ 165.827389][ T37] ? folio_wait_bit_common+0x69f/0x940 [ 165.832879][ T37] folio_wait_bit_common+0x6a4/0x940 [ 165.838175][ T37] ? folio_wait_bit+0x50/0x50 [ 165.842886][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 165.848436][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 165.854086][ T37] folio_wait_bit+0x29/0x50 [ 165.858608][ T37] folio_wait_writeback+0x90/0x1c0 [ 165.863704][ T37] ? shmem_swapin_folio+0xd26/0x15b0 [ 165.869050][ T37] shmem_swapin_folio+0x104a/0x15b0 [ 165.874253][ T37] ? trace_android_vh_shmem_mod_swapped+0x130/0x130 [ 165.880854][ T37] ? xas_start+0x317/0x3e0 [ 165.885272][ T37] ? xas_load+0x3a6/0x3d0 [ 165.889612][ T37] ? filemap_get_entry+0x41b/0x490 [ 165.894723][ T37] ? __cfi_filemap_get_entry+0x10/0x10 [ 165.900187][ T37] shmem_get_folio_gfp+0x3b8/0x12e0 [ 165.905387][ T37] ? shmem_get_folio+0xc0/0xc0 [ 165.910156][ T37] ? __cfi_filemap_map_pages+0x10/0x10 [ 165.915615][ T37] shmem_fault+0x17d/0x350 [ 165.920063][ T37] do_pte_missing+0x364c/0x4440 [ 165.924916][ T37] ? __cfi___switch_to+0x10/0x10 [ 165.929881][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 165.934906][ T37] ? _raw_spin_unlock+0x45/0x60 [ 165.939761][ T37] ? finish_task_switch+0x139/0x770 [ 165.944960][ T37] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 165.950680][ T37] handle_mm_fault+0x1189/0x1ba0 [ 165.955624][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 165.960947][ T37] ? find_vma+0xd3/0x120 [ 165.965190][ T37] ? lock_mm_and_find_vma+0xb8/0x390 [ 165.970500][ T37] do_user_addr_fault+0x4ee/0x1230 [ 165.975614][ T37] exc_page_fault+0x58/0xc0 [ 165.980131][ T37] asm_exc_page_fault+0x2b/0x30 [ 165.984997][ T37] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 165.990813][ T37] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 166.010445][ T37] RSP: 0018:ffffc900103e7c70 EFLAGS: 00050206 [ 166.016495][ T37] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 166.024465][ T37] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc900103e7ce0 [ 166.032446][ T37] RBP: ffffc900103e7c90 R08: ffffc900103e7d17 R09: 1ffff9200207cfa2 [ 166.040441][ T37] R10: dffffc0000000000 R11: fffff5200207cfa3 R12: dffffc0000000000 [ 166.048411][ T37] R13: ffff88811fd7c700 R14: ffffc900103e7ce0 R15: 0000200000000200 [ 166.056392][ T37] ? _copy_from_user+0x6d/0xa0 [ 166.061193][ T37] vlan_ioctl_handler+0xbe/0x670 [ 166.066117][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 166.071657][ T37] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 166.077208][ T37] ? __secure_computing+0x2b0/0x2b0 [ 166.082413][ T37] ? __cfi_do_futex+0x10/0x10 [ 166.087091][ T37] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 166.092642][ T37] sock_ioctl+0x609/0x7e0 [ 166.096980][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 166.101836][ T37] ? __fget_files+0x2bc/0x330 [ 166.106514][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 166.111455][ T37] ? security_file_ioctl+0x3e/0x110 [ 166.116650][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 166.121666][ T37] __se_sys_ioctl+0x126/0x1b0 [ 166.126363][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 166.131115][ T37] x64_sys_call+0x1878/0x2ee0 [ 166.135796][ T37] do_syscall_64+0x57/0xf0 [ 166.140222][ T37] ? clear_bhb_loop+0x50/0xa0 [ 166.144921][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.150820][ T37] RIP: 0033:0x7f292a79e159 [ 166.155227][ T37] RSP: 002b:00007f292b624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.163644][ T37] RAX: ffffffffffffffda RBX: 00007f292aa25fa0 RCX: 00007f292a79e159 [ 166.171638][ T37] RDX: 0000200000000200 RSI: 0000000000008982 RDI: 0000000000000005 [ 166.179626][ T37] RBP: 00007f292a83506b R08: 0000000000000000 R09: 0000000000000000 [ 166.187595][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.195573][ T37] R13: 00007f292aa26038 R14: 00007f292aa25fa0 R15: 00007ffdd7eb7128 [ 166.203557][ T37] [ 166.206561][ T37] INFO: task syz.0.134:834 blocked for more than 123 seconds. [ 166.214008][ T37] Not tainted syzkaller #0 [ 166.218942][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 166.227597][ T37] task:syz.0.134 state:D stack:0 pid:834 tgid:834 ppid:298 flags:0x00000004 [ 166.237753][ T37] Call Trace: [ 166.241038][ T37] [ 166.243951][ T37] __schedule+0x1496/0x20b0 [ 166.248436][ T37] ? asm_exc_page_fault+0x2b/0x30 [ 166.253463][ T37] ? __sched_text_start+0x10/0x10 [ 166.258493][ T37] ? __kasan_check_write+0x18/0x20 [ 166.263620][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 166.269084][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 166.274972][ T37] ? folio_mark_accessed+0x35f/0x620 [ 166.280277][ T37] schedule+0xc5/0x240 [ 166.284343][ T37] io_schedule+0x85/0x150 [ 166.288674][ T37] bit_wait_io+0x17/0xd0 [ 166.292915][ T37] __wait_on_bit+0xb6/0x2e0 [ 166.297397][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.302337][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 166.307795][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.312741][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 166.318749][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 166.324214][ T37] do_get_write_access+0x558/0xd70 [ 166.329330][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 166.335312][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 166.341477][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 166.348160][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 166.353206][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 166.358850][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 166.364395][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 166.369769][ T37] ext4_dirty_inode+0xc9/0x110 [ 166.374532][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 166.379930][ T37] __mark_inode_dirty+0x24e/0xc50 [ 166.384956][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 166.390505][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 166.396312][ T37] ? __kasan_check_read+0x15/0x20 [ 166.401343][ T37] file_update_time+0x1d3/0x210 [ 166.406188][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 166.411235][ T37] ? __kasan_check_write+0x18/0x20 [ 166.416354][ T37] ? folio_unlock+0x137/0x1b0 [ 166.421036][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 166.426503][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 166.431876][ T37] do_pte_missing+0x12c4/0x4440 [ 166.436731][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 166.441762][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 166.447655][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 166.452597][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 166.458861][ T37] handle_mm_fault+0x1189/0x1ba0 [ 166.463783][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 166.469062][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 166.474258][ T37] do_user_addr_fault+0x951/0x1230 [ 166.479372][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 166.485441][ T37] exc_page_fault+0x58/0xc0 [ 166.489949][ T37] asm_exc_page_fault+0x2b/0x30 [ 166.494797][ T37] RIP: 0033:0x7f5c0d66baa3 [ 166.499209][ T37] RSP: 002b:00007ffc6856bf00 EFLAGS: 00010246 [ 166.505271][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ed64000 [ 166.513260][ T37] RDX: 0000001b2ed24000 RSI: 0000000000400000 RDI: 00007f5c0d9e0708 [ 166.521243][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.529263][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 166.537245][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc6856c190 [ 166.545223][ T37] [ 166.548248][ T37] INFO: task syz.3.135:835 blocked for more than 124 seconds. [ 166.555700][ T37] Not tainted syzkaller #0 [ 166.560638][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 166.569293][ T37] task:syz.3.135 state:D stack:0 pid:835 tgid:835 ppid:297 flags:0x00000004 [ 166.579466][ T37] Call Trace: [ 166.582723][ T37] [ 166.585631][ T37] __schedule+0x1496/0x20b0 [ 166.590149][ T37] ? __sched_text_start+0x10/0x10 [ 166.595180][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 166.600485][ T37] ? __kasan_check_write+0x18/0x20 [ 166.605593][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 166.611061][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 166.616957][ T37] ? folio_mark_accessed+0x35f/0x620 [ 166.622265][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 166.628468][ T37] schedule+0xc5/0x240 [ 166.632558][ T37] io_schedule+0x85/0x150 [ 166.636893][ T37] bit_wait_io+0x17/0xd0 [ 166.641150][ T37] __wait_on_bit+0xb6/0x2e0 [ 166.645654][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.650600][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 166.656059][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.661011][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 166.666992][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 166.672472][ T37] do_get_write_access+0x558/0xd70 [ 166.677587][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 166.683576][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 166.689777][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 166.696472][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 166.701672][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 166.707313][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 166.712873][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 166.718244][ T37] ext4_dirty_inode+0xc9/0x110 [ 166.723015][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 166.728385][ T37] __mark_inode_dirty+0x24e/0xc50 [ 166.733412][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 166.738975][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 166.744770][ T37] ? __kasan_check_read+0x15/0x20 [ 166.749799][ T37] file_update_time+0x1d3/0x210 [ 166.754642][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 166.759673][ T37] ? __kasan_check_write+0x18/0x20 [ 166.764783][ T37] ? folio_unlock+0x137/0x1b0 [ 166.769461][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 166.774926][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 166.780922][ T37] do_pte_missing+0x12c4/0x4440 [ 166.785780][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 166.790810][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 166.796717][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 166.801700][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 166.807945][ T37] handle_mm_fault+0x1189/0x1ba0 [ 166.812901][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 166.818193][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 166.823406][ T37] do_user_addr_fault+0x951/0x1230 [ 166.828557][ T37] ? __x64_sys_prctl+0xf0/0xf0 [ 166.833320][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 166.839397][ T37] exc_page_fault+0x58/0xc0 [ 166.843908][ T37] asm_exc_page_fault+0x2b/0x30 [ 166.848787][ T37] RIP: 0033:0x7f8860e6baa3 [ 166.853195][ T37] RSP: 002b:00007fffa2a2b900 EFLAGS: 00010246 [ 166.859277][ T37] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 166.867258][ T37] RDX: 0000001b2f024000 RSI: 0000000000040000 RDI: 00007f88611e0708 [ 166.875234][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.883212][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 166.891196][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa2a2bb90 [ 166.899184][ T37] [ 166.902186][ T37] INFO: task syz.1.136:836 blocked for more than 124 seconds. [ 166.909637][ T37] Not tainted syzkaller #0 [ 166.914560][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 166.923229][ T37] task:syz.1.136 state:D stack:0 pid:836 tgid:836 ppid:293 flags:0x00000004 [ 166.933397][ T37] Call Trace: [ 166.936662][ T37] [ 166.939592][ T37] __schedule+0x1496/0x20b0 [ 166.944098][ T37] ? __sched_text_start+0x10/0x10 [ 166.949137][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 166.954430][ T37] ? __kasan_check_write+0x18/0x20 [ 166.959547][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 166.965002][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 166.970896][ T37] ? folio_mark_accessed+0x35f/0x620 [ 166.976181][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 166.982349][ T37] schedule+0xc5/0x240 [ 166.986436][ T37] io_schedule+0x85/0x150 [ 166.990770][ T37] bit_wait_io+0x17/0xd0 [ 166.995010][ T37] __wait_on_bit+0xb6/0x2e0 [ 166.999570][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 167.004509][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 167.009975][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 167.014910][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 167.020898][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 167.026354][ T37] do_get_write_access+0x558/0xd70 [ 167.031482][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 167.037466][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 167.043632][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 167.050329][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 167.055336][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 167.060981][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 167.066528][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 167.071903][ T37] ext4_dirty_inode+0xc9/0x110 [ 167.076668][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 167.082048][ T37] __mark_inode_dirty+0x24e/0xc50 [ 167.087072][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 167.092618][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 167.098428][ T37] ? __kasan_check_read+0x15/0x20 [ 167.103470][ T37] file_update_time+0x1d3/0x210 [ 167.108316][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 167.113351][ T37] ? __kasan_check_write+0x18/0x20 [ 167.118464][ T37] ? folio_unlock+0x137/0x1b0 [ 167.123151][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 167.128619][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 167.133975][ T37] do_pte_missing+0x12c4/0x4440 [ 167.138842][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 167.143870][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 167.149777][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 167.154714][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 167.161088][ T37] handle_mm_fault+0x1189/0x1ba0 [ 167.166040][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 167.171392][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 167.176815][ T37] do_user_addr_fault+0x951/0x1230 [ 167.182062][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 167.188128][ T37] exc_page_fault+0x58/0xc0 [ 167.192638][ T37] asm_exc_page_fault+0x2b/0x30 [ 167.197491][ T37] RIP: 0033:0x7f652926baa3 [ 167.201923][ T37] RSP: 002b:00007ffe522f20c0 EFLAGS: 00010246 [ 167.207990][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ee64000 [ 167.215979][ T37] RDX: 0000001b2ee24000 RSI: 0000000000400000 RDI: 00007f65295e0708 [ 167.223965][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.231943][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 167.240010][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe522f2350 [ 167.247962][ T37] [ 167.251011][ T37] NMI backtrace for cpu 0 [ 167.251023][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 167.251047][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.251057][ T37] Call Trace: [ 167.251063][ T37] [ 167.251070][ T37] __dump_stack+0x21/0x30 [ 167.251099][ T37] dump_stack_lvl+0x140/0x1c0 [ 167.251124][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.251152][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 167.251175][ T37] dump_stack+0x19/0x20 [ 167.251197][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 167.251216][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 167.251234][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 167.251262][ T37] ? sched_show_task+0x371/0x530 [ 167.251287][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 167.251314][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 167.251339][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 167.251361][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 167.251393][ T37] cpumask_backtrace+0x1f/0x30 [ 167.251410][ T37] watchdog+0xe45/0xf90 [ 167.251430][ T37] ? __kasan_check_write+0x18/0x20 [ 167.251453][ T37] ? __cfi_watchdog+0x10/0x10 [ 167.251473][ T37] ? __kasan_check_read+0x15/0x20 [ 167.251492][ T37] ? __kthread_parkme+0x12f/0x180 [ 167.251512][ T37] ? schedule+0xc5/0x240 [ 167.251533][ T37] kthread+0x2c4/0x360 [ 167.251554][ T37] ? __cfi_watchdog+0x10/0x10 [ 167.251573][ T37] ? __cfi_kthread+0x10/0x10 [ 167.251594][ T37] ret_from_fork+0x67/0xa0 [ 167.251620][ T37] ? __cfi_kthread+0x10/0x10 [ 167.251641][ T37] ret_from_fork_asm+0x1a/0x30 [ 167.251661][ T37] [ 167.251668][ T37] Sending NMI from CPU 0 to CPUs 1: [ 167.420176][ C1] NMI backtrace for cpu 1 [ 167.420189][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 167.420211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.420221][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 167.420249][ C1] Code: cc cc cc cc cc cc cc b8 c7 06 ea 27 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 167.420263][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 167.420277][ C1] RAX: ffff8881f6f00000 RBX: ffff888103668000 RCX: ffffffff85a5753d [ 167.420290][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000007236c [ 167.420300][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 167.420311][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 167.420323][ C1] R13: 1ffff110206cd000 R14: dffffc0000000000 R15: ffffffff87ececa8 [ 167.420334][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 167.420348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.420359][ C1] CR2: 00007fbe9edffffc CR3: 000000010d398000 CR4: 00000000003526b0 [ 167.420374][ C1] Call Trace: [ 167.420380][ C1] [ 167.420387][ C1] default_idle+0x17/0x30 [ 167.420401][ C1] arch_cpu_idle+0xd/0x20 [ 167.420414][ C1] default_idle_call+0x3e/0x80 [ 167.420428][ C1] do_idle+0x1df/0x570 [ 167.420445][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 167.420464][ C1] cpu_startup_entry+0x47/0x60 [ 167.420480][ C1] start_secondary+0x12e/0x140 [ 167.420501][ C1] common_startup_64+0x13b/0x157 [ 167.420524][ C1]