last executing test programs: 15.155505926s ago: executing program 0 (id=462): r0 = syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000020000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x7, 0x1, 0x3, 0x8b, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x3, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x0, 0x80}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x0, 0x4, 0x7, 0x10, 0x4}, 0x8, &(0x7f0000000640)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x47, &(0x7f0000000680)=ANY=[@ANYBLOB="4703199192096461077448fc299b2291bd059fd62e7671af65b9d3917e4055000000009b2101421fd95256e07f0d76fe1dafcb5eca858efd416f9ae42e1ea90cae84c5038c0004"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0xd8, &(0x7f0000000740)=@string={0xd8, 0x3, "f116028e6a12ffb04d20f8b43a0ed45b9f794a99c4486feab8ae9b8e2e87358815b295feaefe99b63925fa94b2e9a147282d8d5a20f3611b88fba7868da10cd8afbc1b2c453d9aa53c3f53e0e546d0f533643f8573933a9c428ea1101ad14176394c0d48847374a071396659688616d36806419852f7b72c96452e1f0c81beeadc5bffef294857b80fb50c7914467bb7c74ed9681be7da332dfa43330ebe6cf0e6041a2a84f2fe271dca0f5070c47c00b5c07ce56ea8cf418acb7be4af0a40fcedfe23ee7d152a7d2c64517fd8f1703a1639787cdf22"}}, {0xc, &(0x7f00000021c0)=ANY=[@ANYBLOB="0c03437e26c6de111c22a12440cb255095bb1a"]}, {0x16, &(0x7f0000000880)=@string={0x16, 0x3, "16f3cdeb4721709f41221a473b8879c0e66a56d9"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x1, 0x24, 0x0, 0x2, 0x5, 0xffdf, 0x9, 0xc, 0x844, 0x7542, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x4, 0x75, &(0x7f0000001d00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x3, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "6ecbf777"}, {0x5, 0x24, 0x0, 0x1d4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x52b, 0x7bd, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x8001, 0x10}, @ncm={0x6, 0x24, 0x1a, 0x9431, 0x6}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x2}, @obex={0x5, 0x24, 0x15, 0x9a}, @country_functional={0xc, 0x24, 0x7, 0x9, 0x5, [0x9, 0x8, 0xa]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x2f, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x300, 0xff, 0x4, 0x10, 0x10, 0x80}, 0xbb, &(0x7f0000001dc0)={0x5, 0xf, 0xbb, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x99, 0xe}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9, 0x6b, 0x81, 0x6, 0xfa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xe, 0x9, 0x3ff}, @generic={0x8a, 0x10, 0x2, "2c6b8f4d89d40db14135f55b0938316e5c8b0fab3d25b2059b588ce49dea7c7d89ea88f19e90ea711262d2407e9948db569da5cc8cabc1ad1bf39ca5114673211974de8e6543151041b16862ac0ee0b5a014e65aeeb874e9db0df133464dfbef321ecb1ae44cb9d18774b5231bebca42a8517820adee3c0199c3afa6bc3213839650601b0569b6"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x42, 0x2}]}, 0x5, [{0xf, &(0x7f0000001e80)=@string={0xf, 0x3, "c8ce16aa9da6353cb4f1a82f5f"}}, {0xdf, &(0x7f0000001ec0)=ANY=[@ANYBLOB="df03eff0495966357c708f670e272885635e2137a255726b037d5a813f7574f534238adcb17744bbba8d749f0d0b81451e30c03e5b8da60affe88a241ce9fa77de36cc36944149786717cae7cf93bf6bc16784aba4625131c10eb8dd580b2b5a59ee95e430c07ae83fd75268e1f3cdf1f58ad020c80785bfc48a75ffbddae8e4b8bc64e37869291f247754a12ca116c1c17348369f0534a8873d5495f6d88baf0f7e6be238fb33497190a27b527203844a229ffcf5958df489482a5eef702f4847dfb33bfcaddf54f89a1aed233f096ca7ee259c9720f9ae5cb10476d5e6c8"]}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x2e, &(0x7f0000002100)=@string={0x2e, 0x3, "1b7d36fb46ea8f33945714df0ae8e13d489ac075112b767c1aceda294893b0d097a5d62d185074265ccabc63"}}, {0xfffffffffffffecd, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x439}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='27', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc_mnt\x00', 0x1cc) mount(&(0x7f0000002000)=@loop={'/dev/loop', 0x0}, &(0x7f0000002140)='.\x00', &(0x7f0000002180)='exfat\x00', 0x401, 0x0) mount(0x0, &(0x7f0000001c00)='./proc_mnt\x00', &(0x7f0000001c40)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000001cc0)={'#! ', './proc_mnt/irq/1/smp_affinity', [{0x20, '\x15@\x10\xe8P\x91@10,0000\x00'}]}, 0x31) r3 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) capset(&(0x7f0000002240)={0x20080522}, &(0x7f0000002280)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x24, &(0x7f00000022c0), 0x4) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/51, 0x33}, {&(0x7f0000000ac0)=""/4110, 0x100e}], 0x2}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xfec00000, 0x5, 0xa4d, 0xfffffff4, 0x0, [{0x8, 0x4, 0x2, '\x00', 0x4}, {0xf8, 0x80, 0x3, '\x00', 0x3}, {0x40, 0x8, 0x59, '\x00', 0x6d}, {0x7, 0x3, 0xa}, {0x3, 0xf7, 0x1, '\x00', 0xb}, {0x7, 0x6, 0xe, '\x00', 0x7f}, {0x9, 0x8, 0x5, '\x00', 0x8}, {0x8, 0xd8, 0x2, '\x00', 0x1}, {0x4, 0x3, 0x4, '\x00', 0xa5}, {0x9d, 0x81, 0xe, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x81}, {0xb6, 0xc, 0xff, '\x00', 0x5}, {0x4, 0x6, 0xd7, '\x00', 0x8}, {0x4, 0x6, 0x9, '\x00', 0xc1}, {0xb9, 0xb, 0x4, '\x00', 0xd3}, {0x6, 0xa, 0x82}, {0x40, 0xf, 0x52, '\x00', 0xb}, {0x81, 0x8, 0x7, '\x00', 0xfd}, {0x6, 0x12, 0x7, '\x00', 0x5}, {0x3, 0x6, 0x1, '\x00', 0x4}, {0x3, 0x4, 0x3, '\x00', 0xed}, {0x5, 0x4, 0xcf}, {0x9, 0x1a, 0x2, '\x00', 0x1}, {0x40, 0x1, 0x16, '\x00', 0x81}]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000840)=0x6, 0x2) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='binder\x00', 0x0, 0x0) 13.065857939s ago: executing program 0 (id=477): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0xe, 0x0, [{0x40000001, 0x6, 0x5, 0x31237648, 0x6, 0x2, 0x2}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = eventfd2(0x49d, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000002c0)={0x4, 0x3ff8, 0x2, r0, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x3, 0x6000, 0x2, r0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@nested_create_vm={0x12d, 0x18}], 0x18}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x8002, 0x1000000000, 0x5, 0x41, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@index_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) fcntl$lock(r4, 0x6, &(0x7f0000000100)={0x0, 0x2, 0xa}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x12, 0x0) 12.166301901s ago: executing program 0 (id=486): syz_open_dev$MSR(&(0x7f0000001200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r3, 0x1f2c51b2f586bbcf, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x20040010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000005c0)={0x3002000, 0x40001000}) 11.260093743s ago: executing program 0 (id=492): setrlimit(0xd, &(0x7f0000000040)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48010000100001048000000000000000f30100000000000000000000000000010000000000000000000000000000000112341234000000030a00080000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000080ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000055001400686d616328736861312900"], 0x148}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newpolicy={0xfc, 0x13, 0x401, 0x80000, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {0x0, 0x9, 0x0, 0x40, 0x9, 0xfffffffffffffffd}, {0x3}, 0x20, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x0, 0xfe}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f00000004c0)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f00005af000/0x3000)=nil, 0x3000, 0xf, 0x28011, r2, 0x0) fstat(0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(r2, &(0x7f0000000340)={@void, @void, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x21, 0x1c, 0x68, 0x0, 0x4, 0x2, 0x0, @multicast1, @empty}, {0x35, 0xfb, 0x0, @broadcast}}}, 0x1c) 11.175570942s ago: executing program 0 (id=493): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x2}, 0xa) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002200)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002400)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000002500)=0xe8) r5 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000025c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000026c0)=0xe8) stat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002940)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000002a40)=0xe8) stat(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000080)="340b24c94ace7f4187bca17ca950a48369a5384266483f47db7a81a084479d3dbcf1e4db529c254ae7aaa0cd8015929f24d92132ee2e79f10776583e36814a82a51316ed4d449cac1acc8bba7a7dbc532eceea7b665fc468df5f3d8d0fa5e818a54993303a430e464529585cf7d153ab2748602bf386cc5c009412ef648ab93749410e1ae15cc0939e276d0599289d3dfce720a80219a043aaf583105b330ff7663a97e861626d20575b75b7e96b1b259cc987b68586beb326276099a7c9723eea0edf9c4cbc68cdd9aa80426d650c20eaaef7734ea53d5286f4a6f5bee2d4a9fd9d3cb8523ba752ba805484f6cd4d564d46997e57bf0bdfb66c9c3f65ddb6178992a1cbef032408a9a55dcad5b32ab74e8fee758e20d8d816780d0d957977fedddda36a754231ee99fe80e05a34c7664aff7c9d7f68b9860b99c956dbff871386f755388f54eeacd3043e1c39ed3fc2ee95b9fadf6b723aa42641041025f0cda5f227e082f891ebc54816706e43002caac1ab0f997238e6c7e660d02616ab0a06358e639f32c6f5b8fe5b75190d1f71cb7f8fbfeece449666647830189057804022a9bad616f1490500e85f6c6033a2b695f45306b372056ee69c18ac54c9ae7ae8a39bbe0db92bea4c3626844e49a1ba6a0719ac19df7cb3786bff6196a83a1a55df6a5075725c36a1044e5a7ad9ddb4858c53b597fb9af1efabef9b0b15be9d782bcc687f815666105c4746b9895bd2af129e7c95416fb8f0629fb4efec1b609a333aad29363313b2c5125b5d632e4d8abe4a1ef00d3a69e4351dca846d7450af716ad4dcca31b502d6a3815b594d92dee2f7d5927f0c322bf0bbcd5ade74ce135f04c85eadfaf645a3ea55b5a95a73dd358d29c1406c6547e99bb70c80bd1d8e9cfdacbebd209168b3e0e5b8b5cfe328677c921923ce6c113d91f76490c485e26cdc038a7b5f62f11ef2add5e4854f2a9d0f199b7ed1a8438df8045478d8ec49c52f9714fab82ec74294e9fffff1f6da1396228b6ababffc3b9ab13e8593e2c885e8756dac7da4217e0427ffd4a5213afee284f1b81d51b9b160826a7240184b6eedb523b752f567a6955bb631b188242eb0532732a77ec6a90411b9f77469b14b5e5ae4631a193932cf05c10fd6ca580e82dfea7cbd27baa884f42f0761cb8a431086c642c7bbbd682cea18dabbbbea2ec929e0bc819e52423b803872e2df34aad2faf99b28b190f6c56ff8122c03bc89ee24a137c37303523864ccb387371748aad05bb0d96be62743d07f72cbbc9a2c1b666544c8b95abf8edf6dcb3cc63960f6d180c5f6d3aa2d767f36277f5a3fdc4b4876c41f86a4f62f189ea38978760b2008ab864419bfb3fc3b0580229997595ea1d0fbc19e8e9768ab94090626843eb2c9e98122b91b7255a8d0af5013718873b7ba0313e11c5297947f7f14c7cbf5d5f8753abe1d3a181ec0b60c28d50c9f74a128282638927f53e92564ab992bc0edbd0d531cf4b4ed2e525a5ab1df71caf8783961179384399466adfb292caac35ff75247b25e2c0902fece0dbbe657ddf8a8816034b766ad043700d77834e6b69648aa362291fb9a89f50a934492f1d226673c685419132faab45b1473c736f736185bd44b763915ad96c7fa0012f561669bdd9519bda003f2c83ef3c37a2e0400f83097faca90fd40e939ba5e1aa8303689508cf822c366fbd15eabf593ba43a4aaf570bb64298e4be4c1f81667ad0434e24917ec8b035a6b08bcc29eb13695051d5ef08c2a516f7d206164ed2e8d00d0ccecb8ed33f6ad69b9399535337f4e8bfe33196605000eff6c7804ce3f65db0f717746e301ab321d72388ef8729b3c37899be056ed7a276852e9165b86adc2e37827c71319304f9e6dd8ee3c7a655a406525b70539128961933a531c642b8c4750b06f996b108c8c6c700e25075545931c5fd3569b5dfb09ba68b15f9c63970abe7a52b5e93bffab42ed7ffdf6dd502d0bcb57828d4ce3346bc432deccd6b9d6219418fc051ebd0add9d28c58b5506e72cdda550d626ccee0aa3faaeada9f72de0b5b1354d0dcb7e785c1b9992c57a2b2f24783e891889d5f3e48baeb21ca86845e2b9e4beb762f2179749302daf58d48f922282d3b3472bea7b877e38dd52fb6b6126aae6e9e04feaec9d2a278f84d15092e38b98616d2ca0e0b9f0740fcb9601c352a00afb30269d0f027d454a86e3baf7bc60a2b4a76d22f35b288fcbfadd07845d7fe585e3d2fd5cef3ddfc45f8bccf94a812e8c85f86f1d2901ae02d811fa693898218ba91de0134f1be75a0084bc8b6e8dd3842e4c427899e432a6c9e7bb44850ce81bb1e42e1f144b8a5d50551711964669d76a51059c9e5e6ec1d6c8676ce2ea07c6e049e266ee5f898f35b129684676280e21bbd8ea580f1d684eae698d125db7842a03eee11b2e95643f3fd817d84330e796c1880ba0ae8a64ebe26798789152b8c23d31085853e5aa53c0c31a2d2f1dd364f8ba12985b268f16f3b225abe022d7a60f6add3f02ac3cde4b2c025cf13ae42aca88a44ab8d357c50e21dd8b054ffe5c3e8b4cd64cabb8b3768b727eb7c9994614e896256a2a4a7f692cd2e44763fd1fb029e5920d5e25d1173cf71188d054020433614a1ecbe0942c7885e77d78dbf63f3205525c81fc8ed74414d03e99308a1596e5e28e81c36971fc036e6f3905a2a085d0710b7f6edd53839b9b73870f8304ce457a9af94d40c97ddf24b077b976d729f4d919c4c8013cee1e711bfc902774843583538a15d685619902b286b59a8d2ce7105f6462fb6b0e3ce3aebab28de56ca040b8922c6efeb92accc27e2f92d8ae0808978cdb92f7adbe1a06dd35ed2d0264e624299e817555db17334edbde4295e2d724b12d7743d058768206efc5b0b3648cecaba36abe00de38a9ff0663a226a43edd7d4e83f4339a1b141dd8d4502316fa89685420f95845563c6e2b8c5eac31c6531a821f0ffb4f54b7fbab280a2cb164caebb1203c7963a2f872b1a3ecf0d18b71ad50b1e5be5b107fdfe5089620ebf6c76b4d93909a97b4db39c9572825996227d907a62469b8631024e173c594e1f901d7794ce5d8e11a81f86ae28060bd835a5e58d80cc3c760523cfdb2e5f452f5871c9dd9fba527b793a6a6ae0888d3516bad8b9a9311d026d536b401dd06c5cb43062e49b7af9449cbc96b97bc0480eccb15e381850f50713699e98198754d67765862a3f96390a921cdbe7ed093f0c36fb45e4faade9b523f426f97b62deef2f48dffdce0d0e3b52d0731f3b492ce932151ebe342d5d921699095c7ebaec752c9426930eb8cac2c6dcce01605587b69e033bc15e31486747410d3244770458dece33175d134a730778ea1bb92e76bb31007c9fc4d3fd554dcdc9c7c2c913b895fc9735ed3c34961607e3c2493e3f637a17f1fc31f02184e7e7480de40bf4b038c715870d3f64d00c70e44919daa26ef5826a89088dde969ebd5fa6e16e2abdc4e3af3855092aa45d92e323ce4eb47af7784ab741e10756550c331bb44ed6a62d22e16fc96967f405fdbd95587ae78d14ab2e481cd524b08d0db4d6f65017f1ae51855acff653400e8f00fc1ab8c4e662b3e599f9217d4aca6b2f433020517434e858ae4b143e04dd9f4ddfdc39d3e4e5657886aea1db39270e094165f55d387254ebfe99c6ca29ba099236d75f3b75edea4d460deaaa7b20aa3ba0d186a3f9f927fb5316abf2bbac24fee15b92a48693e1a5a744629ab2a376754526ef774585eb47187fd2b777f54e2403fa3d0cf1806ad4c68916edf5d7f38528d47a9dd80a0f59f191c645955bdaa01de8a71859f1d0f90676c234b05fb72374ebe4e0ff1da0947e409eb7fe1db9d79e65fe76d1c8a9eecd943aca22a25be36c95ccfe10e1ac4183b0eb6c5509f191a5ae0dd4f913bdad53a664ef99064414e9eea69a779a8c4fec959ae6dcc003abeced02384d9793ef1626fc6c6873ce5a2f5b5fe82d683c8185544b9ce67534c60fcbbd65782f0d91f1ef5816ab5848df6ba038968815584a13f1a7f667f5cdc77511bdf429e9c09d045f9edded834891abbe2c25a2db64048cec36e53c97fc9228aa1082daf53f0ce600f05126bfc32e7a542a81c3df63ef63b442adfd831685a09e43c8a96a94997b35dd64ce110e9aa2bed6a22985a6fdd37f53d9a4c2a5f4f58e5c212beb45c0a832da3d9ce6690cf484fd0ff72824e84629c1453c2939d2dca3629011ff8a4059424df405bbe781aa6789a70cce6fdfdc09c8c0d03a861e2c9ac5307828d3987373d270544c51ff85a192ce1dc03934ba831b34ec19ea9d2eb491158ff9f505486a6431759a2fba9d4b07cffd3146cc342f4190c9fb56e2287e0fcadf95a2e3c3765ba1f1f2b8407a5ea253829b007d6b6b474c1ca905de37e687b5ab33339066e926587365baa4bdd529bfa28b7f1b5cfaa2dedc7c8444ac6473129866c0fdfdae6981af97b74fc2590b84c7c34ded580a3ef52eb60d92faa4280f673947fa9e058f8bd4fb8c67eb95fb7c4b0e469333420ff72ec7a3356201fa4c9003c2fcfbce19cf0a5efe46c67c22562a53d698e7442595d9b1e54a58972973a3d8cddc3cb8c473e8a2ae8f09bc1aa8260d4692c03bf9c5f943efeb7bd7647b3767a32658e2e7bea8c3bfaee2a728ad3a7782c52a49b977dc2efc7fe83cc9fcbffeb94fab7cc7cb94a33d5f8913958023308e7355e722524f3f71be209bb1e988972004607ee9744315deb387f57c20bc7be73694bed2b0bbe3946dfe88239b7730485423c04ae04260bdffccde80ff502773202601c0032887119781c00d7747367a954259671b42aad6b3900c4ca07ad4e85652494b4006d45dc71b8fbe73a3c5554fdca010ea5d67957933334ab024cf836bfc460bf78192b30179a99a15660b9b5af2c21fed8a67694ef39e27ad27f4184fd932a35656f6e126e0d70f0d4b6960cc99d7a54c55ace05fae8318fd5317b821808f56b1f6ff384f1d4d84c402ca96c1c89da0b7d707de92aa52899df0ee6576a5accc9c814eb8b53d4ed8548880482af80477465e352be104e53cb124d4e70f796cb203f4de8619f2eba3b78fad70e7b593eb281e36b11c15aa32ceb7e876fc0e293fc9aec9240b4e4d25e45980146aaa773f36fd1de31a1f9146315ba074f2e73f0536fa3d0deca45df400e9453ccb9a9a3345ad4831bee299800ab89e02beb483fa2106a99cff21afd72c462db8abdcadfb3d42bf24d815bde3311eb442b0ab23fc3d935345cd6fcae8e5e3685fea4522ae7f5d3c3770d6a3593ca0e526f855a5a0fc5a1ebc15b376b0c003f8f215fe32b452fe1e46b37fec5bd6c09956b8c6d8dcc402633fdaf3c69280269b125637100b2bbd835723e508c9cfc2596dda13d894cf8f7a4d4094a49f1991c3db6144cf6bc6eb8f858f215f94f2a85f292f7f2daa5108338f84782e68e099f2b113b83de0aaa6935d8fd60d93d9b4d6403123bf59d47c0e123cf38a157a365b1ecfeef5e7e89d6e7816b276ea606bdc554ea453ef0b55e98dcb46e99e063014f0107fbefa99ea378c86f049ee174177c882a2bcec82752f06524aa47318a1d892632dae083d46e55d14e4adc083982d545d6abf6ea710d71d236049595a7157186670f6044e9e414302abe0ba391d568885fc1535c6f67ed3c940e41aa0732b7a6941ccb0f39730c24c11f0173b94fc4f446f3982bb374be552332e500fac15d92358d7c32a3b97dc730e4e76c74fa9f70e9c33078cce6084c0cd7f2e2fdb6db4509c33b62f26f8c930eebc51c71dba13a493f815c2cdcca67656305ce05c092bb3071479fffde8832e17811bbbf8521431931effd799eed27add6ad196945ba808dec47730dc5a90cc9f7d1816589bd1b46cab8269275613a5558acb72e0a4075d431baa3d4081da82a083aab2db1714698d21b2ef6870517f72a3f17dc4b26f8e268de4fab9364b2bfc8d633b0118d4a09c6d77a6f66af0ab521a821a13bc880ed499e65bc4f3f13cb4b68aa50ae649ffa5763d0e7bac2df7609ff1a38e4a1223102f5ae30f282dc652c0fed33e75da3efd3bfdc79d342ff3ebf91c6d695da82bf25a66c57a6c23fb10266f7eb3eed674475515568d71554c3df7245a2f9f844c313ab264c905e16b6416bbdf14f25609f64d20103dd30e7ca7af8c65b01fd001e7584b13e104701652b2071d79a2b1e29bd3e87c533dc386f4ba1142470aa85b51ae4aad6af102b783973a93f00225bbe1638406ab199b25613e96b9da340d1683d8627df8bcd544f4fa7d73d209d3768aed7cb270c01642b1096434a58c2adca76dcc6982c5f0378d067db64404f3833d80626108db733ea611f799861fe8b3a6744605157e81a3124c7afdf678fb3c62b3a54c4552cf481652bcbaba0b06b9bea0101745f8332e414ea7332b56dcc4effcb1d002158a686ad5e9a0abd0e907ecf56934acea491491bc8cb48acdbb02db510187ac978f84446980d0c5cc55477a5b93b397d074012cf83041b0b815805166f1a8d3acdf224f8eb73efa8f6ba7c6b730c741002f206ccedb21520f543f3b6a13825fc666b344b2b1a33352d61aca5f0e14043fa0c1c56b7150ec4e19349e593b191defb1c036b1c70601a452c1ef9782baff644a89e1b2f5b473ede8a10ea9ab303a9f233b7551dad97cfdccda9b04ed6a9af3fe3dd3dcb56c96c9cdcdeba74566485530cd925ead1201ec1dc247a4b13ebb999802bbce28503567d4555f28ed7d5b2913d72dedbf6ba1fdd64e480cf0e5ce2fe57fdbb10597c1de6493eb619f7887a777a5c242bc7bf58ad4f352c4f76b164d3176f5ce10eac98071757554ac6fafad95ab3f23d6a06112cc8f9cc1bcd67badc4443acf1e8bc70fcbfacda75a0f5fc5c7d4912eabce9bc2db25afbc5a00d1016331f34e61f5a4d4ce68d3b47ece0b70f41b29892c347efa3b5699923f8dee73c176e9a421759209d71d6fdfa58b95697beec8f9c590f0708a4a7f40cdf41f0f5b25e6e280dc0867be590f1fb7c08dfdd0f2296e18b5c443ffc00959bd8c34bab585ed8c7f548c3ed068be737140986e8ae2e7e51f0c673f252f6c3644a0574b1cb464dcf29d142797ff35cbab6c5856bef9315277f284428e582dc196d62a206e18d1ab5191757574513bc4bf61b5e46296894ff5bb23fcab1bf1b7cb123e87def4bc4ff8f070e91e0283b535f036998be798fd67970aa23427e9cb59b1de2140a7f7aa11cd196c4f2f43320e02294ae5da96f789c896cdc97a9addbea00782f419234851c7156897bb22519c5c166b69ce07ecef1dc68ddcab6e4cf92bb8449595d7a64db70239fd06b7ab19ec157e0805d06a84f731e751416903834d6c196aa8e6f93b765915f0ebb160f99190fe21aab4ae118b6b740f75104fe708c0bd2e4dc1048f6ac518832b3a1cdc0d529b7dfa38af2fb2b752599ac7bc8785704920405e69460b5a8073b388974f6290190b43662be3044176f98796c876aac0a2d090bc3706ebe07ce39cf1d8f1d1754d6be37aac84de8f42500f56192f5a65b41246734eac8c84e1ba96b3471e03677f5571535951faec8ebb55b734f3e189ce9c47a5b14dad0eeef78340d738b4daf1f87e85b715b3caffaa973c4427dc320ebab19bac8f4ba70b51a4dc3a5646477f38b65bdfb44751ea6bea8029cca2a957e26f9c18c7a89e480341f00aac98c95dffc4b9ae56bed9ceb999c874719589e9b242d4eef65bf6fde22ee8c302e31323fe0bc782b7c749344ba0a80b71da93042024e91693c65029dce3398f1de289c4d847d6fd490e64f07f2ccd79aaca81240257ae6a14b1cc8e7fc97a6d482ceefc37f94a140a367be4cae304469b6e61eb4ef235f707eb6bffc008a74e8904a8a1a509fec4eccb3fd03cece6bf65369c3ad3496fea01010d6fab1e72d759c7c8e0970a2b925b13cbaa1116cd07f7754e7423ba4e45f67622847de12162a14c3848c7ddaa2db3d1ef8d472554e7bd62e5490aca29e7489b393f40e65bfba5ddb094a533f19157a3384217535c974c94de1663e50644d025306ffcef9fc61a033c353f7b5d03bfd25ac26fed1d59cc7aba19f5e77edb7b701b28fe0cdbd6869ad07fb4593a5eb78d19b0787d0ca7730a66073d11442959dd3fd0ff6e02346788360cd23801d8245a542cd53b2022bad6372f5aaffe14b44b3851f726d7e755b0389939e2b2335146a92dcfe8ccfdbaa43659951ee2759a535c6cd07c53fdd83c5c9385f3904772636f7b74d0489e4759c1c6ff660e8e3fb1e3c30b7709c2bcb7c20a250be89facb863670a62db0a5cda00e930f563719da5943f6d99be1c6a879e59b799e6214a37ed2c0c04b9a80d61ef18d97414a119a44ed31a38fe46c922b0412c8576aeb5c7dd893ea70f8b561b81d2eb1872ae1dec94f2e8daaa7aaaa4042397c74e684fbcb3ebc5b42483a7a3c1d88ce52caab0ceb14255b0c4461e976cb2888b9e948f366fc5b02a40f3a2b8a99b315ff5b9aa5e887b6544a752edca799ecd98f10870abc79bcb8f97ced710e0286c6e40d970b292577ec545cccb742436f4144e44c38e19f1fbcf9b497cef99eadc0ed1a88f58448b4ca8abcfd0ddd834555ca1aa4ce387980d7887c5d87b308cb87f1a241dc29d3c5eae6f5680d11e9a1ec653478ca4a252efc8e0a48d4ddbd451d3760d416936d32074d013274bc638e28b196db8098a5f2261d0498adc72dd4bed80fe1cb627bd24b35342bca6138412d849017c59747bb000f8637d555d839a8c6f87bfc3378897a17e59431f0c28ed16baddb1d986a619b5d291fff92837edd60d34de724131dcf716d5dfefec89b62702d07c905bf877aa9871b8f3e0777cb272e72fc875b0ac1c15f6d1535d4edf32e15d6ce2a0afdec1ebf3f7cbe0ed83c3ddd13da11bb48b5b45a1c213461f93c97200abdb8502448c2f0247758e2a1e72efc9b4eea707fec79611e45d5f5e44166d8925a918bd0859402eda46d51555a985fb777cb487060facef5e0e7802b4ba473e8e71ff62777ed11a2cb7f0693a0cdb0792c4f6a979c7a03654b5d715c70406d743fa86f6bbed729ac76da55b57c500a3c104765adb766fb875e77ff8d0ec3503517c21ac8d6d41aa9c7e7d02fa215678b3501c8ff2c9c3a51b4f5f829f831c1c40132a31fb62bbdb3344084d1e408858734618f44fc7c24d299e42efc1d3f7577cbb9e5d46969f2437cef8c60dcad82c74bb73663175f1619469450cfcf35128bf0d41a457ab976c025336386751d10f39f1d5897a794c9697fbef78b4c22c2d9de19cd178bfeeed5593fbc304c06422cf6d2ddab308d23da9b42816a5bd076ef014a467324fbb38da8df880be39d017e7be147e01bfbc3de953e5a2ae46a1f6a74f1880069dde83f03e36e4710593c7f120d97e37bd3b9c9e40fee48d8851ae95acb6f26915012d15fea0b32498bc862f9875d3af67bd5368afa1fab7f97f4d87589c73d3634c3823b6642867fb1052c5eeb8704afcc3c27bbb188bd94d78e31d55b30c48d36e40f2f723b15605806d7586e64aa6cb85e326f98ceac827be30620da53b5610115d299c7b9edd52c2140da468b30099d94bda5b531b9e46cc4475f937337729d97eb6f1ecdf996c8b10fbe685e955d604ea8b1e8c134f122f92d8c0a7ef3f4d0b3c8fc023dd4ec1f70a9fdf2379c88f85cedd422da1fa07a0d0c31b5595755b8a8b318a2ba4c928a4373775d5508348368c9c27dcc7b3af973cfa985de34feda3a3f9ca4169768c27ef97b303a3db4c4f90a7465dcaade3063f9376231dfa56bf83122c7b1d576d42068d3ca4b5ba0f36f58a655ce4c98221e22f48457e2cef86979a4dc4f7a43df4f6ca4bdfa2837042aa46abc918e2bf299ec4c5513fef2c16e08a7c244298b4550bb813ff2cc3f909c2f6da0ceac56cdcd467fc8da23829665d40cc54e4bfc8db8f34d85880b1b5d8973499954c8b125623903f40f620524465ca476e4d3cf4cf8f94828929fd3adef4be06847c52b578cb241618715c01b1382e835b9a63c76a92d8e1c4e7b7018a34dad2aff5a1461973c63e2c6a0067b3cd8dc6082b6cc224159c3681971b76bd2ef4768728a82a415334891a2d0c2ab438efc250341994aed13ed011c86c8c744b9fe932f62ba2b9b5d134947c63ca3995249319528b0205d59cb140d626dc9459373a4310ca6edc422b31a3d6f57548018372f60b1e999a099043c6472dd91d7feb8ff0634e5624ac35e2cbd630520442e87d803a2e76772abf9e3388fd2ac8a5317960a1daea52eab87f066841d5261fb1a79d218371f30c6cddc02d09e57cdefce2c70cee2f1652d7d15c3be3fdfdfc4da8c20d379b652c1248af9bf2e414c020d2d3379ab5e7dcd5479ec1fd5b8bd1fbe1c7da81d322fe421a60cf4ce1f4d831bb6e23c221f7cc908e2d1b07c85ea3c146718d48735a27182ef13d03d9b38e28d0e1a6623906aa1ed37a08c0e4e56410e1462095233b4d39ca62700301053f476be5af5649278791d6cf510567c8f40bc3b671b822ad4994f4ae6d0bf98906d74235036a2be2d8f0f256c621a167c5e352ef1c496e9603b7f082272f3c01d439504ab9baa5d69491fe370634d17d173a2ce966ff6635cc6f3996a7228ff2ab8936383e1d34b60aa0d2bc3defacaddad1ac86c80f1cf0e0275d24c07788caa0851e8c56b3a5542244b25bfd0c907d171cb1da6b4ad315d0aeb773dfac36a8349806c1a4bc612a39f163889eb809d4af3c45256bfbefc19ff0d47452cb071e82ac08dc8d376ea78aeacfbc98e8b33f359486901decada13ca4f90eded0d05f933d6692fc9fae96ea566925118f484f8dd5872e2eab21b8ab3c980d67439fe9a37a955d98d61dee6f53424bce81b44923c2a3064966c0dc007966ce76629f9c93d6bbb967c7d1966387b15eaed4bfc706dcef7da1d59e418f0f8299623cdec05c3c7a8b87368ac1da8cd22d9e41e364e1a68994644e59870564b3b69382b91d1cf06d231509a92c0700f3a5fa615c25273ea298c340230a52cbf1a8e31a7405e51514cd5126db6f1c11cb342a35bf9a4e238b299af05dbef4660af989c62a0068970d2528b17f8f5bc36a9db431b07980b22840e02b339bd9d824ec75c980af1628ace6f0464eda7a0f074cc637f126d02a393a5fff3a6b0458baecc68e65822c286b937e3d0300890df124f2dccedcad3c0f63da87f4daa93305f51805a4186050a8ceb8d4830e9df2cb69fab2df71d585327fef6bf90c3079c41188a0768c7aef20c6d86b6e9d7c8e9671c64ec1436dda483901eb11f8be9278ee6288884defe7be95dfeadc386052799b5a472242e14d729b10aa71d7fb94ff4220af4722bc5d8c28faad65d128dc3414cc0b5bbd28e0b6eedb37a6f2b10baf60a1f3fa630c6973b5f2ef22fc0b4512b7da847239e937f42106cfccdf171ca3f253564793c39e6e34d440c6f250e2ad113e5b43313a958074248ef73bee855a11b044245c02c6ea565e14e13e3cbc9452cc22775b80c2af64e60d373ef1c733d7b45ef291bbeea69fedf5535cbfc6b4a7f96", 0x2000, &(0x7f0000002e40)={&(0x7f0000002080)={0x50, 0xffffffffffffffda, 0xffffffff80000001, {0x7, 0x2d, 0x9, 0x1050c10, 0x3, 0x4a25, 0x3104, 0x8, 0x0, 0x0, 0x4, 0x8000}}, &(0x7f0000002100)={0x18, 0x0, 0x6, {0x279}}, &(0x7f0000002140)={0x18, 0x0, 0xffff, {0x8}}, &(0x7f0000002180)={0x18, 0x0, 0xc00000000000, {0x7}}, &(0x7f00000021c0)={0x18, 0x0, 0x6, {0x7}}, &(0x7f0000002280)={0x28, 0x0, 0xfffffffffffffffe, {{0x2, 0x2, 0x1, r3}}}, &(0x7f00000022c0)={0x60, 0x0, 0x2af3422d, {{0x10001, 0x6, 0x3ff, 0x307a, 0x100000000, 0x6, 0x26, 0xffffffff}}}, &(0x7f0000002340)={0x18, 0x0, 0x7, {0xfffffe01}}, &(0x7f0000002380)={0x11, 0x0, 0x9, {'\x00'}}, &(0x7f00000023c0)={0x20, 0xfffffffffffffff5, 0x2}, &(0x7f0000002540)={0x78, 0xfffffffffffffff5, 0x0, {0x3, 0x7, 0x0, {0x4, 0x9, 0x18, 0x100000001, 0x5dbc, 0x0, 0x2, 0x9, 0x81, 0x4000, 0x401, r4, r5, 0x401, 0x4}}}, &(0x7f00000027c0)={0x90, 0x0, 0x5, {0x4, 0x2, 0x5, 0x8df, 0xb82, 0x80, {0x6, 0x10001, 0xffff, 0x2ffa, 0x1, 0x0, 0x0, 0x5, 0x1ff, 0x8000, 0x9, r6, r7, 0x2}}}, &(0x7f0000002880)={0x50, 0x0, 0x80000001, [{0x2, 0xffffffffffffffff, 0x6, 0x9, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x7, 0x6, 0x3, '\xff\xff\xff\xff\xff\xff'}]}, &(0x7f0000002900)={0x10, 0x0, 0xdb}, &(0x7f0000002b40)={0xa0, 0x0, 0x6, {{0x2, 0x3, 0x7, 0x7, 0x10000, 0x6, {0x3, 0x2, 0xa, 0x2, 0x574, 0x2, 0x8, 0x84, 0x3, 0x1000, 0x99, r8, r10, 0x9, 0x40}}, {0x0, 0x2e}}}, &(0x7f0000002c00)={0x20, 0x0, 0x7fff, {0x6, 0x0, 0x1, 0x7ff}}, &(0x7f0000002d00)={0x130, 0xfffffffffffffffe, 0x1, {0x48c9, 0x400, 0x0, '\x00', {0x20000, 0x8000, 0xfffffffffffffffb, 0x1, r11, 0x0, 0x6000, '\x00', 0xbbb9, 0xfd9, 0x400, 0x0, {0x5, 0x4}, {0x6, 0x101}, {0x6, 0xa39}, {0x8bcf, 0x6a}, 0x6, 0x2, 0x6, 0x7}}}}) mount$fuse(0x0, &(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40), 0x1, &(0x7f0000002f80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x58}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@appraise}]}}) statx(r2, &(0x7f0000003080)='./file0\x00', 0x100, 0x4, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000031c0)={0x0, @rand_addr, @broadcast}, &(0x7f0000003200)=0xc) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000003240)={0xdb, 0x0, 0xffffffffffffffff}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) lsetxattr$security_selinux(&(0x7f00000032c0)='./file0\x00', &(0x7f0000003300), &(0x7f0000003340)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27, 0x2) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000003380)='./file0\x00', &(0x7f00000033c0), 0x20800, &(0x7f0000003440)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r12}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffa}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x10}}, {@audit}]}}) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000003580)={0x74, 0x0, 0x609}) getdents(r1, &(0x7f0000003600)=""/146, 0x92) sendmsg$inet6(r2, &(0x7f0000003780)={&(0x7f00000036c0)={0xa, 0x4e20, 0x200, @mcast2, 0x1}, 0x1c, &(0x7f0000003740)=[{&(0x7f0000003700)="9c35ade9f2390add44ed4c2369a4950d764e2a55dee0f94a6387f5752cb2f65c429a04e83095d763d86c22210affbed8cab717ac9aac3caad52b7beea0", 0x3d}], 0x1}, 0x200000d0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000003800), r1) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000003900)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000038c0)={&(0x7f0000003840)={0x54, r14, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3d71}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) dup(r0) r15 = openat(0xffffffffffffff9c, &(0x7f0000003940)='./file0\x00', 0x12000, 0x1c0) ioctl$NS_GET_NSTYPE(r15, 0xb703, 0x0) utimensat(r1, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={{0x77359400}}, 0x100) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000005a00)={0x4, 0x1, {0x14, @usage=0x9, 0x0, 0xffff, 0x3e, 0xffffffffffffffff, 0x3, 0x8001, 0xb0, @usage=0xd, 0xfff, 0x3613, [0xa857, 0x6, 0x6, 0x2, 0xac]}, {0x7, @struct={0xca3, 0x81}, 0x0, 0x0, 0x0, 0x7ff, 0xffffffff, 0x42, 0x10, @usage=0xffffffff80000000, 0x5, 0x8, [0x2, 0xfffffffffffffffd, 0x2, 0x9, 0x200, 0x4ec3a63a]}, {0x2, @usage=0x6, 0x0, 0x200, 0x5, 0xba8, 0x8, 0x6, 0x10, @usage, 0xd3e5, 0xd, [0xb, 0x2, 0x2, 0x7, 0x401000, 0xb70a]}, {0x40, 0xff, 0xffffffffb0d30878}}) 11.148026295s ago: executing program 0 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'dummy0\x00', &(0x7f00000008c0)=@ethtool_gfeatures}) r2 = syz_usb_connect(0x5, 0x55, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef"], 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) r4 = fsopen(&(0x7f0000000240)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='gid', &(0x7f0000000600)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000002c0)={0x81000002, 0x1801, 0x2a, 0x5, 0x59, "766f0000000000110b8e230900000000000005", 0x3, 0x3}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0xd) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, ';2bF', {0x1, 0xfff, 0x0, 0x1, 0x1}}) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ttyACM0\x00', 0x1afb80, 0x180) dup(r6) r7 = inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./dev\x00', &(0x7f00000009c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a40)=@filename='./dev/sda1\x00', &(0x7f0000000a80)='./mnt\x00', &(0x7f0000000ac0)='ext4\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt\x00', 0x149000, 0x19a) quotactl_fd$Q_SYNC(r8, 0xffffffff80000100, 0x0, 0x0) sync_file_range(r7, 0x31d6afbf, 0x400010004, 0x5) r9 = socket(0x10, 0x6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000900)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002140)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) sendto(r9, &(0x7f0000000380)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r9, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1}, 0x72}], 0x4, 0x60, 0x0) 11.09250042s ago: executing program 32 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'dummy0\x00', &(0x7f00000008c0)=@ethtool_gfeatures}) r2 = syz_usb_connect(0x5, 0x55, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef"], 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) r4 = fsopen(&(0x7f0000000240)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='gid', &(0x7f0000000600)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000002c0)={0x81000002, 0x1801, 0x2a, 0x5, 0x59, "766f0000000000110b8e230900000000000005", 0x3, 0x3}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0xd) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, ';2bF', {0x1, 0xfff, 0x0, 0x1, 0x1}}) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ttyACM0\x00', 0x1afb80, 0x180) dup(r6) r7 = inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./dev\x00', &(0x7f00000009c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a40)=@filename='./dev/sda1\x00', &(0x7f0000000a80)='./mnt\x00', &(0x7f0000000ac0)='ext4\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt\x00', 0x149000, 0x19a) quotactl_fd$Q_SYNC(r8, 0xffffffff80000100, 0x0, 0x0) sync_file_range(r7, 0x31d6afbf, 0x400010004, 0x5) r9 = socket(0x10, 0x6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000900)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002140)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) sendto(r9, &(0x7f0000000380)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r9, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1}, 0x72}], 0x4, 0x60, 0x0) 4.084152044s ago: executing program 3 (id=551): ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454cc, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000700)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x6, 0xb012, 0x4, 0x7, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) (async) write$UHID_INPUT2(r0, &(0x7f0000000880)={0xc, {0x2, "11ff"}}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) (rerun: 32) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x7ffffff9, 0xfcd, 0x70, 0xff, 0x8c, "388d673f088b000000020000000000001af800"}) (async) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f00000008c0)={0x6, 0xc38, 0x5, 0xd4a, 0x0, 0x10, 0x0, 0xfff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xb8) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000003c0)=0x100000001, 0x4) (async) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e22, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x20000328) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0xffffffffffffffff, &(0x7f0000000440)) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r6, 0x300000b, 0x11, r5, 0x0) (async) prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xffffffffff48ec43, 0x5, 0x23400000000, 0x4, 0x8000000, 0x3, 0x9, 0x9, 0x4, 0xffffffff00000000, 0x101, 0x1002, 0x5, 0x9, 0x8, 0x80000001], 0x4, 0x100201}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000004c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6ea045434453412073656c662d74657374696e67206b65793059301306070000000000000000082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479aa5a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffc) (async) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000abad9cc75f17e0d7a092a189bc6dce241509fbbaea4d5350ed56a62dc71cf107675537519933b1c015cdb2d9602646611fc8b30a4fd7591af31af4005c533a61044ac4b2cd9fd7210e5f5afc938f895d57d19bb221abcf7472469f2bd6a7d86995fb78b8a6d39cd758b04ec64b4a77df80fee0ed883602b7123e416a38c31cfa2f98fda2f4775734ac9d31a3"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 4.058741217s ago: executing program 1 (id=552): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000000)=0x1, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f40), 0x20800, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x3) ioctl$TCSBRKP(r1, 0x5425, 0x0) 3.993555904s ago: executing program 3 (id=553): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f40)={'syz0\x00', {0x6, 0x0, 0x5, 0x7}, 0x23, [0x2, 0x6, 0x95d, 0xfd5, 0x10002, 0x0, 0x9, 0x10, 0x100, 0x6, 0x8, 0x8a8e, 0x200, 0x10001, 0x3, 0xfffffffe, 0x10000, 0x98, 0x59, 0x2, 0x6, 0x8, 0x5, 0x2, 0x1, 0x8001, 0x4, 0x8000, 0xd9, 0x8, 0x6, 0x9, 0x6, 0x7, 0x6, 0x2, 0xd, 0x4, 0x80000001, 0x14f2, 0x7, 0x80000000, 0x6, 0x7fffffff, 0x7, 0x2a040, 0x414d, 0x5, 0x2, 0x10001, 0x0, 0x7, 0x2f93c063, 0xffffffff, 0x80000000, 0x6, 0x101, 0x3, 0x7f, 0x8, 0xa35, 0x8, 0x20000, 0x5], [0x10, 0xf999, 0x0, 0xc20e, 0x6, 0xe, 0x7, 0x20000009, 0x2, 0x6, 0x10001, 0x0, 0xd72, 0x6, 0x3, 0x1, 0x9, 0x8129, 0x7ffb, 0x4, 0x3, 0x2, 0x3, 0x3, 0xb8e, 0xff, 0x6, 0x9, 0x101, 0x4e8, 0x1, 0xd540, 0x1, 0x94, 0x7, 0x2, 0x8, 0x56, 0x0, 0x0, 0x0, 0xff7ffff7, 0x8, 0x7, 0x1, 0x3c33, 0x5, 0x3, 0x1ff, 0xf, 0x5, 0x0, 0x2, 0x1, 0x4, 0xfffffff9, 0x6, 0x6, 0x6, 0x1, 0x40000001, 0x4d6, 0x5, 0x3], [0x5, 0x9, 0x8001, 0xd08d, 0xfffffffd, 0x1, 0x4000009, 0x4, 0x0, 0x100, 0x3f, 0x513, 0x1ff, 0x1, 0x6, 0x4, 0x4, 0x5, 0x8, 0x1, 0x1, 0x5620, 0x103, 0x9, 0xfffffff7, 0x0, 0x40, 0x1, 0x5, 0x0, 0x1, 0x7fffffff, 0x1, 0x8, 0xd3, 0xcbc, 0x1, 0x0, 0xf, 0x7, 0x8, 0x2, 0x1, 0x2, 0x6, 0x7, 0x0, 0x9, 0x6, 0x101, 0x10001, 0x7, 0x8000, 0xf1c, 0x4, 0xb0, 0xee6, 0x9, 0x4, 0x0, 0x7, 0x5, 0x7, 0x2], [0x9, 0x7, 0x401, 0x4, 0x2, 0x5, 0x4, 0xf, 0x92, 0x14000000, 0x3, 0x56, 0x3, 0x6d, 0x3, 0xffffffff, 0x1, 0x100, 0x6, 0x3, 0x9, 0xd, 0x4, 0x1, 0x7, 0x800, 0x1, 0x1, 0x3, 0x1c, 0x4, 0xa87, 0x2, 0x78b, 0x9, 0xffffffff, 0x80c3, 0x2, 0x9, 0x871, 0x3, 0x65da, 0xfffffff8, 0x2, 0x3, 0x0, 0x100, 0xc, 0x1, 0x8, 0x2, 0x6, 0x3c8, 0x5db, 0x6, 0x73, 0x5c, 0x9, 0x7, 0xff, 0x3d, 0x0, 0x400, 0x81]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 3.907854432s ago: executing program 3 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracefs\x00', 0x1ff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xe5, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x96\xd0\aJ^4`\x97C\xf0\xb9\x8a\xdc\xe5`\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f00000003c0)="cf", 0x1) sendfile(r0, r1, &(0x7f0000000400), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0x19b80000) mount(0x0, &(0x7f0000000580)='./tracefs\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='e:mygroup/myevent sched.sched_switch', 0x24) 3.740861469s ago: executing program 3 (id=555): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='fus%\x00\x18\xf0,?\x1f\x7fb\xe7*\xf9I:\x80k\'~\xde\x9f`?\xf9q\xdf\x1e\xfb\xc4\xcaW\x9e\xe6\xaeM\xe5\xe7\x18\x1e\x83\xd9\xbdK\"yK\xa5\xc2\xfb\\\x92\x05\x1e\xfe\bx\\\x04d){\x88\x81\xe4a{w\xc5\xb5\xb8\xe1\x93\xd8\xdfh\xf0:c\xaf\xb6@\xdf\xe3l\x9c\x03]M\xac\xc2\xdao\x1d!l\xf3\x89\xc78\xdfQ\xe5\xb6\x01\x88\x8f\xc7T\xec\xa7\x99P2h\xe1\xb4\x1c\xa1yIA\xdb]\x87\xa4>[%\n\xf0g\r@\x05Xv\xb31\xe4\x94\x91\xd9\xfb(d\xea\xc0\x13\x1a\x15\xf38\xfa\r\xa00\xfe\xff\x12\xf9|\xc1\xad\xd1\xd0\t\xd7\xb1a\x8a`c\rj\xa1\xcb+)\xa6\x9e\xe9.?\x1ac\x05\xbe\xe3:/\xb5\b\x98\x9dx\x18\x19Um\xd8\x00Z\x9a{`S\xfafk\xfc\x9a\xd4\xc5\xaf\x84U\x88\x93\x7f\x9f\xe5_\xc7h>^o\x8cW\xd8>\x05z\x04\xbbU\xa1}\xe8\x03~_S\xe9O\x99\x16\x92._\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000280)="66b8010000000f01d9440f20c0663506000000440f22c036f20f23446766c74424000c0000006766c7442402fdd557236766c744240600000000670f0114246766c7442400ef16eac96766c7442402fb4609816766c744240600000000670f01142466b9730b000066b8abce000066ba000000000f30670f890700ba2100b027ee66b98c0800000f326465f2af", 0x8d}], 0x1, 0x8, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/sync_on_suspend', 0x0, 0xe7) fcntl$getownex(r2, 0x10, &(0x7f0000000680)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x180) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000000500)='./file0\x00') pivot_root(&(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='./proc\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000005f80), 0x0) 3.423927352s ago: executing program 1 (id=561): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/serial8250/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='auto', 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x7ffff000, 0x9) 3.423632582s ago: executing program 1 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6a4400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0xc0802, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000600)={0xc, 0xffffffffffffffff, 0x0, 0x500, 0x0, 0xfffffffffdffffff}) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) setns(0xffffffffffffffff, 0x4000000) r6 = openat$kvm(0x0, &(0x7f0000000700), 0x8080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000740)={0x0, &(0x7f0000000780)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r9, 0xae80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) mount_setattr(0xffffffffffffffff, &(0x7f0000000680)='.\x00', 0x9000, &(0x7f00000006c0)={0x100070, 0xf5, 0x20000}, 0x20) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000580)=[@exit_looper={0x40046305}]}) sendmsg$inet6(r10, &(0x7f0000000300)={&(0x7f0000000380)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x20040810) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffdeb}}]}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x5001}) r12 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_generic(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="342000200000000000000000c70ee370f17df00ec099210000a0000000", @ANYRES16=r8, @ANYBLOB="1800178014002a00"/24], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x2}) 2.839867311s ago: executing program 1 (id=569): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000300)={0x200000000000001}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xdd, 0x7a, 0x48, 0x40, 0x403, 0xf850, 0x6793, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0xa0, 0x8, "", [{{0x9, 0x4, 0xc8, 0x1, 0x0, 0xfc, 0x44, 0xaf, 0x3}}]}}]}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x16f3ba41, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}, 0x1c, 0x0}}], 0x1, 0x4001c00) 2.024496374s ago: executing program 4 (id=570): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x0, 0x4, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8080, 0x0, 0x1, 0x1}}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002100090025bd7000ffd3df25040000000c"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'bond_slave_0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0xd01, 0x8, 0x0, 0x2, 0x2, 0x4}}) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0300071900003300"], 0x6c}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 1.899766497s ago: executing program 4 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002700), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000002740)={0xc0003, 0x0, {[0x9, 0x64ac, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x80000000000006, 0x6, 0x1]}}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000027c0), 0x8ab43, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000002800)={0x79, 0x0, 0xc}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000002880)=0x8) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000028c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r10, 0x89a0, &(0x7f0000002e00)='ip6gre0\x00') ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000140)={{0x2, 0x1, 0x10, 0x8, 0xb, 0xe6, 0x40, 0x7, 0x0, 0xd, 0x10, 0x1}, {0x5000, 0x1ffe, 0x10, 0x6, 0x42, 0x8, 0x75, 0x6, 0x36, 0x4, 0x7, 0x1}, {0x0, 0xdddd0000, 0xa, 0x7, 0x5, 0x6, 0x0, 0xd, 0x1, 0xa4, 0x5, 0x5}, {0xeeee0000, 0x80a0000, 0xa, 0x6, 0x2, 0x5, 0xb, 0x8, 0x8, 0xb, 0x6, 0x1}, {0x0, 0xa000, 0xe, 0x3, 0x30, 0x6, 0xac, 0x5, 0x6, 0x9, 0xf6, 0x97}, {0x41000, 0x0, 0x0, 0x1, 0xb1, 0xb, 0x1, 0x9c, 0x82, 0x2, 0xfd, 0x7}, {0x5000, 0x50000, 0xf, 0x5, 0x17, 0x5, 0x7, 0x7, 0xa1, 0x81, 0x40, 0x3}, {0x8000000, 0x4000, 0xc, 0x5, 0xcd, 0x47, 0x1, 0x1, 0xdc, 0x8, 0xb0, 0x81}, {0xeeee0000, 0xffff}, {0x8000000, 0x7}, 0x20040035, 0x0, 0x2ffc, 0x112520, 0x2, 0x0, 0x2000, [0x6800000000000000, 0xe51, 0x3, 0x8]}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)=ANY=[@ANYBLOB="14000000210105"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24008000) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002340)='./config\x00', &(0x7f0000002380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000023c0)='./config/usb_gadget/g1\x00', 0x1ff) r13 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) read$eventfd(r13, 0x0, 0x0) getsockopt$netlink(r12, 0x10e, 0xb, &(0x7f0000002d80)=""/22, &(0x7f0000002dc0)=0xffffffffffffff51) 1.830675754s ago: executing program 4 (id=572): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000001c0)={0x1, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d07, &(0x7f0000000080)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r4, 0xffffffff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) (async) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x80, &(0x7f0000001dc0)={0x100073, 0x0, 0x100000, {r3}}, 0x20) 1.806737626s ago: executing program 4 (id=573): io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_clone(0x86000500, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}, {&(0x7f0000000340)={0x3f0, 0x19, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x14, 0x108, 0x0, 0x0, @ipv6=@private0}, @nested={0x19e, 0x81, 0x0, 0x1, [@generic="170bf87bdd1784862585ea8433a8d67aa83d6608b63ea3364e8b421d1f489160131bd94c9c2b3f3b0d2ce65b0d462b2c62f47aa9a07d4ee84f086b96cbb1a72764fecc7f1c8f80410f5f849516b1d9686a2eb431345163cc4c9908a15df28c1bad07f4f59fb12d4e0852ced807288f80c9cba210b74a8a893c55812e03056a528a61a52b34659ef6de0226afe7cbf92dd516d1915d1bda718f12ff46284d7842efe93188407e1fc1c45573898fea24693ef2f9fba4601e73194b7ef069f65cdf6bb7799110930b3b648cfe1bdfaeb6c6b07318073679541df66fc186b017a572e21d", @nested={0x4, 0xa1}, @typed={0xa9, 0x11b, 0x0, 0x0, @binary="64ae6dfb7bea429418d2a0feca21b5f2a23062ef828dffc211d5a87da70799e2a7cd03e8139267782086b15c0e4c84f76f6514dc0ec72a7e4b0a876ad9379555dff2c62715d101ef1e4f061c159f2fdfbb8cae8a00620a8bae987c17b669792d5f00f63cc414140134a5695b595d53381e9435e0a3e890137779d1a02786abc7eb59fcbda1961cf3b45d23f669d16b598d15544b17f23986b5e22e7afd00962168312101d3"}, @nested={0x4, 0x169}, @nested={0x4, 0x126}]}, @typed={0x4, 0x10a}, @nested={0x214, 0x7e, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x80, 0x0, 0x0, @str='\x00'}, @generic="deb74b377a74294ea648efe029e01dae", @generic="c00cea1e719b306d58fbfd439ead32358355d1b3e7524ba9a72895f30a295914d8deba7677930c299dc718c55f52617dd0b7e34a263557bc525b85887e223445d80a79c9ef74906753e261755e1485eb5113236ec596f9dde7a3331fa19ca0edadd6357b9f7a2b1dca40d8dbb7e69c7b7381b0f549fc7c342c3eb6b4decd0ee1b90d17855fb21b40bd71024572fed468360a353db949e372561535243dda8195add241998c3088bc3253d15968abf408ce156d92a38156872f82bc15ade3ff798e5ae347cbb2eaac9e00ac455e84138bc2a0ed195ca5e0d209e9f4f96732164257cf58536db570b9acc953fd8f6bc2154c8a280a0cfb48135ba0", @generic="655241da229edd67409f439441485436fa9ee464b769ca8a2914c17eec0638a82aac4d14320c97635b6a52e0217db3ea79ebe0c5f0842c5895f7f1b9093030f224c58f6a01f9c3608961e08db486222e9ad1daaa86787444d9b7258025835f3f80c9788e827613f05295bcefbd4bb1c6a83682957bd91e8e31e1a33d51f134ea046a93ead8968d041026fa8037c6208e166363c0acd43e9b30b30b5e0c781e5b122eb423c2b8c03d1b546f21ef924ddaa653aff5adc87e5ea1448af1d8bc2cb2c6ff2d27634b4e358c1169fea9545d3c338fc664e857a0e962cfde60fb24a3af2fef6c19d7f538304fdf6687ec186ff767c937ab88f1"]}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@local}]}, 0x3f0}, {&(0x7f0000002840)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800d400", @ANYRES32=r4, @ANYBLOB="0c00ab000400000000000000dd004e0031865fc3161364317a9ca1cff93fd444e30c262fefcb590e8a9e28dd83543e2ff7ca6db0bfa3484a5650cc8f5d350bfb1f7d0ad01a44f89c91efc721b25985954f5b622c8849935b4653a0c67cbae077faad94ab07295625853871fc7274c31e9a896b8c5f9ecaafe500ea537656ad589ea4790ba26d7ca3eae8150ca87084bd9747289f08fa541cf46a0182cb621c76d3388fe41b8b259643462d97a80c54499dbb037d6fde3deece9f9337a569136d54de403d5d5b15c776eeb1e2f000a3e57cd73650db56f3b6a704d533038c7ae11b75746623906363d4000000166f6002bfd3defe313907872cc284a38456941f92f094c5fbfabb5ada156bbdb5d9784a62d5d4b55cc0361efd00fb248ce0522c9cf7f87011ef8c5c634fdadb02ce5b5f8e245e07fb99102cb644e60821611377e29339691a019eb31d41130c068406590fdd90a31ceab8faeef95613b59e2b8bbd0e82573c238e01e790cceb68197cde012e6f6de8c4b400a43ec692cbda74abcd6d69465b84472ec8be1d878a116440135530b72f077c9ac5d36b12ef4a63f93bac23410ad0994394132e6e8ebf4c67171049506b7b58c62f30594253c63ba9499a5cfe2d8697bd586f1a4b6c13201c9fee5bf2d221adbc48ba9e7c9d673da28af84df87543c81cd961f19f16332358733fcfedbf9782778a892be858ead3dbeb3b606304ba797ffa7547eaa7c4291753c374b2725d296bf55d42d27f5c6538258be05f3f93c58223a7c338db90f4aae87077622d099223c8812b8040db5a6a92b1dd0b7f238fca5da93df3ab264b1ec0c9d06af2463986eb0038ef930019e86cf232bca730443cfdefa1d072b4d1d8c45dfb276510cf753faccdcc887ef786ed9283f87df58a9647256b70b5b39dac50d68bfdca18a6071b345b584ecc491ece9e4d1e5801614aad908185407e"], 0x454}, {&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04004100ab00318004002f809b9018a6e38e6f137352fa024261c5d6593807f178dd2fd3071a6a99f5a07112aa26b9087933677cfc079ac09b4820c02d3abb8346421fa687efefd2e060fd3e523dc604f95a5ffaa155de326bc2579396ddaade631a16b8e164203b1813efa494fc30be1eaafeeb244a64cbaf19b1257b1cd379d6c44a3185e9f2302eb30e3230d0208f9b2e755087f74972f88e9282b1fb068c3fbbd09d85935f6baf283cbe85601b000c0074000e000000000000000000"], 0x1c4}], 0x4}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}, {&(0x7f0000000340)={0x3f0, 0x19, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x14, 0x108, 0x0, 0x0, @ipv6=@private0}, @nested={0x19e, 0x81, 0x0, 0x1, [@generic="170bf87bdd1784862585ea8433a8d67aa83d6608b63ea3364e8b421d1f489160131bd94c9c2b3f3b0d2ce65b0d462b2c62f47aa9a07d4ee84f086b96cbb1a72764fecc7f1c8f80410f5f849516b1d9686a2eb431345163cc4c9908a15df28c1bad07f4f59fb12d4e0852ced807288f80c9cba210b74a8a893c55812e03056a528a61a52b34659ef6de0226afe7cbf92dd516d1915d1bda718f12ff46284d7842efe93188407e1fc1c45573898fea24693ef2f9fba4601e73194b7ef069f65cdf6bb7799110930b3b648cfe1bdfaeb6c6b07318073679541df66fc186b017a572e21d", @nested={0x4, 0xa1}, @typed={0xa9, 0x11b, 0x0, 0x0, @binary="64ae6dfb7bea429418d2a0feca21b5f2a23062ef828dffc211d5a87da70799e2a7cd03e8139267782086b15c0e4c84f76f6514dc0ec72a7e4b0a876ad9379555dff2c62715d101ef1e4f061c159f2fdfbb8cae8a00620a8bae987c17b669792d5f00f63cc414140134a5695b595d53381e9435e0a3e890137779d1a02786abc7eb59fcbda1961cf3b45d23f669d16b598d15544b17f23986b5e22e7afd00962168312101d3"}, @nested={0x4, 0x169}, @nested={0x4, 0x126}]}, @typed={0x4, 0x10a}, @nested={0x214, 0x7e, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x80, 0x0, 0x0, @str='\x00'}, @generic="deb74b377a74294ea648efe029e01dae", @generic="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", @generic="655241da229edd67409f439441485436fa9ee464b769ca8a2914c17eec0638a82aac4d14320c97635b6a52e0217db3ea79ebe0c5f0842c5895f7f1b9093030f224c58f6a01f9c3608961e08db486222e9ad1daaa86787444d9b7258025835f3f80c9788e827613f05295bcefbd4bb1c6a83682957bd91e8e31e1a33d51f134ea046a93ead8968d041026fa8037c6208e166363c0acd43e9b30b30b5e0c781e5b122eb423c2b8c03d1b546f21ef924ddaa653aff5adc87e5ea1448af1d8bc2cb2c6ff2d27634b4e358c1169fea9545d3c338fc664e857a0e962cfde60fb24a3af2fef6c19d7f538304fdf6687ec186ff767c937ab88f1"]}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@local}]}, 0x3f0}, {&(0x7f0000002840)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800d400", @ANYRES32=r4, @ANYBLOB="0c00ab000400000000000000dd004e0031865fc3161364317a9ca1cff93fd444e30c262fefcb590e8a9e28dd83543e2ff7ca6db0bfa3484a5650cc8f5d350bfb1f7d0ad01a44f89c91efc721b25985954f5b622c8849935b4653a0c67cbae077faad94ab07295625853871fc7274c31e9a896b8c5f9ecaafe500ea537656ad589ea4790ba26d7ca3eae8150ca87084bd9747289f08fa541cf46a0182cb621c76d3388fe41b8b259643462d97a80c54499dbb037d6fde3deece9f9337a569136d54de403d5d5b15c776eeb1e2f000a3e57cd73650db56f3b6a704d533038c7ae11b75746623906363d4000000166f6002bfd3defe313907872cc284a38456941f92f094c5fbfabb5ada156bbdb5d9784a62d5d4b55cc0361efd00fb248ce0522c9cf7f87011ef8c5c634fdadb02ce5b5f8e245e07fb99102cb644e60821611377e29339691a019eb31d41130c068406590fdd90a31ceab8faeef95613b59e2b8bbd0e82573c238e01e790cceb68197cde012e6f6de8c4b400a43ec692cbda74abcd6d69465b84472ec8be1d878a116440135530b72f077c9ac5d36b12ef4a63f93bac23410ad0994394132e6e8ebf4c67171049506b7b58c62f30594253c63ba9499a5cfe2d8697bd586f1a4b6c13201c9fee5bf2d221adbc48ba9e7c9d673da28af84df87543c81cd961f19f16332358733fcfedbf9782778a892be858ead3dbeb3b606304ba797ffa7547eaa7c4291753c374b2725d296bf55d42d27f5c6538258be05f3f93c58223a7c338db90f4aae87077622d099223c8812b8040db5a6a92b1dd0b7f238fca5da93df3ab264b1ec0c9d06af2463986eb0038ef930019e86cf232bca730443cfdefa1d072b4d1d8c45dfb276510cf753faccdcc887ef786ed9283f87df58a9647256b70b5b39dac50d68bfdca18a6071b345b584ecc491ece9e4d1e5801614aad908185407e"], 0x454}, {&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04004100ab00318004002f809b9018a6e38e6f137352fa024261c5d6593807f178dd2fd3071a6a99f5a07112aa26b9087933677cfc079ac09b4820c02d3abb8346421fa687efefd2e060fd3e523dc604f95a5ffaa155de326bc2579396ddaade631a16b8e164203b1813efa494fc30be1eaafeeb244a64cbaf19b1257b1cd379d6c44a3185e9f2302eb30e3230d0208f9b2e755087f74972f88e9282b1fb068c3fbbd09d85935f6baf283cbe85601b000c0074000e000000000000000000"], 0x1c4}], 0x4}, 0x0) 1.643819353s ago: executing program 4 (id=574): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000c00)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f0000000c40)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000b80)={'syzkaller1\x00', 0x5001}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000bc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f000001a0c0)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f000001a100)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) (async) write$tun(r3, &(0x7f000001a140)=ANY=[@ANYBLOB="01051c001000140006004500002d0000000040119078ac140500ac14000112344e20001990780000800000a497aaf51b06323a78cb2ff6"], 0x37) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x3, @loopback}, 0x70) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r6, &(0x7f0000002100)=[{{&(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000340)="6bd4b546112ea7942a90394eeb981589b53a3806afecfae76b48d38f1bf7841f40c0b47c4088ed402b3b12c5d288cdb7a1d5a1c622db566ce83bd3eddf5139669327a8f487d2bf633f22e9a105da1b3ca143cae21beaa62c2cd49bfc01aee604bc14bc19cc26b199f589a5c9644a79c2e754cf41fca9d15510ff11c4ed8ff83063509691ce87c41832b11255abdaf5107dc41a877cf331d19a0a3ede4ceaf6baf7c7a57a80ea1e831bc6c22a9547c676a330d0d352d1068603285fe1ea5c871bebdb6ec9239ff9c7edc5b92c06bef2560fd332f7578b", 0xd6}, {&(0x7f0000000500)="612b099ec45581e1c1bc923bafafc41a230d65eb4bcaeae4a780cd3c23a0e0114f77a161fa36087a7fe7a47b3d2de5a25b03e64c7b85fc64e6160dfeed232721c5e29110f51032293423c92ca7f3715a04a41462725c4cd5415c5f461820a0a5a8e948ba3cccf50529ec5a2b7193059891d3ce4f10006dd602cfc2c63d70ec084045340eeb249df38dd74fcdd28cbf7bd090564c86988ce78c9762d3d7d99379e008", 0xa2}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="8dbeb5dab6f9a97fb22fc97724a4c772e33e3cfd22b38ade2c94620181aa52135738b4d6c43dbf36662e9870eddeb37eff", 0x31}, {&(0x7f0000001cc0)="9bd2a22a104e0e6211a6e81e5de0c6", 0xf}, {&(0x7f0000001d00)="86165f098c01e37a7432390a875e", 0xe}, {&(0x7f0000001d40)="ecd688beefb813a614467c2a1d210d06d54c36fdef3bf852ddc70e6a0c34aa8f91c7108535826af8550a354e7a992422772c8827b01f07d23a55a7b969356c16021d1a6c9bfcf32db81fc49fc2c432b3cf67f64c64ba88defc307ce75c0dffe54660cac62be3adb9e194139171b78ba29ff777bc87ab967ebcfcda01e9b22ba47b40ff", 0x83}, {&(0x7f0000001e00)="3c289704ebf60c4af58f897b0df8eb595c3cb39f520feade97c038003b3d83030f7fb873db7b2af44f9aba2b50bee4f4001f793d71515cd4d071cd02f52c1615e9d0360bd35d81", 0x47}, {&(0x7f0000001e80)="1ea7790b97b1b8811d6c7b72ed866c8944e5814ed3d14e9f0300e264f86b78b1d23f16db44fd7935e6ad1e992c69207ca146479f3c52fa2e61a36b39e33859a0e5d55cbde1409a92129d96ba9aa16b442e98ab200d938a3d9d4c46a7b007d010d7777c24dc558c226fc6a70cd44b21beb96041ac5bb1b66b6327230b53d275da220397f9d633dbdd0b75d4b163fbccbbec0e91c277defa03d1d7ed6dcaf52c071e0374bd2b1354311cd07e", 0xab}], 0x9, &(0x7f0000000600)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x9c, 0x3, 0x9, [{@private=0xa010100, 0x8}, {@remote, 0x7ff}]}, @end, @noop, @end]}}}], 0x98}}], 0x1, 0x4000000) (async) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000b00)=0x7fffffff, 0x4) 1.620101155s ago: executing program 4 (id=575): add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x1d8, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000540)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e21cdc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x4010, 0x0) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffe1, &(0x7f0000000300)=ANY=[]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x2000, 0x4, 0xfffffffffffff000, 0x4, 0x4, 0x3, 0x7, 0x3, 0xffffffff, 0x0, 0x9, 0x4, 0x16, 0xda2, 0x9], 0x1ff8, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.464332651s ago: executing program 1 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x2, 0x80, 0x6, 0x0, 0xfffa, 0x6}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @broadcast, @ipv4={'\x00', '\xff\xff', @remote}, @broadcast, @empty}}, 0x3e) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="ffffffff000000000000000000000000000004d46c000000e0000002000000000000000000000000320e0000000000009201000000000010a39b000000000000ffff0000000000001e250800000000000600000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000990f0000000000000700000000000000fe7fffff018000000000000080000000053500000a0000005100000000000000480003006465666c617465"], 0x14c}}, 0x844) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0xb, 0xa8, 0x5, 0x20, 0x582, 0xb7a6, 0x1027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0xb2, 0x8, 0xf0, 0x7, "", [{{0x9, 0x4, 0xb7, 0x0, 0x1, 0xff, 0x56, 0xf1, 0xff, [@generic={0x7, 0x2, "9998b73e75"}], [{{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x0, 0x9b, 0x6}}]}}]}}]}}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}) 1.101486308s ago: executing program 2 (id=582): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x62, 0x39, 0x38, 0x30, 0x30, 0x5e, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f00000006c0)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x20000041}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x38]}, &(0x7f0000000dc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e40), &(0x7f0000000e80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x33, 0x30, 0x30, 0x62, 0x30, 0x30, 0x65]}, &(0x7f0000000ec0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff03002233445566778899aabbccddfeff00112233445566779f99aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) (async) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000fc0)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @desc2}, &(0x7f00000011c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000001340), &(0x7f0000001380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f00000013c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000014c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "decd6200e33e8f04f901fc02fe85d15c67be5910f47aa767d91afdf45660393a4b0ab0a7d9bf81cb7d48f46a051dcee927c1a728b506f94961574237ca90dc7d", 0x12}, 0x48, 0xfffffffffffffffe) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @desc1}, &(0x7f00000015c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x2}, &(0x7f00000016c0)='c', 0x1, r0) 1.036500845s ago: executing program 2 (id=583): ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x10, 0x100000001, 0x12, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x10000000000000cf, 0x0, [{}]}) (async, rerun: 64) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x3000, 0x4, 0x0, 0x9, 0x7, 0x8, 0xde, 0xd, 0x8, 0xf, 0xd}, {0x2, 0x3000, 0x9, 0x6, 0x3, 0x1, 0xd, 0x5, 0x5, 0x3, 0x7}, {0xffff1000, 0xeeeb7ff8, 0x10, 0x1, 0x5, 0x4, 0xab, 0x8, 0x0, 0x7, 0x3, 0x80}, {0xd000, 0xeecca004, 0xd, 0x46, 0xdd, 0x9, 0x5, 0x8, 0x30, 0x1, 0x1, 0xff}, {0x70000, 0x19000, 0x8, 0x7, 0x1, 0xff, 0xc, 0x7, 0x1, 0x3, 0x2, 0xa}, {0xdddd1000, 0xb000, 0x0, 0x0, 0x96, 0x9, 0x4e, 0x10, 0x4, 0xff, 0x6, 0x8}, {0x57000, 0xeeee8000, 0x3, 0x7, 0x0, 0xf8, 0x0, 0xb, 0x8, 0x6, 0x79, 0xf}, {0x100000, 0x25000, 0xb, 0xcc, 0x0, 0x8, 0x7, 0x0, 0x80, 0x3, 0x6, 0x2}, {0x8080000, 0x7}, {0xeeef0000, 0xf55}, 0x30000, 0x0, 0x3000, 0x402126, 0x5, 0x3500, 0x80a0000, [0x2, 0xc, 0x2, 0x2b3a]}) (rerun: 64) 823.848227ms ago: executing program 2 (id=584): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x6, 0x3}, 0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0xfffffffffffffffa) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r3}) close(r4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x6, 0x3}, 0x6) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0xfffffffffffffffa) (async) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r3}) (async) close(r4) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) (async) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) (async) 820.610207ms ago: executing program 2 (id=585): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 'id0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='batadv_slave_1\x00') r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000014c0)={'erspan0\x00', &(0x7f0000001440)={'gre0\x00', 0x0, 0x7, 0x40, 0x7ff, 0x8, {{0x14, 0x4, 0x0, 0x3, 0x50, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0x5c, 0x0, 0x5, [0xa, 0x5, 0x5, 0x4, 0x0, 0x5, 0x1, 0x1]}, @generic={0x7, 0xd, "600b4d72a956f2cee8d475"}]}}}}}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000009400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x5}}, 0x30) 795.179659ms ago: executing program 2 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10001, &(0x7f0000004780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f00000000c0)={r0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x18f) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x49bf, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x0, 0x6, 0xa, 0x0, 0x9}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000580)={0x1, 0x2, 0x1000, 0xf2, &(0x7f0000000380)="b24b95299aa5e39e1e2a383d667251427bddf3bd8038efbf2262d402839c08bf192fe38693001208d95c45ea29d73e3cb1e5e97596d3a8e7fa64906e91ada7c46b4a2a92a871b44a476a64fc29e0616ec60b389e286abbaf24eddf09ed0eb94bfface2a5b20ef1b6fc778382c4108c73c70ed306ddd31df25dfa583e911e6718d574af9a1654fccaa0be4a1a87bb7192d976799d325aec68c49dcd1d17ac5641c754144e93bb8768ebea2b274b0cede8303ca87d80cd8b319d810d2cf51e3d623e407a228879c51ded5f0b35f5a5ed339f6718d00b81943fc77c521be8867131761cc8049525e6bb76d215849e94fe66cb07", 0xf1, 0x0, &(0x7f0000000480)="561fbdea6d0ade5d57f4047526f1f8890a02f57d6601660487213dc2385cecea24a7650218acb5f596b1ffcc267bb1df2842213f77f39d22757d6b95590ddae63e54f27d0c3301f8a19b1e092c1c9556c694e956edbc481c18ac656fbd6e276859d33ec2b6dc952a4ce398f31ae34dc89f4994b1ac64b8cffa82093f31ab521105142ae78b448b3d6375bd515dbe90aa3040e048529c48df0ef023286d0ae3973057bc5ccb80661a3767c2888ccd1150199744a73f8718e5a07e787fd9ab0f5706e99692550214dcda52a52335ce95bf9bade8abbbce96e56d3eb6295ea5524bd33cd23899ae553514ce3b7d37ff7717e0"}) socket$xdp(0x2c, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x42, 0x0) ioctl$BLKROSET(r4, 0x2284, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 731.068686ms ago: executing program 2 (id=587): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'geneve0\x00', 0x4000}) (async) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x2) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r1, &(0x7f00000000c0)='geneve0\x00', 0x5) (async) r2 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r2, &(0x7f0000000100)=""/84, 0x54, 0x101, &(0x7f0000000180)=@ax25={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80) (async) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', &(0x7f0000000280)=',!:\xfa)^\x00', 0x7, 0x1) (async) r3 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x7, 0x82002) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r3, 0xbb9c) (async) r4 = userfaultfd(0x800) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0x84, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, {0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x5, {[0x9, 0x3, 0xf, 0x3, 0x9, 0xffffffff, 0xa4f45cae, 0x8]}}, 0x5c) read$FUSE(r3, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) lstat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r5, r6) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002480), 0x2100, 0x0) write$ppp(r7, &(0x7f00000024c0)="97fa094d9b20679fd08700a8c3a335d78a3134df4baeda99180890bc4a5e764348d08812ea3a91e773512c62c7290f658d0f4c288aa3b0", 0x37) (async) r8 = syz_open_dev$evdev(&(0x7f0000002500), 0x6, 0x8501) ioctl$EVIOCGNAME(r8, 0x80404506, &(0x7f0000002540)=""/61) r9 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002580), 0x1, 0x0) ioctl$DM_TABLE_STATUS(r9, 0xc138fd0c, &(0x7f00000025c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, "d9c3659d18c7148f3d04a656eca00863d9b515b117dff2f3f4cf9e73c82a5a92257f8f9734452d006b4881638ffd81e7056819a3b49513b4e9313d7000835df6494480af507e6223c4a81a1a2b6cae46a297b10db1f70ed0d8a3451d5ff4073c2f2f0607cbdd0400185440536a1ccb17bc97dc94d877c23eb7a1d39b237831f39c50cbcef460"}) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000002780)) (async) syz_ublk_setup_queues(r10, 0x0, &(0x7f00000027c0)={0x0, 0xbc8c, 0x4, 0x2, 0x30f}, &(0x7f0000002840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe49, 0x0, 0x0, 0x3c1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ba8, 0x1040, 0x1, 0x84}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbb12, 0x40, 0x0, 0x9d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x840b, 0x8000, 0x0, 0xa1}}], 0x4, &(0x7f0000003ac0)={0x2e, 0x12, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x8ce, 0x0, &(0x7f0000002ac0)=@buf_4k="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"}}, &(0x7f0000003b40)) ioctl$UBLK_U_IO_FETCH_REQ(r11, 0xc0107520, &(0x7f0000004b80)={0x1, 0x3dd, 0x0, &(0x7f0000003b80)=@buf_4k="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"}) (async) r12 = openat(0xffffffffffffffff, &(0x7f0000004c00)='./file1\x00', 0x4000, 0x11) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r12, &(0x7f0000004f40)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004f00)={&(0x7f0000004c80)={0x260, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x39}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}]}, @CTA_TUPLE_ORIG={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf9c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x548}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) landlock_restrict_self(r12, 0x8) (async) mount$overlay(0x0, &(0x7f0000004f80)='./file0\x00', &(0x7f0000004fc0), 0x110000, &(0x7f0000005000)={[{@redirect_dir_off}, {@uuid_null}, {@index_on}, {@index_off}, {@volatile}, {@nfs_export_off}, {@index_on}, {@verity_on}, {@xino_auto}], [{@uid_eq={'uid', 0x3d, r5}}, {@euid_gt={'euid>', r5}}, {@appraise}, {@smackfshat}]}) 611.840118ms ago: executing program 3 (id=588): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x4b, &(0x7f0000000000)={0x2, 0x2000}, 0x8) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r1 = socket(0x8, 0xa, 0x8) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)) 566.644133ms ago: executing program 3 (id=589): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan1\x00') fstat(0xffffffffffffffff, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000800)='fd/3\x00') (async, rerun: 64) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'vlan1\x00', {}, 0x5832}) 472.684872ms ago: executing program 33 (id=589): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan1\x00') fstat(0xffffffffffffffff, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000800)='fd/3\x00') (async, rerun: 64) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'vlan1\x00', {}, 0x5832}) 0s ago: executing program 1 (id=591): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01"], 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x210, 0x138, 0x1, 0x0, 0x1000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@verity={0x0, 0x680, 0x0, 0xd8, 'verity\x00', {'1', 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '512', 0x20, '1024', 0x20, 0x13, 0x20, 0x2df, 0x20, 'crc32c', 0x20, @hex32=[0x34, 0x61, 0x31, 0x33, 0x36, 0x63, 0x37, 0x33, 0x32, 0x35, 0x38, 0x65, 0x64, 0x0, 0x61, 0x31, 0x34, 0x30, 0x35, 0x61, 0x64, 0x34, 0x33, 0x37, 0x64, 0x37, 0x38, 0x37, 0x62, 0x0, 0x64, 0x63, 0x36, 0x34, 0x33, 0x38, 0x31, 0x64, 0x37, 0x65, 0x66, 0x36, 0x33, 0x65, 0x34, 0x37, 0x38, 0x30, 0x38, 0x38, 0x62, 0x65, 0x35, 0x32, 0x38, 0x34, 0x62, 0x36, 0x31, 0x66, 0x66, 0x39, 0x30, 0x61], 0x20, @none, ' 1 ignore_corruption'}}]}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010029bd7000000400000000000000000f80080021002d819d5c98cd7166f38c5b76deb4dc722644bb10acebcf19f2325c0000f5fed9a3b35b58a7f5d93f50a14e278a7ee3133d230b6907ead6fbe72a31ad2fb42c74fb36dec967ed73038e3413db480612ff7c56c701f546c393468a5e8b2cdc28fcce87859ef7b66c6db90820dd162e8a90f21bd2cc1e0d636c4617869fc0010e4956d6443ef7c5a3d852acba4f448903317466050120e70e316383156b3f66b628a65ed8", @ANYRES32=r1, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010029bd7000000400000000000000000f80080021002d819d5c98cd7166f38c5b76deb4dc722644bb10acebcf19f2325c0000f5fed9a3b35b58a7f5d93f50a14e278a7ee3133d230b6907ead6fbe72a31ad2fb42c74fb36dec967ed73038e3413db480612ff7c56c701f546c393468a5e8b2cdc28fcce87859ef7b66c6db90820dd162e8a90f21bd2cc1e0d636c4617869fc0010e4956d6443ef7c5a3d852acba4f448903317466050120e70e316383156b3f66b628a65ed8", @ANYRES32=r1, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x800, &(0x7f00000008c0)) (async) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x800, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r3, &(0x7f00000009c0)='./file0\x00') ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0x2000, 0x0, 0x80, 'snapshot\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'P', 0x20, '8', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) kernel console output (not intermixed with test programs): =1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 38.907870][ T412] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 38.996268][ T1091] FAULT_INJECTION: forcing a failure. [ 38.996268][ T1091] name failslab, interval 1, probability 0, space 0, times 0 [ 39.008961][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: syz.1.144 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 39.008994][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.009017][ T1091] Call Trace: [ 39.009025][ T1091] [ 39.009033][ T1091] __dump_stack+0x21/0x30 [ 39.009049][ T1091] dump_stack_lvl+0x140/0x1c0 [ 39.009058][ T1091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.009069][ T1091] ? do_futex+0x32a/0x510 [ 39.009082][ T1091] dump_stack+0x19/0x20 [ 39.009091][ T1091] should_fail_ex+0x3c2/0x510 [ 39.009107][ T1091] should_failslab+0xac/0x100 [ 39.009118][ T1091] kmem_cache_alloc_noprof+0x42/0x410 [ 39.009132][ T1091] ? getname_flags+0xcc/0x6b0 [ 39.009142][ T1091] getname_flags+0xcc/0x6b0 [ 39.009151][ T1091] ? __kasan_check_write+0x18/0x20 [ 39.009165][ T1091] __x64_sys_mkdirat+0x7e/0xa0 [ 39.009177][ T1091] x64_sys_call+0x2ba8/0x2ee0 [ 39.009188][ T1091] do_syscall_64+0x57/0xf0 [ 39.009198][ T1091] ? clear_bhb_loop+0x50/0xa0 [ 39.009210][ T1091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.009222][ T1091] RIP: 0033:0x7ff6adf9f559 [ 39.009243][ T1091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.009253][ T1091] RSP: 002b:00007ff6aee6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 39.009268][ T1091] RAX: ffffffffffffffda RBX: 00007ff6ae226090 RCX: 00007ff6adf9f559 [ 39.009281][ T1091] RDX: 00000000000001ff RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 39.009289][ T1091] RBP: 00007ff6ae036b50 R08: 0000000000000000 R09: 0000000000000000 [ 39.009296][ T1091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.009303][ T1091] R13: 00007ff6ae226128 R14: 00007ff6ae226090 R15: 00007ffc167fdff8 [ 39.009312][ T1091] [ 39.157928][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.205726][ T412] usb 1-1: not running at top speed; connect to a high speed hub [ 39.216872][ T412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.227116][ T412] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 39.236203][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.246895][ T412] usb 1-1: Found UVC 1.00 device (0000:0000) [ 39.348804][ T312] usb 4-1: config 253 has an invalid interface number: 198 but max is 0 [ 39.357194][ T312] usb 4-1: config 253 has no interface number 0 [ 39.363572][ T312] usb 4-1: config 253 interface 198 altsetting 5 endpoint 0x2 has invalid maxpacket 479, setting to 64 [ 39.374729][ T312] usb 4-1: config 253 interface 198 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 39.384753][ T312] usb 4-1: config 253 interface 198 has no altsetting 0 [ 39.392939][ T312] usb 4-1: New USB device found, idVendor=0079, idProduct=c909, bcdDevice=eb.cf [ 39.402011][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.410083][ T312] usb 4-1: Product: syz [ 39.414343][ T312] usb 4-1: Manufacturer: syz [ 39.418977][ T312] usb 4-1: SerialNumber: syz [ 39.446559][ T412] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 39.456301][ T412] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 39.465199][ T412] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 39.473813][ T412] usb 1-1: USB disconnect, device number 9 [ 39.617852][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 39.628618][ T312] usb 4-1: USB disconnect, device number 5 [ 39.798666][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 39.807179][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.818437][ T9] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 39.827536][ T9] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 39.835964][ T9] usb 3-1: Product: syz [ 39.840313][ T9] usb 3-1: Manufacturer: syz [ 39.850869][ T9] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 40.051044][ T9] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 40.061101][ T9] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 40.069970][ T9] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 40.079290][ T9] usb 3-1: USB disconnect, device number 10 [ 40.517861][ T388] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.597854][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 40.668408][ T388] usb 4-1: no configurations [ 40.673089][ T388] usb 4-1: can't read configurations, error -22 [ 40.747912][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 40.756045][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.767215][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.777042][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.786277][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.797918][ T31] usb 1-1: config 0 descriptor?? [ 40.803006][ T311] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 40.810789][ T388] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.819093][ T31] hub 1-1:0.0: USB hub found [ 40.968260][ T388] usb 4-1: no configurations [ 40.972901][ T388] usb 4-1: can't read configurations, error -22 [ 40.979485][ T388] usb usb4-port1: attempt power cycle [ 40.985253][ T311] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.996335][ T311] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.006129][ T311] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.019003][ T31] hub 1-1:0.0: 1 port detected [ 41.023827][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 41.030759][ T311] usb 3-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 41.040228][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.048821][ T311] usb 3-1: config 0 descriptor?? [ 41.055674][ T311] usbhid 3-1:0.0: can't add hid device: -22 [ 41.061955][ T311] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 41.097837][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.248204][ T9] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 41.256755][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.257819][ T1134] incfs: Options parsing error. -22 [ 41.267250][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.269666][ T1134] incfs: mount failed -22 [ 41.276183][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.287028][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.294458][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.302347][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.309690][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.316955][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.324954][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 41.334042][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 41.337836][ T388] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.342244][ T9] usb 2-1: Product: syz [ 41.353944][ T9] usb 2-1: Manufacturer: syz [ 41.358656][ T9] usb 2-1: SerialNumber: syz [ 41.358828][ T311] hub 1-1:0.0: activate --> -90 [ 41.366403][ T9] usb 2-1: config 0 descriptor?? [ 41.369098][ T388] usb 4-1: no configurations [ 41.378010][ T388] usb 4-1: can't read configurations, error -22 [ 41.517850][ T388] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.548546][ T388] usb 4-1: no configurations [ 41.553217][ T388] usb 4-1: can't read configurations, error -22 [ 41.560046][ T388] usb usb4-port1: unable to enumerate USB device [ 41.585855][ T388] usb 2-1: USB disconnect, device number 7 [ 41.684468][ T9] usb 3-1: USB disconnect, device number 11 [ 41.755771][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 41.755802][ T36] audit: type=1400 audit(1793562180.570:428): avc: denied { setattr } for pid=1135 comm="syz.2.159" name="/" dev="configfs" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.820269][ T412] usb 1-1: USB disconnect, device number 10 [ 41.820752][ T311] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 41.833980][ T311] usb 1-1-port1: connect-debounce failed [ 42.106357][ T36] audit: type=1400 audit(1793562180.920:429): avc: denied { map } for pid=1142 comm="syz.1.160" path="pipe:[3237]" dev="pipefs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 42.137278][ T36] audit: type=1400 audit(1793562180.950:430): avc: denied { mount } for pid=1146 comm="syz.1.161" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.159560][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 42.159999][ T36] audit: type=1400 audit(1793562180.960:431): avc: denied { mount } for pid=1146 comm="syz.1.161" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.188728][ T36] audit: type=1400 audit(1793562180.960:432): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.208575][ T36] audit: type=1400 audit(1793562181.030:433): avc: denied { write } for pid=1150 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.319019][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.330103][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.343286][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.350376][ T9] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 42.355225][ T1161] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 42.359647][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.375234][ T1161] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 42.375540][ T9] usb 3-1: config 0 descriptor?? [ 42.415724][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.424002][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.430889][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.438920][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.445534][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.453726][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.460382][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.468496][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.475126][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.483189][ T412] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.490764][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.497326][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.499175][ T1168] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.506071][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.520645][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.528681][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.528885][ T1168] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.535272][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.549768][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.556578][ T1171] rust_binder: 1166:1171 error while translating object: EBADF [ 42.564332][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.572746][ T1171] rust_binder: 1166:1171 transaction call to 1166:0 failed EBADF, code 0 size 112-4280 line thread.rs:1060 [ 42.584196][ T1167] rust_binder: Read failure Err(EFAULT) in pid:192 [ 42.593777][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 42.600139][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 42.612634][ T9] usb 3-1: USB disconnect, device number 12 [ 42.667852][ T412] usb 2-1: Using ep0 maxpacket: 16 [ 42.674516][ T412] usb 2-1: unable to get BOS descriptor or descriptor too short [ 42.687849][ T412] usb 2-1: config 11 has an invalid interface number: 5 but max is 0 [ 42.695983][ T412] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 42.706215][ T412] usb 2-1: config 11 has no interface number 0 [ 42.712543][ T412] usb 2-1: config 11 interface 5 has no altsetting 0 [ 42.728948][ T412] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=f7.b9 [ 42.738227][ T412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.746275][ T412] usb 2-1: Product: syz [ 42.750633][ T412] usb 2-1: Manufacturer: syz [ 42.755290][ T412] usb 2-1: SerialNumber: syz [ 42.870518][ T388] rust_binder: 1166: undelivered TRANSACTION_ERROR: 29201 [ 42.885970][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 42.968372][ T412] usb 2-1: bad CDC descriptors [ 42.974910][ T412] usb 2-1: USB disconnect, device number 8 [ 43.134034][ T36] audit: type=1400 audit(1793562181.950:434): avc: denied { write } for pid=1182 comm="syz.2.174" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.156977][ T36] audit: type=1400 audit(1793562181.950:435): avc: denied { map } for pid=1182 comm="syz.2.174" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.361918][ T1191] capability: warning: `syz.3.177' uses 32-bit capabilities (legacy support in use) [ 43.467834][ T388] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 43.503411][ T1203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 43.526768][ T36] audit: type=1400 audit(1793562182.340:436): avc: denied { unlink } for pid=1206 comm="syz.1.183" name="#1" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.627894][ T388] usb 3-1: device descriptor read/64, error -71 [ 43.698850][ T1229] Unsupported ieee802154 address type: 0 [ 43.767053][ T1231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.190'. [ 43.820839][ T1240] x_tables: duplicate underflow at hook 1 [ 43.868215][ T388] usb 3-1: device descriptor read/64, error -71 [ 43.917833][ T311] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.047881][ T311] usb 2-1: device descriptor read/64, error -71 [ 44.107850][ T388] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 44.237854][ T388] usb 3-1: device descriptor read/64, error -71 [ 44.287857][ T311] usb 2-1: device descriptor read/64, error -71 [ 44.477826][ T388] usb 3-1: device descriptor read/64, error -71 [ 44.537902][ T311] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 44.588002][ T388] usb usb3-port1: attempt power cycle [ 44.667830][ T311] usb 2-1: device descriptor read/64, error -71 [ 44.767916][ T1019] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.907937][ T311] usb 2-1: device descriptor read/64, error -71 [ 44.927811][ T1019] usb 4-1: Using ep0 maxpacket: 16 [ 44.933008][ T388] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 44.944967][ T1019] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 44.954518][ T1019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.962838][ T1019] usb 4-1: Product: syz [ 44.967290][ T1019] usb 4-1: Manufacturer: syz [ 44.972331][ T1019] usb 4-1: SerialNumber: syz [ 44.977597][ T388] usb 3-1: device descriptor read/8, error -71 [ 44.978447][ T1276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.207'. [ 45.017918][ T311] usb usb2-port1: attempt power cycle [ 45.108761][ T388] usb 3-1: device descriptor read/8, error -71 [ 45.197399][ T1019] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 45.207125][ T1019] usb 4-1: USB disconnect, device number 10 [ 45.221103][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.237916][ T412] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.347910][ T388] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 45.358006][ T311] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 45.369040][ T388] usb 3-1: device descriptor read/8, error -71 [ 45.378983][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.408829][ T412] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 45.420133][ T412] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 45.433247][ T412] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 45.442347][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.450381][ T412] usb 1-1: Product: syz [ 45.454527][ T412] usb 1-1: Manufacturer: syz [ 45.459132][ T412] usb 1-1: SerialNumber: syz [ 45.498884][ T388] usb 3-1: device descriptor read/8, error -71 [ 45.508935][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.607941][ T388] usb usb3-port1: unable to enumerate USB device [ 45.664897][ T1277] futex_wake_op: syz.0.207 tries to shift op by 144; fix this program [ 45.673350][ T1277] futex_wake_op: syz.0.207 tries to shift op by 144; fix this program [ 45.684236][ T412] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 45.695073][ T412] usb 1-1: USB disconnect, device number 11 [ 45.707270][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.757867][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.778994][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.908844][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.957831][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 46.017947][ T311] usb usb2-port1: unable to enumerate USB device [ 46.107888][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 46.114426][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.122804][ T9] usb 4-1: config 179 has no interface number 0 [ 46.129153][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 46.140420][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 46.151959][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.164473][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 46.175973][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.189355][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 46.198476][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.210278][ T1280] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 46.213175][ T1282] netlink: 'syz.2.209': attribute type 27 has an invalid length. [ 46.299297][ T1300] FAULT_INJECTION: forcing a failure. [ 46.299297][ T1300] name failslab, interval 1, probability 0, space 0, times 0 [ 46.312058][ T1300] CPU: 1 UID: 0 PID: 1300 Comm: syz.0.215 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 46.312091][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.312103][ T1300] Call Trace: [ 46.312109][ T1300] [ 46.312116][ T1300] __dump_stack+0x21/0x30 [ 46.312139][ T1300] dump_stack_lvl+0x140/0x1c0 [ 46.312149][ T1300] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.312159][ T1300] ? avc_has_perm_noaudit+0x289/0x360 [ 46.312172][ T1300] dump_stack+0x19/0x20 [ 46.312181][ T1300] should_fail_ex+0x3c2/0x510 [ 46.312203][ T1300] should_failslab+0xac/0x100 [ 46.312223][ T1300] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 46.312248][ T1300] ? sock_alloc_inode+0x48/0x150 [ 46.312267][ T1300] sock_alloc_inode+0x48/0x150 [ 46.312283][ T1300] ? __cfi_sock_alloc_inode+0x10/0x10 [ 46.312294][ T1300] alloc_inode+0x7a/0x270 [ 46.312305][ T1300] ? bpf_lsm_socket_create+0xd/0x20 [ 46.312318][ T1300] new_inode_pseudo+0x19/0x40 [ 46.312329][ T1300] __sock_create+0x130/0x810 [ 46.312338][ T1300] ? __kasan_check_write+0x18/0x20 [ 46.312358][ T1300] __sys_socket+0xe1/0x1c0 [ 46.312376][ T1300] __x64_sys_socket+0x7e/0x90 [ 46.312395][ T1300] x64_sys_call+0x2608/0x2ee0 [ 46.312414][ T1300] do_syscall_64+0x57/0xf0 [ 46.312431][ T1300] ? clear_bhb_loop+0x50/0xa0 [ 46.312447][ T1300] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.312463][ T1300] RIP: 0033:0x7fbdc479f559 [ 46.312479][ T1300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.312491][ T1300] RSP: 002b:00007fbdc55df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 46.312511][ T1300] RAX: ffffffffffffffda RBX: 00007fbdc4a25fa0 RCX: 00007fbdc479f559 [ 46.312526][ T1300] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 46.312538][ T1300] RBP: 00007fbdc4836b50 R08: 0000000000000000 R09: 0000000000000000 [ 46.312551][ T1300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.312563][ T1300] R13: 00007fbdc4a26038 R14: 00007fbdc4a25fa0 R15: 00007ffd611803f8 [ 46.312579][ T1300] [ 46.312588][ T1300] socket: no more sockets [ 46.366801][ T1303] netlink: 'syz.2.214': attribute type 11 has an invalid length. [ 46.538942][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 46.626827][ T9] usb 4-1: USB disconnect, device number 11 [ 46.632825][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 46.632861][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 46.649772][ T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 46.697852][ T311] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 46.850017][ T311] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 46.859148][ T311] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 46.867213][ T311] usb 1-1: Product: syz [ 46.871601][ T311] usb 1-1: Manufacturer: syz [ 46.876208][ T311] usb 1-1: SerialNumber: syz [ 47.077825][ T412] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 47.086611][ T311] usb 1-1: Can't get UAC3 power state for id 10 [ 47.093945][ T311] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 47.103428][ T311] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 47.117923][ T311] usb 1-1: USB disconnect, device number 12 [ 47.136785][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.227887][ T412] usb 2-1: Using ep0 maxpacket: 16 [ 47.234156][ T412] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 47.236355][ T1315] kvm: pic: single mode not supported [ 47.242569][ T412] usb 2-1: config 0 has no interface number 0 [ 47.255692][ T412] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.266653][ T412] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.276497][ T412] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 47.285952][ T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.294763][ T412] usb 2-1: config 0 descriptor?? [ 47.303300][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 47.303314][ T36] audit: type=1400 audit(47.275:457): avc: denied { mount } for pid=1317 comm="syz.3.220" name="/" dev="ramfs" ino=8172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.377858][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 47.507817][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.627458][ T1323] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz.0.221: No space for directory leaf checksum. Please run e2fsck -D. [ 47.643170][ T1323] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz.0.221: Directory block failed checksum [ 47.672629][ T1328] fuse: Bad value for 'fd' [ 47.677125][ T36] audit: type=1400 audit(47.645:458): avc: denied { ioctl } for pid=1326 comm="syz.0.223" path="socket:[9755]" dev="sockfs" ino=9755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.747913][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.781312][ T36] audit: type=1400 audit(47.755:459): avc: denied { getopt } for pid=1332 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.786206][ T1333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 47.800877][ T36] audit: type=1400 audit(47.755:460): avc: denied { nlmsg_read } for pid=1332 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.902945][ T1351] drivers/android/binder/thread.rs:1771: 24 callbacks suppressed [ 47.902964][ T1351] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.904094][ T1354] rust_binder: 1350:1354 got transaction to invalid handle 1 [ 47.911423][ T1351] drivers/android/binder/thread.rs:1842: 24 callbacks suppressed [ 47.911439][ T1351] rust_binder: Read failure Err(EFAULT) in pid:201 [ 47.920928][ T412] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input10 [ 47.928560][ T1354] rust_binder: 1350:1354 transaction call to 0:0 failed ENOENT, code 0 size 0-18446744073709550963 line process.rs:958 [ 47.944981][ T412] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input11 [ 47.963238][ T1019] rust_binder: 1350: undelivered TRANSACTION_ERROR: 29201 [ 47.970139][ T1355] udevd[1355]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 47.993057][ T412] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 48.005238][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 48.131555][ T412] usb 2-1: USB disconnect, device number 13 [ 48.147943][ T9] usb 3-1: device descriptor read/64, error -71 [ 48.287861][ T1019] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 48.387878][ T9] usb 3-1: device descriptor read/64, error -71 [ 48.438922][ T1019] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.448818][ T1019] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.463275][ T1019] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 48.472440][ T1019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.481372][ T1019] usb 4-1: config 0 descriptor?? [ 48.497917][ T9] usb usb3-port1: attempt power cycle [ 48.520354][ T36] audit: type=1400 audit(48.495:461): avc: denied { setopt } for pid=1369 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.558782][ T36] audit: type=1400 audit(48.535:462): avc: denied { read write } for pid=1371 comm="syz.0.237" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.560249][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.583788][ T36] audit: type=1400 audit(48.535:463): avc: denied { open } for pid=1371 comm="syz.0.237" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.589189][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.618734][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.626129][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.634132][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.641667][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.649295][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.656713][ T412] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 48.663594][ T1374] syz.1.238 (1374): drop_caches: 0 [ 48.668699][ T1379] udevd[1379]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 48.678511][ T412] hid-generic 0000:0000:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 48.768365][ T36] audit: type=1400 audit(48.745:464): avc: denied { write } for pid=1380 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.857837][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 48.868188][ T311] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 48.879168][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.892638][ T1019] logitech 0003:046D:C50C.0005: unbalanced delimiter at end of report description [ 48.903294][ T1019] logitech 0003:046D:C50C.0005: parse failed [ 48.909563][ T1019] logitech 0003:046D:C50C.0005: probe with driver logitech failed with error -22 [ 49.008865][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.018919][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.029198][ T311] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 49.039738][ T311] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=a0.27 [ 49.048931][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.057045][ T311] usb 1-1: Product: syz [ 49.061259][ T311] usb 1-1: Manufacturer: syz [ 49.065897][ T311] usb 1-1: SerialNumber: syz [ 49.073267][ T311] usb 1-1: config 0 descriptor?? [ 49.095830][ T311] usb 4-1: USB disconnect, device number 12 [ 49.247819][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 49.269708][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.289513][ T412] usb 1-1: USB disconnect, device number 13 [ 49.340655][ T36] audit: type=1326 audit(49.315:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz.1.245" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6adf9f559 code=0x0 [ 49.399010][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.493313][ T36] audit: type=1400 audit(49.465:466): avc: denied { map } for pid=1410 comm="syz.1.246" path="/proc/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=8468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 49.518428][ T9] usb usb3-port1: unable to enumerate USB device [ 49.527380][ T1414] ./dev/sda1: Can't lookup blockdev [ 49.634172][ T1416] IPv6: Can't replace route, no match found [ 50.173348][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.179928][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.186479][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.193052][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.202463][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.209713][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.223240][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.230596][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.239344][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.246089][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.397856][ T1019] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 50.568956][ T1019] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 50.578246][ T1019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.587812][ T311] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 50.597890][ T1019] usb-storage 1-1:1.0: USB Mass Storage device detected [ 50.642439][ T1483] loop6: detected capacity change from 0 to 7 [ 50.650592][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.659043][ T1483] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.666954][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.675195][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.683376][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.691437][ T1483] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.713086][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.721153][ T1483] loop6: unable to read partition table [ 50.726854][ T1483] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 50.739424][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.747397][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.756140][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.756163][ T347] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.763273][ T1483] syzkaller1: entered promiscuous mode [ 50.777144][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.781244][ T1483] syzkaller1: entered allmulticast mode [ 50.803607][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.818517][ T311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.827876][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.837144][ T311] usb 3-1: config 0 descriptor?? [ 50.999800][ T1489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1489 comm=syz.3.267 [ 51.245108][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.267862][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.275443][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.282887][ T45] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 51.307861][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.317829][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.325300][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.332825][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.341849][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.349444][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.357082][ T1019] scsi host1: usb-storage 1-1:1.0 [ 51.362403][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.378736][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.386170][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.393861][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.401460][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.409091][ T311] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 51.416693][ T311] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 51.434708][ T311] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.447329][ T45] usb 4-1: device descriptor read/64, error -71 [ 51.455173][ T1491] udevd[1491]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 51.498587][ T412] usb 3-1: USB disconnect, device number 21 [ 51.697867][ T45] usb 4-1: device descriptor read/64, error -71 [ 51.937847][ T45] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 52.068722][ T45] usb 4-1: device descriptor read/64, error -71 [ 52.118323][ T1516] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 52.182882][ T1522] netlink: 288 bytes leftover after parsing attributes in process `syz.2.278'. [ 52.317806][ T45] usb 4-1: device descriptor read/64, error -71 [ 52.428386][ T45] usb usb4-port1: attempt power cycle [ 52.650280][ T388] usb 1-1: USB disconnect, device number 14 [ 52.778220][ T45] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 52.900276][ T45] usb 4-1: device descriptor read/8, error -71 [ 53.069451][ T45] usb 4-1: device descriptor read/8, error -71 [ 53.220536][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 53.220552][ T36] audit: type=1400 audit(53.195:480): avc: denied { connect } for pid=1547 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.286060][ T36] audit: type=1400 audit(53.225:481): avc: denied { read } for pid=1547 comm="syz.0.282" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.328598][ T45] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 53.361842][ T45] usb 4-1: device descriptor read/8, error -71 [ 53.425397][ T1578] hub 6-0:1.0: USB hub found [ 53.447833][ T388] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.456115][ T1578] hub 6-0:1.0: 1 port detected [ 53.498899][ T45] usb 4-1: device descriptor read/8, error -71 [ 53.539339][ T1585] kvm: MONITOR instruction emulated as NOP! [ 53.607934][ T45] usb usb4-port1: unable to enumerate USB device [ 53.615653][ T388] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 53.624684][ T388] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 53.635148][ T388] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 53.644636][ T388] usb 2-1: config 1 has no interface number 0 [ 53.650872][ T388] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 53.662367][ T388] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 53.676806][ T388] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.686080][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.694116][ T388] usb 2-1: Product: syz [ 53.698310][ T388] usb 2-1: Manufacturer: syz [ 53.702941][ T388] usb 2-1: SerialNumber: syz [ 53.709445][ T388] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 53.716417][ T388] cdc_ncm 2-1:1.1: bind() failure [ 53.767859][ T312] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 53.909687][ T1557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.917892][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 53.918291][ T1557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.924823][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.931253][ T1557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.939519][ T312] usb 3-1: config index 0 descriptor too short (expected 33852, got 60) [ 53.947076][ T1557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.956593][ T312] usb 3-1: config 145 has too many interfaces: 84, using maximum allowed: 32 [ 53.971837][ T312] usb 3-1: config 145 has an invalid descriptor of length 70, skipping remainder of the config [ 53.978268][ T1557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.983257][ T312] usb 3-1: config 145 has 0 interfaces, different from the descriptor's value: 84 [ 54.001824][ T1557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.011692][ T312] usb 3-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be [ 54.017904][ T1557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.021645][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.037618][ T312] usb 3-1: Product: syz [ 54.042046][ T312] usb 3-1: Manufacturer: syz [ 54.043127][ T1557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.049283][ T312] usb 3-1: SerialNumber: syz [ 54.060975][ T1557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.072347][ T1557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.084412][ T9] usb 2-1: USB disconnect, device number 14 [ 54.282748][ T312] usb 3-1: USB disconnect, device number 22 [ 54.333816][ T36] audit: type=1400 audit(54.305:482): avc: denied { bind } for pid=1601 comm="syz.0.290" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.354398][ T36] audit: type=1400 audit(54.305:483): avc: denied { name_bind } for pid=1601 comm="syz.0.290" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 54.375627][ T36] audit: type=1400 audit(54.305:484): avc: denied { node_bind } for pid=1601 comm="syz.0.290" saddr=172.20.20.17 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 54.402313][ T36] audit: type=1400 audit(54.305:485): avc: denied { ioctl } for pid=1601 comm="syz.0.290" path="socket:[12025]" dev="sockfs" ino=12025 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.426745][ T36] audit: type=1400 audit(54.305:486): avc: denied { mounton } for pid=1601 comm="syz.0.290" path="/97/trace/set_event" dev="tracefs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 54.478594][ T525] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.649011][ T36] audit: type=1400 audit(54.625:487): avc: denied { setopt } for pid=1617 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.150713][ T36] audit: type=1400 audit(55.125:488): avc: denied { create } for pid=1630 comm="syz.3.301" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.172844][ T36] audit: type=1400 audit(55.145:489): avc: denied { mounton } for pid=1630 comm="syz.3.301" path="/80/file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.728834][ T1649] FAULT_INJECTION: forcing a failure. [ 55.728834][ T1649] name failslab, interval 1, probability 0, space 0, times 0 [ 55.741634][ T1649] CPU: 0 UID: 0 PID: 1649 Comm: syz.2.305 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 55.741665][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.741678][ T1649] Call Trace: [ 55.741685][ T1649] [ 55.741693][ T1649] __dump_stack+0x21/0x30 [ 55.741718][ T1649] dump_stack_lvl+0x140/0x1c0 [ 55.741738][ T1649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.741757][ T1649] ? mas_prev+0x5f/0xa0 [ 55.741782][ T1649] dump_stack+0x19/0x20 [ 55.741800][ T1649] should_fail_ex+0x3c2/0x510 [ 55.741828][ T1649] should_failslab+0xac/0x100 [ 55.741849][ T1649] kmem_cache_alloc_noprof+0x42/0x410 [ 55.741876][ T1649] ? __pte_alloc+0x1ae/0x440 [ 55.741902][ T1649] ? __anon_vma_prepare+0xec/0x590 [ 55.741929][ T1649] __anon_vma_prepare+0xec/0x590 [ 55.741956][ T1649] do_pte_missing+0x2bbf/0x4440 [ 55.741977][ T1649] ? __kasan_check_write+0x18/0x20 [ 55.742004][ T1649] ? _raw_spin_lock+0x92/0x120 [ 55.742022][ T1649] ? __cfi__raw_spin_lock+0x10/0x10 [ 55.742047][ T1649] ? pte_marker_clear+0x1b0/0x1b0 [ 55.742078][ T1649] ? __pmd_alloc+0x5a6/0x9a0 [ 55.742098][ T1649] ? __vma_start_write+0x110/0x110 [ 55.742117][ T1649] ? __cfi___pmd_alloc+0x10/0x10 [ 55.742142][ T1649] ? vms_complete_munmap_vmas+0x2a6/0x820 [ 55.742172][ T1649] handle_mm_fault+0x1189/0x1ba0 [ 55.742195][ T1649] ? __cfi_handle_mm_fault+0x10/0x10 [ 55.742220][ T1649] ? __cfi_find_vma+0x10/0x10 [ 55.742246][ T1649] ? vma_is_secretmem+0x11/0x50 [ 55.742270][ T1649] ? check_vma_flags+0x36d/0x3a0 [ 55.742293][ T1649] __get_user_pages+0x114b/0x22d0 [ 55.742323][ T1649] ? populate_vma_page_range+0x220/0x220 [ 55.742344][ T1649] ? down_read+0x7f/0xe0 [ 55.742368][ T1649] ? __cfi_down_read+0x10/0x10 [ 55.742392][ T1649] ? __cfi_do_mmap+0x10/0x10 [ 55.742417][ T1649] __mm_populate+0x300/0x440 [ 55.742439][ T1649] vm_mmap_pgoff+0x426/0x4b0 [ 55.742465][ T1649] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 55.742492][ T1649] ? xfd_validate_state+0x68/0x140 [ 55.742520][ T1649] ksys_mmap_pgoff+0xfa/0x1e0 [ 55.742546][ T1649] ? __kasan_check_write+0x18/0x20 [ 55.742571][ T1649] __x64_sys_mmap+0x121/0x140 [ 55.742593][ T1649] x64_sys_call+0x13bf/0x2ee0 [ 55.742613][ T1649] do_syscall_64+0x57/0xf0 [ 55.742630][ T1649] ? clear_bhb_loop+0x50/0xa0 [ 55.742650][ T1649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.742671][ T1649] RIP: 0033:0x7f696939f559 [ 55.742688][ T1649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.742704][ T1649] RSP: 002b:00007f696a30f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 55.742723][ T1649] RAX: ffffffffffffffda RBX: 00007f6969625fa0 RCX: 00007f696939f559 [ 55.742737][ T1649] RDX: 0000000000000002 RSI: 0000000000000007 RDI: 00007fffffffb000 [ 55.742750][ T1649] RBP: 00007f6969436b50 R08: ffffffffffffffff R09: 0000000008000000 [ 55.742763][ T1649] R10: bd4c341840b03bf2 R11: 0000000000000246 R12: 0000000000000000 [ 55.742776][ T1649] R13: 00007f6969626038 R14: 00007f6969625fa0 R15: 00007fff7100d128 [ 55.742792][ T1649] [ 56.120057][ T1661] usb usb1: usbfs: process 1661 (syz.3.306) did not claim interface 7 before use [ 56.547852][ T367] Bluetooth: hci0: command 0x1003 tx timeout [ 56.548053][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.777216][ T1711] vlan1: entered promiscuous mode [ 56.782785][ T1711] vlan1: entered allmulticast mode [ 56.788019][ T1711] veth0_vlan: entered allmulticast mode [ 57.294130][ T1728] FAULT_INJECTION: forcing a failure. [ 57.294130][ T1728] name failslab, interval 1, probability 0, space 0, times 0 [ 57.307013][ T1728] CPU: 1 UID: 0 PID: 1728 Comm: syz.2.324 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 57.307047][ T1728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 57.307060][ T1728] Call Trace: [ 57.307064][ T1728] [ 57.307070][ T1728] __dump_stack+0x21/0x30 [ 57.307085][ T1728] dump_stack_lvl+0x140/0x1c0 [ 57.307095][ T1728] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.307105][ T1728] ? do_syscall_64+0x57/0xf0 [ 57.307117][ T1728] dump_stack+0x19/0x20 [ 57.307126][ T1728] should_fail_ex+0x3c2/0x510 [ 57.307142][ T1728] should_failslab+0xac/0x100 [ 57.307153][ T1728] __kmalloc_cache_node_noprof+0x46/0x430 [ 57.307168][ T1728] ? init_rescuer+0x149/0x5c0 [ 57.307180][ T1728] init_rescuer+0x149/0x5c0 [ 57.307190][ T1728] ? bh_pool_irq_work+0x150/0x150 [ 57.307201][ T1728] ? __cfi_mutex_unlock+0x10/0x10 [ 57.307212][ T1728] ? wq_adjust_max_active+0x148/0x7e0 [ 57.307223][ T1728] alloc_workqueue+0x107b/0x1ca0 [ 57.307234][ T1728] ? __cfi_alloc_workqueue+0x10/0x10 [ 57.307244][ T1728] ? init_srcu_struct_fields+0x74f/0xac0 [ 57.307258][ T1728] dm_create+0xa1b/0xf10 [ 57.307269][ T1728] dev_create+0x1f8/0x400 [ 57.307282][ T1728] ? __cfi_dev_create+0x10/0x10 [ 57.307294][ T1728] ? __cfi_dev_create+0x10/0x10 [ 57.307305][ T1728] ? __cfi_dev_create+0x10/0x10 [ 57.307317][ T1728] ? __kasan_check_write+0x18/0x20 [ 57.307330][ T1728] ? __cfi_dev_create+0x10/0x10 [ 57.307342][ T1728] dm_ctl_ioctl+0x8f3/0xde0 [ 57.307355][ T1728] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 57.307369][ T1728] ? __fget_files+0x2bc/0x330 [ 57.307379][ T1728] ? bpf_lsm_file_ioctl+0xd/0x20 [ 57.307390][ T1728] ? security_file_ioctl+0x3e/0x110 [ 57.307404][ T1728] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 57.307416][ T1728] __se_sys_ioctl+0x126/0x1b0 [ 57.307426][ T1728] __x64_sys_ioctl+0x7f/0xa0 [ 57.307435][ T1728] x64_sys_call+0x1878/0x2ee0 [ 57.307446][ T1728] do_syscall_64+0x57/0xf0 [ 57.307455][ T1728] ? clear_bhb_loop+0x50/0xa0 [ 57.307468][ T1728] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.307480][ T1728] RIP: 0033:0x7f696939f559 [ 57.307491][ T1728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.307500][ T1728] RSP: 002b:00007f696a30f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.307512][ T1728] RAX: ffffffffffffffda RBX: 00007f6969625fa0 RCX: 00007f696939f559 [ 57.307520][ T1728] RDX: 0000200000000180 RSI: 00000000c138fd03 RDI: 0000000000000011 [ 57.307533][ T1728] RBP: 00007f6969436b50 R08: 0000000000000000 R09: 0000000000000000 [ 57.307541][ T1728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.307548][ T1728] R13: 00007f6969626038 R14: 00007f6969625fa0 R15: 00007fff7100d128 [ 57.307558][ T1728] [ 57.307563][ T1728] workqueue: Failed to allocate a rescuer for wq "kdmflush/252:1" [ 57.717859][ T388] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.847825][ T388] usb 2-1: device descriptor read/64, error -71 [ 57.880913][ T1750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1750 comm=syz.0.330 [ 57.893789][ T1750] netlink: 80 bytes leftover after parsing attributes in process `syz.0.330'. [ 57.917857][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 58.068926][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.079834][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.090105][ T388] usb 2-1: device descriptor read/64, error -71 [ 58.097147][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.107311][ T45] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 58.116381][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.124949][ T45] usb 3-1: config 0 descriptor?? [ 58.130705][ T45] usb 3-1: bad CDC descriptors [ 58.327855][ T388] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 58.467843][ T388] usb 2-1: device descriptor read/64, error -71 [ 58.728040][ T388] usb 2-1: device descriptor read/64, error -71 [ 58.849071][ T388] usb usb2-port1: attempt power cycle [ 59.207851][ T388] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.228931][ T388] usb 2-1: device descriptor read/8, error -71 [ 59.379714][ T388] usb 2-1: device descriptor read/8, error -71 [ 59.552185][ T412] rust_binder: 1765: undelivered TRANSACTION_ERROR: 29189 [ 59.617943][ T388] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 59.631689][ T1772] bridge: RTM_NEWNEIGH with invalid ether address [ 59.658815][ T388] usb 2-1: device descriptor read/8, error -71 [ 59.798862][ T388] usb 2-1: device descriptor read/8, error -71 [ 59.839289][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 59.839307][ T36] audit: type=1400 audit(59.815:498): avc: denied { getopt } for pid=1778 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.887878][ T412] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 59.918035][ T388] usb usb2-port1: unable to enumerate USB device [ 60.049255][ T412] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.058143][ T412] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.069802][ T412] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 60.079229][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 60.087306][ T412] usb 4-1: Product: syz [ 60.091886][ T412] usb 4-1: Manufacturer: syz [ 60.103184][ T412] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 60.117867][ T312] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 60.247838][ T312] usb 1-1: device descriptor read/64, error -71 [ 60.487888][ T312] usb 1-1: device descriptor read/64, error -71 [ 60.503765][ T412] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 60.577236][ T1782] udevd[1782]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video1': Exec format error [ 60.588196][ T1783] udevd[1783]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video0': Exec format error [ 60.677830][ T1159] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 60.713399][ T388] usb 3-1: USB disconnect, device number 23 [ 60.722516][ T45] usb 4-1: USB disconnect, device number 17 [ 60.737842][ T312] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 60.797591][ T36] audit: type=1400 audit(60.765:499): avc: denied { getopt } for pid=1787 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.816683][ T36] audit: type=1400 audit(60.765:500): avc: denied { lock } for pid=1787 comm="syz.2.341" path="socket:[14542]" dev="sockfs" ino=14542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.867923][ T312] usb 1-1: device descriptor read/64, error -71 [ 60.874248][ T1159] usb 2-1: Using ep0 maxpacket: 32 [ 60.880485][ T1159] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 60.888689][ T1159] usb 2-1: config 0 has no interface number 0 [ 60.894774][ T1159] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 60.909100][ T1159] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 60.918197][ T1159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.926226][ T1159] usb 2-1: Product: syz [ 60.930436][ T1159] usb 2-1: Manufacturer: syz [ 60.935034][ T1159] usb 2-1: SerialNumber: syz [ 60.940266][ T1159] usb 2-1: config 0 descriptor?? [ 60.945458][ T1781] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.117858][ T312] usb 1-1: device descriptor read/64, error -71 [ 61.153316][ T1781] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.227939][ T312] usb usb1-port1: attempt power cycle [ 61.248187][ T1803] netlink: 288 bytes leftover after parsing attributes in process `syz.3.344'. [ 61.577831][ T312] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 61.598812][ T312] usb 1-1: device descriptor read/8, error -71 [ 61.728914][ T312] usb 1-1: device descriptor read/8, error -71 [ 61.987851][ T312] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 62.008934][ T312] usb 1-1: device descriptor read/8, error -71 [ 62.138783][ T312] usb 1-1: device descriptor read/8, error -71 [ 62.187834][ T412] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 62.251913][ T312] usb usb1-port1: unable to enumerate USB device [ 62.337911][ T412] usb 3-1: Using ep0 maxpacket: 16 [ 62.344453][ T412] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.352864][ T412] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 193, changing to 7 [ 62.365677][ T412] usb 3-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 62.374833][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.382995][ T412] usb 3-1: Product: syz [ 62.387446][ T412] usb 3-1: Manufacturer: syz [ 62.392678][ T412] usb 3-1: SerialNumber: syz [ 62.518540][ T36] audit: type=1400 audit(62.495:501): avc: denied { map } for pid=1832 comm="syz.3.353" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.602016][ T412] usb 3-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 62.610509][ T412] usb 3-1: found format II with max.bitrate = 0, frame size=37623 [ 62.618411][ T412] usb 3-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 62.627032][ T412] usb 3-1: found format II with max.bitrate = 0, frame size=37623 [ 62.635613][ T412] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 62.646646][ T412] usb 3-1: USB disconnect, device number 24 [ 62.656660][ T566] udevd[566]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.247838][ T412] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 63.347834][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 63.409975][ T1159] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 63.420369][ T1159] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 63.432196][ T1159] asix 2-1:0.188: probe with driver asix failed with error -71 [ 63.441528][ T412] usb 1-1: config 1 has too many interfaces: 34, using maximum allowed: 32 [ 63.450179][ T412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.460504][ T1159] usb 2-1: USB disconnect, device number 19 [ 63.467055][ T412] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 34 [ 63.476751][ T412] usb 1-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 63.485833][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.500608][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.509563][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 63.520549][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.535104][ T45] usb 3-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 63.544357][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.552543][ T45] usb 3-1: Product: syz [ 63.556799][ T45] usb 3-1: Manufacturer: syz [ 63.561675][ T45] usb 3-1: SerialNumber: syz [ 63.567309][ T1841] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 63.778429][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 63.788186][ T45] usb 3-1: USB disconnect, device number 25 [ 63.816180][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.947363][ T1848] kvm_intel: kvm [1847]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 64.209940][ T45] usb 1-1: USB disconnect, device number 19 [ 64.307852][ T1159] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 64.341087][ T1873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.356656][ T36] audit: type=1400 audit(64.305:502): avc: denied { mounton } for pid=1860 comm="syz.0.363" path="/116/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 64.364990][ T1873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.402753][ T1880] rust_binder: 1879:1880 no such ref 2 [ 64.458920][ T1159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.470032][ T1159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.479970][ T1159] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 64.492551][ T1891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1891 comm=syz.3.371 [ 64.492942][ T1159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.506336][ T36] audit: type=1400 audit(64.485:503): avc: denied { accept } for pid=1890 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.514317][ T1159] usb 2-1: config 0 descriptor?? [ 64.536833][ T1891] netlink: 216 bytes leftover after parsing attributes in process `syz.3.371'. [ 64.597809][ T412] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 64.623200][ T36] audit: type=1400 audit(64.595:504): avc: denied { mounton } for pid=1902 comm="syz.3.375" path="/106/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 64.749223][ T412] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 64.757306][ T412] usb 3-1: config 1 has no interface number 0 [ 64.765725][ T412] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 64.777088][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.785466][ T412] usb 3-1: Product: syz [ 64.789772][ T412] usb 3-1: Manufacturer: syz [ 64.794446][ T412] usb 3-1: SerialNumber: syz [ 64.951052][ T1159] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 64.963411][ T1916] udevd[1916]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 64.972845][ T36] audit: type=1400 audit(64.945:505): avc: denied { ioctl } for pid=1914 comm="syz.0.379" path="socket:[15436]" dev="sockfs" ino=15436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.011636][ T412] usb 3-1: 3:1 : does not exist [ 65.016737][ T412] usb 3-1: 3:2 : does not exist [ 65.024798][ T412] usb 3-1: USB disconnect, device number 26 [ 65.043844][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.208264][ T412] usb 2-1: USB disconnect, device number 20 [ 65.757866][ T1019] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 65.771370][ T1928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.841451][ T1931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 65.957836][ T1019] usb 3-1: Using ep0 maxpacket: 8 [ 65.964460][ T1019] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.974196][ T1019] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 65.983378][ T1019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.991422][ T1019] usb 3-1: Product: syz [ 65.995788][ T1019] usb 3-1: Manufacturer: syz [ 66.000563][ T1019] usb 3-1: SerialNumber: syz [ 66.137826][ T45] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 66.253360][ T1940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=51 sclass=netlink_xfrm_socket pid=1940 comm=syz.1.388 [ 66.266682][ T36] audit: type=1400 audit(66.235:506): avc: denied { create } for pid=1939 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.314532][ T45] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 66.325601][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.351175][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.370144][ T1950] kvm: Disabled LAPIC found during irq injection [ 66.372388][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 66.377140][ T1950] ÿÿÿÿÿÿ: renamed from bridge0 (while UP) [ 66.401391][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.402312][ T1952] FAULT_INJECTION: forcing a failure. [ 66.402312][ T1952] name failslab, interval 1, probability 0, space 0, times 0 [ 66.420673][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.423728][ T1952] CPU: 0 UID: 0 PID: 1952 Comm: syz.3.391 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 66.423757][ T1952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.423770][ T1952] Call Trace: [ 66.423777][ T1952] [ 66.423784][ T1952] __dump_stack+0x21/0x30 [ 66.423807][ T1952] dump_stack_lvl+0x140/0x1c0 [ 66.423825][ T1952] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.423844][ T1952] dump_stack+0x19/0x20 [ 66.423859][ T1952] should_fail_ex+0x3c2/0x510 [ 66.423885][ T1952] should_failslab+0xac/0x100 [ 66.423904][ T1952] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 66.423931][ T1952] ? kstrdup_const+0x45/0x60 [ 66.423952][ T1952] ? __kasan_check_write+0x18/0x20 [ 66.423976][ T1952] ? _raw_spin_lock+0x92/0x120 [ 66.423993][ T1952] kstrdup+0x4d/0x130 [ 66.424014][ T1952] ? kstrdup_const+0x3a/0x60 [ 66.424035][ T1952] kstrdup_const+0x45/0x60 [ 66.424056][ T1952] __kernfs_new_node+0xaa/0x740 [ 66.424077][ T1952] ? kernfs_new_node+0x280/0x280 [ 66.424098][ T1952] ? snprintf+0xe9/0x140 [ 66.424125][ T1952] kernfs_new_node+0x154/0x280 [ 66.424145][ T1952] __kernfs_create_file+0x52/0x280 [ 66.424168][ T1952] cgroup_addrm_files+0x775/0xac0 [ 66.424190][ T1952] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 66.424210][ T1952] ? delete_node+0x3df/0xa60 [ 66.424230][ T1952] ? idr_replace+0x137/0x1b0 [ 66.424254][ T1952] ? __cfi_idr_replace+0x10/0x10 [ 66.424288][ T1952] ? _raw_spin_lock_bh+0x96/0x130 [ 66.424307][ T1952] css_populate_dir+0x12d/0x3d0 [ 66.424333][ T1952] cgroup_apply_control_enable+0x62f/0xce0 [ 66.424355][ T1952] cgroup_mkdir+0x11f8/0x1590 [ 66.424375][ T1952] ? __cfi_cgroup_mkdir+0x10/0x10 [ 66.424392][ T1952] kernfs_iop_mkdir+0x1be/0x2d0 [ 66.424412][ T1952] vfs_mkdir+0x591/0x810 [ 66.424434][ T1952] do_mkdirat+0x240/0x530 [ 66.424455][ T1952] ? __cfi_do_mkdirat+0x10/0x10 [ 66.424480][ T1952] ? __kasan_check_write+0x18/0x20 [ 66.424504][ T1952] ? getname_flags+0x203/0x6b0 [ 66.424521][ T1952] ? __kasan_check_write+0x18/0x20 [ 66.424546][ T1952] __x64_sys_mkdirat+0x8b/0xa0 [ 66.424569][ T1952] x64_sys_call+0x2ba8/0x2ee0 [ 66.424589][ T1952] do_syscall_64+0x57/0xf0 [ 66.424606][ T1952] ? clear_bhb_loop+0x50/0xa0 [ 66.424629][ T1952] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.424651][ T1952] RIP: 0033:0x7f354cb9f559 [ 66.424667][ T1952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.424682][ T1952] RSP: 002b:00007f354daf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 66.424702][ T1952] RAX: ffffffffffffffda RBX: 00007f354ce25fa0 RCX: 00007f354cb9f559 [ 66.424717][ T1952] RDX: 00000000000001ff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 66.424730][ T1952] RBP: 00007f354cc36b50 R08: 0000000000000000 R09: 0000000000000000 [ 66.424742][ T1952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.424754][ T1952] R13: 00007f354ce26038 R14: 00007f354ce25fa0 R15: 00007ffe2f79bd78 [ 66.424769][ T1952] [ 66.424777][ T1952] cgroup: cgroup_addrm_files: failed to add usage_percpu_user, err=-12 [ 66.445300][ T45] usb 1-1: SerialNumber: syz [ 66.947203][ T1934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.957155][ T1934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.968127][ T45] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 66.985540][ T45] usb 1-1: USB disconnect, device number 20 [ 67.007829][ T1159] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 67.137831][ T1159] usb 4-1: device descriptor read/64, error -71 [ 67.235334][ T36] audit: type=1400 audit(67.205:507): avc: denied { create } for pid=1958 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 67.387819][ T1159] usb 4-1: device descriptor read/64, error -71 [ 67.627857][ T1159] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 67.727828][ T412] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 67.757815][ T1159] usb 4-1: device descriptor read/64, error -71 [ 67.877839][ T412] usb 1-1: Using ep0 maxpacket: 32 [ 67.884114][ T412] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 67.892530][ T412] usb 1-1: config 0 has no interface number 0 [ 67.898741][ T412] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 67.910218][ T412] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 67.919402][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.927469][ T412] usb 1-1: Product: syz [ 67.931666][ T412] usb 1-1: Manufacturer: syz [ 67.936274][ T412] usb 1-1: SerialNumber: syz [ 67.941899][ T412] usb 1-1: config 0 descriptor?? [ 67.947154][ T1962] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.007827][ T1159] usb 4-1: device descriptor read/64, error -71 [ 68.117928][ T1159] usb usb4-port1: attempt power cycle [ 68.155158][ T1962] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.363049][ T412] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 68.373281][ T412] asix 1-1:0.188: probe with driver asix failed with error -61 [ 68.457828][ T1159] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 68.478869][ T1159] usb 4-1: device descriptor read/8, error -71 [ 68.552126][ T1019] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 68.559395][ T1019] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 68.574883][ T1019] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 68.586597][ T1019] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.598277][ T1019] usb 3-1: USB disconnect, device number 27 [ 68.609436][ T1159] usb 4-1: device descriptor read/8, error -71 [ 68.610544][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.720157][ T1982] overlayfs: workdir and upperdir must be separate subtrees [ 68.790443][ T1986] kvm: pic: non byte read [ 68.795451][ T1986] kvm: pic: non byte read [ 68.867834][ T1159] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 68.908835][ T1159] usb 4-1: device descriptor read/8, error -71 [ 68.909438][ T1986] kvm: pic: single mode not supported [ 68.915166][ T1986] kvm: pic: non byte read [ 69.038873][ T1159] usb 4-1: device descriptor read/8, error -71 [ 69.052843][ T1994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 69.160730][ T36] audit: type=1400 audit(69.135:508): avc: denied { write } for pid=2004 comm="syz.1.409" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 69.167858][ T1159] usb usb4-port1: unable to enumerate USB device [ 69.590762][ T2012] mmap: syz.2.411 (2012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.798774][ T2022] input: syz0 as /devices/virtual/input/input13 [ 69.936625][ T2035] veth0: entered promiscuous mode [ 69.947938][ T2035] veth0: left promiscuous mode [ 70.177824][ T1159] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 70.338268][ T1159] usb 4-1: too many configurations: 243, using maximum allowed: 8 [ 70.347516][ T1159] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 70.355265][ T1159] usb 4-1: can't read configurations, error -61 [ 70.493146][ T1159] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 70.504373][ T312] usb 1-1: USB disconnect, device number 21 [ 70.560978][ T2045] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 70.569376][ T2045] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 70.577516][ T2045] kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 70.585784][ T2045] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 70.593856][ T2045] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 70.607917][ T2045] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 70.615902][ T2045] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 70.624188][ T2045] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 70.632396][ T2045] kvm: requested 68723 ns i8254 timer period limited to 200000 ns [ 70.640398][ T2045] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 70.668610][ T1159] usb 4-1: too many configurations: 243, using maximum allowed: 8 [ 70.677556][ T1159] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 70.688006][ T1159] usb 4-1: can't read configurations, error -61 [ 70.694504][ T1159] usb usb4-port1: attempt power cycle [ 70.773936][ T2052] netlink: 'syz.2.423': attribute type 11 has an invalid length. [ 70.810806][ T36] audit: type=1400 audit(70.785:509): avc: denied { append } for pid=2055 comm="syz.0.425" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.836153][ T36] audit: type=1400 audit(70.815:510): avc: denied { map } for pid=2055 comm="syz.0.425" path="socket:[16846]" dev="sockfs" ino=16846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 70.859078][ T36] audit: type=1400 audit(70.815:511): avc: denied { accept } for pid=2055 comm="syz.0.425" path="socket:[16846]" dev="sockfs" ino=16846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 70.865214][ T2054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 70.924776][ T2067] bridge0: port 3(veth1_to_bond) entered blocking state [ 70.931821][ T2067] bridge0: port 3(veth1_to_bond) entered disabled state [ 70.938927][ T2067] veth1_to_bond: entered allmulticast mode [ 70.945144][ T2067] veth1_to_bond: entered promiscuous mode [ 71.037908][ T1159] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 71.059586][ T1159] usb 4-1: too many configurations: 243, using maximum allowed: 8 [ 71.068636][ T1159] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 71.076239][ T1159] usb 4-1: can't read configurations, error -61 [ 71.135143][ T2078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.433'. [ 71.145469][ T2078] netlink: 'syz.1.433': attribute type 17 has an invalid length. [ 71.153430][ T2078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.433'. [ 71.162510][ T2078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 71.188017][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 71.201874][ T2080] netlink: 368 bytes leftover after parsing attributes in process `syz.1.433'. [ 71.211109][ T1159] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 71.218819][ T2079] netlink: 368 bytes leftover after parsing attributes in process `syz.1.433'. [ 71.249131][ T1159] usb 4-1: too many configurations: 243, using maximum allowed: 8 [ 71.259560][ T1159] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 71.267166][ T1159] usb 4-1: can't read configurations, error -61 [ 71.277786][ T1159] usb usb4-port1: unable to enumerate USB device [ 71.328293][ T36] audit: type=1400 audit(71.305:512): avc: denied { read } for pid=2081 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.358814][ T45] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 71.366868][ T45] usb 3-1: config 1 has no interface number 0 [ 71.378945][ T45] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 71.388176][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.396170][ T45] usb 3-1: Product: syz [ 71.400399][ T45] usb 3-1: Manufacturer: syz [ 71.405281][ T45] usb 3-1: SerialNumber: syz [ 71.530060][ T2090] x_tables: unsorted entry at hook 2 [ 71.616491][ T36] audit: type=1400 audit(71.585:513): avc: denied { write } for pid=2053 comm="syz.2.424" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.637587][ T36] audit: type=1400 audit(71.585:514): avc: denied { remove_name } for pid=2053 comm="syz.2.424" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.661475][ T36] audit: type=1400 audit(71.585:515): avc: denied { unlink } for pid=2053 comm="syz.2.424" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.697925][ T36] audit: type=1400 audit(71.675:516): avc: denied { ioctl } for pid=2094 comm="syz.0.438" path="socket:[17027]" dev="sockfs" ino=17027 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.726507][ T45] usb 3-1: 3:1 : does not exist [ 71.735877][ T45] usb 3-1: 3:2 : does not exist [ 71.748278][ T45] usb 3-1: USB disconnect, device number 28 [ 71.761401][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.777855][ T1159] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 71.917387][ T36] audit: type=1400 audit(71.885:517): avc: denied { mounton } for pid=2106 comm="syz.0.442" path="/138/file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 71.940281][ T1159] usb 2-1: Using ep0 maxpacket: 32 [ 71.946347][ T1159] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 71.954475][ T1159] usb 2-1: config 0 has no interface number 0 [ 71.962042][ T1159] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 71.971129][ T1159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.979447][ T1159] usb 2-1: Product: syz [ 71.983632][ T1159] usb 2-1: Manufacturer: syz [ 71.988372][ T1159] usb 2-1: SerialNumber: syz [ 71.993518][ T1159] usb 2-1: config 0 descriptor?? [ 71.999300][ T1159] smsc95xx v2.0.0 [ 72.078148][ T2108] incfs: Error accessing: ./file0. [ 72.083327][ T2108] incfs: mount failed -20 [ 72.319865][ T2113] overlayfs: overlapping lowerdir path [ 72.400259][ T1159] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 72.411961][ T1159] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 72.421934][ T1159] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 72.432966][ T1159] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 72.442558][ T1159] usb 2-1: USB disconnect, device number 21 [ 72.567829][ T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 72.717823][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 72.723985][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.732210][ T45] usb 3-1: config 0 has no interface number 0 [ 72.738335][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 72.746443][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 72.755538][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.763536][ T45] usb 3-1: Product: syz [ 72.767672][ T45] usb 3-1: Manufacturer: syz [ 72.772296][ T45] usb 3-1: SerialNumber: syz [ 72.777434][ T45] usb 3-1: config 0 descriptor?? [ 72.783113][ T45] smsc75xx v1.0.0 [ 72.816016][ T36] audit: type=1400 audit(72.785:518): avc: denied { setattr } for pid=2121 comm="syz.0.447" name="NETLINK" dev="sockfs" ino=17762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.988832][ T2136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3295733332 (13182933328 ns) > initial count (5512080720 ns). Using initial count to start timer. [ 73.384518][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 73.395567][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 73.987892][ T1019] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 74.035912][ T2175] can0: slcan on ttyS3. [ 74.089575][ T2176] can0 (unregistered): slcan off ttyS3. [ 74.138883][ T1019] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.150011][ T1019] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 74.162096][ T1019] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.171524][ T1019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.185337][ T1019] usb 1-1: Product: syz [ 74.189724][ T1019] usb 1-1: Manufacturer: syz [ 74.194389][ T1019] usb 1-1: SerialNumber: syz [ 74.202696][ T1019] cdc_mbim 1-1:1.0: skipping garbage [ 74.209173][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 74.220249][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 74.230412][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 74.240112][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 74.337815][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 74.401989][ T2166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.487831][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 74.493960][ T31] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.505128][ T31] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.518439][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.525045][ T31] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 74.534097][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.542728][ T31] usb 4-1: config 0 descriptor?? [ 74.772347][ T2212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.780921][ T2212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.949867][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.958465][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.969111][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.977968][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.987061][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.995640][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.006014][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.011508][ T2166] FAULT_INJECTION: forcing a failure. [ 75.011508][ T2166] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.013532][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.026560][ T2166] CPU: 0 UID: 0 PID: 2166 Comm: syz.0.462 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 75.026592][ T2166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.026605][ T2166] Call Trace: [ 75.026613][ T2166] [ 75.026622][ T2166] __dump_stack+0x21/0x30 [ 75.026647][ T2166] dump_stack_lvl+0x140/0x1c0 [ 75.026665][ T2166] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.026684][ T2166] dump_stack+0x19/0x20 [ 75.026701][ T2166] should_fail_ex+0x3c2/0x510 [ 75.026729][ T2166] should_fail+0xf/0x20 [ 75.026752][ T2166] should_fail_usercopy+0x1e/0x30 [ 75.026770][ T2166] strncpy_from_user+0x29/0x280 [ 75.026796][ T2166] getname_flags+0x106/0x6b0 [ 75.026812][ T2166] ? memdup_user+0xb1/0x170 [ 75.026834][ T2166] user_path_at+0x2b/0x60 [ 75.026853][ T2166] __se_sys_mount+0x28a/0x480 [ 75.026879][ T2166] ? __x64_sys_mount+0xf0/0xf0 [ 75.026904][ T2166] ? __kasan_check_write+0x18/0x20 [ 75.026929][ T2166] ? fpregs_restore_userregs+0x11c/0x260 [ 75.026953][ T2166] __x64_sys_mount+0xc3/0xf0 [ 75.026978][ T2166] x64_sys_call+0x2021/0x2ee0 [ 75.026997][ T2166] do_syscall_64+0x57/0xf0 [ 75.027014][ T2166] ? clear_bhb_loop+0x50/0xa0 [ 75.027037][ T2166] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.027059][ T2166] RIP: 0033:0x7fbdc479f559 [ 75.027075][ T2166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.027090][ T2166] RSP: 002b:00007fbdc55df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.027111][ T2166] RAX: ffffffffffffffda RBX: 00007fbdc4a25fa0 RCX: 00007fbdc479f559 [ 75.027125][ T2166] RDX: 0000200000002180 RSI: 0000200000002140 RDI: 0000200000002000 [ 75.027140][ T2166] RBP: 00007fbdc4836b50 R08: 0000000000000000 R09: 0000000000000000 [ 75.027152][ T2166] R10: 0000000000000401 R11: 0000000000000246 R12: 0000000000000000 [ 75.027164][ T2166] R13: 00007fbdc4a26038 R14: 00007fbdc4a25fa0 R15: 00007ffd611803f8 [ 75.027180][ T2166] [ 75.236229][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.243750][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.250986][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.258171][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.265330][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.272844][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.280201][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.289047][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.296519][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.303838][ T1019] cdc_mbim 1-1:1.0: bind() failure [ 75.309133][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.316262][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.324046][ T1019] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 75.330998][ T1019] cdc_ncm 1-1:1.1: bind() failure [ 75.337092][ T1019] usb 1-1: USB disconnect, device number 22 [ 75.343075][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 75.351216][ T31] kovaplus 0003:1E7D:2D50.0008: unbalanced collection at end of report description [ 75.361197][ T31] kovaplus 0003:1E7D:2D50.0008: parse failed [ 75.367206][ T31] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -22 [ 75.716253][ T1019] usb 4-1: USB disconnect, device number 26 [ 75.797851][ T312] usb 3-1: USB disconnect, device number 29 [ 75.841631][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 75.841647][ T36] audit: type=1400 audit(75.815:521): avc: denied { lock } for pid=2253 comm="syz.0.477" path="socket:[18229]" dev="sockfs" ino=18229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 75.865048][ T2266] FAULT_INJECTION: forcing a failure. [ 75.865048][ T2266] name failslab, interval 1, probability 0, space 0, times 0 [ 75.883321][ T2266] CPU: 1 UID: 0 PID: 2266 Comm: syz.2.475 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 75.883353][ T2266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.883366][ T2266] Call Trace: [ 75.883373][ T2266] [ 75.883381][ T2266] __dump_stack+0x21/0x30 [ 75.883403][ T2266] dump_stack_lvl+0x140/0x1c0 [ 75.883420][ T2266] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.883438][ T2266] ? cred_has_capability+0x296/0x3a0 [ 75.883466][ T2266] dump_stack+0x19/0x20 [ 75.883483][ T2266] should_fail_ex+0x3c2/0x510 [ 75.883509][ T2266] should_failslab+0xac/0x100 [ 75.883529][ T2266] kmem_cache_alloc_noprof+0x42/0x410 [ 75.883553][ T2266] ? create_new_namespaces+0x48/0x6f0 [ 75.883573][ T2266] create_new_namespaces+0x48/0x6f0 [ 75.883590][ T2266] ? ns_capable+0x90/0xf0 [ 75.883607][ T2266] unshare_nsproxy_namespaces+0x124/0x180 [ 75.883625][ T2266] ksys_unshare+0x4f9/0x920 [ 75.883649][ T2266] ? fput+0x1a4/0x230 [ 75.883669][ T2266] ? __cfi_ksys_unshare+0x10/0x10 [ 75.883694][ T2266] ? __kasan_check_write+0x18/0x20 [ 75.883718][ T2266] __x64_sys_unshare+0x3c/0x50 [ 75.883742][ T2266] x64_sys_call+0x2998/0x2ee0 [ 75.883760][ T2266] do_syscall_64+0x57/0xf0 [ 75.883777][ T2266] ? clear_bhb_loop+0x50/0xa0 [ 75.883800][ T2266] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.883819][ T2266] RIP: 0033:0x7f696939f559 [ 75.883835][ T2266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.883851][ T2266] RSP: 002b:00007f696a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 75.883871][ T2266] RAX: ffffffffffffffda RBX: 00007f6969626090 RCX: 00007f696939f559 [ 75.883885][ T2266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020680 [ 75.883898][ T2266] RBP: 00007f6969436b50 R08: 0000000000000000 R09: 0000000000000000 [ 75.883910][ T2266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.883922][ T2266] R13: 00007f6969626128 R14: 00007f6969626090 R15: 00007fff7100d128 [ 75.883938][ T2266] [ 75.891697][ T2266] ip6_tunnel: non-ECT from 0000:004a:caf2:5c00:0000:ffff:ac14:1414 with DS=0x31 [ 75.951474][ T2273] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.954293][ T36] audit: type=1400 audit(75.875:522): avc: denied { create } for pid=2267 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.977824][ T2273] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 75.989440][ T36] audit: type=1400 audit(75.875:523): avc: denied { write } for pid=2267 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.015806][ T2273] overlayfs: missing 'lowerdir' [ 76.017937][ T2268] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 76.026127][ T36] audit: type=1400 audit(75.875:524): avc: denied { nlmsg_write } for pid=2267 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.195977][ T36] audit: type=1400 audit(76.025:525): avc: denied { relabelto } for pid=2253 comm="syz.0.477" name="145" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 76.220368][ T36] audit: type=1400 audit(76.025:526): avc: denied { associate } for pid=2253 comm="syz.0.477" name="145" dev="tmpfs" ino=802 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 76.497812][ T1159] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 76.637826][ T1159] usb 2-1: device descriptor read/64, error -71 [ 76.725753][ T36] audit: type=1400 audit(76.695:527): avc: denied { write } for pid=294 comm="syz-executor" name="145" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 76.750536][ T36] audit: type=1400 audit(76.695:528): avc: denied { remove_name } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 76.775451][ T36] audit: type=1400 audit(76.695:529): avc: denied { rmdir } for pid=294 comm="syz-executor" name="145" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 76.877855][ T1159] usb 2-1: device descriptor read/64, error -71 [ 76.997993][ T36] audit: type=1400 audit(76.975:530): avc: denied { mounton } for pid=2298 comm="syz.3.487" path="/132/proc/swaps" dev="proc" ino=4026532083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 76.998037][ T2299] 9pnet_fd: Insufficient options for proto=fd [ 77.038939][ T2303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 77.127854][ T1159] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 77.257885][ T1159] usb 2-1: device descriptor read/64, error -71 [ 77.307845][ T312] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 77.459123][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.470295][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 77.481113][ T312] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.494914][ T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.504119][ T1159] usb 2-1: device descriptor read/64, error -71 [ 77.510462][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.518769][ T312] usb 4-1: SerialNumber: syz [ 77.524507][ T2307] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.532437][ T312] hub 4-1:1.0: bad descriptor, ignoring hub [ 77.538498][ T312] hub 4-1:1.0: probe with driver hub failed with error -5 [ 77.632620][ T1159] usb usb2-port1: attempt power cycle [ 77.734343][ T2308] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.751935][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.776787][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.795956][ T2320] create_pit_timer: 2 callbacks suppressed [ 77.795975][ T2320] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 77.860786][ T511] bridge_slave_1: left allmulticast mode [ 77.866567][ T511] bridge_slave_1: left promiscuous mode [ 77.872256][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.880110][ T511] bridge_slave_0: left allmulticast mode [ 77.885839][ T511] bridge_slave_0: left promiscuous mode [ 77.891799][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.902295][ T2331] overlay: Unknown parameter 'smackfsdef' [ 77.953970][ T312] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 77.977862][ T1159] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 77.986828][ T312] usb 4-1: USB disconnect, device number 27 [ 78.001198][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.008538][ T2329] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.015977][ T2329] bridge_slave_0: entered allmulticast mode [ 78.018807][ T1159] usb 2-1: device descriptor read/8, error -71 [ 78.022703][ T2329] bridge_slave_0: entered promiscuous mode [ 78.034970][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.042066][ T2329] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.049168][ T2329] bridge_slave_1: entered allmulticast mode [ 78.055512][ T2329] bridge_slave_1: entered promiscuous mode [ 78.067343][ T511] veth1_macvtap: left promiscuous mode [ 78.158343][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.158868][ T1159] usb 2-1: device descriptor read/8, error -71 [ 78.165576][ T2329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.180234][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.187520][ T2329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.209742][ T525] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.217113][ T525] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.226571][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.233672][ T495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.250413][ T495] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.257552][ T495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.277148][ T2329] veth0_vlan: entered promiscuous mode [ 78.287986][ T2329] veth1_macvtap: entered promiscuous mode [ 78.407892][ T1159] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 78.429015][ T1159] usb 2-1: device descriptor read/8, error -71 [ 78.494545][ T2356] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.502902][ T2356] rust_binder: Read failure Err(EFAULT) in pid:418 [ 78.510541][ T2356] rust_binder: 2355:2356 performed invalid weak decrement on ref [ 78.559191][ T1159] usb 2-1: device descriptor read/8, error -71 [ 78.568130][ T1019] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.668044][ T1159] usb usb2-port1: unable to enumerate USB device [ 78.719050][ T1019] usb 5-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 78.730089][ T1019] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 78.741332][ T1019] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x2 has invalid maxpacket 999, setting to 64 [ 78.752387][ T1019] usb 5-1: config 0 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 78.765740][ T1019] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.772482][ T1019] usb 5-1: New USB device found, idVendor=0603, idProduct=0600, bcdDevice= 0.00 [ 78.781666][ T1019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.791067][ T1019] usb 5-1: config 0 descriptor?? [ 78.796328][ T2352] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 78.803681][ T2352] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 78.857873][ T31] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 79.038927][ T31] usb 4-1: config 0 interface 0 altsetting 21 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.052155][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 79.058980][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 79.068263][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.081914][ T31] usb 4-1: config 0 descriptor?? [ 79.417846][ T312] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 79.491412][ T31] logitech 0003:046D:C294.0009: unbalanced delimiter at end of report description [ 79.500945][ T31] logitech 0003:046D:C294.0009: parse failed [ 79.506995][ T31] logitech 0003:046D:C294.0009: probe with driver logitech failed with error -22 [ 79.567841][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 79.574095][ T312] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 79.582627][ T312] usb 3-1: config 0 has no interface number 0 [ 79.588980][ T312] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 79.600648][ T312] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 79.609745][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.617741][ T312] usb 3-1: Product: syz [ 79.622021][ T312] usb 3-1: Manufacturer: syz [ 79.626620][ T312] usb 3-1: SerialNumber: syz [ 79.634274][ T312] usb 3-1: config 0 descriptor?? [ 79.639603][ T2381] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 79.692521][ T2364] netlink: 96 bytes leftover after parsing attributes in process `syz.3.505'. [ 79.702523][ T31] usb 4-1: USB disconnect, device number 28 [ 79.847542][ T2381] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 80.256353][ T312] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 80.266629][ T312] asix 3-1:0.188: probe with driver asix failed with error -61 [ 80.292445][ T2393] veth0: mtu less than device minimum [ 80.312959][ T2395] loop5: detected capacity change from 0 to 7 [ 80.430468][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 80.440313][ C0] buffer_io_error: 2 callbacks suppressed [ 80.440331][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 80.455601][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 80.465409][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 81.344394][ T1019] usbhid 5-1:0.0: can't add hid device: -71 [ 81.350738][ T1019] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 81.362304][ T1019] usb 5-1: USB disconnect, device number 2 [ 81.379325][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 81.379341][ T36] audit: type=1400 audit(81.355:543): avc: denied { setcheckreqprot } for pid=2411 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 81.455417][ T2408] tipc: Started in network mode [ 81.463690][ T2408] tipc: Node identity ac1414aa, cluster identity 4711 [ 81.470656][ T2408] tipc: New replicast peer: 100.1.1.1 [ 81.476226][ T2408] tipc: Enabled bearer , priority 10 [ 81.498511][ T2422] futex_wake_op: syz.3.524 tries to shift op by 144; fix this program [ 81.767890][ T1019] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 81.807842][ T1159] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 81.919807][ T1019] usb 5-1: Invalid ep0 maxpacket: 32 [ 81.957857][ T1159] usb 4-1: Using ep0 maxpacket: 32 [ 81.964158][ T1159] usb 4-1: config 1 has an invalid interface number: 44 but max is 2 [ 81.972501][ T1159] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 81.982838][ T1159] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.992081][ T1159] usb 4-1: config 1 has no interface number 1 [ 81.998364][ T1159] usb 4-1: too many endpoints for config 1 interface 44 altsetting 167: 221, using maximum allowed: 30 [ 82.009621][ T1159] usb 4-1: config 1 interface 44 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 221 [ 82.022994][ T1159] usb 4-1: config 1 interface 44 has no altsetting 0 [ 82.031135][ T1159] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 82.040871][ T1159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.048909][ T1159] usb 4-1: Product: syz [ 82.050047][ T1019] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 82.053164][ T1159] usb 4-1: Manufacturer: syz [ 82.053181][ T1159] usb 4-1: SerialNumber: syz [ 82.217821][ T1019] usb 5-1: Invalid ep0 maxpacket: 32 [ 82.223402][ T1019] usb usb5-port1: attempt power cycle [ 82.318943][ T1159] usb 4-1: Invalid firmware size=44. [ 82.325090][ T1159] usb 4-1: Invalid firmware size=44. [ 82.332127][ T1159] usb 4-1: USB disconnect, device number 29 [ 82.535062][ T388] usb 3-1: USB disconnect, device number 30 [ 82.568620][ T1019] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 82.587858][ T45] tipc: Node number set to 2886997162 [ 82.594215][ T1019] usb 5-1: Invalid ep0 maxpacket: 32 [ 82.722733][ T2463] FAULT_INJECTION: forcing a failure. [ 82.722733][ T2463] name failslab, interval 1, probability 0, space 0, times 0 [ 82.735488][ T2463] CPU: 0 UID: 0 PID: 2463 Comm: syz.2.536 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 82.735519][ T2463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.735527][ T2463] Call Trace: [ 82.735531][ T2463] [ 82.735536][ T2463] __dump_stack+0x21/0x30 [ 82.735550][ T2463] dump_stack_lvl+0x140/0x1c0 [ 82.735560][ T2463] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.735570][ T2463] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 82.735585][ T2463] dump_stack+0x19/0x20 [ 82.735594][ T2463] should_fail_ex+0x3c2/0x510 [ 82.735609][ T2463] should_failslab+0xac/0x100 [ 82.735620][ T2463] kmem_cache_alloc_noprof+0x42/0x410 [ 82.735633][ T2463] ? __kernfs_new_node+0xf1/0x740 [ 82.735650][ T2463] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 82.735663][ T2463] __kernfs_new_node+0xf1/0x740 [ 82.735673][ T2463] ? __kasan_check_write+0x18/0x20 [ 82.735686][ T2463] ? kernfs_new_node+0x280/0x280 [ 82.735696][ T2463] ? down_write+0xee/0x2b0 [ 82.735709][ T2463] ? __cfi_down_write+0x10/0x10 [ 82.735721][ T2463] ? __kasan_check_write+0x18/0x20 [ 82.735733][ T2463] ? up_write+0x66/0x280 [ 82.735745][ T2463] ? kernfs_activate+0x1ee/0x200 [ 82.735755][ T2463] kernfs_new_node+0x154/0x280 [ 82.735765][ T2463] __kernfs_create_file+0x52/0x280 [ 82.735778][ T2463] sysfs_add_file_mode_ns+0x1d2/0x280 [ 82.735791][ T2463] internal_create_group+0x66c/0xe70 [ 82.735801][ T2463] ? __kasan_check_write+0x18/0x20 [ 82.735814][ T2463] ? sysfs_create_group+0x40/0x40 [ 82.735824][ T2463] ? kernfs_activate+0x1ee/0x200 [ 82.735841][ T2463] sysfs_create_groups+0x5c/0x130 [ 82.735857][ T2463] device_add_attrs+0x1b2/0x850 [ 82.735877][ T2463] ? device_add_class_symlinks+0x260/0x260 [ 82.735896][ T2463] ? __kasan_check_write+0x18/0x20 [ 82.735908][ T2463] ? kobject_put+0x1cc/0x2a0 [ 82.735918][ T2463] ? device_add_class_symlinks+0x22e/0x260 [ 82.735929][ T2463] device_add+0x4db/0xbf0 [ 82.735939][ T2463] netdev_register_kobject+0x196/0x330 [ 82.735954][ T2463] register_netdevice+0x1042/0x1a80 [ 82.735977][ T2463] ? __cfi_register_netdevice+0x10/0x10 [ 82.736001][ T2463] ? alloc_netdev_mqs+0xda9/0x13d0 [ 82.736019][ T2463] ? __asan_memcpy+0x5a/0x80 [ 82.736033][ T2463] __ip_tunnel_create+0x3a1/0x4e0 [ 82.736045][ T2463] ? ip_tunnel_init_net+0x880/0x880 [ 82.736057][ T2463] ip_tunnel_init_net+0x30f/0x880 [ 82.736067][ T2463] ? __cfi_ip_tunnel_init_net+0x10/0x10 [ 82.736078][ T2463] ? __kmalloc_noprof+0x261/0x510 [ 82.736091][ T2463] ? ops_init+0x81/0x5d0 [ 82.736105][ T2463] ipgre_init_net+0x28/0x30 [ 82.736115][ T2463] ops_init+0x2ff/0x5d0 [ 82.736128][ T2463] ? __kasan_check_write+0x18/0x20 [ 82.736140][ T2463] ? rwsem_read_trylock+0x275/0x5a0 [ 82.736154][ T2463] setup_net+0x227/0x9b0 [ 82.736167][ T2463] ? copy_net_ns+0xa20/0xa20 [ 82.736179][ T2463] ? down_read_killable+0x7f/0x100 [ 82.736191][ T2463] ? __cfi_down_read_killable+0x10/0x10 [ 82.736204][ T2463] copy_net_ns+0x4fc/0xa20 [ 82.736217][ T2463] create_new_namespaces+0x390/0x6f0 [ 82.736228][ T2463] unshare_nsproxy_namespaces+0x124/0x180 [ 82.736238][ T2463] ksys_unshare+0x4f9/0x920 [ 82.736252][ T2463] ? __cfi_ksys_unshare+0x10/0x10 [ 82.736265][ T2463] ? __kasan_check_write+0x18/0x20 [ 82.736278][ T2463] __x64_sys_unshare+0x3c/0x50 [ 82.736292][ T2463] x64_sys_call+0x2998/0x2ee0 [ 82.736302][ T2463] do_syscall_64+0x57/0xf0 [ 82.736311][ T2463] ? clear_bhb_loop+0x50/0xa0 [ 82.736324][ T2463] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.736336][ T2463] RIP: 0033:0x7f696939f559 [ 82.736346][ T2463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.736355][ T2463] RSP: 002b:00007f696a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.736367][ T2463] RAX: ffffffffffffffda RBX: 00007f6969626090 RCX: 00007f696939f559 [ 82.736376][ T2463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 82.736383][ T2463] RBP: 00007f6969436b50 R08: 0000000000000000 R09: 0000000000000000 [ 82.736389][ T2463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.736396][ T2463] R13: 00007f6969626128 R14: 00007f6969626090 R15: 00007fff7100d128 [ 82.736404][ T2463] [ 82.747840][ T1019] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 82.872395][ T2465] tipc: Started in network mode [ 82.906429][ T1019] usb 5-1: Invalid ep0 maxpacket: 32 [ 82.911702][ T2465] tipc: Node identity 2d0000000000000081, cluster identity 4711 [ 82.921841][ T1019] usb usb5-port1: unable to enumerate USB device [ 83.177814][ T312] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 83.202285][ T2468] kvm: emulating exchange as write [ 83.286013][ T36] audit: type=1326 audit(83.255:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2473 comm="syz.1.539" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6adf9f559 code=0x0 [ 83.357812][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 83.367607][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.377233][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.399272][ T312] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 83.411320][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.419842][ T312] usb 4-1: Product: syz [ 83.424205][ T312] usb 4-1: Manufacturer: syz [ 83.429545][ T312] usb 4-1: SerialNumber: syz [ 83.617833][ T1019] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 83.689286][ T2488] netlink: 104 bytes leftover after parsing attributes in process `syz.2.544'. [ 83.705492][ T2490] loop0: detected capacity change from 0 to 1 [ 83.749417][ T2490] loop0: p1 [ 83.752908][ T2490] loop0: p1 start 2815197015 is beyond EOD, truncated [ 83.767833][ T1019] usb 2-1: Using ep0 maxpacket: 8 [ 83.774678][ T1019] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.783088][ T1019] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.793356][ T1019] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.803743][ T1019] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 83.813014][ T1019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.821289][ T1019] usb 2-1: Product: syz [ 83.825460][ T1019] usb 2-1: Manufacturer: syz [ 83.830140][ T1019] usb 2-1: SerialNumber: syz [ 84.039189][ T2508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.048548][ T2508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.069878][ T1019] usb 2-1: unknown interface protocol 0xc5, assuming v1 [ 84.076990][ T1019] usb 2-1: cannot find UAC_HEADER [ 84.084360][ T1019] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 84.098049][ T1019] usb 2-1: USB disconnect, device number 26 [ 84.107464][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.229831][ T312] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 84.230208][ T110] loop0: p1 [ 84.238496][ T312] usb 4-1: USB disconnect, device number 30 [ 84.243436][ T110] loop0: p1 start 2815197015 is beyond EOD, truncated [ 84.253235][ T388] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 84.417857][ T388] usb 3-1: Using ep0 maxpacket: 8 [ 84.426995][ T388] usb 3-1: string descriptor 0 read error: -22 [ 84.434144][ T388] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 84.443325][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.583977][ T36] audit: type=1400 audit(84.555:545): avc: denied { create } for pid=2510 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 84.653560][ T388] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.669027][ T388] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.689690][ T388] usb 3-1: USB disconnect, device number 31 [ 84.751800][ T1159] hid-generic 0005:0006:B012.000A: hidraw0: BLUETOOTH HID v0.04 Device [syz0] on syz1 [ 84.768586][ T36] audit: type=1400 audit(84.735:546): avc: denied { ioctl } for pid=2525 comm="syz.3.551" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.771002][ T2530] udevd[2530]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 84.910517][ T2535] input: syz0 as /devices/virtual/input/input14 [ 85.184004][ T2542] incfs: Error accessing: ./file0. [ 85.194138][ T2542] incfs: mount failed -20 [ 85.202276][ T2542] overlay: ./file0 is not a directory [ 85.287868][ T2551] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 85.303562][ T2551] netlink: 'syz.2.559': attribute type 6 has an invalid length. [ 85.317862][ T2551] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.559'. [ 85.466978][ T36] audit: type=1400 audit(85.435:547): avc: denied { create } for pid=2556 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 85.508080][ T36] audit: type=1400 audit(85.435:548): avc: denied { sys_admin } for pid=2556 comm="syz.1.562" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 85.897341][ T36] audit: type=1400 audit(85.865:549): avc: denied { read write } for pid=2565 comm="syz.2.565" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.947808][ T36] audit: type=1400 audit(85.865:550): avc: denied { open } for pid=2565 comm="syz.2.565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.998110][ T36] audit: type=1400 audit(85.865:551): avc: denied { ioctl } for pid=2565 comm="syz.2.565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.022625][ T2575] FAULT_INJECTION: forcing a failure. [ 86.022625][ T2575] name fail_futex, interval 1, probability 0, space 0, times 1 [ 86.051359][ T2575] CPU: 1 UID: 0 PID: 2575 Comm: syz.4.568 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 86.051395][ T2575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.051407][ T2575] Call Trace: [ 86.051413][ T2575] [ 86.051422][ T2575] __dump_stack+0x21/0x30 [ 86.051446][ T2575] dump_stack_lvl+0x140/0x1c0 [ 86.051465][ T2575] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.051492][ T2575] ? unwind_get_return_address+0x51/0x90 [ 86.051521][ T2575] dump_stack+0x19/0x20 [ 86.051537][ T2575] should_fail_ex+0x3c2/0x510 [ 86.051565][ T2575] should_fail+0xf/0x20 [ 86.051589][ T2575] get_futex_key+0x178/0x940 [ 86.051610][ T2575] ? __cfi_get_futex_key+0x10/0x10 [ 86.051627][ T2575] ? kasan_save_track+0x4f/0x80 [ 86.051646][ T2575] ? kasan_save_alloc_info+0x3a/0x50 [ 86.051668][ T2575] ? __kasan_kmalloc+0x96/0xb0 [ 86.051687][ T2575] ? __kmalloc_noprof+0x261/0x510 [ 86.051713][ T2575] futex_wake+0x150/0x950 [ 86.051737][ T2575] ? __cfi_futex_wake+0x10/0x10 [ 86.051759][ T2575] ? avc_has_perm_noaudit+0x26b/0x360 [ 86.051781][ T2575] ? avc_has_perm_noaudit+0x289/0x360 [ 86.051802][ T2575] do_futex+0x37d/0x510 [ 86.051822][ T2575] ? __cfi_do_futex+0x10/0x10 [ 86.051841][ T2575] ? make_kuid+0x1e4/0x670 [ 86.051860][ T2575] __se_sys_futex+0x13c/0x320 [ 86.051950][ T2575] ? __x64_sys_futex+0x110/0x110 [ 86.051970][ T2575] __x64_sys_futex+0xe9/0x110 [ 86.051991][ T2575] x64_sys_call+0x227f/0x2ee0 [ 86.052010][ T2575] do_syscall_64+0x57/0xf0 [ 86.052029][ T2575] ? clear_bhb_loop+0x50/0xa0 [ 86.052054][ T2575] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.052153][ T2575] RIP: 0033:0x7fbf1139f559 [ 86.052218][ T2575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.052235][ T2575] RSP: 002b:00007fbf122b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.052288][ T2575] RAX: ffffffffffffffda RBX: 00007fbf11625fa8 RCX: 00007fbf1139f559 [ 86.052303][ T2575] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf11625fac [ 86.052316][ T2575] RBP: 00007fbf11625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 86.052331][ T2575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.052343][ T2575] R13: 00007fbf11626038 R14: 00007ffdb63c4690 R15: 00007ffdb63c4778 [ 86.052360][ T2575] [ 86.129136][ T1159] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 86.387807][ T388] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 86.519578][ T1159] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 86.537824][ T1159] usb 3-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 86.559124][ T1159] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 86.568292][ T1159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.576296][ T1159] usb 3-1: Product: syz [ 86.578891][ T388] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 86.587835][ T1159] usb 3-1: Manufacturer: syz [ 86.592014][ T388] usb 2-1: config 0 has no interface number 0 [ 86.593338][ T1159] usb 3-1: SerialNumber: syz [ 86.614426][ T388] usb 2-1: config 0 interface 200 has no altsetting 0 [ 86.630615][ T388] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=67.93 [ 86.643780][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.660096][ T388] usb 2-1: Product: syz [ 86.669617][ T388] usb 2-1: Manufacturer: syz [ 86.679761][ T388] usb 2-1: SerialNumber: syz [ 86.693652][ T388] usb 2-1: config 0 descriptor?? [ 86.910907][ T388] ftdi_sio 2-1:0.200: FTDI USB Serial Device converter detected [ 86.928628][ T388] ftdi_sio ttyUSB0: unknown device type: 0x6793 [ 86.949343][ T388] usb 2-1: USB disconnect, device number 27 [ 86.966305][ T388] ftdi_sio 2-1:0.200: device disconnected [ 87.067739][ T36] audit: type=1400 audit(87.035:552): avc: denied { setopt } for pid=2587 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.105808][ T2592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=2592 comm=syz.4.573 [ 87.127903][ T2592] netlink: 72 bytes leftover after parsing attributes in process `syz.4.573'. [ 87.127903][ T2594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=2594 comm=syz.4.573 [ 87.162295][ T2594] netlink: 72 bytes leftover after parsing attributes in process `syz.4.573'. [ 87.568944][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.687827][ T388] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 87.743419][ T64] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 87.757814][ T64] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 87.792141][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.813283][ T64] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 87.832552][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.847906][ T388] usb 2-1: Using ep0 maxpacket: 32 [ 87.856513][ T388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.858250][ T2607] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 87.879263][ T388] usb 2-1: config 178 has an invalid interface number: 183 but max is 0 [ 87.888010][ T2607] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 87.908747][ T388] usb 2-1: config 178 contains an unexpected descriptor of type 0x2, skipping [ 87.931968][ T388] usb 2-1: config 178 has no interface number 0 [ 87.933003][ T64] pl2303 5-1:1.0: pl2303 converter detected [ 87.947896][ T388] usb 2-1: config 178 interface 183 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 87.952247][ T64] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 87.996712][ T388] usb 2-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27 [ 88.016660][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.036797][ T388] usb 2-1: Product: syz [ 88.047605][ T388] usb 2-1: Manufacturer: syz [ 88.060977][ T388] usb 2-1: SerialNumber: syz [ 88.085057][ T2619] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.230995][ T36] audit: type=1400 audit(88.205:553): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.268462][ T2607] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 88.277600][ T2607] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 88.285243][ T2607] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 88.292935][ T2607] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 88.305236][ T2607] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 88.305366][ T388] usb 2-1: USB disconnect, device number 28 [ 88.329994][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:178.183/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.524834][ T2666] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.531949][ T2666] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.539522][ T2666] bridge_slave_0: entered allmulticast mode [ 88.545981][ T2666] bridge_slave_0: entered promiscuous mode [ 88.553251][ T2666] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.560467][ T2666] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.567651][ T2666] bridge_slave_1: entered allmulticast mode [ 88.574186][ T2666] bridge_slave_1: entered promiscuous mode [ 88.581194][ T503] bridge_slave_1: left allmulticast mode [ 88.586950][ T503] bridge_slave_1: left promiscuous mode [ 88.592683][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.600139][ T2607] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 88.607492][ T503] bridge_slave_0: left allmulticast mode [ 88.608073][ T2607] pl2303 ttyUSB0: error sending break = -32 [ 88.613384][ T503] bridge_slave_0: left promiscuous mode [ 88.622688][ T412] usb 5-1: USB disconnect, device number 7 [ 88.625045][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.643711][ T412] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 88.652660][ T412] pl2303 5-1:1.0: device disconnected [ 88.765142][ T2666] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.772240][ T2666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.779556][ T2666] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.786590][ T2666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.795704][ T503] tipc: Left network mode [ 88.802336][ T503] veth1_macvtap: left promiscuous mode [ 88.807951][ T503] veth0_vlan: left promiscuous mode [ 88.854857][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.862220][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.875917][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.883001][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.893666][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.900775][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.901248][ T2674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.916936][ T2674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.925920][ T2672] ================================================================== [ 88.934007][ T2672] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 88.941661][ T2672] Read of size 8 at addr ffff888134015598 by task syz.1.591/2672 [ 88.942534][ T2666] veth0_vlan: entered promiscuous mode [ 88.949379][ T2672] [ 88.949387][ T2672] CPU: 1 UID: 0 PID: 2672 Comm: syz.1.591 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 88.949410][ T2672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.949422][ T2672] Call Trace: [ 88.949428][ T2672] [ 88.949435][ T2672] __dump_stack+0x21/0x30 [ 88.949455][ T2672] dump_stack_lvl+0x140/0x1c0 [ 88.949471][ T2672] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.949488][ T2672] ? __cfi__printk+0x10/0x10 [ 88.949512][ T2672] print_address_description+0x71/0x210 [ 88.949531][ T2672] print_report+0x4a/0x70 [ 88.949546][ T2672] kasan_report+0x162/0x1a0 [ 88.949565][ T2672] ? snapshot_ctr+0x586/0x1350 [ 88.949584][ T2672] ? snapshot_ctr+0x586/0x1350 [ 88.949602][ T2672] __asan_report_load8_noabort+0x18/0x20 [ 88.949624][ T2672] snapshot_ctr+0x586/0x1350 [ 88.949643][ T2672] ? dm_split_args+0xa1/0x740 [ 88.949667][ T2672] ? __cfi_snapshot_ctr+0x10/0x10 [ 88.949685][ T2672] ? dm_split_args+0x5d0/0x740 [ 88.949709][ T2672] dm_table_add_target+0x59c/0xcb0 [ 88.949735][ T2672] table_load+0x2eb/0x7d0 [ 88.949756][ T2672] ? __check_object_size+0x99/0x870 [ 88.949780][ T2672] ? __cfi_table_load+0x10/0x10 [ 88.949801][ T2672] ? __kasan_check_write+0x18/0x20 [ 88.949823][ T2672] ? __cfi_table_load+0x10/0x10 [ 88.949845][ T2672] dm_ctl_ioctl+0x8f3/0xde0 [ 88.949866][ T2672] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 88.949891][ T2672] ? __fget_files+0x2bc/0x330 [ 88.949909][ T2672] ? bpf_lsm_file_ioctl+0xd/0x20 [ 88.949928][ T2672] ? security_file_ioctl+0x3e/0x110 [ 88.949951][ T2672] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 88.949971][ T2672] __se_sys_ioctl+0x126/0x1b0 [ 88.949989][ T2672] __x64_sys_ioctl+0x7f/0xa0 [ 88.950006][ T2672] x64_sys_call+0x1878/0x2ee0 [ 88.950025][ T2672] do_syscall_64+0x57/0xf0 [ 88.950042][ T2672] ? clear_bhb_loop+0x50/0xa0 [ 88.950064][ T2672] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.950084][ T2672] RIP: 0033:0x7ff6adf9f559 [ 88.950100][ T2672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.950115][ T2672] RSP: 002b:00007ff6aee8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.950134][ T2672] RAX: ffffffffffffffda RBX: 00007ff6ae225fa0 RCX: 00007ff6adf9f559 [ 88.950148][ T2672] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 88.950161][ T2672] RBP: 00007ff6ae036b50 R08: 0000000000000000 R09: 0000000000000000 [ 88.950172][ T2672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.950183][ T2672] R13: 00007ff6ae226038 R14: 00007ff6ae225fa0 R15: 00007ffc167fdff8 [ 88.950198][ T2672] [ 88.950204][ T2672] [ 88.963738][ T2666] veth1_macvtap: entered promiscuous mode [ 88.968617][ T2672] Allocated by task 2672: [ 88.968630][ T2672] kasan_save_track+0x3e/0x80 [ 88.968652][ T2672] kasan_save_alloc_info+0x3a/0x50 [ 89.237401][ T2672] __kasan_kmalloc+0x96/0xb0 [ 89.242000][ T2672] __kmalloc_cache_node_noprof+0x225/0x430 [ 89.247820][ T2672] dm_get_table_device+0x1e3/0x6c0 [ 89.252930][ T2672] dm_get_device+0x32b/0x7f0 [ 89.257613][ T2672] snapshot_ctr+0x292/0x1350 [ 89.262201][ T2672] dm_table_add_target+0x59c/0xcb0 [ 89.267313][ T2672] table_load+0x2eb/0x7d0 [ 89.271658][ T2672] dm_ctl_ioctl+0x8f3/0xde0 [ 89.276171][ T2672] __se_sys_ioctl+0x126/0x1b0 [ 89.280841][ T2672] __x64_sys_ioctl+0x7f/0xa0 [ 89.285421][ T2672] x64_sys_call+0x1878/0x2ee0 [ 89.290096][ T2672] do_syscall_64+0x57/0xf0 [ 89.294502][ T2672] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.301209][ T2672] [ 89.304377][ T2672] Freed by task 2672: [ 89.308477][ T2672] kasan_save_track+0x3e/0x80 [ 89.313165][ T2672] kasan_save_free_info+0x44/0x50 [ 89.318189][ T2672] __kasan_slab_free+0x5f/0x80 [ 89.322941][ T2672] kfree+0x158/0x440 [ 89.326828][ T2672] dm_put_table_device+0x298/0x2e0 [ 89.331939][ T2672] dm_get_device+0x571/0x7f0 [ 89.336545][ T2672] snapshot_ctr+0x435/0x1350 [ 89.341127][ T2672] dm_table_add_target+0x59c/0xcb0 [ 89.346239][ T2672] table_load+0x2eb/0x7d0 [ 89.350588][ T2672] dm_ctl_ioctl+0x8f3/0xde0 [ 89.355099][ T2672] __se_sys_ioctl+0x126/0x1b0 [ 89.359773][ T2672] __x64_sys_ioctl+0x7f/0xa0 [ 89.364360][ T2672] x64_sys_call+0x1878/0x2ee0 [ 89.369027][ T2672] do_syscall_64+0x57/0xf0 [ 89.373461][ T2672] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.379353][ T2672] [ 89.381667][ T2672] The buggy address belongs to the object at ffff888134015580 [ 89.381667][ T2672] which belongs to the cache kmalloc-96 of size 96 [ 89.395533][ T2672] The buggy address is located 24 bytes inside of [ 89.395533][ T2672] freed 96-byte region [ffff888134015580, ffff8881340155e0) [ 89.409254][ T2672] [ 89.411612][ T2672] The buggy address belongs to the physical page: [ 89.418291][ T2672] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134015 [ 89.427149][ T2672] flags: 0x4000000000000000(zone=1) [ 89.432340][ T2672] page_type: f5(slab) [ 89.436318][ T2672] raw: 4000000000000000 ffff888100041280 ffffea0004149080 dead000000000004 [ 89.444982][ T2672] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 89.453637][ T2672] page dumped because: kasan: bad access detected [ 89.460053][ T2672] page_owner tracks the page as allocated [ 89.465756][ T2672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 0, tgid 0 (swapper/1), ts 26547903629, free_ts 26138652954 [ 89.485636][ T2672] post_alloc_hook+0x37d/0x3b0 [ 89.490407][ T2672] prep_new_page+0x2d/0x180 [ 89.494906][ T2672] get_page_from_freelist+0x4aea/0x4ba0 [ 89.500447][ T2672] __alloc_pages_noprof+0x35a/0x7e0 [ 89.505644][ T2672] alloc_slab_page+0x6b/0x1e0 [ 89.510310][ T2672] allocate_slab+0x69/0x430 [ 89.514923][ T2672] ___slab_alloc+0x591/0x8c0 [ 89.519512][ T2672] __kmalloc_cache_noprof+0x2cd/0x470 [ 89.524879][ T2672] dst_cow_metrics_generic+0x65/0x2a0 [ 89.530246][ T2672] icmp6_dst_alloc+0x310/0x4f0 [ 89.535187][ T2672] ndisc_send_skb+0x2a6/0xca0 [ 89.539885][ T2672] ndisc_send_rs+0x675/0x880 [ 89.544498][ T2672] addrconf_rs_timer+0x362/0x620 [ 89.549608][ T2672] call_timer_fn+0x49/0x300 [ 89.554111][ T2672] __run_timer_base+0x6c0/0x9b0 [ 89.558956][ T2672] run_timer_softirq+0x35/0x70 [ 89.563714][ T2672] page last free pid 386 tgid 386 stack trace: [ 89.569856][ T2672] free_unref_page+0xb99/0xf50 [ 89.574622][ T2672] __free_pages+0x6b/0x3b0 [ 89.579039][ T2672] vfree+0x3ea/0x5b0 [ 89.583041][ T2672] kvfree+0x2a/0x50 [ 89.586841][ T2672] kvm_arch_free_vm+0x19/0x30 [ 89.591535][ T2672] kvm_put_kvm+0x1120/0x12d0 [ 89.596132][ T2672] kvm_vm_release+0x47/0x70 [ 89.600632][ T2672] __fput+0x20b/0xa30 [ 89.604631][ T2672] ____fput+0x20/0x30 [ 89.608627][ T2672] task_work_run+0x1e8/0x260 [ 89.613220][ T2672] resume_user_mode_work+0x35/0x50 [ 89.618340][ T2672] syscall_exit_to_user_mode+0x63/0xb0 [ 89.623811][ T2672] do_syscall_64+0x63/0xf0 [ 89.628252][ T2672] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.634149][ T2672] [ 89.636467][ T2672] Memory state around the buggy address: [ 89.642081][ T2672] ffff888134015480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 89.650136][ T2672] ffff888134015500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.658195][ T2672] >ffff888134015580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 89.666248][ T2672] ^ [ 89.671095][ T2672] ffff888134015600: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 89.679154][ T2672] ffff888134015680: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 89.687226][ T2672] ================================================================== [ 89.696812][ T2672] Disabling lock debugging due to kernel taint [ 89.717838][ T36] audit: type=1400 audit(89.665:554): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3214]" dev="pipefs" ino=3214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 89.730824][ T2672] device-mapper: table: 252:2: device 1:3 not in table devices list [ 89.769230][ T2672] device-mapper: table: 252:2: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 89.793871][ T2672] device-mapper: ioctl: error adding target to table [ 89.807842][ T2672] device-mapper: table: 252:2: dm_table_destroy: dm_put_device call missing for 1:3 [ 89.817811][ T36] audit: type=1400 audit(89.685:555): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.817822][ T1019] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 89.860617][ T36] audit: type=1400 audit(89.685:556): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.865063][ T1159] usb 3-1: USB disconnect, device number 32 [ 89.891977][ T36] audit: type=1400 audit(89.685:557): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.928103][ T36] audit: type=1400 audit(89.685:558): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.948157][ T36] audit: type=1400 audit(89.685:559): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.969246][ T36] audit: type=1400 audit(89.685:560): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.991687][ T36] audit: type=1400 audit(89.685:561): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.161109][ T503] bridge_slave_1: left allmulticast mode [ 90.166849][ T503] bridge_slave_1: left promiscuous mode [ 90.172577][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.180033][ T503] bridge_slave_0: left allmulticast mode [ 90.185672][ T503] bridge_slave_0: left promiscuous mode [ 90.191457][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.199614][ T503] bridge_slave_1: left allmulticast mode [ 90.205299][ T503] bridge_slave_1: left promiscuous mode [ 90.211078][ T503] ÿÿÿÿÿÿ: port 2(bridge_slave_1) entered disabled state [ 90.218605][ T503] bridge_slave_0: left allmulticast mode [ 90.224255][ T503] bridge_slave_0: left promiscuous mode [ 90.229928][ T503] ÿÿÿÿÿÿ: port 1(bridge_slave_0) entered disabled state [ 90.410735][ T503] veth1_macvtap: left promiscuous mode [ 90.416272][ T503] veth0_vlan: left promiscuous mode [ 90.421628][ T503] veth1_macvtap: left promiscuous mode [ 90.427126][ T503] veth0_vlan: left promiscuous mode [ 90.759722][ T503] veth1_to_bond: left allmulticast mode [ 90.765288][ T503] veth1_to_bond: left promiscuous mode [ 90.770851][ T503] bridge0: port 3(veth1_to_bond) entered disabled state [ 90.778307][ T503] bridge_slave_1: left allmulticast mode [ 90.783975][ T503] bridge_slave_1: left promiscuous mode [ 90.789690][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.797185][ T503] bridge_slave_0: left allmulticast mode [ 90.802959][ T503] bridge_slave_0: left promiscuous mode [ 90.808596][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.816332][ T503] bridge_slave_1: left allmulticast mode [ 90.822191][ T503] bridge_slave_1: left promiscuous mode [ 90.827836][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.835391][ T503] bridge_slave_0: left allmulticast mode [ 90.841144][ T503] bridge_slave_0: left promiscuous mode [ 90.846758][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.979652][ T503] tipc: Disabling bearer [ 90.984944][ T503] tipc: Left network mode [ 90.990938][ T503] veth1_macvtap: left promiscuous mode [ 90.996424][ T503] veth0_vlan: left promiscuous mode [ 91.002561][ T503] veth1_macvtap: left promiscuous mode [ 91.008140][ T503] veth0_vlan: left promiscuous mode