last executing test programs: 2m4.141979662s ago: executing program 1 (id=2): syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x2000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffa}, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 2m3.820128408s ago: executing program 1 (id=9): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)={0x0, 0xa, 0x1, "c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0xba, {0xba, 0x9, "af2d455a5481a29f06deea5f6f51d95d958fd6a2d641302cc7bf1279e0b78ef52a802fcfcdad748d652ba8e162f86197e79a548e548361774884e3a8f6bb996b833345f03f4a4795be9f5ee4160316413487ef520655286e10c01a43540d1c6975ae96d4b333d91f7ba64b68c950d7c413584e4e7f0601d55aa56463a07eaf43c1c668d80753b1de49250aa955a3115c9ffb8ce428db5d461fddb1abd4ae871ee1e161abdd1a3b21dc49ab70b381afaf81f3597f3c48f916"}}, &(0x7f0000000400)={0x0, 0x3, 0xed, @string={0xed, 0x3, "e0188253f5fccc94059089f336fd557cf7e288e30ecd71869dc0b60a3a4b75edf1d80a62132e1a201a475b6683f93062005895fe70fc4f5d68c7400b9ab13302e3ef7694f857fcc8385dfb9caedaca5e4e0254cb3dc6e26907821f8a323a24d8fe7a9a5072d12a0678fa2b4977dd300271fd1e8159fcb2896d08a221005a844c02716a201fa23e282f772cb9b41a8dca05b8fea60be838f9a549830fce20a106b655933eab5a65ef32b296a3feb4b3002c8616185a54875e1cdb41b3791e6771c6cd7ab25edef75066b162a052fe60e8bb5edbfa5d43477acc83ed1927c341eb1ded028a001d52b2b638a4"}}, &(0x7f0000000580)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x10, 0xff, 0x9, "e2e0dff4", "81a4064e"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x4, 0x2, 0x6, 0xff, 0x7f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x82, "8ada709de7f49c1fc23d5c3ecef8c8c06b69c3ec8d4ab70035cde39a4fb3287b2a2ff7e9ea178f4c834a861b96f6d3c75cbf486952c45f9b273c03ff6f47aa31f7360e8cd20a5834fd2f0497106ab1767428c4223ca81212998951bbf05f8d672cec663cb99b444f61f92e8ff2e014eb23154e30a61f5f7955b577956b8f21b19647"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x60, 0x40}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x79f}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'm8'}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="2222b69108fb"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "98cc"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) 2m1.815157415s ago: executing program 1 (id=21): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180004000000010a00000000000000001000000000000000"], 0x18}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180004000000010a00000000000000001000000000000000"], 0x18}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@remote, 0x4e23, 0x2, 0x4e24, 0x4, 0xa, 0x0, 0x0, 0x21}, {0x3, 0x2, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x10, 0x8}, {0x78, 0x9, 0x4, 0x5}, 0x7, 0x6e6bb4, 0x1, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in=@broadcast, 0x3506, 0x1, 0x0, 0x13, 0x138, 0x1, 0x6}}, 0xe8) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x14, 0x0, &(0x7f0000000300)) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="0000001801010300b500c40010"], 0x118) (async) write$tun(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="0000001801010300b500c40010"], 0x118) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000380)="66ba2100b0efee66baa00066b86b426eef66ba42fc0000b8e20066ef0f2990cfbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842284007b8010000000f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000380)="66ba2100b0efee66baa00066b86b426eef66ba42fc0000b8e20066ef0f2990cfbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842284007b8010000000f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m0.832814313s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000280)={0x0, 0x16, 0x6, "31d1fe552055"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x7ffffffe) ptrace$pokeuser(0x6, r4, 0x358, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40048c1}, 0x10000080) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 1m58.749534854s ago: executing program 1 (id=30): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000d00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x61, 0x33, 0x65, 0x34, 0x32, 0x38, 0x39, 0x36, 0x64, 0x33, 0x33, 0x34, 0x35, 0x61, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "232e5de2d8f6ff392d670446d7f2c72c96eb3e7d7a65c597bd12774d303d60e3651634e64ab75b64642a54f93cb747cf1d4875bd92ac03cae5b7c94bb1683cb9", 0x3d}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000d80), &(0x7f0000000d40)={'syz', 0x0}, 0x0, 0x0, r1) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(r4, 0xfffffff9) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000)=0x2000000, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="30000000120001000000000000008003000000000c0000b7ff000000000000010d003500d040"], 0x30}], 0x1}, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r6, 0x40086e81, &(0x7f0000000240)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r2) 1m43.149198771s ago: executing program 32 (id=30): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000d00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x61, 0x33, 0x65, 0x34, 0x32, 0x38, 0x39, 0x36, 0x64, 0x33, 0x33, 0x34, 0x35, 0x61, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "232e5de2d8f6ff392d670446d7f2c72c96eb3e7d7a65c597bd12774d303d60e3651634e64ab75b64642a54f93cb747cf1d4875bd92ac03cae5b7c94bb1683cb9", 0x3d}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000d80), &(0x7f0000000d40)={'syz', 0x0}, 0x0, 0x0, r1) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(r4, 0xfffffff9) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000)=0x2000000, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="30000000120001000000000000008003000000000c0000b7ff000000000000010d003500d040"], 0x30}], 0x1}, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r6, 0x40086e81, &(0x7f0000000240)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r2) 6.743801083s ago: executing program 2 (id=826): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="0aaab0418c288b8955cecb9c04fe051ac7c9efb9a79699ed77e701f46134e42dd6f18f846edb709738020bddc43aba31f17b60511bfa94e2ea7bd5efe1246f55a1", 0x41}, {0x0}], 0x2) 6.651326377s ago: executing program 2 (id=827): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffa, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xffffffff, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x7, 0x100002, 0xc3, 0x8, 0x8001, 0x8e, 0x79, 0x2, 0x10080, 0x4, 0x91, 0x129, 0x4, 0x80000016, 0x6, 0x5, 0x1401, 0x1, 0x4, 0xa7, 0x7e, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0x9, 0x6, 0x3], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x200, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x4, 0x1cc, 0x9, 0xd, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x401, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x7, 0x9, 0x5, 0x0, 0x7f, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x7, 0x800005, 0xd3, 0x8, 0x97f9, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0xffff, 0xfffffff8, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x7, 0x5, 0x1af8, 0xbfc, 0x1000, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x777a, 0x7, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x1, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x403}}, 0x10) bind$tipc(r2, 0x0, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8000000002090101000000000000000001000001340002001400b533c6d1d801018008000100ac14141d080002007f0000010c000280050001002f000000060003400966000006000340000000000800054000000008300002002c000180140003000000000000000000000000000000000114000400fe800000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0x0, 0x225c17d03, &(0x7f0000000140), 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) 5.716369423s ago: executing program 2 (id=832): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 5.688157124s ago: executing program 2 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="15a1228f", 0x4, 0x4050, &(0x7f0000000380)={0xa, 0x4e23, 0x6, @private0, 0x5}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f00000001c0)={r1, &(0x7f0000000080)='&\x00', 0x0, &(0x7f00000000c0)={@align=0x80000001, {0x1, 0x6, 0x2, 0xffffffffffffffeb}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3f, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x2, 0x7, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x9, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.463995765s ago: executing program 2 (id=839): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) lsm_set_self_attr(0x69, &(0x7f0000001940)={0x65, 0xa, 0x25, 0x5, "0a5cb59ce8"}, 0x25, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x4) (async) lsm_set_self_attr(0x69, &(0x7f0000001940)={0x65, 0xa, 0x25, 0x5, "0a5cb59ce8"}, 0x25, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async) 3.593944486s ago: executing program 3 (id=860): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0xba, {0xba, 0x9, "af2d455a5481a29f06deea5f6f51d95d958fd6a2d641302cc7bf1279e0b78ef52a802fcfcdad748d652ba8e162f86197e79a548e548361774884e3a8f6bb996b833345f03f4a4795be9f5ee4160316413487ef520655286e10c01a43540d1c6975ae96d4b333d91f7ba64b68c950d7c413584e4e7f0601d55aa56463a07eaf43c1c668d80753b1de49250aa955a3115c9ffb8ce428db5d461fddb1abd4ae871ee1e161abdd1a3b21dc49ab70b381afaf81f3597f3c48f916"}}, &(0x7f0000000400)={0x0, 0x3, 0xed, @string={0xed, 0x3, "e0188253f5fccc94059089f336fd557cf7e288e30ecd71869dc0b60a3a4b75edf1d80a62132e1a201a475b6683f93062005895fe70fc4f5d68c7400b9ab13302e3ef7694f857fcc8385dfb9caedaca5e4e0254cb3dc6e26907821f8a323a24d8fe7a9a5072d12a0678fa2b4977dd300271fd1e8159fcb2896d08a221005a844c02716a201fa23e282f772cb9b41a8dca05b8fea60be838f9a549830fce20a106b655933eab5a65ef32b296a3feb4b3002c8616185a54875e1cdb41b3791e6771c6cd7ab25edef75066b162a052fe60e8bb5edbfa5d43477acc83ed1927c341eb1ded028a001d52b2b638a4"}}, &(0x7f0000000580)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x10, 0xff, 0x9, "e2e0dff4", "81a4064e"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x4, 0x2, 0x6, 0xff, 0x7f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x82, "8ada709de7f49c1fc23d5c3ecef8c8c06b69c3ec8d4ab70035cde39a4fb3287b2a2ff7e9ea178f4c834a861b96f6d3c75cbf486952c45f9b273c03ff6f47aa31f7360e8cd20a5834fd2f0497106ab1767428c4223ca81212998951bbf05f8d672cec663cb99b444f61f92e8ff2e014eb23154e30a61f5f7955b577956b8f21b19647"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x60, 0x40}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x79f}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'm8'}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="2222b69108fb"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "98cc"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) 3.392680615s ago: executing program 0 (id=864): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000240)={0x40, 0x7, 0x2, "a38f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r7, r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x0, 0x9, 0x40, 0x0, 0x7, 0x1, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000010a00)={0x14, r8, 0xd22800e99f4927f3, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000046}, 0x4020) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x2, '\"4'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000009c0)={{r1}, "aaf83cb2ba566dbbe5827858224c3a2b22494612ac951f1bb2e9c24704e20b6623e770be5ea2aa21bfe95edbfaff0d630e9cdcc9f724e1bf8d92e177a809658483027d1161ef65a35eeb3a208df96a21d1adfa12b82fd44105f2e68bbd799a71d3be9fe0b1a6ae9297bbc75dcb24d794a66ce1eaed7726222ec3054c9cf4b5b0e0c11156486a75b50e5de23f1743dd1e5e7b6bcb158b4f3b97aedc531a3309a3b030cc6763255bda827bb98d7b50659397b1a9842084a30c3c4140777ac50ab6bbfd62052f7482499cd7a6e9beac1e9e67842b63fefe6be0f6deed53819c3394f8b746624750f700e1bae39f41b348a10a1935c612ff5fe60700de30597e01936bcb80616b5b355f5ea98055c10b35695cb4a60206fa37fe9690bb567be83e763913ba835ef58031f94c4cebf55b45088ec68ad586941bfbbe35af0b2e2349746e9e72f0698124e828f9fef571943e710c9683a9974bac74ead052836a8faac4e9570d63d69dd00d63c9cf56a02bc5dba8e9527b96b222cf28bd1d11393bc2130de21f5f83bb1c8e27af8cb86c12520bdba0ad03cd96de1c5272733427a17a70adb34d902550dd7fc28323b5edbd966e33868ffa7e373a34b10930e485577168b166a21145329171aaaf3217909ba5e218b6ca7c12a74dcb50a3f15542743eac669caf6b2875a7fa747c645e7002cd396876c64c9b2af21b05c9f9c9b27c1468ebc6571a5e5b7ed9470530079581b118a108a67e2b945fdb301609a263cf48abc639aaee6f1eda240c199b38e3aa4ddcb4e20087d16a34ad8262273ce2a433701ffa7490a717f7b718e026a654f7fa74ef05294062281d922ff6ab33db802ae86948483eff050792f6622874cfa4bbcc0d2f6ab9f9f6b982f72511d338ab91e9c318a8b11e41d4e1b886991710469ed1b0e9ac1683657baa21092734c2d296d50d58b20ff3323a3d088d93002e92c24b1ea7c505c0f991e271a80ee12e872e6a2dd36641a02cc9d1f07967fc095deb18d4935090886c54bf35affcce0b464c85a4290c13e7885d5b2833e209991f929c28d168c5f677b03ea850cf7e927aa67e6a34dd2972f7047496bf567419180fab1a944b789e0168bb1a877caacd9f376c15040ed5f3adddfbb3d6ffc84f826daf30f19da8eddbfed102fa6d1cd4173f4594fa4547d7c96b1568650168ef2a463e8a54c0869006fdffb7f6118024568b663f7067959c97887c3bb04c6c3f11ea879d104b4e3937039d22b2b9a45d0e1bf4e0c8b3c8af7928b3cf4310062f7db420af4dee2f45393c92176891c73b59bb0c6f22d91598a74da3a41ffe98c80044a36b9102495b9fa7240d5b10fd90d856aca22b0b9ca39007f4ac41ffaf0cf463d6547f4efdf3c2fcf18f0e8aa037cc70f9fbf4f3d44ba4fb7b6fc16868e05d512726522cd9aac5a5b0cd9b680aaa1390405075628d16d3f673c1cc05bd3b28e8da05f92e5b61ac2cb67ec7a4dbcc8b80c111bda590aa2f73126a4d9e0d4672825023e080207d40792e9fa52c413c8d2ed34ce05cc51e94d5724e6758de1fa251a7bb5b47e171cae471df612fb4e403933104e26e1fe20ee04504e8fea602d56e2c6fe6ee9229fc73b8924553af3c87bdb0c147feba6c145b0fb7beea9d4faaebcfd7e04f8433e327aa16f67ff2ab62eed31a24dd96463df154733d0ee6bf36cdab1299633c3eb53a7d9a4f53da19f3e8aeecb4d0024f62329e8736cfdfa24ca564dc0de504935d13fe1abd15375b9dde27effc306d3ec8a4b47828259be7d59d20e2a70a7639c64e1c8597f52a3b77335f80d861200be402ae3d609c979c6d5eaee8167b2287a8b5681cd0ad34456a9215ad6c3acf882b7e1c2fe6c3ad38b7a45555624d2efdffefa8c1661ba95392f826792ff467a9db9ca16282aec561cf2a57a5b4a5533ccfd37ec21de5ea58c520bbdc9985b9d8763f7b3135d649ccf4afaec54f5b0c214ac9fbcc8192cc463a4284307dbce24006f8278e910da231aa37eda15ef0ec956be55e0924dbbfb48ef07fca1c27274e9ff98f10175f6e1df1a17827daab6e9c443ca84b84be323d4a9c0d1b792e00d4c632762ee6bb92ec037a86be370309395200545040db2ceebd40852c8fd5947dbb11e2412bc444b510bd8e74dd2c76a67b5abb1d0af061f4a3e20d43bcbda31e876af23c842fbe2b801b9ef08222bdbfb30910094e5e2d70f21901d9f3b31eb38e9c62a91b80b929a940e795fc692e92841d0e2aba87fa7aa9b0a049483798d2f87a5f692acffc07a5ba1e79a6099e2d4e8b693dca8c58d9f10f7acd0742bb263342954ac8db2113419f25b40bf4e666052cbd42d511a2d54db6c16b6be0053c945d34486b8fd93ec98a6565b09e3922b93497ccbad34a2f607e83cefe230f806add33c56203fa610536abda12fd99f13211d8f13fcb4471b122a65b96fa8d7c7d8941904a2bc008ac760cf30a0c57fc487ec4bc8196f81aa9b43ccdbdf1701d9561b7133bde2ad7d98d18657b140978a56527d9c11e6fa7a3e4d7b2527372b397cfcdf92bf0af98c24ef4a6a6f8fb59590504418f5e49b1142e0752c184711ff2519046d82d00791557f60ebff8467bc78db71fbe53db5707d02fe3c669a8f63739953650556fd017ca934754bf705f211400f65f540b743a043af7dbc615822ffcc8cada6228c638a0f891482ac963dc9c5f65f7fd208ca5564d92efda7c11e5225ca405834a597aa30b23b89add042b3d1e9b6315e26b37ef039459184814be5b96197b8034195ab82438735160de53e9a051ab4c5bc082c012445fcbd60f31ad420ec78998382060e8f5b6a21bd8467856c2231672fb4a31a68aafec4d5ef46f0d56ca23c7a25197569abea987db03f36bdceefb92b9c75858348da362a87135753e38303c60481c0bb25ec010b7f0401b52b85d2df935cf6a6ed5a6cdc18bcf33eafd224b4d2c9aed3e56cabec32047a1d122051cbeba9b8386e45376028daacfe3e30209eb1495440d0f3c102450f2569f27b24912b2250d4f04f8def8c9145184261d7f8b8fd9f4bd1a9886c88b4005162807d21be03979ec4466dd58003e467ae5b126c9cc8dec49fb1d6c012ff34d162b00fdf40a1aed545a516cd67f8ba7496a601c88265669aa9ef84696a0289861a5d3592629d4852c7a2f789421e933692ccd5f9c5fa8751d394632db3ceef0171f695ee6efe2cb54d6bcdeb0357bc0c151fd543b85af965729e90f07938b3cc82914532821d46554becd29f2b936b9cddfe95d97ef72336a32269495ba4927b50a7ca1ee83ee77a2acec3d8e4031d1657e7865d97041c3757a2da31540508bb480f63cf4016867aa2fc6e85325d85addaf4cdcf54bd301ff9aedcb1b67b483900152aaadcfec48968182f0a8f31eec8190d74a0c61a7ccb448005137fecd56e1e370ce93ba962cb6418bb878191c86de442981e872d64839e48ae2a5e5b85d05cec1082d99fc71b2b3a414a33ac42a9e6b9bd015be9d614113cbb08eeb8081079d75d4578c604d4470b37a769368f273c4ce9992c62166cd5644925430804f2b664c5905f3ad3a64f7b65817fd9893f59a6ac3d889fb0583eeb4c10aee541624d634698c2b8944f07071fecd622aa4b7495e2dade0450dd9a61fab7ddb5a88651a3ba9df5801b792360835c542fc57ee3ea3b5c24e6be42e44c8c4830696f3f57bf074b00b16cb7361c88b97844ea656d748998e8c57022553b6a1ec4790b449d84206a34da4078ea2fd963d50ddf3bcc03db3f2c9db9fa6579239e0e80e71a4dfbed07fdccb16a15b15c1dc0731b853032ebdfb2ea7d58281004fd8bfbbeea9e360e73c84f65c2d8c5a8c6f4fb59b4108d7ac1dc3de0a81efc4c8659690645150b5ad833acced6639f2c379a23c04a8241d016430811d67ddf67b06b6987f1b7a96ea7acb400daa34349c939377fb34dd8d162692dff7368264b7870a4aaebff6975ecdf2764f60d45b8a4095959d8085f3bc8fe29433e3e8b6079ef5fb8c4a8ba2845682657187081fb3cd660fc3b4327ad80988cd1ff1d868e372b4321377589c89a5a419c0baea2379f9ffc75845f2d02bf960a16df45c70cf1f22c016d06a2a70ba62f2acc1f37da85b23005e943235d9f516800f39b5379250867893fd38622b36e0417d4c9294207a11ba74ef1d459840c19f4090cffe2b022c93e6394a4023be6395520448695374b019989ef5bf56330f85f6f71b5875f424d2459c94b2847c090b758c03df6cbc838311f4289bc10f2b078136668b2ac147f81de718f3b1bbfb5d375ff3956e94233d76c444fc7f5d501479f13516d9824bf17ccaf6e5bbaf230392aadb9608f14b35e81a5ac7ac1d6b54b8632b85e975c1179c3bf6594b49ef30d9a496632c9a07e86e501925344a78e832c8cb9b73e44eb63b2a018c7fcbb6c33217a7307fe10a4828aee21b7513a0aa9cae6eab2d674d15eb2f7a5b5c5783a592de665b3e3149c7785f2e98d8500070cb52e09efa84b5ab6579d0dc1532f7ce134541ebfdd54dde66d1a1ee2579a2c46fc2145618261105afefe091f5a3578c13a2595b95b050d3e9be81e3ceaf1666bba5bbea559a05656271e0fc62a3d7161398f4b195c6d2178f06da47a44e57a9b2cc1e3cc054cbf527f1b2f91a9dda41a9dc4c286731f3ff4c2115d5eedf63d0dfb85f426e2e4f11e65a252b380354ad41064cc2862937e73284a2a3027e8e2d84816ea4fc9f81b08639cf084ae7e959bbf255effe8cb1c5bfc159f7bd7bca0d98b69a116ae3338704e9e6049f008b869266fc682f065b49eb18b718b212abadf9b57c5eb78a2bb9071e4640e9688aef0a710af9ecc3fceb96702237ea3febb6887a946df9342dd5120302b2ef5ab671f7d471946c6193786098f3a8e59e0017bfebad255db2086056be6e2b93ca93627f5ae58d5017ed694ba2c00c8b5644c5816f13287ab87167a353e8f29e31a1c227ae226445799b64fa95a7b9f27924e750c9d087021c3e6515c869067e8490d5f544613eb7d20f3fe444364b3adc3d1bd278db772b94c4d938976238945175b5d52822b3b71f47e8afdc197b5f47884aa45c5ec1b6aafb7d84c636271f0c8a03b98861da61802293a4afd4911775ee6b90217d7fb14685cfacd7b40ab3b8d9016c8b4c09a68d20aa4b48e56661ef150478c77dd6ea7bf7d714e1fd72c7d5163d58d54c844f03bf14d362e6f25e55bc425336f6f36eadda99268cca6d80da6fc55a1edec108011d9b262b2837fd6742e939c370e578ba17cfa2622473749c61322e661c2d0667fa310f39dae43e34753011ee0513f49e2cd998c6fd1c630efbd7a3e8ca5259c480e9c7d1ecc0439ea16d15074d1de9fa2400ddca71bcece947382c92b4cd5d4ffba537b6b68f80204900970a9b7965c8d7be2fc5d62bee916950be2bd371277b67ae97ba7a31e8aab7315b9112784dbc85aa598fd87c1f375e9ce2990ef48889c28b845e0eda7577b63ccfd7c5212f2c754a8457a9ef2ff1b79748dc4ae5b1a446d2f1c2ada3ea1789b8b9ccceba37f69f060470741d69b59d570ac48904ff22622a5bb68400f056039bbfc7794824d1b3464ea26a30da48af7735a825f5802072995a7f8488e94ae7077bf53048a53c8821840c30c73889edd450362b9fecd40402e75a7ad7861f4a5be8aac5d4b8322002505579c44cc82380a11be7f1d6f189c24abbfde85b4fc584513755c486869a92ecc984db1bf90f9942879cb97f7c738499d173575bec010624dab7117f65b05264"}) 2.814218954s ago: executing program 2 (id=865): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x5, @empty, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000600)="8000e8beec9d9613", 0x8}], 0x1, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], 0x28}, 0x1400c810) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x1007}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042022eb"], 0xfdef) syz_clone3(&(0x7f0000001680)={0x6000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0xd}, &(0x7f0000000300)=""/128, 0x80, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) fcntl$lock(r1, 0x7, &(0x7f0000001700)={0x0, 0x3, 0x1, 0x3, r5}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES8=r1], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xe5, &(0x7f0000000440)=@string={0xe5, 0x3, "fdc752381ba60f0f8e401887b08634800e16bf913bd8d8ec95dd588044626365ff89020b2c6c010bb0fee92704975a373bbe9ae8baa7f651dfaa502e5508001808db716c5934bff7295ce62b768ac27382d0cb0712e67dbd94bc7c880dcd1b81b60ee455f880ee7ddc77ae7319ae7646340900005a91b6b000534e632a629260cc4bbf7c740829df3b77b43bdfd75405193fdaa5ee775e40fcb4d64661882fd35ce49dc9f954e5642ec75c8d31512c415795a6741be65e00ddd16ed91f0ceb87bd3ba358605c71c1ac00"/227}}, {0x36, &(0x7f0000000240)=@string={0x36, 0x3, "f7e83be7e99005d9cdb5a45371934ed1486ff38cad4f2f9469722a0989cd84d67ec0137de28351340a8159b186bcb9a5aeeeee7f"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x41a}}]}) 1.754992355s ago: executing program 3 (id=866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x2000000}, {0x40000000, 0x0, 0x0, 0x31237646, 0x0, 0x9}]}) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x100000, 0xc, 0x1, 0x81, 0xc, 0x0, 0x7}, {0xf000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfb}, {0xffffffff, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0x3, 0x0, 0xfc, 0x8, 0x0, 0x7}, {0x5000, 0x0, 0xf, 0x6, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x9, 0x7}, {0x4000, 0x1000, 0xb, 0xfc, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x2fff, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x5000, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x9000, 0x1}, {0x8000000}, 0x9df9ffdf, 0x0, 0x0, 0x220, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 1.65271886s ago: executing program 3 (id=867): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "8478b0098a3a72ec6b13aa7d25e76d54"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) (async) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00090000007c00000000000000400000000000000002000000000000007f000000060038000100feff0300030003"], 0x9e) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r2, &(0x7f0000000600)=0x2, r0, &(0x7f0000000640)=0x9, 0x10, 0x6) (async) close(r0) socket(0x0, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) openat(r0, &(0x7f00000005c0)='./file0\x00', 0x4a080, 0x102) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) (async, rerun: 32) r6 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) mount(&(0x7f0000000700)=@md0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='autofs\x00', 0x10000, &(0x7f00000007c0)='smackfstransmute') (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0x100000000}}, {@access_uid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'wfdno'}}, {@fowner_gt}]}}) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) (async) sendmmsg$sock(r0, &(0x7f0000002d80)=[{{&(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="1f68704d2fdb322e2b04bef0cbd739cfb8c30a6810a44d2741dbcacf51e7f95ff81ec330ee5988049c40272d99b46a8a8a4bdc070ce59b11dcfe30ca5b7bf8d827e7db11584e", 0x46}, {&(0x7f00000001c0)="0cc7dcc3d973e9bf8c0deb", 0xb}, {&(0x7f0000000200)="bee97f1a5c1d8bcc229b25d851533b24e0f42e3747bcd345b5bfeaea5f4cb7ed69e3f1868bd66a0a2c1095d67f83a225698c7d6dc8c96a", 0x37}], 0x3, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfffffff7}}], 0xc0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x9, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000003c0)="0d8e814bb2bb7b0bd8765b44db3d44f03ff138df20e632bc75297098d7ec401ceb87b50318d8df9f3bcfeeb961795fccf35269f83785361da54999dd773a5df243bf94436eb6a06cea3f2b8af55ab7ede17f2d177144a62751ba79bdd6e29487be398edc60d6af827f73989b28627c185a1bd5296e7a717a5f414899a02d70ed07207ed2a3caae9642c1098d78ac2c09d0779b808f7f2835958f549788d99eb2ff2288b5d99d55b2b052184b444e0172eb9fae5e2b2abecafa77e58dc3eca2d41347dd52e5381f4e375d83ab3f710be325cb137c79260afca0e2f82b416c1d3cd444f582cc31b9e6eb3f7f84ceb6f5ca96", 0xf1}, {&(0x7f0000000900)="5c1e12629b17fdf3d1f7a58f5e960530b16de60aa6c7202b16b3c0353f72b662898dd8242fb434aeafda9629dd19a194063c47bf51d39b582150e827a134dad93e43ea04e0a35d1dc28382c8c050df658238bc50cd937e065ca61fc3b6967cf448f90ceea05cfe5e13b7648faba5cfaa93c4e55f0fecaca6fb891487506926419a35ff17d34346866ada6d5f26cfcc2564f0bcc98898876802117b9fc93a4faad762bb796d7b91c25183153cad1d9edc5b594f791d8fee4cb64b0a8c0c872624f600cbef671bdda29620560e5886b08a5c5bf51946f24f0d749efefa23d9f4e95ead15e327aa4743374d5c73f35c8afdfb948228876c0494501abd7178f924e9b1047876b931f43e6eb9164181835aab88e2a9e8cda6440e88a8762832840092ad1f36af75dc1491b2fbd6f4feda7739688c8cf3d4ceb02f3289e3c42b4e9dffdcff0380ee2455d40d7962f843f9b720caf277ea92b877f8f057da2b6519b5192001b77ee0113e9355c6982d5238e12fb0c304e464fba0da9b58a7a381e384f090c5815a887f8483933ba6ff0e066d3e1a7ad43ae7c1fda800c9a660b18fc804ab9b0d61122276fea26004be5f5d7dbe6077cea5b99906871c0871f7bcda350f210181a034964cc42f4ad3c8c69a6486faa5834b62ffb605041339b02a2db01f04ced6545b8e8cf03be58c051ba1ac98b30d4357a43138bff063562cea8fdc197d24ca18b7db048d6defccbd9300affe8706b729c8d27c398d702b01e12fe286d646ada360b33307fb2a7c8a6f10d6e5cbcd6d6d0df9875402bddffbbf1156f15f72892cd6cdf9f19b4fc6b80820d1693095e6efbf6ea8248b0243f9ea0b8f133fdc5513028fab48ef95e739c26b496786060c5d46003d554616fcd7a0089a6abc89e8339999aa50b4318185bc22788b2cd884d22e23d8a6d47b634733e9dfac82047eb4dd44dec02b839266b191f54a3c67ebdbf59129d2a5c224bb55db52c6b76c656e01b7f7193e80971c9c8c84c8d30660908de13d474e43d22432ecdcfebcf9bd568fa88620e071725f80f653140fc1985fede3f68f02b68555406b4b83fa6f87b0d236f3894305a0034a886b3873cd9ee7a7a528bbd8787cd845b924a5fe53f61e44a5741359e37e838892ba3fe2cb5ff396b0c0a7a6f925a06464f93592e0b09418543cbea15f31d3584a0f5286e29a1199da614a0b59c03eb22c0a836ea90ca020b4ad17dda144c57d45b617f6e8c522b9479d34f165be19bdc2fef686bdb5813a5b92ef501d0afab2174202f7497cbd0249c8ddda97f6acd35922548b305873f783f8e51f3774a640eb0aa99efaee106d543dcf1806aef77f66aa154cf3e6cbed34247e993eef76f3360a0389bb50ca6aa2919371e6231800217d158e5461e90f1165d083f443e12aa02bf6799034a4188c5086ea86d224ee48fbfeb01d22ab8163e199ef0675e4b3bd29abfbc815404ad9bd1092b4fd5cde7f988d39f56dd27ef46a5806ac414272a9401f4b829e581dfbab79269393a8b138b1be0eb920bb8122a1fc8d33ff414110fdad42d63755c551142c22f88c1c6235648c7750fa51ed9d67cf39d817533e612a918a25d3d4729ced3a8709a326f45fcb8d5da48c25d5ec4e985f6df02d2a94a8c9c4f32bc37bc1af95ad2f19ca0c0909a2758175538afb3b642ca050fecda5c353ea721f18e19fa883e863305eb2d0ff4986f30df1a0199d2c64ff407063c9cd311b58512ccb2a896b9495158f7e8da1c78c72efea6315f346c5f26be03b78ada9ed13278f0ce8b7394ce63c77ca094cadfaf74512e9f74d7c097ded83b5e49337669bf8183daa36875b13c2cabf0683e118603716f841f2fb9129d099e963476b939a85fab4bb3cb89bd8d0732f4ea8fc1908d92d00a41c8beb99f2139f044dc17fa6180d9e78b2a3b212893fad8d94f71cca860a8bb9db5732c2fbd6a4ce6dd8591538a2f616594047b5b15c0d630729e48043187ae7b0471e068d2cb8af9eae59bd9722d69694f592850e549223c93ba974884417b78051f4de0271141b5c8f8410930e2deb4547bdedde022ad72831fcf61240cc8fb785252d28ada469e8f6324b16c7383e4d8f922219fd3361bf54eed1da8b875d1ada889f90c8a7c1909910092ff1342bf2cdddbb9f3f395dcc38da45861e1304ced770c08d7d62d4b3eba7e908b26726c66583b7746dea5ff9df2a4d66e64c6129d0c54b8ab500ca090d9d682aa2b98ad464e2b442d0bb6678d5c0f483950c198cbfaddeb9fa145a45228c4eadf2ba512a0712bdbde15c9a03fedea2529a718011a2aa27f63cfdd6398fc0310ad0e348c96d0c2f1fda563d5ba7cdc7e7b696616e5fec88f724064d8352ac83d861142661d7dab2af3e656a6ead67797919457792212891c74f658fd10c11e1c94d962be4a24980fa64a678a8d3df7f6180ac95ba7e1fd5411d645569b256d0cb85dcb9c93f8fc8531d0d6ff6469abe71ebb487d7adfd82504391db2b83471a94554d37f3c70aa1699cd1b063061a865cb9ed6f8f1f6d2eb96ce5fdb0b6aafa5d68bebb88b63aa11f3f4e611e3adfb5daa9cb05532b65c328d836b89015387c793210d6cdbd66dbdb0943a291957f8c538db7acd099574e957d49681066e9e784907dc453d8a5ea56840461073f19d26097e907ce3484ff4172c6efd26a99d7bb8f44a8076db66df1b64381b751f0f8480312d6445a97dcc9083d9ea8ef4253c29b72d2190937bdfc2773af499c5b85b0d90530b24c70cdc64f43b32bed5480861791f81b4433b1d174dcf986edd697eb55077183176445579f32145101e81821589605d60234d1324e816c7f4e339ae8456d8d01e8461cf50cccab1e4f0431e14781497c69320bd6e2675b16d4f8d05eab0dce88e7a50c137eb82e40e816ad9589a433b74d0d4b30e4440e2eadadbd3a2af77541ade4624fc3a837585085f57d12e71994e54e7ec15b3af50c7fe6120801902bb0555df6a382cad43ba29eae7e87b9aa7aae54f68dcedb15a1eaac6f0698954b9cc4993367b859b84caf292284c7bdb06d51ebf96d2bd2bfcffdb8ffbd07f16d78cdb84022f2804c8f54ba1b9a028de73b270fd9ad856eb67469e4c6e8ceb5fe92c7e8f1b71081b8d1d6ea09776b2b2f38c40a2daf22ea47b10990a61af898a39ac66c2aeece4a1689471fe068cf9ed0df8f478420addc8ebb1ec9d0ceb7b90464c38a2cf5389b04bf2bd10bfbfc6cce64db9af55b5a763a5986c97e4a27be146ba4fbf95a3b71386727b6c21df4d7f270d2689f71baf660012067782e421f5fb2d7224e69953aadc0857d784317e4c1b5d075387f5c339f7ef20ff6e13199bfc691689ec253376579549a7a68553883f2baf7c69375332eda5529fa686bf749cae7dc0e6373cc8bcc4be50ad8c4531d02d665b972b61a77f22c6503cb50cd11dbd21514d2a3e462d408793131ceddbf2bdea99349659412e20ee10da852af5e809275a457f7ed7f1d5d516856669308d637b13e75bb7189f8eba84aa06172f963bcc44b9f7512bcb24ae04b365ea09f1050335ee0324f0267793f68e47ba5e32b776c108c5d4b857dfd718b6c408ad30e9c80875368e8e5a01ab082e5012d1e1ad4a860459f0ea128ad064f95dc20d9599e56cc6d3735f8263dbfa11724665b09d518c03ea4ce4762ea3888d0c447f661e6a8549dea01b9fcf41f66beb0a4e5aafbec6b444c0852ef8224f13d637b1629f99c3f812aae4d3a7224f8267523c06a97c70a444ba37316f003be840c9fae97d7330df2a781fa397a091f34d03a95cbe739b47c1bed72c77721e216b36a61f72951d6700c99f1e2bb1a8132c2f98e1588d44d151439d0b581bd5f9462fd290dd5890273320c8e6ac9cd5800ecb22fcc706b19f7ce74be39210e2d125d11e04b4fb631777135e1ba6a4a9e5328cc186dc8905551617ede572194d96b7162e00a3a501a96fb14c0ee61c35a5a213e1c9bf78d3797d420babb8b2328ed103165e2240257832fe7bfabb85321482d7fba9fc5c8459bb84dbe3f461e2870b6f546eb5159386e1b3289662bba063f8ac9acb9ec129d8d38eec0e4cdff1b622a7e09c044f148c5bb8661d8b8006e18fb77e6bb24f2f77bf2631575f03442edfe679493d33738c53baba5937d683100a46c5185ba259da32c554180b7f34c361992f065411fb910b0ba6b65d66e0214b07230f25fc81429a77112457c3582d76b45eb480c4f67c249421426de7c25cb8cacc711eae3ec753fbed9da4fd4a51c540ab4063229ddcf124666ea9e25d97edf6fecb2606488d45bd409e9339c7c6c30e7f7f6165bdabbe67361ed382e3d2c1bd0e2737fdea811837a311d40ca1ac0ee2a15544d3603f3095e19a664d6c389600a9522a770a2cd95ec9a0a8c048a80e8cd900ad223a977ebbab5377eaf02a3169920bd5761e696baa0b087d8b72747c95ed84939736506761e8fdb954fe51c904899de69a536e7d45cae0edf08964b39d5d08511f1602fb0ea895335914c675459716aac9376dd93830d8fcc0539f6489ace372e0ec287a4e55136a01db1fcdbfe3ceb52ac64051902a9ee89c7ac668fc69b298f9f493ed8f5ac8569755cf8fb2cb0830f1794b366bd5804299c01326a3a439e45f8d694f73af853e46e097657e9d59b3fe6a6f9bc840dde0c803b8de84166160436d4946d4db7c504b5cf3e66bffc80cb6371eef4b629e2ab98c3a02944ddb8fc8252db1e12e4faea98cb07721df785bf662dd267c8973ab491e8219a4055e4d8d9e8130277a704542a57b24c013b589b28750af6ca12d6cc581a7305f6a35b0e72f7e1aa7a8f124a32114886e5f9cfd7710b3a2730d91affbd3df64df52bbee0c12866ce930867620050c4caf375964e578c197d6f2ad0715e02025c9a44c2c3e40191101dea3849d245c4c0f454ba4acb9cfb7665ca1f35bb80dc7be4bf81dc9b721f8c7adb61eff8e0a7dd7582c01c861a3ca1ee6a9cb9ac635a5f90bf83ba48dccf5e0b51d66d5b9ca69fbcc0fdc4e29b03e938baaf4630a42208474f17bbf9f756b328e9e44c0f95ecff1834c5de18607b06809234fb878d3a84520709d03326bb3109dc075fd1644f4cf156c89ce9f7919af8ed33cf8fb51f11272329af9d363f18ceb2355f8e0fc89187f3b54960ae44e80c61daa1d197889a44f751b476e35b7e57b84a0509853544e869223ab6847b5cdb97cfdc65f300739b3a4706db65159940d73ef0c3479d00e217d32f828ebe53689e946cec8038925bfe48baf7ce78d432a7a97f7301189b7d579c24a97abb31c0a4c2f0701a0f22983e8e2eb0d2131905415f6f1bd8102515c228261382467c3b88ba6a8643197dadfa94b17db6cb272b41a02e0613b7b4d0fa6b1730266f536c9a1ddba751e5406df3ee0c876a40e93b6e5accf82d7f204533a2c31fff10595d1672acf87524b39b42c36528563870b206fca9577f886634d5172064e68c788a0d06a36004cf8a8f8f9bc0727deecb924cd1a2d8060c09e7c363105596f3c426acbeb69b1bf70af79df7ec1df51c91a0d166907010fe4796c5c3b52665d811a73a63e3c8aaaf7a22a066a48c91a38e41d68168a76c661d6a21f9ad33adcddd307b8ccfd9e5e1de56c7f0ac17969035fa6df3bfc49fcd39cdb39a702f01c442e60873029ae7070f3ed9650f1c8b2536c0d2eff402b9a0f51c6815ff39eaf944f31f411dac11260650d3a2ea4f7a51d984a3eababa4a0e0df24348eb3e96333a51fbb2fe30087051f992bd5019c2368d3da4e4ef", 0x1000}, {&(0x7f0000001900)="d995273ebaa982e0a6b35aa4164dd5a964", 0x11}, {&(0x7f0000001940)="3d353e8b8b35bf056a8da0529a355b", 0xf}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="4d027a2ab637fa05cdbd2bf05d177e749bf6a00e33319dbaecf49c76b7255fa09d653c9a2d0d3093cf6fd3a396fe3d4346536ae5657bf7794bbef9770d55cb389e4e4c0895bfe4865e06c2fc22284c9195659a9eeaa7f9dbe309262af860cd06d45cc5cbbfc9c170ade87c54dbb31869c73c57433ea534", 0x77}, {&(0x7f0000002a00)="f0400d1cdc291eba8024525b33ff531b85192293d6ad9b00fe6bcf25b3980760f764c0c6b52f9c54cee2f4129da5104761339da7af444c96b47c91", 0x3b}], 0x7, &(0x7f0000002ac0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x34e3}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}], 0x60}}, {{&(0x7f0000002b40)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002bc0)="da9cb8351caacf4dc2f971b181bb4d8be27d5e9e5da8a01027bb186d0dcd644b27ec095482975ae9f8709f5dcf5a52b9166eb2cb05a1f6eb7555fd6f4c52fb707138991f2175f1805a1c43c97ec3c97436c8f7d2629c49ac03ab53e4797281059aeb991c43329ade21f8de71ddcc246f80c09df6e5177910307297f0bd4d25635516e88d411079bdad4f01162b4642d22a81107053684a365d515b5e0cfb90ed45f4b252050b1a4737a6a71a9e24e7515a32fbf57549c9a2548509603a0bb7d202b9022810b560ecbfcf3a3dde33eecf944d9564138db556da3c2c4a94a2b25fe8dfc2931d6c9c7fe653fe0b8f54bff67c41f7093b4e64", 0xf7}, {&(0x7f0000002cc0)="8d5d6e883a4ad20e378de839bcdae24fcaa5e8a93e73", 0x16}], 0x2, &(0x7f0000002d40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}], 0x30}}], 0x3, 0x8010) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000680)={0x8f, 0x0, 0xa}) 1.64739407s ago: executing program 3 (id=868): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0x5, 0x1b, {0x1b, 0xe, "852682cba473040000008bb8d5117686568e52ce63ddf92ae2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 426.017139ms ago: executing program 4 (id=869): symlink(&(0x7f0000000380)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187014, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000280)) setuid(0xee01) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) ioctl$TUNGETFEATURES(r5, 0x5452, &(0x7f0000001740)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="0000891f0180c2000002bbbbbbbbbbbb0806"], 0x2e) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) setfsuid(0x0) r9 = socket$inet6(0xa, 0x3, 0xff) dup2(r9, r9) r10 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f0000000300)={r10, &(0x7f00000001c0)='%$($\x00', 0x2, &(0x7f0000000240)={@align=0x2, {0x3, 0x8000, 0x5, 0x9}}, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0xffff}) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 340.656874ms ago: executing program 0 (id=870): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x74, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0x4, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x3, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x3ff, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x3112, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x1, 0xc, 0x7, 0xfffffffe, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3440, 0xfff]}, 0x45c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000001300000830bd7000fbdbdf251fda05064e214e22e38a000005000000000000020600000082210000f4ffffffff0300008f120000", @ANYRES32=0x0, @ANYBLOB="ffff06ff830000000800000000020000040001000400010070aa37e72f1202625002ca226758ebfa92132f04b4cd8369c73d99847bf79b0f2bab3e049000d80ccca3d87d825d13f5710e95fc77ce7e07293c16f746d04d4b937ad28df1f9bd82d76d87bb018775f392ef235c80d81b903ba5ebf8f78c8984cb5c8168f9b335"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@hopopts={0x33}, 0x8) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dc, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 332.896374ms ago: executing program 0 (id=871): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) dup(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 328.110224ms ago: executing program 4 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x1, 0x1, 0xc, 0x1000, 0x81}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140015"], 0x40}], 0x1}, 0x0) 240.839199ms ago: executing program 0 (id=873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xdc, 0x4, 0x3, 0xac7c, 0x2, 0x6, 0x1959, 0x278, 0x38, 0xd7, 0x1, 0x3fb, 0x20, 0x3, 0x40, 0x7, 0xe89}, [{0x7, 0x1c000000, 0x7, 0x8, 0x8, 0x9, 0x9, 0xfffffffe}, {0x7, 0x6, 0x6, 0x9, 0x9, 0x7ff, 0xa, 0x8000}, {0x3, 0xfffffff3, 0x0, 0x1, 0x5, 0x6, 0x6, 0x7}]}, 0x98) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 240.126208ms ago: executing program 4 (id=874): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)='proc\x00', 0x105d000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000240)=0x200000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)="00214500001400000000400600000a0002300052b323998400500005ffff000000016842b68162a38e00", 0x2a}], 0x1, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0xee01, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00') write(r1, &(0x7f0000000000)='3', 0x4e) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x102080, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffe4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x4000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)='proc\x00', 0x105d000, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000240)=0x200000) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) (async) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)="00214500001400000000400600000a0002300052b323998400500005ffff000000016842b68162a38e00", 0x2a}], 0x1, 0x3, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0xee01, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00') (async) write(r1, &(0x7f0000000000)='3', 0x4e) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x102080, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffe4) (async) 239.841628ms ago: executing program 0 (id=875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x0, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x9}, {0x3000, 0xb000, 0xf, 0x5, 0x4, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000020104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001"], 0x168}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 176.220362ms ago: executing program 4 (id=876): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="47b4cedb99dd675e8980a4b3710e6e95d69e46e22a3657fbd1007284ceb1647be66944e8b65dc762dfe53819f1a728873790d4328c4272c4a34b11b1f187ab46930e93894eda6ae9a1204bf1a6bf479ebc7e3e3598e66c3fcdb5107900b051dff0a2e451fd74342a5d5e0952975910ca82463530381300e8fc00035f01a7386283f3deeb951460ab3fb385672622d640b92493baf4b267e6809cd94e067f06547a7813250ac1a7bbb9e318a809", 0xad, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002c40)={0x0, 0xffffffffffffff8d, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x70}, 0x1, 0x0, 0x0, 0x414c0}, 0x4004800) 127.503574ms ago: executing program 4 (id=877): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0100"/16, @ANYRESOCT=r0, @ANYRES64=0x2710, @ANYRES8=r0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x20040000) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000110000000000000000000100", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000017e88a80d0d3b2e650ece1c8e914ad8d60f07284986dfcae5842391742ac344029c2594d95b9be5f8728803d738de19f839afe269ba0abd81"], 0x64}}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x8990, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000000010101000000000000000002000002240001801400018008000100e000000108000200e00000010c000280050001000000000014000f80"], 0x4c}, 0x1, 0x0, 0x0, 0x40c5}, 0x4c871) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt/irq/1/smp_affinity\x00', 0x82, 0x61) memfd_create(0x0, 0x1) (async) write$binfmt_elf32(r8, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES64=r4], 0x98) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1e, &(0x7f0000000200), 0x4) (async, rerun: 32) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10800, 0x0) (rerun: 32) write$tun(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xe2) socket$netlink(0x10, 0x3, 0x4) 40.698548ms ago: executing program 0 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) read(r2, &(0x7f00000000c0)=""/231, 0xe7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.168638ms ago: executing program 4 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "0400"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = socket(0x1e, 0x4, 0x0) r5 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x110000004}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x28, r6, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x14014) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r6, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wlan0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008880}, 0x404c884) sendmmsg$unix(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="4391db95cb62586a1b3af82a0d1e6c3e960cb94adaa1cacc445cf2b2570192ee7faeb42ce71999bdac1362c306fead3f97eb4fbb95803638ad2222bd6565f80c3be2d92bf4669225f98596e94ce4438ce1be438589dfe3", 0x57}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="819108ecc195fff39be32a3141da44ed8c44068e74a274840141555f03afc563e14a4cc110a938ef415d4dee65d95db3babfa5a4976523908db468389d55ff0ea20c5a909af6262c4d8711031812843e120355c9c5355d9198cfe07c949720f02dc531ca8f9451b39af988d62edbfd9089982e2880543cfc283db55510d4ec3db63ca92edc9add7f360c13283307674b6bd99578a4b8de27", 0x98}, {&(0x7f0000002a80)="64055b62fd6996f16560009deda684e91d75444e3e7c7524b6c39505ce80d38147dc5adc5c34bf016315165aa09055519c5b8efc54059b80504690f327cd4beb05184bbec1dca26fa3e91e6aaa45443b26deb5b833de64d431e718d9d9849c17842312dbda08f0029e26018b050420c928ccda30e236bdf55096c988982ae1", 0x7f}, {&(0x7f0000002b00)="87", 0x1}], 0x6, 0x0, 0x0, 0x44841}}], 0x1, 0x4000000) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r10 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r10, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r11 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r12, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460407006e07000000000000000100030003000000480000003800009cab9a00fcffffff0e000000000020000100050004000000000000000300000008000000ff0f00007f00000049000000f0ff1f000c00000016000000"], 0x58) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 39.894588ms ago: executing program 3 (id=880): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x74, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0x4, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x3, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x3ff, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x3112, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x1, 0xc, 0x7, 0xfffffffe, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3440, 0xfff]}, 0x45c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000001300000830bd7000fbdbdf251fda05064e214e22e38a000005000000000000020600000082210000f4ffffffff0300008f120000", @ANYRES32=0x0, @ANYBLOB="ffff06ff830000000800000000020000040001000400010070aa37e72f1202625002ca226758ebfa92132f04b4cd8369c73d99847bf79b0f2bab3e049000d80ccca3d87d825d13f5710e95fc77ce7e07293c16f746d04d4b937ad28df1f9bd82d76d87bb018775f392ef235c80d81b903ba5ebf8f78c8984cb5c8168f9b335"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@hopopts={0x33}, 0x8) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dc, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 3 (id=881): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ftruncate(r1, 0x7) (async) ftruncate(r1, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r2, r2, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) userfaultfd(0x80001) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) tee(r4, r4, 0x10000, 0x8) setxattr$security_selinux(&(0x7f0000002640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003640), &(0x7f0000003680)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x1) chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt(r3, 0x6a, 0x1, &(0x7f0000000080)="fa07cd3ff25a32b69b5820ad7ba54554e77daea07ae040177225685acd5762750737", 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) kernel console output (not intermixed with test programs): T464] usb 4-1: SerialNumber: syz [ 89.276001][ T1451] rust_binder: 1450:1451 no such ref 0 [ 89.283732][ T1451] rust_binder: 1450:1451 got transaction to invalid handle 1 [ 89.291967][ T1451] rust_binder: 1450:1451 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 89.302462][ T724] rust_binder: 1450: undelivered TRANSACTION_ERROR: 29201 [ 90.245879][ T1459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.256423][ T1459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.792460][ T1465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.803756][ T1465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.818206][ T1468] overlayfs: failed to resolve './file0': -2 [ 90.970588][ T311] usb 3-1: 1:1: invalid format type 0x9978 is detected, processed as PCM [ 90.979471][ T311] usb 3-1: 1:1 : unsupported sample bitwidth 76 in 64 bytes [ 90.987167][ T311] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.006301][ T464] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.235026][ T464] usb 4-1: failed to enable PITCH for EP 0x82 [ 91.244516][ T464] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 91.253655][ T464] usb 4-1: clock source 0 is not valid, cannot use [ 91.260796][ T464] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 91.267600][ T464] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 91.284227][ T464] usb 4-1: USB disconnect, device number 30 [ 91.306538][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 91.366739][ T1470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.381463][ T1470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.419850][ T1470] futex_wake_op: syz.2.352 tries to shift op by 144; fix this program [ 91.492394][ T1475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.508907][ T1475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.602083][ T1478] rust_binder: 1477:1478 no such ref 0 [ 91.609568][ T1478] rust_binder: 1477:1478 got transaction to invalid handle 1 [ 91.617329][ T1478] rust_binder: 1477:1478 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 91.627518][ T464] rust_binder: 1477: undelivered TRANSACTION_ERROR: 29201 [ 91.833540][ T1487] FAULT_INJECTION: forcing a failure. [ 91.833540][ T1487] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 91.868848][ T1487] CPU: 0 UID: 0 PID: 1487 Comm: syz.0.357 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 91.868881][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.868893][ T1487] Call Trace: [ 91.868900][ T1487] [ 91.868908][ T1487] __dump_stack+0x21/0x30 [ 91.868936][ T1487] dump_stack_lvl+0x140/0x1c0 [ 91.868960][ T1487] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.868985][ T1487] ? sched_clock_noinstr+0xd/0x30 [ 91.869007][ T1487] dump_stack+0x19/0x20 [ 91.869029][ T1487] should_fail_ex+0x3c2/0x510 [ 91.869051][ T1487] should_fail_alloc_page+0xec/0x110 [ 91.869073][ T1487] __alloc_pages_noprof+0x1c0/0x7e0 [ 91.869099][ T1487] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 91.869125][ T1487] ? __kasan_check_read+0x15/0x20 [ 91.869145][ T1487] fuse_readdir+0x2f1d/0x4a70 [ 91.869164][ T1487] ? avc_has_perm_noaudit+0x26b/0x360 [ 91.869190][ T1487] ? avc_has_perm+0x155/0x240 [ 91.869210][ T1487] ? __cfi_avc_has_perm+0x10/0x10 [ 91.869232][ T1487] ? __cfi_fuse_readdir+0x10/0x10 [ 91.869251][ T1487] ? selinux_file_open+0x46c/0x630 [ 91.869269][ T1487] ? __cfi_selinux_file_open+0x10/0x10 [ 91.869292][ T1487] ? is_bpf_text_address+0x17b/0x1a0 [ 91.869324][ T1487] ? _parse_integer+0x2e/0x40 [ 91.869343][ T1487] ? kstrtoull+0x120/0x1e0 [ 91.869362][ T1487] ? kstrtouint+0x78/0xf0 [ 91.869379][ T1487] ? __cfi_trace_clock_local+0x10/0x10 [ 91.869400][ T1487] ? __kasan_check_write+0x18/0x20 [ 91.869417][ T1487] ? rwsem_read_trylock+0x275/0x5a0 [ 91.869444][ T1487] ? downgrade_write+0x470/0x470 [ 91.869469][ T1487] ? __cfi_selinux_file_permission+0x10/0x10 [ 91.869489][ T1487] ? down_read_killable+0x7f/0x100 [ 91.869512][ T1487] ? __cfi_down_read_killable+0x10/0x10 [ 91.869534][ T1487] ? bpf_lsm_file_permission+0xd/0x20 [ 91.869558][ T1487] iterate_dir+0x1fd/0x5c0 [ 91.869580][ T1487] __se_sys_getdents64+0xf6/0x250 [ 91.869602][ T1487] ? __x64_sys_getdents64+0xa0/0xa0 [ 91.869625][ T1487] ? __cfi_filldir64+0x10/0x10 [ 91.869647][ T1487] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 91.869675][ T1487] __x64_sys_getdents64+0x7f/0xa0 [ 91.869697][ T1487] x64_sys_call+0x27d0/0x2ee0 [ 91.869713][ T1487] do_syscall_64+0x57/0xf0 [ 91.869729][ T1487] ? clear_bhb_loop+0x50/0xa0 [ 91.869750][ T1487] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.869770][ T1487] RIP: 0033:0x7f239f79e159 [ 91.869786][ T1487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.869808][ T1487] RSP: 002b:00007f239e1d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 91.869828][ T1487] RAX: ffffffffffffffda RBX: 00007f239fa26090 RCX: 00007f239f79e159 [ 91.869848][ T1487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 91.869859][ T1487] RBP: 00007f239e1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.869871][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.869882][ T1487] R13: 00007f239fa26128 R14: 00007f239fa26090 R15: 00007ffcdc0182a8 [ 91.869898][ T1487] [ 92.301339][ T1493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.309944][ T1493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.322367][ T36] audit: type=1400 audit(1789193554.480:319): avc: denied { bind } for pid=1492 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.341813][ T36] audit: type=1400 audit(1789193554.480:320): avc: denied { write } for pid=1492 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.649365][ T1499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.717016][ T1499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.756024][ T1501] rust_binder: 1500:1501 no such ref 0 [ 92.769867][ T1501] rust_binder: 1500:1501 got transaction to invalid handle 1 [ 92.787723][ T1501] rust_binder: 1500:1501 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 92.833768][ T10] rust_binder: 1500: undelivered TRANSACTION_ERROR: 29201 [ 92.892346][ T1506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.903131][ T1506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.957181][ T1499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.966792][ T1499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.977229][ T1499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.987229][ T1499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.998214][ T1499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.007858][ T1499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.108279][ T10] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 93.118550][ T1506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.130452][ T1506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.279896][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.288918][ T10] usb 4-1: config 3 has an invalid interface number: 67 but max is 0 [ 93.297165][ T10] usb 4-1: config 3 has no interface number 0 [ 93.303811][ T10] usb 4-1: config 3 interface 67 has no altsetting 0 [ 93.313057][ T10] usb 4-1: string descriptor 0 read error: -22 [ 93.319742][ T10] usb 4-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28 [ 93.329127][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.345218][ T10] uvcvideo 4-1:3.67: Found multiple Units with ID 1 [ 93.355409][ T10] usb 4-1: Found UVC 0.00 device (13d3:5103) [ 93.362836][ T10] usb 4-1: No valid video chain found. [ 93.545740][ T10] usb 4-1: USB disconnect, device number 31 [ 93.560742][ T1511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.576267][ T1511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.115535][ T1515] No source specified [ 94.181102][ T1518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.369'. [ 94.190724][ T1518] tipc: Invalid UDP bearer configuration [ 94.190749][ T1518] tipc: Enabling of bearer rejected, failed to enable media [ 94.289109][ T1524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.298925][ T1524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.310579][ T1524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.320075][ T1524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.329870][ T1524] netlink: 182 bytes leftover after parsing attributes in process `syz.4.371'. [ 94.498291][ T312] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 94.649994][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.660493][ T312] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.673975][ T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 94.683288][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.698351][ T312] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 95.037698][ T36] audit: type=1400 audit(1789193557.190:321): avc: denied { mounton } for pid=1527 comm="syz.4.373" path="/67/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 95.066452][ T36] audit: type=1400 audit(1789193557.230:322): avc: denied { mounton } for pid=1527 comm="syz.4.373" path="/67/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.886454][ T1537] FAULT_INJECTION: forcing a failure. [ 95.886454][ T1537] name failslab, interval 1, probability 0, space 0, times 0 [ 95.901901][ T1537] CPU: 0 UID: 0 PID: 1537 Comm: syz.4.374 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 95.901927][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.901940][ T1537] Call Trace: [ 95.901946][ T1537] [ 95.901954][ T1537] __dump_stack+0x21/0x30 [ 95.901981][ T1537] dump_stack_lvl+0x140/0x1c0 [ 95.902005][ T1537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.902029][ T1537] ? sched_clock_noinstr+0xd/0x30 [ 95.902050][ T1537] ? __kasan_check_read+0x15/0x20 [ 95.902070][ T1537] ? __rb_reserve_next+0x7d4/0xdf0 [ 95.902094][ T1537] dump_stack+0x19/0x20 [ 95.902117][ T1537] should_fail_ex+0x3c2/0x510 [ 95.902139][ T1537] should_failslab+0xac/0x100 [ 95.902160][ T1537] kmem_cache_alloc_noprof+0x42/0x410 [ 95.902179][ T1537] ? fuse_request_alloc+0x43/0x1f0 [ 95.902201][ T1537] fuse_request_alloc+0x43/0x1f0 [ 95.902222][ T1537] ? fuse_get_req+0x485/0xb00 [ 95.902242][ T1537] fuse_get_req+0x49e/0xb00 [ 95.902263][ T1537] ? fuse_request_alloc+0x1f0/0x1f0 [ 95.902284][ T1537] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 95.902306][ T1537] ? trace_event_buffer_commit+0x256/0x8f0 [ 95.902326][ T1537] __fuse_simple_request+0x293/0x1a90 [ 95.902348][ T1537] ? __cfi___fuse_simple_request+0x10/0x10 [ 95.902379][ T1537] ? __alloc_pages_noprof+0x793/0x7e0 [ 95.902408][ T1537] ? __kasan_check_write+0x18/0x20 [ 95.902425][ T1537] ? mutex_lock+0x97/0x1d0 [ 95.902445][ T1537] ? __cfi_mutex_lock+0x10/0x10 [ 95.902465][ T1537] ? __kasan_check_write+0x18/0x20 [ 95.902484][ T1537] fuse_readdir+0x327e/0x4a70 [ 95.902504][ T1537] ? avc_has_perm_noaudit+0x26b/0x360 [ 95.902528][ T1537] ? avc_has_perm+0x155/0x240 [ 95.902549][ T1537] ? __cfi_avc_has_perm+0x10/0x10 [ 95.902571][ T1537] ? __cfi_fuse_readdir+0x10/0x10 [ 95.902589][ T1537] ? selinux_file_open+0x46c/0x630 [ 95.902608][ T1537] ? __cfi_selinux_file_open+0x10/0x10 [ 95.902631][ T1537] ? is_bpf_text_address+0x17b/0x1a0 [ 95.902661][ T1537] ? _parse_integer+0x2e/0x40 [ 95.902679][ T1537] ? kstrtoull+0x120/0x1e0 [ 95.902698][ T1537] ? kstrtouint+0x78/0xf0 [ 95.902715][ T1537] ? __cfi_trace_clock_local+0x10/0x10 [ 95.902735][ T1537] ? __kasan_check_write+0x18/0x20 [ 95.902753][ T1537] ? rwsem_read_trylock+0x275/0x5a0 [ 95.902779][ T1537] ? downgrade_write+0x470/0x470 [ 95.902804][ T1537] ? __cfi_selinux_file_permission+0x10/0x10 [ 95.902823][ T1537] ? down_read_killable+0x7f/0x100 [ 95.902845][ T1537] ? __cfi_down_read_killable+0x10/0x10 [ 95.902868][ T1537] ? bpf_lsm_file_permission+0xd/0x20 [ 95.902890][ T1537] iterate_dir+0x1fd/0x5c0 [ 95.902913][ T1537] __se_sys_getdents64+0xf6/0x250 [ 95.902935][ T1537] ? __x64_sys_getdents64+0xa0/0xa0 [ 95.902957][ T1537] ? __cfi_filldir64+0x10/0x10 [ 95.902980][ T1537] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 95.903007][ T1537] __x64_sys_getdents64+0x7f/0xa0 [ 95.903030][ T1537] x64_sys_call+0x27d0/0x2ee0 [ 95.903046][ T1537] do_syscall_64+0x57/0xf0 [ 95.903061][ T1537] ? clear_bhb_loop+0x50/0xa0 [ 95.903082][ T1537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.903102][ T1537] RIP: 0033:0x7f7d0879e159 [ 95.903118][ T1537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.903132][ T1537] RSP: 002b:00007f7d071f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 95.903152][ T1537] RAX: ffffffffffffffda RBX: 00007f7d08a26090 RCX: 00007f7d0879e159 [ 95.903165][ T1537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 95.903177][ T1537] RBP: 00007f7d071f7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.903188][ T1537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.903199][ T1537] R13: 00007f7d08a26128 R14: 00007f7d08a26090 R15: 00007fff33a2fcb8 [ 95.903215][ T1537] [ 96.487330][ T1542] rust_binder: 1541:1542 no such ref 0 [ 96.508571][ T1545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.521581][ T1546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.548389][ T1545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.560706][ T1546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.858298][ T10] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 97.009985][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.019165][ T10] usb 1-1: config 3 has an invalid descriptor of length 200, skipping remainder of the config [ 97.029718][ T10] usb 1-1: config 3 interface 0 has no altsetting 0 [ 97.038815][ T10] usb 1-1: string descriptor 0 read error: -22 [ 97.045345][ T10] usb 1-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28 [ 97.054705][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.136557][ T10] usb 4-1: USB disconnect, device number 32 [ 97.186913][ T1562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.210459][ T1562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.267791][ T464] usb 1-1: USB disconnect, device number 25 [ 97.356166][ T1567] rust_binder: 1566:1567 no such ref 0 [ 97.413198][ T1572] netlink: 'syz.3.388': attribute type 11 has an invalid length. [ 97.470053][ T1575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.480157][ T1575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.904550][ T1578] FAULT_INJECTION: forcing a failure. [ 97.904550][ T1578] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.938410][ T1578] CPU: 0 UID: 0 PID: 1578 Comm: syz.0.390 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 97.938440][ T1578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.938453][ T1578] Call Trace: [ 97.938460][ T1578] [ 97.938468][ T1578] __dump_stack+0x21/0x30 [ 97.938496][ T1578] dump_stack_lvl+0x140/0x1c0 [ 97.938520][ T1578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.938545][ T1578] ? check_stack_object+0x138/0x150 [ 97.938565][ T1578] dump_stack+0x19/0x20 [ 97.938588][ T1578] should_fail_ex+0x3c2/0x510 [ 97.938609][ T1578] should_fail+0xf/0x20 [ 97.938628][ T1578] should_fail_usercopy+0x1e/0x30 [ 97.938653][ T1578] _copy_to_user+0x24/0xa0 [ 97.938678][ T1578] simple_read_from_buffer+0xed/0x160 [ 97.938703][ T1578] proc_fail_nth_read+0x1aa/0x220 [ 97.938729][ T1578] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 97.938754][ T1578] ? bpf_lsm_file_permission+0xd/0x20 [ 97.938776][ T1578] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 97.938801][ T1578] vfs_read+0x28b/0xc70 [ 97.938819][ T1578] ? rb_commit+0x753/0x7b0 [ 97.938839][ T1578] ? __cfi_vfs_read+0x10/0x10 [ 97.938856][ T1578] ? __kasan_check_write+0x18/0x20 [ 97.938873][ T1578] ? mutex_lock+0x97/0x1d0 [ 97.938893][ T1578] ? __cfi_mutex_lock+0x10/0x10 [ 97.938915][ T1578] ksys_read+0x145/0x260 [ 97.938933][ T1578] ? __cfi_ksys_read+0x10/0x10 [ 97.938951][ T1578] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 97.938978][ T1578] __x64_sys_read+0x7f/0x90 [ 97.938996][ T1578] x64_sys_call+0x2638/0x2ee0 [ 97.939012][ T1578] do_syscall_64+0x57/0xf0 [ 97.939027][ T1578] ? clear_bhb_loop+0x50/0xa0 [ 97.939049][ T1578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.939069][ T1578] RIP: 0033:0x7f239f75e98e [ 97.939084][ T1578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.939100][ T1578] RSP: 002b:00007f239e1d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.939120][ T1578] RAX: ffffffffffffffda RBX: 00007f239e1d66c0 RCX: 00007f239f75e98e [ 97.939134][ T1578] RDX: 000000000000000f RSI: 00007f239e1d60a0 RDI: 0000000000000005 [ 97.939147][ T1578] RBP: 00007f239e1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.939158][ T1578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.939170][ T1578] R13: 00007f239fa26128 R14: 00007f239fa26090 R15: 00007ffcdc0182a8 [ 97.939215][ T1578] [ 98.319082][ T1592] rust_binder: 1591:1592 no such ref 0 [ 98.377592][ T36] audit: type=1400 audit(1789193560.520:323): avc: denied { map } for pid=1593 comm="syz.0.397" path="socket:[13992]" dev="sockfs" ino=13992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.400990][ T36] audit: type=1400 audit(1789193560.520:324): avc: denied { read } for pid=1593 comm="syz.0.397" path="socket:[13992]" dev="sockfs" ino=13992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.469164][ T1600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.499124][ T1600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.513123][ T36] audit: type=1400 audit(1789193560.670:325): avc: denied { read } for pid=1601 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.587759][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.606864][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.868314][ T464] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 99.020083][ T464] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.028671][ T464] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 99.055628][ T464] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 99.081019][ T464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.114638][ T464] usb 4-1: Product: syz [ 99.137806][ T464] usb 4-1: Manufacturer: syz [ 99.152868][ T464] usb 4-1: SerialNumber: syz [ 99.163045][ T1616] rust_binder: 1615:1616 no such ref 0 [ 99.239793][ T36] audit: type=1326 audit(1789193561.400:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.4.407" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d0879e159 code=0x0 [ 99.329462][ T36] audit: type=1400 audit(1789193561.490:327): avc: denied { read } for pid=1620 comm="syz.0.409" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 99.357619][ T36] audit: type=1400 audit(1789193561.490:328): avc: denied { open } for pid=1620 comm="syz.0.409" path="/83/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 99.416451][ T464] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.434379][ T36] audit: type=1400 audit(1789193561.520:329): avc: denied { ioctl } for pid=1620 comm="syz.0.409" path="/83/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 99.534445][ T36] audit: type=1400 audit(1789193561.630:330): avc: denied { accept } for pid=1626 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.898286][ T724] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 99.998435][ T464] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 100.017595][ T464] usb 4-1: USB disconnect, device number 33 [ 100.048299][ T724] usb 1-1: Using ep0 maxpacket: 32 [ 100.079921][ T724] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 100.114336][ T1639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 100.124778][ T36] audit: type=1400 audit(1789193562.260:331): avc: denied { bind } for pid=1638 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.154937][ T724] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 100.167243][ T724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.215051][ T724] usb 1-1: Product: syz [ 100.221453][ T1645] rust_binder: 1643:1645 no such ref 0 [ 100.232473][ T724] usb 1-1: Manufacturer: syz [ 100.237096][ T724] usb 1-1: SerialNumber: syz [ 100.276462][ T36] audit: type=1400 audit(1789193562.430:332): avc: denied { read } for pid=1647 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.411967][ T1655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.420952][ T1655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.468939][ T1637] futex_wake_op: syz.0.414 tries to shift op by 144; fix this program [ 100.574738][ T724] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.581817][ T724] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 100.589338][ T724] usb 1-1: 0:3 : does not exist [ 100.594301][ T724] usb 1-1: 0:4 : does not exist [ 100.599778][ T724] usb 1-1: unit 7 not found! [ 100.610922][ T724] usb 1-1: USB disconnect, device number 27 [ 100.636362][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 101.155503][ T1670] rust_binder: 1669:1670 no such ref 0 [ 101.253225][ T1683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.263390][ T1683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.358273][ T724] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 101.508308][ T724] usb 1-1: Using ep0 maxpacket: 8 [ 101.515338][ T724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.524244][ T724] usb 1-1: config 3 has an invalid interface number: 188 but max is 0 [ 101.532742][ T724] usb 1-1: config 3 has no interface number 0 [ 101.539307][ T724] usb 1-1: config 3 interface 188 has no altsetting 0 [ 101.547789][ T724] usb 1-1: New USB device found, idVendor=12d1, idProduct=840a, bcdDevice=18.2c [ 101.557897][ T724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.566201][ T724] usb 1-1: Product: syz [ 101.570817][ T724] usb 1-1: Manufacturer: syz [ 101.575582][ T724] usb 1-1: SerialNumber: syz [ 101.678255][ T464] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 101.795053][ T724] usb 1-1: USB disconnect, device number 28 [ 101.829523][ T464] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.840835][ T464] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.854733][ T464] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.861780][ T464] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 101.871675][ T464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.887695][ T464] usb 4-1: config 0 descriptor?? [ 102.084677][ T1697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.106212][ T1697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.219339][ T1695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.433'. [ 102.307489][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.323353][ T1702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.346301][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.354770][ T1705] rust_binder: 1704:1705 no such ref 0 [ 102.362566][ T1702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.372675][ T1705] rust_binder: 1704:1705 got transaction to invalid handle 1 [ 102.380234][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.391620][ T1705] rust_binder: 1704:1705 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 102.410817][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.421539][ T1702] incfs: Can't find or create .index dir in ./cgroup [ 102.432347][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.444905][ T724] rust_binder: 1704: undelivered TRANSACTION_ERROR: 29201 [ 102.458374][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.479417][ T1702] incfs: mount failed -22 [ 102.489579][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.497280][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.535613][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.552355][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.568256][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.586347][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.598259][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.617032][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.635145][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.648622][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.671332][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.687989][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.698428][ T464] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 102.719871][ T464] hid-multitouch 0003:0EEF:72C4.000A: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 102.768292][ T311] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 102.924943][ T1717] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 102.940507][ T1717] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 102.958823][ T1717] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 102.966971][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 102.987621][ T311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 102.997840][ T1717] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 103.012296][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 103.032061][ T311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 103.054736][ T311] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 103.064308][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.084174][ T311] usb 1-1: Product: syz [ 103.098090][ T311] usb 1-1: Manufacturer: syz [ 103.110481][ T311] usb 1-1: SerialNumber: syz [ 103.116429][ T1719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.126413][ T311] usb 1-1: config 0 descriptor?? [ 103.136361][ T311] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 103.157249][ T1719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.343957][ T311] scsi host1: usb-storage 1-1:0.0 [ 103.370617][ T311] usb 1-1: USB disconnect, device number 29 [ 103.741811][ T1726] fuse: Bad value for 'user_id' [ 103.752296][ T1726] fuse: Bad value for 'user_id' [ 103.911558][ T1735] rust_binder: 1734:1735 no such ref 0 [ 103.926506][ T1735] rust_binder: 1734:1735 got transaction to invalid handle 1 [ 103.944374][ T1735] rust_binder: 1734:1735 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 103.966251][ T9] rust_binder: 1734: undelivered TRANSACTION_ERROR: 29201 [ 104.431826][ T9] usb 4-1: USB disconnect, device number 34 [ 104.601380][ T1748] fuse: Bad value for 'rootmode' [ 104.749468][ T1752] syz.2.452 uses obsolete (PF_INET,SOCK_PACKET) [ 104.798270][ T311] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 104.871771][ T1756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.888289][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 104.897658][ T1756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.969745][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.982762][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 105.001222][ T311] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 105.016170][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.032284][ T311] usb 1-1: Product: syz [ 105.041244][ T311] usb 1-1: Manufacturer: syz [ 105.051573][ T311] usb 1-1: SerialNumber: syz [ 105.061038][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.078050][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 105.100056][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 105.115509][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.133952][ T9] usb 4-1: Product: syz [ 105.138157][ T9] usb 4-1: Manufacturer: syz [ 105.154549][ T9] usb 4-1: SerialNumber: syz [ 105.276096][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 105.535903][ T1775] rust_binder: 1774:1775 no such ref 0 [ 105.551991][ T1775] rust_binder: 1774:1775 got transaction to invalid handle 1 [ 105.574187][ T1775] rust_binder: 1774:1775 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 105.603735][ T464] rust_binder: 1774: undelivered TRANSACTION_ERROR: 29201 [ 105.697385][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 105.697401][ T36] audit: type=1400 audit(1789193567.850:339): avc: denied { connect } for pid=1781 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.725185][ T1782] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 105.745763][ T36] audit: type=1400 audit(1789193567.890:340): avc: denied { write } for pid=1781 comm="syz.4.458" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 105.810844][ T36] audit: type=1400 audit(1789193567.900:341): avc: denied { ioctl } for pid=1781 comm="syz.4.458" path="socket:[15187]" dev="sockfs" ino=15187 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.836322][ T36] audit: type=1400 audit(1789193567.900:342): avc: denied { create } for pid=1781 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 106.086553][ T311] usb 1-1: failed to enable PITCH for EP 0x82 [ 106.106915][ T311] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 106.120706][ T1788] netlink: 'syz.3.460': attribute type 6 has an invalid length. [ 106.128656][ T311] usb 1-1: clock source 0 is not valid, cannot use [ 106.139693][ T311] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 106.146421][ T311] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 106.158165][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.169634][ T311] usb 1-1: USB disconnect, device number 30 [ 106.183476][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 106.229893][ T9] usb 4-1: USB disconnect, device number 35 [ 106.263725][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.353868][ T36] audit: type=1400 audit(1789193568.510:343): avc: denied { ioctl } for pid=1789 comm="syz.4.461" path="socket:[15223]" dev="sockfs" ino=15223 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.588308][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 106.738242][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 106.752425][ T1803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.755228][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 106.791576][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.809095][ T9] usb 4-1: Product: syz [ 106.823991][ T9] usb 4-1: Manufacturer: syz [ 106.835396][ T9] usb 4-1: SerialNumber: syz [ 106.841583][ T1809] usb usb9: usbfs: process 1809 (syz.0.467) did not claim interface 2 before use [ 107.098285][ T311] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 107.156486][ T1813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.166108][ T1813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.249939][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.259914][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.273103][ T311] usb 1-1: string descriptor 0 read error: -22 [ 107.279744][ T311] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 107.289615][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.504451][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.548526][ T311] usb 1-1: failed to read current rate; disabling the check [ 107.568778][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.621630][ T1821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 107.630851][ T36] audit: type=1400 audit(1789193569.780:344): avc: denied { write } for pid=1815 comm="syz.2.469" name="/" dev="incremental-fs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.660873][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.673140][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.734696][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.745654][ T36] audit: type=1400 audit(1789193569.780:345): avc: denied { add_name } for pid=1815 comm="syz.2.469" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.786258][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.795002][ T1826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.819686][ T1826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.828869][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.837299][ T36] audit: type=1400 audit(1789193569.780:346): avc: denied { create } for pid=1815 comm="syz.2.469" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.859963][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.871936][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.880666][ T36] audit: type=1400 audit(1789193569.780:347): avc: denied { associate } for pid=1815 comm="syz.2.469" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 107.902602][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.913781][ T36] audit: type=1400 audit(1789193569.930:348): avc: denied { setopt } for pid=1823 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.274707][ T1788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.284677][ T1788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.293874][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 108.305796][ T9] usb 4-1: USB disconnect, device number 36 [ 108.484655][ T1832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.494876][ T1832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.511367][ T1832] serio: Serial port ptm1 [ 108.593100][ T1836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.645326][ T1840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.668795][ T1840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.209893][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 109.227218][ T1847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.241565][ T1849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.250993][ T1847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.260065][ T1849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.280358][ T1847] FAULT_INJECTION: forcing a failure. [ 109.280358][ T1847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.293714][ T1847] CPU: 0 UID: 0 PID: 1847 Comm: syz.4.479 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 109.293746][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.293758][ T1847] Call Trace: [ 109.293765][ T1847] [ 109.293772][ T1847] __dump_stack+0x21/0x30 [ 109.293802][ T1847] dump_stack_lvl+0x140/0x1c0 [ 109.293826][ T1847] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.293850][ T1847] ? check_stack_object+0x138/0x150 [ 109.293870][ T1847] dump_stack+0x19/0x20 [ 109.293893][ T1847] should_fail_ex+0x3c2/0x510 [ 109.293915][ T1847] should_fail+0xf/0x20 [ 109.293934][ T1847] should_fail_usercopy+0x1e/0x30 [ 109.293956][ T1847] set_fd_set+0x2d/0x90 [ 109.293980][ T1847] core_sys_select+0x5eb/0x7f0 [ 109.294003][ T1847] ? __rb_reserve_next+0x7d4/0xdf0 [ 109.294028][ T1847] ? __cfi_core_sys_select+0x10/0x10 [ 109.294055][ T1847] ? __cfi_set_user_sigmask+0x10/0x10 [ 109.294081][ T1847] __se_sys_pselect6+0x268/0x320 [ 109.294105][ T1847] ? __x64_sys_pselect6+0x110/0x110 [ 109.294130][ T1847] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 109.294158][ T1847] __x64_sys_pselect6+0xe9/0x110 [ 109.294182][ T1847] x64_sys_call+0x2980/0x2ee0 [ 109.294199][ T1847] do_syscall_64+0x57/0xf0 [ 109.294220][ T1847] ? clear_bhb_loop+0x50/0xa0 [ 109.294243][ T1847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.294265][ T1847] RIP: 0033:0x7f7d0879e159 [ 109.294281][ T1847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.294296][ T1847] RSP: 002b:00007f7d09584028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 109.294317][ T1847] RAX: ffffffffffffffda RBX: 00007f7d08a25fa0 RCX: 00007f7d0879e159 [ 109.294331][ T1847] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 109.294343][ T1847] RBP: 00007f7d0883503b R08: 0000200000000280 R09: 0000000000000000 [ 109.294356][ T1847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.294369][ T1847] R13: 00007f7d08a26038 R14: 00007f7d08a25fa0 R15: 00007fff33a2fcb8 [ 109.294384][ T1847] [ 109.579984][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.588698][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 109.601553][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 109.610761][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.618805][ T9] usb 4-1: Product: syz [ 109.622966][ T9] usb 4-1: Manufacturer: syz [ 109.627752][ T9] usb 4-1: SerialNumber: syz [ 109.847034][ T311] usb 1-1: USB disconnect, device number 31 [ 109.861473][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 109.877515][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 109.921609][ T9] usb 4-1: USB disconnect, device number 37 [ 110.031831][ T1858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.483'. [ 110.067697][ T1862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.378501][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 110.443859][ T1872] netlink: 'syz.3.489': attribute type 27 has an invalid length. [ 110.559983][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.569143][ T9] usb 1-1: config 3 has an invalid interface number: 67 but max is 0 [ 110.577379][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 110.588457][ T9] usb 1-1: config 3 has no interface number 0 [ 110.594697][ T9] usb 1-1: config 3 interface 67 has no altsetting 0 [ 110.604279][ T9] usb 1-1: string descriptor 0 read error: -22 [ 110.610822][ T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28 [ 110.620442][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.845353][ T1868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.870553][ T1868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.880913][ T1874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.892065][ T9] usb 1-1: USB disconnect, device number 32 [ 110.903525][ T1874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.061842][ T1880] ======================================================= [ 111.061842][ T1880] WARNING: The mand mount option has been deprecated and [ 111.061842][ T1880] and is ignored by this kernel. Remove the mand [ 111.061842][ T1880] option from the mount to silence this warning. [ 111.061842][ T1880] ======================================================= [ 111.105262][ T1881] overlay: Bad value for 'redirect_dir' [ 111.113050][ T1879] fuse: Bad value for 'fd' [ 111.142827][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 111.142843][ T36] audit: type=1400 audit(1789193573.300:354): avc: denied { append } for pid=1884 comm="syz.3.493" name="usbmon4" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.192320][ T1887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.192825][ T1887] rust_binder: 1886:1887 got transaction to invalid handle 1 [ 111.210441][ T1887] rust_binder: 1886:1887 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 111.220844][ T9] rust_binder: 1886: undelivered TRANSACTION_ERROR: 29201 [ 111.464175][ T1897] fuse: Bad value for 'rootmode' [ 111.860895][ T1914] rust_binder: 1913:1914 got transaction to invalid handle 1 [ 111.868799][ T1914] rust_binder: 1913:1914 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 111.879346][ T9] rust_binder: 1913: undelivered TRANSACTION_ERROR: 29201 [ 112.292009][ T1928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.302140][ T1928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.503490][ T36] audit: type=1400 audit(1789193574.660:355): avc: denied { remount } for pid=1930 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.735181][ T1943] rust_binder: 1942:1943 got transaction to invalid handle 1 [ 112.750721][ T1943] rust_binder: 1942:1943 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 112.770611][ T9] rust_binder: 1942: undelivered TRANSACTION_ERROR: 29201 [ 112.868236][ T36] audit: type=1400 audit(1789193575.020:356): avc: denied { bind } for pid=1946 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.897298][ T1948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 112.906541][ T1950] ./dev/sda1: Can't lookup blockdev [ 112.924252][ T1948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 113.027908][ T1956] netlink: 'syz.4.517': attribute type 16 has an invalid length. [ 113.207761][ T1967] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 113.240127][ T1970] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.240757][ T1970] rust_binder: 1969:1970 got transaction to invalid handle 1 [ 113.269437][ T1970] rust_binder: 1969:1970 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 113.290823][ T311] rust_binder: 1969: undelivered TRANSACTION_ERROR: 29201 [ 113.380362][ T1974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.406523][ T1974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.421682][ T1976] ./dev/sda1: Can't lookup blockdev [ 113.469089][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.479614][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.491073][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.500830][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.520721][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.530846][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.542568][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.552130][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.028022][ T1988] rust_binder: 1987:1988 got transaction to invalid handle 1 [ 114.035720][ T1988] rust_binder: 1987:1988 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 114.045970][ T10] rust_binder: 1987: undelivered TRANSACTION_ERROR: 29201 [ 114.148334][ T311] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 114.207887][ T2002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.531'. [ 114.318506][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.338252][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 114.363325][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.373626][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.386821][ T311] usb 4-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 114.407435][ T311] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.440306][ T311] usb 4-1: config 1 interface 0 has no altsetting 0 [ 114.456140][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.467959][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.485062][ T311] usb 4-1: Product: syz [ 114.495166][ T311] usb 4-1: Manufacturer: syz [ 114.504486][ T311] usb 4-1: SerialNumber: syz [ 114.721721][ T311] cdc_ether 4-1:1.0: skipping garbage [ 114.731477][ T311] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 114.751841][ T311] usb 4-1: USB disconnect, device number 38 [ 114.979443][ T2008] incfs: Can't find or create .index dir in ./cgroup [ 115.014033][ T2008] incfs: mount failed -22 [ 115.028276][ T36] audit: type=1400 audit(1789193577.180:357): avc: denied { map } for pid=2007 comm="syz.4.536" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.055632][ T2011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.064422][ T2008] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.131894][ T2011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.144082][ T2015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.144602][ T2015] rust_binder: 2014:2015 got transaction to invalid handle 1 [ 115.170168][ T2015] rust_binder: 2014:2015 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 115.199170][ T311] rust_binder: 2014: undelivered TRANSACTION_ERROR: 29201 [ 115.466607][ T36] audit: type=1400 audit(1789193577.620:358): avc: denied { read } for pid=2029 comm="syz.3.544" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.550397][ T36] audit: type=1400 audit(1789193577.660:359): avc: denied { open } for pid=2029 comm="syz.3.544" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.602687][ T36] audit: type=1400 audit(1789193577.660:360): avc: denied { relabelfrom } for pid=2029 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 115.645153][ T36] audit: type=1400 audit(1789193577.660:361): avc: denied { relabelto } for pid=2029 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 115.686929][ T36] audit: type=1400 audit(1789193577.660:362): avc: denied { attach_queue } for pid=2029 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 115.788987][ T311] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 115.949820][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.958866][ T311] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 115.974889][ T311] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 115.984517][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.001954][ T311] usb 4-1: Product: syz [ 116.020574][ T311] usb 4-1: Manufacturer: syz [ 116.025945][ T311] usb 4-1: SerialNumber: syz [ 116.124275][ T2037] fuse: Bad value for 'user_id' [ 116.136020][ T2037] fuse: Bad value for 'user_id' [ 116.252896][ T311] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.403565][ T2041] rust_binder: 2040:2041 got transaction to invalid handle 1 [ 116.420037][ T2041] rust_binder: 2040:2041 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 116.443292][ T10] rust_binder: 2040: undelivered TRANSACTION_ERROR: 29201 [ 116.548609][ T2045] FAULT_INJECTION: forcing a failure. [ 116.548609][ T2045] name failslab, interval 1, probability 0, space 0, times 0 [ 116.561597][ T2045] CPU: 0 UID: 0 PID: 2045 Comm: syz.0.550 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 116.561626][ T2045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.561638][ T2045] Call Trace: [ 116.561645][ T2045] [ 116.561653][ T2045] __dump_stack+0x21/0x30 [ 116.561681][ T2045] dump_stack_lvl+0x140/0x1c0 [ 116.561705][ T2045] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.561730][ T2045] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 116.561752][ T2045] dump_stack+0x19/0x20 [ 116.561774][ T2045] should_fail_ex+0x3c2/0x510 [ 116.561796][ T2045] should_failslab+0xac/0x100 [ 116.561818][ T2045] kmem_cache_alloc_noprof+0x42/0x410 [ 116.561837][ T2045] ? security_inode_alloc+0x51/0x230 [ 116.561862][ T2045] security_inode_alloc+0x51/0x230 [ 116.561885][ T2045] inode_init_always_gfp+0x756/0x9e0 [ 116.561907][ T2045] alloc_inode+0xc5/0x270 [ 116.561929][ T2045] iget_locked+0x198/0x9a0 [ 116.561953][ T2045] ? __cfi_iget_locked+0x10/0x10 [ 116.561976][ T2045] ? __kasan_check_write+0x18/0x20 [ 116.561994][ T2045] ? rwsem_read_trylock+0x275/0x5a0 [ 116.562020][ T2045] ? downgrade_write+0x470/0x470 [ 116.562048][ T2045] kernfs_get_inode+0x50/0x830 [ 116.562069][ T2045] kernfs_iop_lookup+0x213/0x320 [ 116.562093][ T2045] __lookup_slow+0x2e2/0x420 [ 116.562115][ T2045] ? lookup_one_len+0x300/0x300 [ 116.562136][ T2045] ? down_read+0x7f/0xe0 [ 116.562158][ T2045] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 116.562181][ T2045] lookup_slow+0x57/0x80 [ 116.562202][ T2045] link_path_walk+0x991/0xeb0 [ 116.562222][ T2045] path_openat+0x298/0x35a0 [ 116.562247][ T2045] ? rb_commit+0x753/0x7b0 [ 116.562267][ T2045] ? do_filp_open+0x440/0x440 [ 116.562292][ T2045] do_filp_open+0x1f2/0x440 [ 116.562315][ T2045] ? __cfi_do_filp_open+0x10/0x10 [ 116.562341][ T2045] ? alloc_fd+0x4c1/0x570 [ 116.562362][ T2045] do_sys_openat2+0x134/0x1d0 [ 116.562387][ T2045] ? do_sys_open+0x100/0x100 [ 116.562414][ T2045] __x64_sys_openat+0x13a/0x170 [ 116.562446][ T2045] x64_sys_call+0xe69/0x2ee0 [ 116.562462][ T2045] do_syscall_64+0x57/0xf0 [ 116.562478][ T2045] ? clear_bhb_loop+0x50/0xa0 [ 116.562499][ T2045] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.562521][ T2045] RIP: 0033:0x7f239f79e159 [ 116.562536][ T2045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.562550][ T2045] RSP: 002b:00007f239e1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.562570][ T2045] RAX: ffffffffffffffda RBX: 00007f239fa25fa0 RCX: 00007f239f79e159 [ 116.562584][ T2045] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 116.562597][ T2045] RBP: 00007f239f83503b R08: 0000000000000000 R09: 0000000000000000 [ 116.562608][ T2045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.562620][ T2045] R13: 00007f239fa26038 R14: 00007f239fa25fa0 R15: 00007ffcdc0182a8 [ 116.562635][ T2045] [ 117.253314][ T2057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.268012][ T311] usb 4-1: failed to enable PITCH for EP 0x82 [ 117.275233][ T311] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 117.288357][ T311] usb 4-1: clock source 0 is not valid, cannot use [ 117.298736][ T2057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.318533][ T311] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 117.328918][ T311] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 117.372766][ T311] usb 4-1: USB disconnect, device number 39 [ 117.898785][ T2065] rust_binder: 2064:2065 got transaction to invalid handle 1 [ 117.915552][ T2065] rust_binder: 2064:2065 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 117.926583][ T311] rust_binder: 2064: undelivered TRANSACTION_ERROR: 29201 [ 118.529709][ T36] audit: type=1400 audit(1789193580.690:363): avc: denied { write } for pid=2082 comm="syz.0.563" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=17989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.608474][ T36] audit: type=1400 audit(1789193580.720:364): avc: denied { add_name } for pid=2082 comm="syz.0.563" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.658431][ T2085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=2085 comm=syz.0.564 [ 118.688258][ T36] audit: type=1400 audit(1789193580.720:365): avc: denied { create } for pid=2082 comm="syz.0.563" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 118.968293][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 119.125316][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 119.139249][ T311] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 119.179969][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.212582][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 119.247214][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 119.274942][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.310140][ T10] usb 1-1: Product: â°‰ [ 119.315793][ T2089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.315968][ T2089] rust_binder: 2088:2089 no such ref 0 [ 119.338625][ T10] usb 1-1: Manufacturer: 㻣욽îªèˆ˜â¥®éž¡â’°Ü”èžã‡›á¹î¦°ê˜ç§ží‡ˆã”Šç €â«¨åŽ£æ¿»á‰Þ鷶⊲â­ç·–ëŸç§áš±á§©ç•é–­Õ¾Ñžà«›ê¿’Ⴋ黤ﬦタ罳鎦緃༯뤖⒧蠕䴂캉侸νï«å›ã…«à½–Ⱛꦃ㸋î­ä—¡íœ–葼蒒é‰ã•ä¤ë°ï®—襘啣縊瓃 [ 119.369708][ T2089] rust_binder: 2088:2089 got transaction to invalid handle 1 [ 119.377297][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.395954][ T2089] rust_binder: 2088:2089 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 119.396112][ T311] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 119.426334][ T9] rust_binder: 2088: undelivered TRANSACTION_ERROR: 29201 [ 119.440757][ T10] usb 1-1: SerialNumber: syz [ 119.458917][ T311] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 119.468452][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.479198][ T2085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 119.489132][ T2093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.497642][ T2085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 119.506013][ T311] usb 4-1: Product: syz [ 119.511828][ T311] usb 4-1: Manufacturer: syz [ 119.517025][ T2093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.526352][ T311] usb 4-1: SerialNumber: syz [ 119.547437][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.556267][ T36] audit: type=1400 audit(1789193581.720:366): avc: denied { lock } for pid=2091 comm="syz.2.567" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.581033][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.718565][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 119.728275][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 119.742859][ T311] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.759468][ T10] usb 1-1: USB disconnect, device number 33 [ 119.773972][ T10] usblp0: removed [ 120.116756][ T2098] rust_binder: Write failure EINVAL in pid:450 [ 120.119146][ T2098] rust_binder: 2097:2098 got transaction to invalid handle 1 [ 120.133213][ T2098] rust_binder: 2097:2098 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 120.229969][ T2100] fuse: Bad value for 'user_id' [ 120.235012][ T2100] fuse: Bad value for 'user_id' [ 120.345909][ T10] rust_binder: 2097: undelivered TRANSACTION_ERROR: 29201 [ 120.553958][ T311] usb 4-1: failed to enable PITCH for EP 0x82 [ 120.560451][ T311] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 120.573127][ T311] usb 4-1: clock source 0 is not valid, cannot use [ 120.581058][ T311] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 120.587765][ T311] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 120.603332][ T311] usb 4-1: USB disconnect, device number 40 [ 120.628267][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 120.788352][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 120.795108][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.807105][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.817400][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.830748][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.840148][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.854748][ T10] usb 1-1: config 0 descriptor?? [ 121.000064][ T2114] rust_binder: 2113:2114 got transaction to invalid handle 1 [ 121.007841][ T2114] rust_binder: 2113:2114 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 121.018668][ T311] rust_binder: 2113: undelivered TRANSACTION_ERROR: 29201 [ 121.051372][ T36] audit: type=1400 audit(1789193583.210:367): avc: denied { read } for pid=2115 comm="syz.2.576" name="file2" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.163825][ T36] audit: type=1400 audit(1789193583.240:368): avc: denied { ioctl } for pid=2115 comm="syz.2.576" path="/164/file2" dev="tmpfs" ino=939 ioctlcmd=0x4c08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.198723][ T2123] fuse: Bad value for 'user_id' [ 121.214210][ T2123] fuse: Bad value for 'user_id' [ 121.236547][ T2123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=2123 comm=syz.4.579 [ 121.295734][ T2108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 121.355167][ T2126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 121.540846][ T2140] rust_binder: 2139:2140 got transaction to invalid handle 1 [ 121.572983][ T2140] rust_binder: 2139:2140 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 121.620337][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 121.639236][ T311] rust_binder: 2139: undelivered TRANSACTION_ERROR: 29201 [ 121.646872][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 121.675255][ T10] usb 1-1: USB disconnect, device number 34 [ 121.730090][ T2148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.739978][ T2148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.776269][ T2151] fuse: Bad value for 'fd' [ 122.202157][ T2158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.211064][ T2158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.357491][ T2165] netlink: 4476 bytes leftover after parsing attributes in process `syz.2.591'. [ 122.443240][ T2167] rust_binder: 2166:2167 got transaction to invalid handle 1 [ 122.468617][ T2167] rust_binder: 2166:2167 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 122.525669][ T10] rust_binder: 2166: undelivered TRANSACTION_ERROR: 29201 [ 122.539028][ T2162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.547562][ T2162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.668569][ T36] audit: type=1400 audit(1789193584.830:369): avc: denied { transfer } for pid=2169 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 122.928255][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 123.054943][ T36] audit: type=1400 audit(1789193585.210:370): avc: denied { create } for pid=2174 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 123.100087][ T10] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 123.110737][ T2179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=2179 comm=syz.0.598 [ 123.123400][ T10] usb 4-1: config 1 has no interface number 0 [ 123.129953][ T36] audit: type=1400 audit(1789193585.240:371): avc: granted { setsecparam } for pid=2174 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 123.159612][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 123.171035][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.200304][ T10] usb 4-1: Product: syz [ 123.209324][ T36] audit: type=1400 audit(1789193585.370:372): avc: denied { load_policy } for pid=2180 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.229598][ T2181] SELinux: policydb magic number 0x9c202318 does not match expected magic number 0xf97cff8c [ 123.240484][ T10] usb 4-1: Manufacturer: syz [ 123.245373][ T10] usb 4-1: SerialNumber: syz [ 123.260790][ T2181] SELinux: failed to load policy [ 123.305136][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.325540][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.553437][ T36] audit: type=1400 audit(1789193585.710:373): avc: denied { mounton } for pid=2189 comm="syz.4.602" path="/125/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 123.609136][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.631047][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.649906][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.666955][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.686245][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.704168][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.721439][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.740166][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.758743][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.777081][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.794426][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.812222][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.830657][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.849488][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.884410][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.905956][ T2196] rust_binder: 2195:2196 got transaction to invalid handle 1 [ 123.917698][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.933234][ T2196] rust_binder: 2195:2196 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 123.944808][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.963401][ T2191] overlayfs: maximum fs stacking depth exceeded [ 123.973270][ T311] rust_binder: 2195: undelivered TRANSACTION_ERROR: 29201 [ 124.009601][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.043239][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.062359][ T2198] fuse: Bad value for 'fd' [ 124.075010][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.103598][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.124888][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.144813][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.162728][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.182477][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.193998][ T2181] syz.0.599 (2181): drop_caches: 3 [ 124.201159][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.218478][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.244794][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.263368][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.287456][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.299325][ T2203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 124.309930][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.318799][ T2203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=2203 comm=syz.0.606 [ 124.332903][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.341054][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.370143][ T2191] overlayfs: maximum fs stacking depth exceeded [ 124.406377][ T36] audit: type=1326 audit(1789193586.560:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2208 comm="syz.0.607" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f239f79e159 code=0x0 [ 124.503273][ T2217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2217 comm=syz.4.609 [ 124.516224][ T2217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2217 comm=syz.4.609 [ 124.530872][ T2220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=2220 comm=syz.4.609 [ 124.689681][ T2229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.701910][ T2229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.925950][ T2231] rust_binder: 2230:2231 got transaction to invalid handle 1 [ 124.933532][ T2231] rust_binder: 2230:2231 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 124.943951][ T311] rust_binder: 2230: undelivered TRANSACTION_ERROR: 29201 [ 124.976111][ T36] audit: type=1400 audit(1789193587.130:375): avc: denied { write } for pid=2232 comm="syz.2.613" path="socket:[19282]" dev="sockfs" ino=19282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 125.287693][ T36] audit: type=1400 audit(1789193587.440:376): avc: denied { associate } for pid=2242 comm="syz.4.615" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 125.529698][ T36] audit: type=1400 audit(1789193587.690:377): avc: denied { accept } for pid=2251 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 125.645297][ T10] usb 4-1: cannot find UAC_HEADER [ 125.676257][ T10] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 125.709586][ T2258] fuse: Bad value for 'fd' [ 125.716853][ T2264] rust_binder: 2259:2264 got transaction to invalid handle 1 [ 125.736088][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 125.752461][ T10] usb 4-1: USB disconnect, device number 41 [ 125.762380][ T724] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 125.782731][ T2264] rust_binder: 2259:2264 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 125.822255][ T311] rust_binder: 2259: undelivered TRANSACTION_ERROR: 29201 [ 125.949433][ T724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.972090][ T724] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 126.006080][ T724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.028495][ T724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.056374][ T724] usb 1-1: SerialNumber: syz [ 126.075723][ T724] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 126.108543][ T724] usb 1-1: no configuration chosen from 1 choice [ 126.268252][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 126.439680][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.466030][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 126.515480][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 126.534945][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.568407][ T10] usb 4-1: Product: syz [ 126.572613][ T10] usb 4-1: Manufacturer: syz [ 126.599586][ T10] usb 4-1: SerialNumber: syz [ 126.824283][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.263102][ T2272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.338328][ T2272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.633401][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 127.641939][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 127.662710][ T10] usb 4-1: clock source 0 is not valid, cannot use [ 127.686122][ T10] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 127.706642][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 127.759504][ T10] usb 4-1: USB disconnect, device number 42 [ 127.809768][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 127.897144][ T36] audit: type=1400 audit(1789193590.050:378): avc: denied { name_bind } for pid=2274 comm="syz.4.625" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 128.350591][ T724] usb 1-1: USB disconnect, device number 35 [ 128.409712][ T311] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 128.492888][ T2291] overlayfs: conflicting options: nfs_export=on,index=off [ 128.588424][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 128.610204][ T311] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.627842][ T2294] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.628395][ T2294] rust_binder: 2293:2294 got transaction to invalid handle 1 [ 128.648255][ T311] usb 4-1: config 0 has no interface number 0 [ 128.666855][ T311] usb 4-1: config 0 interface 184 has no altsetting 0 [ 128.688332][ T2294] rust_binder: 2293:2294 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 128.706403][ T311] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.6e [ 128.729713][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.745463][ T9] rust_binder: 2293: undelivered TRANSACTION_ERROR: 29201 [ 128.762657][ T311] usb 4-1: Product: syz [ 128.798220][ T311] usb 4-1: Manufacturer: syz [ 128.818224][ T311] usb 4-1: SerialNumber: syz [ 128.835513][ T311] usb 4-1: config 0 descriptor?? [ 128.868709][ T311] smsc75xx v1.0.0 [ 129.012457][ T36] audit: type=1400 audit(1789193591.170:379): avc: denied { create } for pid=2303 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.228274][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 129.301072][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 129.324823][ T2313] ./dev/sda1: Can't lookup blockdev [ 129.330276][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 129.362541][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 129.378246][ T9] usb 1-1: device descriptor read/64, error -71 [ 129.411089][ T311] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 129.488387][ T2322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.496871][ T2322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.519445][ T2322] rust_binder: 2319:2322 got transaction to invalid handle 1 [ 129.550051][ T2322] rust_binder: 2319:2322 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 129.568941][ T311] rust_binder: 2319: undelivered TRANSACTION_ERROR: 29201 [ 129.615451][ T36] audit: type=1400 audit(1789193591.770:380): avc: denied { ioctl } for pid=2320 comm="syz.2.640" path="socket:[22071]" dev="sockfs" ino=22071 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.648255][ T9] usb 1-1: device descriptor read/64, error -71 [ 129.685648][ T2328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.709681][ T36] audit: type=1400 audit(1789193591.830:381): avc: denied { write } for pid=2327 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.732221][ T2328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.754785][ T36] audit: type=1400 audit(1789193591.830:382): avc: denied { nlmsg_write } for pid=2327 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.805265][ T2330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.814371][ T2330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.825879][ T2333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.835862][ T2333] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.877555][ T36] audit: type=1400 audit(1789193592.030:383): avc: denied { create } for pid=2334 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.898370][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 129.906766][ T2335] netlink: 72 bytes leftover after parsing attributes in process `syz.2.644'. [ 130.014003][ T2340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.022910][ T2340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.038260][ T9] usb 1-1: device descriptor read/64, error -71 [ 130.278427][ T9] usb 1-1: device descriptor read/64, error -71 [ 130.285405][ T2342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.296971][ T2343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.306852][ T2342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.316871][ T2343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.398460][ T9] usb usb1-port1: attempt power cycle [ 130.738288][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 130.759716][ T9] usb 1-1: device descriptor read/8, error -71 [ 130.889385][ T9] usb 1-1: device descriptor read/8, error -71 [ 130.914395][ T2351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.915672][ T2351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.923634][ T2351] rust_binder: 2350:2351 got transaction to invalid handle 1 [ 130.938046][ T2351] rust_binder: 2350:2351 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 130.948927][ T724] rust_binder: 2350: undelivered TRANSACTION_ERROR: 29201 [ 131.015151][ T2355] overlayfs: unescaped trailing colons in lowerdir mount option. [ 131.048545][ T2357] batadv_slave_0: entered promiscuous mode [ 131.056009][ T2357] batadv_slave_0: left promiscuous mode [ 131.087824][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.102570][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.138507][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 131.159739][ T9] usb 1-1: device descriptor read/8, error -71 [ 131.173757][ T724] usb 4-1: USB disconnect, device number 43 [ 131.289878][ T9] usb 1-1: device descriptor read/8, error -71 [ 131.398484][ T9] usb usb1-port1: unable to enumerate USB device [ 131.518273][ T724] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 131.669368][ T724] usb 4-1: not running at top speed; connect to a high speed hub [ 131.678144][ T724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.700223][ T724] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 131.725205][ T724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.749831][ T724] usb 4-1: Found UVC 1.00 device (0000:0000) [ 131.952868][ T36] audit: type=1400 audit(1789193594.110:384): avc: denied { execute } for pid=2362 comm="syz.3.654" name="file0" dev="tmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.976100][ T2363] Invalid argument reading file caps for ./file0 [ 131.985675][ T724] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.009399][ T724] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 132.020979][ T36] audit: type=1400 audit(1789193594.140:385): avc: denied { execute_no_trans } for pid=2362 comm="syz.3.654" path="/169/file0" dev="tmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.060228][ T724] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 132.079057][ T724] usb 4-1: USB disconnect, device number 44 [ 132.493200][ T2374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.494661][ T2374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.515690][ T2374] rust_binder: 2373:2374 got transaction to invalid handle 1 [ 132.540258][ T2374] rust_binder: 2373:2374 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 132.550844][ T724] rust_binder: 2373: undelivered TRANSACTION_ERROR: 29201 [ 132.617574][ T36] audit: type=1400 audit(1789193594.770:386): avc: denied { mounton } for pid=2381 comm="syz.4.661" path="/150/file0" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.710731][ T2387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2387 comm=syz.0.663 [ 132.739037][ T2386] SELinux: Context Ï is not valid (left unmapped). [ 132.745828][ T36] audit: type=1400 audit(1789193594.850:387): avc: denied { read write } for pid=2384 comm="syz.4.662" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.853209][ T36] audit: type=1400 audit(1789193594.850:388): avc: denied { open } for pid=2384 comm="syz.4.662" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.889186][ T2394] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 132.909195][ T2394] netlink: 'syz.4.666': attribute type 5 has an invalid length. [ 132.926201][ T2394] netlink: 'syz.4.666': attribute type 5 has an invalid length. [ 132.934975][ T2394] netlink: 3269 bytes leftover after parsing attributes in process `syz.4.666'. [ 133.019081][ T2401] rust_binder: 2400:2401 got transaction to invalid handle 1 [ 133.054020][ T2401] rust_binder: 2400:2401 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 133.087927][ T724] rust_binder: 2400: undelivered TRANSACTION_ERROR: 29201 [ 133.226080][ T2416] rust_binder: Write failure EFAULT in pid:444 [ 133.257469][ T2419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.274850][ T2419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.646571][ T2423] FAULT_INJECTION: forcing a failure. [ 133.646571][ T2423] name failslab, interval 1, probability 0, space 0, times 0 [ 133.679419][ T2423] CPU: 0 UID: 0 PID: 2423 Comm: syz.0.676 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 133.679450][ T2423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.679463][ T2423] Call Trace: [ 133.679471][ T2423] [ 133.679479][ T2423] __dump_stack+0x21/0x30 [ 133.679509][ T2423] dump_stack_lvl+0x140/0x1c0 [ 133.679533][ T2423] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.679558][ T2423] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 133.679580][ T2423] dump_stack+0x19/0x20 [ 133.679603][ T2423] should_fail_ex+0x3c2/0x510 [ 133.679624][ T2423] ? security_prepare_creds+0x66/0x260 [ 133.679643][ T2423] should_failslab+0xac/0x100 [ 133.679665][ T2423] __kmalloc_noprof+0x69/0x510 [ 133.679684][ T2423] ? security_prepare_creds+0x66/0x260 [ 133.679703][ T2423] security_prepare_creds+0x66/0x260 [ 133.679722][ T2423] prepare_creds+0x46d/0x6b0 [ 133.679742][ T2423] lookup_user_key+0x359/0x1230 [ 133.679776][ T2423] ? __cfi_lookup_user_key+0x10/0x10 [ 133.679801][ T2423] ? check_stack_object+0x81/0x150 [ 133.679820][ T2423] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 133.679845][ T2423] ? __kasan_check_write+0x18/0x20 [ 133.679863][ T2423] __se_sys_add_key+0x317/0x4b0 [ 133.679882][ T2423] ? __x64_sys_add_key+0xf0/0xf0 [ 133.679902][ T2423] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 133.679929][ T2423] __x64_sys_add_key+0xc3/0xf0 [ 133.679949][ T2423] x64_sys_call+0x195f/0x2ee0 [ 133.679964][ T2423] do_syscall_64+0x57/0xf0 [ 133.679980][ T2423] ? clear_bhb_loop+0x50/0xa0 [ 133.680001][ T2423] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.680021][ T2423] RIP: 0033:0x7f239f79e159 [ 133.680038][ T2423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.680053][ T2423] RSP: 002b:00007f239e1f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 133.680073][ T2423] RAX: ffffffffffffffda RBX: 00007f239fa25fa0 RCX: 00007f239f79e159 [ 133.680087][ T2423] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 133.680099][ T2423] RBP: 00007f239f83503b R08: fffffffffffffffe R09: 0000000000000000 [ 133.680112][ T2423] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 133.680123][ T2423] R13: 00007f239fa26038 R14: 00007f239fa25fa0 R15: 00007ffcdc0182a8 [ 133.680138][ T2423] [ 133.950524][ T2430] input: syz0 as /devices/virtual/input/input17 [ 133.962426][ T2435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.963392][ T2435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.970476][ T2435] rust_binder: 2434:2435 got transaction to invalid handle 1 [ 133.984437][ T2435] rust_binder: 2434:2435 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 134.001406][ T724] rust_binder: 2434: undelivered TRANSACTION_ERROR: 29201 [ 134.064652][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 134.064669][ T36] audit: type=1400 audit(1789193596.200:394): avc: denied { map } for pid=2439 comm="syz.4.682" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.150523][ T36] audit: type=1400 audit(1789193596.310:395): avc: denied { nlmsg_read } for pid=2446 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 134.192182][ T36] audit: type=1400 audit(1789193596.340:396): avc: denied { map } for pid=2439 comm="syz.4.682" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.284523][ T36] audit: type=1400 audit(1789193596.380:397): avc: denied { sys_module } for pid=2446 comm="syz.2.684" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 134.358325][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 134.373899][ T36] audit: type=1400 audit(1789193596.390:398): avc: denied { create } for pid=2446 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 134.426476][ T2457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.448919][ T2457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.509430][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.520708][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.539702][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.570439][ T2461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.570985][ T2461] rust_binder: 2460:2461 got transaction to invalid handle 1 [ 134.585567][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 134.594913][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.603874][ T2461] rust_binder: 2460:2461 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 134.614164][ T10] usb 4-1: config 0 descriptor?? [ 134.628240][ T464] rust_binder: 2460: undelivered TRANSACTION_ERROR: 29201 [ 134.665097][ T2463] input: syz1 as /devices/virtual/input/input18 [ 134.936486][ T2470] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 134.948438][ T464] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 135.100143][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 135.127504][ T2474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.693'. [ 135.137037][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.158990][ T10] usb 4-1: USB disconnect, device number 45 [ 135.197699][ T2479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 135.273886][ T2481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.293670][ T2481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.439373][ T464] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.449803][ T464] usb 1-1: config 0 has no interfaces? [ 135.455390][ T464] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 135.473538][ T464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.495607][ T464] usb 1-1: config 0 descriptor?? [ 135.627936][ T2485] rust_binder: 2484:2485 got transaction to invalid handle 1 [ 135.643813][ T2485] rust_binder: 2484:2485 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 135.663818][ T464] rust_binder: 2484: undelivered TRANSACTION_ERROR: 29201 [ 135.711686][ T464] usb 1-1: USB disconnect, device number 40 [ 135.906081][ T2495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.935890][ T2495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.976959][ T2493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.067307][ T2489] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.209162][ T2503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.704'. [ 136.328848][ T36] audit: type=1400 audit(1789193598.490:399): avc: denied { ioctl } for pid=2504 comm="syz.0.705" path="socket:[23484]" dev="sockfs" ino=23484 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.440922][ T2515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.442089][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.458220][ T2515] rust_binder: 2514:2515 got transaction to invalid handle 1 [ 136.496737][ T2515] rust_binder: 2514:2515 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 136.520409][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.546786][ T10] rust_binder: 2514: undelivered TRANSACTION_ERROR: 29201 [ 136.609890][ T2525] netlink: 'syz.0.710': attribute type 4 has an invalid length. [ 136.639803][ T2525] netlink: 'syz.0.710': attribute type 2 has an invalid length. [ 136.685298][ T2528] sit0: entered promiscuous mode [ 136.714916][ T2528] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 136.731106][ T2532] overlay: Unknown parameter 'dont_measure' [ 136.751652][ T2528] netlink: 1 bytes leftover after parsing attributes in process `syz.4.711'. [ 136.779589][ T2532] overlay: Unknown parameter 'dont_measure' [ 136.789311][ T2536] bridge0: port 3(syz_tun) entered blocking state [ 136.795768][ T2536] bridge0: port 3(syz_tun) entered disabled state [ 136.839453][ T2536] syz_tun: entered allmulticast mode [ 136.871438][ T2536] syz_tun: entered promiscuous mode [ 136.885781][ T2536] bridge0: port 3(syz_tun) entered blocking state [ 136.892311][ T2536] bridge0: port 3(syz_tun) entered forwarding state [ 137.348018][ T2550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.378581][ T2550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.484633][ T2555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.503692][ T2555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.520929][ T36] audit: type=1400 audit(1789193599.680:400): avc: denied { map } for pid=2554 comm="syz.2.719" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 138.038250][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 138.071967][ T36] audit: type=1400 audit(1789193600.230:401): avc: denied { write } for pid=2575 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.102488][ T2577] random: crng reseeded on system resumption [ 138.253149][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.357052][ T36] audit: type=1400 audit(1789193600.510:402): avc: denied { mount } for pid=2579 comm="syz.4.725" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 138.408248][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.456443][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.484326][ T36] audit: type=1400 audit(1789193600.580:403): avc: denied { unmount } for pid=752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 138.506756][ T10] usb 4-1: Product: syz [ 138.526587][ T10] usb 4-1: Manufacturer: syz [ 138.541399][ T10] usb 4-1: SerialNumber: syz [ 138.591435][ T2584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 138.790471][ T2583] kvm_intel: kvm [2581]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x36d10d86 [ 138.801684][ T2590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.802129][ T2590] rust_binder: 2589:2590 got transaction to invalid handle 1 [ 138.820381][ T2583] kvm: kvm [2581]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x36d1adac [ 138.829964][ T2590] rust_binder: 2589:2590 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 138.844036][ T464] rust_binder: 2589: undelivered TRANSACTION_ERROR: 29201 [ 138.853542][ T2583] kvm: kvm [2581]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x36d1021f [ 138.895516][ T2593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.938545][ T2593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.002868][ T10] cdc_ncm 4-1:1.0: failed to get mac address [ 139.128540][ T464] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 139.210607][ T2570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.219740][ T10] cdc_ncm 4-1:1.0: bind() failure [ 139.236675][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 139.247106][ T2570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.258706][ T2606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.288484][ T10] cdc_ncm 4-1:1.1: bind() failure [ 139.297361][ T36] audit: type=1400 audit(1789193601.450:404): avc: denied { mounton } for pid=2568 comm="syz.3.723" path="/184/file0" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.321633][ T2606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.334219][ T2570] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 139.348692][ T2611] size and base must be multiples of 4 kiB [ 139.364253][ T2611] CPU: 0 UID: 0 PID: 2611 Comm: syz.4.733 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 139.364282][ T2611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.364295][ T2611] Call Trace: [ 139.364302][ T2611] [ 139.364310][ T2611] __dump_stack+0x21/0x30 [ 139.364340][ T2611] dump_stack_lvl+0x140/0x1c0 [ 139.364364][ T2611] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.364389][ T2611] dump_stack+0x19/0x20 [ 139.364412][ T2611] mtrr_add+0xd8/0x100 [ 139.364432][ T2611] mtrr_ioctl+0xbd8/0x1170 [ 139.364453][ T2611] ? __cfi_mtrr_ioctl+0x10/0x10 [ 139.364474][ T2611] ? __kasan_check_read+0x15/0x20 [ 139.364492][ T2611] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 139.364513][ T2611] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 139.364535][ T2611] ? __fget_files+0x2bc/0x330 [ 139.364556][ T2611] ? __cfi_mtrr_ioctl+0x10/0x10 [ 139.364576][ T2611] proc_reg_unlocked_ioctl+0x1f3/0x2f0 [ 139.364596][ T2611] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 139.364616][ T2611] __se_sys_ioctl+0x126/0x1b0 [ 139.364638][ T2611] __x64_sys_ioctl+0x7f/0xa0 [ 139.364660][ T2611] x64_sys_call+0x1878/0x2ee0 [ 139.364676][ T2611] do_syscall_64+0x57/0xf0 [ 139.364692][ T2611] ? clear_bhb_loop+0x50/0xa0 [ 139.364714][ T2611] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.364734][ T2611] RIP: 0033:0x7f7d0879e159 [ 139.364750][ T2611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.364765][ T2611] RSP: 002b:00007f7d09584028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.364785][ T2611] RAX: ffffffffffffffda RBX: 00007f7d08a25fa0 RCX: 00007f7d0879e159 [ 139.364799][ T2611] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 139.364811][ T2611] RBP: 00007f7d0883503b R08: 0000000000000000 R09: 0000000000000000 [ 139.364823][ T2611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.364835][ T2611] R13: 00007f7d08a26038 R14: 00007f7d08a25fa0 R15: 00007fff33a2fcb8 [ 139.364850][ T2611] [ 139.720050][ T2618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.721131][ T2618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.728736][ T2618] rust_binder: 2617:2618 got transaction to invalid handle 1 [ 139.743131][ T2618] rust_binder: 2617:2618 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 139.753615][ T311] rust_binder: 2617: undelivered TRANSACTION_ERROR: 29201 [ 139.843372][ T2627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 139.920019][ T2634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 140.079250][ T36] audit: type=1400 audit(1789193602.240:405): avc: denied { create } for pid=2639 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.103854][ T36] audit: type=1400 audit(1789193602.270:406): avc: denied { write } for pid=2639 comm="syz.4.744" path="socket:[25023]" dev="sockfs" ino=25023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.195692][ T2646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.196915][ T2646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.866790][ T464] usb 4-1: USB disconnect, device number 46 [ 140.932994][ T2656] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.949806][ T36] audit: type=1400 audit(1789193603.090:407): avc: denied { mounton } for pid=2651 comm="syz.4.748" path="/186/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 141.280319][ T2668] netlink: 'syz.2.752': attribute type 16 has an invalid length. [ 141.373664][ T2670] netlink: 'syz.2.753': attribute type 4 has an invalid length. [ 141.398285][ T2670] netlink: 17 bytes leftover after parsing attributes in process `syz.2.753'. [ 141.626488][ T2675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.639537][ T2677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.666740][ T2677] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 141.691793][ T2677] rust_binder: Read failure Err(EFAULT) in pid:541 [ 141.700902][ T2680] tmpfs: Unknown parameter '' [ 141.768248][ T464] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 141.939456][ T464] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.970063][ T464] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.000562][ T464] usb 4-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 142.036497][ T464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.045734][ T2689] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 142.045754][ T2689] rust_binder: Read failure Err(EFAULT) in pid:541 [ 142.081201][ T464] usb 4-1: 0:1 : does not exist [ 142.274548][ T2692] input: syz1 as /devices/virtual/input/input19 [ 142.284857][ T464] usb 4-1: USB disconnect, device number 47 [ 142.321941][ T2692] overlayfs: failed to resolve './bus': -2 [ 142.362502][ T2694] netlink: 124 bytes leftover after parsing attributes in process `syz.4.760'. [ 142.401489][ T2696] ./dev/sda1: Can't lookup blockdev [ 142.707980][ T36] audit: type=1400 audit(1789193604.860:408): avc: denied { bind } for pid=2713 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.779635][ T2718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.809198][ T2718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.868260][ T464] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 143.028415][ T464] usb 1-1: Using ep0 maxpacket: 8 [ 143.037109][ T2728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.057610][ T464] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 143.069211][ T2728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.080271][ T464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.097649][ T464] usb 1-1: Product: syz [ 143.106424][ T464] usb 1-1: Manufacturer: syz [ 143.116915][ T464] usb 1-1: SerialNumber: syz [ 143.852955][ T2736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.864165][ T2736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.958286][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 144.109900][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.119203][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 144.132382][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 144.142248][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.150748][ T10] usb 4-1: Product: syz [ 144.155277][ T10] usb 4-1: Manufacturer: syz [ 144.160455][ T10] usb 4-1: SerialNumber: syz [ 144.381879][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.708056][ T2760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.779'. [ 144.720698][ T2762] netlink: 104 bytes leftover after parsing attributes in process `syz.4.780'. [ 144.948577][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.971412][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.997487][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.019994][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.192485][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 145.208503][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 145.227724][ T10] usb 4-1: clock source 0 is not valid, cannot use [ 145.244009][ T10] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 145.260099][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 145.296466][ T10] usb 4-1: USB disconnect, device number 48 [ 145.529456][ T464] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 145.558533][ T464] usb 1-1: unit 2 not found! [ 145.651726][ T464] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 145.693907][ T464] usb 1-1: USB disconnect, device number 42 [ 145.727388][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 145.801765][ T2790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.847342][ T2790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.228249][ T464] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 146.391076][ T464] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 146.421064][ T464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.448088][ T464] usb 4-1: Product: syz [ 146.458248][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 146.472916][ T464] usb 4-1: Manufacturer: syz [ 146.490574][ T464] usb 4-1: SerialNumber: syz [ 146.629670][ T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.663813][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.702811][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 146.722598][ T464] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 146.745389][ T464] usb 4-1: USB disconnect, device number 49 [ 146.768916][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 146.801854][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.833854][ T10] usb 1-1: Manufacturer: syz [ 146.850884][ T2797] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 147.089513][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 147.117569][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input20 [ 147.154175][ T10] usb 1-1: USB disconnect, device number 43 [ 147.160221][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 147.248252][ T464] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 147.425067][ T464] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 147.453856][ T464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.487818][ T464] usb 4-1: Product: syz [ 147.496948][ T464] usb 4-1: Manufacturer: syz [ 147.520572][ T464] usb 4-1: SerialNumber: syz [ 147.585028][ T2809] rust_binder: Write failure EINVAL in pid:659 [ 147.763776][ T2817] FAULT_INJECTION: forcing a failure. [ 147.763776][ T2817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.808309][ T2817] CPU: 0 UID: 0 PID: 2817 Comm: syz.2.799 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 147.808344][ T2817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.808357][ T2817] Call Trace: [ 147.808365][ T2817] [ 147.808375][ T2817] __dump_stack+0x21/0x30 [ 147.808404][ T2817] dump_stack_lvl+0x140/0x1c0 [ 147.808436][ T2817] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.808462][ T2817] dump_stack+0x19/0x20 [ 147.808486][ T2817] should_fail_ex+0x3c2/0x510 [ 147.808509][ T2817] should_fail+0xf/0x20 [ 147.808530][ T2817] should_fail_usercopy+0x1e/0x30 [ 147.808553][ T2817] _copy_to_user+0x24/0xa0 [ 147.808578][ T2817] __se_sys_mincore+0x7ae/0xba0 [ 147.808604][ T2817] __x64_sys_mincore+0x7f/0xa0 [ 147.808627][ T2817] x64_sys_call+0x2b24/0x2ee0 [ 147.808643][ T2817] do_syscall_64+0x57/0xf0 [ 147.808660][ T2817] ? clear_bhb_loop+0x50/0xa0 [ 147.808681][ T2817] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.808702][ T2817] RIP: 0033:0x7f371599e159 [ 147.808717][ T2817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.808732][ T2817] RSP: 002b:00007f3716877028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 147.808753][ T2817] RAX: ffffffffffffffda RBX: 00007f3715c25fa0 RCX: 00007f371599e159 [ 147.808766][ T2817] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 147.808778][ T2817] RBP: 00007f3715a3503b R08: 0000000000000000 R09: 0000000000000000 [ 147.808790][ T2817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.808802][ T2817] R13: 00007f3715c26038 R14: 00007f3715c25fa0 R15: 00007ffcaf9e80d8 [ 147.808817][ T2817] [ 147.812859][ T36] audit: type=1400 audit(1789193609.970:409): avc: denied { getopt } for pid=2816 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.052694][ T464] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 148.083885][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 148.153667][ T2822] 9p: Unknown Cache mode or invalid value dev/kvm [ 148.305000][ T2829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.307541][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.323295][ T2829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.359665][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 148.390654][ T2831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'. [ 148.410066][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 148.419680][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.440561][ T9] usb 4-1: USB disconnect, device number 50 [ 148.459907][ T10] usb 1-1: Product: syz [ 148.464109][ T10] usb 1-1: Manufacturer: syz [ 148.501797][ T10] usb 1-1: SerialNumber: syz [ 148.510651][ T2834] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.571577][ T2836] size and base must be multiples of 4 kiB [ 148.599598][ T2836] CPU: 0 UID: 0 PID: 2836 Comm: syz.4.806 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 148.599631][ T2836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.599644][ T2836] Call Trace: [ 148.599652][ T2836] [ 148.599661][ T2836] __dump_stack+0x21/0x30 [ 148.599690][ T2836] dump_stack_lvl+0x140/0x1c0 [ 148.599715][ T2836] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.599741][ T2836] dump_stack+0x19/0x20 [ 148.599764][ T2836] mtrr_del+0xcd/0xf0 [ 148.599784][ T2836] mtrr_ioctl+0xbf8/0x1170 [ 148.599812][ T2836] ? __cfi_mtrr_ioctl+0x10/0x10 [ 148.599832][ T2836] ? __kasan_check_read+0x15/0x20 [ 148.599851][ T2836] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 148.599873][ T2836] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 148.599894][ T2836] ? __fget_files+0x2bc/0x330 [ 148.599915][ T2836] ? __cfi_mtrr_ioctl+0x10/0x10 [ 148.599936][ T2836] proc_reg_unlocked_ioctl+0x1f3/0x2f0 [ 148.599956][ T2836] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 148.599975][ T2836] __se_sys_ioctl+0x126/0x1b0 [ 148.599997][ T2836] __x64_sys_ioctl+0x7f/0xa0 [ 148.600018][ T2836] x64_sys_call+0x1878/0x2ee0 [ 148.600035][ T2836] do_syscall_64+0x57/0xf0 [ 148.600051][ T2836] ? clear_bhb_loop+0x50/0xa0 [ 148.600072][ T2836] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.600093][ T2836] RIP: 0033:0x7f7d0879e159 [ 148.600108][ T2836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.600123][ T2836] RSP: 002b:00007f7d09584028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.600144][ T2836] RAX: ffffffffffffffda RBX: 00007f7d08a25fa0 RCX: 00007f7d0879e159 [ 148.600157][ T2836] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 148.600170][ T2836] RBP: 00007f7d0883503b R08: 0000000000000000 R09: 0000000000000000 [ 148.600183][ T2836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.600194][ T2836] R13: 00007f7d08a26038 R14: 00007f7d08a25fa0 R15: 00007fff33a2fcb8 [ 148.600210][ T2836] [ 148.604404][ T2836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.863414][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 149.074075][ T2836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.094751][ T2836] overlayfs: conflicting options: nfs_export=on,index=off [ 149.125285][ T36] audit: type=1400 audit(1789193611.280:410): avc: denied { read } for pid=2835 comm="syz.4.806" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.228230][ T36] audit: type=1400 audit(1789193611.310:411): avc: denied { open } for pid=2835 comm="syz.4.806" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.540764][ T36] audit: type=1400 audit(1789193611.700:412): avc: denied { setopt } for pid=2841 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.660509][ T10] usb 1-1: failed to enable PITCH for EP 0x82 [ 149.668218][ T10] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 149.676858][ T10] usb 1-1: clock source 0 is not valid, cannot use [ 149.726538][ T10] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 149.747902][ T10] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 149.806370][ T2858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.811592][ T2858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.824901][ T10] usb 1-1: USB disconnect, device number 44 [ 149.942950][ T2863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.980679][ T36] audit: type=1400 audit(1789193612.140:413): avc: denied { append } for pid=2865 comm="syz.4.815" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.175883][ T2870] kvm: apic: phys broadcast and lowest prio [ 150.242021][ T1767] tipc: Subscription rejected, illegal request [ 150.383088][ T2885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.743898][ T36] audit: type=1400 audit(1789193612.900:414): avc: denied { append } for pid=2895 comm="syz.2.826" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 150.873691][ T36] audit: type=1400 audit(1789193612.940:415): avc: denied { append } for pid=2895 comm="syz.2.826" path="/dev/random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 150.966718][ T36] audit: type=1400 audit(1789193612.960:416): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.040790][ T2908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.086716][ T2908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.100754][ T36] audit: type=1400 audit(1789193612.960:417): avc: denied { open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.221989][ T36] audit: type=1400 audit(1789193612.960:418): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.742229][ T2916] rust_binder: Write failure EINVAL in pid:695 [ 151.770341][ T2921] SELinux: policydb magic number 0x72702f2e does not match expected magic number 0xf97cff8c [ 151.859627][ T2918] mtrr: base(0x200000000000000000) is not aligned on a size(0x1d99d0e8000) boundary [ 151.888627][ T2923] kvm: pic: non byte write [ 151.893727][ T2921] SELinux: failed to load policy [ 152.020009][ T1767] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.061561][ T2948] incfs: Options parsing error. -22 [ 152.077034][ T2948] incfs: mount failed -22 [ 152.359076][ T2956] rust_binder: 2955:2956 no such ref 0 [ 152.983625][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 152.983641][ T36] audit: type=1400 audit(1789193615.140:492): avc: denied { setopt } for pid=2967 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.058217][ T36] audit: type=1400 audit(1789193615.210:493): avc: denied { create } for pid=2969 comm="syz.4.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.113861][ T2975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.116804][ T2975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.130567][ T36] audit: type=1400 audit(1789193615.240:494): avc: denied { ioctl } for pid=2969 comm="syz.4.847" path="socket:[29707]" dev="sockfs" ino=29707 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.162875][ T2975] rust_binder: 2974:2975 got reply transaction with no transaction stack [ 153.181710][ T2975] rust_binder: 2974:2975 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 153.204477][ T9] rust_binder: 2974: undelivered TRANSACTION_ERROR: 29201 [ 153.245188][ T2977] overlayfs: failed to resolve './file0': -2 [ 153.303509][ T36] audit: type=1400 audit(1789193615.460:495): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 153.414493][ T36] audit: type=1400 audit(1789193615.490:496): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.521214][ T2991] 2N: renamed from vcan0 (while UP) [ 153.537153][ T36] audit: type=1400 audit(1789193615.530:497): avc: denied { mount } for pid=2978 comm="syz.3.850" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 153.637261][ T36] audit: type=1400 audit(1789193615.530:498): avc: denied { mount } for pid=2978 comm="syz.3.850" name="/" dev="configfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 153.664872][ T2999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.665316][ T2999] rust_binder: 2998:2999 got reply transaction with no transaction stack [ 153.730246][ T2999] rust_binder: 2998:2999 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 153.759375][ T36] audit: type=1400 audit(1789193615.530:499): avc: denied { search } for pid=2978 comm="syz.3.850" name="/" dev="configfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.798250][ T724] rust_binder: 2998: undelivered TRANSACTION_ERROR: 29201 [ 153.841590][ T3005] syz.0.859 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 153.873625][ T36] audit: type=1400 audit(1789193615.530:500): avc: denied { write } for pid=2978 comm="syz.3.850" name="usb_gadget" dev="configfs" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.907170][ T36] audit: type=1400 audit(1789193615.530:501): avc: denied { add_name } for pid=2978 comm="syz.3.850" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.088520][ T2940] Bluetooth: hci0: command 0x1003 tx timeout [ 154.094622][ T2661] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.105056][ T3018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.115142][ T3018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.158289][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 154.268277][ T724] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 154.310095][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.319063][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 154.331953][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 154.341944][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.350261][ T9] usb 4-1: Product: syz [ 154.354722][ T9] usb 4-1: Manufacturer: syz [ 154.359683][ T9] usb 4-1: SerialNumber: syz [ 154.424566][ T724] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.434634][ T724] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.446889][ T724] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 154.456629][ T724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.465230][ T724] usb 1-1: Product: syz [ 154.469906][ T724] usb 1-1: Manufacturer: syz [ 154.474638][ T724] usb 1-1: SerialNumber: syz [ 154.489420][ T724] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 154.500740][ T724] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 154.500740][ T724] Please send a copy of this message to and [ 154.571330][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.793209][ T3024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.804196][ T3024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.090814][ T3017] program syz.0.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.111080][ T724] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 155.174172][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 155.192426][ T9] usb 4-1: USB disconnect, device number 51 [ 155.214484][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 156.058274][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 156.209629][ T9] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.222890][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.230023][ T9] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 156.239782][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.249220][ T9] usb 4-1: config 0 descriptor?? [ 156.664522][ T9] hid-rmi 0003:0461:4E72.000B: item fetching failed at offset 5/6 [ 156.673371][ T9] hid-rmi 0003:0461:4E72.000B: parse failed [ 156.679847][ T9] hid-rmi 0003:0461:4E72.000B: probe with driver hid-rmi failed with error -22 [ 156.875303][ T9] usb 4-1: USB disconnect, device number 52 [ 157.050556][ T724] usb 1-1: USB disconnect, device number 45 [ 157.148846][ T3046] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.286882][ T3053] netlink: 'syz.0.875': attribute type 7 has an invalid length. [ 157.305789][ T3053] netlink: 232 bytes leftover after parsing attributes in process `syz.0.875'. [ 157.475541][ T3074] 8021q: VLANs not supported on ip_vti0 [ 157.488761][ T3076] 8021q: VLANs not supported on ip_vti0 [ 157.505410][ T3074] SELinux: Context system_u:object_r:semanage_trans_lock_t:s0 is not valid (left unmapped). [ 157.538347][ T3074] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 157.550981][ T3074] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 157.559411][ T3074] CPU: 0 UID: 0 PID: 3074 Comm: syz.3.881 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 157.570888][ T3074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.580946][ T3074] RIP: 0010:trace_event_raw_event_cgroup_rstat+0x14b/0x3b0 [ 157.588151][ T3074] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 78 56 62 00 44 89 64 24 18 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 8c 01 00 00 44 8b 23 49 8d 5d 08 48 89 [ 157.607758][ T3074] RSP: 0018:ffffc9000ddffae0 EFLAGS: 00010003 [ 157.614447][ T3074] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff8881260ca600 [ 157.622461][ T3074] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 157.630455][ T3074] RBP: ffffc9000ddffbc8 R08: ffff8881260ca600 R09: 0000000000000002 [ 157.638436][ T3074] R10: fffffffffffffff5 R11: 0000000000000000 R12: 0000000000000000 [ 157.646415][ T3074] R13: ffff88810c7a44d0 R14: 1ffff92001bbff60 R15: dffffc0000000000 [ 157.655083][ T3074] FS: 00007fd22e2cf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 157.664098][ T3074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.670695][ T3074] CR2: 0000200000587000 CR3: 0000000114b58000 CR4: 00000000003526b0 [ 157.678679][ T3074] DR0: 0000000000000005 DR1: 00000000570fac24 DR2: 0000000000000010 [ 157.686656][ T3074] DR3: 00000000000003ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 157.694631][ T3074] Call Trace: [ 157.697953][ T3074] [ 157.700916][ T3074] ? __cfi_trace_event_raw_event_cgroup_rstat+0x10/0x10 [ 157.707877][ T3074] ? __cfi__raw_spin_trylock+0x10/0x10 [ 157.713350][ T3074] __cgroup_rstat_lock+0x11e/0x280 [ 157.718468][ T3074] cgroup_rstat_flush+0x22/0x150 [ 157.723410][ T3074] cgroup_rstat_exit+0x33/0x1e0 [ 157.728364][ T3074] ? kernfs_create_dir_ns+0x10a/0x130 [ 157.733935][ T3074] cgroup_mkdir+0xd96/0x1600 [ 157.738535][ T3074] ? __kasan_check_write+0x18/0x20 [ 157.743655][ T3074] ? __cfi_cgroup_mkdir+0x10/0x10 [ 157.748771][ T3074] kernfs_iop_mkdir+0x1bb/0x2d0 [ 157.753808][ T3074] vfs_mkdir+0x591/0x810 [ 157.758064][ T3074] do_mkdirat+0x240/0x530 [ 157.762403][ T3074] ? __cfi_do_mkdirat+0x10/0x10 [ 157.767695][ T3074] ? __kasan_check_write+0x18/0x20 [ 157.772808][ T3074] ? getname_flags+0x203/0x6b0 [ 157.777575][ T3074] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 157.783933][ T3074] __x64_sys_mkdirat+0x8b/0xa0 [ 157.788750][ T3074] x64_sys_call+0x2ba8/0x2ee0 [ 157.793439][ T3074] do_syscall_64+0x57/0xf0 [ 157.797874][ T3074] ? clear_bhb_loop+0x50/0xa0 [ 157.802569][ T3074] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.808482][ T3074] RIP: 0033:0x7fd22d39e159 [ 157.812949][ T3074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.832654][ T3074] RSP: 002b:00007fd22e2cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 157.841082][ T3074] RAX: ffffffffffffffda RBX: 00007fd22d625fa0 RCX: 00007fd22d39e159 [ 157.849058][ T3074] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 157.857032][ T3074] RBP: 00007fd22d43503b R08: 0000000000000000 R09: 0000000000000000 [ 157.865017][ T3074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.873014][ T3074] R13: 00007fd22d626038 R14: 00007fd22d625fa0 R15: 00007ffd435a3268 [ 157.880995][ T3074] [ 157.884023][ T3074] Modules linked in: [ 157.887921][ T3074] ---[ end trace 0000000000000000 ]--- [ 157.893407][ T3074] RIP: 0010:trace_event_raw_event_cgroup_rstat+0x14b/0x3b0 [ 157.900618][ T3074] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 78 56 62 00 44 89 64 24 18 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 8c 01 00 00 44 8b 23 49 8d 5d 08 48 89 [ 157.920581][ T3074] RSP: 0018:ffffc9000ddffae0 EFLAGS: 00010003 [ 157.926779][ T3074] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff8881260ca600 [ 157.934953][ T3074] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 157.942948][ T3074] RBP: ffffc9000ddffbc8 R08: ffff8881260ca600 R09: 0000000000000002 [ 157.950929][ T3074] R10: fffffffffffffff5 R11: 0000000000000000 R12: 0000000000000000 [ 157.958917][ T3074] R13: ffff88810c7a44d0 R14: 1ffff92001bbff60 R15: dffffc0000000000 [ 157.966895][ T3074] FS: 00007fd22e2cf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 157.975925][ T3074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.982526][ T3074] CR2: 0000200000587000 CR3: 0000000114b58000 CR4: 00000000003526b0 [ 157.990674][ T3074] DR0: 0000000000000005 DR1: 00000000570fac24 DR2: 0000000000000010 [ 157.998666][ T3074] DR3: 00000000000003ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 158.006738][ T3074] Kernel panic - not syncing: Fatal exception [ 158.012869][ T3074] Kernel Offset: disabled [ 158.017199][ T3074] Rebooting in 86400 seconds..