last executing test programs: 4m10.834131862s ago: executing program 3 (id=266): r0 = socket(0x2, 0x3, 0xff) close(0x3) socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004040)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x12000000}}], 0x1, 0x240000d1) 4m10.762382423s ago: executing program 3 (id=267): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xeffdffffffffffff, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4m10.758114883s ago: executing program 3 (id=268): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@ra={0x94, 0x4}]}}}}}) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000002c0)={0x20, r5}, 0x0) landlock_restrict_self(r4, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000480)={&(0x7f0000006400)={0x50, 0x0, 0x9, {0x7, 0x29, 0x4, 0x61a12021, 0xdcf, 0x4004, 0x1, 0x800, 0x0, 0x0, 0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x9, {0x3, 0xcc31, 0x0, {0x5, 0x5, 0x8000000a, 0x80000001, 0xffffffffffff6356, 0x1, 0x9e7, 0x35741062, 0x5, 0x2000, 0x9e9, 0x0, 0xee00, 0x3d, 0xa3c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x6000) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000)) 4m10.684510555s ago: executing program 3 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000900)) 4m10.636482026s ago: executing program 3 (id=271): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_setup(0x6d05, &(0x7f0000000140)={0x0, 0x17f6, 0x1, 0xfffffffd, 0x8a}, &(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd187513000000002e"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) syz_ublk_setup_io_uring(0x4d94, &(0x7f0000000280)={0x0, 0xfd33, 0x1, 0xfffffffd, 0x326}, &(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write(r6, &(0x7f0000000640)='\"\"go=z', 0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x64, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x188, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x100}}}, &(0x7f0000000480)) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) syz_io_uring_submit$UBLK(r3, r5, 0x0, &(0x7f0000000500)=@ublk_add_dev_sqe={0x2e, 0x55, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xc52, 0x0, 0x0, 0x1000, 0x7fff, r8, 0x0, 0x22}}}) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[], 0x30}, 0x4004000) 4m10.574031928s ago: executing program 3 (id=273): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x60, 0x6, 0x103, 0xa5, 0x30, 0x0, 0x0}) 3m55.432659177s ago: executing program 32 (id=273): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x60, 0x6, 0x103, 0xa5, 0x30, 0x0, 0x0}) 3m9.053238477s ago: executing program 0 (id=807): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)={0x2c, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1c, 0xce, 0x0, 0x1, [@typed={0xc, 0xe9, 0x0, 0x0, @str='cmdline\x00'}, @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xe}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f0000000000)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r2 = fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fallocate(r2, 0x0, 0xfffffffffffffffc, 0x1898) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000040)={0x5, 0x9, 0x3, 0x3, 0xc2a1074, 0xb6, 0x9, 0x3ff}) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000187000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 3m9.052592047s ago: executing program 0 (id=808): sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[@out_dx={0x6a, 0x28, {0xa20f}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x3a, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x2, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 3m9.007844248s ago: executing program 0 (id=809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) timerfd_create(0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x69) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000002d00)={0x10, 0x453, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000000)="3b910200440f20c066350e000000440f22c00f080f066766c7442400040000006766c7442402000000006766c744240600000000670f011c24f0808b00580066b80500000066b9050000000f01d9baf80c66b89d536c8066efbafc0cb00dee828339220064f23e0f35", 0x69}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m8.980248749s ago: executing program 0 (id=810): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f00000000c0), 0x7e7, 0xafb02) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c12fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xffe) 3m8.868747582s ago: executing program 0 (id=811): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_io_timeout/interval\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40142, 0x0) write(r1, &(0x7f00000002c0)='4', 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r1, 0x0, r3, 0x0, 0x800, 0xa) close_range(0xffffffffffffffff, r0, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000001a40)={@local}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080041}, 0x20048090) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) epoll_create1(0x0) 3m8.858756612s ago: executing program 0 (id=812): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10r&st\xe3c*sgrVdn:Dd', 0x0) (fail_nth: 7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) 2m54.959843199s ago: executing program 4 (id=874): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)="bbaa8166b113f814dad5fa0ac29559d71090fac64a8325228d28a044f9c3f33b37d32ce0194605b514ed2c85a82ddefbaa3cfe1003b123e865f3ab", 0x3b) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) r1 = inotify_init() (async) r2 = userfaultfd(0x80801) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'netdevsim0\x00'}) (async) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/305], 0xffe) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) r6 = eventfd(0x1000) ppoll(&(0x7f0000002840)=[{r6, 0x8000}], 0x1, &(0x7f00000028c0)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000000)=0x6, 0x4) 2m54.883455691s ago: executing program 4 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x3443}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_ublk_setup_io_uring(0x8d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) read$FUSE(r3, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x2, 0x2, 0x0, '^)'}}, 0x23) 2m54.784587064s ago: executing program 4 (id=876): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x28) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xffffff97}}], 0x400000000000172, 0x4001c00) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) 2m54.661462907s ago: executing program 4 (id=878): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0x0, 0x2, {0x54, 0xc000, 0xffff, {0x5, 0x4e78}, {0x9, 0x4}, @period={0x5b, 0x6, 0x200, 0x1, 0x9, {0x1, 0x5, 0x4, 0x587d}, 0x0, 0x0}}, {0x52, 0x3, 0x400, {0x1ff, 0x1ff}, {0x401, 0x7}, @cond=[{0x429, 0xfff8, 0x4, 0x6, 0xd, 0xe9}, {0x4d2, 0x2, 0x8000, 0x623, 0xff, 0xf2}]}}) 2m54.568116709s ago: executing program 4 (id=879): r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sigaltstack(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) write$FUSE_INTERRUPT(r3, &(0x7f0000000300)={0x10, 0x0, r5}, 0x10) ftruncate(r2, 0xfffd) fcntl$addseals(r2, 0x409, 0x7) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000001880)=@l2tp6={0xa, 0x0, 0x80000000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001900)=ANY=[], 0xd8}}], 0x1, 0x4000000) 2m54.444534062s ago: executing program 4 (id=880): ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x9, 0x8554, 0x2, 0x8}) (async) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) fgetxattr(r0, &(0x7f0000000100)=@random={'user.', ',\x00'}, &(0x7f0000000140)=""/171, 0xab) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x84400, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000380)={'ipvlan1\x00'}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000003c0)=@arm64={0x4, 0x0, 0x3, '\x00', 0x9}) (async) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) sync_file_range(r3, 0x4, 0x8, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xdc6c}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x85, 0xc5, "d824798874e3acc683e636b259a8bc7f06e3f051968ee90a4ada6881c6e325b60dfcee1ab4b91e07bcba79d1e0124a2ea384e03aa04cc7faeef2656256b11a5ee3c41ec79030903038fdb5a455c508be304d9978728c61b12b19e971c5209338392841284f7542b4263934e6e3eade74c7041045c47ddbd069f7348d7990e2e838"}, @NL80211_ATTR_VENDOR_DATA={0x3b, 0xc5, "af777900f9b14ea5c571ca39faf1a95075e846cd209f4f66992714cadba373b3b7dd303d07671c5893d203ba28a9b7fcf53838021adb08"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x66, 0x35, 0x66, 0x36, 0x63, 0x63, 0x33, 0x39, 0x38, 0x37, 0x37, 0x36, 0x37, 0x0, 0x33, 0x65]}, &(0x7f00000006c0)={0x0, "09f16e56f482ec24d5721892d66d1a0b1ee451b9c96656c1520814c082d3ff3d958bf8a9a917d3ed35a922f1e09eaf076adb60f8d71eb2a75acd88f9fe8d622d", 0x13}, 0x48, r7) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, r5, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a60404a756"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "ed103a63"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x48814) (async) r8 = syz_open_dev$evdev(&(0x7f0000000940), 0x7f, 0x208100) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000980)=""/4096) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000001b40)={0x401, 0x624, &(0x7f0000001980)="d423146e9e4e3580357fc762c5b1a9a9e82db44cfc235664e20a51b8e32c0c524d259dd5501f6c6188a0cc553cd82ab4f6019afb38d1328ffcea9c937490bbe029294056a6f75028faa0805f609827e180998431612baa4cf1e3a12585a79ba26a982dbf0dd3e110d6cd9c8c39206df2a7f34a74b91199e46924cbb99b80b3d83488040c776e6e01caaefa36b8af5bafe5350ff2fbe60edc4aae7a1c3adf9f103311c0a0f9a94e88dc1f2298b2b3538485d4c10040a70993878b6a3781fd5b042931bba62ee0afcfcd709adaec45c9cefa0da3e5e0782a1def9ff703e46e367926eec152456466", &(0x7f0000001a80)="ea037424d2694867fbb7895cf01e1a094d2580afa6035922e814a6d9dbdcf503d73a864677219163dcf4b5410876cc795bf7061da9109a898fd0bcc783e1150bc95e423da120170cd04c88c8016d922c699766a2eb3c64e95007d2e820aace0d285746a487adb8905f7233945acb3534bc7a0c14491c93b2ba9e2379d2bd4d8a4a4128618fa66abaea43c44d428785a25e837633f3684ae078ca2e208b926b17504fe74d91ebf65b3994b37c721658", 0xe7, 0xaf}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000001b80)=0xc05, 0x4) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001bc0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000001c00)={0x9, {0x4, 0x4, 0x9, 0xe4, 0x9, 0xda}}) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001c40), 0x82081, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f0000001c80)=0x729f, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001dc0)={'syztnl2\x00', &(0x7f0000001d80)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x9, 0x4, {{0x6, 0x4, 0x1, 0x30, 0x18, 0x66, 0x0, 0x80, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) 2m53.651945753s ago: executing program 33 (id=812): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10r&st\xe3c*sgrVdn:Dd', 0x0) (fail_nth: 7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) 2m39.121975296s ago: executing program 34 (id=880): ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x9, 0x8554, 0x2, 0x8}) (async) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) fgetxattr(r0, &(0x7f0000000100)=@random={'user.', ',\x00'}, &(0x7f0000000140)=""/171, 0xab) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x84400, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000380)={'ipvlan1\x00'}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000003c0)=@arm64={0x4, 0x0, 0x3, '\x00', 0x9}) (async) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) sync_file_range(r3, 0x4, 0x8, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xdc6c}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x85, 0xc5, "d824798874e3acc683e636b259a8bc7f06e3f051968ee90a4ada6881c6e325b60dfcee1ab4b91e07bcba79d1e0124a2ea384e03aa04cc7faeef2656256b11a5ee3c41ec79030903038fdb5a455c508be304d9978728c61b12b19e971c5209338392841284f7542b4263934e6e3eade74c7041045c47ddbd069f7348d7990e2e838"}, @NL80211_ATTR_VENDOR_DATA={0x3b, 0xc5, "af777900f9b14ea5c571ca39faf1a95075e846cd209f4f66992714cadba373b3b7dd303d07671c5893d203ba28a9b7fcf53838021adb08"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x66, 0x35, 0x66, 0x36, 0x63, 0x63, 0x33, 0x39, 0x38, 0x37, 0x37, 0x36, 0x37, 0x0, 0x33, 0x65]}, &(0x7f00000006c0)={0x0, "09f16e56f482ec24d5721892d66d1a0b1ee451b9c96656c1520814c082d3ff3d958bf8a9a917d3ed35a922f1e09eaf076adb60f8d71eb2a75acd88f9fe8d622d", 0x13}, 0x48, r7) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, r5, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a60404a756"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "ed103a63"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x48814) (async) r8 = syz_open_dev$evdev(&(0x7f0000000940), 0x7f, 0x208100) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000980)=""/4096) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000001b40)={0x401, 0x624, &(0x7f0000001980)="d423146e9e4e3580357fc762c5b1a9a9e82db44cfc235664e20a51b8e32c0c524d259dd5501f6c6188a0cc553cd82ab4f6019afb38d1328ffcea9c937490bbe029294056a6f75028faa0805f609827e180998431612baa4cf1e3a12585a79ba26a982dbf0dd3e110d6cd9c8c39206df2a7f34a74b91199e46924cbb99b80b3d83488040c776e6e01caaefa36b8af5bafe5350ff2fbe60edc4aae7a1c3adf9f103311c0a0f9a94e88dc1f2298b2b3538485d4c10040a70993878b6a3781fd5b042931bba62ee0afcfcd709adaec45c9cefa0da3e5e0782a1def9ff703e46e367926eec152456466", &(0x7f0000001a80)="ea037424d2694867fbb7895cf01e1a094d2580afa6035922e814a6d9dbdcf503d73a864677219163dcf4b5410876cc795bf7061da9109a898fd0bcc783e1150bc95e423da120170cd04c88c8016d922c699766a2eb3c64e95007d2e820aace0d285746a487adb8905f7233945acb3534bc7a0c14491c93b2ba9e2379d2bd4d8a4a4128618fa66abaea43c44d428785a25e837633f3684ae078ca2e208b926b17504fe74d91ebf65b3994b37c721658", 0xe7, 0xaf}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000001b80)=0xc05, 0x4) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001bc0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000001c00)={0x9, {0x4, 0x4, 0x9, 0xe4, 0x9, 0xda}}) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001c40), 0x82081, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f0000001c80)=0x729f, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001dc0)={'syztnl2\x00', &(0x7f0000001d80)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x9, 0x4, {{0x6, 0x4, 0x1, 0x30, 0x18, 0x66, 0x0, 0x80, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) 4.728670678s ago: executing program 6 (id=3178): ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = dup(r0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 3.260663096s ago: executing program 6 (id=3216): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_on}]}) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) inotify_init1(0x400) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x45) sendto(0xffffffffffffffff, &(0x7f00000002c0)="cde5e79eab350f4b29c251db8a37a78d491a4cac790adf23d02cfd5c849ae2eb8b19801d361e4602cad3574348283128b0b2f9e917d25e9beb8de11375577aa9d06a58c333f3ea416421a80a231eb00db542341dc685247edb88aeaed358d9fc0dbcf1117a54c12c0d17612d1f9b54206b9714282d08115368b40e5b39a87a7e4ac185afbead16648ad16e60d9c4d3aad77c3c90368fc501e31233a847a798f4074217dd92cdc3c156433b4f7325c411a93b7202b49142a121e0a5e522908af12fe8f05fc6013f335bbb939d4b3c3e704e57012ffdb04a3c39e79060b29067bb984bfd7429528eea4d9dbf70138ce68e95f5362c820e5309393c8d7ad3f70ad7a7", 0x101, 0x8000, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) close_range(r0, r0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="66b83728f2f50f23d00f21f86635300000090f23f80fc78aa000d2210f18d1baf80c66b81f579a8666efbafc0cb097eebaf80c66b8acd21b8f66efbafc0c66ed360f01d10f78bd070066b9820b00000f320faef1", 0x54}], 0x1, 0x7c, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 3.12470572s ago: executing program 6 (id=3218): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="010530001400280006006000000000301164fe800000000000000000000000000001ff02000000000000000000000000000104d2224e0030"], 0x62) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x2080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x4, 0x2082080, 0xf35, 0x9267, 0x5767, 0x6, 0x0, 0x0, 0x2, 0x7}}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x40, 0x4, 0x80000008000006, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x200000002, 0xfff, 0x40004, 0x1, 0x1c, 0x0, 0x9, 0x8001, 0x3], 0x0, 0x41981}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.064954801s ago: executing program 6 (id=3220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000003000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b"], 0xd4}}, 0x0) 2.976394534s ago: executing program 6 (id=3222): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8000000000000001]}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x47ffbff, 0x2, 0x0, 0x0, 0x9}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="0404895f004078879b595b1d4d63e13b8c633cc33f72039d2d882376b06fb672d8546ab256e0f104dce7231706cd26c818b4a0a87709ba7bc552ffdddaaba8762690a77ef4ae3aa9249713ea63a29297fac3f91accf4d95413e22d414e22d408ebec189a65b7bfa06b00"/121, 0x79) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='3\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) ioctl$TCFLSH(r1, 0x540b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00007db000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ebb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.932827475s ago: executing program 6 (id=3223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xec, 0x9, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xdb1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2a1ee686}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xbb54}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0xec}, 0x1, 0x0, 0x0, 0x24040084}, 0x8080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) unshare(0x60000600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x28901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x1) r9 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) read$hiddev(r9, 0x0, 0x0) getpid() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000006c0)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000007c0)=0xe8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x90000, &(0x7f0000000800)={[{@xino_off}], [{@fowner_lt={'fowner<', r10}}, {@uid_eq={'uid', 0x3d, r11}}, {@obj_role={'obj_role', 0x3d, 'syzkaller1\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfsdef}]}) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x1f}, {}, {}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x8, 0xfb, 0x9, 0x40, 0x17, 0x0, 0x2e, 0x46}, {0x60000, 0x50000, 0x9, 0x0, 0x22, 0x5, 0x75, 0x4, 0x5, 0x3, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x4, 0x3, 0x3, 0x8, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x6000, 0x2000, 0xc, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7e, 0x4, 0x83, 0x8, 0x83}, {0xdddd1000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf8, 0x4, 0x25, 0xff}, {0x3000, 0x50000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x80}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xf000, 0x2424, 0x3, 0x9000, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0x4]}) 1.689571887s ago: executing program 1 (id=3238): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x8, 0x36380, 0x659}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x63af, 0x107003) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x80000) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x22b3, 0x2, 0x3ff, 0x800, 0x9, 0x120, r3}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xfffffffd}) r6 = dup2(r4, r4) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, 0x0) mremap(&(0x7f0000375000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000043c000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000044000/0x1000)=nil) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x7a, 0x29}, {0x5, 0x7, 0x5c, 0x8}, {0x9, 0x47, 0x7, 0x7}, {0xfffe, 0x4, 0x73}]}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00'}) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) (async) capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x8, 0x36380, 0x659}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_open_dev$loop(&(0x7f0000000000), 0x63af, 0x107003) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x80000) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x22b3, 0x2, 0x3ff, 0x800, 0x9, 0x120, r3}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xfffffffd}) (async) dup2(r4, r4) (async) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, 0x0) (async) mremap(&(0x7f0000375000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000043c000/0x4000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000044000/0x1000)=nil) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x7a, 0x29}, {0x5, 0x7, 0x5c, 0x8}, {0x9, 0x47, 0x7, 0x7}, {0xfffe, 0x4, 0x73}]}, 0x10) (async) 1.476527742s ago: executing program 1 (id=3244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x174) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000480)="f02ed04367a71ba4c9fd7251c9f2a668fdcaaff92ec55ae64de4f5be4275b64063bfa3952ba027ad55a5416e1b7f2a53e09612ba8d19c6ec36d41ff25e14ca92ea545ee745e950e14e54227fb14cab0b2cc4ce8c504bfe87e4b5928857475ff497a07fc28ec37419a5246d72247ea6ed03c506b42fddeb51483ac2daaeccb2dab3b12f346d684a7a0432095bb7bedf4a3f0857940a0425", 0x97}, {&(0x7f0000000540)="ec4f67abd3bab5fd286590071930a80d495f53a81b8d2a8ef15cd286086be43ab825b7a1", 0x24}, {&(0x7f0000000580)="25532115754c2f13c8bfb96dfb42a15789f608a29931fe1ff8df1ec2361f11f75f4e10ab796b98b981e9a89dc1c6ed259e209963ede3b95c320e663e7cd83f472a1810869f787f63c4ad6743af84ed64afed5b9c365a22327cf174c349217a13da74f6dbcdbae620efa5ee61b4eb1b15a9e2c484e00e39f962e9ebccd6871a1dd88ad781ccfb27a2c0c61fec6e99ade3fa5825916e0498c2a0d283907974af5250905ab3093bdb07d1", 0xa9}], 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x101, 0x8000, 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="66b83728f2f50f23d00f21f86635300000090f23f80fc78aa000d2210f18d1baf80c66b81f579a8666efbafc0cb097eebaf80c66b8acd21b8f66efbafc0c66ed360f01d10f78bd070066b9820b00000f320faef1", 0x54}], 0x1, 0x7c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write(r4, &(0x7f0000000200)='ba', 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) 1.459013213s ago: executing program 2 (id=3246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xfe80}, 0x1c) 1.451162213s ago: executing program 1 (id=3247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000030000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b"], 0xd4}}, 0x0) 1.368334415s ago: executing program 2 (id=3248): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="010530001400280006006000000000301164fe800000000000000000000000000001ff02000000000000000000000000000104d2224e0030"], 0x62) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x2080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x4, 0x2082080, 0xf35, 0x9267, 0x5767, 0x6, 0x0, 0x0, 0x2, 0x7}}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x4000000, 0x7f, 0x100000, 0x4, 0x83, 0x8000000, 0x0, 0x0, 0x4, 0x2, 0x5, 0x8, 0xc6ea, 0xffffffffffffffff], 0x0, 0x100200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.367937565s ago: executing program 1 (id=3249): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x8, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x40000, 0x49c9}}, @rdmsr={0x66, 0x18, {0x958}}, @set_irq_handler={0xc8, 0x20, {0xe8}}, @nested_vmresume={0x130, 0x18, 0x2}], 0xb0}) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r0, 0x2000000, 0x2010, r1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r0, 0x3000000, 0x10010, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x412}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000140)={0x101, 0xfffffffffffffff2, 0x3, 0x3bfd, 0x2, [0x4, 0x1, 0x3, 0xffffffff]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000180)="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", 0x1000, 0x8000, &(0x7f0000001180)={0x2, 0x4e21, @loopback}, 0x10) userfaultfd(0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xb4, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x5b}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xba7c}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7223735a}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x76dd}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001340)={@multicast2}, &(0x7f0000001380)=0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) sendto$inet(r3, &(0x7f00000013c0)="a433ae47814eaa0b0295f5c6f32baa1c99ee2b41ec5871de1b540f5814648189feba13b5c777fb3234e768b2695faaba04855d68", 0x34, 0x0, &(0x7f0000001400)={0x2, 0x4e21, @multicast2}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000001440)="5d839f7cde1a0b6a05ec57213a82ea948f91a67466fe8f4253265407a94824910e043cb0598f0d9f86cc6ffb962c3574ad376647c32e9a1c47cfd80ec08e89d4ea153d7c4dd6bf07c38a83eaafb964a34fcf0b811d8b33308fbb299ecb332368affbe5855498dfea6ac7715837bc0a4b1f8de79f75abd19a2386b177c3c6f60333c3fa759da0edfc22af24a72abd050ff8b9564c0248bdd0a95af7a19ca84ca677a22bd32be66fea2e1fc6637ec25422297ed0f8432ecaded3a212a9f0993a040a1e5e6882fbaaac260d0b40766cf97e4c65ccdf61b4efc4d5bffbffc675a5184d266ecac8a2243196ceb3dc3c9dbd807f97a29d95fbba13d228d4e0b9db49a035423cd45f8290e35958a9a7b82cc96bc041e686d388d068c34737420b6697e4bb75eb4d027948585df4e05f14c0045e3d953c25fb9e66682f9f38420839ec1601e2b891c2e19db06033cde499b72c6ad112c98723f4423b729416211692d4c006e7d303dd08eee8ed76f412b411f90728dfd851aa9c47d5d9f3440b4deb5682aa1ce9499355cab98199eb256e116ac94300f67ff40ad2fe4151c291b28480040dc85b2ddad44511c70dce1885be6c9bb91809a925813845b1cb57367ea4c1bdbce4bf16872cdb05281f4d6b02d1a877753978045110cca652b602c489d73cad78a1b7451bc99abc0fdd7ce390371fd123fdd3f48ed3931b6e2cd5f4cbe16731a72aefc99ab05535304a320d155e0ff8e8b790e7df611785a94d8453c3511bf4acac9a5764efdcdfc0d8abb9cc0920ab9982ede7803760b10bc7538a19184662c799b77b520578241dfbc1e4e03303254620f74f0aaa91518f61508b0795218aee718ea8a12e5f4828c9b550a301276351ac5b3a016d4a420f427d9d5bd8a2070c659031e0b73ccea149eedb38835f04b91163ad772d7212895aa8acb4f8e654df817c4456b3119588c53b714a1727d0d4194a79b80e05d4cdf0ac994ba9261c969e9d5d41056ca30c22238ff389efe04ba38335c259c6fe8bd9961132f9d5dc3a6faf15a53f0def56775e2c818fe63467cfeeb98ed99a4316077e198bddde96744ed0fedbfebdc13a349054b61f0390af782232f8648f29d742f423a64f621916471f13e28a0e3d92b48dfbbfbdd0675a788bfb0c53b4b29ebcd7722e71226ed1084cb589a568f680bea38f28d799c5f969374c770c184a4df2db7ac029d4396883f457d19a8deaaa380808b7d000e1cbd4f762307297238f600bc0b73be5e2d93dfa5db34ac5a736efa1925e6037e09c488a8bcf46206b6dda8bf714249a61e672a2258e15ddd245563f4263e062b867a808a03898ef832a9fe652041fd72eb7a71c2781a7f7f34bc10260ab45b14ffb6eef47fa89da4596512e717b4a0b9afd35ec168b8d13489777fe05229cc219dc31eea420783e4e40190911b10294f4fcc3fcc88ed3eb6150e51f04d7f87897af7df8f57f14436e8c926b0ef877ddbf746f8faa5ed369b74825aef7f54fc6d7538f4c7123af3161f4957917d2fb6a480911bda7c5a610c48f1ba068aa4e43456ba4fddb881dc1d62255b26f708f0840efe833d1fdcc42499580fff0d8cf21bdf0f86ad4b8e91f36382e8bcc5ad2c5ac8d652c5b520d5157fb3b19d7cad7e67f65c6257a9413fcd16e897abbaaa4c2fe7a54c4dd91476b3e662ebe6b2b1849e081dec1acd01f666d3496e146d7856b5029f551aacf98e0174cdff08a532b8229da12e11e95cce90635c95f5d394e4cbdb58b9fcfff36577c8e852c66f4da4ec5ab60e26444fd9f9ca33f23b2fd08f1a19a59754457310ec6147c8a5328d8d2680d473cb5d693a8b851fc7e6badfe140e354ddb3afbebb75091b0225e97e8582863f8a4510425d1f591df36e1f0cb2b004603a5f2b0309f87d853c2faa7b830d117f7cb4c805fea27cb0e342b4588e4b8943ba3d8d945dffc0bb2a9698e7420b7b9121b2b368df61a8c89a4a6403be93804100b4d5ec727b2ebc52a4b892a3a1f25186139ae06bff014d3ad4849ed45b888b27caf20fd097c8f1219a3924369bc68b2a03beaaa92b93042a97f950051b163763593475d0a10a53c9e9816d76636252058811c66bb707758a0a7c6390e5c67d57094695a7320f6d75bbdbe702ee9063f176f161fa2c4561a7d418b8e3c35374e86717922cfe5f2e281879360c0584aa2f9aedd47b43866face8f72ff0689102a6ebe5dcd86f37a545d2ab15e4e0f7c2594d5c3d6314ea1bf219da8a383555e4f0f2fde176e696c90e4597db3e4083235a7c56aee7fe0a0e16473fd3bac2d9414c0591f6cc13b0ceb120b24bd1f94358c3123ec1db46b8e77c1a2e06c33952748bd7aff9f443e3f3b819af506123dc750812ffc8f281b4864ddfc47f4734330e3bf26dfbeca4f0cb43b57968d33b05d858d04cce1d42cd242818a329b8459a49c849e082cf4273a2f32824eb7bd42aacd4aee7c6794423f3109f86bdc84f49c527baa8f6dbeb7ab912f6a7eadb973228c4f05a8652ce2a970930561806fa93dcb1da9b7815d08f31586a859d56fbd14f9fb5691e08f047bd328590cffb1e94e9b4cc847be5e0117568522bbf529e19cf248048a47d4bcbdd9b29678fd1c039b1cf4940c1b53c0d3ce261678f7682eb640b4542d7eb311a99043e1626f557e61a879fff678b5935c2b358d4ccfa4ba74d0ca97edc72512388b57c00a38cc54e111c62c0fa46e451cb0d6598a3995978ecb9ac19fd095d51d761c7265200758406c42325f9b17016f0a5f84b577c58a3afc2f4085cae6965d40e080e07b45c7ec005e674aabdde0df7cab10fe53533d6cc0c8ba2bfe4681b1ded672bd38efc152b61ba8b6a3197f08697c9223a5fbaa0cfd8b29b14e5ed28a59d97958c46541259e3b6f03b2e2bbf5c3132649cb3cd85bde060753493b8e4b9d941ba9aa86d2344a8d42b49bf135401a6c3f307335d709a71d682f022ed659b7fd4b5cc95190b60c87b25ffe67ca9418967007a7e72343b28b0ab3aedfa9db510fb1a4b42ca07d3cb12e76fd64a6f32b17d74222c7a0205b565746abb11b8e2bbba88d5259b4e4e38f276574bb9f6795b5081f5848487a76e68a0340f210053d4e7ffc0d8ff3e79dfb79d90d3a016502cf9a254a28398de832ad21df7bb8e2d37d5cbf62a5599ffb554ead4605f2826f4c043eff0f7b541d244a84ff176c58a01e8c7c32e97a86293ac75a6f3d86bc3278cb79d075b712d4e61738dfbf62e3e565c38697e82c8dcc236be87b9e6a87c6b170078b75c3c6b2a30751d7deb4fd774d46c1cd24e174e07c0e33487075be7e20e3d366ed31a07e3809aa48de30664a13d71bb567d2298551add6edbada6789227cf9153c741c06112f188be1113b281ef7f0775024ee605c428c11b7d3bf61f969861372419a7993420f0601df791c8424d6f30c163c6d249d15a4acc872134e769db634f5a72de7196f39317878192c2d063b5be3656e0af3a55600c6de2c53c677653c45349bf129f78d1fe391a8e431097bc88ae107e72825d772d8e41760c92c641c192a69924316d2593d7dda2f563d0a54f18d1b4a33eff344331d2ff9a9c512c9774621eada98ef455bfdd8a4deeb8028b624540746b350e02f6c43691b3b4c222328bc0da935ce12fbab674791eb4d5261c4241aeeb22eb8bd30a9884b9a140b90a13c9aa70d7ac9215394f1de1bc2283fe8bb27efadc4c7e79ae2dc367c175f74d0b4af02fb35c0453341027a405e566213577614e1fa46d6d44f4e67c22d4fac02f467af8bc89f0270537da2130de6a68b27bc48de003b42fae65bb5970bca16bd5ad653a0447b05806f5faa40ef46eb022edf4617d603c6910e8a33d4ed5f9e96f079bea18500db17eedef87ba406ba82e6c968265b33120fa97f2654d11ce9e5385e2ed3d7f300039fbfed1c861800fcba90f7b8d271c1d332e34faf8553ce6774a54d73e2034a716baef6b65405b014429ac4e8d2f1ab5dcd73ca2814bab69f560128252f08c202e99f297de0a6c11f7e0bbbf03bc1956af76c8590fbc9a77fe86f9fedca9a105e4e35057d838f92b9dc03f4174a018553cc5f6aae917a3a14ced35fce6d26abcd00a663ce6543ec40f420977e999f470be5b10906b6221d15b65fc8ecc0ae444e21961035e70ec48c7e039bf8fc3d5d8090365009013f8625c4316690bd31a18c0dbd776afedef49b0f07ac405b1fe28ea3eb58c07d6363f2135df8d1f8e83feeaf067baa25114dfef23306cf5858bf3d1157650cede5a0331529d86e273bad2e93cd551a61e8585709d674d3809f651452165da4517bc02de4d3ff30ea4ae9dbff5fe98b0a69b83d71674ba474a8e177c432255bf399394c066b925107b6835441ff7c46f19f9cbd877f27009707edda63b3cc8d99fad12ab1c1228d4a793e6f9a4ea990e4ec56c2c91b5e9232fdb73f58f7fa1747fad5b3a4b69ce45da5fe5ef8ab4bebd7479e8f1b1486b0ae9c92ee361be2b0f0896ba94e9d566691954aaf52769c575817e6412fa411f6a57edfedd66d30244178b00027261115c11d91f2716f5213314027424cb3de2a58a5cb8469443a8eca72aea94a1102e200a05324911d2cb716df77bb69283ff218cfbc8e3c17c9a8fad1144266a2bece6f5bc913bab46b72f29470c8f05d08d9a96935938a486461e577a5b22d5d77b84e8620d474fc574ceb3d7eee0d2aebd634b0dcf8653334d7eaa900a9b62f08d1a450c0d055bdadca61ad1b20166e91ed8419c52cd467534e62db85d51cb553fef3980b8d9a51cf52a69af68bbba87af4ff0b4c7052e9fd2fe4b353ca68178f40957c6e23ee4eae4f1cf80f174e699e6ed50903ccd1c2d360a68de7f5914439b6b9719f7c8e6099c356b1a8e9b5098e91272600421bd80698200097cfb1ce92db91b5dc2e22dbebb4b4d4328c041b3e5b1747715e51dc1de38d6c55f615ac814b500372cc2bcd129fd1b7b3a2c9e2909c8248ab38d59b24e2da33f42d1a3115ffa15c1dde254c4db0b7be5e9346019abb0ccddc5a490bbd6cb279b934f956eec50a4af6425001b3633fd913b4b9da9ed2d73115c3c0cdbcd4b04f2f914c06fbe4be749f8cfee0de59e938a8f2dcbdff6129638dd128bac99baf02e03149efdcb829314858fa2a82b536ba328fab9088d39e58ad5da4f7f621ce66c8da5fbbd9643fe9e74cd03c7408989df0c531b3bc03e977f4335514aaa1e856441582e0baa625585d44cb4e09c5ff424b6e74b844d1bea64c022f5aee32bd27db5aabd797d90b66969a90c569eb8476c261ea0f60c4d949f535261df232af8988d743a1009b0116a66a099dc8f42b2cfb700a9c5c30e8e3f2a9e80d7d02293d6102401f492132ccf7feae72f27dfac07523d22c28ba7e814af44c56718f2867bf85b957175cd89ebf4ec99c1eefaddabb05e8d881466ad6cf5f878b907ed6ee835ec6bcbc9e722a55a6e1ed85d3b4270a99ba8bf913b47b03dba4c789d82bfd7a0e959b8c6ebcf3774885942dbc2f20cad08f51c886225ec5d2a15f8c672cdc6d60ec2248d759bf2d225afb44e15e4c55d6054a910e151be14c7f05145fb19846a7f539846054a94749f003de0c4e04765a8413ce3fbfea8532ac1f9d6ba084176723c7b7376aca33e654ffad95cdb4b3970325cc96e558d7e9848ef44d9ed8402a797a50f541476ce483d46c0f2abea1d640e20fd6a404e2782dddfd6e8213218db4445215a2875f800981d0d4b3d226160cceb17148320f13d6b40a127d918f26f26408ba705aaf6dcf370a26635bf4", 0x1000, 0x22048805, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000002440)={'broute\x00', 0x0, 0x0, 0x0, [0x8000, 0x0, 0x7, 0x4, 0x9, 0xc23]}, &(0x7f00000024c0)=0x78) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000002500)=0x5, 0x4) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) pidfd_getfd(r6, r2, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f0000002580)) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x7) sendto$inet(r6, &(0x7f00000025c0)="d4d326d313c3f8ac9b56901728d8dd4a207cfc958f1252dd8a0b80cca4a826f9968deb8f9e71de357d3a6d357bc2", 0x2e, 0x4880, &(0x7f0000002600)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000002640)={0x0, 0x100, 0x4, 0x48}, 0x10) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000002680)={0x8, 0x0, 0x3, 0x982, "968bd06c8a788b0bde1c109d3582ca1f7dcc2851f38a091cbac6a67e9a81a1a8"}) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000002780)={0x14, 0x82, &(0x7f00000026c0)="aaa07828a064d398bac49e57e3f729674b5e1664db74ea841c3a27992dd514e4cc86904ca8b5368afb126720bff16357a23b2a01043176cdaed900c61012e7ef5636dae5dfe89600b0933300e54183f516be3982d3222c7fc9516b945de4eb9f27621824ad3a584826323693ab6296d2e3b57e6bc5d739c55adbc95937853a481fb4"}) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f00000027c0)={{r6}, "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"}) 1.330261316s ago: executing program 2 (id=3250): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8000000000000001]}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x47ffbff, 0x2, 0x0, 0x0, 0x9}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="0404895f004078879b595b1d4d63e13b8c633cc33f72039d2d882376b06fb672d8546ab256e0f104dce7231706cd26c818b4a0a87709ba7bc552ffdddaaba8762690a77ef4ae3aa9249713ea63a29297fac3f91accf4d95413e22d414e22d408ebec189a65b7bfa06b00"/121, 0x79) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='3\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) ioctl$TCFLSH(r1, 0x540b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00007db000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ebb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.320128056s ago: executing program 1 (id=3251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc010000100001000000000000000400ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff480001"], 0x1cc}}, 0x0) 1.216424379s ago: executing program 2 (id=3252): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, 0x0, 0x0, 0x0, 0xfe, 0x2}]) 1.216127809s ago: executing program 1 (id=3253): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRESHEX], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x3, 0x67, 0x4, 0x7fff0022}]}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) finit_module(r2, 0x0, 0x2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) syz_usb_disconnect(r1) 1.18370873s ago: executing program 2 (id=3254): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback, 0xff00}, 0x1c) 1.17289445s ago: executing program 2 (id=3255): ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = dup(r0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 711.457441ms ago: executing program 5 (id=3259): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0xfd00, 0x7, 0x10000e0}, 0x6e) 665.678863ms ago: executing program 5 (id=3260): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8000000000000001]}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x47ffbff, 0x2, 0x0, 0x0, 0x9}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="0404895f004078879b595b1d4d63e13b8c633cc33f72039d2d882376b06fb672d8546ab256e0f104dce7231706cd26c818b4a0a87709ba7bc552ffdddaaba8762690a77ef4ae3aa9249713ea63a29297fac3f91accf4d95413e22d414e22d408ebec189a65b7bfa06b00"/121, 0x79) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='3\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) ioctl$TCFLSH(r1, 0x540b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00007db000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ebb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 665.417683ms ago: executing program 5 (id=3261): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x10ba00, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000b80)={0x1, 0x0, [{0x489, 0x0, 0x8}]}) sendto(r0, &(0x7f0000000140)="120000004300e7ef7f000000000000e100a197", 0x13, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b"], 0xd4}}, 0x0) 592.660585ms ago: executing program 5 (id=3262): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800efff1900210000000000008100000000000005000000000000000a0004ff76a9e20000000000bd549cfa628cd5fbd6db"], 0x28}}, 0x0) r6 = fsmount(r3, 0x1, 0x0) setuid(0xee01) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) fchdir(r6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0xffffffff, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc, 0x4}, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f00002df000/0x3000)=nil, 0x3000, 0xa18a904b21f92c89) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="880800000000fedbdf25570000000c00990000060095004f000010060095000500000000000000000000000000000000000000a83e41f5068176b2fae9bfbeb5fbcd11a91766f8c81a80d2521ae474c2c42f83ee4c5d59502632dd5ea115c50b4dedaf2bb11e3ef9db58471fb7cf0301c0a9d25292bcdb12313b41d4d7f5fb4247a6440507e7fda51f0824106865704d707997b225d24fa68a6801a370ecf7070420293d8cadb2eab97daa8b7030140bfaac3709109b7bc15ea4aceaae471ec4057a57e6535f78d8ee4a359862a23e22bd567cb7a2273b1ad0b99c8ff74ea538ff86c2293d107ba7aa9f789b7262ca96b028c47ef4a704fbdc2d56dee563536f96564126"], 0x40}}, 0x4000804) recvmmsg(r9, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}], 0x1, 0x40000002, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f03) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) r12 = add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) linkat(r11, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) write$cgroup_devices(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="a0fd896445df45daf161ad8342567fb86ff81732bd9a92a155a3d33421441284121f04c4dde1234b71aa7798838c1068cb4bed25945c794277b6ba309d5429383a6eff32f03f573369276c", @ANYRES16=r4, @ANYRES32=r5, @ANYRES16=r11, @ANYRES32=r8, @ANYRESHEX=r12, @ANYRESHEX=r0], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 592.392645ms ago: executing program 5 (id=3263): syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_CLR_FD(r6, 0x4c01) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000d00)={0x3ec, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8dca}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x800, 0x5, 0x3, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc1b}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5e}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x8890}, 0x20008010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x101000, 0x1}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) 0s ago: executing program 5 (id=3264): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="cde5e79eab350f4b29c251db8a37a78d491a4cac790adf23d02cfd5c849ae2eb8b19801d361e4602cad3574348283128b0b2f9e917d25e9beb8de11375577aa9d06a58c333f3ea416421a80a231eb00db542341dc685247edb88aeaed358d9fc0dbcf1117a54c12c0d17612d1f9b54206b9714282d08115368b40e5b39a87a7e4ac185afbead16648ad16e60d9c4d3aad77c3c90368fc501e31233a847a798f4074217dd92cdc3c156433b4f7325c411a93b7202b49142a121e0a5e522908af12fe8f05fc6013f335bbb939d4b3c3e704e57012ffdb04a3c39e79060b29067bb984bfd7429528eea4d9dbf70138ce68e95f5362c820e5309393c8d7ad3f70ad7a7", 0x101, 0x8000, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="66b83728f2f50f23d00f21f86635300000090f23f80fc78aa000d2210f18d1baf80c66b81f579a8666efbafc0cb097eebaf80c66b8acd21b8f66efbafc0c66ed360f01d10f78bd070066b9820b00000f320faef1", 0x54}], 0x1, 0x7c, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): class=netlink_audit_socket pid=5880 comm=syz.2.1933 [ 228.909944][ T5891] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 229.255856][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.281420][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.967871][ T36] audit: type=1400 audit(229.948:493): avc: denied { ioctl } for pid=5920 comm="syz.2.1952" path="socket:[44648]" dev="sockfs" ino=44648 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 230.008335][ T5933] tmpfs: Bad value for 'gid' [ 230.034766][ T5933] tmpfs: Bad value for 'gid' [ 230.146366][ T5942] IPv6: Can't replace route, no match found [ 230.293606][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 230.383507][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.397009][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.420036][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.442051][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.462522][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 230.468759][ T10] usb 6-1: config 1 has an invalid descriptor of length 28, skipping remainder of the config [ 230.483037][ T10] usb 6-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.511922][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 230.526426][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.538141][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.550998][ T10] usb 6-1: Product: syz [ 230.560560][ T10] usb 6-1: Manufacturer:   [ 230.580430][ T10] usb 6-1: SerialNumber: syz [ 230.804735][ T3776] Bluetooth: hci0: Frame reassembly failed (-84) [ 230.822742][ T5933] Bluetooth: hci0: Frame reassembly failed (-84) [ 230.846915][ T5974] overlayfs: failed to resolve './cgroup': -2 [ 230.865760][ T36] audit: type=1400 audit(230.848:494): avc: denied { ioctl } for pid=5973 comm="syz.6.1974" path="socket:[44808]" dev="sockfs" ino=44808 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.998128][ T5985] IPv6: Can't replace route, no match found [ 231.064532][ T5987] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 231.180404][ T5996] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1982'. [ 231.370576][ T36] audit: type=1400 audit(231.348:495): avc: denied { create } for pid=6000 comm="syz.1.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 231.416161][ T6001] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 231.525847][ T6005] syzkaller1: entered promiscuous mode [ 231.531700][ T6005] syzkaller1: entered allmulticast mode [ 231.582792][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.592260][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.977712][ T36] audit: type=1400 audit(231.958:496): avc: denied { getopt } for pid=6015 comm="syz.6.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 232.196901][ T6038] overlayfs: missing 'lowerdir' [ 232.558932][ T6040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6040 comm=syz.2.1999 [ 232.592943][ T6042] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 232.686896][ T6044] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 232.785965][ T6053] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2003'. [ 232.832455][ T36] audit: type=1400 audit(232.808:497): avc: denied { write } for pid=6054 comm="syz.2.2004" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 232.901965][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 232.908151][ T1950] Bluetooth: hci0: command 0x1003 tx timeout [ 232.924622][ T10] cdc_ether 6-1:1.0: skipping garbage [ 232.945424][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 232.968660][ T10] usb 6-1: USB disconnect, device number 42 [ 233.045416][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.066971][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.647926][ T6089] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 233.677888][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 233.833415][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.842627][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 233.849397][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.861388][ T10] usb 6-1: config 7 has an invalid interface number: 177 but max is 1 [ 233.873185][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.882331][ T10] usb 6-1: config 7 has an invalid interface number: 21 but max is 1 [ 233.895047][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.904374][ T10] usb 6-1: config 7 has an invalid interface number: 228 but max is 1 [ 233.916980][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.930517][ T10] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 233.942755][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.951741][ T10] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 233.979513][ T10] usb 6-1: config 7 has 3 interfaces, different from the descriptor's value: 2 [ 233.997147][ T10] usb 6-1: config 7 has no interface number 0 [ 234.024037][ T10] usb 6-1: config 7 has no interface number 1 [ 234.041327][ T10] usb 6-1: config 7 has no interface number 2 [ 234.062949][ T10] usb 6-1: config 7 interface 177 altsetting 53 bulk endpoint 0xB has invalid maxpacket 32 [ 234.089638][ T10] usb 6-1: config 7 interface 177 altsetting 53 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 234.114794][ T10] usb 6-1: config 7 interface 177 altsetting 53 has an invalid descriptor for endpoint zero, skipping [ 234.137903][ T10] usb 6-1: config 7 interface 21 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 234.175262][ T10] usb 6-1: too many endpoints for config 7 interface 228 altsetting 240: 183, using maximum allowed: 30 [ 234.199018][ T10] usb 6-1: config 7 interface 228 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 234.225436][ T10] usb 6-1: config 7 interface 228 altsetting 240 has a duplicate endpoint with address 0xB, skipping [ 234.257165][ T10] usb 6-1: config 7 interface 228 altsetting 240 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 234.277912][ T10] usb 6-1: config 7 interface 228 altsetting 240 has a duplicate endpoint with address 0xD, skipping [ 234.303831][ T10] usb 6-1: config 7 interface 228 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 234.327783][ T10] usb 6-1: config 7 interface 228 altsetting 240 has a duplicate endpoint with address 0xB, skipping [ 234.353682][ T10] usb 6-1: config 7 interface 228 altsetting 240 bulk endpoint 0x9 has invalid maxpacket 32 [ 234.377300][ T6133] overlayfs: failed to clone lowerpath [ 234.386816][ T10] usb 6-1: config 7 interface 228 altsetting 240 has a duplicate endpoint with address 0xA, skipping [ 234.405776][ T10] usb 6-1: config 7 interface 228 altsetting 240 has 12 endpoint descriptors, different from the interface descriptor's value: 183 [ 234.432663][ T10] usb 6-1: config 7 interface 177 has no altsetting 0 [ 234.449741][ T10] usb 6-1: config 7 interface 21 has no altsetting 0 [ 234.468580][ T10] usb 6-1: config 7 interface 228 has no altsetting 0 [ 234.489113][ T10] usb 6-1: New USB device found, idVendor=0e66, idProduct=0020, bcdDevice=3c.04 [ 234.514351][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.542418][ T10] usb 6-1: Product: syz [ 234.552608][ T10] usb 6-1: Manufacturer: syz [ 234.571606][ T10] usb 6-1: SerialNumber: syz [ 234.603537][ T6081] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 234.709396][ T6161] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2052'. [ 234.733767][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.777570][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.045594][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.056271][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.076213][ T10] usb 6-1: USB disconnect, device number 43 [ 235.382348][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.401879][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.423277][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.444313][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.465794][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.492116][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.705468][ T6200] netlink: 'syz.2.2068': attribute type 27 has an invalid length. [ 235.731248][ T6203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6203 comm=syz.6.2069 [ 235.785161][ T6205] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2070'. [ 235.799169][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.822654][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.859844][ T36] audit: type=1400 audit(235.838:498): avc: denied { create } for pid=6210 comm="syz.6.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.888588][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.6.2073 [ 235.923024][ T1000] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 235.952442][ T36] audit: type=1400 audit(235.868:499): avc: denied { create } for pid=6210 comm="syz.6.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 236.009909][ T36] audit: type=1400 audit(235.918:500): avc: denied { read } for pid=6206 comm="syz.2.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.072023][ T36] audit: type=1400 audit(235.978:501): avc: denied { read } for pid=6206 comm="syz.2.2071" path="socket:[45849]" dev="sockfs" ino=45849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 236.107487][ T1000] usb 6-1: Using ep0 maxpacket: 32 [ 236.126756][ T1000] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 236.142586][ T1000] usb 6-1: config 0 has no interface number 0 [ 236.157408][ T1000] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 236.189921][ T1000] usb 6-1: config 0 interface 196 has no altsetting 0 [ 236.224996][ T1000] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 236.237824][ T1000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.264637][ T1000] usb 6-1: Product: syz [ 236.279117][ T1000] usb 6-1: Manufacturer: syz [ 236.294121][ T1000] usb 6-1: SerialNumber: syz [ 236.312614][ T1000] usb 6-1: config 0 descriptor?? [ 236.330090][ T6192] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 236.554478][ T1000] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 236.593395][ T1000] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 236.624556][ T1000] usb 6-1: USB disconnect, device number 44 [ 237.027714][ T6247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6247 comm=syz.1.2085 [ 237.112961][ T6251] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 237.152034][ T1000] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 237.207471][ T6255] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2089'. [ 237.277656][ T6257] mmap: syz.1.2090 (6257): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 237.332563][ T1000] usb 6-1: Using ep0 maxpacket: 32 [ 237.340059][ T1000] usb 6-1: unable to get BOS descriptor or descriptor too short [ 237.365277][ T1000] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 237.397183][ T1000] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.444171][ T1000] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 237.479557][ T1000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.489010][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.521696][ T1000] usb 6-1: Product: syz [ 237.527623][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.546533][ T1000] usb 6-1: Manufacturer: syz [ 237.551260][ T1000] usb 6-1: SerialNumber: syz [ 237.782868][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.803750][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.830067][ T1000] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 237.852673][ T1000] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 237.872858][ T1000] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 237.902878][ T1000] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 237.960097][ T1000] usb 6-1: USB disconnect, device number 45 [ 238.597255][ T6286] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6286 comm=syz.6.2103 [ 238.673209][ T6288] sit0: entered promiscuous mode [ 238.702824][ T6288] netlink: 'syz.5.2104': attribute type 1 has an invalid length. [ 238.723740][ T6288] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2104'. [ 239.012554][ T1000] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 239.164090][ T1000] usb 6-1: not running at top speed; connect to a high speed hub [ 239.172671][ T1000] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 239.184963][ T1000] usb 6-1: language id specifier not provided by device, defaulting to English [ 239.197472][ T1000] usb 6-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 239.207204][ T1000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.215433][ T1000] usb 6-1: Product: à ‰ [ 239.219778][ T1000] usb 6-1: Manufacturer: 曯钎펊᮪첈躂敓ᵔ펠î¤ê­§ï •襊횛蟇匜ç”芌䮄䴱èªë”¼ÞŠâ°µî¿Žâµá”ªã¡¥í†žä¤žê£žë‰áªçƒ²íŒ­â³»é¾­ã¢¥â®¿Åºì—œ [ 239.235473][ T1000] usb 6-1: SerialNumber: í••ÍŽáˆâ˜”涺㬃稾䲆횒옓↗ᙉ赠êŒé©æŠ¤ï©…㜽곿钢銛蜡ອ㙻çìž‹ê’뽧縉蜿ê¡á¥–꧙쎤鸾파ﰡ׭äŸ甦꿿á¿è¾¹í†´å©´à»¼èººé¦µäƒÆ´ï‡«ÔŽìµ¦á¬ å‹–㬞溵ìŽë¦ŠÑ¦æ•㥩젧ë­ï‡«ä˜£ï›´á¾à©¥ê•”㳔濼䦵䔽֔苀鹲䉢䇌镒ᘜ濒醙緱築釫㹌ᦔ暔챌ԉã½î¤§åº¹ë·²ë¼©ë¦°êºá¤‘ï­ˆì¯ï¨ºîº˜à©©ê§§ê—€î†’豑釛⮬欿垪 [ 239.487295][ T1000] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 239.493252][ T1000] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 239.506400][ T1000] usb 6-1: USB disconnect, device number 46 [ 240.600725][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.609749][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.623425][ T6342] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2126'. [ 240.636751][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.646241][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.026693][ T6350] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 241.176909][ T6363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6363 comm=syz.2.2135 [ 241.277756][ T6374] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 241.307574][ T6376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=6376 comm=syz.2.2140 [ 241.332858][ T6376] bridge0: port 1(ôÛWgÚq) entered disabled state [ 242.162706][ T813] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 242.186146][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.197413][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.342538][ T813] usb 6-1: Using ep0 maxpacket: 32 [ 242.351199][ T813] usb 6-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice= 0.40 [ 242.363397][ T813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.373516][ T813] usb 6-1: Manufacturer: à ’ [ 242.378242][ T813] usb 6-1: SerialNumber: 5軟鉦㥛밶ã¯é‡½æ† ìµ’嗨䪅é™ç¿€å©‡í†¹ê•︷ä´âª¯æ„¸ä•³ì¬¼à¿˜ëˆ²å¬â»ïº¡ë„›á¹©å¾Œê¡¤ìŠ¸è½­áŸ…íšï‹ªëµªé‘å“뽧錷깬á’Ⓟ쯩⇙쾚碗ãšâ†ìš¹ç¶Œî–ˆã§ŠæŒ­á„†í¯æ¾· [ 242.692055][ T6406] sit0: entered promiscuous mode [ 242.718947][ T6406] netlink: 'syz.6.2153': attribute type 1 has an invalid length. [ 242.729374][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.756023][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.763876][ T6406] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2153'. [ 242.992651][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2159'. [ 243.084724][ T6427] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2161'. [ 243.193202][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.210539][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.507195][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2168'. [ 243.949381][ T6470] netlink: 'syz.6.2180': attribute type 4 has an invalid length. [ 243.999379][ T6470] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2180'. [ 244.162863][ T6478] syzkaller1: entered promiscuous mode [ 244.207858][ T6478] syzkaller1: entered allmulticast mode [ 244.407858][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.469883][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.646680][ T6497] netlink: 'syz.6.2191': attribute type 3 has an invalid length. [ 244.971603][ T813] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 245.020494][ T813] usb 6-1: USB disconnect, device number 47 [ 245.155850][ T6505] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2194'. [ 245.173963][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.222641][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.257883][ T6512] netlink: 'syz.6.2197': attribute type 27 has an invalid length. [ 245.278071][ T6512] sit0: left promiscuous mode [ 245.283066][ T6510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6510 comm=syz.1.2196 [ 245.425435][ T6520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6520 comm=syz.6.2200 [ 245.966116][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.092085][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.194396][ T6554] netlink: 'syz.1.2215': attribute type 27 has an invalid length. [ 246.412228][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.572681][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.612608][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.621204][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.763724][ T6573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6573 comm=syz.2.2220 [ 247.596505][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.678042][ T6608] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2235'. [ 247.724782][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.801599][ T6614] overlayfs: overlapping lowerdir path [ 247.891893][ T6621] syzkaller1: entered promiscuous mode [ 247.909656][ T6621] syzkaller1: entered allmulticast mode [ 248.042413][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.076341][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.357196][ T36] audit: type=1326 audit(248.338:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.5.2247" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe44099e0d9 code=0x0 [ 248.437023][ T6638] syz.5.2247 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 248.448031][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.5.2247 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 248.448055][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.448067][ T6638] Call Trace: [ 248.448074][ T6638] [ 248.448081][ T6638] __dump_stack+0x21/0x30 [ 248.448112][ T6638] dump_stack_lvl+0x140/0x1c0 [ 248.448137][ T6638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 248.448161][ T6638] ? ___ratelimit+0x41c/0x5c0 [ 248.448184][ T6638] ? __kasan_check_write+0x18/0x20 [ 248.448202][ T6638] dump_stack+0x19/0x20 [ 248.448225][ T6638] dump_header+0xd9/0x460 [ 248.448248][ T6638] oom_kill_process+0x35d/0x640 [ 248.448269][ T6638] out_of_memory+0x5d1/0xa20 [ 248.448288][ T6638] ? __cfi_out_of_memory+0x10/0x10 [ 248.448307][ T6638] ? mutex_lock_killable+0x97/0x1d0 [ 248.448332][ T6638] ? __cfi_mutex_lock_killable+0x10/0x10 [ 248.448359][ T6638] mem_cgroup_out_of_memory+0x2c5/0x390 [ 248.448378][ T6638] ? css_next_descendant_pre+0x1ec/0x210 [ 248.448400][ T6638] ? __kasan_check_write+0x18/0x20 [ 248.448416][ T6638] ? drain_obj_stock+0xec0/0xec0 [ 248.448435][ T6638] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 248.448453][ T6638] try_charge_memcg+0x925/0xe10 [ 248.448476][ T6638] ? static_key_count+0x45/0x70 [ 248.448499][ T6638] ? lruvec_init+0x1f1/0x280 [ 248.448517][ T6638] ? __cfi_try_charge_memcg+0x10/0x10 [ 248.448542][ T6638] ? __alloc_pages_noprof+0x35a/0x7e0 [ 248.448567][ T6638] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 248.448593][ T6638] __mem_cgroup_charge+0xfc/0x420 [ 248.448609][ T6638] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 248.448625][ T6638] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 248.448647][ T6638] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 248.448670][ T6638] ? shmem_replace_folio+0x9b0/0x9b0 [ 248.448691][ T6638] ? __kasan_check_read+0x15/0x20 [ 248.448715][ T6638] ? shmem_huge_global_enabled+0x1a5/0x360 [ 248.448735][ T6638] ? shmem_allowable_huge_orders+0x255/0x430 [ 248.448756][ T6638] shmem_get_folio_gfp+0x5cd/0x12e0 [ 248.448776][ T6638] ? shmem_get_folio+0xc0/0xc0 [ 248.448796][ T6638] ? pte_alloc_one+0x1ed/0x530 [ 248.448814][ T6638] ? __cfi_filemap_map_pages+0x10/0x10 [ 248.448838][ T6638] shmem_fault+0x17d/0x350 [ 248.448859][ T6638] do_pte_missing+0x364c/0x4440 [ 248.448884][ T6638] ? pte_marker_clear+0x1b0/0x1b0 [ 248.448906][ T6638] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 248.448929][ T6638] ? call_rcu+0x14/0x20 [ 248.448948][ T6638] ? percpu_counter_add_batch+0x61/0x1a0 [ 248.448968][ T6638] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 248.448992][ T6638] ? inode_to_bdi+0x6d/0x100 [ 248.449018][ T6638] handle_mm_fault+0x1189/0x1ba0 [ 248.449041][ T6638] ? __cfi_handle_mm_fault+0x10/0x10 [ 248.449062][ T6638] ? __cfi_find_vma+0x10/0x10 [ 248.449079][ T6638] ? vma_is_secretmem+0x11/0x50 [ 248.449103][ T6638] ? check_vma_flags+0x337/0x3a0 [ 248.449127][ T6638] __get_user_pages+0x114b/0x22d0 [ 248.449154][ T6638] ? populate_vma_page_range+0x220/0x220 [ 248.449176][ T6638] ? down_read+0x7f/0xe0 [ 248.449200][ T6638] ? __cfi_down_read+0x10/0x10 [ 248.449226][ T6638] __mm_populate+0x300/0x440 [ 248.449249][ T6638] vm_mmap_pgoff+0x426/0x4b0 [ 248.449265][ T6638] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 248.449281][ T6638] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 248.449299][ T6638] ? xfd_validate_state+0x68/0x140 [ 248.449323][ T6638] ksys_mmap_pgoff+0xfa/0x1e0 [ 248.449340][ T6638] ? __kasan_check_write+0x18/0x20 [ 248.449356][ T6638] __x64_sys_mmap+0x121/0x140 [ 248.449372][ T6638] x64_sys_call+0x13bf/0x2ee0 [ 248.449388][ T6638] do_syscall_64+0x57/0xf0 [ 248.449407][ T6638] ? clear_bhb_loop+0x50/0xa0 [ 248.449431][ T6638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 248.449454][ T6638] RIP: 0033:0x7fe44099e0d9 [ 248.449468][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.449483][ T6638] RSP: 002b:00007fe4417c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 248.449501][ T6638] RAX: ffffffffffffffda RBX: 00007fe440c26090 RCX: 00007fe44099e0d9 [ 248.449515][ T6638] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 248.449526][ T6638] RBP: 00007fe440a35024 R08: ffffffffffffffff R09: 0000000000000000 [ 248.449538][ T6638] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 248.449549][ T6638] R13: 00007fe440c26128 R14: 00007fe440c26090 R15: 00007ffeec9abfa8 [ 248.449564][ T6638] [ 248.449603][ T6638] memory: usage 0kB, limit 0kB, failcnt 19 [ 249.010495][ T6640] netlink: 'syz.2.2248': attribute type 27 has an invalid length. [ 249.023164][ T6640] bridge0: port 1(ôÛWgÚq) entered blocking state [ 249.030080][ T6640] bridge0: port 1(ôÛWgÚq) entered forwarding state [ 249.118885][ T6638] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 249.126791][ T6638] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 249.135134][ T6638] Memory cgroup stats for /syz5/test: [ 249.135235][ T6638] cache 0 [ 249.144894][ T6638] rss 0 [ 249.147705][ T6638] rss_huge 0 [ 249.151345][ T6638] shmem 0 [ 249.186730][ T6650] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 249.223658][ T6638] mapped_file 0 [ 249.245453][ T6638] dirty 0 [ 249.248415][ T6638] writeback 0 [ 249.259875][ T6638] workingset_refault_anon 0 [ 249.277196][ T6638] workingset_refault_file 0 [ 249.287275][ T6638] swap 0 [ 249.292301][ T6638] swapcached 0 [ 249.303718][ T6638] pgpgin 0 [ 249.310342][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.318953][ T6638] pgpgout 0 [ 249.322091][ T6638] pgfault 0 [ 249.325334][ T6638] pgmajfault 0 [ 249.328984][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.337910][ T6638] inactive_anon 0 [ 249.341755][ T6638] active_anon 0 [ 249.346644][ T6638] inactive_file 0 [ 249.350887][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.359788][ T6638] active_file 0 [ 249.363439][ T6638] unevictable 0 [ 249.367610][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.375670][ T6638] hierarchical_memory_limit 0 [ 249.385684][ T6638] hierarchical_memsw_limit 9223372036854771712 [ 249.402987][ T6638] total_cache 0 [ 249.409841][ T6638] total_rss 0 [ 249.415687][ T6638] total_rss_huge 0 [ 249.419677][ T6638] total_shmem 0 [ 249.423690][ T6638] total_mapped_file 0 [ 249.427698][ T6638] total_dirty 0 [ 249.431377][ T6638] total_writeback 0 [ 249.449260][ T6638] total_workingset_refault_anon 0 [ 249.461495][ T6638] total_workingset_refault_file 0 [ 249.478567][ T6638] total_swap 0 [ 249.500284][ T6638] total_swapcached 0 [ 249.511233][ T6638] total_pgpgin 0 [ 249.528908][ T6638] total_pgpgout 0 [ 249.542964][ T6638] total_pgfault 0 [ 249.552686][ T6638] total_pgmajfault 0 [ 249.556635][ T6638] total_inactive_anon 0 [ 249.560931][ T6638] total_active_anon 0 [ 249.573375][ T6638] total_inactive_file 0 [ 249.586631][ T6638] total_active_file 0 [ 249.592760][ T6638] total_unevictable 0 [ 249.600338][ T6638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.2247,pid=6636,uid=0 [ 249.635526][ T6638] Memory cgroup out of memory: Killed process 6636 (syz.5.2247) total-vm:94236kB, anon-rss:1368kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 249.709459][ T6676] overlayfs: failed to clone lowerpath [ 249.998201][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.019032][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.160295][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.177227][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.194207][ T6691] virtio-fs: tag not found [ 250.240958][ T6695] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 250.354822][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.366278][ T6705] netlink: 'syz.6.2274': attribute type 4 has an invalid length. [ 250.385311][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.419576][ T6705] netlink: 3581 bytes leftover after parsing attributes in process `syz.6.2274'. [ 250.578228][ T6720] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 250.849055][ T813] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 251.010202][ T813] usb 6-1: Using ep0 maxpacket: 8 [ 251.045640][ T813] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 251.080830][ T813] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 251.115273][ T813] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 251.149884][ T813] usb 6-1: config 250 has no interface number 0 [ 251.180215][ T813] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 251.230631][ T813] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 251.276473][ T813] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.319235][ T813] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 251.364255][ T813] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 251.431079][ T813] usb 6-1: config 250 interface 228 has no altsetting 0 [ 251.462413][ T813] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 251.500714][ T813] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 251.534911][ T813] usb 6-1: Product: syz [ 251.555511][ T813] usb 6-1: SerialNumber: syz [ 251.573422][ T36] audit: type=1400 audit(251.536:503): avc: denied { associate } for pid=6761 comm="syz.6.2296" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 251.619680][ T813] hub 6-1:250.228: bad descriptor, ignoring hub [ 251.641060][ T813] hub 6-1:250.228: probe with driver hub failed with error -5 [ 251.824336][ T813] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 252.022610][ T6770] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 252.138977][ T813] usb 6-1: USB disconnect, device number 48 [ 252.146176][ T813] usblp0: removed [ 252.297763][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 252.757545][ T6791] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2306'. [ 253.079936][ T6798] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 253.165067][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.221995][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.501686][ T6818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6818 comm=syz.2.2317 [ 253.645702][ T6825] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 253.706907][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.742822][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.908901][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.950312][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.351507][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.380851][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.518114][ T6851] FAULT_INJECTION: forcing a failure. [ 254.518114][ T6851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.559689][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.1.2330 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 254.559714][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.559725][ T6851] Call Trace: [ 254.559731][ T6851] [ 254.559737][ T6851] __dump_stack+0x21/0x30 [ 254.559772][ T6851] dump_stack_lvl+0x140/0x1c0 [ 254.559794][ T6851] ? __cfi_dump_stack_lvl+0x10/0x10 [ 254.559818][ T6851] ? unwind_get_return_address+0x51/0x90 [ 254.559840][ T6851] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 254.559861][ T6851] dump_stack+0x19/0x20 [ 254.559883][ T6851] should_fail_ex+0x3c2/0x510 [ 254.559902][ T6851] should_fail+0xf/0x20 [ 254.559919][ T6851] should_fail_usercopy+0x1e/0x30 [ 254.559938][ T6851] _copy_from_user+0x20/0xa0 [ 254.559960][ T6851] ___sys_recvmsg+0x174/0x590 [ 254.559979][ T6851] ? __sys_recvmsg+0x2a0/0x2a0 [ 254.559997][ T6851] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 254.560016][ T6851] ? selinux_file_permission+0x318/0xb60 [ 254.560035][ T6851] do_recvmmsg+0x36d/0x7f0 [ 254.560054][ T6851] ? __sys_recvmmsg+0x2a0/0x2a0 [ 254.560071][ T6851] ? __cfi_vfs_write+0x10/0x10 [ 254.560090][ T6851] ? fput+0x1a4/0x230 [ 254.560111][ T6851] __x64_sys_recvmmsg+0x199/0x250 [ 254.560129][ T6851] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 254.560147][ T6851] ? __kasan_check_read+0x15/0x20 [ 254.560164][ T6851] x64_sys_call+0x292c/0x2ee0 [ 254.560179][ T6851] do_syscall_64+0x57/0xf0 [ 254.560197][ T6851] ? clear_bhb_loop+0x50/0xa0 [ 254.560220][ T6851] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 254.560241][ T6851] RIP: 0033:0x7f4e84f9e0d9 [ 254.560254][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.560268][ T6851] RSP: 002b:00007f4e839f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 254.560286][ T6851] RAX: ffffffffffffffda RBX: 00007f4e85225fa0 RCX: 00007f4e84f9e0d9 [ 254.560299][ T6851] RDX: 0000000000000007 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 254.560310][ T6851] RBP: 00007f4e839f7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.560320][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.560330][ T6851] R13: 00007f4e85226038 R14: 00007f4e85225fa0 R15: 00007ffd26c799e8 [ 254.560345][ T6851] [ 254.810686][ T6854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6854 comm=syz.6.2331 [ 255.473481][ T36] audit: type=1326 audit(255.407:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.2.2339" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f728399e0d9 code=0x0 [ 255.720012][ T6886] FAULT_INJECTION: forcing a failure. [ 255.720012][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 255.803302][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.5.2343 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 255.803332][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.803343][ T6886] Call Trace: [ 255.803349][ T6886] [ 255.803356][ T6886] __dump_stack+0x21/0x30 [ 255.803383][ T6886] dump_stack_lvl+0x140/0x1c0 [ 255.803406][ T6886] ? __cfi_dump_stack_lvl+0x10/0x10 [ 255.803430][ T6886] dump_stack+0x19/0x20 [ 255.803451][ T6886] should_fail_ex+0x3c2/0x510 [ 255.803470][ T6886] ? iovec_from_user+0x94/0x310 [ 255.803493][ T6886] should_failslab+0xac/0x100 [ 255.803514][ T6886] __kmalloc_noprof+0x69/0x510 [ 255.803531][ T6886] ? is_bpf_text_address+0x17b/0x1a0 [ 255.803556][ T6886] ? iovec_from_user+0x94/0x310 [ 255.803580][ T6886] iovec_from_user+0x94/0x310 [ 255.803602][ T6886] ? unwind_get_return_address+0x51/0x90 [ 255.803624][ T6886] __import_iovec+0x154/0x7d0 [ 255.803654][ T6886] import_iovec+0x80/0xb0 [ 255.803678][ T6886] ___sys_recvmsg+0x4bb/0x590 [ 255.803696][ T6886] ? __sys_recvmsg+0x2a0/0x2a0 [ 255.803713][ T6886] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 255.803731][ T6886] ? selinux_file_permission+0x318/0xb60 [ 255.803751][ T6886] do_recvmmsg+0x36d/0x7f0 [ 255.803769][ T6886] ? __sys_recvmmsg+0x2a0/0x2a0 [ 255.803789][ T6886] ? __cfi_vfs_write+0x10/0x10 [ 255.803808][ T6886] ? fput+0x1a4/0x230 [ 255.803829][ T6886] __x64_sys_recvmmsg+0x199/0x250 [ 255.803847][ T6886] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 255.803865][ T6886] ? __kasan_check_read+0x15/0x20 [ 255.803882][ T6886] x64_sys_call+0x292c/0x2ee0 [ 255.803896][ T6886] do_syscall_64+0x57/0xf0 [ 255.803920][ T6886] ? clear_bhb_loop+0x50/0xa0 [ 255.803942][ T6886] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 255.803964][ T6886] RIP: 0033:0x7fe44099e0d9 [ 255.803977][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.803992][ T6886] RSP: 002b:00007fe4417e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 255.804010][ T6886] RAX: ffffffffffffffda RBX: 00007fe440c25fa0 RCX: 00007fe44099e0d9 [ 255.804023][ T6886] RDX: 0000000000000007 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 255.804035][ T6886] RBP: 00007fe4417e6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.804045][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.804055][ T6886] R13: 00007fe440c26038 R14: 00007fe440c25fa0 R15: 00007ffeec9abfa8 [ 255.804070][ T6886] [ 256.496452][ T6889] netlink: 'syz.5.2344': attribute type 27 has an invalid length. [ 256.507851][ T6889] sit0: left promiscuous mode [ 256.611460][ T36] audit: type=1400 audit(256.539:505): avc: denied { unlink } for pid=6881 comm="syz.1.2341" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 256.675491][ T36] audit: type=1400 audit(256.569:506): avc: denied { relabelfrom } for pid=6881 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 256.696791][ T36] audit: type=1400 audit(256.569:507): avc: denied { relabelto } for pid=6881 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 256.736552][ T36] audit: type=1400 audit(256.599:508): avc: denied { ioctl } for pid=6897 comm="syz.5.2347" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 257.342021][ T6911] FAULT_INJECTION: forcing a failure. [ 257.342021][ T6911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.356697][ T6911] CPU: 0 UID: 0 PID: 6911 Comm: syz.5.2353 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 257.356725][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.356737][ T6911] Call Trace: [ 257.356743][ T6911] [ 257.356751][ T6911] __dump_stack+0x21/0x30 [ 257.356782][ T6911] dump_stack_lvl+0x140/0x1c0 [ 257.356811][ T6911] ? __cfi_dump_stack_lvl+0x10/0x10 [ 257.356838][ T6911] dump_stack+0x19/0x20 [ 257.356862][ T6911] should_fail_ex+0x3c2/0x510 [ 257.356883][ T6911] should_fail+0xf/0x20 [ 257.356901][ T6911] should_fail_usercopy+0x1e/0x30 [ 257.356923][ T6911] _copy_to_iter+0x3b6/0x1520 [ 257.356947][ T6911] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 257.356970][ T6911] ? __cfi__copy_to_iter+0x10/0x10 [ 257.356993][ T6911] ? __check_object_size+0x54c/0x870 [ 257.357013][ T6911] ? __cfi___check_object_size+0x10/0x10 [ 257.357031][ T6911] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 257.357070][ T6911] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 257.357100][ T6911] __skb_datagram_iter+0x103/0x940 [ 257.357117][ T6911] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 257.357135][ T6911] skb_copy_datagram_iter+0x44/0x160 [ 257.357152][ T6911] netlink_recvmsg+0x2d4/0xe60 [ 257.357172][ T6911] ? __cfi_netlink_recvmsg+0x10/0x10 [ 257.357194][ T6911] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 257.357215][ T6911] ? security_socket_recvmsg+0x44/0x130 [ 257.357240][ T6911] ? __cfi_netlink_recvmsg+0x10/0x10 [ 257.357259][ T6911] sock_recvmsg+0x185/0x1e0 [ 257.357283][ T6911] ____sys_recvmsg+0x1e7/0x4a0 [ 257.357303][ T6911] ? __sys_recvmsg_sock+0x60/0x60 [ 257.357324][ T6911] ? import_iovec+0x80/0xb0 [ 257.357350][ T6911] ___sys_recvmsg+0x214/0x590 [ 257.357370][ T6911] ? __sys_recvmsg+0x2a0/0x2a0 [ 257.357389][ T6911] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 257.357409][ T6911] ? selinux_file_permission+0x318/0xb60 [ 257.357431][ T6911] do_recvmmsg+0x36d/0x7f0 [ 257.357451][ T6911] ? __sys_recvmmsg+0x2a0/0x2a0 [ 257.357470][ T6911] ? __cfi_vfs_write+0x10/0x10 [ 257.357491][ T6911] ? fput+0x1a4/0x230 [ 257.357516][ T6911] __x64_sys_recvmmsg+0x199/0x250 [ 257.357536][ T6911] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 257.357556][ T6911] ? __kasan_check_read+0x15/0x20 [ 257.357575][ T6911] x64_sys_call+0x292c/0x2ee0 [ 257.357591][ T6911] do_syscall_64+0x57/0xf0 [ 257.357612][ T6911] ? clear_bhb_loop+0x50/0xa0 [ 257.357637][ T6911] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.357660][ T6911] RIP: 0033:0x7fe44099e0d9 [ 257.357676][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.357692][ T6911] RSP: 002b:00007fe4417e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 257.357711][ T6911] RAX: ffffffffffffffda RBX: 00007fe440c25fa0 RCX: 00007fe44099e0d9 [ 257.357725][ T6911] RDX: 0000000000000007 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 257.357737][ T6911] RBP: 00007fe4417e6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.357749][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.357760][ T6911] R13: 00007fe440c26038 R14: 00007fe440c25fa0 R15: 00007ffeec9abfa8 [ 257.357776][ T6911] [ 257.707021][ T6913] netlink: 'syz.1.2354': attribute type 27 has an invalid length. [ 258.186733][ T6937] netlink: 'syz.5.2364': attribute type 27 has an invalid length. [ 258.221640][ T6939] SELinux: Context : is not valid (left unmapped). [ 258.234099][ T36] audit: type=1400 audit(258.158:509): avc: denied { relabelto } for pid=6938 comm="syz.5.2365" name="cgroup.controllers" dev="cgroup2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 258.259793][ T6939] overlay: Bad value for 'metacopy' [ 258.276243][ T36] audit: type=1400 audit(258.177:510): avc: denied { associate } for pid=6938 comm="syz.5.2365" name="cgroup.controllers" dev="cgroup2" ino=4 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon=":" [ 258.535822][ T6967] netlink: 'syz.5.2374': attribute type 27 has an invalid length. [ 258.680010][ T6978] FAULT_INJECTION: forcing a failure. [ 258.680010][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.695839][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: syz.2.2380 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 258.695865][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.695877][ T6978] Call Trace: [ 258.695882][ T6978] [ 258.695889][ T6978] __dump_stack+0x21/0x30 [ 258.695916][ T6978] dump_stack_lvl+0x140/0x1c0 [ 258.695938][ T6978] ? __cfi_dump_stack_lvl+0x10/0x10 [ 258.695962][ T6978] dump_stack+0x19/0x20 [ 258.695983][ T6978] should_fail_ex+0x3c2/0x510 [ 258.696002][ T6978] should_fail+0xf/0x20 [ 258.696018][ T6978] should_fail_usercopy+0x1e/0x30 [ 258.696039][ T6978] _copy_to_iter+0x56d/0x1520 [ 258.696061][ T6978] ? __cfi__copy_to_iter+0x10/0x10 [ 258.696081][ T6978] ? __check_object_size+0x54c/0x870 [ 258.696099][ T6978] ? __cfi___check_object_size+0x10/0x10 [ 258.696115][ T6978] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 258.696135][ T6978] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 258.696161][ T6978] __skb_datagram_iter+0x103/0x940 [ 258.696176][ T6978] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 258.696197][ T6978] skb_copy_datagram_iter+0x44/0x160 [ 258.696212][ T6978] netlink_recvmsg+0x2d4/0xe60 [ 258.696231][ T6978] ? __cfi_netlink_recvmsg+0x10/0x10 [ 258.696250][ T6978] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 258.696269][ T6978] ? security_socket_recvmsg+0x44/0x130 [ 258.696292][ T6978] ? __cfi_netlink_recvmsg+0x10/0x10 [ 258.696308][ T6978] sock_recvmsg+0x185/0x1e0 [ 258.696331][ T6978] ____sys_recvmsg+0x1e7/0x4a0 [ 258.696350][ T6978] ? __sys_recvmsg_sock+0x60/0x60 [ 258.696369][ T6978] ? import_iovec+0x80/0xb0 [ 258.696392][ T6978] ___sys_recvmsg+0x214/0x590 [ 258.696410][ T6978] ? __sys_recvmsg+0x2a0/0x2a0 [ 258.696428][ T6978] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 258.696453][ T6978] ? selinux_file_permission+0x318/0xb60 [ 258.696473][ T6978] do_recvmmsg+0x36d/0x7f0 [ 258.696491][ T6978] ? __sys_recvmmsg+0x2a0/0x2a0 [ 258.696508][ T6978] ? __cfi_vfs_write+0x10/0x10 [ 258.696526][ T6978] ? fput+0x1a4/0x230 [ 258.696548][ T6978] __x64_sys_recvmmsg+0x199/0x250 [ 258.696565][ T6978] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 258.696583][ T6978] ? __kasan_check_read+0x15/0x20 [ 258.696600][ T6978] x64_sys_call+0x292c/0x2ee0 [ 258.696615][ T6978] do_syscall_64+0x57/0xf0 [ 258.696633][ T6978] ? clear_bhb_loop+0x50/0xa0 [ 258.696656][ T6978] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 258.696677][ T6978] RIP: 0033:0x7f728399e0d9 [ 258.696691][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.696707][ T6978] RSP: 002b:00007f72823e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 258.696725][ T6978] RAX: ffffffffffffffda RBX: 00007f7283c25fa0 RCX: 00007f728399e0d9 [ 258.696738][ T6978] RDX: 0000000000000007 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 258.696749][ T6978] RBP: 00007f72823e3090 R08: 0000000000000000 R09: 0000000000000000 [ 258.696759][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.696769][ T6978] R13: 00007f7283c26038 R14: 00007f7283c25fa0 R15: 00007ffcd2dfc9e8 [ 258.696784][ T6978] [ 259.320415][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.329267][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.521976][ T36] audit: type=1400 audit(259.429:511): avc: denied { write } for pid=7023 comm="syz.6.2391" name="file0" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 259.591558][ T36] audit: type=1400 audit(259.429:512): avc: denied { open } for pid=7023 comm="syz.6.2391" path="/430/file0" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 259.683080][ T1000] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 259.815643][ T593] usb 3-1: USB disconnect, device number 73 [ 259.828606][ T36] audit: type=1400 audit(259.737:513): avc: denied { listen } for pid=7047 comm="syz.6.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.880846][ T1000] usb 6-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 259.946531][ T1000] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 259.975047][ T1000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.007875][ T1000] usb 6-1: Product: syz [ 260.059273][ T1000] usb 6-1: Manufacturer: syz [ 260.064175][ T1000] usb 6-1: SerialNumber: syz [ 260.203019][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.237018][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.295534][ T7067] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.308256][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.342790][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.363431][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.385914][ T7067] bridge_slave_0: entered allmulticast mode [ 260.398245][ T7067] bridge_slave_0: entered promiscuous mode [ 260.416644][ T7077] veth0: entered allmulticast mode [ 260.426660][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.444543][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.462093][ T7067] bridge_slave_1: entered allmulticast mode [ 260.478626][ T7067] bridge_slave_1: entered promiscuous mode [ 260.585113][ T3780] bridge_slave_1: left allmulticast mode [ 260.592774][ T3780] bridge_slave_1: left promiscuous mode [ 260.598494][ T3780] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.626970][ T3780] ôÛWgÚq: left allmulticast mode [ 260.635468][ T3780] ôÛWgÚq: left promiscuous mode [ 260.649609][ T3780] bridge0: port 1(ôÛWgÚq) entered disabled state [ 260.661248][ T3780] tipc: Resetting bearer [ 260.668879][ T7096] 9pnet_fd: Insufficient options for proto=fd [ 260.690504][ T3780] tipc: Disabling bearer [ 260.746029][ T7103] netlink: 'syz.6.2417': attribute type 27 has an invalid length. [ 260.768406][ T3780] tipc: Disabling bearer [ 260.781448][ T3780] tipc: Left network mode [ 260.789873][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.797985][ T7067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.806052][ T7067] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.813371][ T7067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.835164][ T3780] veth1_macvtap: left promiscuous mode [ 260.845217][ T3780] veth0_vlan: left promiscuous mode [ 260.984883][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.037790][ T36] audit: type=1400 audit(260.939:514): avc: denied { create } for pid=7113 comm="syz.6.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 261.074236][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.094359][ T7118] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 261.147299][ T7067] veth0_vlan: entered promiscuous mode [ 261.199940][ T7067] veth1_macvtap: entered promiscuous mode [ 261.242919][ T7129] netlink: 'syz.6.2426': attribute type 27 has an invalid length. [ 261.752164][ T7155] netlink: 'syz.1.2436': attribute type 27 has an invalid length. [ 262.572541][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2449'. [ 262.601559][ T7186] netlink: 'syz.2.2448': attribute type 27 has an invalid length. [ 262.805081][ T7198] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2453'. [ 263.547287][ T36] audit: type=1400 audit(263.422:515): avc: denied { accept } for pid=7195 comm="syz.1.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 263.644696][ T7211] batadv_slave_1: entered allmulticast mode [ 263.674100][ T7211] veth1_to_bond: entered promiscuous mode [ 263.685959][ T36] audit: type=1400 audit(263.561:516): avc: denied { map } for pid=7212 comm="syz.2.2458" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 263.790048][ T7210] veth1_to_bond: left promiscuous mode [ 263.795713][ T7210] batadv_slave_1: left allmulticast mode [ 263.953536][ T7237] netlink: 'syz.6.2468': attribute type 27 has an invalid length. [ 263.974790][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.011164][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.090830][ T7246] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2471'. [ 264.642715][ T7280] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.655934][ T7280] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.695589][ T7283] netlink: 'syz.1.2485': attribute type 27 has an invalid length. [ 264.816014][ T7290] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2488'. [ 265.192285][ T7319] netlink: 'syz.2.2501': attribute type 27 has an invalid length. [ 265.340515][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.385859][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.402266][ T7331] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2506'. [ 265.623098][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.651405][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.816570][ T7358] netlink: 'syz.2.2517': attribute type 27 has an invalid length. [ 266.144820][ T593] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 266.222860][ T7364] incfs: Backing dir is not set, filesystem can't be mounted. [ 266.246001][ T7364] incfs: mount failed -2 [ 266.270940][ T7366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7366 comm=syz.1.2521 [ 266.308311][ T7368] overlayfs: failed to clone upperpath [ 266.321737][ T7368] netlink: 'syz.6.2522': attribute type 1 has an invalid length. [ 266.340341][ T593] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.366229][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.385272][ T593] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.399836][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.425751][ T593] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 266.458268][ T593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.481577][ T593] usb 3-1: Product: syz [ 266.494406][ T593] usb 3-1: Manufacturer: syz [ 266.504499][ T593] usb 3-1: SerialNumber: syz [ 266.518090][ T593] usb 3-1: config 0 descriptor?? [ 266.691774][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.710159][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.733906][ T593] usb 3-1: USB disconnect, device number 74 [ 266.848586][ T7382] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 267.305009][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'. [ 267.681266][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2540'. [ 267.742392][ T7418] netlink: 'syz.6.2543': attribute type 27 has an invalid length. [ 267.888295][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.899182][ T7432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7432 comm=syz.6.2550 [ 267.930096][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.975129][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2553'. [ 268.075807][ T36] audit: type=1400 audit(267.924:517): avc: denied { ioctl } for pid=7439 comm="syz.6.2554" path="socket:[53520]" dev="sockfs" ino=53520 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 268.180267][ T7445] kvm: kvm [7444]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 268.189457][ T7445] kvm: kvm [7444]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 268.651376][ T7465] incfs_lookup_dentry err:-13 [ 268.941209][ T7485] incfs_lookup_dentry err:-13 [ 269.079612][ T7500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7500 comm=syz.1.2577 [ 269.419507][ T9] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 269.432822][ T7517] incfs_lookup_dentry err:-13 [ 269.503714][ T7521] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 269.586167][ T9] usb 3-1: config 0 has no interfaces? [ 269.593041][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 269.611741][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.644577][ T9] usb 3-1: Product: syz [ 269.657793][ T9] usb 3-1: Manufacturer: syz [ 269.675363][ T9] usb 3-1: SerialNumber: syz [ 269.693792][ T9] usb 3-1: config 0 descriptor?? [ 269.891884][ T7533] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2590'. [ 269.955556][ T9] usb 3-1: USB disconnect, device number 75 [ 270.087856][ T7544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7544 comm=syz.5.2594 [ 270.119130][ T7545] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 270.152413][ T7547] netlink: 'syz.5.2596': attribute type 27 has an invalid length. [ 270.374974][ T36] audit: type=1400 audit(270.201:518): avc: denied { setopt } for pid=7561 comm="syz.5.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.263541][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2616'. [ 271.529906][ T5593] raw-gadget.1 gadget.1: failed to queue disconnect event [ 271.586597][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 271.648273][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.665525][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.682082][ T7611] bridge_slave_0: entered allmulticast mode [ 271.693833][ T7611] bridge_slave_0: entered promiscuous mode [ 271.714829][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.724549][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.740916][ T7611] bridge_slave_1: entered allmulticast mode [ 271.758293][ T7611] bridge_slave_1: entered promiscuous mode [ 271.766266][ T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 271.779845][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.810224][ T9] usb 3-1: config 0 has no interface number 0 [ 271.825662][ T893] bridge_slave_1: left allmulticast mode [ 271.839325][ T893] bridge_slave_1: left promiscuous mode [ 271.848964][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 271.863153][ T893] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.879361][ T9] usb 3-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 271.902537][ T9] usb 3-1: Product: syz [ 271.930086][ T9] usb 3-1: SerialNumber: syz [ 271.953637][ T9] usb 3-1: config 0 descriptor?? [ 271.999825][ T9] ftdi_sio 3-1:0.117: FTDI USB Serial Device converter detected [ 272.038776][ T7622] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2624'. [ 272.055261][ T9] usb 3-1: Detected SIO [ 272.079859][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 272.096812][ T893] tipc: Left network mode [ 272.102313][ T893] veth1_macvtap: left promiscuous mode [ 272.141331][ T893] veth0_vlan: left promiscuous mode [ 272.204432][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.213971][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.236979][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.273226][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.298934][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.324119][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.331188][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.338449][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.345838][ T7611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.360118][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.379885][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.399843][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.415064][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.430949][ T7634] netlink: 'syz.6.2629': attribute type 27 has an invalid length. [ 272.440844][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.461611][ T9] usb 3-1: USB disconnect, device number 76 [ 272.470120][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 272.485706][ T9] ftdi_sio 3-1:0.117: device disconnected [ 272.521373][ T890] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.530263][ T890] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.551891][ T890] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.559047][ T890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.583272][ T890] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.590424][ T890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.641264][ T7611] veth0_vlan: entered promiscuous mode [ 272.669428][ T7611] veth1_macvtap: entered promiscuous mode [ 273.329099][ T7666] incfs_lookup_dentry err:-13 [ 273.506140][ T7686] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 273.553411][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2651'. [ 273.696768][ T7702] netlink: 'syz.2.2655': attribute type 27 has an invalid length. [ 273.780554][ T7706] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 273.789228][ T36] audit: type=1400 audit(273.612:519): avc: denied { read } for pid=7703 comm="syz.2.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.868180][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2660'. [ 274.106735][ T7728] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 274.288174][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2673'. [ 274.422139][ T7748] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 274.591180][ T7755] incfs_lookup_dentry err:-13 [ 274.895629][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2683'. [ 275.305629][ T7785] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2692'. [ 275.387100][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2693'. [ 275.526619][ T7792] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 275.535339][ T7793] SELinux: security_context_str_to_sid (=5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 275.849776][ T593] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 276.011613][ T593] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.040955][ T593] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.062181][ T593] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 276.080988][ T593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.109253][ T593] usb 3-1: Product: syz [ 276.119367][ T593] usb 3-1: Manufacturer: syz [ 276.126804][ T593] usb 3-1: SerialNumber: syz [ 276.141672][ T593] usb 3-1: config 0 descriptor?? [ 276.219557][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2702'. [ 276.268324][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.297014][ T36] audit: type=1400 audit(276.109:520): avc: denied { rename } for pid=7811 comm="syz.6.2704" name="file0" dev="tmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.332948][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.423176][ T593] usb 3-1: USB disconnect, device number 77 [ 276.458612][ T7821] netlink: 'syz.6.2708': attribute type 27 has an invalid length. [ 276.737715][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2712'. [ 276.932982][ T7837] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 277.046864][ T36] audit: type=1326 audit(276.855:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.1.2718" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736159e0d9 code=0x0 [ 277.099610][ T36] audit: type=1326 audit(276.904:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.1.2718" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f736153f459 code=0x0 [ 277.415545][ T7867] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 277.481898][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.511551][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.539333][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.560055][ T7878] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2729'. [ 277.572169][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.950914][ T7886] incfs_lookup_dentry err:-13 [ 278.083859][ T36] audit: type=1400 audit(277.879:523): avc: denied { append } for pid=7900 comm="syz.1.2739" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.288869][ T7925] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2749'. [ 278.322214][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.333806][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.745758][ T7934] netlink: 'syz.6.2751': attribute type 27 has an invalid length. [ 279.337663][ T593] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 279.498454][ T593] usb 3-1: Using ep0 maxpacket: 32 [ 279.504865][ T593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.516199][ T593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.527052][ T593] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.536286][ T593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.545632][ T593] usb 3-1: config 0 descriptor?? [ 279.559044][ T593] hub 3-1:0.0: USB hub found [ 279.758430][ T593] hub 3-1:0.0: 1 port detected [ 279.820010][ T1000] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 279.880206][ T7965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7965 comm=syz.5.2764 [ 279.998041][ T593] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 280.008651][ T1000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.031534][ T593] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 280.048747][ T1000] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.066693][ T593] usbhid 3-1:0.0: can't add hid device: -71 [ 280.073652][ T593] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 280.089399][ T1000] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 280.101873][ T7978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2770'. [ 280.113720][ T1000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.126945][ T1000] usb 2-1: Product: syz [ 280.131118][ T1000] usb 2-1: Manufacturer: syz [ 280.141939][ T593] usb 3-1: USB disconnect, device number 78 [ 280.158038][ T1000] usb 2-1: SerialNumber: syz [ 280.172542][ T1000] usb 2-1: config 0 descriptor?? [ 280.188852][ T36] audit: type=1400 audit(279.979:524): avc: denied { bind } for pid=7982 comm="syz.5.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 280.416959][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.439615][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.513807][ T593] usb 2-1: USB disconnect, device number 85 [ 280.662165][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2779'. [ 280.815082][ T8019] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2787'. [ 281.091003][ T8030] incfs_lookup_dentry err:-13 [ 281.118120][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 281.160085][ T593] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 281.186243][ T8038] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 281.237268][ T8041] netlink: 'syz.5.2797': attribute type 27 has an invalid length. [ 281.327385][ T593] usb 3-1: device descriptor read/64, error -71 [ 281.379344][ T8051] kvm: kvm [8049]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 281.398234][ T8051] kvm: kvm [8049]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 281.465115][ T8065] netlink: 'syz.6.2806': attribute type 64 has an invalid length. [ 281.477019][ T8065] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2806'. [ 281.517599][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.527049][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.578644][ T593] usb 3-1: device descriptor read/64, error -71 [ 281.819774][ T593] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 281.950492][ T593] usb 3-1: device descriptor read/64, error -71 [ 282.013047][ T8071] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2809'. [ 282.054081][ T8075] incfs_lookup_dentry err:-13 [ 282.120980][ T8082] incfs_lookup_dentry err:-13 [ 282.143284][ T8084] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 282.191712][ T593] usb 3-1: device descriptor read/64, error -71 [ 282.302246][ T593] usb usb3-port1: attempt power cycle [ 282.402549][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 282.548442][ T8089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8089 comm=syz.6.2817 [ 282.563158][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 282.579395][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.597282][ T9] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.627898][ T9] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 282.639526][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.649071][ T593] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 282.665991][ T9] usb 2-1: Product: syz [ 282.674765][ T9] usb 2-1: Manufacturer: syz [ 282.684562][ T9] usb 2-1: SerialNumber: syz [ 282.690640][ T593] usb 3-1: device descriptor read/8, error -71 [ 282.827305][ T593] usb 3-1: device descriptor read/8, error -71 [ 282.907662][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 282.924935][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 282.938693][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 282.953623][ T3822] udevd[3822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 282.973704][ T9] usb 2-1: USB disconnect, device number 86 [ 283.065662][ T593] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 283.086877][ T593] usb 3-1: device descriptor read/8, error -71 [ 283.217848][ T593] usb 3-1: device descriptor read/8, error -71 [ 283.230235][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.248956][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.275428][ T8104] netlink: 393 bytes leftover after parsing attributes in process `syz.5.2823'. [ 283.327192][ T593] usb usb3-port1: unable to enumerate USB device [ 283.345399][ T8118] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2829'. [ 283.395898][ T8124] overlayfs: failed to clone upperpath [ 283.828573][ T8136] incfs_lookup_dentry err:-13 [ 283.862459][ T8138] FAULT_INJECTION: forcing a failure. [ 283.862459][ T8138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.898121][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.5.2837 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 283.898146][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.898157][ T8138] Call Trace: [ 283.898163][ T8138] [ 283.898169][ T8138] __dump_stack+0x21/0x30 [ 283.898198][ T8138] dump_stack_lvl+0x140/0x1c0 [ 283.898221][ T8138] ? __cfi_dump_stack_lvl+0x10/0x10 [ 283.898244][ T8138] ? _parse_integer+0x2e/0x40 [ 283.898263][ T8138] ? kstrtoull+0x13b/0x1e0 [ 283.898282][ T8138] dump_stack+0x19/0x20 [ 283.898303][ T8138] should_fail_ex+0x3c2/0x510 [ 283.898322][ T8138] should_fail+0xf/0x20 [ 283.898338][ T8138] should_fail_usercopy+0x1e/0x30 [ 283.898357][ T8138] _copy_from_user+0x20/0xa0 [ 283.898379][ T8138] ___sys_sendmsg+0x1c7/0x370 [ 283.898397][ T8138] ? __sys_sendmsg+0x2a0/0x2a0 [ 283.898413][ T8138] ? proc_fail_nth_write+0x184/0x220 [ 283.898437][ T8138] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 283.898464][ T8138] ? __fget_files+0x2bc/0x330 [ 283.898486][ T8138] __x64_sys_sendmsg+0x206/0x2e0 [ 283.898502][ T8138] ? fput+0x1a4/0x230 [ 283.898522][ T8138] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 283.898539][ T8138] ? ksys_write+0x1f3/0x260 [ 283.898557][ T8138] ? __kasan_check_read+0x15/0x20 [ 283.898575][ T8138] x64_sys_call+0x2a4c/0x2ee0 [ 283.898593][ T8138] do_syscall_64+0x57/0xf0 [ 283.898611][ T8138] ? clear_bhb_loop+0x50/0xa0 [ 283.898633][ T8138] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 283.898655][ T8138] RIP: 0033:0x7fe44099e0d9 [ 283.898669][ T8138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.898684][ T8138] RSP: 002b:00007fe4417e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.898702][ T8138] RAX: ffffffffffffffda RBX: 00007fe440c25fa0 RCX: 00007fe44099e0d9 [ 283.898715][ T8138] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 283.898727][ T8138] RBP: 00007fe4417e6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.898738][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.898748][ T8138] R13: 00007fe440c26038 R14: 00007fe440c25fa0 R15: 00007ffeec9abfa8 [ 283.898763][ T8138] [ 284.224967][ T36] audit: type=1400 audit(283.930:525): avc: denied { append } for pid=8141 comm="syz.5.2839" name="event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.263497][ T8154] netlink: 'syz.6.2844': attribute type 27 has an invalid length. [ 284.292047][ T8156] incfs_lookup_dentry err:-13 [ 284.438476][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.459883][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.469784][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.481976][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.681190][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2838'. [ 284.974500][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 285.031877][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.041255][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.051199][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.060724][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.125170][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 285.131635][ T9] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.145168][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.152690][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 285.162077][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.175772][ T9] usb 2-1: config 0 descriptor?? [ 285.203143][ T8185] incfs_lookup_dentry err:-13 [ 285.577644][ T1000] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 285.595002][ T9] hid (null): global environment stack underflow [ 285.608715][ T9] cypress 0003:04B4:07B1.001D: unknown main item tag 0x6 [ 285.616019][ T9] cypress 0003:04B4:07B1.001D: global environment stack underflow [ 285.626920][ T9] cypress 0003:04B4:07B1.001D: item 0 4 1 11 parsing failed [ 285.634899][ T9] cypress 0003:04B4:07B1.001D: parse failed [ 285.641238][ T9] cypress 0003:04B4:07B1.001D: probe with driver cypress failed with error -22 [ 285.662896][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2858'. [ 285.749192][ T1000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.760865][ T8195] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 285.768997][ T1000] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.781359][ T1000] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 285.824640][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.853021][ T1000] usb 3-1: Product: syz [ 285.863581][ T1000] usb 3-1: Manufacturer: syz [ 285.873714][ T1000] usb 3-1: SerialNumber: syz [ 285.891782][ T1000] usb 3-1: config 0 descriptor?? [ 285.912718][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.939106][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.957822][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.975816][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.210723][ T1000] usb 3-1: USB disconnect, device number 83 [ 286.413454][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2862'. [ 286.426751][ T36] audit: type=1400 audit(286.190:526): avc: denied { getopt } for pid=8208 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.462650][ T8211] FAULT_INJECTION: forcing a failure. [ 286.462650][ T8211] name failslab, interval 1, probability 0, space 0, times 0 [ 286.476478][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.1.2863 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 286.476502][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.476512][ T8211] Call Trace: [ 286.476518][ T8211] [ 286.476524][ T8211] __dump_stack+0x21/0x30 [ 286.476553][ T8211] dump_stack_lvl+0x140/0x1c0 [ 286.476576][ T8211] ? __cfi_dump_stack_lvl+0x10/0x10 [ 286.476599][ T8211] ? release_sock+0x171/0x1f0 [ 286.476623][ T8211] dump_stack+0x19/0x20 [ 286.476644][ T8211] should_fail_ex+0x3c2/0x510 [ 286.476663][ T8211] should_failslab+0xac/0x100 [ 286.476684][ T8211] kmem_cache_alloc_node_noprof+0x45/0x420 [ 286.476702][ T8211] ? netlink_data_ready+0x20/0x20 [ 286.476717][ T8211] ? __alloc_skb+0x10c/0x360 [ 286.476740][ T8211] __alloc_skb+0x10c/0x360 [ 286.476762][ T8211] netlink_alloc_large_skb+0xf7/0x1b0 [ 286.476787][ T8211] netlink_sendmsg+0x576/0xad0 [ 286.476804][ T8211] ? __cfi_netlink_sendmsg+0x10/0x10 [ 286.476821][ T8211] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 286.476840][ T8211] ? security_socket_sendmsg+0x3d/0x100 [ 286.476863][ T8211] ____sys_sendmsg+0x9a1/0xa00 [ 286.476880][ T8211] ? __import_iovec+0x5b9/0x7d0 [ 286.476904][ T8211] ? __sys_sendmsg_sock+0x50/0x50 [ 286.476921][ T8211] ? import_iovec+0x80/0xb0 [ 286.476944][ T8211] ___sys_sendmsg+0x2a6/0x370 [ 286.476961][ T8211] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.476978][ T8211] ? proc_fail_nth_write+0x184/0x220 [ 286.477002][ T8211] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 286.477029][ T8211] ? __fget_files+0x2bc/0x330 [ 286.477050][ T8211] __x64_sys_sendmsg+0x206/0x2e0 [ 286.477066][ T8211] ? fput+0x1a4/0x230 [ 286.477087][ T8211] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 286.477104][ T8211] ? ksys_write+0x1f3/0x260 [ 286.477122][ T8211] ? __kasan_check_read+0x15/0x20 [ 286.477139][ T8211] x64_sys_call+0x2a4c/0x2ee0 [ 286.477154][ T8211] do_syscall_64+0x57/0xf0 [ 286.477172][ T8211] ? clear_bhb_loop+0x50/0xa0 [ 286.477195][ T8211] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 286.477216][ T8211] RIP: 0033:0x7f736159e0d9 [ 286.477230][ T8211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.477244][ T8211] RSP: 002b:00007f736242c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.477262][ T8211] RAX: ffffffffffffffda RBX: 00007f7361825fa0 RCX: 00007f736159e0d9 [ 286.477274][ T8211] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 286.477285][ T8211] RBP: 00007f736242c090 R08: 0000000000000000 R09: 0000000000000000 [ 286.477296][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.477306][ T8211] R13: 00007f7361826038 R14: 00007f7361825fa0 R15: 00007fff4b552f28 [ 286.477320][ T8211] [ 286.865330][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.875537][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.069988][ T8223] incfs_lookup_dentry err:-13 [ 287.092784][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2868'. [ 287.154439][ T8234] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2871'. [ 287.311421][ T8242] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 287.351720][ T8245] incfs_lookup_dentry err:-13 [ 287.419494][ T8250] netlink: 'syz.1.2878': attribute type 27 has an invalid length. [ 287.559229][ T8260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2882'. [ 287.940654][ T8293] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2894'. [ 288.018019][ T1000] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 288.044176][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.096700][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.205508][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.214693][ T8308] incfs_lookup_dentry err:-13 [ 288.224710][ T1000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.244127][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.259091][ T1000] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.277427][ T8299] bridge_slave_0: entered allmulticast mode [ 288.286878][ T8310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8310 comm=syz.5.2900 [ 288.309762][ T8299] bridge_slave_0: entered promiscuous mode [ 288.319331][ T1000] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 288.339211][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.365166][ T1000] usb 3-1: Product: syz [ 288.372833][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.390429][ T1000] usb 3-1: Manufacturer: syz [ 288.395160][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.404952][ T1000] usb 3-1: SerialNumber: syz [ 288.409635][ T8299] bridge_slave_1: entered allmulticast mode [ 288.421501][ T1000] usb 3-1: config 0 descriptor?? [ 288.430277][ T8299] bridge_slave_1: entered promiscuous mode [ 288.582143][ T8321] netlink: 'syz.5.2904': attribute type 27 has an invalid length. [ 288.672353][ T8282] rust_binder: 8281:8282 got transaction to invalid handle 1 [ 288.702179][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.709499][ T5054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.737263][ T36] audit: type=1400 audit(288.470:527): avc: denied { mounton } for pid=8323 comm="syz.1.2905" path="/file0" dev="ramfs" ino=60894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 288.767452][ T8327] rust_binder: 8281:8327 got transaction to invalid handle 1 [ 288.776700][ T8282] rust_binder: 8281:8282 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 288.792520][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.799703][ T5054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.814044][ T8327] rust_binder: 8281:8327 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 288.840579][ T928] bridge_slave_1: left allmulticast mode [ 288.849158][ T36] audit: type=1400 audit(288.599:528): avc: denied { cmd } for pid=8323 comm="syz.1.2905" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 288.875157][ T928] bridge_slave_1: left promiscuous mode [ 288.885462][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.902518][ T928] bridge_slave_0: left allmulticast mode [ 288.918645][ T928] bridge_slave_0: left promiscuous mode [ 288.924823][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.010435][ T8299] veth0_vlan: entered promiscuous mode [ 289.037824][ T928] veth1_macvtap: left promiscuous mode [ 289.060643][ T928] veth0_vlan: left promiscuous mode [ 289.113322][ T8337] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 289.207580][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.251210][ T928] veth0 (unregistering): left allmulticast mode [ 289.259466][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.308259][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2908'. [ 289.330077][ T8299] veth1_macvtap: entered promiscuous mode [ 289.649780][ T8351] FAULT_INJECTION: forcing a failure. [ 289.649780][ T8351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.737499][ T8355] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 289.745576][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.5.2912 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 289.745600][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.745611][ T8351] Call Trace: [ 289.745617][ T8351] [ 289.745624][ T8351] __dump_stack+0x21/0x30 [ 289.745651][ T8351] dump_stack_lvl+0x140/0x1c0 [ 289.745673][ T8351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.745698][ T8351] dump_stack+0x19/0x20 [ 289.745719][ T8351] should_fail_ex+0x3c2/0x510 [ 289.745738][ T8351] should_fail+0xf/0x20 [ 289.745754][ T8351] should_fail_usercopy+0x1e/0x30 [ 289.745774][ T8351] _copy_from_iter+0x1a6/0x1520 [ 289.745796][ T8351] ? __virt_addr_valid+0x2a1/0x370 [ 289.745816][ T8351] ? __cfi__copy_from_iter+0x10/0x10 [ 289.745836][ T8351] ? __check_object_size+0x54c/0x870 [ 289.745853][ T8351] ? __cfi___check_object_size+0x10/0x10 [ 289.745871][ T8351] ? skb_put+0x10e/0x200 [ 289.745894][ T8351] netlink_sendmsg+0x66d/0xad0 [ 289.745911][ T8351] ? __cfi_netlink_sendmsg+0x10/0x10 [ 289.745929][ T8351] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 289.745947][ T8351] ? security_socket_sendmsg+0x3d/0x100 [ 289.745970][ T8351] ____sys_sendmsg+0x9a1/0xa00 [ 289.745987][ T8351] ? __import_iovec+0x5b9/0x7d0 [ 289.746009][ T8351] ? __sys_sendmsg_sock+0x50/0x50 [ 289.746027][ T8351] ? import_iovec+0x80/0xb0 [ 289.746049][ T8351] ___sys_sendmsg+0x2a6/0x370 [ 289.746066][ T8351] ? __sys_sendmsg+0x2a0/0x2a0 [ 289.746082][ T8351] ? proc_fail_nth_write+0x184/0x220 [ 289.746106][ T8351] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 289.746133][ T8351] ? __fget_files+0x2bc/0x330 [ 289.746164][ T8351] __x64_sys_sendmsg+0x206/0x2e0 [ 289.746180][ T8351] ? fput+0x1a4/0x230 [ 289.746201][ T8351] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 289.746217][ T8351] ? ksys_write+0x1f3/0x260 [ 289.746235][ T8351] ? __kasan_check_read+0x15/0x20 [ 289.746253][ T8351] x64_sys_call+0x2a4c/0x2ee0 [ 289.746267][ T8351] do_syscall_64+0x57/0xf0 [ 289.746285][ T8351] ? clear_bhb_loop+0x50/0xa0 [ 289.746308][ T8351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.746329][ T8351] RIP: 0033:0x7fe44099e0d9 [ 289.746343][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.746357][ T8351] RSP: 002b:00007fe4417e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.746374][ T8351] RAX: ffffffffffffffda RBX: 00007fe440c25fa0 RCX: 00007fe44099e0d9 [ 289.746387][ T8351] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 289.746398][ T8351] RBP: 00007fe4417e6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.746408][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.746418][ T8351] R13: 00007fe440c26038 R14: 00007fe440c25fa0 R15: 00007ffeec9abfa8 [ 289.746433][ T8351] [ 290.343749][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2918'. [ 290.400565][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.428964][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8373 comm=syz.1.2922 [ 290.458100][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.467642][ T8376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8376 comm=syz.6.2923 [ 290.704533][ T36] audit: type=1400 audit(290.441:529): avc: denied { write } for pid=8396 comm="syz.1.2931" path="socket:[61475]" dev="sockfs" ino=61475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 290.841718][ T814] rust_binder: 8281: undelivered TRANSACTION_ERROR: 29201 [ 290.871971][ T814] rust_binder: 8281: undelivered TRANSACTION_ERROR: 29201 [ 290.901019][ T814] usb 3-1: USB disconnect, device number 84 [ 290.949632][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2939'. [ 290.964682][ T8419] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2940'. [ 290.974798][ T8418] FAULT_INJECTION: forcing a failure. [ 290.974798][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 291.007854][ T8418] CPU: 0 UID: 0 PID: 8418 Comm: syz.1.2939 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 291.007878][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.007890][ T8418] Call Trace: [ 291.007895][ T8418] [ 291.007902][ T8418] __dump_stack+0x21/0x30 [ 291.007928][ T8418] dump_stack_lvl+0x140/0x1c0 [ 291.007951][ T8418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 291.007974][ T8418] ? xfrm_user_rcv_msg+0x5b0/0x900 [ 291.007992][ T8418] dump_stack+0x19/0x20 [ 291.008013][ T8418] should_fail_ex+0x3c2/0x510 [ 291.008032][ T8418] should_failslab+0xac/0x100 [ 291.008059][ T8418] kmem_cache_alloc_node_noprof+0x45/0x420 [ 291.008076][ T8418] ? __alloc_skb+0x10c/0x360 [ 291.008099][ T8418] __alloc_skb+0x10c/0x360 [ 291.008121][ T8418] netlink_ack+0x155/0xa50 [ 291.008136][ T8418] ? avc_has_perm_noaudit+0x289/0x360 [ 291.008156][ T8418] ? avc_has_perm+0x155/0x240 [ 291.008176][ T8418] netlink_rcv_skb+0x2cb/0x4e0 [ 291.008191][ T8418] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 291.008208][ T8418] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 291.008225][ T8418] ? __kasan_check_write+0x18/0x20 [ 291.008241][ T8418] ? mutex_lock+0x97/0x1d0 [ 291.008262][ T8418] ? __cfi_mutex_lock+0x10/0x10 [ 291.008284][ T8418] ? netlink_autobind+0x1c0/0x1c0 [ 291.008302][ T8418] xfrm_netlink_rcv+0x76/0x90 [ 291.008317][ T8418] netlink_unicast+0x8bc/0xa70 [ 291.008343][ T8418] netlink_sendmsg+0x7d1/0xad0 [ 291.008360][ T8418] ? __cfi_netlink_sendmsg+0x10/0x10 [ 291.008377][ T8418] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 291.008396][ T8418] ? security_socket_sendmsg+0x3d/0x100 [ 291.008418][ T8418] ____sys_sendmsg+0x9a1/0xa00 [ 291.008436][ T8418] ? __import_iovec+0x5b9/0x7d0 [ 291.008459][ T8418] ? __sys_sendmsg_sock+0x50/0x50 [ 291.008477][ T8418] ? import_iovec+0x80/0xb0 [ 291.008500][ T8418] ___sys_sendmsg+0x2a6/0x370 [ 291.008516][ T8418] ? __sys_sendmsg+0x2a0/0x2a0 [ 291.008533][ T8418] ? proc_fail_nth_write+0x184/0x220 [ 291.008556][ T8418] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 291.008584][ T8418] ? __fget_files+0x2bc/0x330 [ 291.008605][ T8418] __x64_sys_sendmsg+0x206/0x2e0 [ 291.008622][ T8418] ? fput+0x1a4/0x230 [ 291.008642][ T8418] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 291.008659][ T8418] ? ksys_write+0x1f3/0x260 [ 291.008677][ T8418] ? __kasan_check_read+0x15/0x20 [ 291.008693][ T8418] x64_sys_call+0x2a4c/0x2ee0 [ 291.008708][ T8418] do_syscall_64+0x57/0xf0 [ 291.008726][ T8418] ? clear_bhb_loop+0x50/0xa0 [ 291.008748][ T8418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 291.008770][ T8418] RIP: 0033:0x7f736159e0d9 [ 291.008783][ T8418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.008797][ T8418] RSP: 002b:00007f736242c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.008815][ T8418] RAX: ffffffffffffffda RBX: 00007f7361825fa0 RCX: 00007f736159e0d9 [ 291.008828][ T8418] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 291.008839][ T8418] RBP: 00007f736242c090 R08: 0000000000000000 R09: 0000000000000000 [ 291.008849][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.008860][ T8418] R13: 00007f7361826038 R14: 00007f7361825fa0 R15: 00007fff4b552f28 [ 291.008874][ T8418] [ 291.421220][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2945'. [ 291.460697][ T8438] rust_binder: 8437:8438 no such ref 2 [ 291.466341][ T8438] rust_binder: Write failure EINVAL in pid:1126 [ 291.479873][ T8440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8440 comm=syz.5.2949 [ 291.834126][ T814] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 291.893561][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.913360][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.935037][ T8471] rust_binder: Write failure EFAULT in pid:176 [ 291.974682][ T814] usb 3-1: device descriptor read/64, error -71 [ 292.225755][ T814] usb 3-1: device descriptor read/64, error -71 [ 292.466758][ T814] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 292.503680][ T8485] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 292.607343][ T814] usb 3-1: device descriptor read/64, error -71 [ 292.848386][ T814] usb 3-1: device descriptor read/64, error -71 [ 292.958787][ T814] usb usb3-port1: attempt power cycle [ 293.032806][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.042687][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.310112][ T814] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 293.331378][ T814] usb 3-1: device descriptor read/8, error -71 [ 293.462186][ T814] usb 3-1: device descriptor read/8, error -71 [ 293.672941][ T8499] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 293.701687][ T814] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 293.725632][ T814] usb 3-1: device descriptor read/8, error -71 [ 293.734775][ T36] audit: type=1400 audit(293.469:530): avc: denied { accept } for pid=8501 comm="syz.5.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 293.766017][ T8504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8504 comm=syz.5.2969 [ 293.807834][ T8506] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 293.883326][ T814] usb 3-1: device descriptor read/8, error -71 [ 293.895393][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2972'. [ 293.925579][ T8512] rust_binder: 8511:8512 error while translating object: EINVAL [ 293.943581][ T8512] rust_binder: Failure in copy_transaction_data: EINVAL [ 293.943603][ T8512] rust_binder: 8511:8512 transaction call to 8511:0 failed EINVAL, code 0 size 120-24 [ 293.992877][ T814] usb usb3-port1: unable to enumerate USB device [ 294.009902][ T8512] overlayfs: missing 'workdir' [ 294.428364][ T8524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8524 comm=syz.2.2977 [ 294.675487][ T814] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 294.827737][ T814] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 294.836248][ T814] usb 3-1: can't read configurations, error -22 [ 294.966666][ T814] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 295.119552][ T814] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 295.137219][ T814] usb 3-1: can't read configurations, error -22 [ 295.152518][ T814] usb usb3-port1: attempt power cycle [ 295.161423][ T8535] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 295.254200][ T8543] incfs_lookup_dentry err:-13 [ 295.497958][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2986'. [ 295.511524][ T814] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 295.528719][ T8549] FAULT_INJECTION: forcing a failure. [ 295.528719][ T8549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.559726][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.5.2986 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 295.559751][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.559762][ T8549] Call Trace: [ 295.559768][ T8549] [ 295.559774][ T8549] __dump_stack+0x21/0x30 [ 295.559802][ T8549] dump_stack_lvl+0x140/0x1c0 [ 295.559827][ T8549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 295.559850][ T8549] ? check_stack_object+0x138/0x150 [ 295.559868][ T8549] dump_stack+0x19/0x20 [ 295.559889][ T8549] should_fail_ex+0x3c2/0x510 [ 295.559913][ T8549] should_fail+0xf/0x20 [ 295.559930][ T8549] should_fail_usercopy+0x1e/0x30 [ 295.559949][ T8549] _copy_to_user+0x24/0xa0 [ 295.559971][ T8549] simple_read_from_buffer+0xed/0x160 [ 295.559994][ T8549] proc_fail_nth_read+0x1aa/0x220 [ 295.560018][ T8549] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 295.560042][ T8549] ? bpf_lsm_file_permission+0xd/0x20 [ 295.560065][ T8549] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 295.560087][ T8549] vfs_read+0x288/0xc70 [ 295.560104][ T8549] ? __cfi_vfs_read+0x10/0x10 [ 295.560120][ T8549] ? __kasan_check_write+0x18/0x20 [ 295.560136][ T8549] ? mutex_lock+0x97/0x1d0 [ 295.560158][ T8549] ? __cfi_mutex_lock+0x10/0x10 [ 295.560182][ T8549] ksys_read+0x145/0x260 [ 295.560198][ T8549] ? xfd_validate_state+0x68/0x140 [ 295.560226][ T8549] ? __cfi_ksys_read+0x10/0x10 [ 295.560243][ T8549] ? __kasan_check_write+0x18/0x20 [ 295.560258][ T8549] ? fpregs_restore_userregs+0x11c/0x260 [ 295.560280][ T8549] __x64_sys_read+0x7f/0x90 [ 295.560296][ T8549] x64_sys_call+0x2638/0x2ee0 [ 295.560311][ T8549] do_syscall_64+0x57/0xf0 [ 295.560329][ T8549] ? clear_bhb_loop+0x50/0xa0 [ 295.560351][ T8549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 295.560373][ T8549] RIP: 0033:0x7fe44095e90e [ 295.560387][ T8549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.560401][ T8549] RSP: 002b:00007fe4417e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.560419][ T8549] RAX: ffffffffffffffda RBX: 00007fe4417e66c0 RCX: 00007fe44095e90e [ 295.560433][ T8549] RDX: 000000000000000f RSI: 00007fe4417e60a0 RDI: 0000000000000004 [ 295.560444][ T8549] RBP: 00007fe4417e6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.560454][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.560465][ T8549] R13: 00007fe440c26038 R14: 00007fe440c25fa0 R15: 00007ffeec9abfa8 [ 295.560479][ T8549] [ 295.561117][ T814] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 295.936698][ T8551] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2987'. [ 296.007103][ T8553] /dev/loop0: Can't lookup blockdev [ 296.085514][ T8556] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 296.162842][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.182597][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.193926][ T8562] netlink: 'syz.6.2992': attribute type 27 has an invalid length. [ 296.277831][ T814] usb 3-1: can't read configurations, error -22 [ 296.318643][ T8570] incfs_lookup_dentry err:-13 [ 296.422513][ T814] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 296.444497][ T814] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 296.452702][ T814] usb 3-1: can't read configurations, error -22 [ 296.470564][ T814] usb usb3-port1: unable to enumerate USB device [ 296.511233][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.520829][ T8584] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 296.530546][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.605226][ T8593] incfs_lookup_dentry err:-13 [ 296.631984][ T8595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8595 comm=syz.6.3007 [ 296.759901][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3009'. [ 296.774449][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.794431][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.817689][ T8602] fuse: Bad value for 'fd' [ 296.827184][ T8602] UDC core: g1: couldn't find an available UDC or it's busy [ 296.880301][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.902952][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.073586][ T8605] tap0: tun_chr_ioctl cmd 1074025675 [ 297.091839][ T8605] tap0: persist enabled [ 297.099337][ T8605] tap0: tun_chr_ioctl cmd 1079531642 [ 297.116014][ T8605] tap0: tun_chr_ioctl cmd 1074025675 [ 297.134930][ T8605] tap0: persist enabled [ 297.142981][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.175184][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.483207][ T8616] netlink: 'syz.6.3015': attribute type 27 has an invalid length. [ 297.519839][ T8619] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3016'. [ 297.534014][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.571749][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.634550][ T8629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8629 comm=syz.6.3021 [ 297.718263][ T8635] incfs_lookup_dentry err:-13 [ 297.743808][ T8633] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 297.788664][ T8642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8642 comm=syz.1.3026 [ 297.811427][ T8644] netlink: 'syz.2.3027': attribute type 46 has an invalid length. [ 297.826155][ T8644] netlink: 'syz.2.3027': attribute type 28 has an invalid length. [ 297.845246][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.859362][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.233079][ T8660] incfs_lookup_dentry err:-13 [ 298.271936][ T8665] FAULT_INJECTION: forcing a failure. [ 298.271936][ T8665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.287803][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.297981][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.306131][ T8665] CPU: 0 UID: 0 PID: 8665 Comm: syz.2.3035 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 298.306154][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.306165][ T8665] Call Trace: [ 298.306171][ T8665] [ 298.306178][ T8665] __dump_stack+0x21/0x30 [ 298.306206][ T8665] dump_stack_lvl+0x140/0x1c0 [ 298.306229][ T8665] ? __cfi_dump_stack_lvl+0x10/0x10 [ 298.306254][ T8665] dump_stack+0x19/0x20 [ 298.306276][ T8665] should_fail_ex+0x3c2/0x510 [ 298.306295][ T8665] should_fail+0xf/0x20 [ 298.306312][ T8665] should_fail_usercopy+0x1e/0x30 [ 298.306332][ T8665] _copy_from_user+0x20/0xa0 [ 298.306354][ T8665] pending_reads_dispatch_ioctl+0x2d2/0x2080 [ 298.306381][ T8665] ? proc_fail_nth_write+0x184/0x220 [ 298.306405][ T8665] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 298.306429][ T8665] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 298.306455][ T8665] ? selinux_file_ioctl+0x732/0x1480 [ 298.306471][ T8665] ? vfs_write+0xbcf/0xfd0 [ 298.306488][ T8665] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 298.306517][ T8665] ? __cfi_vfs_write+0x10/0x10 [ 298.306534][ T8665] ? __kasan_check_write+0x18/0x20 [ 298.306551][ T8665] ? mutex_unlock+0x90/0x240 [ 298.306574][ T8665] ? __cfi_mutex_unlock+0x10/0x10 [ 298.306599][ T8665] ? bpf_lsm_file_ioctl+0xd/0x20 [ 298.306620][ T8665] ? security_file_ioctl+0x3e/0x110 [ 298.306646][ T8665] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 298.306670][ T8665] __se_sys_ioctl+0x135/0x1b0 [ 298.306691][ T8665] __x64_sys_ioctl+0x7f/0xa0 [ 298.306711][ T8665] x64_sys_call+0x1878/0x2ee0 [ 298.306725][ T8665] do_syscall_64+0x57/0xf0 [ 298.306743][ T8665] ? clear_bhb_loop+0x50/0xa0 [ 298.306766][ T8665] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 298.306788][ T8665] RIP: 0033:0x7f13df19e0d9 [ 298.306801][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.306816][ T8665] RSP: 002b:00007f13dfffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.306834][ T8665] RAX: ffffffffffffffda RBX: 00007f13df425fa0 RCX: 00007f13df19e0d9 [ 298.306847][ T8665] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 298.306858][ T8665] RBP: 00007f13dfffb090 R08: 0000000000000000 R09: 0000000000000000 [ 298.306869][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.306884][ T8665] R13: 00007f13df426038 R14: 00007f13df425fa0 R15: 00007ffcbd818bc8 [ 298.306899][ T8665] [ 298.596782][ T8670] netlink: 'syz.1.3037': attribute type 27 has an invalid length. [ 298.665868][ T8676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.674383][ T8676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.891497][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 299.043258][ T9] usb 3-1: config 0 has no interfaces? [ 299.050190][ T9] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 299.059983][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.068309][ T9] usb 3-1: Product: syz [ 299.072716][ T9] usb 3-1: Manufacturer: syz [ 299.077317][ T9] usb 3-1: SerialNumber: syz [ 299.085936][ T9] usb 3-1: config 0 descriptor?? [ 299.296156][ T8668] futex_wake_op: syz.2.3038 tries to shift op by 144; fix this program [ 299.337426][ T8668] rust_binder: 8667:8668 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 70) [ 299.368812][ T9] rust_binder: 8688: undelivered freeze notification, 0000000000000000 [ 299.384811][ T8668] rust_binder: 8667:8668 error while translating object: EINVAL [ 299.432525][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.442468][ T8668] rust_binder: Failure in copy_transaction_data: EINVAL [ 299.442490][ T8668] rust_binder: 8667:8668 transaction call to 8667:0 failed EINVAL, code 0 size 88-24 [ 299.460333][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.471976][ T8692] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 299.552243][ T814] rust_binder: 8667: undelivered TRANSACTION_ERROR: 29201 [ 299.569824][ T814] usb 3-1: USB disconnect, device number 93 [ 299.588370][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.597819][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.608225][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.619211][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.031017][ T8705] netlink: 'syz.1.3053': attribute type 27 has an invalid length. [ 300.110138][ T8709] bpf: Bad value for 'gid' [ 300.119561][ T8711] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3056'. [ 300.142006][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3055'. [ 300.151504][ T36] audit: type=1400 audit(299.845:531): avc: denied { read } for pid=8708 comm="syz.2.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.392626][ T8730] /dev/rnullb0: Can't open blockdev [ 300.424393][ T8732] incfs_lookup_dentry err:-13 [ 300.467164][ T814] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 300.527536][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3069'. [ 300.554883][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3070'. [ 300.604686][ T36] audit: type=1400 audit(300.303:532): avc: denied { accept } for pid=8745 comm="syz.5.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.632395][ T814] usb 3-1: device descriptor read/64, error -71 [ 300.662544][ T8748] netlink: 'syz.5.3073': attribute type 27 has an invalid length. [ 300.736000][ T8752] tmpfs: Unknown parameter 'ap' [ 300.748672][ T8752] tmpfs: Unknown parameter 'ap' [ 300.875933][ T8765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.885585][ T814] usb 3-1: device descriptor read/64, error -71 [ 300.913067][ T8765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.988051][ T8772] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8772 comm=syz.6.3084 [ 301.034920][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3086'. [ 301.078871][ T8780] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 301.139551][ T814] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 301.247775][ T8782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3089'. [ 301.412146][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.431275][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.440711][ T814] usb 3-1: device descriptor read/64, error -71 [ 301.481540][ T8802] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3095'. [ 301.691513][ T814] usb 3-1: device descriptor read/64, error -71 [ 301.802759][ T814] usb usb3-port1: attempt power cycle [ 301.938630][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.957205][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.157119][ T814] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 302.178901][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.192108][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.201500][ T814] usb 3-1: device descriptor read/8, error -71 [ 302.334791][ T814] usb 3-1: device descriptor read/8, error -71 [ 302.574715][ T814] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 302.595760][ T814] usb 3-1: device descriptor read/8, error -71 [ 302.742600][ T814] usb 3-1: device descriptor read/8, error -71 [ 302.771484][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.780716][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.793254][ T8820] tc_dump_action: action bad kind [ 302.855797][ T814] usb usb3-port1: unable to enumerate USB device [ 303.327753][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.360206][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.688374][ T814] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 303.848901][ T814] usb 3-1: Using ep0 maxpacket: 32 [ 303.861644][ T814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.883231][ T814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.918293][ T814] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.935013][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3113'. [ 303.953117][ T814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.989901][ T814] usb 3-1: config 0 descriptor?? [ 304.008055][ T814] hub 3-1:0.0: USB hub found [ 304.140047][ T8857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3116'. [ 304.191443][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3118'. [ 304.212456][ T814] hub 3-1:0.0: 1 port detected [ 304.362563][ T8867] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3121'. [ 304.445576][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.458934][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.509748][ T8881] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 304.817286][ T814] hub 3-1:0.0: activate --> -90 [ 305.130890][ T8890] syzkaller1: entered promiscuous mode [ 305.142958][ T8890] syzkaller1: entered allmulticast mode [ 305.212308][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.249346][ T1000] usb 3-1: USB disconnect, device number 98 [ 305.255551][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.388324][ T8915] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3139'. [ 305.516811][ T8921] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3141'. [ 305.538001][ T8921] gretap0: entered promiscuous mode [ 305.551442][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=8921 comm=syz.5.3141 [ 305.579031][ T8921] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3141'. [ 305.598980][ T8921] 0ªî{X¹¦: renamed from gretap0 [ 305.612338][ T8921] 0ªî{X¹¦: left promiscuous mode [ 305.626258][ T8921] 0ªî{X¹¦: entered allmulticast mode [ 305.638647][ T8921] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 305.730635][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3143'. [ 305.782434][ T8929] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64528 sclass=netlink_xfrm_socket pid=8929 comm=syz.5.3144 [ 305.951018][ T8936] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3147'. [ 306.038523][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.050878][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.092445][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.102097][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.117729][ T8945] input: syz0 as /devices/virtual/input/input35 [ 306.827994][ T8967] can0: slcan on ttynull. [ 306.861005][ T8966] can0 (unregistered): slcan off ttynull. [ 306.952061][ T8980] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3164'. [ 306.987328][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.019514][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.210031][ T1000] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 307.401612][ T1000] usb 3-1: config 220 has an invalid descriptor of length 84, skipping remainder of the config [ 307.416410][ T1000] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 307.435915][ T1000] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 12336, setting to 64 [ 307.460817][ T1000] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 307.490180][ T1000] usb 3-1: config 220 interface 0 has no altsetting 0 [ 307.505341][ T1000] usb 3-1: config 220 interface 1 has no altsetting 0 [ 307.522171][ T1000] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 307.534644][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.571168][ T1000] usb 3-1: Product: syz [ 307.575699][ T1000] usb 3-1: Manufacturer: syz [ 307.602044][ T1000] usb 3-1: SerialNumber: syz [ 307.824106][ T1000] usb 3-1: selecting invalid altsetting 0 [ 307.833187][ T1000] usb 3-1: USB disconnect, device number 99 [ 308.348844][ T36] audit: type=1400 audit(308.027:533): avc: denied { read } for pid=9008 comm="syz.2.3166" dev="sockfs" ino=68228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.383617][ T9009] netlink: 'syz.2.3166': attribute type 16 has an invalid length. [ 308.493039][ T9014] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 308.784999][ T814] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 308.950338][ T814] usb 3-1: Using ep0 maxpacket: 8 [ 308.972318][ T814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.012811][ T814] usb 3-1: New USB device found, idVendor=1430, idProduct=2b4b, bcdDevice= 0.40 [ 309.035131][ T814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.058811][ T814] usb 3-1: Product: syz [ 309.066728][ T9020] __nla_validate_parse: 1 callbacks suppressed [ 309.066741][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3171'. [ 309.088976][ T814] usb 3-1: Manufacturer: syz [ 309.093949][ T814] usb 3-1: SerialNumber: syz [ 309.153557][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.179893][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.230438][ T9028] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3174'. [ 309.319234][ T814] usb 3-1: MIDIStreaming interface descriptor not found [ 309.349894][ T814] usb 3-1: USB disconnect, device number 100 [ 309.427565][ T9044] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 309.521139][ T9050] kvm: user requested TSC rate below hardware speed [ 309.585679][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.595589][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.724852][ T9070] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 309.815846][ T9079] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 309.851145][ T36] audit: type=1326 audit(309.522:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.3193" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736159e0d9 code=0x0 [ 309.890741][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.918688][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.930990][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3197'. [ 309.946622][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.963379][ T9090] overlayfs: failed to resolve './work': -2 [ 309.994547][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.010591][ T9087] overlayfs: disabling nfs_export due to verity=require [ 310.025202][ T9087] overlayfs: missing 'lowerdir' [ 310.110752][ T9101] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 310.326585][ T9109] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3202'. [ 310.632775][ T9128] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 310.917071][ T9145] overlayfs: missing 'lowerdir' [ 311.077115][ T9154] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3220'. [ 311.142163][ T9156] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 311.152729][ T9158] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 311.162173][ T9156] overlayfs: missing 'lowerdir' [ 311.240344][ T9162] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3224'. [ 311.608886][ T9167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=9167 comm=syz.5.3226 [ 311.745634][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.772651][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.787845][ T9179] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 311.853649][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.863614][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.317812][ T9186] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 312.355392][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3236'. [ 312.541640][ T9202] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 312.646796][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.682137][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.691376][ T9217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 312.718638][ T9213] input: syz1 as /devices/virtual/input/input36 [ 312.813841][ T9224] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 312.824794][ T9227] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3251'. [ 312.875073][ T36] audit: type=1326 audit(312.533:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.1.3253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736159e0d9 code=0x0 [ 312.987942][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.998133][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.013749][ T36] audit: type=1400 audit(312.673:536): avc: denied { module_load } for pid=9231 comm="syz.1.3253" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 313.037724][ T9237] kernel read not supported for file /policy (pid: 9237 comm: syz.1.3253) [ 313.434697][ T9252] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 313.467927][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3261'. [ 313.526575][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.536108][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.129111][ T9261] ------------[ cut here ]------------ [ 314.135909][ T9261] WARNING: CPU: 0 PID: 9261 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 314.145618][ T9261] Modules linked in: [ 314.149519][ T9261] CPU: 0 UID: 0 PID: 9261 Comm: syz.5.3264 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 314.161419][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.172496][ T9261] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 314.179632][ T9261] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d4 d8 0b 06 00 0f 85 c2 00 00 00 c6 05 c7 d8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 314.203741][ T9261] RSP: 0018:ffffc90002fbf980 EFLAGS: 00010246 [ 314.209909][ T9261] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 314.219476][ T9261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002fbfa38 [ 314.227738][ T9261] RBP: ffffc90002fbfaa8 R08: ffffc90002fbfa37 R09: 0000000000000000 [ 314.235749][ T9261] R10: ffffc90002fbfa20 R11: fffff520005f7f47 R12: ffffc90002fbf9c0 [ 314.243936][ T9261] R13: dffffc0000000000 R14: 1ffff920005f7f34 R15: 0000000000000000 [ 314.252136][ T9261] FS: 00007fe4417e66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 314.261189][ T9261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.267882][ T9261] CR2: 00007fe4417e4558 CR3: 0000000155472000 CR4: 00000000003526b0 [ 314.275969][ T9261] Call Trace: [ 314.279263][ T9261] [ 314.282569][ T9261] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 314.288922][ T9261] ? schedule+0xc5/0x240 [ 314.293895][ T9261] ? futex_unqueue+0x136/0x160 [ 314.298690][ T9261] ? zlib_inflate_table+0x830/0x1830 [ 314.304012][ T9261] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 314.310191][ T9261] ___kmalloc_large_node+0x81/0x220 [ 314.315449][ T9261] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 314.321641][ T9261] ? zlib_inflate_table+0x830/0x1830 [ 314.326955][ T9261] __kmalloc_large_node_noprof+0x1e/0xd0 [ 314.333426][ T9261] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 314.339612][ T9261] ? zlib_inflate_table+0x830/0x1830 [ 314.345015][ T9261] __kmalloc_noprof+0x326/0x510 [ 314.349881][ T9261] ? zlib_inflate_table+0x830/0x1830 [ 314.355554][ T9261] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 314.361919][ T9261] ? futex_wait+0x2b8/0x7c0 [ 314.366892][ T9261] ? __cfi_futex_wait+0x10/0x10 [ 314.372252][ T9261] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 314.379148][ T9261] ? selinux_file_ioctl+0x732/0x1480 [ 314.384576][ T9261] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 314.390142][ T9261] ? do_futex+0x32a/0x510 [ 314.394572][ T9261] ? __cfi_do_futex+0x10/0x10 [ 314.400281][ T9261] ? bpf_lsm_file_ioctl+0xd/0x20 [ 314.405530][ T9261] ? security_file_ioctl+0x3e/0x110 [ 314.410765][ T9261] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 314.418053][ T9261] __se_sys_ioctl+0x135/0x1b0 [ 314.422760][ T9261] __x64_sys_ioctl+0x7f/0xa0 [ 314.427797][ T9261] x64_sys_call+0x1878/0x2ee0 [ 314.432500][ T9261] do_syscall_64+0x57/0xf0 [ 314.436947][ T9261] ? clear_bhb_loop+0x50/0xa0 [ 314.441662][ T9261] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 314.447620][ T9261] RIP: 0033:0x7fe44099e0d9 [ 314.452065][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.472747][ T9261] RSP: 002b:00007fe4417e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.481179][ T9261] RAX: ffffffffffffffda RBX: 00007fe440c25fa0 RCX: 00007fe44099e0d9 [ 314.489344][ T9261] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 314.497345][ T9261] RBP: 00007fe440a35024 R08: 0000000000000000 R09: 0000000000000000 [ 314.505339][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.513544][ T9261] R13: 00007fe440c26038 R14: 00007fe440c25fa0 R15: 00007ffeec9abfa8 [ 314.521552][ T9261] [ 314.524595][ T9261] ---[ end trace 0000000000000000 ]---