last executing test programs: 1m36.189036222s ago: executing program 0 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x21) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2a, 0x800, 0x1000, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m36.076652146s ago: executing program 0 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)={@void, @val={0x2, 0x0, 0x1e, 0x3, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x4, 0x61, 0x64, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e21, 0x4e23, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x41362f52b360784d}, "cc8eb0946e5e0eb90c30c40c5c76b6d6dcf991cda5867feb5aa63ba5a05f66125bc831fd5452ed61bd3774ac48998c57d940ecaa66bffc18b412c01c05"}}}}, 0x6b) (fail_nth: 2) 1m35.711553514s ago: executing program 0 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xbffe) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x90, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, 0x0) getgroups(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x601, 0x0) (async) statx(0xffffffffffffffff, 0x0, 0x400, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x2}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m35.432796703s ago: executing program 0 (id=61): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x30, 0x3b, 0x1, 0x2000000e, 0x8, 0x200, 0x5, 0x129, 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\"', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private=0xa010101, @rand_addr=0x64010101, r3}, 0xc) 1m35.372482965s ago: executing program 0 (id=62): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv2(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0xd3}], 0x1, 0x0, 0x6b, 0x1) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000), 0xa) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x8, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x147f) tkill(r5, 0x12) socket(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5381}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0xfffc, 0x8003}, 0x20) fcntl$setlease(r6, 0x400, 0x1) fcntl$getflags(r6, 0x401) ptrace(0x4208, r5) tkill(r5, 0x12) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000000c0)=0xfd, 0x4) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="02001e00030014000600451100610064000000119078ac1e0001ac1414aa4e214e23004d907802064d7800000000cc8eb0946e5e0eb90c30c40c5c76b6d6dcf92eeeb008000000000000005f66125bc831fd5452ed61bd3774ac48998c57d940acaa66bffc0fb412c01c05"], 0x6b) 1m35.340912032s ago: executing program 0 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x21) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2a, 0x800, 0x1000, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m20.328196682s ago: executing program 32 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x21) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2a, 0x800, 0x1000, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m9.760656961s ago: executing program 4 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)={@void, @val={0x2, 0x0, 0x1e, 0x3, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x4, 0x61, 0x64, 0x4500, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e21, 0x4e23, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x41362f52b360784d}, "cc8eb0946e5e0eb90c30c40c5c76b6d6dcf991cda5867feb5aa63ba5a05f66125bc831fd5452ed61bd3774ac48998c57d940ecaa66bffc18b412c01c05"}}}}, 0x6b) 1m9.636402168s ago: executing program 4 (id=258): r0 = socket$pppl2tp(0x18, 0x1, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r0, 0x0, r1, &(0x7f00000023c0)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x306, @local}, 0x2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 'caif0\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) write(r2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close(r3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020201030c00000000070000fcdbdf25020009001000000053bb00000000000003000600000000000200100000000000000000000000000002000100000000000000050d00000000030005000000000002000000ac14140000000000000000009c01f01bc11ff953c08a46b731748501bc24fdb484879ec2a1814fe6962956972a65c09cd82a5ce6138d63ffbc9cb7c28498cab8eca983a697840ee54fc49f6bf76742b6a219ad0cba29fc86b139a681af53170e997419e4e9cd56081b591bc0306272129d87fa2f588ad3"], 0x60}, 0x1, 0x7}, 0x8812) 1m9.600448365s ago: executing program 4 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x4211, r2) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x10, @dev={0xfe, 0x80, '\x00', 0x33}, 0x867b}, {0xa, 0x4e21, 0x9, @local, 0x9}, 0x0, {[0xd7e, 0x2, 0x8b, 0x200, 0x7fff, 0x7a, 0xa0, 0x7]}}, 0x5c) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}}, 0xc000) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e80fff3c00e", 0x24}], 0x1}, 0x0) 1m9.581955589s ago: executing program 4 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6b, 0x0, 0xffff, 0x20, 0x3, 0x7, 0xd2c, 0x100, 0x8000000000000, 0x80000004000080, 0x4, 0x8, 0x0, 0x4, 0x1, 0x3], 0x72ffc, 0x3b4390}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x98) write$P9_RREADLINK(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x122c022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=7']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/firmware/acpi/interrupts/gpe00\x00', 0x0, 0x182) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8942, &(0x7f0000000040)={'gretap0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000380), 0x8) fcntl$dupfd(r5, 0x0, r6) read(r4, &(0x7f0000000140)=""/100, 0x64) 1m9.461589565s ago: executing program 4 (id=266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x8, 0x2}}, {0x3c2, 0x2, 0x0, 0x0, @sint={0x3}}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.232485713s ago: executing program 4 (id=269): r0 = socket(0x2c, 0x800, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x8, 0x8, 0xd, {{0x15, 0x4, 0x2, 0x8, 0x54, 0x66, 0x0, 0xd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x2}, @rr={0x7, 0x1b, 0x37, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0x7b, 0x0, 0x3, [0xf0c5, 0x2]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x6, [0x2, 0x9, 0x6]}, @noop]}}}}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x488d, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r4, &(0x7f00000004c0)='q', 0x5e0, 0x881, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x87, 0x6, @broadcast}, 0x14) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000180)={0x0, 0x1, 0x9}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x800, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3f, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 1m9.216941647s ago: executing program 33 (id=269): r0 = socket(0x2c, 0x800, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x8, 0x8, 0xd, {{0x15, 0x4, 0x2, 0x8, 0x54, 0x66, 0x0, 0xd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x2}, @rr={0x7, 0x1b, 0x37, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0x7b, 0x0, 0x3, [0xf0c5, 0x2]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x6, [0x2, 0x9, 0x6]}, @noop]}}}}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x488d, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r4, &(0x7f00000004c0)='q', 0x5e0, 0x881, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x87, 0x6, @broadcast}, 0x14) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000180)={0x0, 0x1, 0x9}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x800, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3f, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 1m8.751814855s ago: executing program 5 (id=270): syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1m5.688430684s ago: executing program 5 (id=294): syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0x4018aee3, &(0x7f0000000440)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0xff80, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1m5.687615044s ago: executing program 5 (id=295): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x2b, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff}}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='auxv\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x400842, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="50000000100001040100000000000000000000000000000000000000000000000c0003006d61637365633000080005007a0000001c0012800b0001006d616373656200000887028005000f0002000000", 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002300), r6) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/rnullb0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x2) fallocate(r3, 0x0, 0x0, 0x8ffff) ioctl$BLKRRPART(r2, 0x125f, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x2b, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff}}}}}]}}]}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async) fchdir(r1) (async) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000080)='auxv\x00') (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x400842, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write(r5, &(0x7f0000000000)="50000000100001040100000000000000000000000000000000000000000000000c0003006d61637365633000080005007a0000001c0012800b0001006d616373656200000887028005000f0002000000", 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002300), r6) (async) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/rnullb0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async) fallocate(r3, 0x0, 0x0, 0x8ffff) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) 1m4.14909989s ago: executing program 5 (id=302): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000340)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0/file0/file0'}}, {@volatile}, {@verity_require}, {@verity_on}, {@volatile}]}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m4.032451445s ago: executing program 5 (id=303): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./dev/sda1\x00', 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)) timer_create(0x5, &(0x7f0000000200)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000640)="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", &(0x7f0000000500)="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"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x4, 0x1, 0xffff, 0x1, 0x5b}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@rdmsr={0x66, 0x18, {0x4000009b}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getitimer(0x1000000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0xffffffff, 0x0, 0x3) 1m4.011339069s ago: executing program 5 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mount$9p_virtio(&(0x7f0000000080), 0x0, 0x0, 0x1010000, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0xffffffff, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r2, r8, &(0x7f00000000c0)={0x0, 0x738d, 0x4, 0x3, 0xa7}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfc53, 0x10, 0x3, 0x3c8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd8ab, 0x1000, 0x0, 0x3a9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c21, 0x8, 0x1, 0x34d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20, 0x2, 0x10c, 0x0, r2}}], 0x4, &(0x7f0000001880)={0x2e, 0x14, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x0, 0x25b, 0x0, &(0x7f0000000880)=@buf_4k="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"}}, &(0x7f0000001900)) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x7, 0x0, 0x7000000, 0x7, 0x9}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m3.931670306s ago: executing program 34 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mount$9p_virtio(&(0x7f0000000080), 0x0, 0x0, 0x1010000, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0xffffffff, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r2, r8, &(0x7f00000000c0)={0x0, 0x738d, 0x4, 0x3, 0xa7}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfc53, 0x10, 0x3, 0x3c8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd8ab, 0x1000, 0x0, 0x3a9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c21, 0x8, 0x1, 0x34d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20, 0x2, 0x10c, 0x0, r2}}], 0x4, &(0x7f0000001880)={0x2e, 0x14, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x0, 0x25b, 0x0, &(0x7f0000000880)=@buf_4k="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"}}, &(0x7f0000001900)) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x7, 0x0, 0x7000000, 0x7, 0x9}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 31.078690416s ago: executing program 6 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f00000005c0)='0fc5:1227:?pl', 0xd) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000100)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e22, 0x7ff, @mcast1}}}, 0x32) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) timer_create(0x0, 0x0, &(0x7f0000000300)) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0x97068100, 0x0, 0x41, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r11) wait4(0x0, 0x0, 0x20000000, 0x0) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) pwritev(r8, 0x0, 0x0, 0x0, 0x9) 30.569130124s ago: executing program 6 (id=759): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 30.556159977s ago: executing program 6 (id=760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd20400103afffe800000b0d6120381202ee2e80000004600b80b11a0bd99000000000000bbff02"], 0x4a) 30.456344088s ago: executing program 6 (id=761): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e79", 0xa}], 0x1}}], 0x1, 0x4000000) (async, rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x20000008, 0xa2600) (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x98) write$P9_RREADLINK(r3, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x122c022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=7']) (async) r4 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x80002019}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3, @none}, 0xe) (async) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) 30.453577848s ago: executing program 6 (id=762): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x2) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x19, &(0x7f00000001c0)="a2", 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) write$binfmt_script(r2, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200007, 0x801, 0x4, 0x7}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000380), 0x2000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000940)=[@release={0x40106308, 0x1}], 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000300)={0x0, 0xba2b, 0x8000, 0x2, 0x1f7, 0x0, r5}, &(0x7f0000000bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x333e, 0x4000, 0x1, 0x36a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x870c, 0x1000, 0x2, 0x4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa912, 0x80000, 0x0, 0x298, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5986, 0x40, 0x2, 0x229, 0x0, r0}}], 0x4, &(0x7f0000001e40)={0x2e, 0x40, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x1, 0xd91, 0x0, &(0x7f0000000e40)=@buf_max_buf="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"}}, &(0x7f0000001ec0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xee65, 0x0, 0x3, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x20000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0) r10 = syz_ublk_setup_io_uring(0x7fe3, &(0x7f0000000480)={0x0, 0x4f83, 0x40000, 0x0, 0x308}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) syz_ublk_setup_queues(r6, r7, &(0x7f0000001f00)={0x0, 0x7d5b, 0x2000, 0x3, 0x152, 0x0, r10}, &(0x7f0000001f80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed8f, 0x800, 0x1, 0x26d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf268, 0x4, 0x0, 0x61, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x777a, 0x4, 0x1, 0x330, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbeee, 0x400, 0x2, 0x2dc, 0x0, r2}}], 0x4, &(0x7f0000003200)={0x2e, 0x3b, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x2, 0x85d, 0x0, &(0x7f0000002200)=@buf_max_buf="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"}}, &(0x7f0000003280)) 30.303403571s ago: executing program 6 (id=763): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000001200)=""/4109, &(0x7f0000000000)=0x100d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x800, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/16, 0x10}, {0x0}], 0x2, 0x2a0800, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xdf7, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r7, 0x1, 0x0, 0x2000}) dup3(r3, r2, 0x80000) ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f0000000280)={0x3, 0x80000001, 0x10001, 0x8}) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) 30.250947202s ago: executing program 35 (id=763): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000001200)=""/4109, &(0x7f0000000000)=0x100d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x800, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/16, 0x10}, {0x0}], 0x2, 0x2a0800, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xdf7, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r7, 0x1, 0x0, 0x2000}) dup3(r3, r2, 0x80000) ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f0000000280)={0x3, 0x80000001, 0x10001, 0x8}) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) 26.162536008s ago: executing program 7 (id=832): pipe2$9p(0x0, 0x80) (async, rerun: 32) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000300)=0xffffffffffffffff, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x5, 0x31237648, 0x6, 0x2, 0x80}]}) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000001c0)={0x0, 0x0}) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000019, 0x7fff, 0x4, 0x7fffffff, 0x6, 0x2, 0x7f}]}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r12, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@rdmsr={0x66, 0x18, {0x40000102}}], 0x18}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 32) r13 = dup(r6) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x56, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x12, 0x0, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r13, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x8f6}) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) 24.26148529s ago: executing program 7 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd20400103afffe800000b0d6120381202ee2e80000004600b80b11a0bd99000000000000bbff02"], 0x4a) 24.21798329s ago: executing program 7 (id=856): r0 = gettid() sched_setaffinity(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000001340)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2}}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000140)="6a426843897cd1fbf26345411893a16041f0308d5f12c469974c2f77abb34bd9778532945c", 0x25}, {&(0x7f00000001c0)="a32cc3bb3e2096881504eee1f4a469223c477aaca7acbe86b18a7622ca4529cd92f87ffdcee791eb63444b777f9852fb7823d36e9c9d15c34c65645c38f66cc467c349572f52c3f7d2929e0ea308f1e1460fc19f81679e5892cacf78452260aaf0c2feedb99919414556f8", 0x6b}, {&(0x7f0000000240)="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", 0x1000}], 0x3, &(0x7f0000001280)="4d7f3949731a8efb498e9c5c36f95f44e2655fa1a8972d7059436f01d6f19a985f071f262943a1515489b87a9131d5e273383259608d15347a0d1a40cb29121b01e547428cdf537fb0d83ab649dcfbc42e6678db3f1e23bee4721f2f13d234051cf12e5b47485cab450bdde1f5e92edcc51a5d2d998aefd5c30b5b21aefee9ac6352cf", 0x83, 0x40}, 0x8040) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r7, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f00000000c0)=0xa1, 0x4) setns(r4, 0x24020000) remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff, 0x100) r8 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) setns(0xffffffffffffffff, 0x24020000) r9 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x8e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 24.158175932s ago: executing program 7 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '#/'}}, {@fowner_lt={'fowner<', r0}}, {@audit}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x4, 0xe4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x18c) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x10e}, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) statfs(&(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)=""/24) r3 = userfaultfd(0x800) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000700)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000, 0x3}) openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000002400)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3dc}, 0x1, 0x0, 0x0, 0x3}, 0x800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) setresgid(0xee00, 0x0, 0x0) r5 = getpgrp(0xffffffffffffffff) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4083, 0xff3}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001400010000000000000000000218000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="e0"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8810) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) 24.149830975s ago: executing program 7 (id=859): r0 = socket(0x1e, 0x6, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000140)='.\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r5, r1, 0x0, 0x7ffff000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket(0x1e, 0x6, 0x8) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000140)='.\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) (async) fallocate(r1, 0x0, 0x0, 0x1000f4) (async) sendfile(r5, r1, 0x0, 0x7ffff000) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) 24.014527463s ago: executing program 7 (id=861): syz_usb_connect(0x5, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="12011003c40b6220f905ffff5b64010203010902240001fe81303209040301"], &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000003e981598a5fee1e6d870b50510864c286d5dfad31af0391766312e9f4186d21598d918ab1908d64c1b1a56ac2fac44", @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf253200000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 23.993761748s ago: executing program 36 (id=861): syz_usb_connect(0x5, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="12011003c40b6220f905ffff5b64010203010902240001fe81303209040301"], &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000003e981598a5fee1e6d870b50510864c286d5dfad31af0391766312e9f4186d21598d918ab1908d64c1b1a56ac2fac44", @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf253200000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.946656543s ago: executing program 2 (id=940): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x41}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x222003, 0x9a) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./dev/kmsg\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.944176794s ago: executing program 8 (id=862): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff", 0x58) 8.300971802s ago: executing program 2 (id=942): landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_io_uring_setup(0x41f4, &(0x7f0000000140)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3, 0x0, r5}, &(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_ublk_add_dev(0xffffffffffffffff, r7, r0, 0x0, &(0x7f0000000200)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000003c0)={0x0, 0xd67f, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e8f, 0x200, 0x2, 0x90, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6283, 0x80, 0x1, 0x23aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x20, 0x3, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe359, 0x8000, 0x2, 0xbd92}}], 0x1, 0x0, 0x0) 8.191751865s ago: executing program 8 (id=862): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff", 0x58) 6.426222919s ago: executing program 2 (id=946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x110b40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000640)=[@rdmsr={0x66, 0x18, {0x400000b5}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) syz_usb_connect(0x3, 0x38c, &(0x7f0000003480)=ANY=[@ANYBLOB="120100028bfd6840d219700b3cb80102030109027a0302072bd0020904b10708e00103"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.226299962s ago: executing program 8 (id=862): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff", 0x58) 4.366842486s ago: executing program 3 (id=955): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0xffff, 0x200, 0x0, 0x2, 0x0, 0x20, 0x3c}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x1, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x3, 0xfb, 0x0, 0x510d3f49}, {{@in=@private=0xa010102, 0x4d6, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x0, 0x0, 0x0, 0x100, 0x7, 0xfffffffc}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0xfffffffc, 0x1, 0x3, 0xcc, 0x0, 0x2cd6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 4.316451366s ago: executing program 3 (id=956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x5, 0x3, 0x2, 0x4, 0x1, 0xe779}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x5, 0x3, 0x2, 0x4, 0x1, 0xe779}, 0x20) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x11) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x0, 0x70bd29, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004051}, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x100, 0x873a, 0x0, 0x9, 0x18, "6b3948a1c83afb2f"}) 4.312995597s ago: executing program 3 (id=957): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4009000}, 0x20044810) (async) splice(r0, 0x0, r1, 0x0, 0x8000000000000001, 0x9) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) 4.311318597s ago: executing program 8 (id=862): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff", 0x58) 2.36359208s ago: executing program 2 (id=959): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 2.36316646s ago: executing program 3 (id=960): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f0000000040)='-:]@\x00', 0x101000, &(0x7f0000000080)={@_ha_fsid={[0xffffffff, 0x8000]}, {0x9, 0x0, 0x10006, 0x5}}, 0x228, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x1}, 0x3, &(0x7f0000000480)=[{0x2, 0x2a, &(0x7f0000000680)='\xc9\x0e\x1c\x9aU0\xda\x9c\xad\xa1\xa7{\xb5\xb8\xd0\xc6\xc6\xd3\x84\x1clu\xb6\x9at<8\xd1O\xf5\x12\\\x91\x02?K\xbe3\xc18\fwI\xbe\xb2\f\xf5\x16YN\xf9\xbb#(\xd3\x84\x04\xb19', &(0x7f0000000a00)="771ef3b7d68312010114118b1b007fa248187a27f5330f314cc23a634fd93f7d0af9dd4a80e849f19c326f788464e5b1ae18fcf67abdf513a363113d0aaa9104bd275c0a1a60c8118135f06378d308769223702256299e7f28a8b348739aceb5cc5b", 0x62, 0x20}, {0x3, 0xffff7fff, &(0x7f0000000440)='\x00', &(0x7f0000000300)="d3e89c3ea30986840c3895d875ce622b0a9ad71d08f6de1fc1ceab695f96463c7588e40bab31ab86a70617328a09e3d791afbf814163df23ef5d6cadf7552ad1edd030e4b461ca57a3bfb85ba7a77a59e0924b7db4bead87975a0315d950f86e25db5e4d78acbcdb77828e53c1ea3c21d9edfce28cbbf1565764aa06dffefdcad7717a16c1fd3ca053abf3464d01d366b398841d859cab03f47b85c550c25a6e22f4282af46bd678536e5b7ef5df933f39182070e5cd834893d47829a630322482ae3f403ed8331cb1f5aafc46fabab1c105199960df30a74b6d9276d13d0061ddefd4fce2d7afc8e26af5df7a3688237c1512015cb4", 0xf6, 0xa}, {0x0, 0x5, &(0x7f0000000400)='\x00', &(0x7f00000006c0)="2eec288d8d0400000000000000334392ad51a000d018dfb6ee876708fa3554bd9c4b000000000000b67f5860a4b6bc3f737b0d948e480bdf5e46582dacbd27a050aac8b3c4f20071d0df5d260756391e7bf407733b51b79629861bf3fca785d112c914130f46cfa97ed5fe84198fa2c87d231e98af9b765a4e84cf8e660d43181b0e9f4c952adf326fe5294e82daae2966dc1ad8a20fadce240f8b7477d3180da5ad51cf9c355263eea85dfeccc7c85c6fe7c52d1bc3e3420a76d595b500f66ca8ddc4a1b2518e1356c7bb2d60db433ef9a26573feff37b99aaa6b7fec2f", 0xde, 0xa}]}) flistxattr(r0, &(0x7f0000000580)=""/182, 0xb6) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x8d05, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000007c0)={0x5, 0x0, [{0xac48c008e700c38a, 0x0, 0xed0}, {0x400000b4, 0x0, 0xfff}, {0xbcf, 0x0, 0x40}, {0x97f, 0x0, 0x10000}, {0xc0010063, 0x0, 0x62ed}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000180)="17000000020001000003d68c5ee17688a20026080303000000000000000300000a0000000098fc5ad9485bbb6a880000d6c8db00009bc7eb0d370000000000000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0b5", 0xb9) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000280)={0x20001}, 0x8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000980)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x60, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x0, 0x0, 0x34}, @flat=@handle={0x73682a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/123, 0x7b, 0x0, 0x2d}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}], 0x51, 0x0, &(0x7f00000004c0)="dab8992bb1f388e06c0ebef7c5c335d20c0d916a3e4582a719715ee076dc3999c5e8ac4493b2331f9ad393422f6f4d8f08e1f962301854df59d7c7d6acaa12b200209c2fedf9919ea2ba2b8847013f61d5"}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r10 = socket(0xa, 0x3, 0x3a) r11 = socket$netlink(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x19, 0x0, 0x0}) fsetxattr$security_selinux(r11, 0x0, 0x0, 0x0, 0x3) shutdown(r6, 0x1) syz_io_uring_setup(0x100484c, &(0x7f0000000140)={0x0, 0xd341, 0x40000, 0x3, 0x31e}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240)) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x100, 0x0) 2.330174827s ago: executing program 1 (id=961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1300}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) r4 = socket$inet_udp(0x2, 0x2, 0x0) read(r4, &(0x7f00000001c0)=""/55, 0xffffffffffffff3f) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x3, 0xfd, "b902dc", 0x5e, 0x2}) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2.300774593s ago: executing program 2 (id=962): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='%^/{*-\x00', 0x410243, &(0x7f0000000040)={@align=0x2, {0x10, 0x6af, 0x3a1c, 0x3}}, 0x798, &(0x7f0000000080), &(0x7f00000000c0)=0x80000000}) getpeername$tipc(r0, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x10000, 0x4, 0x0, 0x0, @msi={0x10001, 0x800000, 0x4, 0x5}}, {0x5, 0x1, 0x1, 0x0, @irqchip={0xf, 0x5}}]}) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000240)={0x0, r0, r0, 0x4924, 0x10, '\x00', {0x5, 0x8, 0xb, 0x5, 0x0, 0x2, 0x1, 0x8, {0x4, 0x8000}, {0x9, 0x800}, {0x6}, 0xfff, 0xffff611b, 0x5, 0x0, 0x2, 0x1, 0x9, 0x0, 0x1, 0x8a, '\x00', 0xd, 0x9d, 0x6, 0x534f}}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000300)={0x5, 0x3}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x8, 0x10, 0x9, 0x25ed, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x66, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @ssrr={0x89, 0x7, 0x51, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x27, 0x2, [{0x0, 0x6, "4a4e1921"}, {0x6, 0x5, "30b8a3"}, {0x1, 0xd, "5d6793b32f19478a1ad733"}, {0x6, 0x5, "cccf6f"}, {0x2, 0x4, "b2a5"}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x8c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FILS_KEK={0x34, 0xf2, "0255ec56ba494a784f0360677f4c94b0369d27f03c837a2d450c583e1db01cbd0eb51e37336dae918cce83358738a558"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc0000000, {0xfffb, 0x9, 0x4, 0x9}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r6 = socket(0x27, 0x1, 0xd) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0x7, 0x4, 0x42, 0x5a9e}]}, 0x10) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000780)=0x4542024) getpid() r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000800), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x27}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x448a1}, 0x8000) ioctl$KVM_RUN(r0, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000000a40)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb8, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x13c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4dc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7f}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x8, 0xffffffff, 0x8, 0xfffffff5, 0x5, 0x0, 0x2, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x167}]}]}, 0xb8}}, 0x4040) openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r10, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000dc0)) 2.296478944s ago: executing program 1 (id=963): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r6, 0x7706, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000"], 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a6c0)={0x78, 0x0, 0x7fff, {0x8, 0x351, 0x0, {0x3, 0x4, 0x5, 0x0, 0x7fff, 0xbd2, 0x6, 0x4, 0xc5000, 0x2000, 0x0, r4, r5, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x2}, [{0x2, 0x4, r1}], {0x4, 0x1}, [{0x8, 0x1, r5}, {0x8, 0x4, 0xee01}, {0x8, 0x5, r7}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x3) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) getxattr(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 2.296212914s ago: executing program 2 (id=964): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = fsopen(&(0x7f0000000140)='logfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xd) fchdir(r1) llistxattr(&(0x7f0000000080)='./tracing\x00', 0x0, 0x0) (async) llistxattr(&(0x7f0000000080)='./tracing\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000240)=0x2000, 0x4) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x4851) getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r4 = socket$inet6(0xa, 0x1, 0x0) syz_clone(0x402000, &(0x7f0000000280)="64d0bf46576494daa8db9fdba25f78dd74a1f8820b92eb6097178af39cbb58c4e5b6656fb1adb0dc32249584a7a0dae38fa92c32cb0c61d613302fb0e19886650c6b16d44784c3a737b82de7e1cb22d82e3a344457d751aecd1a575d3a3d7c9bbcbf1737c46135c8861a6a2f64aa3ce779a03c8cd8b72a5b5899067e395fb9d0aca3ad1a4d42d97defac0040117e00baaf96", 0x92, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000e00)="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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001000000106e05e60000000000000109022400010000700609040010fe03000000e12bdc4654edf0bc812409210100fc01222800090581032000098102"], 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001000000106e05e60000000000000109022400010000700609040010fe03000000e12bdc4654edf0bc812409210100fc01222800090581032000098102"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="203128000000280483efb930f0187ff0b71ea9e40100000000000000cde30600000077366b480000000000909a3c"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="203128000000280483efb930f0187ff0b71ea9e40100000000000000cde30600000077366b480000000000909a3c"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) bind$can_raw(r6, &(0x7f00000001c0), 0x10) (async) bind$can_raw(r6, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000500), 0x4) 2.240556346s ago: executing program 1 (id=965): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x101000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x62, 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001000)=ANY=[@ANYBLOB="000000000000000010be26d33a4f046ef0f9c4a1e32fe81f"]) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) 2.235932267s ago: executing program 1 (id=966): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000002010400000000000000000a000002040001803c0002800c"], 0x58}}, 0x4) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000002010400000000000000000a000002040001803c0002800c"], 0x58}}, 0x4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r6 = syz_io_uring_setup(0x282e, &(0x7f0000000240)={0x0, 0x2457, 0x100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x40, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x40, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmmsg$unix(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}}], 0x2, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}}], 0x2, 0x0) 2.161139963s ago: executing program 8 (id=862): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff", 0x58) 101.987999ms ago: executing program 1 (id=967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000040)="d9929434712d640f080f017c720f0041efdb28f30f300f01cf669afb0f000000000f9625", 0x24}], 0x1, 0x31, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 101.681389ms ago: executing program 3 (id=968): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = socket(0xa, 0x5, 0xfffffffc) sendfile(r4, r0, 0x0, 0xffffffff) 36.389573ms ago: executing program 3 (id=969): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x1800004, &(0x7f0000000300)={[{@nofavordynmods}], [{@measure}]}) (async, rerun: 64) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$binfmt_script(r6, 0x0, 0xb) splice(r5, 0x0, r8, 0x0, 0x80, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r9, 0x0, 0x4010d00, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x10000000100, 0x80000005c, 0x8, 0x42, 0x400000000000004, 0x5, 0x10, 0x40000000b, 0x8000000000000000, 0x3, 0xffffffffffff9867, 0x8, 0x6, 0x331a, 0x1000], 0x0, 0x310982}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 35.888753ms ago: executing program 1 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000019c0)={0x1, 0x0, [{0xd, 0x1, 0x0, 0xbf, 0x10000, 0x8, 0x6}]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000180)={0x1, @auth_requested={{0x411, 0x2}, {0xc8}}}, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f00000004c0)={0xdb, 0x0, 0x3}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000243000/0x2000)=nil, 0x2000}, 0x2}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) syz_usb_disconnect(r9) r10 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x7, 0x80, 0x4, 0x4}, {0xd, 0xff, 0x8, 0x8001}, {0xfff, 0x80, 0xc2, 0x2}, {0x5, 0xde, 0x9e, 0xa6}, {0x7, 0xb0, 0x0, 0x5}, {0x1, 0x78, 0x8, 0x80000001}, {0x1, 0x0, 0x7, 0x18}, {0x878, 0x7, 0x7, 0xfffffff8}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f00000002c0)={r12, 0x0, r5, 0x7, 0x80000}) (async) r13 = fsmount(r10, 0x0, 0x0) fchdir(r13) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r9, 0x4004550a, 0x0) 0s ago: executing program 8 (id=862): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff", 0x58) kernel console output (not intermixed with test programs): : denied { read write } for pid=862 comm="syz.2.197" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.185023][ T36] audit: type=1400 audit(1790635136.740:246): avc: denied { open } for pid=862 comm="syz.2.197" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.240089][ T36] audit: type=1400 audit(1790635136.740:247): avc: denied { ioctl } for pid=862 comm="syz.2.197" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.306068][ T36] audit: type=1400 audit(1790635136.800:248): avc: denied { read } for pid=870 comm="syz.3.199" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.338430][ T36] audit: type=1400 audit(1790635136.800:249): avc: denied { open } for pid=870 comm="syz.3.199" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.712382][ T882] syzkaller1: entered promiscuous mode [ 54.718458][ T882] syzkaller1: entered allmulticast mode [ 54.838714][ T905] SELinux: security policydb version 15 (MLS) not backwards compatible [ 54.857135][ T905] SELinux: failed to load policy [ 54.872720][ T903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'. [ 54.887073][ T905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 55.127750][ T955] netlink: 'syz.3.213': attribute type 8 has an invalid length. [ 55.148313][ T957] netlink: 'syz.4.214': attribute type 7 has an invalid length. [ 55.172474][ T957] netlink: 'syz.4.214': attribute type 5 has an invalid length. [ 55.190609][ T957] netlink: 17 bytes leftover after parsing attributes in process `syz.4.214'. [ 55.375285][ T961] cgroup: fork rejected by pids controller in /syz3 [ 55.438474][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 55.608463][ T9] usb 4-1: device descriptor read/64, error -71 [ 55.868457][ T9] usb 4-1: device descriptor read/64, error -71 [ 56.028462][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 56.118483][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.198606][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 56.204713][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 56.216296][ T10] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 56.229368][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.235969][ T10] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 56.247091][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.258457][ T9] usb 4-1: device descriptor read/64, error -71 [ 56.265776][ T10] usb 5-1: config 0 descriptor?? [ 56.498449][ T9] usb 4-1: device descriptor read/64, error -71 [ 56.498449][ T667] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 56.618581][ T9] usb usb4-port1: attempt power cycle [ 56.648437][ T667] usb 3-1: Using ep0 maxpacket: 32 [ 56.654742][ T667] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 56.662943][ T667] usb 3-1: config 0 has no interface number 0 [ 56.669110][ T667] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 56.674134][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.679847][ T667] usb 3-1: config 0 interface 196 has no altsetting 0 [ 56.687900][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.694656][ T667] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 56.709307][ T667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.717341][ T667] usb 3-1: Product: syz [ 56.717445][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.721677][ T667] usb 3-1: Manufacturer: syz [ 56.728962][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.733297][ T667] usb 3-1: SerialNumber: syz [ 56.740346][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.746128][ T667] usb 3-1: config 0 descriptor?? [ 56.756994][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.757464][ T1075] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 56.764168][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.778339][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.785478][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.792624][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.799760][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.806907][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.814042][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.821177][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.828294][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.835415][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.842546][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.849682][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.856806][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.863994][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.871157][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.878268][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.885408][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.892545][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.892831][ T1026] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 56.899673][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.899704][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.922748][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.927843][ T1079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.930633][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.938958][ T1085] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 56.945348][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.955321][ T1079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.961138][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.978658][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 56.986330][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 56.993484][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.000668][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.007777][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.014945][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.022114][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.029269][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.036537][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.043710][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.050988][ T10] zydacron 0003:13EC:0006.0004: unknown main item tag 0x0 [ 57.058277][ T9] usb 4-1: device descriptor read/8, error -71 [ 57.065152][ T10] zydacron 0003:13EC:0006.0004: hidraw0: USB HID v0.81 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 57.189497][ T9] usb 4-1: device descriptor read/8, error -71 [ 57.379126][ T667] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 57.387863][ T667] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 57.438459][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 57.470145][ T9] usb 4-1: device descriptor read/8, error -71 [ 57.491805][ T667] usb 5-1: USB disconnect, device number 6 [ 57.518695][ T1104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 57.529235][ T1104] kvm: emulating exchange as write [ 57.596022][ C1] ipheth 3-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 57.609459][ T9] usb 4-1: device descriptor read/8, error -71 [ 57.718527][ T9] usb usb4-port1: unable to enumerate USB device [ 57.799457][ T1075] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.231'. [ 57.828455][ T667] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 57.858888][ T9] usb 3-1: USB disconnect, device number 10 [ 57.879077][ T9] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 57.978436][ T667] usb 5-1: Using ep0 maxpacket: 32 [ 57.984597][ T667] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 57.994986][ T667] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.005200][ T667] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 58.014245][ T667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.022236][ T667] usb 5-1: Product: syz [ 58.026432][ T667] usb 5-1: Manufacturer: syz [ 58.031026][ T667] usb 5-1: SerialNumber: syz [ 58.240017][ T667] usb 5-1: unit 8 not found! [ 58.248327][ T667] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 58.258330][ T667] usb 5-1: USB disconnect, device number 7 [ 58.382233][ T1122] FAULT_INJECTION: forcing a failure. [ 58.382233][ T1122] name failslab, interval 1, probability 0, space 0, times 0 [ 58.394986][ T1122] CPU: 1 UID: 0 PID: 1122 Comm: syz.2.234 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 58.395016][ T1122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.395028][ T1122] Call Trace: [ 58.395035][ T1122] [ 58.395042][ T1122] __dump_stack+0x21/0x30 [ 58.395074][ T1122] dump_stack_lvl+0x140/0x1c0 [ 58.395099][ T1122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.395127][ T1122] dump_stack+0x19/0x20 [ 58.395150][ T1122] should_fail_ex+0x3c2/0x510 [ 58.395173][ T1122] should_failslab+0xac/0x100 [ 58.395196][ T1122] __kmalloc_cache_noprof+0x41/0x470 [ 58.395217][ T1122] ? ioc_cpd_alloc+0x7e/0x1d0 [ 58.395236][ T1122] ioc_cpd_alloc+0x7e/0x1d0 [ 58.395262][ T1122] blkcg_css_alloc+0x33c/0xcd0 [ 58.395286][ T1122] cgroup_apply_control_enable+0x3b2/0xce0 [ 58.395313][ T1122] cgroup_mkdir+0x1274/0x1600 [ 58.395337][ T1122] ? __cfi_cgroup_mkdir+0x10/0x10 [ 58.395359][ T1122] kernfs_iop_mkdir+0x1be/0x2d0 [ 58.395383][ T1122] vfs_mkdir+0x591/0x810 [ 58.395408][ T1122] do_mkdirat+0x240/0x530 [ 58.395432][ T1122] ? __cfi_do_mkdirat+0x10/0x10 [ 58.395455][ T1122] ? __kasan_check_write+0x18/0x20 [ 58.395474][ T1122] ? getname_flags+0x203/0x6b0 [ 58.395493][ T1122] ? __kasan_check_write+0x18/0x20 [ 58.395508][ T1122] __x64_sys_mkdirat+0x8b/0xa0 [ 58.395521][ T1122] x64_sys_call+0x2ba8/0x2ee0 [ 58.395531][ T1122] do_syscall_64+0x57/0xf0 [ 58.395541][ T1122] ? clear_bhb_loop+0x50/0xa0 [ 58.395553][ T1122] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.395566][ T1122] RIP: 0033:0x7f308db9e159 [ 58.395575][ T1122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.395585][ T1122] RSP: 002b:00007f308ea70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 58.395598][ T1122] RAX: ffffffffffffffda RBX: 00007f308de25fa0 RCX: 00007f308db9e159 [ 58.395606][ T1122] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 58.395614][ T1122] RBP: 00007f308dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 58.395620][ T1122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.395627][ T1122] R13: 00007f308de26038 R14: 00007f308de25fa0 R15: 00007ffe99ab6668 [ 58.395635][ T1122] [ 58.630393][ T1126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1126 comm=syz.2.236 [ 58.719558][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 58.823603][ T1133] netlink: 'syz.4.239': attribute type 4 has an invalid length. [ 58.831320][ T1133] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.239'. [ 58.871275][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 58.884390][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.892839][ T9] usb 4-1: config 178 has an invalid interface number: 183 but max is 0 [ 58.901210][ T9] usb 4-1: config 178 has no interface number 0 [ 58.907475][ T9] usb 4-1: config 178 interface 183 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 58.919609][ T1142] 9pnet_fd: Insufficient options for proto=fd [ 58.920881][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27 [ 58.934919][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.943399][ T9] usb 4-1: Product: ы [ 58.954827][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 58.954840][ T36] audit: type=1400 audit(1790635141.570:275): avc: denied { connect } for pid=1138 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.985429][ T9] usb 4-1: Manufacturer: ᠉ [ 58.990052][ T9] usb 4-1: SerialNumber: 娳呑᜗췣ﻌⱙ咭ⳝ뼎䐴茿뀓뾧誻↬堞嘺ቀ歈ꁋ쁤棴馶磛쵭⭉ݜ첂堑婕磥桀㘘᠔ٶ쪑쾦턢㙈ඔ䈽춭Ȱ៧Ꜹ岊꯼冫컗堘蓝⨈⾝種턲茤ᰇ늏拜‱㘆듨㿶⍔羐㬹䋯귨論泃㢻䨜渽賠훊鹼嗬䎙䟔얌霒簏ண皂ऑ鼐䩰 [ 59.022318][ T36] audit: type=1400 audit(1790635141.610:276): avc: denied { create } for pid=1143 comm="syz.1.242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.044493][ T36] audit: type=1400 audit(1790635141.610:277): avc: denied { read write } for pid=1143 comm="syz.1.242" name="file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.067199][ T1124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.075469][ T36] audit: type=1400 audit(1790635141.610:278): avc: denied { open } for pid=1143 comm="syz.1.242" path="/45/file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.098297][ T36] audit: type=1400 audit(1790635141.610:279): avc: denied { ioctl } for pid=1143 comm="syz.1.242" path="/45/file0" dev="tmpfs" ino=253 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.302587][ T9] usb 4-1: USB disconnect, device number 14 [ 59.312753][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:178.183/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.757969][ T36] audit: type=1400 audit(1790635142.370:280): avc: denied { view } for pid=1173 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.820378][ T1176] netlink: 'syz.2.252': attribute type 12 has an invalid length. [ 59.851143][ T36] audit: type=1400 audit(1790635142.470:281): avc: denied { create } for pid=1181 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.883765][ T36] audit: type=1400 audit(1790635142.500:282): avc: denied { bind } for pid=1181 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.911518][ T36] audit: type=1400 audit(1790635142.500:283): avc: denied { listen } for pid=1181 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.938694][ T36] audit: type=1400 audit(1790635142.500:284): avc: denied { connect } for pid=1181 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.971921][ T1186] fuse: Unknown parameter 'N׉JgJ8Spڷz}P\T?}hz~>6 6YZ3eMZ<2Y\A$n*5ɸU1}-gw ' [ 60.027931][ T1186] fuse: Unknown parameter 'N׉JgJ8Spڷz}P\T?}hz~>6 6YZ3eMZ<2Y\A$n*5ɸU1}-gw ' [ 60.049203][ T1186] fuse: Unknown parameter 'N׉JgJ8Spڷz}P\T?}hz~>6 6YZ3eMZ<2Y\A$n*5ɸU1}-gw ' [ 60.070912][ T1186] fuse: Unknown parameter 'N׉JgJ8Spڷz}P\T?}hz~>6 6YZ3eMZ<2Y\A$n*5ɸU1}-gw ' [ 60.180901][ T1207] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.225666][ T1215] netlink: 'syz.2.264': attribute type 8 has an invalid length. [ 60.275254][ T1217] netlink: 5 bytes leftover after parsing attributes in process `syz.3.265'. [ 60.291496][ T1217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.352850][ T890] bridge_slave_1: left allmulticast mode [ 60.358547][ T890] bridge_slave_1: left promiscuous mode [ 60.364128][ T890] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.394141][ T890] bridge_slave_0: left allmulticast mode [ 60.401590][ T890] bridge_slave_0: left promiscuous mode [ 60.407249][ T890] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.466350][ T1222] kvm: pic: non byte write [ 60.526338][ T890] veth1_macvtap: left promiscuous mode [ 60.535834][ T890] veth0_vlan: left promiscuous mode [ 60.712237][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.719513][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.729934][ T1235] bridge_slave_0: entered allmulticast mode [ 60.736378][ T1235] bridge_slave_0: entered promiscuous mode [ 60.747794][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.760813][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.767974][ T1235] bridge_slave_1: entered allmulticast mode [ 60.774513][ T1235] bridge_slave_1: entered promiscuous mode [ 60.836531][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.843625][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.850888][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.857915][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.878285][ T890] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.885990][ T890] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.896878][ T897] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.903933][ T897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.913364][ T890] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.920412][ T890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.943854][ T1235] veth0_vlan: entered promiscuous mode [ 60.953583][ T1235] veth1_macvtap: entered promiscuous mode [ 61.218580][ T413] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 61.264837][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 61.348447][ T413] usb 6-1: device descriptor read/64, error -71 [ 61.591386][ T1255] bridge0: entered allmulticast mode [ 61.598569][ T413] usb 6-1: device descriptor read/64, error -71 [ 61.673961][ T1257] netlink: 'syz.1.276': attribute type 8 has an invalid length. [ 61.758602][ T667] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 61.844739][ T413] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 61.938436][ T667] usb 4-1: Using ep0 maxpacket: 32 [ 61.945320][ T667] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 95, changing to 7 [ 61.956462][ T667] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 226, changing to 7 [ 61.969082][ T667] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 61.978111][ T667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.986183][ T413] usb 6-1: device descriptor read/64, error -71 [ 61.992460][ T667] usb 4-1: Product: 䀊 [ 61.996599][ T667] usb 4-1: Manufacturer: ࠊ [ 62.001205][ T667] usb 4-1: SerialNumber: syz [ 62.211316][ T667] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 62.219843][ T667] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 62.226124][ T667] usb 4-1: 2:1 : unsupported sample bitwidth 3 in 203 bytes [ 62.233574][ T413] usb 6-1: device descriptor read/64, error -71 [ 62.242770][ T667] usb 4-1: USB disconnect, device number 15 [ 62.254534][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.348519][ T413] usb usb6-port1: attempt power cycle [ 62.418454][ T1265] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 62.660738][ T1265] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 62.668304][ T1265] usb 3-1: can't read configurations, error -71 [ 62.688592][ T413] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 62.709397][ T413] usb 6-1: device descriptor read/8, error -71 [ 62.839508][ T413] usb 6-1: device descriptor read/8, error -71 [ 63.078458][ T413] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 63.099443][ T413] usb 6-1: device descriptor read/8, error -71 [ 63.190288][ T1285] netlink: 'syz.2.286': attribute type 8 has an invalid length. [ 63.229430][ T413] usb 6-1: device descriptor read/8, error -71 [ 63.348523][ T413] usb usb6-port1: unable to enumerate USB device [ 63.996064][ T1310] netlink: 182 bytes leftover after parsing attributes in process `syz.5.294'. [ 64.108436][ T1265] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 64.232039][ T1315] netlink: 'syz.2.296': attribute type 8 has an invalid length. [ 64.259732][ T1265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.268089][ T1265] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.278261][ T1265] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 64.287347][ T1265] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 64.299413][ T1265] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 64.312604][ T1265] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 64.324749][ T1265] usb 4-1: config 1 interface 1 has no altsetting 0 [ 64.333406][ T1265] usb 4-1: string descriptor 0 read error: -22 [ 64.339602][ T1265] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 64.348646][ T1265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.378436][ T62] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 64.529665][ T62] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 64.538669][ T62] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 64.548309][ T62] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 64.559111][ T62] usb 6-1: config 1 interface 0 has no altsetting 0 [ 64.565714][ T62] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 64.574766][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.584141][ T62] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 64.688582][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.761783][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 64.761799][ T36] audit: type=1400 audit(1790635147.380:313): avc: denied { append } for pid=1307 comm="syz.3.293" name="uprobe_events" dev="tracefs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 64.791857][ T1312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.798439][ T36] audit: type=1400 audit(1790635147.390:314): avc: denied { read } for pid=1307 comm="syz.3.293" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.801235][ T1312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.828547][ T36] audit: type=1400 audit(1790635147.450:315): avc: denied { mounton } for pid=1311 comm="syz.5.295" path="/proc/6/task" dev="proc" ino=15939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 64.829527][ T1312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.295'. [ 64.850921][ T36] audit: type=1400 audit(1790635147.450:316): avc: denied { write } for pid=1311 comm="syz.5.295" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.860017][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 64.888897][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.899362][ T36] audit: type=1400 audit(1790635147.520:317): avc: denied { ioctl } for pid=1311 comm="syz.5.295" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.923709][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.923740][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.948452][ T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 64.953053][ T1327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.971499][ T1337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.295'. [ 64.980396][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.987010][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 64.996164][ T1328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.999617][ T1327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.006091][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.021765][ T9] usb 3-1: config 0 descriptor?? [ 65.037310][ T1328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.053775][ T1347] syzkaller1: entered promiscuous mode [ 65.059553][ T1347] syzkaller1: entered allmulticast mode [ 65.118067][ T36] audit: type=1400 audit(1790635147.730:318): avc: denied { ioctl } for pid=1346 comm="syz.1.301" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.159519][ T62] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 65.169750][ T62] usb 6-1: USB disconnect, device number 6 [ 65.390779][ T1265] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 65.400055][ T1265] usb 4-1: Warning! Unlikely big volume range (=7736), cval->res is probably wrong. [ 65.409455][ T1265] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -7736/0/1 [ 65.422294][ T1265] usb 4-1: USB disconnect, device number 16 [ 65.598584][ T1354] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 65.607767][ T1354] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 65.701377][ T12] bridge_slave_1: left allmulticast mode [ 65.707799][ T12] bridge_slave_1: left promiscuous mode [ 65.714012][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.721909][ T12] bridge_slave_0: left allmulticast mode [ 65.727636][ T12] bridge_slave_0: left promiscuous mode [ 65.733734][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.854697][ T12] veth1_macvtap: left promiscuous mode [ 65.868497][ T12] veth0_vlan: left promiscuous mode [ 65.920633][ T1358] netlink: 'syz.3.306': attribute type 8 has an invalid length. [ 66.075414][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.083639][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.090941][ T1356] bridge_slave_0: entered allmulticast mode [ 66.097273][ T1356] bridge_slave_0: entered promiscuous mode [ 66.104509][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.113935][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.121170][ T1356] bridge_slave_1: entered allmulticast mode [ 66.127523][ T1356] bridge_slave_1: entered promiscuous mode [ 66.128345][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.169689][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 66.181841][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 66.192850][ T9] usb 3-1: USB disconnect, device number 13 [ 66.206612][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.213443][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.234081][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.236772][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.247362][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.254647][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.261695][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.269313][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.286585][ T899] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.294355][ T899] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.294488][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.315976][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.322834][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.322840][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.336093][ T899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.343735][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.344632][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.356994][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.364715][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.378829][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.381300][ T1356] veth0_vlan: entered promiscuous mode [ 66.390824][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.397297][ T1356] veth1_macvtap: entered promiscuous mode [ 66.403412][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.403668][ T667] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 66.418774][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.432344][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.441648][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.448332][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.454998][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.463609][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.470428][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.476952][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.483965][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.490582][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.497099][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.503710][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.510326][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.517003][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.523575][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.530127][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.537492][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.543789][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 66.551628][ T1368] overlayfs: maximum fs stacking depth exceeded [ 66.559669][ T667] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 66.570451][ T667] usb 4-1: config 0 has no interface number 0 [ 66.571874][ T1391] netlink: 'syz.6.314': attribute type 8 has an invalid length. [ 66.576543][ T667] usb 4-1: config 0 interface 41 has no altsetting 0 [ 66.594941][ T667] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 66.597506][ T1393] overlayfs: conflicting options: userxattr,verity=on [ 66.604192][ T667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.619024][ T667] usb 4-1: Product: syz [ 66.623525][ T667] usb 4-1: Manufacturer: syz [ 66.628154][ T667] usb 4-1: SerialNumber: syz [ 66.636412][ T667] usb 4-1: config 0 descriptor?? [ 66.699453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.710718][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.719782][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.728329][ T9] usb 3-1: config 0 descriptor?? [ 66.898472][ T1265] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.038476][ T1265] usb 7-1: device descriptor read/64, error -71 [ 67.136483][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 67.147620][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input9 [ 67.221449][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 67.288475][ T1265] usb 7-1: device descriptor read/64, error -71 [ 67.446772][ T667] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 67.459612][ T36] audit: type=1400 audit(1790635150.080:319): avc: denied { read } for pid=1372 comm="syz.3.311" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.483188][ T36] audit: type=1400 audit(1790635150.080:320): avc: denied { open } for pid=1372 comm="syz.3.311" path="/94/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.507789][ T36] audit: type=1400 audit(1790635150.080:321): avc: denied { ioctl } for pid=1372 comm="syz.3.311" path="/94/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.541159][ T413] usb 3-1: USB disconnect, device number 14 [ 67.568481][ T1265] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.698452][ T1265] usb 7-1: device descriptor read/64, error -71 [ 67.948471][ T1265] usb 7-1: device descriptor read/64, error -71 [ 68.060643][ T1265] usb usb7-port1: attempt power cycle [ 68.075663][ T36] audit: type=1400 audit(1790635150.690:322): avc: denied { load_policy } for pid=1397 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.078193][ T1398] SELinux: failed to load policy [ 68.348454][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 68.408441][ T1265] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.429409][ T1265] usb 7-1: device descriptor read/8, error -71 [ 68.498428][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 68.504901][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.513250][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.523359][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 68.534325][ T9] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 68.545144][ T9] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 68.558208][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 97, changing to 7 [ 68.569267][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 24929, setting to 1024 [ 68.579472][ T1265] usb 7-1: device descriptor read/8, error -71 [ 68.581701][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 68.595504][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.603533][ T9] usb 3-1: Product: syz [ 68.607708][ T9] usb 3-1: Manufacturer: syz [ 68.612592][ T9] usb 3-1: SerialNumber: syz [ 68.663867][ T667] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 68.676537][ T667] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 68.686464][ T667] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 68.698327][ T667] usb 4-1: USB disconnect, device number 17 [ 68.818713][ T1265] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.820544][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 68.837214][ T9] usb 3-1: USB disconnect, device number 15 [ 68.845057][ T1265] usb 7-1: device descriptor read/8, error -71 [ 68.857417][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.979398][ T1265] usb 7-1: device descriptor read/8, error -71 [ 68.998448][ T667] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 69.088553][ T1265] usb usb7-port1: unable to enumerate USB device [ 69.149860][ T667] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.161454][ T667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.172607][ T667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.182475][ T667] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.195378][ T667] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.206949][ T667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.217541][ T667] usb 4-1: config 0 descriptor?? [ 69.372505][ T1415] netlink: 'syz.2.323': attribute type 8 has an invalid length. [ 69.423281][ T1427] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.437405][ T667] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 69.448375][ T667] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 69.450903][ T1432] kvm: kvm [1401]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000400004 [ 69.676884][ T1451] capability: warning: `syz.6.334' uses deprecated v2 capabilities in a way that may be insecure [ 69.688264][ T31] usb 4-1: USB disconnect, device number 18 [ 69.727016][ T1455] netlink: 'syz.2.336': attribute type 8 has an invalid length. [ 69.752087][ T1476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.337'. [ 69.769298][ T1476] netlink: 59 bytes leftover after parsing attributes in process `syz.2.337'. [ 69.778204][ T1476] netlink: 59 bytes leftover after parsing attributes in process `syz.2.337'. [ 69.806258][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 69.806272][ T36] audit: type=1400 audit(1790635152.420:324): avc: denied { write } for pid=1499 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.884941][ T36] audit: type=1400 audit(1790635152.500:325): avc: denied { write } for pid=1503 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.927081][ T36] audit: type=1400 audit(1790635152.540:326): avc: denied { execute } for pid=1503 comm="syz.1.340" path="/memory.swap.current" dev="ramfs" ino=16767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 70.038950][ T1516] netlink: 'syz.2.345': attribute type 8 has an invalid length. [ 70.069958][ T1520] netlink: 'syz.2.347': attribute type 6 has an invalid length. [ 70.085993][ T1520] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 70.248877][ T1527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46096 sclass=netlink_route_socket pid=1527 comm=syz.2.349 [ 70.359382][ T1533] d: Can't lookup blockdev [ 70.521361][ T1540] netlink: 'syz.6.356': attribute type 8 has an invalid length. [ 70.698634][ T1564] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.949284][ T1568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.029398][ T36] audit: type=1400 audit(1790635153.650:327): avc: denied { write } for pid=1570 comm="syz.6.365" name="pfkey" dev="proc" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.069301][ T36] audit: type=1400 audit(1790635153.690:328): avc: denied { getattr } for pid=1575 comm="syz.6.367" name="/" dev="incremental-fs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.070177][ T1577] netlink: 32 bytes leftover after parsing attributes in process `syz.6.367'. [ 71.101367][ T1578] netlink: 'syz.2.366': attribute type 8 has an invalid length. [ 71.108497][ T1577] netlink: 9 bytes leftover after parsing attributes in process `syz.6.367'. [ 71.122952][ T36] audit: type=1400 audit(1790635153.740:329): avc: denied { mounton } for pid=1575 comm="syz.6.367" path="/11/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.122991][ T1580] overlay: filesystem on ./file0 not supported as upperdir [ 71.266654][ T1597] futex_wake_op: syz.6.374 tries to shift op by 144; fix this program [ 71.318121][ T1603] netlink: 'syz.2.376': attribute type 8 has an invalid length. [ 71.388843][ T1606] overlayfs: conflicting lowerdir path [ 72.298247][ T1625] netlink: 'syz.3.386': attribute type 8 has an invalid length. [ 72.321979][ T1627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 72.343884][ T1632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 72.353082][ T1633] input: syz1 as /devices/virtual/input/input11 [ 72.358455][ T63] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 72.369856][ T36] audit: type=1400 audit(1790635154.990:330): avc: denied { search } for pid=1631 comm="syz.3.389" name="/" dev="configfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.405281][ T36] audit: type=1400 audit(1790635154.990:331): avc: denied { read } for pid=1631 comm="syz.3.389" name="/" dev="configfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.448951][ T36] audit: type=1400 audit(1790635154.990:332): avc: denied { open } for pid=1631 comm="syz.3.389" path="/" dev="configfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.491169][ T36] audit: type=1400 audit(1790635155.040:333): avc: denied { cmd } for pid=1636 comm="iou-wrk-1638" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 72.539447][ T63] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 72.558417][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.578413][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 72.589317][ T63] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 72.609679][ T63] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.618755][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.626756][ T63] usb 7-1: SerialNumber: syz [ 72.635806][ T1610] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 72.791915][ T1655] netlink: 'syz.2.396': attribute type 8 has an invalid length. [ 72.863900][ T63] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 72.871812][ T63] usb 7-1: USB disconnect, device number 6 [ 72.948509][ T413] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 73.119334][ T413] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 73.136140][ T413] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.161661][ T413] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.169007][ T413] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 73.178193][ T413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.187437][ T413] usb 4-1: config 0 descriptor?? [ 73.477289][ T1682] netlink: 'syz.6.406': attribute type 8 has an invalid length. [ 73.708522][ T1705] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 73.779683][ T1709] netlink: 'syz.2.416': attribute type 8 has an invalid length. [ 73.797838][ T1651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.809644][ T1651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.818449][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 73.955988][ T413] usbhid 4-1:0.0: can't add hid device: -71 [ 73.963036][ T413] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.974022][ T413] usb 4-1: USB disconnect, device number 19 [ 73.998425][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 74.006148][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 74.014852][ T9] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 74.027451][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.039907][ T9] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 74.049267][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.058061][ T9] usb 7-1: Product: syz [ 74.062329][ T9] usb 7-1: Manufacturer: syz [ 74.067388][ T9] usb 7-1: SerialNumber: syz [ 74.277663][ T1696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.286194][ T1696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.287234][ T1735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.302456][ T1735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.312247][ T9] usb 7-1: selecting invalid altsetting 1 [ 74.319984][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.329631][ T9] usb 7-1: USB disconnect, device number 7 [ 74.329717][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.538262][ T1739] netlink: 'syz.3.426': attribute type 8 has an invalid length. [ 74.952741][ T1812] netlink: 72 bytes leftover after parsing attributes in process `syz.6.434'. [ 75.042063][ T1819] netlink: 'syz.3.436': attribute type 8 has an invalid length. [ 75.066907][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 75.066923][ T36] audit: type=1400 audit(1790635157.680:344): avc: denied { read } for pid=1811 comm="syz.6.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.348444][ T63] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 75.398446][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 75.499684][ T63] usb 7-1: unable to get BOS descriptor or descriptor too short [ 75.507640][ T63] usb 7-1: not running at top speed; connect to a high speed hub [ 75.516055][ T63] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.526150][ T63] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.536392][ T63] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 75.545446][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.553444][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 75.558490][ T63] usb 7-1: Product: syz [ 75.562634][ T63] usb 7-1: Manufacturer: syz [ 75.567201][ T63] usb 7-1: SerialNumber: syz [ 75.572949][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 75.584167][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.596963][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.608603][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 75.617678][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.627693][ T9] usb 4-1: config 0 descriptor?? [ 75.762949][ T1838] capability: warning: `syz.2.443' uses 32-bit capabilities (legacy support in use) [ 75.844377][ T9] wacom 0003:17EF:6004.0007: hidraw0: USB HID v0.02 Device [HID 17ef:6004] on usb-dummy_hcd.3-1/input0 [ 76.044050][ T413] usb 4-1: USB disconnect, device number 20 [ 76.285335][ T36] audit: type=1400 audit(1790635158.900:345): avc: denied { nlmsg_tty_audit } for pid=1869 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 76.306836][ T36] audit: type=1400 audit(1790635158.930:346): avc: denied { setattr } for pid=1869 comm="syz.1.444" name="NETLINK" dev="sockfs" ino=20228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.647015][ T1890] netlink: 'syz.2.448': attribute type 8 has an invalid length. [ 76.748423][ T36] audit: type=1401 audit(1790635159.360:347): op=setxattr invalid_context="system_u:object_r:syslogd_var_run_t:s0" [ 76.808713][ T1918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.818565][ T1918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.831802][ T36] audit: type=1400 audit(1790635159.450:348): avc: denied { create } for pid=1915 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.851743][ T36] audit: type=1400 audit(1790635159.480:349): avc: denied { create } for pid=1915 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.048435][ T413] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 77.086632][ T36] audit: type=1400 audit(1790635159.700:350): avc: denied { mounton } for pid=1933 comm="syz.3.454" path="/130/file0" dev="tmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.086688][ T1934] 9pnet_fd: Insufficient options for proto=fd [ 77.178434][ T413] usb 3-1: device descriptor read/64, error -71 [ 77.186576][ T1939] rust_binder: 1938:1939 got transaction to invalid handle 3 [ 77.194082][ T1939] rust_binder: 1938:1939 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 77.203476][ T1939] rust_binder: 1938: undelivered TRANSACTION_ERROR: 29201 [ 77.221790][ T1941] tmpfs: Unknown parameter 'p)W!]aŊ~Ϊ.%oO\Slףr3͉M' [ 77.418441][ T413] usb 3-1: device descriptor read/64, error -71 [ 77.658439][ T413] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 77.788436][ T413] usb 3-1: device descriptor read/64, error -71 [ 77.968041][ T63] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 77.979049][ T63] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 77.992647][ T63] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 77.999762][ T1945] netlink: 'syz.6.458': attribute type 8 has an invalid length. [ 78.002592][ T63] usb 7-1: 3:0: cannot get min/max values for control 12 (id 3) [ 78.018662][ T63] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 78.030245][ T63] usb 7-1: USB disconnect, device number 8 [ 78.038422][ T413] usb 3-1: device descriptor read/64, error -71 [ 78.052367][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.148498][ T413] usb usb3-port1: attempt power cycle [ 78.438445][ T63] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 78.488438][ T413] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 78.509405][ T413] usb 3-1: device descriptor read/8, error -71 [ 78.588441][ T63] usb 7-1: Using ep0 maxpacket: 16 [ 78.594882][ T63] usb 7-1: unable to get BOS descriptor or descriptor too short [ 78.603252][ T63] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 78.615634][ T63] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 78.624687][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.632855][ T63] usb 7-1: Product: syz [ 78.637007][ T63] usb 7-1: Manufacturer: syz [ 78.639452][ T413] usb 3-1: device descriptor read/8, error -71 [ 78.641598][ T63] usb 7-1: SerialNumber: syz [ 78.854550][ T1952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.854565][ T63] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 78.863147][ T1952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.872310][ T63] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.879009][ T413] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 78.897711][ T63] usb 7-1: 2:1 : can't get High Capability descriptor [ 78.910215][ T413] usb 3-1: device descriptor read/8, error -71 [ 79.039393][ T413] usb 3-1: device descriptor read/8, error -71 [ 79.098040][ T1951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.106830][ T1951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.148508][ T413] usb usb3-port1: unable to enumerate USB device [ 79.160142][ T413] usb 7-1: USB disconnect, device number 9 [ 79.463014][ T1961] FAULT_INJECTION: forcing a failure. [ 79.463014][ T1961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.476136][ T1961] CPU: 1 UID: 0 PID: 1961 Comm: Bpys\Τg Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 79.476156][ T1961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.476163][ T1961] Call Trace: [ 79.476167][ T1961] [ 79.476171][ T1961] __dump_stack+0x21/0x30 [ 79.476190][ T1961] dump_stack_lvl+0x140/0x1c0 [ 79.476203][ T1961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.476217][ T1961] dump_stack+0x19/0x20 [ 79.476229][ T1961] should_fail_ex+0x3c2/0x510 [ 79.476242][ T1961] should_fail+0xf/0x20 [ 79.476253][ T1961] should_fail_usercopy+0x1e/0x30 [ 79.476265][ T1961] strncpy_from_user+0x29/0x280 [ 79.476277][ T1961] getname_flags+0x106/0x6b0 [ 79.476289][ T1961] getname+0x1b/0x30 [ 79.476299][ T1961] do_sys_openat2+0xda/0x1d0 [ 79.476313][ T1961] ? do_sys_open+0x100/0x100 [ 79.476326][ T1961] ? __x64_sys_prctl+0xf0/0xf0 [ 79.476337][ T1961] __x64_sys_openat+0x13a/0x170 [ 79.476351][ T1961] x64_sys_call+0xe69/0x2ee0 [ 79.476360][ T1961] do_syscall_64+0x57/0xf0 [ 79.476370][ T1961] ? clear_bhb_loop+0x50/0xa0 [ 79.476383][ T1961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.476401][ T1961] RIP: 0033:0x7f896975e98e [ 79.476411][ T1961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.476420][ T1961] RSP: 002b:00007f896a6feec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.476432][ T1961] RAX: ffffffffffffffda RBX: 00007f896a6ff6c0 RCX: 00007f896975e98e [ 79.476440][ T1961] RDX: 0000000000000002 RSI: 00007f896a6fef90 RDI: ffffffffffffff9c [ 79.476447][ T1961] RBP: 00007f896983506b R08: 0000000000000000 R09: 0000000000000000 [ 79.476455][ T1961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.476461][ T1961] R13: 00007f8969a26038 R14: 00007f8969a25fa0 R15: 00007fff2da6c778 [ 79.476470][ T1961] [ 79.477088][ T36] audit: type=1400 audit(1790635162.090:351): avc: denied { map } for pid=1960 comm=85B1CC427079C173F95C98CEA467D2 path="/76/proc/218/task/219/fail-nth" dev="proc" ino=20380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 79.490039][ T1961] FAULT_INJECTION: forcing a failure. [ 79.490039][ T1961] name failslab, interval 1, probability 0, space 0, times 0 [ 79.500045][ T36] audit: type=1400 audit(1790635162.110:352): avc: denied { mounton } for pid=1960 comm=85B1CC427079C173F95C98CEA467D2 path="/76/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 79.504628][ T1961] CPU: 1 UID: 0 PID: 1961 Comm: Bpys\Τg Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 79.504656][ T1961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.504667][ T1961] Call Trace: [ 79.504672][ T1961] [ 79.504679][ T1961] __dump_stack+0x21/0x30 [ 79.504707][ T1961] dump_stack_lvl+0x140/0x1c0 [ 79.504729][ T1961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.504754][ T1961] dump_stack+0x19/0x20 [ 79.504775][ T1961] should_fail_ex+0x3c2/0x510 [ 79.504796][ T1961] should_failslab+0xac/0x100 [ 79.504817][ T1961] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 79.504836][ T1961] ? proc_alloc_inode+0x48/0x150 [ 79.504855][ T1961] proc_alloc_inode+0x48/0x150 [ 79.504872][ T1961] ? __cfi_proc_alloc_inode+0x10/0x10 [ 79.504888][ T1961] alloc_inode+0x7a/0x270 [ 79.504910][ T1961] new_inode+0x25/0x1e0 [ 79.504930][ T1961] proc_pid_make_inode+0x25/0x140 [ 79.504950][ T1961] proc_pid_instantiate+0x54/0x2a0 [ 79.504971][ T1961] proc_pid_lookup+0x18a/0x260 [ 79.504991][ T1961] proc_root_lookup+0x24/0x50 [ 79.505010][ T1961] __lookup_slow+0x2e5/0x420 [ 79.505031][ T1961] ? lookup_one_len+0x300/0x300 [ 79.505051][ T1961] ? down_read+0x7f/0xe0 [ 79.505074][ T1961] lookup_slow+0x57/0x80 [ 79.505094][ T1961] link_path_walk+0x991/0xeb0 [ 79.505114][ T1961] path_openat+0x298/0x35a0 [ 79.505135][ T1961] ? schedule+0xc5/0x240 [ 79.505153][ T1961] ? kasan_save_alloc_info+0x3a/0x50 [ 79.505170][ T1961] ? __kasan_slab_alloc+0x73/0x90 [ 79.505190][ T1961] ? getname+0x1b/0x30 [ 79.505208][ T1961] ? x64_sys_call+0xe69/0x2ee0 [ 79.505223][ T1961] ? do_syscall_64+0x57/0xf0 [ 79.505241][ T1961] ? do_filp_open+0x440/0x440 [ 79.505263][ T1961] do_filp_open+0x1f2/0x440 [ 79.505286][ T1961] ? __cfi_do_filp_open+0x10/0x10 [ 79.505309][ T1961] ? __cfi_kfree_link+0x10/0x10 [ 79.505333][ T1961] ? alloc_fd+0x4c1/0x570 [ 79.505352][ T1961] do_sys_openat2+0x134/0x1d0 [ 79.505376][ T1961] ? do_sys_open+0x100/0x100 [ 79.505408][ T1961] __x64_sys_openat+0x13a/0x170 [ 79.505432][ T1961] x64_sys_call+0xe69/0x2ee0 [ 79.505450][ T1961] do_syscall_64+0x57/0xf0 [ 79.505466][ T1961] ? clear_bhb_loop+0x50/0xa0 [ 79.505487][ T1961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.505507][ T1961] RIP: 0033:0x7f896979e159 [ 79.505522][ T1961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.505536][ T1961] RSP: 002b:00007f896a6ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.505554][ T1961] RAX: ffffffffffffffda RBX: 00007f8969a25fa0 RCX: 00007f896979e159 [ 79.505567][ T1961] RDX: 0000000000002002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 79.505580][ T1961] RBP: 00007f896983506b R08: 0000000000000000 R09: 0000000000000000 [ 79.505591][ T1961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.505602][ T1961] R13: 00007f8969a26038 R14: 00007f8969a25fa0 R15: 00007fff2da6c778 [ 79.505617][ T1961] [ 80.038953][ T1978] netlink: 'syz.2.468': attribute type 8 has an invalid length. [ 80.083019][ T36] audit: type=1400 audit(1790635162.700:353): avc: denied { getopt } for pid=1984 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.150675][ T1993] netlink: 'syz.2.474': attribute type 46 has an invalid length. [ 80.178460][ T63] wacom 0003:056A:003F.0008: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 80.242589][ T2004] netlink: 'syz.3.479': attribute type 8 has an invalid length. [ 80.380431][ T2027] fuseblk: Bad value for 'blksize' [ 80.397508][ T2031] netlink: 'syz.3.488': attribute type 8 has an invalid length. [ 80.438452][ T63] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 80.518596][ T36] audit: type=1400 audit(1790635163.140:354): avc: denied { ioctl } for pid=2043 comm="syz.6.494" path="socket:[20947]" dev="sockfs" ino=20947 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.589451][ T63] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 80.597783][ T63] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 80.606854][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.615780][ T63] usb 3-1: config 0 descriptor?? [ 80.622261][ T63] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 80.823690][ T667] usb 3-1: USB disconnect, device number 20 [ 80.868500][ T413] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 80.878437][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 81.019499][ T413] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 81.030536][ T413] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.038425][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 81.043472][ T413] usb 7-1: config 0 interface 0 has no altsetting 0 [ 81.049459][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.055156][ T413] usb 7-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 81.063231][ T9] usb 4-1: config 179 has no interface number 0 [ 81.072358][ T413] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.078476][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 81.098416][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 81.101072][ T413] usb 7-1: config 0 descriptor?? [ 81.109867][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.115281][ T2050] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 81.125975][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 81.143111][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 81.156449][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 81.163327][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 81.172394][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.183261][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input19 [ 81.341609][ T413] wacom 0003:056A:5002.0009: hidraw0: USB HID v0.04 Joystick [HID 056a:5002] on usb-dummy_hcd.6-1/input0 [ 81.356454][ T2055] netlink: 'syz.2.499': attribute type 8 has an invalid length. [ 81.382303][ T9] usb 4-1: USB disconnect, device number 21 [ 81.390959][ T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 81.570496][ T36] audit: type=1400 audit(1790635164.190:355): avc: denied { nlmsg_write } for pid=2068 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.611401][ T1265] usb 7-1: USB disconnect, device number 10 [ 81.868171][ T2082] netlink: 'syz.2.510': attribute type 8 has an invalid length. [ 82.183068][ T36] audit: type=1400 audit(1790635164.800:356): avc: denied { nlmsg_read } for pid=2097 comm="syz.6.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.289799][ T2112] kernel profiling enabled (shift: 23) [ 82.327863][ T2114] netlink: 13 bytes leftover after parsing attributes in process `syz.6.520'. [ 82.399911][ T36] audit: type=1400 audit(1790635165.020:357): avc: denied { ioctl } for pid=2122 comm="syz.6.524" path="socket:[22131]" dev="sockfs" ino=22131 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.538457][ T413] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 82.589780][ T36] audit: type=1400 audit(1790635165.210:358): avc: denied { transfer } for pid=2130 comm="syz.6.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.689714][ T413] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 82.697904][ T413] usb 4-1: config 0 has no interface number 0 [ 82.704079][ T413] usb 4-1: config 0 interface 41 has no altsetting 0 [ 82.712150][ T413] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 82.721277][ T413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.729296][ T413] usb 4-1: Product: syz [ 82.733510][ T413] usb 4-1: Manufacturer: syz [ 82.738109][ T413] usb 4-1: SerialNumber: syz [ 82.746928][ T413] usb 4-1: config 0 descriptor?? [ 83.232785][ T2142] netlink: 13 bytes leftover after parsing attributes in process `syz.1.530'. [ 83.299330][ T36] audit: type=1400 audit(1790635165.920:359): avc: denied { execute } for pid=2150 comm="syz.2.534" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.354998][ T2112] overlayfs: workdir and upperdir must be separate subtrees [ 83.400469][ T36] audit: type=1400 audit(1790635166.020:360): avc: denied { bind } for pid=2161 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.403540][ T2162] netlink: 'syz.1.538': attribute type 4 has an invalid length. [ 83.425221][ T2164] netlink: 'syz.2.539': attribute type 8 has an invalid length. [ 83.442889][ T36] audit: type=1400 audit(1790635166.020:361): avc: denied { setopt } for pid=2161 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.478869][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 83.563170][ T413] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 83.585773][ T2175] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 83.644342][ T2198] netlink: 'syz.1.549': attribute type 8 has an invalid length. [ 83.690864][ T36] audit: type=1400 audit(1790635166.310:362): avc: denied { bpf } for pid=2202 comm="syz.1.551" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.740200][ T2206] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 83.750052][ T667] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 83.768838][ T2196] devpts: called with bogus options [ 83.908436][ T667] usb 7-1: Using ep0 maxpacket: 16 [ 83.914576][ T667] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.924760][ T667] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.934911][ T667] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.943962][ T667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.951978][ T667] usb 7-1: Product: syz [ 83.956129][ T667] usb 7-1: Manufacturer: syz [ 83.960725][ T667] usb 7-1: SerialNumber: syz [ 84.167659][ T667] usb 7-1: 0:2 : does not exist [ 84.174708][ T667] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 84.187499][ T667] usb 7-1: USB disconnect, device number 11 [ 84.199786][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.322180][ T2215] 9pnet_fd: p9_fd_create_tcp (2215): problem binding to privport [ 84.378787][ T2228] netlink: 'syz.1.559': attribute type 8 has an invalid length. [ 84.406698][ T2234] fuse: Bad value for 'fd' [ 84.869830][ T413] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 84.882104][ T413] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 84.893509][ T413] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 84.904070][ T413] usb 4-1: USB disconnect, device number 22 [ 84.938530][ T2258] netlink: 'syz.1.570': attribute type 8 has an invalid length. [ 85.338430][ T63] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 85.488445][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 85.500885][ T63] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.511519][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.519683][ T63] usb 3-1: Product: syz [ 85.523924][ T63] usb 3-1: Manufacturer: syz [ 85.528689][ T63] usb 3-1: SerialNumber: syz [ 85.536589][ T63] r8152-cfgselector 3-1: Unknown version 0x0000 [ 85.543107][ T63] r8152-cfgselector 3-1: config 0 descriptor?? [ 85.556505][ T63] hub 3-1:0.0: bad descriptor, ignoring hub [ 85.563629][ T63] hub 3-1:0.0: probe with driver hub failed with error -5 [ 85.641309][ T2280] netlink: 'syz.3.580': attribute type 8 has an invalid length. [ 85.780519][ T2288] ./dev/sda1: Can't lookup blockdev [ 85.878915][ T9] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 86.038436][ T63] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 86.178449][ T63] usb 7-1: device descriptor read/64, error -71 [ 86.291662][ T2317] netlink: 'syz.2.594': attribute type 8 has an invalid length. [ 86.418444][ T63] usb 7-1: device descriptor read/64, error -71 [ 86.560228][ T2328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.560412][ T2327] rust_binder: 2326:2327 got reply transaction with no transaction stack [ 86.575276][ T2327] rust_binder: 2326:2327 transaction reply to 0:0 failed EINVAL, code 0 size 72-24 [ 86.584853][ T667] rust_binder: 2326: undelivered TRANSACTION_ERROR: 29201 [ 86.592182][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 86.592194][ T36] audit: type=1400 audit(1790635169.220:372): avc: denied { write } for pid=2326 comm="syz.3.599" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.608793][ T2328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.620787][ T413] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 86.634833][ T2327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.634856][ T2328] rust_binder: Write failure EINVAL in pid:495 [ 86.641809][ T2327] rust_binder: 2326:2327 got transaction to invalid handle 1 [ 86.655328][ T2327] rust_binder: 2326:2327 transaction call to 0:0 failed ENOENT, code 0 size 120-3976 [ 86.678460][ T63] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 86.700604][ T36] audit: type=1400 audit(1790635169.320:373): avc: denied { setopt } for pid=2333 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.788440][ T413] usb 3-1: Using ep0 maxpacket: 32 [ 86.794422][ T2340] netlink: 'syz.3.604': attribute type 8 has an invalid length. [ 86.802166][ T413] usb 3-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 86.813073][ T413] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 86.829491][ T63] usb 7-1: device descriptor read/64, error -71 [ 86.835620][ T413] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.843587][ T2344] overlayfs: missing 'lowerdir' [ 86.843954][ T413] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 86.857580][ T2343] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.857709][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.874569][ T413] usb 3-1: config 0 descriptor?? [ 86.889614][ T9] rust_binder: 2326: undelivered TRANSACTION_ERROR: 29201 [ 87.068435][ T63] usb 7-1: device descriptor read/64, error -71 [ 87.178530][ T63] usb usb7-port1: attempt power cycle [ 87.283809][ T413] zydacron 0003:13EC:0006.000A: global environment stack underflow [ 87.292658][ T413] zydacron 0003:13EC:0006.000A: item 0 0 1 11 parsing failed [ 87.300810][ T413] zydacron 0003:13EC:0006.000A: parse failed [ 87.306920][ T413] zydacron 0003:13EC:0006.000A: probe with driver zydacron failed with error -22 [ 87.496768][ T9] usb 3-1: USB disconnect, device number 22 [ 87.528436][ T63] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 87.549440][ T63] usb 7-1: device descriptor read/8, error -71 [ 87.679458][ T63] usb 7-1: device descriptor read/8, error -71 [ 87.764396][ T2365] netlink: 'syz.3.613': attribute type 8 has an invalid length. [ 87.781412][ T2367] ./dev/sda1: Can't lookup blockdev [ 87.918495][ T63] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 87.939460][ T63] usb 7-1: device descriptor read/8, error -71 [ 88.070685][ T63] usb 7-1: device descriptor read/8, error -71 [ 88.156810][ T2396] netlink: 'syz.2.624': attribute type 8 has an invalid length. [ 88.178614][ T63] usb usb7-port1: unable to enumerate USB device [ 88.307208][ T36] audit: type=1400 audit(1790635170.920:374): avc: denied { create } for pid=2405 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.308510][ T2406] syz.2.629 uses obsolete (PF_INET,SOCK_PACKET) [ 88.449832][ T36] audit: type=1400 audit(1790635171.070:375): avc: denied { execmem } for pid=2412 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.708435][ T413] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 88.806174][ T2417] netlink: 'syz.6.634': attribute type 8 has an invalid length. [ 88.868447][ T413] usb 3-1: Using ep0 maxpacket: 32 [ 88.874615][ T413] usb 3-1: config 0 has no interfaces? [ 88.881448][ T413] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 88.890539][ T413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.898535][ T413] usb 3-1: Product: syz [ 88.902715][ T413] usb 3-1: Manufacturer: syz [ 88.907283][ T413] usb 3-1: SerialNumber: syz [ 88.912450][ T413] usb 3-1: config 0 descriptor?? [ 89.018457][ T63] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 89.079419][ T2426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=22910 (366560 ns) > initial count (1920 ns). Using initial count to start timer. [ 89.097317][ T2426] kvm: kvm [2425]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 89.106084][ T2426] kvm: kvm [2425]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 89.141069][ T36] audit: type=1400 audit(1790635171.760:376): avc: denied { execute } for pid=2412 comm="syz.2.632" name="file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.158953][ T9] usb 3-1: USB disconnect, device number 23 [ 89.163120][ T36] audit: type=1400 audit(1790635171.760:377): avc: denied { execute_no_trans } for pid=2412 comm="syz.2.632" path="/171/file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.199738][ T63] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 89.209743][ T63] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.220281][ T63] usb 4-1: config 0 has no interface number 0 [ 89.226456][ T63] usb 4-1: config 0 interface 116 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.239932][ T63] usb 4-1: config 0 interface 116 has no altsetting 0 [ 89.250395][ T63] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 89.259607][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.260021][ T2431] FAULT_INJECTION: forcing a failure. [ 89.260021][ T2431] name failslab, interval 1, probability 0, space 0, times 0 [ 89.280328][ T2431] CPU: 1 UID: 0 PID: 2431 Comm: syz.6.640 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 89.280355][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.280368][ T2431] Call Trace: [ 89.280374][ T2431] [ 89.280381][ T2431] __dump_stack+0x21/0x30 [ 89.280413][ T2431] dump_stack_lvl+0x140/0x1c0 [ 89.280438][ T2431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.280463][ T2431] dump_stack+0x19/0x20 [ 89.280483][ T2431] should_fail_ex+0x3c2/0x510 [ 89.280504][ T2431] should_failslab+0xac/0x100 [ 89.280529][ T63] usb 4-1: config 0 descriptor?? [ 89.280526][ T2431] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 89.280548][ T2431] ? key_alloc+0x338/0x1060 [ 89.280571][ T2431] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 89.280591][ T2431] kmemdup_noprof+0x31/0x80 [ 89.280609][ T2431] key_alloc+0x338/0x1060 [ 89.280636][ T2431] __key_create_or_update+0x959/0xa90 [ 89.280654][ T2431] ? security_key_permission+0x3d/0x100 [ 89.280674][ T2431] ? key_create_or_update+0x70/0x70 [ 89.280693][ T2431] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 89.280718][ T2431] key_create_or_update+0x47/0x70 [ 89.280736][ T2431] __se_sys_add_key+0x355/0x4b0 [ 89.280756][ T2431] ? __x64_sys_add_key+0xf0/0xf0 [ 89.280776][ T2431] ? __kasan_check_write+0x18/0x20 [ 89.280795][ T2431] ? fpregs_restore_userregs+0x11c/0x260 [ 89.280817][ T2431] __x64_sys_add_key+0xc3/0xf0 [ 89.280838][ T2431] x64_sys_call+0x195f/0x2ee0 [ 89.280864][ T2431] do_syscall_64+0x57/0xf0 [ 89.280883][ T2431] ? clear_bhb_loop+0x50/0xa0 [ 89.280906][ T2431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.280929][ T2431] RIP: 0033:0x7f206a19e159 [ 89.280945][ T2431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.280962][ T2431] RSP: 002b:00007f206b145028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 89.280981][ T2431] RAX: ffffffffffffffda RBX: 00007f206a425fa0 RCX: 00007f206a19e159 [ 89.280996][ T2431] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000000c0 [ 89.281008][ T2431] RBP: 00007f206a23506b R08: fffffffffffffffc R09: 0000000000000000 [ 89.281022][ T2431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.281033][ T2431] R13: 00007f206a426038 R14: 00007f206a425fa0 R15: 00007ffc7ce4c838 [ 89.281049][ T2431] [ 89.514723][ T63] usbhid 4-1:0.116: couldn't find an input interrupt endpoint [ 89.648092][ T2439] netlink: 'syz.6.643': attribute type 8 has an invalid length. [ 89.822943][ T2458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 89.841525][ T2458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 90.121189][ T2460] ./dev/sda1: Can't lookup blockdev [ 90.126549][ T2462] ./dev/sda1: Can't lookup blockdev [ 90.205717][ T2467] netlink: 'syz.2.652': attribute type 8 has an invalid length. [ 90.225373][ T2469] random: crng reseeded on system resumption [ 90.228455][ T36] audit: type=1400 audit(1790635172.840:378): avc: denied { getopt } for pid=2468 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.252069][ T36] audit: type=1400 audit(1790635172.840:379): avc: denied { read write } for pid=2468 comm="syz.2.653" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.275919][ T36] audit: type=1400 audit(1790635172.840:380): avc: denied { ioctl open } for pid=2468 comm="syz.2.653" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.319603][ T2476] incfs: Options parsing error. -22 [ 90.320982][ T36] audit: type=1400 audit(1790635172.940:381): avc: denied { mounton } for pid=2475 comm="syz.6.656" path="/73/proc/214/task/215/fail-nth" dev="proc" ino=24489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 90.324876][ T2476] incfs: mount failed -22 [ 90.358635][ T2476] FAULT_INJECTION: forcing a failure. [ 90.358635][ T2476] name failslab, interval 1, probability 0, space 0, times 0 [ 90.372752][ T2476] CPU: 1 UID: 0 PID: 2476 Comm: syz.6.656 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 90.372785][ T2476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.372797][ T2476] Call Trace: [ 90.372803][ T2476] [ 90.372811][ T2476] __dump_stack+0x21/0x30 [ 90.372843][ T2476] dump_stack_lvl+0x140/0x1c0 [ 90.372867][ T2476] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.372890][ T2476] dump_stack+0x19/0x20 [ 90.372912][ T2476] should_fail_ex+0x3c2/0x510 [ 90.372931][ T2476] should_failslab+0xac/0x100 [ 90.372953][ T2476] __kmalloc_cache_noprof+0x41/0x470 [ 90.372974][ T2476] ? x509_cert_parse+0xba/0xbd0 [ 90.373002][ T2476] x509_cert_parse+0xba/0xbd0 [ 90.373022][ T2476] x509_key_preparse+0x6a/0x880 [ 90.373033][ T2476] ? __cfi_down_read+0x10/0x10 [ 90.373046][ T2476] asymmetric_key_preparse+0xb3/0x100 [ 90.373060][ T2476] __key_create_or_update+0x433/0xa90 [ 90.373070][ T2476] ? security_key_permission+0x3d/0x100 [ 90.373081][ T2476] ? key_create_or_update+0x70/0x70 [ 90.373091][ T2476] ? __kasan_kmalloc+0x96/0xb0 [ 90.373105][ T2476] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 90.373120][ T2476] key_create_or_update+0x47/0x70 [ 90.373130][ T2476] __se_sys_add_key+0x355/0x4b0 [ 90.373141][ T2476] ? __x64_sys_add_key+0xf0/0xf0 [ 90.373152][ T2476] ? __kasan_check_write+0x18/0x20 [ 90.373162][ T2476] ? fpregs_restore_userregs+0x11c/0x260 [ 90.373174][ T2476] __x64_sys_add_key+0xc3/0xf0 [ 90.373186][ T2476] x64_sys_call+0x195f/0x2ee0 [ 90.373195][ T2476] do_syscall_64+0x57/0xf0 [ 90.373205][ T2476] ? clear_bhb_loop+0x50/0xa0 [ 90.373217][ T2476] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.373229][ T2476] RIP: 0033:0x7f206a19e159 [ 90.373239][ T2476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.373251][ T2476] RSP: 002b:00007f206b145028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 90.373264][ T2476] RAX: ffffffffffffffda RBX: 00007f206a425fa0 RCX: 00007f206a19e159 [ 90.373273][ T2476] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000500 [ 90.373280][ T2476] RBP: 00007f206a23506b R08: fffffffffffffffc R09: 0000000000000000 [ 90.373287][ T2476] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 90.373294][ T2476] R13: 00007f206a426038 R14: 00007f206a425fa0 R15: 00007ffc7ce4c838 [ 90.373303][ T2476] [ 90.549307][ T2486] netlink: 'syz.1.661': attribute type 8 has an invalid length. [ 90.651543][ T2492] overlayfs: failed to clone lowerpath [ 90.784630][ T2513] netlink: 'syz.6.672': attribute type 8 has an invalid length. [ 90.978432][ T63] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 91.048454][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 91.128435][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 91.134575][ T63] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 91.145644][ T63] usb 3-1: config 1 interface 0 has no altsetting 0 [ 91.153581][ T63] usb 3-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.40 [ 91.162639][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.170774][ T63] usb 3-1: Product: syz [ 91.174919][ T63] usb 3-1: Manufacturer: syz [ 91.179566][ T63] usb 3-1: SerialNumber: syz [ 91.198420][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 91.204529][ T9] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 91.214146][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 91.223200][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.231192][ T9] usb 7-1: Product: syz [ 91.235402][ T9] usb 7-1: Manufacturer: syz [ 91.240004][ T9] usb 7-1: SerialNumber: syz [ 91.247310][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 91.253584][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 91.378596][ T2531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.680'. [ 91.386037][ T2503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.396923][ T2503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.406478][ T2503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.415450][ T2503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.420469][ T2535] netlink: 'syz.1.682': attribute type 8 has an invalid length. [ 91.429641][ T63] usbhid 3-1:1.0: can't add hid device: -71 [ 91.437152][ T63] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 91.446268][ T63] usb 3-1: USB disconnect, device number 24 [ 91.720503][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 91.720519][ T36] audit: type=1400 audit(1790635174.340:383): avc: denied { write } for pid=2515 comm="syz.6.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.746666][ T36] audit: type=1400 audit(1790635174.340:384): avc: denied { nlmsg_write } for pid=2515 comm="syz.6.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.792223][ T9] usb 4-1: USB disconnect, device number 23 [ 91.949807][ T36] audit: type=1400 audit(1790635174.560:385): avc: denied { create } for pid=2547 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 91.975767][ T2552] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 91.988028][ T2552] overlayfs: missing 'lowerdir' [ 91.999189][ T2556] netlink: 4476 bytes leftover after parsing attributes in process `syz.2.689'. [ 92.348426][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 92.498427][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 92.504733][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.513409][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 92.523449][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 92.532521][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.540530][ T9] usb 3-1: Product: Ў [ 92.544591][ T9] usb 3-1: Manufacturer: 娸柧緲쪿걍ƀ✏迥㻈揵ඃٶꠁ锄番缽ƍ㍙鵪⏆垕ۆ㿕虃ꇬࣽ뜑ᱜ殿傒ぇ끍啛ﲃ╢⧾䣭㵸ｬ솤䜳䩑ꎜ専푕謳 [ 92.561604][ T9] usb 3-1: SerialNumber: syz [ 93.815831][ T63] r8152-cfgselector 7-1: USB disconnect, device number 16 [ 94.993427][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 95.000373][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 95.009601][ T9] usb 3-1: USB disconnect, device number 25 [ 95.018619][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.416983][ T2567] netlink: 'syz.1.693': attribute type 8 has an invalid length. [ 95.678500][ T667] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 95.749789][ T2601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.764928][ T2601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.829692][ T667] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.837993][ T667] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.848129][ T667] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.858888][ T667] usb 4-1: string descriptor 0 read error: -22 [ 95.865050][ T667] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 95.874091][ T667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.884992][ T667] usb 4-1: selecting invalid altsetting 1 [ 95.892168][ T667] usb 4-1: unit 6 not found! [ 95.992867][ T2609] netlink: 'syz.1.705': attribute type 8 has an invalid length. [ 95.998444][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 96.129248][ T2633] netlink: 'syz.1.715': attribute type 8 has an invalid length. [ 96.158475][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 96.168252][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.178599][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.189086][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice= 0.40 [ 96.198124][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.206280][ T9] usb 3-1: Product: syz [ 96.210709][ T36] audit: type=1400 audit(1790635178.840:386): avc: denied { write } for pid=2634 comm="syz.6.716" name="functions" dev="configfs" ino=9123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.210727][ T2640] Mass Storage Function, version: 2009/09/11 [ 96.210745][ T2640] LUN: removable file: (no medium) [ 96.244416][ T9] usb 3-1: Manufacturer: syz [ 96.248686][ T36] audit: type=1400 audit(1790635178.840:387): avc: denied { add_name } for pid=2634 comm="syz.6.716" name="mass_storage.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.249029][ T9] usb 3-1: SerialNumber: syz [ 96.276269][ T36] audit: type=1400 audit(1790635178.900:388): avc: denied { remove_name } for pid=2634 comm="syz.6.716" name="mass_storage.0" dev="configfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.300186][ T36] audit: type=1400 audit(1790635178.900:389): avc: denied { rmdir } for pid=2634 comm="syz.6.716" name="mass_storage.0" dev="configfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.319679][ T2640] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 96.338426][ T2640] SELinux: failed to load policy [ 96.970485][ T667] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 96.980825][ T667] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 96.981739][ T9] usb 3-1: 0:1 : does not exist [ 96.992676][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.997678][ T9] usb 3-1: BAAD HEADSET c_chmask mismatch [ 97.011853][ T667] usb 4-1: USB disconnect, device number 24 [ 97.031046][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 97.060143][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.075903][ T9] usb 3-1: USB disconnect, device number 26 [ 97.098508][ T2652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9758 sclass=netlink_route_socket pid=2652 comm=syz.6.722 [ 97.178915][ T2661] netlink: 'syz.1.726': attribute type 8 has an invalid length. [ 97.208266][ T2665] : renamed from vlan0 (while UP) [ 97.368461][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 97.519410][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.529599][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.538506][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 97.547634][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.558518][ T667] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 97.562378][ T9] usb 3-1: 0:1 : does not exist [ 97.597942][ T2686] netlink: 'syz.3.736': attribute type 8 has an invalid length. [ 97.623384][ T36] audit: type=1400 audit(1790635180.240:390): avc: denied { setopt } for pid=2687 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.709766][ T667] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.717788][ T667] usb 7-1: not running at top speed; connect to a high speed hub [ 97.729412][ T667] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 97.742705][ T667] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 97.751820][ T667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.759873][ T667] usb 7-1: Product: syz [ 97.764024][ T667] usb 7-1: Manufacturer: syz [ 97.768671][ T667] usb 7-1: SerialNumber: syz [ 97.796345][ T2698] netlink: 'syz.1.740': attribute type 4 has an invalid length. [ 97.798455][ T36] audit: type=1400 audit(1790635180.410:391): avc: denied { write } for pid=2649 comm="syz.2.721" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 97.804162][ T2698] netlink: 'syz.1.740': attribute type 2 has an invalid length. [ 97.863791][ T36] audit: type=1400 audit(1790635180.480:392): avc: denied { ioctl } for pid=2697 comm="syz.1.740" path="socket:[25314]" dev="sockfs" ino=25314 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.874555][ T2650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46208 sclass=netlink_route_socket pid=2650 comm=syz.2.721 [ 97.945122][ T36] audit: type=1400 audit(1790635180.560:393): avc: denied { write } for pid=2706 comm="syz.3.745" path="socket:[25348]" dev="sockfs" ino=25348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.969118][ T2708] netlink: 'syz.3.745': attribute type 4 has an invalid length. [ 97.979351][ T2681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.991664][ T2681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.007263][ T667] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 98.016069][ T667] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 98.024174][ T667] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 98.033699][ T667] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 98.043776][ T667] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 98.049997][ T2720] netlink: 'syz.1.747': attribute type 8 has an invalid length. [ 98.057829][ T667] usb 7-1: USB disconnect, device number 17 [ 98.077081][ T836] udevd[836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 98.103128][ T36] audit: type=1326 audit(1790635180.720:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.1.749" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f896979e159 code=0x0 [ 98.581251][ T36] audit: type=1400 audit(1790635181.200:395): avc: denied { create } for pid=2735 comm="syz.6.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.600624][ T36] audit: type=1400 audit(1790635181.220:396): avc: denied { setopt } for pid=2735 comm="syz.6.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.652679][ T36] audit: type=1400 audit(1790635181.270:397): avc: denied { connect } for pid=2740 comm="syz.6.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.787905][ T2745] overlayfs: overlapping lowerdir path [ 98.794478][ T2746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.755'. [ 98.957655][ T2751] netlink: 'syz.1.756': attribute type 8 has an invalid length. [ 98.973623][ T36] audit: type=1400 audit(1790635181.590:398): avc: denied { append } for pid=2752 comm="syz.3.757" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.230371][ T36] audit: type=1400 audit(1790635181.850:399): avc: denied { append } for pid=2766 comm="syz.6.761" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.253736][ T2772] tmpfs: Too small a size for current use [ 99.413204][ T1483] bridge_slave_1: left allmulticast mode [ 99.419118][ T1483] bridge_slave_1: left promiscuous mode [ 99.424939][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.432842][ T1483] bridge_slave_0: left allmulticast mode [ 99.438644][ T1483] bridge_slave_0: left promiscuous mode [ 99.444302][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.554277][ T1483] veth1_macvtap: left promiscuous mode [ 99.559861][ T1483] veth0_vlan: left promiscuous mode [ 99.599623][ T2793] x_tables: unsorted entry at hook 2 [ 99.635539][ T2774] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.638515][ T2798] 9pnet_fd: Insufficient options for proto=fd [ 99.642673][ T2774] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.655829][ T2774] bridge_slave_0: entered allmulticast mode [ 99.662176][ T2774] bridge_slave_0: entered promiscuous mode [ 99.670281][ T2774] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.677316][ T2774] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.684390][ T2774] bridge_slave_1: entered allmulticast mode [ 99.690726][ T2774] bridge_slave_1: entered promiscuous mode [ 99.732457][ T2774] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.739513][ T2774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.746729][ T2774] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.753753][ T2774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.772013][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.779770][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.789054][ T1486] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.796093][ T1486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.808106][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.815141][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.839790][ T2774] veth0_vlan: entered promiscuous mode [ 99.850522][ T2774] veth1_macvtap: entered promiscuous mode [ 100.055600][ T9] usb 3-1: USB disconnect, device number 27 [ 100.188537][ T667] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 100.339410][ T667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.350396][ T667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.360162][ T667] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 100.369505][ T667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.377937][ T667] usb 4-1: config 0 descriptor?? [ 100.738446][ T2839] validate_nla: 2 callbacks suppressed [ 100.738480][ T2839] netlink: 'syz.2.783': attribute type 8 has an invalid length. [ 100.785925][ T667] usbhid 4-1:0.0: can't add hid device: -71 [ 100.804253][ T667] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.816036][ T667] usb 4-1: USB disconnect, device number 25 [ 100.918898][ T2852] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.931725][ T2854] @0: renamed from bond_slave_1 [ 101.205473][ T2869] netlink: 'syz.2.793': attribute type 8 has an invalid length. [ 101.303419][ T2876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 101.442646][ T2899] netlink: 'syz.3.802': attribute type 8 has an invalid length. [ 101.505637][ T2913] netlink: 4476 bytes leftover after parsing attributes in process `syz.7.807'. [ 101.549291][ T2918] ./dev/sda1: Can't lookup blockdev [ 101.595662][ T2928] netlink: 'syz.1.813': attribute type 8 has an invalid length. [ 101.958428][ T31] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 101.978419][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 102.109431][ T31] usb 3-1: config 0 has no interfaces? [ 102.114933][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.124261][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.133546][ T31] usb 3-1: config 0 descriptor?? [ 102.143217][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.157366][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.167244][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.175607][ T9] usb 8-1: SerialNumber: syz [ 102.344116][ T63] usb 3-1: USB disconnect, device number 28 [ 102.390729][ T2954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.401328][ T2956] netlink: 'syz.3.823': attribute type 8 has an invalid length. syzkaller syzkaller login: [ 102.678423][ T63] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 102.789732][ T9] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 102.850569][ T63] usb 3-1: config 0 has no interfaces? [ 102.858435][ T63] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.867607][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.889057][ T63] usb 3-1: config 0 descriptor?? [ 102.921394][ T321] udevd[321]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 102.989047][ T1265] usb 8-1: USB disconnect, device number 2 [ 102.995404][ T1265] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 103.368254][ T1265] usb 3-1: USB disconnect, device number 29 [ 103.529909][ T321] udevd[321]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 103.891074][ T321] udevd[321]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 103.904595][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 103.904608][ T36] audit: type=1400 audit(1790635186.520:410): avc: denied { read write } for pid=3027 comm="syz.2.833" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.938516][ T36] audit: type=1400 audit(1790635186.550:411): avc: denied { open } for pid=3027 comm="syz.2.833" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.055898][ T3038] netlink: 'syz.3.834': attribute type 8 has an invalid length. [ 104.155754][ T3052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.838'. [ 104.168449][ T1265] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 104.211032][ T3053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.838'. [ 104.220200][ T3053] kvm: user requested TSC rate below hardware speed [ 104.298429][ T1265] usb 3-1: device descriptor read/64, error -71 [ 104.538420][ T1265] usb 3-1: device descriptor read/64, error -71 [ 104.548424][ T63] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 104.682345][ T3069] netlink: 'syz.1.844': attribute type 8 has an invalid length. [ 104.698411][ T63] usb 4-1: device descriptor read/64, error -71 [ 104.778445][ T1265] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 104.853587][ T36] audit: type=1400 audit(1790635187.470:412): avc: denied { create } for pid=3070 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 104.888944][ T36] audit: type=1400 audit(1790635187.510:413): avc: denied { sys_module } for pid=3074 comm="syz.1.846" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.909866][ T1265] usb 3-1: device descriptor read/64, error -71 [ 104.928107][ T3079] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 104.950425][ T63] usb 4-1: device descriptor read/64, error -71 [ 105.030420][ T3092] netlink: 'syz.1.853': attribute type 8 has an invalid length. [ 105.148428][ T1265] usb 3-1: device descriptor read/64, error -71 [ 105.188423][ T63] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 105.258581][ T1265] usb usb3-port1: attempt power cycle [ 105.328440][ T63] usb 4-1: device descriptor read/64, error -71 [ 105.519929][ T3101] overlay: Unknown parameter 'smackfstransmute' [ 105.527999][ T36] audit: type=1400 audit(1790635188.140:414): avc: denied { write } for pid=3100 comm="syz.7.857" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.555859][ T3101] netlink: 'syz.7.857': attribute type 4 has an invalid length. [ 105.571191][ T36] audit: type=1400 audit(1790635188.190:415): avc: denied { remove_name } for pid=2774 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.595516][ T63] usb 4-1: device descriptor read/64, error -71 [ 105.598435][ T1265] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 105.602355][ T36] audit: type=1400 audit(1790635188.190:416): avc: denied { unlink } for pid=2774 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.635246][ T1265] usb 3-1: device descriptor read/8, error -71 [ 105.709458][ T63] usb usb4-port1: attempt power cycle [ 105.742681][ T3112] ./dev/sda1: Can't lookup blockdev [ 105.750012][ T1494] bridge_slave_1: left allmulticast mode [ 105.755769][ T1494] bridge_slave_1: left promiscuous mode [ 105.768158][ T1494] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.780251][ T1494] bridge_slave_0: left allmulticast mode [ 105.785981][ T1265] usb 3-1: device descriptor read/8, error -71 [ 105.792382][ T1494] bridge_slave_0: left promiscuous mode [ 105.798020][ T3114] validate_nla: 1 callbacks suppressed [ 105.798034][ T3114] netlink: 'syz.1.864': attribute type 8 has an invalid length. [ 105.808521][ T1494] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.879962][ T3119] netlink: 'syz.1.866': attribute type 27 has an invalid length. [ 105.907656][ T1494] veth1_macvtap: left promiscuous mode [ 105.913214][ T1494] veth0_vlan: left promiscuous mode [ 106.028432][ T1265] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 106.050002][ T1265] usb 3-1: device descriptor read/8, error -71 [ 106.058439][ T63] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 106.099535][ T63] usb 4-1: device descriptor read/8, error -71 [ 106.179449][ T1265] usb 3-1: device descriptor read/8, error -71 [ 106.239354][ T63] usb 4-1: device descriptor read/8, error -71 [ 106.288982][ T1265] usb usb3-port1: unable to enumerate USB device [ 106.478422][ T63] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 106.499387][ T63] usb 4-1: device descriptor read/8, error -71 [ 106.629424][ T63] usb 4-1: device descriptor read/8, error -71 [ 106.671469][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 106.681221][ T3135] netlink: 104 bytes leftover after parsing attributes in process `syz.1.868'. [ 106.719888][ T36] audit: type=1400 audit(1790635189.340:417): avc: denied { mount } for pid=3137 comm="syz.1.869" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 106.741906][ T63] usb usb4-port1: unable to enumerate USB device [ 107.310795][ T3150] netlink: 'syz.2.873': attribute type 8 has an invalid length. [ 107.392129][ T36] audit: type=1400 audit(1790635190.010:418): avc: denied { setattr } for pid=3160 comm="syz.3.877" path="socket:[29354]" dev="sockfs" ino=29354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.458407][ T36] audit: type=1400 audit(1790635190.040:419): avc: denied { connect } for pid=3160 comm="syz.3.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.490630][ T3167] netlink: 'syz.3.878': attribute type 4 has an invalid length. [ 107.509667][ T3167] netlink: 17 bytes leftover after parsing attributes in process `syz.3.878'. [ 108.155444][ T3173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 108.168216][ T3173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 108.243170][ T3187] netlink: 'syz.3.885': attribute type 8 has an invalid length. [ 108.528466][ T1265] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 108.678429][ T1265] usb 3-1: Using ep0 maxpacket: 32 [ 108.684515][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.695417][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.705248][ T1265] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 108.714323][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.723027][ T1265] usb 3-1: config 0 descriptor?? [ 109.096486][ T3206] netlink: 'syz.1.892': attribute type 16 has an invalid length. [ 109.111952][ T3206] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.892'. [ 109.138020][ T3206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3206 comm=syz.1.892 [ 109.142123][ T1265] koneplus 0003:1E7D:2D51.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 109.162296][ T3208] udevd[3208]: open /dev/null failed: No such file or directory [ 109.544643][ T3190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.554928][ T3190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.040617][ T3218] Bluetooth: ISO socket layer initialized [ 110.061148][ T3218] FAULT_INJECTION: forcing a failure. [ 110.061148][ T3218] name failslab, interval 1, probability 0, space 0, times 0 [ 110.074149][ T3218] CPU: 1 UID: 0 PID: 3218 Comm: syz.3.894 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 110.074179][ T3218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.074191][ T3218] Call Trace: [ 110.074197][ T3218] [ 110.074204][ T3218] __dump_stack+0x21/0x30 [ 110.074246][ T3218] dump_stack_lvl+0x140/0x1c0 [ 110.074272][ T3218] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.074298][ T3218] ? __cfi_do_futex+0x10/0x10 [ 110.074322][ T3218] ? mutex_unlock+0x90/0x240 [ 110.074346][ T3218] dump_stack+0x19/0x20 [ 110.074369][ T3218] should_fail_ex+0x3c2/0x510 [ 110.074393][ T3218] should_failslab+0xac/0x100 [ 110.074418][ T3218] kmem_cache_alloc_noprof+0x42/0x410 [ 110.074438][ T3218] ? new_userfaultfd+0x96/0x410 [ 110.074460][ T3218] new_userfaultfd+0x96/0x410 [ 110.074481][ T3218] __x64_sys_userfaultfd+0x89/0xb0 [ 110.074502][ T3218] x64_sys_call+0x2950/0x2ee0 [ 110.074519][ T3218] do_syscall_64+0x57/0xf0 [ 110.074536][ T3218] ? clear_bhb_loop+0x50/0xa0 [ 110.074559][ T3218] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.074582][ T3218] RIP: 0033:0x7f44f059e159 [ 110.074598][ T3218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.074614][ T3218] RSP: 002b:00007f44eeff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 110.074634][ T3218] RAX: ffffffffffffffda RBX: 00007f44f0825fa0 RCX: 00007f44f059e159 [ 110.074648][ T3218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 110.074660][ T3218] RBP: 00007f44f063506b R08: 0000000000000000 R09: 0000000000000000 [ 110.074672][ T3218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.074683][ T3218] R13: 00007f44f0826038 R14: 00007f44f0825fa0 R15: 00007ffc1fd8bca8 [ 110.074699][ T3218] [ 110.075608][ T3218] sock: sock_timestamping_bind_phc: sock not bind to device [ 111.228762][ T3229] netlink: 'syz.1.898': attribute type 8 has an invalid length. [ 111.247356][ T3232] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 111.258101][ T3233] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 111.284282][ T9] usb 3-1: USB disconnect, device number 34 [ 112.379462][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 112.379479][ T36] audit: type=1400 audit(1790635195.000:424): avc: denied { map } for pid=3246 comm="syz.3.904" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.423185][ T3253] netlink: 'syz.2.907': attribute type 8 has an invalid length. [ 112.479521][ T36] audit: type=1400 audit(1790635195.090:425): avc: denied { bind } for pid=3257 comm="syz.2.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.706278][ T36] audit: type=1400 audit(1790635195.320:426): avc: denied { ioctl } for pid=3250 comm="syz.3.905" path="socket:[31922]" dev="sockfs" ino=31922 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.676281][ T36] audit: type=1400 audit(1790635196.290:427): avc: denied { read write } for pid=3270 comm="syz.2.912" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 113.705486][ T36] audit: type=1400 audit(1790635196.290:428): avc: denied { open } for pid=3270 comm="syz.2.912" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.980826][ T3283] netlink: 'syz.2.916': attribute type 8 has an invalid length. [ 114.990285][ T36] audit: type=1400 audit(1790635197.610:429): avc: denied { ioctl } for pid=3280 comm="syz.1.915" path="socket:[32978]" dev="sockfs" ino=32978 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.028543][ T3285] rust_binder: 3284:3285 transaction async to 0:0 failed EINVAL, code 0 size 0-0 [ 115.038676][ T667] rust_binder: 3284: undelivered TRANSACTION_ERROR: 29201 [ 115.077065][ T36] audit: type=1400 audit(1790635197.690:430): avc: denied { setopt } for pid=3291 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.150976][ T36] audit: type=1400 audit(1790635197.770:431): avc: denied { map } for pid=3289 comm="syz.2.919" path="/224/dev/sda" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.906903][ T3296] udevd[3296]: open /dev/null failed: No such file or directory [ 115.926173][ T321] udevd[321]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 115.937647][ T321] udevd[321]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 116.441859][ T3307] netlink: 'syz.3.925': attribute type 8 has an invalid length. [ 116.459676][ T3309] batadv_slave_0: entered promiscuous mode [ 116.468010][ T3308] batadv_slave_0: left promiscuous mode [ 116.519487][ T36] audit: type=1400 audit(1790635199.140:432): avc: denied { create } for pid=3321 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.603609][ T3323] kvm: kvm [3310]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000043) = 0x800000000400008 [ 116.658462][ T667] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 116.809415][ T667] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 116.820686][ T667] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.833615][ T667] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.840251][ T667] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 116.849310][ T667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.026405][ T3328] tipc: New replicast peer: 255.255.255.255 [ 118.036474][ T3328] tipc: Enabled bearer , priority 10 [ 118.048439][ T36] audit: type=1326 audit(1790635200.660:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.3.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44f059e159 code=0x0 [ 118.100595][ T3330] netlink: 11 bytes leftover after parsing attributes in process `syz.3.932'. [ 118.111481][ T3332] tipc: Enabling of bearer rejected, already enabled [ 118.120604][ T36] audit: type=1326 audit(1790635200.750:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.3.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44f059e159 code=0x0 [ 118.154644][ T3332] netlink: 11 bytes leftover after parsing attributes in process `syz.3.932'. [ 119.028432][ T667] tipc: Node number set to 2031762400 [ 119.420605][ T667] usb 3-1: USB disconnect, device number 35 [ 119.733514][ T3356] netlink: 'syz.2.937': attribute type 8 has an invalid length. [ 119.810374][ T36] audit: type=1326 audit(1790635202.430:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.3.939" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44f059e159 code=0x0 [ 119.841416][ T36] audit: type=1400 audit(1790635202.460:436): avc: denied { write } for pid=3362 comm="syz.2.940" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 119.866862][ T36] audit: type=1400 audit(1790635202.460:437): avc: denied { open } for pid=3362 comm="syz.2.940" path="/228/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 119.890155][ T36] audit: type=1400 audit(1790635202.480:438): avc: denied { mounton } for pid=3362 comm="syz.2.940" path="/228/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 121.576806][ T3382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.944'. [ 121.586071][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 121.596739][ T3382] netlink: 72 bytes leftover after parsing attributes in process `syz.1.944'. [ 123.344073][ T3397] netlink: 'syz.1.948': attribute type 8 has an invalid length. [ 123.375251][ T3403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.950'. [ 123.456592][ T3409] ./dev/sda1: Can't lookup blockdev [ 123.465560][ T3409] syz.1.952(3409): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 123.538434][ T667] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 123.689366][ T667] usb 3-1: config 7 has an invalid interface number: 177 but max is 1 [ 123.697536][ T667] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 123.707644][ T667] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 123.716507][ T667] usb 3-1: config 7 has no interface number 0 [ 123.722595][ T667] usb 3-1: config 7 interface 177 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 123.735640][ T667] usb 3-1: config 7 interface 177 has no altsetting 0 [ 123.743650][ T667] usb 3-1: New USB device found, idVendor=19d2, idProduct=0b70, bcdDevice=b8.3c [ 123.752686][ T667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.760667][ T667] usb 3-1: Product: syz [ 123.764816][ T667] usb 3-1: Manufacturer: syz [ 123.769412][ T667] usb 3-1: SerialNumber: syz [ 125.317132][ T3415] tmpfs: Unknown parameter 'noinode32' [ 126.304940][ T62] usb 3-1: USB disconnect, device number 36 [ 127.364013][ T3435] netlink: 'syz.2.959': attribute type 8 has an invalid length. [ 127.370672][ T3436] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.394129][ T3436] rust_binder: 3431:3436 got transaction to invalid handle 2 [ 127.408524][ T3436] rust_binder: 3431:3436 transaction call to 0:0 failed ENOENT, code 0 size 96-24 [ 127.428957][ T3436] rust_binder: 3431:3436 got transaction to invalid handle 3 [ 127.436352][ T3436] rust_binder: 3431:3436 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 127.445427][ T36] audit: type=1400 audit(1790635210.050:439): avc: denied { write } for pid=3443 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.446364][ T3445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.473518][ T3436] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 127.473535][ T3436] rust_binder: Read failure Err(EFAULT) in pid:749 [ 127.486697][ T3450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 127.503077][ T36] audit: type=1400 audit(1790635210.130:440): avc: denied { shutdown } for pid=3431 comm="syz.3.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.508447][ T3451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 127.542578][ T31] rust_binder: 3431: undelivered TRANSACTION_ERROR: 29201 [ 127.568560][ T3445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.688417][ T31] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 127.858427][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 127.864571][ T31] usb 3-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 127.874876][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 127.885755][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 127.898878][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.905471][ T31] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 127.914499][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.623800][ T3460] netlink: 'syz.3.968': attribute type 27 has an invalid length. SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=862 state=3 status=67 (errno 9: Bad file descriptor) [ 129.750383][ T36] audit: type=1400 audit(1790635212.370:441): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[2778]" dev="pipefs" ino=2778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 130.070096][ T1490] bridge_slave_1: left allmulticast mode [ 130.075769][ T1490] bridge_slave_1: left promiscuous mode [ 130.081785][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.089628][ T1490] bridge_slave_0: left allmulticast mode [ 130.095279][ T1490] bridge_slave_0: left promiscuous mode [ 130.101123][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.172899][ T63] usb 3-1: USB disconnect, device number 37 [ 130.199376][ T1490] tipc: Disabling bearer [ 130.204748][ T1490] tipc: Left network mode [ 130.209830][ T1490] veth1_macvtap: left promiscuous mode [ 130.215302][ T1490] veth0_vlan: left promiscuous mode [ 130.429238][ T1490] bridge_slave_1: left allmulticast mode [ 130.434887][ T1490] bridge_slave_1: left promiscuous mode [ 130.440518][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.447888][ T1490] bridge_slave_0: left allmulticast mode [ 130.453660][ T1490] bridge_slave_0: left promiscuous mode [ 130.459271][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.476180][ T1490] bridge0 (unregistering): left allmulticast mode [ 130.559793][ T1490] veth1_macvtap: left promiscuous mode [ 130.565271][ T1490] veth0_vlan: left promiscuous mode