last executing test programs: 27.167612393s ago: executing program 3 (id=46): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$ublk_bdev(&(0x7f0000001640), 0x0, 0x400080) read$ublk_bdev(r0, &(0x7f0000001680)=""/28, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = userfaultfd(0x800) ftruncate(r1, 0xfffffffffffffffd) (async) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x7, 0x200}, {0x1, 0x100}]}, 0x14, 0x3) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x401, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x7b9, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x1000100000000, 0x0, 0x81, 0x800005, 0x0, 0x2004cc, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7a, 0x60, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf7ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x7, 0x3}}}}}}}}]}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r6, 0x7f812000) (async) clock_gettime(0x0, &(0x7f0000001340)) (async) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) fsmount(r7, 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) process_madvise(r2, &(0x7f00000015c0)=[{&(0x7f0000000300)="6a1884486c161ca40b59a0272d696438cc9e360865e338889abc1b20e705fb68f26f23c5d734d24ad5a55cc539ae808d5b9ea791d9ec83fd08b07e61f66943746649bbbb11aaddbc5f9191bb4d80c01a0757e803895c761605c0fede98b39b65c1a952ec6970c605f370ddd8244c63fa73bb141b", 0x74}, {&(0x7f0000000380)="3b9e718192bfda97f4e1f83364e64eef3c90fccbe554f3ec60c76e9910b4901eb56788ecd01bf6ce0db90dedb60db2d1cd285bbd89af5148a0ea1eb75f83b0e51937bdd512d8241f95f9079ae8d24f3fca532ad83e68f8f29cd7a60ae947b02b5ed55609ee040c8c21db7adcf6aa60130299c0e0d1d2459463d5bd72481ef16df465b789e233cb547b28da72037f828bcba2aad1997ed63edfdbe5c7b7202242035d24485908ecefed29dfb10fccabf08d11baa2713c240ac1a96c6daf942480539a7854cf06650a9c", 0xc9}, {&(0x7f0000000480)="13209d478e2a8186c474fc459566d09343bd0e0dcf140b04471b9dfa96d42525dcccc2a3695dfe38ebeb4464f9a5fd6738150c7a09ebf19910ca8ac0ea2b4faab88fcb090a3f6e9db51fe14d83202bfdb9725b9cf9d15eb959483bd02d381672ecaaecca7671d6722cc2e1cb1c49aa", 0x6f}, {&(0x7f0000000500)="1c7f09eeb4867eb94e31f40ccfe714e0258c", 0x12}, {&(0x7f0000000540)="0ff0fff79c186afbbafda1e4b28a0c359a59df545a5d4b97981f28f0b9c0f93b67c8079114ebaca475687c5002ac259abee3b567a4b8b8eead5ac0e7377ce5287f0459be079f0b4d4948a0cc9037be8530ed15bc741d0b4ca5c854e21fbd158b6d026a081edc11b019bca8344d945bbdde219a59214d513ebbd4c379480f6224966177329e9097b26c0739480e2d78b7e0afa3e470afadea190059d9b21828b43331b180d6c7350b2d8bbf054b3d26791f1ff0e7ad5669c9c23e6ce85650af47b6d3bf4a181c89d2e184a413c812bbbdd0941f6355b3cddce70f644f17fb8a621a06d90856d884201afc492003cf366fb50ae05e468dc69c96ebffd9227379cc8caaca1d49a4af20eaa568aa602ba4297ececa96ec7d109d60a04b90204286d81bef4dcbb421cce4a74caf47a52149e50c83bfd69fcdf9995a831a4d1d2a07e2246e35fe088ed76f4e310ba5016e39bb3a5729795400a6a5361c97df97e36196c499e508584cc31636ec798040f4141e79720ff72afa56eda7c31dbb37e6543b8fb0672fbdf60ac387d9c6316daec6eb07c92cccadc76b09b6ec8ac513b1d749515e85e1c34b9575a239239cdc103d700e3c1ea06dffa6e71bfa37b0935df7c8ea5b44fba856c2d6785763ed3bf1c90317bd38c9e7af02f8e60121eca1f2934281449064f8bc846020a41d711e2b078faa35a3d49f2afdaafde7bfec8961ce6f5aa04f4458ec8a2ed4acf77ae20d6413dc57358b0874f45ad97a7172b5a09942df9eaf171a0da90e56d2fce88af1a13f31632b1df9ec383fd1523979be16f8bb11cf648af3e8777b286c9f9a570cdf8e61debc66f3145dbe832f5697d9a95a49ab3a4fc591befc61a3d7004a69a419fcf0a3ed4066a4e35c355fdc334039307ce6810323e2d69ecb5523141f685c81131f45180be775e5b81e48c1fdae53d646f06088346cb915b45156b91afdd1360837661bfaffcf983a3df71b425af29bab7378443d7c7fafc0a4c42e8445ef1bd5ea84b56549fa957daa3bd0acfc9e165f648eefd75a7e626e00204930191aaa73f125280114a6a79d61797ed08a46e03bc05bb57a9cd5362b35bced0a29b0daed8f4b87fc9ac1b54d6c41944eca91551be69ca14da79147d5de7e8e3a84705e6ad6fe0105cbe8e9901dbb2213e41554bb450b6c81f57d0d523b1a733c49f586adc6f12dab18b9840e662846c10dd1d86c382bfb050ba2354864ebd9b7c37ed2d91875d03b43a25c5c01ef68218cef7c34ec3d6fa26132898ba9e4a782558a1e3cffa657a3f0db70f84f7071324a703fa5815444209abee433e92aeec26be70e119d19d9dc34135e4bd0e93650fe5f68fba11d6e7346c3e6ce26b7775c376e10141d83706f37d36c5784c180656b992baa8651b3725c54be1c57716d3d5ac28a1d29915b9d9fc587185b8ae55de1f164fbd27706ec4da91b4ad784165be0c8b7ee77dffc237943bc52256d6d80672179c449d34630535c972ea4d02ed04094956cd81f6689fda9892ed7006a302d17b3dfae6662fac24f480a353b2c413feca4fff1e9e00cacf3270a39fb07fd9d1865e14d16368697a2e759ba5ea228ce71e4b5c36eb6037afffd0ec3d55d8e585cc0b277c88deb48edb0b22ffed7f3132d2fae98175b688f99725bdde25e65984d45300b63314a8b68579965ee0ac93e29fea0843ebb3734f87d686240c2c76cc531b94beddf6b9a30740223d1339ff4175c589f8f5dd418291f1b2e03eab89667eaf79621a65346d59fc27b99e1e8c2ecad4bf09e5c9be7410cdc64186e1b9031097b7eb2c6c856b479d96f14a5e22e18f99c62ed7105bce5e35941f3c6714d7c732a67bc1c79a22903611653f1b27083f76349fe398f2ae8da426a747c2a6f56f4fafbc8f7c00760188a4e2030844ad78ba505d76776a06aedaa83b40bb6881f27655ba6637de1e21e5dc6270530ad7705f42cd513d0474df0549a4fad6dba248ccb5165bc5e94c2d5db8d510fe2ffb6c796b079ce58d3327dce6d5211bb0867e874ba049851e69cecae76511fa85b1efa0c22390f49041076bec1acb0179a179636cc7f44c6da6a40e1543cf785453f9f492f1c28230ef68d76f18cf2bf8f714c48960e31bf07a2b5c800d5853f42b5a4e99dedc5972fb6ceee32edcb2b5802922f9f34bff75acc75f50652dbd9039e43a694588efadbb5004ac2a565a44297139bb9d161b7c9a2b40a10b850fddf5e9091add72b534c0f80882296b95d4c9b2d7db4fd7096e4e80532b3d7b2d7edf9741d8c576696858f797315337e1175afd35e1c0bc4b520bbb4c52e9a0fec7e3f0d9e4457cadcc09d3443ca34a76d51263c4ec87306662ddf7c9424c920ed02509064eab7efba071ef0acdcf8813cfab39675fc137390a71c3cb3099a9350a8ac67d95d9a1044440ea626a97d4ebcc0c0ff482258bfa7eceb6a311d64d47f897ecc5aa48383bfc6d77904b7b2cb50e205f11611bc087110bfa9bd74c87f05ecbe1fe45ff177c0597afd92ab5e3a1e8d87e5b04dcf375100865034dd3db60a5556a3166d5b6bf4efd834d835c91a479f34588e9474c4292b50b7231bf5455abb9eefb22b17a67ae1e8bde20dfb70e665ca5527b3542a7229ecd1fc21037e7c49f9e61d1c119958d7f0c5694a22f34209f674f2d0521fbd4bff68e888ba16ac296f4b354b8e11809a0315f5b8f50b5d68f269745b61d16d05c4fe4a97bce617f04889854d0203314f0822e609a1f49044f64a8b2de278f61a20a83ecd0c7ccc1485589b4d648a13fb94c6c06714511b6fcf11c280c018f227636b6d4dafadfb34c6b52c1e362907f4dc400581cad28fa315491dc061e118819cb20655c694cb06a99ba18fe014dca48e8d170f8684886dd533d9e9f8425d5d452874e3ca07963d879408e95d193b61764412e08d545021eb8d7096b222455e2fba88142d4e5f863e7d87abbc98d220b9c7a9b00eb4d5cb08e685c15cd6ae1c96b1beb8923bb29b0ab4f31478ec5928f8db03e9ec2fd77edc298652db08f3254de5ccbc26fbf6e14c9d094a5e4dfb724b492a8eed5e58443d0b0407ad46da224f0d25ae08f3ebbbf984174c87b51d7c864c21e1511932b31ec63e82be98e719553ad6bebb78e289b814d7e29378fd869493bd724b1ef27be7e375a71119aacfaf59f55b7700d05a7d6e561a4b9dd88f5ca736a1f51cff2170147e9f249d56e6717164cea2b8d4e0337a34d5af1be93772488ffed7038e7e9c1f98b50371bcf8e04197b2a2d62c35d4af9074fa3d876b046bd2f13287c7563dd0b760a9040527cca86177b50cddceed4632f31a71e91dd834713bdf7d306578558f44b42ea891ca763b713013a194ebed4577381d2f281a295c1df3b1c83a81ba02c34cc9ece0792cb8409ff7842e22f397e1bdcff8cc5a251b95d66e9b2a3adb317e0e88784b2a6f6520d3471af634ef361cad2727c3e0321b211fef59b51120376b76f9de0a4d826e2560cd632c993ce34f1b1770d7dfbe85f8b1fd81d9feaae4290250c4fdee7c1b7889f84861c61d2f03b891b4ade4a512eb66d468c2c4f1c9b8ebb8a29c8ea73ef2880c0d48abf66180a255ec5e09577a06c332fccb2abfa7174ea63509dfb0159b7ba31714d6376cfc3f166c51bfa1a9ab03be46fc47972f518cec64ead771b8819f2dbb8d0b69eeed8ab0f9e267d1292c4945aff3180b0693d532f385d0de8938cfaa83d9001ae5705890d2371fe185c1f6b88077c7c4d63eba957a75518e0d262489ee50cf89a45fdc882b63248b0c4595ef1870bb92894904032e2886e33a49e335f5d9a8c187ee16e1a83212d31f73d5a81222ddb9b093f35b44be749eeaae5cd28a63690434b058d022d6e5516b5a54374c3f551f8ebf580f3cbdbdab7aabf4a7dfcd7708f54376fdc30f46190a09d7e13c856dcb24dc4a93b403bb0a531bdf51906146dc3e516d093429e8b088900cbac02c0fe9792019896f4198df15357ea5bcb4df02a23a904b2cc99d9d2361b96d1efff84bde7d16eae61babb5fc20acd319c36a9eb27bee657cc1920d13ad9e9e4f2ca28909138ae0976a53cc9fcce41e25e36d4de1b5aebe6965cd5fdd613c5e2820f999cfe8e11588b379b694289823ee55265839d07b41017ee0237f3faeebdf2b2086ea4d64e2aff70c8602c15173be06b6ee86a3bbed20065cf81e19c7149b6d2f38063b1dbf7372a84e454f87773dfe0f2331e9b022835ee7d1bbdd5f250d0b1d6cc7807a44b09b039d920a52d9666e33ec014c8f50dc96e3d94051198fd219a9a98704cbef49ed7eac3ade50f1d87075a3e7d20472579436d62b730b3807a1817e47b44a4c1382ab56d5e95e6fe65968f239953789614e001dd8c633007eba5ec32ba48a54491b46b915ac5901cfe51d274f970fcb97cac0bda063f51596deb534569e3391010a68d0009bbaabe7fa23040aab69773ea0c1ced262fee0ea50a214642f5be4c84916e3fa58045472ff5765960fff4d664854226297e7df1f35ed56aac6bde02cd8f099a41f6c6979eb950f7474fe5dc417c936b34c070166d612bc815bd6af72f0e5e631eec44bee9b8714a85fcbeff693542e103c0808ee04c3e661eb7f2b97d4ecf4f8df664d75dc95c1cba408a6a8d5270fe228fa6a492101bd36064fbd78627a1d2224870e697adb30979de574215bc19e200f876314b62a2636da2d4830cc3220848845959c71a6b62fa0856c22f9d416b12921aaaf3b79f6b192a473471efa7bc9cc6d12cef5c35406a2a14e638f3451c2ec8e95873cb04204992bc3cf53d414d980b58577dcbaf385c3a868baeabaf1610c567bd7f6e39c242335d8b9d77fd7035108ba95c952454ff57b88ae66e63944b4c623536a4a36e3acf9e56811fd51430f6b00a28ad3a0d1992b39a1bee6044742bdbb961c749e23ff5495c718e46802976b2ce4d424f472301a4015404fc3476d4ced6be73556fc897454a37049e857a85ff75e145dfcb7dd2c80aa78f86c34a6cb467996637f0f2f86b89eb45c29d1349bb871ff0f8761f1f370c4d55b9837e938227c98b3e16bb45d58e7c9aa07eea786c46124d95b0fe7fdb1a7189deefee4ad53a1b9dd6e37aae535082696672104028719e3287b4241e3800a2bf73bcce35c402c779e4a58d291eb3ce23c6f2f13de6706fcdf9814090b8257052a0088e4b8bc26f95b01a8d00fbcea664190dabf7c3cd440e81d315bad9627baf5589d37528775f38d7de9da49c4a3f41ffce69db69508719299cdf37791af29cf9eb4382501de58bf293e042a2d440a8fe69f02eea5b6ba207e498c76933589e6b6cb0078557c87e98924ce15e3892b234a1c4cc1bfecc34ccb65fcd6da9cf792ac803e877f2c4c6b07c374be59599b129c8ba11045310ea6d7f30d8d4bd067ea0f75d835028f84bc91e337a06660a9bb8c86fc3426be03ad5b4036a454eb3bf8ba43f7b075c9240a3b468e129586940c95ce6532232f377ba91240508d0b2f35798f1b6f4ca91ba05e8192ff5be38449195f54f2c5ba08a736e83d46b247fd815c7eb777f21d3022167241523b4e8a26ae89cd7a552ecdb08ba22e3d32b5bf7df3b9fb692c784e379aafd6cff5b52235bf240b4a207d3848941f8b28ad54d846e2e874333dd1b8b39733f9b647e4843ea81e6abd9cdd984c44ede66de517fefbf0f3f57dc69b995645a27f652f6bb560ea08d4bb0d1fcecc387ea057c3496f6568fee26f152a37f930775fe13fec9949d5bceb3f2a0a00ec3ca0efae5f173f9f5ade495da661a6adc9d7", 0x1000}, {&(0x7f0000001540)="63b4d0eda7e10519d6b3782fc2fd77b6a6b06c02f9d2e99f0df35aaae5b58a47c435244f63a3ee0e8a2621c118730fbd0e7e00413b99ababb993b68bd898f8ef42675907ae2bd3e04cb9a2014f7502c3313e1c8003", 0x55}], 0x6, 0x96eaf776933c2d93, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 25.945167902s ago: executing program 3 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x4]}, 0x8, 0x800) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000300)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x3, 0x0, 0x0, 0x4, 0x34, "60e85f690edf5f1e63d9138cee2cc99ea008324f308e18a23e51efc77a38e3e91e08efc73c1bb2ce7897d69034f92919b65f35f3"}, 0x3d, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='600', 0x3) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1049) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x90}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) r4 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\x00\x00\x00\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_)Ue\x1e\xf6p\xb2s\xcf\xca.\xe0K\xc6gI\xba\xec\xdc\xb5\x1bN\xa4\xa0\xe5K\x99\xe7!i\x1f\x18)A\x11Y\xc1[\x00\xa1 \xec\x88\xa8\xe0!\xbbh\xd1\x19ON*L\xd3\xe4\xe4\xc4\x9b\xea!\x86\xfcZ\x17\xe3\xd7\x05\a?\xb86m@\x1f9J\x96eS\xd8\x18\xf1\xc0]\xd6\xfa<\xff\xb8\x00\xb7\xd6K\xcf?X\xa6\xc6\x8a4\xbe+`\x18\x1e\x0e\xc4aN\x81cC\xc0D^F\x8en6@\xceQ', 0x1) execveat(r4, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x4]}, 0x8, 0x800) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000300)) (async) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x3, 0x0, 0x0, 0x4, 0x34, "60e85f690edf5f1e63d9138cee2cc99ea008324f308e18a23e51efc77a38e3e91e08efc73c1bb2ce7897d69034f92919b65f35f3"}, 0x3d, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) (async) write(r1, &(0x7f0000000100)='600', 0x3) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1049) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x90}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) (async) memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\x00\x00\x00\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_)Ue\x1e\xf6p\xb2s\xcf\xca.\xe0K\xc6gI\xba\xec\xdc\xb5\x1bN\xa4\xa0\xe5K\x99\xe7!i\x1f\x18)A\x11Y\xc1[\x00\xa1 \xec\x88\xa8\xe0!\xbbh\xd1\x19ON*L\xd3\xe4\xe4\xc4\x9b\xea!\x86\xfcZ\x17\xe3\xd7\x05\a?\xb86m@\x1f9J\x96eS\xd8\x18\xf1\xc0]\xd6\xfa<\xff\xb8\x00\xb7\xd6K\xcf?X\xa6\xc6\x8a4\xbe+`\x18\x1e\x0e\xc4aN\x81cC\xc0D^F\x8en6@\xceQ', 0x1) (async) execveat(r4, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x800) (async) 25.914054019s ago: executing program 3 (id=50): r0 = syz_ublk_setup_io_uring(0x4e17, &(0x7f0000000000)={0x0, 0x0, 0x40000, 0x1, 0x2bb}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x0, 0x10, r0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6, 0x10e1}, 0x0, 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000015c0)={0x20000b, 0x0, [{0x0, 0x0, 0x1}, {0x3, 0x0, 0x807f}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffff9, 0x0, 0x5365}, {0x80, 0x0, 0x499}, {0xa, 0x0, 0x3f}, {0x40, 0x0, 0x4}, {0xc0, 0x0, 0x7}, {0x3, 0x0, 0x5}, {0x47, 0x0, 0x40}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x7f, 0x0, 0x4}, {0x40, 0x0, 0x7}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) rt_sigtimedwait(&(0x7f0000000240)={[0x5]}, 0x0, &(0x7f0000000280), 0x8) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r7 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) fallocate(r7, 0x10, 0x6, 0x7000000) 25.736370465s ago: executing program 3 (id=51): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 24.92548622s ago: executing program 3 (id=59): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001) (async, rerun: 32) unshare(0x60000600) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xf0, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x75, 0xb, 0x9, 0x5a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x9, 0x6, {0x8, 0x25, 0x1, 0x1, 0x39, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x110, 0x2, 0x1, 0xe, {0x8, 0x25, 0x1, 0x1, 0x0, 0x3, 0x2}}}}}}}}]}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$setsig(0x4203, r5, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) (async) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000040)={0x8, 0x3}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 24.305164067s ago: executing program 3 (id=68): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x10) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c00028005000100000000003c0000802c00018014000300fe80000000000000000000000000000914000400fe8000000000000000000000000000aa0c000280050001000000000008000740000003fc44000d0dec000500fe88000000000000000000000000010108000200e00000010800020064010100080002006401010014000400fc00"/216], 0xd8}}, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501537259aa4ec8ae1a34347a8d740913020a4cc98e84344c9871ba8ef26e66feb994bacf799d1da996f3119270593184948bfb2a441fd39de13eebbc571dd215e1e1c8503c734fa55e2d9a", @ANYRES8], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r4, 0x0, 0xffffffffbfff8000, 0x0) (async) write$P9_RLERRORu(r4, 0x0, 0xe) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) (async) syz_usb_control_io(r0, 0x0, 0x0) 9.018147853s ago: executing program 32 (id=68): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x10) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c00028005000100000000003c0000802c00018014000300fe80000000000000000000000000000914000400fe8000000000000000000000000000aa0c000280050001000000000008000740000003fc44000d0dec000500fe88000000000000000000000000010108000200e00000010800020064010100080002006401010014000400fc00"/216], 0xd8}}, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501537259aa4ec8ae1a34347a8d740913020a4cc98e84344c9871ba8ef26e66feb994bacf799d1da996f3119270593184948bfb2a441fd39de13eebbc571dd215e1e1c8503c734fa55e2d9a", @ANYRES8], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r4, 0x0, 0xffffffffbfff8000, 0x0) (async) write$P9_RLERRORu(r4, 0x0, 0xe) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) (async) syz_usb_control_io(r0, 0x0, 0x0) 6.738754917s ago: executing program 1 (id=161): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000180)={0x0, 0x7, 0x4, "451db7d3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x8000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbdb], 0x5000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.791580247s ago: executing program 1 (id=183): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) (async) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0xea60}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000140)={{0x77359400}, {r7, r8/1000+10000}}, 0x0) 3.73085797s ago: executing program 1 (id=186): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x172) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000500)) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r2, &(0x7f0000000380)={0xffffffffffff0001, 0x6, 0x1, 0x5}) write(r1, &(0x7f00000002c0)='- ', 0x2) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r1]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0x0200', 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./config/usb_gadget/g1/bcdUSB\x00', &(0x7f0000000100), 0x8000, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './config/usb_gadget/g1/functions/hid.usb0/subclass'}}, {@nfs_export_off}, {@verity_require}, {@verity_off}, {@xino_off}, {@uuid_null}], [{@uid_lt={'uid<', r3}}, {@obj_role}, {@pcr={'pcr', 0x3d, 0x1e}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '\xfb.]+,^},\\])'}}]}) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r9, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x2020) 3.662085094s ago: executing program 0 (id=188): setreuid(0x0, 0xee01) mmap$IORING_OFF_CQ_RING(0x0, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mlockall(0x1) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x1, @tid=r0}, &(0x7f00000000c0)) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xf, 0xfffffff0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)={0x1c, 0x18, 0x15, 0x70bd28, 0xfefffbff, "", [@typed={0xa, 0xe0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}]}, 0x1c}], 0x1, 0x0, 0x0, 0x40800}, 0x0) 3.661520194s ago: executing program 0 (id=190): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) (async) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0x0) (rerun: 32) sendfile(r1, r1, 0x0, 0x4) (async) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44) (rerun: 32) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x4) (async, rerun: 64) dup3(r2, r0, 0x0) (async, rerun: 64) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.551103367s ago: executing program 1 (id=191): clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3, &(0x7f00000011c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003280)=""/7, 0x7}, {&(0x7f00000032c0)=""/159, 0x9f}], 0x2, &(0x7f00000033c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000003480), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003500)=""/170, 0xaa}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003600)=""/250, 0xfa}], 0x1, &(0x7f0000003740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003800)=""/132, 0x84}, {&(0x7f00000038c0)=""/102, 0x66}, {&(0x7f0000003940)=""/70, 0x46}, {&(0x7f00000039c0)=""/148, 0x94}, {&(0x7f0000003a80)=""/156, 0x9c}, {&(0x7f0000003b40)=""/9, 0x9}, {&(0x7f0000003b80)=""/40, 0x28}], 0x7}}], 0x6, 0x40, &(0x7f0000003e00)={r0, r1+10000000}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r14, 0xc400941d, &(0x7f0000003e40)={0x0, 0x7, 0xae94, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000004240)={r16, "9723ff4e0899ed4265495d4f07e7874f"}) sendmsg$nl_xfrm(r10, &(0x7f0000006400)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000063c0)={&(0x7f0000005280)=@newae={0x1118, 0x1e, 0x300, 0x70bd29, 0x25dfdbff, {{@in=@multicast2, 0x4d2, 0xa, 0xff}, @in=@private=0xa010100, 0x7, 0x3502}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5025}, @algo_crypt={0x4d, 0x2, {{'ctr(des3_ede)\x00'}, 0x28, "7b0cbb9515"}}, @mark={0xc, 0x15, {0x350759, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@empty, 0x0, 0xa}}, @algo_comp={0x1048, 0x3, {{'lzs\x00'}, 0x8000, "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"}}]}, 0x1118}, 0x1, 0x0, 0x0, 0x841}, 0x4000001) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000006500)={&(0x7f0000006440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000064c0)={&(0x7f0000006480)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x20000801) r17 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r17, 0x11b, 0x5, &(0x7f0000006540)=0x100002, 0x4) write$binfmt_aout(r5, &(0x7f0000006580)={{0x107, 0x1, 0x94, 0x3c6, 0x27, 0x2, 0x2ee, 0x5}, "df8717ce98d221a4e3bbe12501995b648fa54c26f26947531ad8e944452ff33cf920d9752b2d3da75a1c282886bbb44e8878b26f9ac8b4a6b0047bb9e906b6be8a17bab5735d5042474e553978e6379f90147a03e9114eb72ee9f84d0d94401ec6abeac0da4148339333977f926f0f68609e15284a7a482f11b3d2a32b0e014209ecdfcce8111ce1f740ca3332adfb259820e906416ab80928c7dccfd454a2ab107c8db75eaa3fd3151926ff44f40662cfa5ad783e3d228985cbf616c1a64566023f111365a3144379db08e7ed", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ed) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006fc0), r8) sendmsg$NL80211_CMD_SET_WDS_PEER(r11, &(0x7f00000070c0)={&(0x7f0000006f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007080)={&(0x7f0000007000)={0x58, r18, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4918cbb8ee2a"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ff082e8119c6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a20d32316f14"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="edc2b26ccc60"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) sendmsg$nl_xfrm(r8, &(0x7f0000007200)={&(0x7f0000007100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000071c0)={&(0x7f0000007140)=@flushsa={0x58, 0x1c, 0x800, 0x70bd27, 0x25dfdbfb, {0xe7}, [@iptfs_reorder_window={0x6, 0x25, 0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xca}, @iptfs_pkt_size={0x8, 0x29, 0x8}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd29, 0x70bd2c, 0x70bd2b, 0x2}}, @proto={0x5, 0x19, 0x2b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x840) recvfrom(r9, &(0x7f0000007240)=""/35, 0x23, 0x12100, &(0x7f0000007280)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80) r19 = accept$packet(r10, &(0x7f0000007300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000007340)=0x14) recvmmsg(r19, &(0x7f000000b800)=[{{&(0x7f0000007380)=@hci, 0x80, &(0x7f0000008480)=[{&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008400)=""/37, 0x25}, {&(0x7f0000008440)=""/37, 0x25}], 0x3, &(0x7f00000084c0)=""/219, 0xdb}, 0x4}, {{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f00000085c0)=""/18, 0x12}, {&(0x7f0000008600)=""/161, 0xa1}], 0x2}, 0x8b41}, {{&(0x7f0000008700)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000009b00)=[{&(0x7f0000008780)=""/101, 0x65}, {&(0x7f0000008800)=""/4096, 0x1000}, {&(0x7f0000009800)=""/41, 0x29}, {&(0x7f0000009840)=""/225, 0xe1}, {&(0x7f0000009940)=""/102, 0x66}, {&(0x7f00000099c0)=""/207, 0xcf}, {&(0x7f0000009ac0)=""/33, 0x21}], 0x7, &(0x7f0000009b80)=""/214, 0xd6}, 0x4}, {{&(0x7f0000009c80)=@isdn, 0x80, &(0x7f0000009f40)=[{&(0x7f0000009d00)=""/5, 0x5}, {&(0x7f0000009d40)=""/160, 0xa0}, {&(0x7f0000009e00)=""/200, 0xc8}, {&(0x7f0000009f00)=""/34, 0x22}], 0x4, &(0x7f0000009f80)=""/6, 0x6}, 0xfffffe4a}, {{&(0x7f0000009fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f000000a140)=[{&(0x7f000000a040)=""/223, 0xdf}], 0x1, &(0x7f000000a180)=""/186, 0xba}, 0x2}, {{&(0x7f000000a240)=@phonet, 0x80, &(0x7f000000b480)=[{&(0x7f000000a2c0)}, {&(0x7f000000a300)=""/72, 0x48}, {&(0x7f000000a380)=""/4096, 0x1000}, {&(0x7f000000b380)=""/145, 0x91}, {&(0x7f000000b440)=""/43, 0x2b}], 0x5}, 0x2}, {{&(0x7f000000b500)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f000000b700)=[{&(0x7f000000b580)=""/213, 0xd5}, {&(0x7f000000b680)=""/124, 0x7c}], 0x2, &(0x7f000000b740)=""/135, 0x87}, 0x200}], 0x7, 0x40002201, 0x0) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$netlink(r11, &(0x7f000000b9c0), &(0x7f000000ba00)=0xc) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r12, &(0x7f000000bb00)={&(0x7f000000ba40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000bac0)={&(0x7f000000ba80)={0x20, r18, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10, 0x22}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) quotactl_fd$Q_GETQUOTA(r20, 0xffffffff80000702, r15, &(0x7f000000bb40)) ioctl$TCSETS(r7, 0x5402, &(0x7f000000bbc0)={0x6, 0x56d, 0x975, 0x9c80, 0x17, "725ca6ceae1d27020883e60c78aff7c0723712"}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r13, 0x660c) r21 = syz_genetlink_get_family_id$devlink(&(0x7f000000bc40), r2) sendmsg$DEVLINK_CMD_PORT_GET(r13, &(0x7f000000be40)={&(0x7f000000bc00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000be00)={&(0x7f000000bc80)={0x174, r21, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x174}, 0x1, 0x0, 0x0, 0x88c0}, 0x80) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f000000be80)={0x2, 0x7}) r22 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000000bec0), 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r22, 0x4008586f, &(0x7f000000bf00)={0x42, 0x100}) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f000000c000)={&(0x7f000000bf40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000bfc0)={&(0x7f000000bf80)={0x34, r21, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000045) r23 = syz_genetlink_get_family_id$batadv(&(0x7f000000c080), r3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f000000c140)={&(0x7f000000c040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000c100)={&(0x7f000000c0c0)={0x24, r23, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008885}, 0x4800) 3.5353831s ago: executing program 1 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r2}}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7a, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x6, 0x81, {0x7, 0x25, 0x1, 0xe, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 3.33672672s ago: executing program 0 (id=193): socket$vsock_stream(0x28, 0x1, 0x28) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x110, r0) r1 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000200)={0x0, 0x5fc6, 0x1, 0xfbffffff, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x100) write$P9_RUNLINKAT(r7, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r8 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r8, 0x100000000000011, 0x2000, 0x3) r9 = dup(r6) syz_ublk_setup_queues(r9, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000340)={0x1000001, 0x4}, 0x8) 3.28860362s ago: executing program 4 (id=196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff, 0xa}, {@in=@local, 0x4d4, 0x32}, @in6=@private2, {0x200000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0x2, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @extra_flags={0x8, 0x18, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x40082) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setuid(0xee01) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001640)={0x14, r2, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000000)='\x00', &(0x7f0000000040)='\x02\x00', 0x7f}) 3.255972107s ago: executing program 4 (id=197): timer_create(0x8, &(0x7f0000000080)={0x0, 0x35, 0x0, @thr={&(0x7f00000000c0)="1f59c92bf04d2580490bad123703f3117cf07c000200000000fd1fab0000cba116", 0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x7}]}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x11, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6}}) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 3.169052105s ago: executing program 0 (id=198): r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0, 0xa8, 0x3b}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'cmac-aes-ce\x00'}}, &(0x7f0000000100)="ae53ddba4fb5f240406b8de215bab170c74734a868afe8ae651b4ccac1ac8574d39895bdfeb7733c522fe079d03c56f02a66bc97223e54dad2382379fddb98867e6e869ec6269c07aab3a982bf67a399094cbf10684fccc96573f3fb7b8872985f8469079e3430db96246dade07eaa6efd7d5edda940257c24fa14d2c9690732286664a1b4381f215a9fda824868cfd321b920f33d079496817842297cb39a8818c2362b2e392025", &(0x7f00000001c0)="54e94e1ef8ebba11870e18d187acf251174bc8af5151f578525f83b1503199fa9215f902f8b73a2dae42f8c4d2d3eaae023324e4a25de82ec107ec") 3.168618885s ago: executing program 4 (id=199): setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080), 0x0, 0x55, 0x3) socket$inet_udp(0x2, 0x2, 0x0) lremovexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00') 3.168092485s ago: executing program 0 (id=200): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) (async, rerun: 64) mount$binderfs(&(0x7f0000000240), &(0x7f0000000300)='./binderfs2\x00', &(0x7f0000000340), 0x800, &(0x7f0000000380)={[{@stats}]}) mount$incfs(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes}]}) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000800)="b874008ee8b826000f00d0b80c000f00d066b8010000000f01c1baf80c66b8eca0398266efbafc0c66b80c00000066ef0f01c2260f01c50f01c90f01c3f367dfba00000000", 0x45}], 0x1, 0x44, 0x0, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) (async) lsm_set_self_attr(0x66, 0x0, 0x22, 0x20) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20, 0x169}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) (rerun: 64) syz_usb_connect(0x5, 0x41, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x1, 0xc9, 0x4d, 0x8, 0x5bfe, 0xa243, 0x3a07, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe, 0x4, 0x80, 0x72, "", [{{0x9, 0x4, 0xc7, 0x0, 0x3, 0x2, 0x2, 0x3, 0x0, [], [{{0x9, 0x5, 0x2, 0xd1a28720fb9ff637, 0x400, 0x6, 0x81, 0x8, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x7, 0x0, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x3, 0xfe}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x2f, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x403, 0x5, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x8, {0x7, 0x25, 0x1, 0xc, 0x4, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x3, 0x6, "53c7998d6e"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xc, 0x6, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x2, 0x47}]}, {{0x9, 0x5, 0x82, 0x9, 0x7af, 0x0, 0x4, 0x1, {0x7, 0x25, 0x1, 0xc, 0xf, 0x5b}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x4, 0x2, 0x7, 0x10, 0x2}, 0xd0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050fd0000503100b0b100102040005050e0004b3100717c84e04c39838897266170831bfa88e35f9228cba93c815e537814c6a4f280de1fb217faf555a9c38b56731593bf545b0f689b08b084c9499d0fd67a682816cf5a24636d42b79a3689bc3e19c33f9c6580aeceb5a65b8694b74a18848486e3e727b6ec78de7c742f3ad995e62785be7697a28a875ce164e827ffb637c374102ffadbdf3ebd0c1e6c00603844a39d060b1b6c33b738533e53f82448323d9a740fed9a711b9777e70d18461490b0d0e5997605749e96f8a433eee849b551dfce9618d2732e97f5e8294074705282b20d060672c90d732128253a9a33f006d28df179b5de9591df86d3d3eb6b7053f21cb5845111fba10fbee064d595a0e37669f67c87f6d77b6c681eae1"], 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x810}}, {0xf6, &(0x7f0000000700)=@string={0xf6, 0x3, "73a8a6dbdd21014a25779151b3223f0bc2a30c8623f38a3a532c034b55fd106e387d514a96c8431f9e5c27566d07aafc209c4e7890e0e08184a3128d0fc10154ecd5ce75b9c389c1426f60b234e1206055e20c82ee8180282404e333bbdc41dfd8d739984390980af1666dcf3ff24430dee435380e3a276cade1adf106ff7f380b99acf3dffa02d56e0993378e1e1ed272d984a9a683a2681ed4d795eb94097d55169c93febe401fb004f40ea2fa46a43aa3a49b7d00008c25dc893cc24a21844ba37e082aacb35f5223fc9a7ff4aaeb4a872e8c96417e576d20cb4dac58d4b0b7bc3cda4282f93602769821742aedfd3f6dd20e"}}, {0xf0, &(0x7f0000000880)=ANY=[@ANYBLOB="f003ada6c5b2c5e8f6ec03e86164fb34d029a43c3a36e6dc18ed9ff66e4d37867d38b233bb05516aa78f4e3ae19559348ecfe8888afe1d945ab933dbdf6e6719e64ef2001c4eb28709cd31211a4b9655170e1c71e626fe4662b661a3cebd4df5f313e4cdeff7fa40e4983f3cf502d46a42aa9755c9a2a180ff4f8d3cb55803da95a34db244f2ccb7f69eed86195127f14e0ea2dccb65f3863132c9e2b860ccf77f381d57668f156e50be70008abb0884190784ea4558a827dbfd307b1a0b71086e9e8fe8807929014ff0ccd74f0da42e2d18412e0c603400df5dea68ab8ddeba9d2d088c85c455f446794becba779397f5a06b96e0af757061458a60def94d8a3858e56b5a2cc6eae9f498a493b6d1476a169f53189dfce1831bc531c41f8bc6f63bd3d2cc4d335fa2b0384fd8f88580eed5e0d0880e354d0c0e5267fd80c6fec55e19a5a7758068353f7ad9d4f6e47c778a2a74b80249f71fe73484871d63957e501e62cb367649e9179c9f4166a36f90c896b2409d62c214adc888c124dec3c9c0a3ded2b412a136fe1806f7e0b97ef3519df68ccaa6206ad06d10f358a0a636be0848dfe65bf9d052b5c021b6382e448cd48422ea3d93c2035706fb9dc31369fe7696"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x445}}]}) 3.163251826s ago: executing program 4 (id=201): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/anycast6\x00') r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) write$P9_RVERSION(r2, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff9}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1b}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x12e}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r4 = socket$key(0xf, 0x3, 0x2) readahead(r4, 0x5, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x880) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000480)) fcntl$setflags(r1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x84204200}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x31}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "ed922c43b1a921b5e6"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0ad5f1d9133ef67759ab66eeb8"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "09de0ef680e208ab11c15a9e02"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0xb4}}, 0x4000) write$P9_RLERRORu(r2, &(0x7f0000000680)={0xd, 0x7, 0x1, {{}, 0x5}}, 0xd) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r2) r8 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd4, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdir(&(0x7f00000008c0)='./file0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xa, 0xb, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x40, 0xfffffffe, 0xa}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xa, 0x7fffffff, 0x24, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x10, 0x7, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000b80)={&(0x7f0000000900), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff07b45a531ddbb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000c40)={@empty, @initdev, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xec, r11, 0xc, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040}, 0xc010) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000000e40)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000e80), 0x4) write(r8, &(0x7f0000000ec0)="f420d926e975a0cf28c99ea416d1b0a3835740a74ce40be178bc4f68ca095e7211112b522494d587981424727835ad8020581d26b77844554ff9125aa03fd29b113e185fc442f90acd", 0x49) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000f40)=""/4096, &(0x7f0000001f40)=0x1000) 2.984354063s ago: executing program 4 (id=203): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000480)=[{0x6, 0x2, 0x4, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRES64=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x201c}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xa000001c}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x20, 0xa, 0x2, {0x2, 0xf}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x2, 0x8, "5abe8886", "2094a39f"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0x4, 0xbd, 0x7, 0x8, 0xc}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0xe, 0x4a, "afd4c8e1857186bbbfee231da66e1fc3370f85e50e03492ecf1a113c48b7a2c1a9cd267a6d851252903952c6478531dba39fb02c8469ba2d5daa0dc3e4dbbf510366f3f25a3f05954601"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x6}}) 2.261206899s ago: executing program 1 (id=204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x10, 0xc, 0x0, 0x2, 0x6}}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3b, 0x0, 0x5}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xffffbf17, 0x5, [0x1f449489, 0x0, 0x10000, 0x3ff, 0x0, 0x0, 0x6, 0x1, 0x9, 0x7a]}}) 971.224602ms ago: executing program 2 (id=205): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="53011003c4030020f905ffff5b0100020301fe0b19ce46db7c08fd7df20902240001fe813032050b02ff0300"/57], &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) 300.431259ms ago: executing program 2 (id=206): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futex(0x0, 0x4, 0x2, 0x0, &(0x7f0000000000)=0x1, 0x2) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) futex(0x0, 0x4, 0x2, 0x0, &(0x7f0000000000)=0x1, 0x2) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) (async) socket$inet6(0xa, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000580)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0x3c) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) (async) 300.141549ms ago: executing program 2 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0xc000, 0x4, 0x0, 0x5, 0x0, [{0x4, 0x8, 0x1, '\x00', 0x2}, {0xd, 0x1, 0xf1, '\x00', 0x7}, {0x8, 0xd, 0x3, '\x00', 0xff}, {0x2, 0x6, 0x4, '\x00', 0x7}, {0x5, 0x40, 0x8, '\x00', 0x3}, {0x0, 0xf, 0x7f}, {0xb, 0x8, 0x7, '\x00', 0x40}, {0x9, 0x8, 0x1, '\x00', 0x2}, {0x6, 0x8, 0x7, '\x00', 0x3}, {0x51, 0xb5, 0xfb, '\x00', 0xc0}, {0x7, 0x4, 0x3, '\x00', 0x3}, {0x8, 0x70, 0x4, '\x00', 0x2}, {0x6, 0x3c, 0x4, '\x00', 0x7}, {0x3, 0x7, 0x8, '\x00', 0x36}, {0xed, 0x1, 0x8d, '\x00', 0xdd}, {0x7, 0x0, 0x1, '\x00', 0x5}, {0x8, 0x6, 0x85, '\x00', 0xc3}, {0x3, 0x0, 0x0, '\x00', 0x44}, {0xf8, 0x8, 0xd, '\x00', 0x28}, {0x9, 0x0, 0x7, '\x00', 0xe}, {0x0, 0x6, 0x2, '\x00', 0x9}, {0x7, 0xf9, 0x3d, '\x00', 0x7}, {0xa, 0xff, 0x83, '\x00', 0x2}, {0x20, 0x81, 0xc0, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0xb0, 0x0, 0x8, 0x4, 0x7, 0x2, 0xbc, 0x94, 0x0, 0xd, 0x5, 0x7, 0x3, 0xb, 0x80, 0x9}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 278.014344ms ago: executing program 2 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000021000100fffffffffefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000e2f040000fc020000000015000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ac1414aa0000000000000000000000006c010000000000000a00"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000021000100fffffffffefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000e2f040000fc020000000015000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ac1414aa0000000000000000000000006c010000000000000a00"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 250.06931ms ago: executing program 2 (id=209): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r8}}], 0x1, 0x0, 0x0) 128.467674ms ago: executing program 0 (id=210): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x10) (async, rerun: 32) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) inotify_init() (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x5, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x1, 0x1000002, 0x91, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf27, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x0, 0x26d}}], 0x1, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (rerun: 32) 73.274066ms ago: executing program 2 (id=211): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x6, 0x6}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000000)={0x20001, 0x0, {[0x4, 0x1, 0x1, 0xe, 0x6, 0x130c, 0x2]}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x6000005, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=212): syz_usb_connect$uac3(0x0, 0xa7, &(0x7f00000014c0)=ANY=[@ANYBLOB="12015002000000206d04f5084000010203c869644d000301a6a000080b0001010130060904000000010130000a2401003100b7b2000014240202030204d005000000950003004600000e1324030102030501020004000000000500080009040100000102300009040101010102300009050109ff030e08060a25250000000008a10009040200000102300009040201010102300009058209df0706040000002502000000110200"], &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x2, 0x2}, 0x20) iopl(0x3) ioperm(0xe, 0x3, 0xb4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000008340)={0x2020}, 0x2020) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a6, 0x1004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x8, 0x5, 0x1000, 0x6, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x1, 0x51, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0xfffffffb, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x14000, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x1, 0xd, 0x4, 0x5, 0x7fff, 0x0, 0x1f0, 0xfffffffd, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x2, 0x6, 0x1c, 0x80000000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x5102fac, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x3, 0x1, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x200, 0x0, 0x2000000000903, 0x1, 0xb752, 0xb201}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x2) iopl(0x0) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 28.329293][ T36] audit: type=1400 audit(1790509141.889:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.330373][ T286] cgroup: Unknown subsys name 'net' [ 28.351940][ T36] audit: type=1400 audit(1790509141.889:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.379210][ T36] audit: type=1400 audit(1790509141.919:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.379557][ T286] cgroup: Unknown subsys name 'devices' [ 28.502113][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.507717][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.619985][ T36] audit: type=1400 audit(1790509142.179:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.643175][ T36] audit: type=1400 audit(1790509142.179:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.663896][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.667887][ T36] audit: type=1400 audit(1790509142.189:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.699492][ T36] audit: type=1400 audit(1790509142.239:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.702614][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.724860][ T36] audit: type=1400 audit(1790509142.239:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.759138][ T36] audit: type=1400 audit(1790509142.259:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.784637][ T36] audit: type=1400 audit(1790509142.259:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.060770][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.067823][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.075018][ T293] bridge_slave_0: entered allmulticast mode [ 30.081354][ T293] bridge_slave_0: entered promiscuous mode [ 30.087480][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.094530][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.101633][ T296] bridge_slave_0: entered allmulticast mode [ 30.107784][ T296] bridge_slave_0: entered promiscuous mode [ 30.115081][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.122159][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.129192][ T296] bridge_slave_1: entered allmulticast mode [ 30.135406][ T296] bridge_slave_1: entered promiscuous mode [ 30.150779][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.157805][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.164876][ T293] bridge_slave_1: entered allmulticast mode [ 30.171028][ T293] bridge_slave_1: entered promiscuous mode [ 30.214572][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.221659][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.228738][ T295] bridge_slave_0: entered allmulticast mode [ 30.235012][ T295] bridge_slave_0: entered promiscuous mode [ 30.241419][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.248441][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.255611][ T295] bridge_slave_1: entered allmulticast mode [ 30.261784][ T295] bridge_slave_1: entered promiscuous mode [ 30.299173][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.306242][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.313306][ T294] bridge_slave_0: entered allmulticast mode [ 30.319533][ T294] bridge_slave_0: entered promiscuous mode [ 30.328617][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.335741][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.342811][ T294] bridge_slave_1: entered allmulticast mode [ 30.349039][ T294] bridge_slave_1: entered promiscuous mode [ 30.449622][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.456678][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.463949][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.470972][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.484595][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.491638][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.498877][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.505909][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.514962][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.522003][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.529245][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.536288][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.544388][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.551781][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.559028][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.566068][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.616573][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.625122][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.632402][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.639617][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.647390][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.654619][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.662613][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.669816][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.682854][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.689886][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.702742][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.709772][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.717291][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.724316][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.731887][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.738897][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.747467][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.754516][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.766649][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.773698][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.782965][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.789994][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.819271][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.826324][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.845472][ T293] veth0_vlan: entered promiscuous mode [ 30.867341][ T294] veth0_vlan: entered promiscuous mode [ 30.873619][ T293] veth1_macvtap: entered promiscuous mode [ 30.889595][ T294] veth1_macvtap: entered promiscuous mode [ 30.902053][ T295] veth0_vlan: entered promiscuous mode [ 30.922569][ T296] veth0_vlan: entered promiscuous mode [ 30.943159][ T295] veth1_macvtap: entered promiscuous mode [ 30.955395][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.955995][ T296] veth1_macvtap: entered promiscuous mode [ 31.034137][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.267890][ T313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.320446][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.350546][ T324] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.410268][ T322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.431255][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.442217][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.452149][ T313] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 31.461292][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.470321][ T313] usb 1-1: config 0 descriptor?? [ 31.490359][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 31.496739][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.506386][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 31.515477][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.523726][ T9] usb 3-1: Product: syz [ 31.527978][ T9] usb 3-1: Manufacturer: syz [ 31.532622][ T9] usb 3-1: SerialNumber: syz [ 31.537585][ T324] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.549371][ T324] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 31.560951][ T322] usb 4-1: device descriptor read/64, error -71 [ 31.567373][ T324] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 31.577509][ T324] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 31.586596][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.772315][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.779524][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 31.789187][ T9] usb 3-1: USB disconnect, device number 2 [ 31.800348][ T324] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 31.807850][ T324] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input4 [ 31.824366][ T322] usb 4-1: device descriptor read/64, error -71 [ 31.826509][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.833322][ T324] usb 2-1: USB disconnect, device number 2 [ 31.877568][ T313] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 31.884443][ T313] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 31.891973][ T313] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 31.898753][ T313] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 31.906424][ T313] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 31.913260][ T313] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 31.920032][ T313] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 31.927539][ T313] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 32.090217][ T322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.220202][ T322] usb 4-1: device descriptor read/64, error -71 [ 32.388538][ T342] process 'syz.1.9' launched '/dev/fd/4' with NULL argv: empty string added [ 32.480445][ T322] usb 4-1: device descriptor read/64, error -71 [ 32.590345][ T322] usb usb4-port1: attempt power cycle [ 32.602204][ T324] usb 1-1: USB disconnect, device number 2 [ 32.710225][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 32.840218][ T9] usb 2-1: device descriptor read/64, error -71 [ 32.940580][ T322] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.950460][ T324] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.961397][ T322] usb 4-1: device descriptor read/8, error -71 [ 33.080300][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.091702][ T322] usb 4-1: device descriptor read/8, error -71 [ 33.100271][ T324] usb 1-1: Using ep0 maxpacket: 16 [ 33.106442][ T324] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 33.117607][ T324] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.130596][ T324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 33.137347][ T324] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 33.149021][ T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.157977][ T324] usb 1-1: config 0 descriptor?? [ 33.330413][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 33.350215][ T322] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.370225][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.371177][ T322] usb 4-1: device descriptor read/8, error -71 [ 33.460203][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.511168][ T322] usb 4-1: device descriptor read/8, error -71 [ 33.521531][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.529930][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 33.542339][ T31] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 33.551412][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.559408][ T31] usb 3-1: Product: syz [ 33.563595][ T31] usb 3-1: Manufacturer: syz [ 33.568203][ T31] usb 3-1: SerialNumber: syz [ 33.568794][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.582563][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.592142][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 33.592156][ T36] audit: type=1400 audit(1790509147.159:132): avc: denied { bind } for pid=358 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.595418][ T324] usbhid 1-1:0.0: can't add hid device: -71 [ 33.598256][ T36] audit: type=1400 audit(1790509147.159:133): avc: denied { map } for pid=358 comm="syz.0.14" path="socket:[3667]" dev="sockfs" ino=3667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.617525][ T324] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 33.623423][ T36] audit: type=1400 audit(1790509147.159:134): avc: denied { read write } for pid=358 comm="syz.0.14" path="socket:[3667]" dev="sockfs" ino=3667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.645847][ T322] usb usb4-port1: unable to enumerate USB device [ 33.684468][ T324] usb 1-1: USB disconnect, device number 3 [ 33.740207][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.775198][ T362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 33.787153][ T31] usb 3-1: unit 3 not found! [ 33.795092][ T31] usb 3-1: USB disconnect, device number 3 [ 33.806136][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.860424][ T9] usb usb2-port1: attempt power cycle [ 34.131666][ T36] audit: type=1400 audit(1790509147.699:135): avc: denied { read } for pid=364 comm="syz.0.16" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.154328][ T36] audit: type=1400 audit(1790509147.699:136): avc: denied { open } for pid=364 comm="syz.0.16" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.178093][ T36] audit: type=1400 audit(1790509147.699:137): avc: denied { ioctl } for pid=364 comm="syz.0.16" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.186301][ T366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.211091][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 34.219633][ T36] audit: type=1400 audit(1790509147.699:138): avc: denied { set_context_mgr } for pid=364 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.239200][ T36] audit: type=1400 audit(1790509147.699:139): avc: denied { map } for pid=364 comm="syz.0.16" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.262826][ T36] audit: type=1400 audit(1790509147.749:140): avc: denied { create } for pid=364 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.282530][ T36] audit: type=1400 audit(1790509147.749:141): avc: denied { setopt } for pid=364 comm="syz.0.16" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.303633][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.431270][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.680195][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 34.712074][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.856657][ T9] usb 2-1: device descriptor read/8, error -71 [ 34.965239][ T31] rust_binder: 31:31 release transaction 1 in, still active [ 34.970283][ T9] usb usb2-port1: unable to enumerate USB device [ 35.250660][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.401544][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.409924][ T31] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 35.420088][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.430381][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.439414][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.447417][ T31] usb 1-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺眻ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ? [ 35.471103][ T31] usb 1-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈♁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 35.500236][ T31] usb 1-1: SerialNumber: syz [ 35.533692][ T407] Zero length message leads to an empty skb [ 35.728168][ T31] usb 1-1: USB disconnect, device number 4 [ 35.820253][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.950207][ T324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.970516][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 35.976718][ T45] usb 4-1: config 0 has no interfaces? [ 35.983641][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.992737][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.000746][ T45] usb 4-1: Product: syz [ 36.004921][ T45] usb 4-1: Manufacturer: syz [ 36.009531][ T45] usb 4-1: SerialNumber: syz [ 36.014740][ T45] usb 4-1: config 0 descriptor?? [ 36.111320][ T324] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 36.122465][ T324] usb 3-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 36.132411][ T324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.140746][ T324] usb 3-1: Product: syz [ 36.145081][ T324] usb 3-1: Manufacturer: syz [ 36.149671][ T324] usb 3-1: SerialNumber: syz [ 36.220727][ T45] usb 4-1: USB disconnect, device number 6 [ 36.313376][ T439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.320628][ T439] IPv6: NLM_F_CREATE should be set when creating new route [ 36.327831][ T439] IPv6: NLM_F_CREATE should be set when creating new route [ 36.358231][ T324] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.371733][ T324] usb 3-1: USB disconnect, device number 4 [ 36.620227][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.770913][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 36.777628][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30 [ 36.788513][ T45] usb 1-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.799496][ T45] usb 1-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 36.812511][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.819115][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 36.828187][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.836855][ T45] usb 1-1: config 0 descriptor?? [ 36.845029][ T446] x86/PAT: syz.3.39:446 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 36.854150][ T446] x86/PAT: syz.3.39:446 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 36.875021][ T449] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 37.140205][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.245900][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.252994][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.259844][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.266849][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.273819][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.280197][ T9] usb 3-1: device descriptor read/64, error -71 [ 37.280931][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.293873][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.300734][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.307592][ T45] wacom 0003:056A:0309.0002: unknown main item tag 0x0 [ 37.315168][ T45] wacom 0003:056A:0309.0002: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.0-1/input0 [ 37.453691][ T442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 37.462637][ T442] No source specified [ 37.467240][ T322] usb 1-1: USB disconnect, device number 5 [ 37.473298][ T324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.540223][ T9] usb 3-1: device descriptor read/64, error -71 [ 37.640214][ T324] usb 4-1: Using ep0 maxpacket: 8 [ 37.647612][ T324] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 37.657036][ T324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.665160][ T324] usb 4-1: Product: syz [ 37.669371][ T324] usb 4-1: Manufacturer: syz [ 37.673984][ T324] usb 4-1: SerialNumber: syz [ 37.790216][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.902431][ T324] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.911527][ T324] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.920284][ T9] usb 3-1: device descriptor read/64, error -71 [ 37.928036][ T324] usb 4-1: USB disconnect, device number 7 [ 37.941270][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.160242][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.270361][ T9] usb usb3-port1: attempt power cycle [ 38.447253][ T479] netlink: 'syz.3.49': attribute type 15 has an invalid length. [ 38.454962][ T479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 38.610279][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.641210][ T9] usb 3-1: device descriptor read/8, error -71 [ 38.766067][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 38.766125][ T36] audit: type=1400 audit(1790509152.329:213): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 38.793398][ T9] usb 3-1: device descriptor read/8, error -71 [ 38.865824][ T497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 38.874996][ T36] audit: type=1400 audit(1790509152.429:214): avc: denied { mounton } for pid=496 comm="syz.1.54" path="/file0" dev="ramfs" ino=4662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 38.875359][ T498] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 38.908570][ T36] audit: type=1400 audit(1790509152.469:215): avc: denied { relabelto } for pid=496 comm="syz.1.54" name="/" dev="ramfs" ino=5441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 38.935199][ T36] audit: type=1400 audit(1790509152.469:216): avc: denied { associate } for pid=496 comm="syz.1.54" name="/" dev="ramfs" ino=5441 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 38.982460][ T36] audit: type=1400 audit(1790509152.549:217): avc: denied { create } for pid=502 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.060200][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.067783][ T36] audit: type=1400 audit(1790509152.629:218): avc: denied { setopt } for pid=512 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.103204][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.112934][ T36] audit: type=1400 audit(1790509152.679:219): avc: denied { create } for pid=517 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.132301][ T36] audit: type=1400 audit(1790509152.679:220): avc: denied { connect } for pid=517 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.151675][ T36] audit: type=1400 audit(1790509152.689:221): avc: denied { read write } for pid=517 comm="syz.1.58" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.175564][ T36] audit: type=1400 audit(1790509152.689:222): avc: denied { open } for pid=517 comm="syz.1.58" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.231178][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.350368][ T9] usb usb3-port1: unable to enumerate USB device [ 39.522555][ T520] futex_wake_op: syz.3.59 tries to shift op by 144; fix this program [ 39.531353][ T520] futex_wake_op: syz.3.59 tries to shift op by 144; fix this program [ 39.540110][ T520] futex_wake_op: syz.3.59 tries to shift op by 144; fix this program [ 39.548606][ T520] futex_wake_op: syz.3.59 tries to shift op by 144; fix this program [ 39.556843][ T520] futex_wake_op: syz.3.59 tries to shift op by 144; fix this program [ 39.646183][ T527] SELinux: ebitmap: truncated map [ 39.652985][ T527] SELinux: failed to load policy [ 39.790365][ T541] FAULT_INJECTION: forcing a failure. [ 39.790365][ T541] name failslab, interval 1, probability 0, space 0, times 1 [ 39.803106][ T541] CPU: 0 UID: 0 PID: 541 Comm: syz.1.65 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 39.803133][ T541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.803151][ T541] Call Trace: [ 39.803157][ T541] [ 39.803166][ T541] __dump_stack+0x21/0x30 [ 39.803203][ T541] dump_stack_lvl+0x140/0x1c0 [ 39.803227][ T541] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.803252][ T541] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 39.803272][ T541] ? init_file+0x9e/0x210 [ 39.803289][ T541] ? alloc_empty_file+0xd9/0x270 [ 39.803306][ T541] ? path_openat+0xf4/0x35a0 [ 39.803319][ T541] ? do_sys_openat2+0x134/0x1d0 [ 39.803332][ T541] ? __x64_sys_open+0x120/0x150 [ 39.803345][ T541] ? x64_sys_call+0x131a/0x2ee0 [ 39.803354][ T541] dump_stack+0x19/0x20 [ 39.803366][ T541] should_fail_ex+0x3c2/0x510 [ 39.803379][ T541] should_failslab+0xac/0x100 [ 39.803391][ T541] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 39.803402][ T541] ? __d_alloc+0x42/0x8c0 [ 39.803412][ T541] __d_alloc+0x42/0x8c0 [ 39.803421][ T541] d_alloc_parallel+0xe4/0x1370 [ 39.803432][ T541] ? make_vfsuid+0x4d/0xa0 [ 39.803442][ T541] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 39.803452][ T541] ? security_inode_permission+0x77/0x150 [ 39.803466][ T541] ? try_to_unlazy+0x62a/0xb50 [ 39.803476][ T541] ? __cfi_d_alloc_parallel+0x10/0x10 [ 39.803487][ T541] ? __kasan_check_write+0x18/0x20 [ 39.803497][ T541] ? down_write+0xee/0x2b0 [ 39.803509][ T541] ? __cfi_down_write+0x10/0x10 [ 39.803522][ T541] path_openat+0xa09/0x35a0 [ 39.803537][ T541] ? do_filp_open+0x440/0x440 [ 39.803550][ T541] do_filp_open+0x1f2/0x440 [ 39.803562][ T541] ? __cfi_do_filp_open+0x10/0x10 [ 39.803576][ T541] ? alloc_fd+0x4c1/0x570 [ 39.803589][ T541] do_sys_openat2+0x134/0x1d0 [ 39.803603][ T541] ? fput+0x1a4/0x230 [ 39.803615][ T541] ? do_sys_open+0x100/0x100 [ 39.803629][ T541] ? __cfi_ksys_write+0x10/0x10 [ 39.803639][ T541] ? __kasan_check_write+0x18/0x20 [ 39.803650][ T541] __x64_sys_open+0x120/0x150 [ 39.803663][ T541] x64_sys_call+0x131a/0x2ee0 [ 39.803672][ T541] do_syscall_64+0x57/0xf0 [ 39.803682][ T541] ? clear_bhb_loop+0x50/0xa0 [ 39.803694][ T541] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.803706][ T541] RIP: 0033:0x7f1afe59e159 [ 39.803721][ T541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.803730][ T541] RSP: 002b:00007f1aff4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 39.803748][ T541] RAX: ffffffffffffffda RBX: 00007f1afe825fa0 RCX: 00007f1afe59e159 [ 39.803756][ T541] RDX: 00000000000001d2 RSI: 0000000000060840 RDI: 0000200000000000 [ 39.803763][ T541] RBP: 00007f1afe63506b R08: 0000000000000000 R09: 0000000000000000 [ 39.803770][ T541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.803776][ T541] R13: 00007f1afe826038 R14: 00007f1afe825fa0 R15: 00007fff9d1fdbc8 [ 39.803786][ T541] [ 39.930406][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.123494][ T550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.67'. [ 40.261322][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.271488][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.282383][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.292128][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.304946][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 40.313992][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.330203][ T324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.400201][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.480185][ T324] usb 4-1: Using ep0 maxpacket: 8 [ 40.486350][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.497409][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.507247][ T324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.520058][ T324] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 40.529111][ T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.537819][ T324] usb 4-1: config 0 descriptor?? [ 40.551250][ T9] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 40.559624][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.570509][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 40.579554][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.725543][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.732587][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.739547][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.746657][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.754077][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.760293][ T563] netlink: 180 bytes leftover after parsing attributes in process `syz.3.68'. [ 40.761361][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.777264][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.784375][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.792299][ T9] usb 3-1: string descriptor 0 read error: -71 [ 40.798547][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.804059][ T9] uvcvideo 3-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 40.805730][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.819696][ T9] usb 3-1: Found UVC 1.00 device (046d:0825) [ 40.821528][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.838895][ T9] uvcvideo 3-1:1.1: No supported video formats found. [ 40.842256][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.845859][ T9] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 40.854344][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.867068][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.877036][ T9] usb 3-1: USB disconnect, device number 9 [ 40.877195][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.894881][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.901867][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.908813][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.916058][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.923055][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.930007][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.937025][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.939053][ T577] netlink: 104 bytes leftover after parsing attributes in process `syz.1.75'. [ 40.944004][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.944032][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.966764][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.973754][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.980775][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.987739][ T45] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 40.994849][ T45] lg-g15 0003:046D:C222.0003: unbalanced collection at end of report description [ 41.004138][ T45] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -22 [ 41.015499][ T45] usb 1-1: USB disconnect, device number 6 [ 41.015630][ T582] input: syz1 as /devices/virtual/input/input10 [ 41.032356][ T582] ======================================================= [ 41.032356][ T582] WARNING: The mand mount option has been deprecated and [ 41.032356][ T582] and is ignored by this kernel. Remove the mand [ 41.032356][ T582] option from the mount to silence this warning. [ 41.032356][ T582] ======================================================= [ 41.067379][ T582] No source specified [ 41.205656][ T587] 9pnet_fd: Insufficient options for proto=fd [ 41.305646][ T593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 41.448984][ T604] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.466021][ T603] netlink: 128 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.475028][ T603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.710200][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.840277][ T9] usb 1-1: device descriptor read/64, error -71 [ 42.080199][ T9] usb 1-1: device descriptor read/64, error -71 [ 42.320218][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.435152][ T617] x_tables: duplicate underflow at hook 2 [ 42.450224][ T9] usb 1-1: device descriptor read/64, error -71 [ 42.527719][ T622] FAULT_INJECTION: forcing a failure. [ 42.527719][ T622] name failslab, interval 1, probability 0, space 0, times 0 [ 42.540892][ T622] CPU: 0 UID: 0 PID: 622 Comm: syz.2.88 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 42.540915][ T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.540922][ T622] Call Trace: [ 42.540926][ T622] [ 42.540931][ T622] __dump_stack+0x21/0x30 [ 42.540951][ T622] dump_stack_lvl+0x140/0x1c0 [ 42.540965][ T622] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.540980][ T622] dump_stack+0x19/0x20 [ 42.540992][ T622] should_fail_ex+0x3c2/0x510 [ 42.541005][ T622] should_failslab+0xac/0x100 [ 42.541018][ T622] kmem_cache_alloc_noprof+0x42/0x410 [ 42.541029][ T622] ? alloc_empty_file+0xbf/0x270 [ 42.541041][ T622] ? _raw_spin_unlock+0x45/0x60 [ 42.541052][ T622] alloc_empty_file+0xbf/0x270 [ 42.541065][ T622] ? _raw_spin_unlock+0x45/0x60 [ 42.541077][ T622] alloc_file_pseudo+0x142/0x1f0 [ 42.541090][ T622] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 42.541104][ T622] anon_inode_getfd+0xda/0x1d0 [ 42.541118][ T622] __se_sys_landlock_create_ruleset+0x3dd/0x4b0 [ 42.541131][ T622] ? __x64_sys_landlock_create_ruleset+0xa0/0xa0 [ 42.541143][ T622] ? __kasan_check_write+0x18/0x20 [ 42.541153][ T622] ? fpregs_restore_userregs+0x11c/0x260 [ 42.541166][ T622] __x64_sys_landlock_create_ruleset+0x7f/0xa0 [ 42.541178][ T622] x64_sys_call+0x2848/0x2ee0 [ 42.541188][ T622] do_syscall_64+0x57/0xf0 [ 42.541197][ T622] ? clear_bhb_loop+0x50/0xa0 [ 42.541210][ T622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.541221][ T622] RIP: 0033:0x7f979b99e159 [ 42.541231][ T622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.541240][ T622] RSP: 002b:00007f979a3e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 42.541252][ T622] RAX: ffffffffffffffda RBX: 00007f979bc25fa0 RCX: 00007f979b99e159 [ 42.541260][ T622] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000200000000040 [ 42.541267][ T622] RBP: 00007f979ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 42.541273][ T622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.541280][ T622] R13: 00007f979bc26038 R14: 00007f979bc25fa0 R15: 00007fffdeeb0868 [ 42.541288][ T622] [ 42.900204][ T9] usb 1-1: device descriptor read/64, error -71 [ 43.011082][ T9] usb usb1-port1: attempt power cycle [ 43.350229][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 43.371151][ T9] usb 1-1: device descriptor read/8, error -71 [ 43.501148][ T9] usb 1-1: device descriptor read/8, error -71 [ 43.740201][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 43.761164][ T9] usb 1-1: device descriptor read/8, error -71 [ 43.891175][ T9] usb 1-1: device descriptor read/8, error -71 [ 44.000287][ T9] usb usb1-port1: unable to enumerate USB device [ 44.466268][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 44.466284][ T36] audit: type=1400 audit(1790509158.029:263): avc: denied { mounton } for pid=630 comm="syz.0.92" path="/12/tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.474294][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.650190][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 44.658060][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.666352][ T45] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 44.673937][ T45] usb 2-1: can't read configurations, error -71 [ 44.850462][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 44.980194][ T31] usb 1-1: device descriptor read/64, error -71 [ 45.167937][ T36] audit: type=1400 audit(1790509158.729:264): avc: denied { mounton } for pid=639 comm="syz.1.94" path="/35/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 45.220212][ T31] usb 1-1: device descriptor read/64, error -71 [ 45.470196][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 45.510203][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.600194][ T31] usb 1-1: device descriptor read/64, error -71 [ 45.660178][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 45.666609][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.675348][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.682935][ T45] usb 2-1: can't read configurations, error -61 [ 45.689304][ T45] usb usb2-port1: attempt power cycle [ 45.840200][ T31] usb 1-1: device descriptor read/64, error -71 [ 45.890505][ T324] usbhid 4-1:0.0: can't add hid device: -32 [ 45.896509][ T324] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 45.950316][ T31] usb usb1-port1: attempt power cycle [ 46.030213][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.050560][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 46.056974][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.065736][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.073324][ T45] usb 2-1: can't read configurations, error -61 [ 46.200252][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.220718][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 46.227055][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.235984][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.243595][ T45] usb 2-1: can't read configurations, error -61 [ 46.250006][ T45] usb usb2-port1: unable to enumerate USB device [ 46.291564][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 46.321193][ T31] usb 1-1: device descriptor read/8, error -71 [ 46.451253][ T31] usb 1-1: device descriptor read/8, error -71 [ 46.540206][ T324] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.670230][ T324] usb 3-1: device descriptor read/64, error -71 [ 46.690220][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 46.711198][ T31] usb 1-1: device descriptor read/8, error -71 [ 46.841249][ T31] usb 1-1: device descriptor read/8, error -71 [ 46.910234][ T324] usb 3-1: device descriptor read/64, error -71 [ 46.950319][ T31] usb usb1-port1: unable to enumerate USB device [ 47.150211][ T324] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.280278][ T324] usb 3-1: device descriptor read/64, error -71 [ 47.520843][ T324] usb 3-1: device descriptor read/64, error -71 [ 47.630299][ T324] usb usb3-port1: attempt power cycle [ 47.910210][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.980323][ T324] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.011181][ T324] usb 3-1: device descriptor read/8, error -71 [ 48.061195][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.072585][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 48.081651][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.089638][ T45] usb 1-1: Product: syz [ 48.093812][ T45] usb 1-1: Manufacturer: syz [ 48.098398][ T45] usb 1-1: SerialNumber: syz [ 48.104931][ T45] ipheth 1-1:1.0: Unable to find alternate settings interface [ 48.151214][ T324] usb 3-1: device descriptor read/8, error -71 [ 48.390292][ T324] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 48.411211][ T324] usb 3-1: device descriptor read/8, error -71 [ 48.541253][ T324] usb 3-1: device descriptor read/8, error -71 [ 48.600254][ T322] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.650315][ T324] usb usb3-port1: unable to enumerate USB device [ 48.657635][ T654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.666458][ T654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.750213][ T322] usb 2-1: Using ep0 maxpacket: 16 [ 48.756444][ T322] usb 2-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30 [ 48.767309][ T322] usb 2-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.778351][ T322] usb 2-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 48.791755][ T322] usb 2-1: config 0 interface 0 has no altsetting 0 [ 48.798346][ T322] usb 2-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 48.807381][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.815884][ T322] usb 2-1: config 0 descriptor?? [ 49.025856][ T36] audit: type=1400 audit(1790509162.589:265): avc: denied { mounton } for pid=652 comm="syz.1.99" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 49.222803][ T322] usbhid 2-1:0.0: can't add hid device: -32 [ 49.228762][ T322] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 49.316877][ T36] audit: type=1400 audit(1790509162.879:266): avc: denied { mounton } for pid=660 comm="syz.2.100" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 49.541934][ T36] audit: type=1400 audit(1790509163.109:267): avc: denied { read } for pid=95 comm="acpid" name="event#" dev="devtmpfs" ino=478 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 49.563506][ T36] audit: type=1400 audit(1790509163.109:268): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=478 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 49.586057][ T36] audit: type=1400 audit(1790509163.109:269): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=478 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 50.067055][ T667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'. [ 50.105370][ T36] audit: type=1400 audit(1790509163.669:270): avc: denied { write } for pid=666 comm="syz.2.103" path="socket:[6768]" dev="sockfs" ino=6768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.226263][ T674] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.251158][ T36] audit: type=1400 audit(1790509163.819:271): avc: denied { connect } for pid=672 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.381381][ T684] rust_binder: 683:684 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 50.389331][ T684] rust_binder: 683:684 performed invalid weak decrement on ref [ 50.397055][ T684] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 50.397879][ T36] audit: type=1400 audit(1790509163.959:272): avc: denied { ioctl } for pid=683 comm="syz.2.107" path="socket:[6780]" dev="sockfs" ino=6780 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.398186][ T324] rust_binder: 683: undelivered TRANSACTION_ERROR: 29189 [ 50.442983][ T324] rust_binder: 683: undelivered death notification, 0000000000000000 [ 50.461832][ T686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.108'. [ 50.486882][ T36] audit: type=1400 audit(1790509164.049:273): avc: denied { name_bind } for pid=688 comm="syz.2.109" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.510594][ T36] audit: type=1400 audit(1790509164.079:274): avc: denied { node_bind } for pid=688 comm="syz.2.109" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.542066][ T324] usb 1-1: USB disconnect, device number 15 [ 50.673070][ T36] audit: type=1400 audit(1790509164.239:275): avc: denied { create } for pid=701 comm="syz.2.113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.689023][ T702] ./file0: Can't open blockdev [ 50.693826][ T36] audit: type=1400 audit(1790509164.249:276): avc: denied { append } for pid=701 comm="syz.2.113" name="file0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.900258][ T324] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 51.050390][ T324] usb 1-1: Using ep0 maxpacket: 32 [ 51.059181][ T324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.070389][ T324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.080261][ T324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 51.093183][ T324] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 51.102381][ T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.111126][ T324] usb 1-1: config 0 descriptor?? [ 51.279792][ T9] usb 2-1: USB disconnect, device number 11 [ 51.290854][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.430208][ T45] usb 3-1: device descriptor read/64, error -71 [ 51.670207][ T45] usb 3-1: device descriptor read/64, error -71 [ 51.719269][ T324] usbhid 1-1:0.0: can't add hid device: -71 [ 51.725242][ T324] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 51.733968][ T324] usb 1-1: USB disconnect, device number 16 [ 51.920213][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.050234][ T45] usb 3-1: device descriptor read/64, error -71 [ 52.159819][ T745] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 52.234085][ T748] rust_binder: Write failure EINVAL in pid:55 [ 52.234187][ T748] futex_wake_op: syz.0.125 tries to shift op by 144; fix this program [ 52.300202][ T45] usb 3-1: device descriptor read/64, error -71 [ 52.410279][ T45] usb usb3-port1: attempt power cycle [ 52.510241][ T324] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.530219][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 52.661224][ T324] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 52.672414][ T324] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.685261][ T324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 52.691964][ T324] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 52.701124][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.709637][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.720742][ T324] usb 2-1: config 0 descriptor?? [ 52.725750][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.735520][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 52.744679][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.755316][ T9] usb 1-1: config 0 descriptor?? [ 52.760198][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 52.781240][ T45] usb 3-1: device descriptor read/8, error -71 [ 52.911238][ T45] usb 3-1: device descriptor read/8, error -71 [ 52.953911][ T750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 53.150206][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 53.163793][ T750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.173680][ T750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.185102][ T45] usb 3-1: device descriptor read/8, error -71 [ 53.193589][ T324] belkin 0003:050D:3201.0004: unknown main item tag 0x0 [ 53.201782][ T324] belkin 0003:050D:3201.0004: unknown main item tag 0x0 [ 53.209025][ T324] belkin 0003:050D:3201.0004: unknown main item tag 0x0 [ 53.216413][ T324] belkin 0003:050D:3201.0004: unknown main item tag 0x0 [ 53.223643][ T324] belkin 0003:050D:3201.0004: unknown main item tag 0x0 [ 53.231007][ T324] belkin 0003:050D:3201.0004: unknown main item tag 0x0 [ 53.244438][ T9] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 53.252291][ T324] belkin 0003:050D:3201.0004: hiddev96,hidraw0: USB HID v10.03 Device [HID 050d:3201] on usb-dummy_hcd.1-1/input0 [ 53.265495][ T9] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 53.321489][ T45] usb 3-1: device descriptor read/8, error -71 [ 53.340212][ T9] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 53.348126][ T9] hid-steam 0003:28DE:1142.0005: No HID_FEATURE_REPORT submitted - nothing to read [ 53.371284][ T9] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 53.379165][ T9] hid-steam 0003:28DE:1142.0006: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 53.401021][ T66] usb 2-1: USB disconnect, device number 12 [ 53.440363][ T45] usb usb3-port1: unable to enumerate USB device [ 53.461962][ T754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.471276][ T754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.863614][ T66] usb 1-1: USB disconnect, device number 17 [ 53.870620][ T66] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 54.066666][ T767] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 54.150387][ T784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.159490][ T784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.370201][ T405] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 54.386571][ T786] syzkaller1: entered allmulticast mode [ 54.450366][ T66] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 54.531294][ T405] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 54.540016][ T405] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 54.550376][ T405] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 54.559451][ T405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.567478][ T405] usb 2-1: Product: syz [ 54.571657][ T405] usb 2-1: Manufacturer: syz [ 54.576245][ T405] usb 2-1: SerialNumber: syz [ 54.601506][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.609873][ T66] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 54.622220][ T66] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 54.631348][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.639331][ T66] usb 3-1: Product: syz [ 54.643509][ T66] usb 3-1: Manufacturer: syz [ 54.648149][ T66] usb 3-1: SerialNumber: syz [ 54.690254][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 54.785263][ T799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.794925][ T799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.820239][ T9] usb 1-1: device descriptor read/64, error -71 [ 54.843244][ T405] usb 2-1: USB disconnect, device number 13 [ 54.856743][ T66] usb 3-1: unit 1 not found! [ 54.861396][ T66] usb 3-1: unit 7 not found! [ 54.868454][ T66] usb 3-1: USB disconnect, device number 18 [ 54.878748][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.070200][ T9] usb 1-1: device descriptor read/64, error -71 [ 55.310215][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 55.435020][ T36] kauditd_printk_skb: 367 callbacks suppressed [ 55.435037][ T36] audit: type=1400 audit(1790509168.999:644): avc: denied { mounton } for pid=813 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.462589][ T9] usb 1-1: device descriptor read/64, error -71 [ 55.473660][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.480772][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.487815][ T813] bridge_slave_0: entered allmulticast mode [ 55.494074][ T813] bridge_slave_0: entered promiscuous mode [ 55.500489][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.507547][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.514633][ T813] bridge_slave_1: entered allmulticast mode [ 55.520787][ T813] bridge_slave_1: entered promiscuous mode [ 55.555565][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.562639][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.569875][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.576913][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.596287][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.603827][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.613060][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.620124][ T548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.627479][ T324] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 55.637051][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.644134][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.651550][ T66] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 55.666442][ T813] veth0_vlan: entered promiscuous mode [ 55.676637][ T813] veth1_macvtap: entered promiscuous mode [ 55.694491][ T36] audit: type=1400 audit(1790509169.259:645): avc: denied { mounton } for pid=813 comm="syz-executor" path="/root/syzkaller.mvMQ8K/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.730651][ T9] usb 1-1: device descriptor read/64, error -71 [ 55.739312][ T36] audit: type=1400 audit(1790509169.299:646): avc: denied { getopt } for pid=817 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.801552][ T66] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.812636][ T66] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.820336][ T324] usb 3-1: Using ep0 maxpacket: 16 [ 55.822834][ T66] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.828580][ T324] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 55.840526][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.849389][ T9] usb usb1-port1: attempt power cycle [ 55.855355][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 55.860500][ T324] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 55.869779][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.880103][ T324] usb 3-1: config 32 has no interface number 0 [ 55.890572][ T66] usb 2-1: config 0 descriptor?? [ 55.894699][ T324] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 55.912632][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.126803][ T45] usb 3-1: USB disconnect, device number 19 [ 56.210269][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 56.231863][ T9] usb 1-1: device descriptor read/8, error -71 [ 56.302144][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.309365][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.316573][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.323869][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.331043][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.338165][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.345296][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.352463][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.359584][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.366728][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.371283][ T9] usb 1-1: device descriptor read/8, error -71 [ 56.373973][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.387397][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.394561][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.401726][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.408842][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.415972][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.423196][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.430353][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.437471][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.444638][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.452143][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.459266][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.466440][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.473623][ T66] logitech 0003:046D:C298.0007: unknown main item tag 0x0 [ 56.481344][ T66] logitech 0003:046D:C298.0007: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 56.492732][ T66] logitech 0003:046D:C298.0007: no inputs found [ 56.502371][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.511223][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.519906][ T66] usb 2-1: USB disconnect, device number 14 [ 56.620452][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 56.651244][ T9] usb 1-1: device descriptor read/8, error -71 [ 56.670989][ T36] audit: type=1400 audit(1790509170.239:647): avc: denied { map } for pid=837 comm="syz.2.151" path="pipe:[1580]" dev="pipefs" ino=1580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 56.781229][ T9] usb 1-1: device descriptor read/8, error -71 [ 56.890354][ T9] usb usb1-port1: unable to enumerate USB device [ 56.960209][ T66] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 57.120209][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 57.126348][ T66] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 57.135291][ T66] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.145402][ T66] usb 3-1: config 0 has no interface number 0 [ 57.151506][ T66] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 57.161354][ T66] usb 3-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.174243][ T66] usb 3-1: config 0 interface 98 has no altsetting 0 [ 57.182439][ T66] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 57.191530][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.199504][ T66] usb 3-1: Product: syz [ 57.203698][ T66] usb 3-1: Manufacturer: syz [ 57.208299][ T66] usb 3-1: SerialNumber: syz [ 57.213676][ T66] usb 3-1: config 0 descriptor?? [ 57.218892][ T841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.226482][ T66] asix 3-1:0.98: probe with driver asix failed with error -22 [ 57.370110][ T36] audit: type=1400 audit(1790509170.929:648): avc: denied { remount } for pid=861 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.403987][ T36] audit: type=1400 audit(1790509170.969:649): avc: denied { search } for pid=866 comm="syz.4.156" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.430826][ T868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.460845][ T868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.564715][ T36] audit: type=1400 audit(1790509171.119:650): avc: denied { mount } for pid=879 comm="syz.1.160" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.590121][ T66] usb 3-1: USB disconnect, device number 20 [ 57.840320][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 57.900234][ T324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 58.001318][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.012372][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.021435][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.030379][ T9] usb 1-1: config 0 descriptor?? [ 58.050412][ T324] usb 2-1: Using ep0 maxpacket: 32 [ 58.056562][ T324] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 58.064698][ T324] usb 2-1: config 0 has no interface number 0 [ 58.072156][ T324] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 58.081242][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.089266][ T324] usb 2-1: Product: syz [ 58.093443][ T324] usb 2-1: Manufacturer: syz [ 58.098064][ T324] usb 2-1: SerialNumber: syz [ 58.104856][ T324] usb 2-1: config 0 descriptor?? [ 58.112328][ T324] smsc95xx v2.0.0 [ 58.238887][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 58.245759][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 58.254497][ T9] usb 1-1: USB disconnect, device number 22 [ 58.289803][ T886] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 58.360195][ T66] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 58.372154][ T36] audit: type=1400 audit(1790509171.939:651): avc: denied { watch watch_reads } for pid=896 comm="syz.4.168" path="/15" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.406014][ T36] audit: type=1400 audit(1790509171.969:652): avc: denied { mounton } for pid=902 comm="syz.4.169" path="/16/mnt" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 58.511656][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 58.512846][ T324] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 58.520086][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.530286][ T324] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.540285][ T66] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.563415][ T66] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 58.572557][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.580579][ T66] usb 3-1: Product: syz [ 58.584759][ T66] usb 3-1: Manufacturer: syz [ 58.589363][ T66] usb 3-1: SerialNumber: syz [ 58.680204][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 58.832229][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.833497][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.844996][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.854250][ T66] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 58.861839][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.883801][ T9] usb 1-1: config 0 descriptor?? [ 58.889712][ T66] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 58.901022][ T66] usb 3-1: USB disconnect, device number 21 [ 58.909611][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.089812][ T878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.098501][ T878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.354345][ T916] ./dev/sda1: Can't lookup blockdev [ 59.360389][ T36] audit: type=1400 audit(1790509172.929:653): avc: denied { append } for pid=913 comm="syz.2.172" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.812208][ T923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 60.023309][ T324] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 60.040275][ T324] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 60.061821][ T324] usb 2-1: USB disconnect, device number 15 [ 60.420048][ T936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=936 comm=syz.2.179 [ 60.432666][ T936] netlink: 'syz.2.179': attribute type 21 has an invalid length. [ 60.459404][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 60.459418][ T36] audit: type=1400 audit(1790509174.019:656): avc: denied { read } for pid=937 comm="syz.2.180" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.470333][ T938] FAULT_INJECTION: forcing a failure. [ 60.470333][ T938] name failslab, interval 1, probability 0, space 0, times 0 [ 60.495034][ T36] audit: type=1400 audit(1790509174.019:657): avc: denied { read } for pid=937 comm="syz.2.180" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.506368][ T938] CPU: 1 UID: 0 PID: 938 Comm: syz.2.180 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 60.506400][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.506411][ T938] Call Trace: [ 60.506417][ T938] [ 60.506423][ T938] __dump_stack+0x21/0x30 [ 60.506453][ T938] dump_stack_lvl+0x140/0x1c0 [ 60.506476][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.506498][ T938] ? number+0xc9d/0xf00 [ 60.506515][ T938] dump_stack+0x19/0x20 [ 60.506537][ T938] should_fail_ex+0x3c2/0x510 [ 60.506560][ T938] should_failslab+0xac/0x100 [ 60.506581][ T938] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 60.506602][ T938] ? sidtab_sid2str_get+0x135/0x360 [ 60.506621][ T938] kmemdup_noprof+0x31/0x80 [ 60.506637][ T938] sidtab_sid2str_get+0x135/0x360 [ 60.506655][ T938] security_sid_to_context_core+0x30d/0x5d0 [ 60.506679][ T938] security_sid_to_context+0x2e/0x50 [ 60.506702][ T938] avc_audit_post_callback+0x117/0x790 [ 60.506724][ T938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 60.506746][ T938] ? __cfi_audit_log_format+0x10/0x10 [ 60.506765][ T938] ? audit_log_untrustedstring+0xea/0x100 [ 60.506782][ T938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 60.506804][ T938] common_lsm_audit+0x14b6/0x18b0 [ 60.506824][ T938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 60.506842][ T938] ? __cfi_common_lsm_audit+0x10/0x10 [ 60.506862][ T938] ? __call_rcu_common+0x53c/0x710 [ 60.506883][ T938] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 60.506902][ T938] slow_avc_audit+0x19f/0x220 [ 60.506922][ T938] ? __cfi_slow_avc_audit+0x10/0x10 [ 60.506943][ T938] ? avc_denied+0x113/0x180 [ 60.506964][ T938] avc_has_extended_perms+0x8c6/0xe60 [ 60.506986][ T938] ? preempt_schedule+0xc5/0xe0 [ 60.507004][ T938] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 60.507025][ T938] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 60.507043][ T938] ? preempt_schedule_thunk+0x1a/0x40 [ 60.507062][ T938] ? try_to_wake_up+0x119e/0x1fd0 [ 60.507084][ T938] ? __cfi_try_to_wake_up+0x10/0x10 [ 60.507105][ T938] ioctl_has_perm+0x39a/0x500 [ 60.507124][ T938] ? has_cap_mac_admin+0xd0/0xd0 [ 60.507144][ T938] selinux_file_ioctl+0x732/0x1480 [ 60.507162][ T938] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 60.507180][ T938] ? path_setxattr+0x1e3/0x5a0 [ 60.507200][ T938] ? do_futex+0x37d/0x510 [ 60.507222][ T938] ? __cfi_do_futex+0x10/0x10 [ 60.507246][ T938] ? __fget_files+0x2bc/0x330 [ 60.507266][ T938] security_file_ioctl+0x87/0x110 [ 60.507284][ T938] __se_sys_ioctl+0x4e/0x1b0 [ 60.507308][ T938] __x64_sys_ioctl+0x7f/0xa0 [ 60.507334][ T938] x64_sys_call+0x1878/0x2ee0 [ 60.507350][ T938] do_syscall_64+0x57/0xf0 [ 60.507367][ T938] ? clear_bhb_loop+0x50/0xa0 [ 60.507388][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.507409][ T938] RIP: 0033:0x7f979b99e159 [ 60.507424][ T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.507439][ T938] RSP: 002b:00007f979a3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.507459][ T938] RAX: ffffffffffffffda RBX: 00007f979bc25fa0 RCX: 00007f979b99e159 [ 60.507473][ T938] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 000000000000000a [ 60.507485][ T938] RBP: 00007f979ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 60.507497][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.507507][ T938] R13: 00007f979bc26038 R14: 00007f979bc25fa0 R15: 00007fffdeeb0868 [ 60.507522][ T938] [ 60.568189][ T948] capability: warning: `syz.0.182' uses deprecated v2 capabilities in a way that may be insecure [ 60.689325][ T968] mmap: syz.0.188 (968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.696223][ T36] audit: type=1400 audit(1790509174.019:658): avc: denied { open } for pid=937 comm="syz.2.180" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.738881][ T976] input: syz0 as /devices/virtual/input/input11 [ 60.742762][ T36] audit: type=1400 audit(1790509174.039:659): avc: denied { ioctl } for pid=937 comm="syz.2.180" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 ssid=135 tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.953487][ T36] audit: type=1400 audit(1790509174.129:660): avc: denied { shutdown } for pid=947 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.974201][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 60.980230][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.989599][ T9] usb 1-1: USB disconnect, device number 23 [ 61.023738][ T36] audit: type=1400 audit(1790509174.589:661): avc: denied { append } for pid=985 comm="syz.0.193" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.047251][ T36] audit: type=1400 audit(1790509174.589:662): avc: denied { create } for pid=990 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.080627][ T991] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 61.099069][ T36] audit: type=1400 audit(1790509174.659:663): avc: denied { ioctl } for pid=993 comm="syz.4.196" path="socket:[9542]" dev="sockfs" ino=9542 ioctlcmd=0x6f04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.130246][ T66] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 61.149319][ T998] capability: warning: `syz.4.197' uses 32-bit capabilities (legacy support in use) [ 61.190460][ T36] audit: type=1400 audit(1790509174.759:664): avc: denied { mounton } for pid=1004 comm="syz.0.200" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.216770][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.216797][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.240479][ T1008] rust_binder: 1004:1008 got transaction to invalid handle 1 [ 61.252232][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.252251][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.252872][ T1008] rust_binder: 1004:1008 transaction call to 0:0 failed ENOENT, code 0 size 0-24 [ 61.260112][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.282760][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.289347][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.295890][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.309489][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.313038][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 61.315980][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.323884][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.341212][ T324] rust_binder: 1004: undelivered TRANSACTION_ERROR: 29201 [ 61.345651][ T66] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 61.357685][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.366893][ T66] usb 2-1: Product: syz [ 61.368881][ T36] audit: type=1326 audit(1790509174.929:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.4.203" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29e5d9e159 code=0x0 [ 61.371266][ T66] usb 2-1: Manufacturer: syz [ 61.400419][ T66] usb 2-1: SerialNumber: syz [ 61.560196][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 61.609071][ T66] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 61.616039][ T66] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 61.623333][ T66] usb 2-1: unable to issue vendor read request (ret = -71) [ 61.630868][ T66] usb 2-1: unable to issue vendor read request (ret = -71) [ 61.638315][ T66] usb 2-1: unable to issue vendor read request (ret = -71) [ 61.645724][ T66] usb 2-1: unable to issue vendor read request (ret = -71) [ 61.656452][ T66] usb 2-1: USB disconnect, device number 16 [ 61.711248][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.722224][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.732128][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.739778][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.745146][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.769687][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.778243][ T31] usb 3-1: config 0 descriptor?? [ 61.790275][ T9] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 61.941263][ T9] usb 1-1: config 14 has an invalid interface number: 199 but max is 0 [ 61.949593][ T9] usb 1-1: config 14 has no interface number 0 [ 61.955810][ T9] usb 1-1: config 14 interface 199 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 61.966779][ T9] usb 1-1: config 14 interface 199 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 61.978744][ T9] usb 1-1: config 14 interface 199 altsetting 0 endpoint 0x7 has invalid maxpacket 32, setting to 8 [ 62.193942][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 62.199931][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 62.209531][ T31] usb 3-1: USB disconnect, device number 22 [ 62.370196][ T324] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 62.500202][ T31] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 62.521237][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.532385][ T324] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.541534][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.550033][ T324] usb 2-1: config 0 descriptor?? [ 62.650945][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 62.659406][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.669531][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 62.678424][ T31] usb 3-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 62.687475][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.697532][ T31] usb 3-1: Found UVC 1.00 device (0000:d970) [ 62.704475][ T31] usb 3-1: No valid video chain found. [ 62.958256][ T324] usbhid 2-1:0.0: can't add hid device: -71 [ 62.964258][ T324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 62.973017][ T324] usb 2-1: USB disconnect, device number 17 [ 63.390199][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 63.408753][ T66] usb 3-1: USB disconnect, device number 23 [ 63.541272][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.552248][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 63.561313][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.569942][ T31] usb 2-1: config 0 descriptor?? [ 64.110022][ T1030] netlink: 108 bytes leftover after parsing attributes in process `syz.2.208'. [ 64.119535][ T1030] netlink: 108 bytes leftover after parsing attributes in process `syz.2.208'. [ 64.204761][ T9] usb 1-1: New USB device found, idVendor=5bfe, idProduct=a243, bcdDevice=3a.07 [ 64.213161][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.213825][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.223020][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.224330][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.242129][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.243465][ T9] usb 1-1: can't set config #14, error -71 [ 64.267054][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.267076][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.277280][ T9] usb 1-1: USB disconnect, device number 24 [ 64.303256][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 64.303294][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 64.308875][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.330910][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 64.333945][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.343783][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.354380][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 64.361718][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.374350][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.388870][ T31] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 64.401519][ T1048] fuse: Bad value for 'fd' [ 64.407468][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 64.425895][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 64.425929][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 64.427813][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.438503][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.442684][ C0] ------------[ cut here ]------------ [ 64.450183][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.451320][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 64.466910][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.471722][ C0] index 127 is out of range for type 'const int[34]' [ 64.471739][ C0] CPU: 0 UID: 0 PID: 316 Comm: udevd Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 64.471765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.471778][ C0] Call Trace: [ 64.471785][ C0] [ 64.471792][ C0] __dump_stack+0x21/0x30 [ 64.471826][ C0] dump_stack_lvl+0x140/0x1c0 [ 64.471853][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.471879][ C0] ? selinux_lsm_setattr+0x216/0x8e0 [ 64.471901][ C0] ? vfs_write+0x3c1/0xfd0 [ 64.471924][ C0] ? __x64_sys_write+0x7f/0x90 [ 64.471945][ C0] dump_stack+0x19/0x20 [ 64.471971][ C0] ubsan_epilogue+0xe/0x40 [ 64.471989][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 64.472020][ C0] aiptek_irq+0x208d/0x2a00 [ 64.472048][ C0] ? _raw_spin_unlock+0x45/0x60 [ 64.472069][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 64.472093][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 64.472116][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 64.472136][ C0] dummy_timer+0xa3f/0x4900 [ 64.472162][ C0] ? ttwu_do_activate+0x345/0x620 [ 64.472189][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.472210][ C0] ? timerqueue_del+0xd7/0x130 [ 64.472237][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 64.472266][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.472287][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 64.472317][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 64.472344][ C0] ? read_tsc+0xd/0x20 [ 64.472370][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 64.472403][ C0] hrtimer_run_softirq+0x159/0x560 [ 64.472422][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 64.472451][ C0] handle_softirqs+0x1aa/0x620 [ 64.472473][ C0] __irq_exit_rcu+0x47/0xb0 [ 64.472496][ C0] irq_exit_rcu+0xd/0x30 [ 64.472515][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 64.472542][ C0] [ 64.472548][ C0] [ 64.472555][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 64.472581][ C0] RIP: 0010:stack_depot_save_flags+0xb3/0x800 [ 64.472614][ C0] Code: 01 c4 29 f8 41 89 f8 41 c1 c0 06 41 31 c0 44 01 e7 45 89 c1 41 c1 c1 08 45 29 c4 45 31 e1 41 01 f8 44 29 cf 44 89 c9 c1 c1 10 <31> f9 45 01 c1 89 c8 c1 c0 13 41 29 c8 44 31 c0 44 01 c9 41 29 c1 [ 64.472631][ C0] RSP: 0018:ffffc9000b79f6f0 EFLAGS: 00000282 [ 64.472649][ C0] RAX: 00000000d17e2847 RBX: 0000000000400dc0 RCX: 0000000003132cb4 [ 64.472664][ C0] RDX: ffffc9000b79f7c0 RSI: 0000000000000008 RDI: 00000000bb831392 [ 64.472678][ C0] RBP: ffffc9000b79f750 R08: 000000002cbd03de R09: 000000002cb40313 [ 64.472693][ C0] R10: 0000000000000010 R11: ffffffff8175a6a0 R12: 00000000a9593a57 [ 64.472708][ C0] R13: 0000000000000020 R14: ffffc9000b79f760 R15: ffffc9000b79f760 [ 64.472724][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.472749][ C0] ? stack_trace_save+0xaa/0x100 [ 64.472773][ C0] kasan_save_track+0x4f/0x80 [ 64.472797][ C0] ? kasan_save_track+0x3e/0x80 [ 64.472818][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 64.472837][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 64.472860][ C0] ? __kmalloc_noprof+0x261/0x510 [ 64.472881][ C0] ? security_prepare_creds+0x66/0x260 [ 64.472903][ C0] ? prepare_creds+0x46d/0x6b0 [ 64.472924][ C0] ? selinux_lsm_setattr+0x216/0x8e0 [ 64.472945][ C0] ? selinux_setprocattr+0x53/0x70 [ 64.472969][ C0] ? security_setprocattr+0x35b/0x380 [ 64.472995][ C0] ? proc_pid_attr_write+0x2aa/0x310 [ 64.473022][ C0] ? vfs_write+0x3c1/0xfd0 [ 64.473042][ C0] ? ksys_write+0x145/0x260 [ 64.473062][ C0] ? __x64_sys_write+0x7f/0x90 [ 64.473083][ C0] ? x64_sys_call+0x271c/0x2ee0 [ 64.473101][ C0] ? do_syscall_64+0x57/0xf0 [ 64.473120][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.473149][ C0] kasan_save_alloc_info+0x3a/0x50 [ 64.473167][ C0] __kasan_kmalloc+0x96/0xb0 [ 64.473191][ C0] __kmalloc_noprof+0x261/0x510 [ 64.473213][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 64.473232][ C0] ? security_prepare_creds+0x66/0x260 [ 64.473254][ C0] security_prepare_creds+0x66/0x260 [ 64.473276][ C0] prepare_creds+0x46d/0x6b0 [ 64.473299][ C0] selinux_lsm_setattr+0x216/0x8e0 [ 64.473321][ C0] ? selinux_lsm_getattr+0x380/0x380 [ 64.473342][ C0] ? __check_object_size+0x54c/0x870 [ 64.473364][ C0] selinux_setprocattr+0x53/0x70 [ 64.473389][ C0] security_setprocattr+0x35b/0x380 [ 64.473422][ C0] proc_pid_attr_write+0x2aa/0x310 [ 64.473449][ C0] ? __cfi_proc_pid_attr_write+0x10/0x10 [ 64.473475][ C0] vfs_write+0x3c1/0xfd0 [ 64.473497][ C0] ? __cfi_vfs_write+0x10/0x10 [ 64.473517][ C0] ? __kasan_slab_free+0x6a/0x80 [ 64.473541][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 64.473561][ C0] ? putname+0x113/0x150 [ 64.473583][ C0] ? putname+0x113/0x150 [ 64.473605][ C0] ? __kasan_check_read+0x15/0x20 [ 64.473625][ C0] ksys_write+0x145/0x260 [ 64.473646][ C0] ? __cfi_ksys_write+0x10/0x10 [ 64.473666][ C0] ? __cfi___x64_sys_utimensat+0x10/0x10 [ 64.473684][ C0] ? __kasan_check_read+0x15/0x20 [ 64.473704][ C0] __x64_sys_write+0x7f/0x90 [ 64.473725][ C0] x64_sys_call+0x271c/0x2ee0 [ 64.473744][ C0] do_syscall_64+0x57/0xf0 [ 64.473763][ C0] ? clear_bhb_loop+0x50/0xa0 [ 64.473787][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.473810][ C0] RIP: 0033:0x7f27094a7407 [ 64.473826][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 64.473843][ C0] RSP: 002b:00007ffff6fb3c90 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 64.473863][ C0] RAX: ffffffffffffffda RBX: 00007f2709ba5880 RCX: 00007f27094a7407 [ 64.473879][ C0] RDX: 000000000000001b RSI: 0000562e02df0200 RDI: 0000000000000008 [ 64.473891][ C0] RBP: 0000562e02df0200 R08: 0000000000000000 R09: 0000000000000000 [ 64.473904][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 64.473917][ C0] R13: 00007f2709ba5770 R14: 00007ffff6fb3ce0 R15: 0000562e02e01f80 [ 64.473935][ C0] [ 64.473941][ C0] ---[ end trace ]--- [ 64.486997][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.495831][ C0] ================================================================== [ 64.495858][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 64.495895][ C0] Read of size 4 at addr ffffffff86705f5c by task udevd/316 [ 64.495911][ C0] [ 64.495918][ C0] CPU: 0 UID: 0 PID: 316 Comm: udevd Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 64.495944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.495963][ C0] Call Trace: [ 64.495971][ C0] [ 64.495979][ C0] __dump_stack+0x21/0x30 [ 64.496012][ C0] dump_stack_lvl+0x140/0x1c0 [ 64.496040][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.496067][ C0] ? __cfi__printk+0x10/0x10 [ 64.496092][ C0] print_address_description+0x71/0x210 [ 64.496121][ C0] print_report+0x4a/0x70 [ 64.496147][ C0] kasan_report+0x162/0x1a0 [ 64.496173][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 64.496202][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 64.496230][ C0] __asan_report_load4_noabort+0x18/0x20 [ 64.496251][ C0] aiptek_irq+0x20ab/0x2a00 [ 64.496278][ C0] ? _raw_spin_unlock+0x45/0x60 [ 64.496312][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 64.496335][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 64.496359][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 64.496379][ C0] dummy_timer+0xa3f/0x4900 [ 64.496406][ C0] ? ttwu_do_activate+0x345/0x620 [ 64.496432][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.496454][ C0] ? timerqueue_del+0xd7/0x130 [ 64.496481][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 64.496510][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.496531][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 64.496562][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 64.496589][ C0] ? read_tsc+0xd/0x20 [ 64.496615][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 64.496641][ C0] hrtimer_run_softirq+0x159/0x560 [ 64.496660][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 64.496687][ C0] handle_softirqs+0x1aa/0x620 [ 64.496709][ C0] __irq_exit_rcu+0x47/0xb0 [ 64.496729][ C0] irq_exit_rcu+0xd/0x30 [ 64.496749][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 64.496775][ C0] [ 64.496782][ C0] [ 64.496789][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 64.496815][ C0] RIP: 0010:stack_depot_save_flags+0xb3/0x800 [ 64.496844][ C0] Code: 01 c4 29 f8 41 89 f8 41 c1 c0 06 41 31 c0 44 01 e7 45 89 c1 41 c1 c1 08 45 29 c4 45 31 e1 41 01 f8 44 29 cf 44 89 c9 c1 c1 10 <31> f9 45 01 c1 89 c8 c1 c0 13 41 29 c8 44 31 c0 44 01 c9 41 29 c1 [ 64.496861][ C0] RSP: 0018:ffffc9000b79f6f0 EFLAGS: 00000282 [ 64.496880][ C0] RAX: 00000000d17e2847 RBX: 0000000000400dc0 RCX: 0000000003132cb4 [ 64.496895][ C0] RDX: ffffc9000b79f7c0 RSI: 0000000000000008 RDI: 00000000bb831392 [ 64.496910][ C0] RBP: ffffc9000b79f750 R08: 000000002cbd03de R09: 000000002cb40313 [ 64.496925][ C0] R10: 0000000000000010 R11: ffffffff8175a6a0 R12: 00000000a9593a57 [ 64.496940][ C0] R13: 0000000000000020 R14: ffffc9000b79f760 R15: ffffc9000b79f760 [ 64.496963][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.496989][ C0] ? stack_trace_save+0xaa/0x100 [ 64.497013][ C0] kasan_save_track+0x4f/0x80 [ 64.497036][ C0] ? kasan_save_track+0x3e/0x80 [ 64.497058][ C0] ? kasan_save_alloc_info+0x3a/0x50 syzkaller[ 64.497077][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 64.497100][ C0] ? __kmalloc_noprof+0x261/0x510 [ 64.497121][ C0] ? security_prepare_creds+0x66/0x260 [ 64.497144][ C0] ? prepare_creds+0x46d/0x6b0 [ 64.497166][ C0] ? selinux_lsm_setattr+0x216/0x8e0 [ 64.497189][ C0] ? selinux_setprocattr+0x53/0x70 [ 64.497212][ C0] ? security_setprocattr+0x35b/0x380 [ 64.497238][ C0] ? proc_pid_attr_write+0x2aa/0x310 [ 64.497266][ C0] ? vfs_write+0x3c1/0xfd0 [ 64.497287][ C0] ? ksys_write+0x145/0x260 [ 64.497307][ C0] ? __x64_sys_write+0x7f/0x90 [ 64.497328][ C0] ? x64_sys_call+0x271c/0x2ee0 [ 64.497348][ C0] ? do_syscall_64+0x57/0xf0 [ 64.497367][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e syzkaller login:[ 64.497397][ C0] kasan_save_alloc_info+0x3a/0x50 [ 64.497417][ C0] __kasan_kmalloc+0x96/0xb0 [ 64.497441][ C0] __kmalloc_noprof+0x261/0x510 [ 64.497462][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 64.497481][ C0] ? security_prepare_creds+0x66/0x260 [ 64.497504][ C0] security_prepare_creds+0x66/0x260 [ 64.497526][ C0] prepare_creds+0x46d/0x6b0 [ 64.497549][ C0] selinux_lsm_setattr+0x216/0x8e0 [ 64.497570][ C0] ? selinux_lsm_getattr+0x380/0x380 [ 64.497591][ C0] ? __check_object_size+0x54c/0x870 [ 64.497615][ C0] selinux_setprocattr+0x53/0x70 [ 64.497640][ C0] security_setprocattr+0x35b/0x380 [ 64.497666][ C0] proc_pid_attr_write+0x2aa/0x310 [ 64.497693][ C0] ? __cfi_proc_pid_attr_write+0x10/0x10 [ 64.497721][ C0] vfs_write+0x3c1/0xfd0 [ 64.497743][ C0] ? __cfi_vfs_write+0x10/0x10 [ 64.497763][ C0] ? __kasan_slab_free+0x6a/0x80 [ 64.497787][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 64.497808][ C0] ? putname+0x113/0x150 [ 64.497831][ C0] ? putname+0x113/0x150 [ 64.497854][ C0] ? __kasan_check_read+0x15/0x20 [ 64.497875][ C0] ksys_write+0x145/0x260 [ 64.497896][ C0] ? __cfi_ksys_write+0x10/0x10 [ 64.497916][ C0] ? __cfi___x64_sys_utimensat+0x10/0x10 [ 64.497936][ C0] ? __kasan_check_read+0x15/0x20 [ 64.497962][ C0] __x64_sys_write+0x7f/0x90 [ 64.497984][ C0] x64_sys_call+0x271c/0x2ee0 [ 64.498003][ C0] do_syscall_64+0x57/0xf0 [ 64.498021][ C0] ? clear_bhb_loop+0x50/0xa0 [ 64.498046][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.498070][ C0] RIP: 0033:0x7f27094a7407 [ 64.498087][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 64.498103][ C0] RSP: 002b:00007ffff6fb3c90 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 64.498123][ C0] RAX: ffffffffffffffda RBX: 00007f2709ba5880 RCX: 00007f27094a7407 [ 64.498139][ C0] RDX: 000000000000001b RSI: 0000562e02df0200 RDI: 0000000000000008 [ 64.498153][ C0] RBP: 0000562e02df0200 R08: 0000000000000000 R09: 0000000000000000 [ 64.498167][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 64.498180][ C0] R13: 00007f2709ba5770 R14: 00007ffff6fb3ce0 R15: 0000562e02e01f80 [ 64.498198][ C0] [ 64.498204][ C0] [ 64.570736][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.574670][ C0] The buggy address belongs to the variable: [ 64.574681][ C0] .str.10+0x5c/0x60 [ 64.591737][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.594269][ C0] [ 64.594278][ C0] The buggy address belongs to the physical page: [ 64.594301][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6705 [ 64.602600][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.604383][ C0] flags: 0x4000(reserved|zone=0) [ 64.615832][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.619602][ C0] raw: 0000000000004000 ffffea000019c148 ffffea000019c148 0000000000000000 [ 64.619624][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 64.631263][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.634796][ C0] page dumped because: kasan: bad access detected [ 64.634826][ C0] page_owner info is not present (never set?) [ 64.650314][ T1048] ./cgroup: Can't lookup blockdev [ 64.653452][ C0] [ 64.653460][ C0] Memory state around the buggy address: [ 64.664743][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.664911][ C0] ffffffff86705e00: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 04 [ 64.677406][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 64.696509][ C0] ffffffff86705e80: f9 f9 f9 f9 00 00 00 00 06 f9 f9 f9 f9 f9 f9 f9 [ 64.696527][ C0] >ffffffff86705f00: 00 00 00 00 00 03 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 64.696538][ C0] ^ [ 64.696552][ C0] ffffffff86705f80: 00 f9 f9 f9 f9 f9 f9 f9 00 02 f9 f9 00 00 00 00 [ 64.702897][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.710548][ C0] ffffffff86706000: 00 03 f9 f9 f9 f9 f9 f9 00 07 f9 f9 00 05 f9 f9 [ 64.710562][ C0] ================================================================== [ 64.710572][ C0] Disabling lock debugging due to kernel taint [ 64.738854][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.742410][ C0] ------------[ cut here ]------------ [ 64.742420][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 64.749083][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.753483][ C0] index 128 is out of range for type 'const int[34]' [ 64.753503][ C0] CPU: 0 UID: 0 PID: 316 Comm: udevd Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 64.753534][ C0] Tainted: [B]=BAD_PAGE [ 64.753541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.753554][ C0] Call Trace: [ 64.753560][ C0] [ 64.753568][ C0] __dump_stack+0x21/0x30 [ 64.753603][ C0] dump_stack_lvl+0x140/0x1c0 [ 64.753629][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.753656][ C0] ? input_event_dispose+0x2f5/0x6d0 [ 64.753679][ C0] dump_stack+0x19/0x20 [ 64.753704][ C0] ubsan_epilogue+0xe/0x40 [ 64.753722][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 64.753753][ C0] aiptek_irq+0x1f3c/0x2a00 [ 64.753783][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 64.753806][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 64.753828][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 64.753855][ C0] dummy_timer+0xa3f/0x4900 [ 64.753882][ C0] ? ttwu_do_activate+0x345/0x620 [ 64.753908][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.753929][ C0] ? timerqueue_del+0xd7/0x130 [ 64.753962][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 64.753992][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.754013][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 64.754043][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 64.754070][ C0] ? read_tsc+0xd/0x20 [ 64.754097][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 64.754123][ C0] hrtimer_run_softirq+0x159/0x560 [ 64.754142][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 64.754171][ C0] handle_softirqs+0x1aa/0x620 [ 64.754193][ C0] __irq_exit_rcu+0x47/0xb0 [ 64.754213][ C0] irq_exit_rcu+0xd/0x30 [ 64.754231][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 64.754257][ C0] [ 64.754263][ C0] [ 64.754271][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 64.754297][ C0] RIP: 0010:stack_depot_save_flags+0xb3/0x800 [ 64.754325][ C0] Code: 01 c4 29 f8 41 89 f8 41 c1 c0 06 41 31 c0 44 01 e7 45 89 c1 41 c1 c1 08 45 29 c4 45 31 e1 41 01 f8 44 29 cf 44 89 c9 c1 c1 10 <31> f9 45 01 c1 89 c8 c1 c0 13 41 29 c8 44 31 c0 44 01 c9 41 29 c1 [ 64.754342][ C0] RSP: 0018:ffffc9000b79f6f0 EFLAGS: 00000282 [ 64.754359][ C0] RAX: 00000000d17e2847 RBX: 0000000000400dc0 RCX: 0000000003132cb4 [ 64.754374][ C0] RDX: ffffc9000b79f7c0 RSI: 0000000000000008 RDI: 00000000bb831392 [ 64.754389][ C0] RBP: ffffc9000b79f750 R08: 000000002cbd03de R09: 000000002cb40313 [ 64.754404][ C0] R10: 0000000000000010 R11: ffffffff8175a6a0 R12: 00000000a9593a57 [ 64.754418][ C0] R13: 0000000000000020 R14: ffffc9000b79f760 R15: ffffc9000b79f760 [ 64.754434][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.754460][ C0] ? stack_trace_save+0xaa/0x100 [ 64.754483][ C0] kasan_save_track+0x4f/0x80 [ 64.754507][ C0] ? kasan_save_track+0x3e/0x80 [ 64.754529][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 64.754548][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 64.754571][ C0] ? __kmalloc_noprof+0x261/0x510 [ 64.754593][ C0] ? security_prepare_creds+0x66/0x260 [ 64.754615][ C0] ? prepare_creds+0x46d/0x6b0 [ 64.754637][ C0] ? selinux_lsm_setattr+0x216/0x8e0 [ 64.754658][ C0] ? selinux_setprocattr+0x53/0x70 [ 64.754682][ C0] ? security_setprocattr+0x35b/0x380 [ 64.754707][ C0] ? proc_pid_attr_write+0x2aa/0x310 [ 64.754735][ C0] ? vfs_write+0x3c1/0xfd0 [ 64.754754][ C0] ? ksys_write+0x145/0x260 [ 64.754775][ C0] ? __x64_sys_write+0x7f/0x90 [ 64.754795][ C0] ? x64_sys_call+0x271c/0x2ee0 [ 64.754814][ C0] ? do_syscall_64+0x57/0xf0 [ 64.754833][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.754869][ C0] kasan_save_alloc_info+0x3a/0x50 [ 64.754888][ C0] __kasan_kmalloc+0x96/0xb0 [ 64.754913][ C0] __kmalloc_noprof+0x261/0x510 [ 64.754934][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 64.754953][ C0] ? security_prepare_creds+0x66/0x260 [ 64.754975][ C0] security_prepare_creds+0x66/0x260 [ 64.754998][ C0] prepare_creds+0x46d/0x6b0 [ 64.755021][ C0] selinux_lsm_setattr+0x216/0x8e0 [ 64.755043][ C0] ? selinux_lsm_getattr+0x380/0x380 [ 64.755063][ C0] ? __check_object_size+0x54c/0x870 [ 64.755086][ C0] selinux_setprocattr+0x53/0x70 [ 64.755111][ C0] security_setprocattr+0x35b/0x380 [ 64.755137][ C0] proc_pid_attr_write+0x2aa/0x310 [ 64.755165][ C0] ? __cfi_proc_pid_attr_write+0x10/0x10 [ 64.755192][ C0] vfs_write+0x3c1/0xfd0 [ 64.755214][ C0] ? __cfi_vfs_write+0x10/0x10 [ 64.755234][ C0] ? __kasan_slab_free+0x6a/0x80 [ 64.755257][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 64.755278][ C0] ? putname+0x113/0x150 [ 64.755301][ C0] ? putname+0x113/0x150 [ 64.755323][ C0] ? __kasan_check_read+0x15/0x20 [ 64.755343][ C0] ksys_write+0x145/0x260 [ 64.755364][ C0] ? __cfi_ksys_write+0x10/0x10 [ 64.755385][ C0] ? __cfi___x64_sys_utimensat+0x10/0x10 [ 64.755405][ C0] ? __kasan_check_read+0x15/0x20 [ 64.755426][ C0] __x64_sys_write+0x7f/0x90 [ 64.755448][ C0] x64_sys_call+0x271c/0x2ee0 [ 64.755466][ C0] do_syscall_64+0x57/0xf0 [ 64.755485][ C0] ? clear_bhb_loop+0x50/0xa0 [ 64.755510][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.755535][ C0] RIP: 0033:0x7f27094a7407 [ 64.755551][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 64.755567][ C0] RSP: 002b:00007ffff6fb3c90 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 64.755587][ C0] RAX: ffffffffffffffda RBX: 00007f2709ba5880 RCX: 00007f27094a7407 [ 64.755602][ C0] RDX: 000000000000001b RSI: 0000562e02df0200 RDI: 0000000000000008 [ 64.755616][ C0] RBP: 0000562e02df0200 R08: 0000000000000000 R09: 0000000000000000 [ 64.755629][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 64.755642][ C0] R13: 00007f2709ba5770 R14: 00007ffff6fb3ce0 R15: 0000562e02e01f80 [ 64.755658][ C0] [ 64.755665][ C0] ---[ end trace ]--- [ 64.761430][ T1037] rust_binder: Write failure EINVAL in pid:105 [ 66.556031][ T9] usb 2-1: USB disconnect, device number 18 [ 66.562276][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19