last executing test programs: 49.144861465s ago: executing program 0 (id=155): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="83be22bbc8", 0x5}], 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x110, r0, 0x0) r1 = userfaultfd(0x80001) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/xfrm_stat\x00') write$selinux_user(r2, 0x0, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000200)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) (async) symlinkat(&(0x7f0000000380)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00') (async) dup(r3) 49.080878731s ago: executing program 0 (id=156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440), 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r4}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4, @multicast2}, 0x2, 0x0, 0x5}}, 0x2e) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x20000000, r5, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) unshare(0x60000600) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) fchdir(r8) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0xa75, 0x0, 0x7ff}, {0x858, 0x0, 0xffffffff00000000}]}) write(r8, &(0x7f0000000140)="d0ec3efcf137fc93e47bb4e5707dc640f7ec451a3b772b1ff99208544213eafc1a0e7af0d4eb8b63d812ef8236e0e2ac37d4e12941dd64c13b2e4d2494aa922ec9467cfc6ff0d9010549e16454b3af", 0x4f) 48.573032934s ago: executing program 0 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40042, 0x0) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000400)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x4b, &(0x7f00000002c0)={0x200000000000001}, 0x8) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x10) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 32) ftruncate(r8, 0x2000009) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000340)={0x7, 0x10000, 0x8ce, 0x8}, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendfile(r2, r8, 0x0, 0x7ffff004) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x2e7, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 32) connect$pppl2tp(r1, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x3, 0x1, 0x4, 0x2, {0xa, 0x4e20, 0x4, @mcast2, 0x4}}}, 0x3a) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x44040841) 48.42910526s ago: executing program 0 (id=169): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_TDX_CAPABILITIES(r0, 0xc008aeba, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000a00)="17000000040001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b0616", 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a80)='./dev\x00', &(0x7f0000000ac0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/mapper/control\x00', 0x2, 0x82) ioctl(r1, 0xc178fd0c, &(0x7f0000000b40)="04000000000000000000000078010000380100000100000000000000000000000000000000000000003f") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_create_resource$futex(&(0x7f00000009c0)=0x1) futex(r2, 0xc, 0x1, 0x0, 0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'bridge0\x00', 0x0}) madvise(&(0x7f000077f000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1fff}, 0x18, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001140)={0x1002000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[r3], 0x1}, 0x58) 48.427908089s ago: executing program 0 (id=170): keyctl$assume_authority(0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002e40), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003280)={0x101ff, 0x1, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000240), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0x20000014}) poll(&(0x7f0000000300)=[{r5, 0x1009}], 0x1, 0x8000007) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000000)="c20000361e0f01c3660fd2eff30f10f14b4b61020000b80e000000ba000000000f30b98d0200000f32c4e1fa7fd8660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x8, 0x0, [{0x261, 0x0, 0x1}, {0x31b, 0x0, 0xff}, {0x61c, 0x0, 0x2c}, {0x1b0, 0x0, 0x401}, {0xbde, 0x0, 0xbe09af0}, {0xbc1, 0x0, 0x3}, {0xbc5, 0x0, 0xc6}, {0x96ac9a0a, 0x0, 0xa}]}) getsockname$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x1c) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x100002, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r8, 0x40305829, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x5, 0xaa}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000003340)=[@textreal={0x8, &(0x7f0000000040)="baf80c66b8b8b0838a66efbafc0c66ed660f2c81b93b660f383fa70060baf80c66b816a68a8466efbafc0cb8f85fef2e0f3806ddf39066b99802000066b80000008066ba000000000f3064260fc72cb800008ec83b6a5a", 0x57}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 48.361625677s ago: executing program 0 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0x5001}) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x0, 0xea60}}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="03031b003000320006006300000000542fff00000000000000000004ffffac141419ff"], 0x86) 48.32746779s ago: executing program 32 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0x5001}) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x0, 0xea60}}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="03031b003000320006006300000000542fff00000000000000000004ffffac141419ff"], 0x86) 34.963955039s ago: executing program 1 (id=283): dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x40980) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in6=@private2, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000440)={{r3}, 0x0, 0x6, @inherit={0x88, &(0x7f0000000380)={0x0, 0x8, 0x41c, 0x9, {0x10, 0x0, 0x1ff, 0x8000000000000000, 0x3}, [0x6, 0x9, 0x8, 0x7, 0x4, 0x42, 0x6, 0x7]}}, @subvolid=0xb}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f00000002c0)) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x8, 0x4, 0x1, [0xffffffffffffff01]}}) 34.948943771s ago: executing program 1 (id=284): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000001e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000a80)={0x1340, 0x13, 0x10, 0x70bd27, 0x25dfdbfb, {0x9, 0x5, 0x8, 0x81, {0x4e20, 0x4e20, [0x7, 0x8000, 0x6, 0xff], [0x4766, 0x7, 0x1, 0xd], 0x0, [0xff, 0x5]}, 0x10}, [@INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "0d778155d5fdd0f44d820089495aaf897ba3eecf219b6aab92abd0369543d4322a952cd701f8e07d1a2d8786d65e086727152176ece573d0a61cdc521bccdbc8b865310df99f92cada7f732c5ffb00124de56b964de949db24c0ab360e485ff52f0cbe9b84d4c7f39f81dbd8e2aa5867fa5139c6770362dbf0632faad29ff734cd2c604faef731c6daad5b1858a3b38187c3cf97173aa8e766c1fdbaa0ad85d72fe11ce16f75d0a2cda804d715f57bb1cd5b8703f6bc05374b81d54f7bee1ce6be98623ffc8047e743644434567bb245c81029807933f5a1537f50a5fb8864fe63a36401f49eaf907b5bab81bcee"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "65e583c2204bd07cf1a078fb151e8ab1a251ef724a1e268021cae93aa9d838b4fc1191e65afde02b76bd0c3204a22f744bee82208dbc0d32767e742914660147b69b7f7b959fdf8d8c58e72d1140daab8fa2c88b568a8bfd367b93d9ba722961f77eac953f2fe72a4cdca099484ba59e2800d045c9a60af1681fcb9ed21edc57f6d9817b35cc72a2cd5fddef604a9c38e8ed5c11c78f434632d6b9e5c61d7c3e2d5d46b662c3f7961c5898bebc5047f80347eab2510f62b6c93f298adb7cdde8d8cc4d325475fdcd3122716fd7fa04cb067c00dafd2274412a33c99db80866211bf7473b41af5b788ce1ef3e12df865b691bb961494f043ae3627bd6a36dd8813ca147b7ee217db0fcf4d75dab4621d28317e6cde308ac8a2d6aa2456eab1ff26ea6a12adfb0043c76ba6dcb7a4f9a45e7d3b35f8d25f84c4b4bb5eaa954524f1d0fc9de98b7d944541d0d77cdb91037127583ecc5f24f19bfb412471344eb14e9978aaece97620a96e26aa1503cc8ff5ec772f91840b93184fc661c3d371bc63a92ac63f19adc9f343d51f634fef6dd4fd7579ca9bd534800d6c7040482c0881d5bbe022da4e25e120d9e724bf72b75ddbf272035d5f057911c6ae5a327e795e14c230e72fd4670fe293558969a1861bda0bfecb42f4edf78898a6bc011c17bcf6957f03d2dcd46e1226897ca195714184cbd21e99dc7b41b3f627701e2769e9612032022460aa4e86939aab7bf4f47f60d44155ff2f892a678a5a4b93249178e894f324fb8582779495161ddd0ea1c72b58de48e23e45bb8280035dca3cf1478dc7506dfddcaf4d5af49188d0e5647edcd9f45394438963341c6479362b2751c9638a438966e41b937af27659df68e65d909d4ccf51783d5801d147989f0c411f0aeccf7f86b2fee902e6abe6cac66b5bdb3391ffecc531da967655c3545ad79ce52ec3b884be0a0e703d945df2d502be5e7158db8a118daa6e759e5755922f48a5567501dff3c3332b5b23149c60f95b292edb57deeaf90cac7077772f10e3b3f1cf5b926d11b3f5579ebb55d49a9692b7a1f7f8173ff1d9a072fb4465784725f031fe5e133e30cb4fe1fc848da7ae580c5543085fcd4e311f3152794a82714433f988a5cc029b417e77d9fbdfd50938e644c55c3fa825b42e7096943f10614b9f1cf94ea9c703ca866121562fe3930323ebe56e318ae565186ec86658f92e835848e66b6f5348a0a9e728eb434358d03631bade4209cab5c7c1dd3859064340704e885d1328d3e424c976313ced898c4503bf1ef45b77ba37ad8bf11bcc9757e9c4cf1f84321702a20341f6c6d5822fcbb17de8ba20a94b32f171d30f416e7b594b6acefc338fb45473895ad74b8ea66836ea7094e8338994ef2ea4d0f01a241168487911c23ede1c0fb056d5040e592dbc5b20d6ed1f2065a7e6d76e56605272ea8c361df860dbb0d5326dfbc35449a8039f5d538c500769aa147afddbcc7098f375177f6fbfd19698aaf40f665c8d430f3c7d83c38b33f83a88e6038cdb9eb7ea17a220adba4c4d9b222c0580a53d2dbdb6c5b9eb7b09f1f68f48b00954c33536105618800178ffb3dacd5ad869f2c4be4805e489bad30af57a4d8cbc3bedc35b3d4050c9ae6fdbd59eebda2021ac2ec930c692ceab63e78283a322747b40dcb2f18bce41a66c4bc08e71659aa9715c3d590298f76623772b397d1e28aee5aa1f3ae4ccc5c4144da95b514bf59f0f18961abc37299b81859c1c1857286a898337a6612393d1467040d5f96b3c5bf557b358254e53acd54471d314b1aca0f387f174dfeed0fb9f5df9f5e9bc6104cec3cbb61647aba2df415f3c88002b0bf9a02d056f5126bf7b529cbeb0ebf736f59f744b4402686c5c420e0fca04e32a4e4c9e91998f47b8e2d2a3905d709a2f9340afe23ed222776acf38ef97a45cb6a56f2c0bca03fab6caebee8b1cf06e615118883e602356c120ba423d254fdc1c9dfc4d5414188fdb395ad4e15a2285f5122298b76ce8867ddce06269ddfc4b6bc0c91807da8da69931c508d8b396c5879f3cc2213316b3a6cedb1436e76a842e01ba32a8c865e198100a90068cc07708d52754ed7cee978b8bd61ae1b4579f460f4da0e32dd51b1db04afbcd48f5d0a4af9d3246aacc9b4e18e40c41f1c5f29435ca26d2ec6755665ed8967899ea33cc7ca4f5da2f00881c2e90dfdd052b2aec5e0a3e8aa259c75ff742caaa03d38ec174308a9daa5794b0545a81318fa1061b586dd7ed6d164136886c0264e4de134c580a97cf7886ae682e8ab97afeb3e0fc927dcce60037430e38400196db5af8a66ea8fe796f4653f21065006978f8ccdf0a549d9fadcfd32857c955463c9bac596fad38cad7d793c3c373d3cae4e6fe24bd0c4a3ae80a92d2bb68029e7f6ea178897e7fedc1c608b08b28545198cceb88bcc54d1839b3182ca672b5e181bfc486f2bff2488d5220b4930584ed8348fc64dc3054a54e369cf7575174f6cbd4793b74d87e7785fc807ef542ceaeffcd712181528ece14ec630799e9627da78c7f73f07313396bd3cd78ed7a121396c28929768befeaa6e4c4ac59d7ec2118faca29f4f424eac1dbe548d5935ee3013c3e1844abd6fbc13e38db2095308aaccbfd0b731bb60d3bb0b3168b0a3f1716817f16c4497f77be49824dc6187093275fb8bfc06e33e32dabda125f877c89a70666f2468bae6dda8605cf54bd23b145602fc27e7eafe1a2162c3f7a55d92f4b2fb5fa960e3ed25a2f9076966704314b8f0681655cee891d1a820da1e4579a32cc1546e7b58a49e1cc7cc39c69a36141f72e4ca13503ad3b808448e6e8afdb315ddc6283301406511d2d6a0f67f6df00094e1e9764e7c18dc4b469d7c9cb42f3073049f48cd049053c85b2440e1b8245c545006e4373c1d4c89321e2ae1059e83bba712e331beb9f4d7bdd838d709ee40dcb6e40db795cd93e70407274b99078b840d967a5e752cfecf9a593d160a7e8e1d0dda586e281b86c8c51bf3cd72240af5032c599eea264811701ef1172d9015a5dfbbbca23ae783665b0de95f575ce423c16c9fee8e63cf4fbd1652a31805d25c7db22d12958c56f365a29e5feb3625b8b8820565c0d07e35cb49b7ccabdfd6e6c0df53ddda768f887bef15fe1f2e52c7b990f3232feb05018ba4da38b32f53b7283ffd62ee98045be9d38acc32c5a1ec628a14ed4b17d1eb8dc023c2edc66dda73c0fbc0afbedf4d0f0dde332dbb5fe3dfb1ae1afdfcc20a77fd1da584aa1a48fc9c8747aa21f0ded00eaa86fa44f315e01d5ab5bbd84fce539a4988f9209bcc2ad31208ba93dbff20ee3086af3e7d072a79ea570b7936635c7a1f77b7564f1e3b5a1d62d7d4f406bfee8628050755a1352303444f77e2b64163b21aa8ebeb01350b5d8d34a86320a048bf125099b9a73c4779ba4ca834cd2cf98cac71e70887c310aeee9bac2224dd164c40d42bc8b4e1c7709ccea86fe3a66ef5a709b7f6f570e93e65387cdcb09d7beda93d14f7c75304774a58bf0eb464dd771e31952addc3bf74325609a8a727841ba2d22395c3db90f9e43f97f8615135a5c5e189c89d134a7412076c7a94e2331db5b79fc2cc84d3a4e9e551b7e7b6767e2147e6acc8fa348096accea5e2e495429748b16c6fb677f42be6c6e8bd1897a9e09b19b7d7dff36e958973e0935cc125473b0ffd61f45ed4536ecb66b1a0176d9e76b0d25ff0a1c8666fe8c57c00d817d3a7e8ca54be842722f22a9d502a00d03e4c625ca6a71a5b3f629b0015d46b44b7b92ba69313183c1c46297f21f8d81fc90091766f8c4aff0f87e09038d5534525b4fc6c151d3e6f231b997bbd7d1a2c57be6249d68e393699b8547134ff993c67cc14adf921ca88288c818e4cce8e921a3a53b9d68310a6b132dc256ac24e3ccf7b16b9eb4963ae0295255966bd792733a8a57f127508a28f70958b5d03f09590fb0641802018af34e286a145de9affc8958e8682acd7b07f5f75da33d7cb759d509aae6659ee58af81b2d03186becef5c69c6894aeb4dae3c4ea21d290a264dba53c061a61f4e0b9ac5a5e6e548084130da9e97121f01e83114d1875bf7e4a9b5ad694b1109fbbc56331f23c791e7e9b7ec230c7f046cbd143e2096e5ed486cb833f773cc302cf1618b26a53b01ef43ed854f7d0662520f7af22299f0f285ecf087e99a0e976a10a89be43ecb3f4cbfd7c041ba76f3aa046f70f9f3bab0342325e13047ef9917e85109a0bb298b1b4e453b815e2047f57bcd0f0a12e958ea0e3b3f3fbf61efdcbf35a66aa51634efaaeb7839d7cfcf7514aaeb74a367c09b9fb5e705961dae6a57137e07931ccf9979f48f1fbb2695e7ee8b1be363ec0cb443ddc8c55da872322083e6e293e104eeaa6337b787226cd20afb92a59f7b5a160a0185b5f4325a8981a7abc4b7307366846646dda1964d506e82626ef41a171353cb3d0766e44c6d903d4c934ceec3da09281069f8ee6903568940814d6d1bcb5c74cea31e63fe471b2972ca0220607b521e43a1757303297598af846c714d565304dd6b5ec2e3b798ec215d3c9b67dc7d480dadd8a41b1dd11f34e3b43c5cbc873e54758da2b975d92719560ca3b7c428f94bbb9ac9855d1e12110afe01edd696d0ff94b28fa419b9de64f129906b458a1752a6387401d0d53d3ea9f7fa5a874aeaa2398baba6b1b6ce42a74c751a960785ea746e79a107f5dc5a91578cb086163b3f5eb1d7cf1860b693f0b05cd53e57e909663d9eb2ed455e463d8ec8d4d1e65bdec66c1d5d4cfb6d513901770dcd50945986dd54cc73709b0051a4f639dc7634da6eefa32140ae96fc86ccedca13acaca39532345f4453978aefd0c9a61daf12c2f6cf87d3f40b61a65399a949fb27b63b47ee09a1ac7359cb9ff31c56ae35a5eeb54794b11ec44b3e9669a4899e873da3747d7dc4cbe8adcda8b9248011821ab148ced29fd774043e68ab56243664635150f4820f768a0757a03be9fc147c5ce0cf77dae686bea938c635ffe121c42c107c9b24e1b384bbf0fef22c26484601f0eca4cfee228961117d6537470a5f1b3c6ca08f55bb2137c836520cb94dcbf8c62264079199690f8d15bad2a80ecb41bc8d7ef9cd3ae57fc0b6ea0936d3799728b8d81d6b6212ebb8eb43c3a88fcd5e85a6863b9271f7e6e1f490d212ad833799ff947bbf2386fe92936e648fb3c0f5548585759b1fcbca7a5072c9920de16571f14da4667fd83a8a2ed0d5a84080e6ca4a292c59deef9e1745cef3bf540cbd6c3f8a389333441f2e82d07672db147c83904b94e52fa126ba32a080b7dd59b4350a58b9db650935411a977cfe9939a274aa3737e5e650c4857bc5c71170ab33067fc4e2d92a900cd159d0ac654e32c00e66428b046c1f6e2d954783564436a1877f3f8edc8aafb6093d9a59f8a39053bfd990cfddbf31be54d5b9c1e3de48b380ba0f69f52ee23a8dd4ea19d0e23707a460ebf954bfab7a0a8b1798a93eefcad67f1d231377094a70ea57455ec0fadc3d513ce9ee40af5195b0e59e5af37a6f9811523cfd49403a9e3e69bb781a336dbc08794583b4ffe18fea102efa95eef044066d549e0bc66fbb3aad4807f9f6fadbaf9ff091bbce2e7808f7b5b79eac5fad36677679453c30c728bcdcb10fe86634498456bc13ce4470d3791a42e91feeeb63337cd593b69dbd77106a945489fd59674eb80e3f0c942511d44d9aadbbfca944320b2be15807182f151fc23926e68af489768f4c846bacc476274a9af4217555faf39"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "9c111dd71da15f4fd045ab5286d6ec2521a7b8abe519c8ebc20a751c36016f02bde0858319a04853c1ee08f3649eac9cee62e4d3f27d72c4bd2801358e440408b08ca6d5b003771940ee6a8230a4963067d9da4d2ebc8e2212b0c77a1c0df0ae83ca8aa0ea6dc4890a7f81e811860e03b22f9341"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "eecb48cf74accc83db5e7ab8dc3002a8f837b87169543e42b81911fb3b3bd0b62b4a78719cbdc903574fd31f6337209f8613c1e35680acf8a34478265d8c5437a430250e7ef4808ce03ee647470e8de8c915e30ee2040b27885c9fbfe971ba537e67986c2f5f78c8e1b947636c2608bea1b8f7f4cd712d473dee69316053d1ca9d36bb2fe8d3ae8f26f1787b1c0eae0133aff61909517f1ae6b91a6e47eaed87953fa7977f64f50b3a53d330bd3b"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "becc73d4ea38b4809d9680539809c0793bb662434610d4d9e19b7403eaf81868997c3d14cf10ed27f76f07089865e3c37d3ccff113df882c559b20eea4e25f69688ccdc0ae15d9f50eba285c6da490eed5afa1c05304bc75a8c2974ca9a66cf081ee366071d80be1a9af623a198ddec616deaa2a5165dce70f09dab4c02164d47ff6a2793bfe4855348706f533"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "2e9bda2039adf2e49087a24923b080e32aead04227ad1c586da5301197b9b6858bc6f80a59b8e97ad610604e19fbabbbf1b3a6b31bcae48d"}]}, 0x1340}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdaf5, 0x598f6677656408cb, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003, 0x80000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x30}}], 0x1, 0x0, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffb000/0x2000)=nil) 34.795334577s ago: executing program 1 (id=285): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0xbe}}, 0xe8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000000c0)=0x400, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000001c0)=""/21, &(0x7f0000000200)=0x15) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000004c0)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000540)="390000001300090468fe0700200000000000ff3f08", 0x15}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8080) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x9, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0xfff, 0x8, 0x40, 0x7}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x8, 0x70, 0x40000}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x130) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0xf160, 0x4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) wait4(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 34.622464065s ago: executing program 1 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2c, r1, 0x426414df8528e9d7, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1005}, 0x80) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600000020062407040700090581034000000000090582021000000000090503024002"], 0x0) syz_usb_connect$uac3(0x3, 0xe4, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x2, 0x10, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x53, 0x7}, [@multiply_unit={0xb, 0x24, 0xd, 0x9, 0x3, 0xfff, 0x3}, @selector_unit={0x8, 0x24, 0xc, 0x0, 0x3, "986238"}, @selector_unit={0xb, 0x24, 0xc, 0x4, 0x6, "c8d8dc5bbf9a"}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x404, 0x1, 0xf, 0xfffffff8, 0x7ff, 0x6, 0xdd4, 0x5}, @source_unit={0xc, 0x24, 0xb, 0x80, 0x1, 0x1, 0x4, 0x2}, @multiply_unit={0xb, 0x24, 0xd, 0x1, 0x6, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x75ac177a4cb91152, 0xcc, 0x0, 0xc, {0xa, 0x25, 0x25, 0x6, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb, 0x2, 0x79, 0xd2, "0e26", "e1de5c"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xfc, 0x4, 0x0, 0x8, "837032", "dce296"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x4, 0x5, {0xa, 0x25, 0x25, 0x1, 0x9, 0xc}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x0, 0x5, 0xc, 0xff, 0x9}, 0x37, &(0x7f0000000240)={0x5, 0xf, 0x37, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x2, 0xe9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "1a58f8c72264efc54b58e541e09b1c6a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf, 0x9, 0x9}]}, 0x4, [{0x96, &(0x7f0000000280)=@string={0x96, 0x3, "0e7683fabd57c52b4c6ea5d0c954e1c99c87bcebaac7ca68da62fd6efcae8d0dec23d4c2ff04ed4320d3dfff757ffa7460a0d28f0c7abe28b643ab5fee1a8a30d50d4e6c564b15218bb6a68c2a7e00c0e3e1b4e475ef431f8d6290cc5105d582b3e41fadf8b0f3001bdbc77307654fe9adb4ab5cbd038dcd233100283e63512f24193414285415bf7cc0cbeebfd83aa23b32e205"}}, {0x82, &(0x7f0000000340)=@string={0x82, 0x3, "6531bb715f7e80c7d534bedb78263bd4dd3f048575101808789139aecd329cae0483a3070daf3e1de8939bf6f64aae5b17838b74aa900e3802940f56bcdc4a0bef6c69e15df7f2aa6d4a1b9e93c2507921a177334c51f98ebdfa26f51ead370c92a0f2cb1458417448fb19e9a91ee28bbcb05aa2d9433d2bf1813600c5245320"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1409}}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x4, 0x0, 0xf8, 0x7}, {0x3, 0x2, 0x5, 0x81}, {0x3, 0x84, 0x8, 0x5}, {0x3, 0x0, 0x8, 0xffffffff}, {0x2, 0xc, 0x2, 0x9}, {0x2, 0xe1, 0x9, 0x8}]}) 33.410546802s ago: executing program 1 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) mount$incfs(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x8080, 0x0) (async) r2 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./mydev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x604000000000000) r4 = syz_pidfd_open(r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket(0xa, 0x3, 0xff) sendto$inet6(r5, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) (async) ioctl$EXT4_IOC_MIGRATE(r4, 0xff05) 33.352925318s ago: executing program 1 (id=294): unshare(0x6a060000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x4) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000740)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000540)='veth0_macvtap\x00', 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0xdfc, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) syz_usb_connect(0x3, 0x32, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xe000000000000000) write(r7, &(0x7f0000000c40)='2', 0x1) unshare(0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_ublk_setup_io_uring(0x2586, &(0x7f0000000240)={0x0, 0xea44, 0x1000, 0x3, 0x1e5}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r9, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x462, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x13}}}, &(0x7f0000000480)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xb8600, 0x0) ioctl$FIONCLEX(r10, 0x5450) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20042, 0x0) 18.04814497s ago: executing program 33 (id=294): unshare(0x6a060000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x4) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000740)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000540)='veth0_macvtap\x00', 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0xdfc, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) syz_usb_connect(0x3, 0x32, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xe000000000000000) write(r7, &(0x7f0000000c40)='2', 0x1) unshare(0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_ublk_setup_io_uring(0x2586, &(0x7f0000000240)={0x0, 0xea44, 0x1000, 0x3, 0x1e5}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r9, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x462, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x13}}}, &(0x7f0000000480)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xb8600, 0x0) ioctl$FIONCLEX(r10, 0x5450) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20042, 0x0) 13.313141196s ago: executing program 5 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x0, 0x10001}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/stat\x00', 0x0, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2000000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0xfff}, 0x10) write(r4, &(0x7f0000000140)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) openat(r3, &(0x7f0000000080)='rt_cache\x00', 0x0, 0x0) close(r3) 13.304176857s ago: executing program 5 (id=417): modify_ldt$write(0x1, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) memfd_create(&(0x7f0000000100)='/dev/sda1\x00', 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x2, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x61, 0x37, 0x30, 0x32]}, &(0x7f0000000480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x38, 0x30, 0x30, 0x61, 0x30, 0x61, 0x30, 0x30, 0x30, 0x36, 0x30, 0x33]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566028899aabbccddeeff00020000000000000000aabbccddeeff00112233445566778899aa92ccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x5c, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x31, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x36]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x61, 0x51, 0x30, 0x62, 0x30, 0x31, 0x30, 0x34, 0x37]}, &(0x7f0000000980)={0x0, "00112233445d66778899aabbccddeeff001122334455667788b4aabbccddfc34445566778899aabb08ddeeff000000000000000000000000000000000000faff", 0x1e}, 0x48, r0) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x31, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x1b]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @desc2}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2c}, 0xffb1, r1) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x39, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000f00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f80), &(0x7f0000000fc0)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000001000)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001080), &(0x7f00000010c0)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x36, 0x30, 0x64, 0x66, 0x30, 0x30, 0x30, 0x30, 0x2, 0x66]}, &(0x7f0000001100)={0x0, "00112233445566778899aabbccddeeff00112233b53dd18a92f5bd0bccddeeff001122334455bae15cbe15f1ededeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @desc3}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$user(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, &(0x7f0000001400)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @desc2}, &(0x7f00000014c0)={0x0, "3ea68a522affe2738f8c5c100adaa1d6120365f66deab7481ed802a5cc15ea65e7a611f85d075b12845626de62569bc472b62fe9cd3d9a156b10f89b1c92c49c", 0x14}, 0x48, r0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) symlinkat(&(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10) 13.285761429s ago: executing program 5 (id=418): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000002340)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80020, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)=@vmx={0x5, 0x0, 0x2080, {0x80a0000, 0xfec00000, {0x5}, 0x1, 0x2}, {"9430d5197c50969221740465a653f1ab9b5f7c33c83ece95f55d9e08eed26d9c22e1a5d6be7b8bdc80c19559ddfaad808b955670ab19d6ad96f34adc70d0691f0baa069c6b3876dcc85dad7f07a6b5bd5554c5aa7cc38db42b6551057a7add531ffbbac65cfbd839cea1324a3500311d0693ecea4ff20ee08832804be095ce90e97a3f135bbaa11ad6c2cd22b2e14ac6ff32ccb47085db4ec63d71e748720fa4f9429a6fde53c3c26b03a4e9d07c41f4adcf607aef9d580a4bbf8641225ed79eaa8fc607f8dee61ce08b85e177dd3b93c462b2250ff2e644555db42cc07fc20be5e12c43fa82ca563f27812dfb8923ae39f82ff49b805fa4ebc2ffa7e35699ba48f0c5efd6fd68eab7e04bf9ed2f33bd324422a2f9723ba73532c5f7a331570ee48972c41ce32474846dc28bc87e7d700222dc3caed45cd596f18525ada5e2fb7d32bf66216446d12a43025b2195310fa671b8a0a6ed5ee23406ac689d1f25983b2491b2c6c6f06261cd42ed5ba4be026c3c537c01b2558b87964b3209a5e6d5a405825d440811380c71f7a42d6d1ccf6403a042f22b97385427d0be71626fc4c8e749cc5e45fa78b979d403c4e95995cddbfdf06069f4614d99b272d9dc00581651386dd27073e8c5678eae51739280366927aac1a899a9931522defbe1d59624923a3a99a28dbe8c35c024601a4f4d7799e710340dc05aaaeac875f83d5f75cda0bfc5cc482c914688137160a17693aaf6ee74c772b5c93d2e54dfa36f709ec798c9c94216fb35c4270b1fc5b4c1dd02c1167ebb48aab56fe904e0875574dc1d5e34f21945f8c58454a8a1a1efb85a77ab209c481f12c9870411eb84cdc7c63f7c8a34f03c7f7f57386c52bb8ecbc1f7b85859f0945ce6c000d531bfc840e0e4121211f78c8fd54d1cf0282db726726bfb762e771bb5a72b574d6774978d277a6b9f0b7a69075f9501a6d8652620c4198e91c690ebf925dd0a7f4f7ea23c789087a25aeb39a2c30280e4e8730bfa06eb023b885fe050fb1b46b26e441f047cfa757c826463c3706c6137d5c046a8d5c8f146aabf75f154fcfd1c08976fbe498f1208c564f7cf2c5d4ed398f13a310d442d1aae6325527751ccc935d03840212370fee652ae8e9655c20fccbcde0235007abed9bb295b50927953cc9e88c0a6be2f041001859eeaddf116ff6aaa04aed44c53d07378eae48883fb8cf83ba9014a3c9af699b009c9aad3feff1bb78afa0b621e83a72ce3b5b11d300f84139cb04b697c743c1409e054828b9eaf3c394203c04fc1e5546125c7d3429ece10b2a4a52a619892bdede0eb2eb26ffca6a73399330b45f9d84c3b66426a43f88abf5be9aa40578c814e5bf320f8daf33ca5a9b4e403a40d41c42a5a4eb3ee8d5ae19f0c6d60809070185d6c12eae0dc60ef687f9bb76fadfc9b17973d20a8382f0b70bc11bea5f0baedabcdd000e1f1f0048b258d02692f58591dc510c1ad75f292485e7d9bec1fd60d18dfdf7b1aa963b8768a4a1ac08feb5722ab78a10bae927527c73bb4577b49e8e785529db4e6eed6373fa640391ec1df49d4a5660e3cc91fd14f94121f189f0a316c9cf55b2d6ece53f839b162694f7947f8ffb2a16f8c565292d42b619aa261a8ddbd3cf5c345f09f7261e737bce7ca79c9586312f4241957a138b26806de1ae6796f74e38d866a294fc5c7a9b7a48675e4fd1a363cc46ce6b02467fc827857a474d29426d1c34bb714410330ece8670f5bc951b7a3341c89bbc6f6fb309c1712474a77e0a5b4cd4c9a829cd79c451844b4ba795f786a886ad41fa632d9b55c31193e1586cf58f324fe4ed74e91e9dfcbb64d1f7f832e689513c8e7eea3d11b5c9da9f835b870f97e4a9a05facc6fd2285e924ec03aaddfb3eb07cc7f23525cc483e34d615256673e180de574cc6d9de4e4a25b3424a538664a486ba430eded3c97a83e58486ed763ff6a4276446a175bfe35d1c5946e8ff2c4f71f0310f7e5cf0907cc6e8071c156cc51ade78af5f2f421318adb7d84ebafce7772e9bc5bd1a86ae057cdbdf8d3eea3f40826e1f0c2a36a75fc6c1e3788b466eabc6059c16e3148e2fd35eec7be7749cea80e29652e09c1a4e118396e73962190b54045f5c9bb92e76700f4dd7720490a87dc4f92c1dee589e945f057587276fb1a2e9489250373672976051f9d229de065a00a25f0c27383810d108fb4ddce3fa664cfdf45d2ebae2813bb28d81d79166cf42f67fc75aa5197868f990f05ecaa1b956be5cc3f3b48732b202a165f4fa3767a7bbe6af301a48c85915dc72350d7b3d52eba186bb4e5834d2428305df34cb29bfd8a0bb34c5955b44adbb636e09b56624c5283f63b7a507b294ce4193cdfb7afef68199147ab137a00f599889181a8293172dd7847bee570c953bb2b550fb090aa9ca4a54dd1ee9497ddca2282b61420c5eb222e3f60d12adaed8b81ee184d25b0d3096630fa836cc14419514c742f43b18b0d0cc7fe9aa55e2a0de5f809c872270f6f9314f5fa5c250e341858fc738eba6a783b4e596d76cc5a81a8383da5d2d21bfe09018d9e663b72054e4705dce71962ca659408a953d15c47c81ed270924d37efa19b3c66cb47d8b293e46f129c90477a43c022313c3a5ce5a9888882b7db842a81f9b4a8eb95a994ea7ef6d54f2fd7ef8331172a5cde8482c672282544bf0d86cfb8d465077b8dbd4425db3b556c19e6a95c458e0e24435901d0e69523d11f7be189893a8a290800d020095eda014b2c9d74940c65d06734b29677f57596cf57c11ba3f2091602b90674c1b3e17e98d83c4e8c2a37026e40ca8cc52d598bdd4720641125659869df4f780d1b5e1d96a2136efc6804de829be6a2f95cba39a47f2e3d51d9182949dadc5d6bf285cef9b7da736bc3b755f8fdd80d6022547f7d0de3b04bc68bae540fe892f49eff94404c46ecfec38c2df9e94e1cef14054d476c8b097521e3c145f36859d413b58817f38188033d5ba8bff9fb9e6c4b622e52255fcca967219492cf5ca5a3b6164001879ee9232bae0a33cc32cbe396e07520996307b3253beb92625105188cf42304e0717de0e7212f53ab375b91d06bbd688f91faf4cb1da7344945aceb7c01099e5eb62afcb45bb53f674f749784da996c3f2e41001a9ec3988b8489494c242faf3a0ca79ef01732465fad53265cb06b894c2595a3417413b9a42165e32779ab0ed3829ab48c4fb27d831c2f2fbd0bc63727eabe817769fa770b2d674b238d2d161cc7ed22c2a36ce57430eb0dfb9d21739f05ab62005a94201a808f2181e83fa1ac4d438175a17839d5fd00e01a4ed39da77d416f6a85d1474b36c34c33c5905b533489a41a7f0ecf2bec7221473bc4f7aa07778260626addd751f812fa05cca78d74b93920337c163a089a4b7588313f0b882c878a662010811337a7cbaf433f852e6bb107f698335b802375aada2c13a57caee4ac2ff9e1e78fa66d2e61b237ac4fb32b31057a8cded1cd2ea357853420576bd2e74904492ae6464ae6b4b289ef71456b5df922455efdacae8d0c31b57ef3e00ca66ca5f08b84898e7cc9c95233a86a23b166b86cba7508fb07f99827ef5c0bd43fb557b24da4268e09be57f3d49c7fcbe747d12e29a2a45dc0ba5d84d8386be02cd8a525ebe9f29fee7a36f9b0ed92d59a03c9d5eba746bc7a0dc587c2105e69e60e0b58894d0b1c3e37e575b01579aa7348086c2dee2f20076c6a108a918663bc44c8e8ac885765a615347cd21d733a3ab55a67b5e5b21b667a83d98a3ebf7fc5ce878cffcdfc384a0ac97e86f787ef14b7600a5f9d034cad18f6b0cb8fa38c94c83c8c9cb454372a33f11f942e80eb3f55eef3dd86fbf1cf5cb3d89678f91b4dc5984ae984748345e4590dd3097b9780f17dd07cf5c9dc2a5bd44becf7256aa6488c8497631639a3b1101227fcd4c82dd5c05127e61659fa393258e42d9d3641599a01b2676184fd1198f6de1a58c02ff4f5bf02c13baa68a32a9721169d9969abe05db2b3ebf181f06997917fd65bf85f1f04d33e0f4f4f5904821f4590d34aadbc6ef7518b6e36261b99095cc5ebb8998b8e74b87dc828056e0c606f96f0136ec0139a953953ae348287d877b4490628293d1998955302c789d3827d807395ced675e744063303a61c2f26cdc034203e075d8affad16871da770fbc767f174e6ffab4023ea36123e744ae45533be0ba39867780ed59b72ef2b9b260bb0e04ea932c644d699f6f79b04414c4fb2194ecadcd35283cfea0c77236496ff9005fda002fee3b49d958b6e9b597a57a82c613e7ce705bad9c013cfc4b68fd6e080f727b7a8e1ce5344baad71dea89759ce3cbce679d3809504dc8346b84e49ec400a343e20a5480b215e1b2c1a096781fa938cf13e5b5f6179fdb3a6e88b728c7dc89e4faa895ccd8c1819ac372b89694239031a77e3ff4c9267cf4d0bf5153105a10f4bd8329b4786877ff842a9df3a7e38e59ceab53ef3fa0d0bb95abf4358e022ab4e14260b3784cd39c139c015531a765ea4c11c2e008140c82dde3f8536a6422b9691ab961cec4e6c9358857571db3a7c532c9a7043f1a27c4efedb6bb8ef02d48c44efd0737cb1a66cfdb99a46ea96a911e8abf6f1ff717a758e7f0ccf78e7d657dba04fbc1af4d5f5a95b1deea5bc5dab619ce7004aae821e66e81de43df59dca189c5af104f404ef59e40fc21fd6e61a952fdcbf22a16e860757a1b3a794d406cffd4804dbe8359019c2c9e06c318704bb166f24367d336718112ed128431f1188a17198052a0dc6cee55f3aba5388ef7790a0b6c7c54a729065c8c0aa9bd405cdde45844aa400c62c254ed660fa97cf4e9a6d45b02ab2171a584779a32918424f9da12f75ea77a34ada969f503f41b02153365a87ddd2bbe07f51e89ec733cd9c12a89c36a85c62373a0570ee40ceba0b49285e44f1bc79f4c71c668549fb90edc2d3c3f225240327768fb4be172c12a5dc852376433b7aef7b390ddbb96c1ef82cb22af4a58daa9c5c3f41f0b6ef33e1db4e6644389c46f171c30f638bbc09eb84861d138822cc03bb1cdcf0e08d04432672f664f41fa0156595ef10c909ac5f6bc8d3b7bea5afd3570aba017270a85952cc3210520c9a271853cede0d3386e86fb305b0a5188ce170ba5a3267bf0716427a32abd5efc355a4c5e032e10a30d045e4e4717536291a28bf96fc66824dd94d744960cdeab81475128ee09439b77597a68fa4cb56cc2081da410c301a579daeff1a2c2891602ebc661367ee8fec3a7e20c373a08a0ae66ae89422a2e2aab09b5f3a0405f668584c6b0a11fe8ba7eda691afe6c4eaff23d3019a9f6ae5e5462bb5ced1fddf7fc36bce70d66a664139b11409f1af05743b04cf54843a5e2e3b272d336abdd36be92192e6831c4d80de77f73bb4b0ccf4cb67e29e49e0dee9a45bc878bf8fd721a86e740bdfc46cd2f4139aeea80a601c59afab7f86b9daf157555cc7443233342fdf2782a2d7c94c48a80fe726e648b6f64407f88b3cb89522cf70feb332c37f75fe55f750d032d7a370347f26b0c448a86466e5b719fca060ad050785dffb3e80bbdb662ad06d514b21514f32965e037bde567ec06899f4cee5bcdd0cd7326fde4f5302852c41a2f80e4705453aee5f458ef72066efde067dda35e888be121a6fae2a9330f7a7af89f620a9df04cc228ea622cc05a8ceda415bec41d998db05576a4ca5c4b8ac3483e75b2bb948a02959590a1eb0181b88946f0b9be7c46be5f48ded6d1cb707fa40e3c3", "1f0aa5ef92812652d658ca06d63c2c702ac0bbe7cd67e84571cbab781fba9ee493ff97382333230bd612af7a371132e385509893bd8739f3d8d31e0a7f516dd1dccf906f201738920aaa28970e531fc22c3927b9536b844746a31aa9ed8387d5fec73b91db45d8ddd475fe156798734550daae3d5476aec0c55b0c2881bcc52b8fce968a76dcd99b78c6a3175362a23f30851bcead358cf4ee826381ea6c82256413e099a9866a443357e57340f3da35fe44030a6f2a027120ae4b62bea65dbfe72d432f4526f9b24580fcfe408177c9bde098a03503603e604371e8ea910c2f65fc8732ac58d5de0f4ae3820288534aa9cfe6bf6c710d3f055507b4327f3c72ce5150dc210f10fe61b896a01ec76ad230775611faa47fb2f9c3ff5bb5bd0017704d93bd826dd1cd2ab7f76146f1b87d63566a66a9fa9d894c0fc3c38429c13758c05467e741c2982114fa4c3eea0f403cc6f12256a4338513e92220d2c303ebb7f8a00a589d4b6230eaffe221ac135ff6a736af9dba0944b0c98999040fa3d462aa8a5abddb3088b21db168f0c6eff85fbfaebe0c19b4a2e7c16eb3ff7a48eaf527ca23c6387144891052d3809d9e46a5da123591fa569c1cd7c81af267a39e7ea6a869ef2643ff11805c5169448558fe67e81e956ff7670390a24e4e7218d5cd38bfef1ff66bfa322e282ec6f7693e9f444bda353184168108582a8748c342aaee5edee0d261eb46832f3c9cbb3d4e8c3e007a6f5207b7aeebaeb64afdcb36f5bf1e79ddff4c4d8d3a1eeb9c8e55dc1cc8b8e06246257e02ad9f538cff3959a6bcb074855912b911e17fcf5f6ced2c1c4c4e41d503f8ca9262f8bdb01ab22e4be2b583a47df60adeddeff95cff342eac73e06e7140e2bc2edc621f9dbf91a75e8edf5ae2c0c5e0566044c1ab36f22924fb3e47e1f7ce095bd02730ba5e97ccc8ef2eced545abbe4d0f597d061e3d75231de01e8e4a80b8e8a4b93f5608729d0ee06bed7a69d82b121bec2fb266acf4792ce4fde09ee6095a1da9dd0e2e70152795f25ffb6e0a6f2da7a8f5b0f0b2495be9066c24acea597d95b0129a481dcd527fdef5619f76b86e667c991d627dc186adf9cd08e243829a92e5eee2fa7b247bd06d45a16905308dcf82ef38c1c788178d60547d3e3dad91ff23097da9bebbd9a3fa6439382535c8e630a1dbe04ae3288d7c1ce69299180e1895b24e9bdebc7d6c286f51e5025a83280216851bede2a6a2f3b027232fefcddd39a5b65d17a47c3f3062db430e0d74253ea910553df5fec8f48954804a12f01a23c8eb6c6d4aea78622688a48ff01d561c651bc99fd492b912847308cbbfa76f2f2c41090af46dc42738bcd9adb1a2e886dbec69676945458f08a784ae88f59cb5f03e563a0f9e0386a1d8112799270b869aa3fd27d0d4d553ff79af11f2319c5aa770f9daa870260ccca596f0746acf6930b0388fc2a864b46fefb83c938f37806f00c100fb682f17e9f34ce15502f7e34e3368527a8c64ee02b598d008dddaf93862509794c0d67c7f4ae83870dbba2de900e6e75e00257e2f96bd4fa63d2111b8ea9f23f4d1866b5cef477ee09b3e55326e8cea6bfa7ee798c2589db04632df4d145052e2a2c51bd0af7471bd2aecc9d6340b39336c342093a901c211bb1378caa84aafe4b2ae3d79e266395bf370e98234d9988a9638ba382a816e21521513cd80cdf8eab6483db6026912aa9d97688c2b7538b6674d3399799f96db8e0507249b7d11c5f7259f72c96d6505e8395e602731805e0add4a6898a71a82694f3c41f83bc9efc002a32844256e5e028a1960c6ad6efec550449a17264ed918240ec03923d69ed8c7e34fae7c6733d5adb57a284d2df887da563c73acd4f17da37e790f7fc4ea71c008feb085d0aa281499f37dc642a12b3542b5068cccc7321eb43addde1adfcf0c76be0cbabb2e1a6760a9a2ca54733f33c91872802c372ceab1653b67c48802c7a5d55b3021180edcd9696f021a980eed2103bc4ef6467ff2c713d7679959cbce378af7ebb454abf32dd7712eca230c7c7e47748923381e129516f7bfa80c1d2cdbf14a552c98e96db09f8caaf864da3159e087d63c1ee9421ab4f698b00edd87ac0a01ccae187ad8720f8eecaef3f2137f551f0c0149cc947b6ad76d03d30d279738d986b5570a97105ca9d287163110e416ce32b65a6ad0a2dcc3ed890074c5d7f0c19f00fa29a08c1be3321cf9b28750d9ec646da68a0fbd547dafee060aae737d48fa4678efa473524f637e3d9983b3399a0b2c40a303bc09198a93e7371caaad856fbd7d00c2e05c9e914d0a980ca006f58d29bcf01b63c9d9bab447c02189cc0f56cf60a07f643dca296a7a21d3d082b055688368a670993fec826581475dfdbde937f72d6751c73856962f171b7574ac09a49ef3cee7ff5edc8bba6b8a5c1a86c9bc92c4087d9094de576a65badd21232aa241e93b4f5265a87aa8d84cef83cd51ad702a237687e9162b5a109f99681d7a97566229bc24bdcc66905a2c6f73c6098f3623651f12a292a52d547b49ea4eed5435250382c7a4e689898044ba81ad37bfe2d0a3870a2af68703a00ba066f6c8c49b783b66844082a5e666178c39124ac494d70a6ec831c71787ad2531ddcc843b3eb4b8943355f28cc36208e2b6c4b46cf3ee1202825a5e25ab0d85f5c3d1932ff6a0d7608370f0c026d27c5b4e825cc1fe6aa5958b1607b33b22165dfc78e4474c041ef974bd8e14dc3a29d1810880ff91970299ee60828dae9bc4fd648a8ab16a15e1a12ea65336663c8dd9822e6738be0654788acab250cbed34a3ce9ab301e87c756eb8f759675a310a9039514442b11dc2a4bf557f418995fa50abd1c4982d63f2364eee826ff729472a9153d2ce424a90012e5388ef720cd974e3fce941ad49b87b16d14a9ec259306d94407b853ea3d6a20e719d4b64bbd9254258e956a825cbba7da2da05658a4c16a132a4e03e74ea4af571ee7598f9e66dac451494912953744635349b24af455d0a6481dc45d6c4153d06dd09bdd3461eb0e97b0ed7c391eec570e45f9a70e576b663d18e59972df243b68de973ad235548b3ef034c0e27f9123a050dbdea9593a5f6bf5d36f1777048d73bcbad5fee636b8c35c1a294540bb379f469c4ca457182d44707b12df63d40c0f45dce72dc93ce0f582428d9691e51447efa10ec7701b3256a13a168e1b338e262d3882d028d408ebac8aa588e5ce4abd7e4c2d1f3f70d9509bbc594b4ba6fa485b286129ebcd69af771c210318f600ade425afc69f3faadb87b06b6c64910f529b4037d375291bee3bc6f79f22907b7ec4523b1aa5df393055981cc9b714194ce34150424b4341bc9fb4367300f07c1d77fd0c4695934b5d54bb7f6486517d9da61efa0f930acf7b9b70248588bba2490678a028ec7cbe8a85ddf7a4a9b18bbf8e7ffa5114b6c7f276d0694fdb233c65b73508b3a5c68927784da567cef2bda528cbbe21c73602a31fe11ef85abc63b63fe2eb542a4271ff928afb596d766119ea0774ac0094316043da7888d7aae30811a304ace2b162bd1568ece6ff53559f7b91c27497379976cb717c0615570c7f63e0eb1fe8395c18e4b60acf27dbd6639857f87ce5781974674d0a636e360c2daebef14eb20eb3ed2b6781788bb59125ba9308fa0388eadaea1f87c247f40695c83e60e0e70a3d60095da321eb27e87f876db1e01562fb72b32bd7302e95fc304c55d5d2fb50807ea0c45d3695e628fb0498ca9384c551df7829470715e3761779dbb1f0e8d71287df75ad8eb67fc576ff5226428d01fb53f5082cad2c83ef3c05d724bbcb37e106065e1f0def223223cf36d36f9e6a27d2708ae2ecbc3255f75773c014026d8e20677d4d604c3b2a34521d274d4f38da22ed0eb41a35c474a7038115cc1776c15a45dd4d57bd1303b19f4c8539f17df062f1d64b5c882303a67b5a4b2bbef6a39f5a3a88f31aa2dac93a49efc146910ca8331e0b4b8a5f6b2d0fe50c5f8512bc99ff8a1c7e476a35420a85ecca7ba304362fb90e235da00d70d6c96a790535df8c15009d9305d62a23de5b1e99c4fff5e9eabed698f025e566bbb47ce160feb3972f0c7712e728de5768ad8fc19064f0079ad1d7662c96941d20b46f59c32f90e99fe385bb9825461167b1bf2719f4b54e5ed704d02f31fe99d93a7cdc21b64250ec01c1e3c135c0d27d6629600f0ce480ba3cd1200e6b4faa10cb8d68f2d9b77c8defff694e29c00c164173532ec1e919909c02d61bfe8420ad024603c9fdb35000d4b36dcbc173f326fde22a82df69482aaf2d287ae978cae6a8002af08a9568a0974e1a5f35c82c72297c0261c199c3707932e3af7e590abc15ae0a03c8909f333e6768c1fb69452474810cf3c682f0747812f4192a6256f50f22df8bee60199f0c9ffd76a34f8912a93e01b0aebc9afd8116b2ea12458e14b97af6c31108da9fe58dfe64d6897dceb42162698a632ad4396fd548e3467d0659fc41c054522b6f1c4a632bbdcc4eb039be62d2ae0a8af917a5ddafaecb0e5fd8a296315754beabf1f8eff807a175f78b1a824f1d28f57cc341f079cd761d38533914b09f7b95451773670637565442eb5f023e54b93fa5c4e7055cb44149d7d8425c2a3159c88f3e1ab955e1658382d344c305c541a8682d81dff1bafd89ca4bb9ad5263e56fa639bd1c5aad0d3801ca079e95285d15f38383fa4ca53d1f90324d7e7fefe20130bdd98f1ed9b2bb27d362ed32edfb7dadf7489d3d36a27cc63a40a873b510c8ddc1cfc0172cdc01a38a39244d7c4151ffea6918107a49bad35dc4fcf8543e06d586742155b4db8fd8048ac197cfc94be89b31085dcff39952cb13b685161462a4f0b7b74f8e354102f32477e4c48a81d47d3f9813393e93182aa2b398a23a1f9b96baaba3c9c299696e62678627414f7d728af915dd7e5d3a646c7b7102a45801f3d629195814debab814d989b09706671c8d9ffdaa548708a2352221df4e59133b708f3a92d5a8fb970f6c50ef8fa8af940e39fb447b4ebdffbf667948163dba3a114315c28d6aeff3abc8aa46e4afac8759bb879a572e038f230a784c94eaf5e2fcc2241ca1436113956c4068f9829d4393e57da30a6fbd6de72ceaf63dfc525155145ea139c97aa864c377ed0d3b780aea3ab99fe7c2b9a3b539aee2d4e1f93e04b84de8a6cbd44f6036be9227ae70086a23afbecf8795760e8e8a386efc7a4003f303c705280de3d8078d081688dac7f4c0d1b1d53a5025c2a05644ee298e647ab63b52b2413c462c6362554d2790a24994cde957e752d45525889ef1d134fb70efcfaf4b3d116bd6d605e42d889171d91f1c6fd51b38a6f9e52ddbdc0622b18fa95db9f914b0b70517c03c5a4760c909202df5a12581ae2d30c3b5ae2b9aa88406419cca62c9d8820e83a24d82f0fc2a8b008bdfb5ce29086c5825dc29b71fee6ff2edee9a095291616f218c3aafecf849866556892bb37fcf9d9a3188c0b7fce9c6e3268d430220fce22c9e9629e43156cf4c3b04052455b7276d5ca375252734e7c6d7f98cb1424a520bf8d8757d38516d7b08470e21cdd01690a3586c4987890d5269f76af853417c75a60cf3b2ed4139a633db624e8c5bbc9dc0f45a9a980bedadc378b4995a002c97a6ee13f77c8b30850d95af013324c7905c22ae14c3af5999692febdd95fcf541daea7c6603debfc338adf825225bec1a46d289492918ad41b0d80e6d1eeeb9a85da083624992e28c500"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000002300)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac2(0x6, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x7, 0x0, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6d, 0x8, 0xe, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x24, 0xff, 0xe, {0x8, 0x25, 0x1, 0x81, 0x30, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x82, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 12.732051227s ago: executing program 5 (id=420): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r0 = eventfd(0xc4) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000003c0)={0x215, 0x8, 0x1, 0xff}) (async) lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x5, 0x3, 0xb, 0xdbf7, 0x86, "1f32ff9d463981fa4391cceb86a338d8655deb2a4c049152e83351319af4aaf7a433ef932f66b998ec289f7e98807966616e7933ab622991904ec69a7548933f682a3ffcba185a1083d8d7e6103d079d0ca45c2aebc899403022b50456d2b14ca51e9cf0cb891c9f158a6183874243caae772442ad1d86a08d0d113e1f299dd8b53436e503ef"}, 0x8f, 0x3) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2a05004, 0x0) (async, rerun: 64) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') (rerun: 64) 11.372640339s ago: executing program 5 (id=424): syz_usb_connect$uac1(0x2, 0x89, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010410e504640000102030109027700030104400a0904000000010100000a240107000a00120102090401000001020000090401010101020000090501092800028004072501080a286d09040200000117000009040201a794c301010200000824020102010205082402010602031f0724010805021009058209500208020107250104704f402fe594efa531a271db9928992e500ad886bbe6bd20efffc2586bb43cad1e41d05ac8fcb56013c6e0c7e20bdb8cfb1fc967ea6c7997b94f58497480f7d417331289fe84f7bb1720d7ff5e2328df4a8057de9551a3e2f35f7f2f30972e6ff8f8edd1a606ac87"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 10.607045969s ago: executing program 5 (id=427): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x7, 0x80000006, 0x20, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) r1 = socket$tipc(0x1e, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x13, 0x0, &(0x7f0000000940)) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a80), 0x109000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000ac0)=0xf) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000b00)=0x31) r6 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000800)='cgroup\x00') pread64(r7, &(0x7f0000000840)=""/15, 0xf, 0x4) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/net\x00') setsockopt$IP_VS_SO_SET_EDIT(r7, 0x0, 0x483, &(0x7f00000000c0)={0x2b, @remote, 0x4e21, 0x0, 'dh\x00', 0x2, 0xee6, 0x5e}, 0x2c) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x8008b705, 0xffffffffffffffff) r9 = add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000740)={r9}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha3(('], 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000a40)={0x0, @aes128, 0x0, @desc3}) keyctl$reject(0x13, r9, 0x2, 0x0, r3) bind$tipc(r1, &(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xca0d3d61cd558293, {0x40, 0x1, 0xa0000000}}, 0x3a) 10.488280512s ago: executing program 34 (id=427): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x7, 0x80000006, 0x20, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) r1 = socket$tipc(0x1e, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x13, 0x0, &(0x7f0000000940)) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a80), 0x109000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000ac0)=0xf) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000b00)=0x31) r6 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000800)='cgroup\x00') pread64(r7, &(0x7f0000000840)=""/15, 0xf, 0x4) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/net\x00') setsockopt$IP_VS_SO_SET_EDIT(r7, 0x0, 0x483, &(0x7f00000000c0)={0x2b, @remote, 0x4e21, 0x0, 'dh\x00', 0x2, 0xee6, 0x5e}, 0x2c) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x8008b705, 0xffffffffffffffff) r9 = add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000740)={r9}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha3(('], 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000a40)={0x0, @aes128, 0x0, @desc3}) keyctl$reject(0x13, r9, 0x2, 0x0, r3) bind$tipc(r1, &(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xca0d3d61cd558293, {0x40, 0x1, 0xa0000000}}, 0x3a) 5.641127309s ago: executing program 6 (id=479): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) mremap(&(0x7f0000d84000/0x2000)=nil, 0x7fffdf4dd000, 0x1002, 0x3, &(0x7f0000b22000/0x1000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000b22000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r1, 0x180000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x4, 0x4, "7312a4dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="400e4100000039497b32cade799f3021d0e65d92371b87c393e605050000001ca9bf89f70cce949be4433fea43084508512c5c14c521cae99ef78af3629e02bd63f3cb1eeeba5b"], 0x0, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0xb, 0x2, "2f0e"}, 0x0, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "659c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) mremap(&(0x7f0000d84000/0x2000)=nil, 0x7fffdf4dd000, 0x1002, 0x3, &(0x7f0000b22000/0x1000)=nil) (async) pipe(&(0x7f0000000000)) (async) mmap$xdp(&(0x7f0000b22000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r1, 0x180000000) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x4, 0x4, "7312a4dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="400e4100000039497b32cade799f3021d0e65d92371b87c393e605050000001ca9bf89f70cce949be4433fea43084508512c5c14c521cae99ef78af3629e02bd63f3cb1eeeba5b"], 0x0, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0xb, 0x2, "2f0e"}, 0x0, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "659c"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) 4.708927957s ago: executing program 4 (id=489): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x80485dc1c126afb3, 0x0, 0xffffffff, {0x33}}, 0x32}}, 0x10800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000300)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x2, 0x0, '\x00', 0xa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.505085538s ago: executing program 4 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="66b8000000000f23d80f21f86635000000300f23f86467660f6e900cedfd15172ef2d1c30f295400660f67f3360ffd72ad6765660fe8dfb8f20e8ee82ea18500", 0x40}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000180)={{@align=0x2, {0x0, 0x9, 0x8, 0x3}}, {{[0x0, 0x2, 0x4, 0x5]}, 0x0, 0x2, 0x2, 0x0, &(0x7f0000000080)=[{{@align=0x100000001, {0x5b1e, 0x8001, 0x0, 0x81}}, 0x6, 0x0, '.-$!+@@\x00'}, {{@align=0x8, {0x6, 0x7f, 0x5bf, 0x2}}, 0x0, 0x0, '/dev/kvm\x00'}, {{@align=0x10001, {0x7fff, 0x2, 0x6, 0x4}}, 0x2, 0x0, '/dev/kvm\x00'}, {{@_ha_fsid={[0x4d, 0xeb]}, {0x40, 0x1, 0x5, 0x6}}, 0x40, 0x0, '/dev/kvm\x00'}, {{@_ha_fsid={[0x9, 0x2]}, {0x3, 0x6, 0x8, 0x400}}, 0x6, 0x0, '/dev/kvm\x00'}]}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000, 0x0) 3.43618379s ago: executing program 4 (id=495): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x2d5a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x58, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xf7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x54, 0x9, 0xd}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x2, 0x0, 0x76, 0x20, 0x5}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x5, 0xf}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x459}}, {0xf3, &(0x7f0000000140)=@string={0xf3, 0x3, "3e809b39db8b8a3d97ca0cf8198884630858ca61bac129b73ddd470636cca8cfae8ae4b95018b56f82d763589a69022b4fa7f4e1f53aba56ded41c4f95c2d3329d852cc60557b509761352be99eaf9908612800e53ed712912d846213c3032e2dd0336827f34aea2ba84275edc0db8fd705e92db296188ed3d56a37c7c6d2f58d48b512e3504a91421c6877c5f640336cac2a1aeda00faf77d51017c48a47ee13266af64d050c1438f689e129990f0663e01166ed24d09ba66cdfc98a333f9f314f465b7d72123e663c1dde1e8408d065cc616d8a736657e981608fb9e1f89867721bc9ebda00b729305d5e487cde1ff10"}}, {0x4d, &(0x7f00000002c0)=@string={0x4d, 0x3, "a91e33e357cec5ea7255fbd282ca738ad4bd95cf061f66a6486a518953db083c5889920f43f9d18ae67ee9c42c019c12385437ccd199b8fdfadbd7ec30241b40952f0917c77aa2f8b118be"}}, {0x71, &(0x7f0000000340)=@string={0x71, 0x3, "ac1d3d75f7d16bfc8d4b4fa13f4cbb545231b4c349187a32effb13a1ce3196259e79cf76f04cc1074300009298f2b9277f3d331ccf99618e3a497fc568ca9043f78d4d23cfc970881a15f88ffe3f34ab7db016221fbe84e1086f71c20407d171d84c5bb54b4aa3b35621f5f5ce8db4"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x427}}, {0x43, &(0x7f0000000440)=@string={0x43, 0x3, "b06cf91fd36b406d564218e36742896f00b49b1e9b1008abd87f2aaeb5afae53983030581cdf2a4e3fd0bf8893aa697b6aadb55d3c83b43107403223b65065706e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x441}}]}) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x24, &(0x7f00000005c0)={0x40, 0xe, 0x99, {0x99, 0x8, "37a3867a157d97310a4d4498a89783ed5a6134f79ad2387206442c73f77c54d0cb94283187124fa1eb7674c8110c1d8c2faba019d109f9462383c40cd4dc9d2ffe153db4ec958e21da8697dfdd6e4c8e551093bb745f1bfa999251e7c7310d533852f8d4eccfaf1d7dab0a3f34acb5f432f1fcf73c75cf6c5dac867eb2e42bf8ec18064aee4895152a063a0233ba8c35727d1ecb0100f7"}}, &(0x7f0000000740)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "49766e8e916ce0e48804d3f8050f3471e9cecdf2e989e3cb4a4d8c38a48b965ba7c0a99711d3bf8612bf1615c12feaa0c7af32cf3254de8eb1ec7971f5460b3052145c7b4fbb18640775ddd02bcf7e061f80121cd01ad9c2131d8e6786dd818e9b16c6d38e7d1c4e9e1c3123fe45abafd5c52b948e188bc6081bd95d47e2f57afd262f9af555ff548021495a2fa501cd7e6a0f5aa6af1bf612872285455cfa1ee644ef745bf496126ecddb7c11970d99c969aca34f65bb861f3d1fe2fde2c2ef686f7e8f87279b793a5e2448fc36a5893cfffddfecf150f2afc3bce04198ec9f6f3e"}}, &(0x7f0000000840)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x12, "64e8a652"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xf66}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000900)={0x40, 0x30, 0x48, "b0e0e51b9dc6b12c8f71a5069e665477c42c4b0fb556c8e88324a8cb8f72089aedd47fa1be55496dac9bb6e9cff054145c4e0073f08143661f578c075fa71f03113a5afc436a8468"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x3d, "dc841c16a7608490278c31d89a6346bfde710413b9c74176b76f718e783b125928746e6ab5de93feea9cb308e4033e50339b169ad9d2d24678f7903485"}, &(0x7f0000000a80)={0x20, 0x3, 0x1}}) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000280)=0x8, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000700), 0x4) 3.198986565s ago: executing program 6 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sigaltstack(&(0x7f0000000340)={0x0, 0x3}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r3, &(0x7f0000000300)=0x74f, 0x8) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f00000001c0)=@generic={0x1800, 0x2}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'wg2\x00', {0x2, 0x0, @broadcast}}) setuid(0xee01) clock_adjtime(0x0, &(0x7f0000000000)={0x10001, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x81, 0xffffffffffffffff, 0x8000000000000001, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff, 0x4}) 3.106455845s ago: executing program 2 (id=500): recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{&(0x7f0000000000)=@ax25={{}, [@remote, @remote, @netrom, @remote, @null, @bcast, @bcast]}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/201, 0xc9}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000280)=""/60, 0x3c}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/45, 0x2d}], 0x1, &(0x7f0000000380)=""/92, 0x5c}, 0x3}, {{&(0x7f0000000400)=@caif=@rfm, 0x80, &(0x7f0000001640)=[{&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3, &(0x7f0000001680)=""/87, 0x57}, 0x2}, {{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/218, 0xda}, {&(0x7f0000001880)=""/251, 0xfb}], 0x2, &(0x7f00000019c0)=""/48, 0x30}, 0x7}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/254, 0xfe}, {&(0x7f0000001b00)=""/37, 0x25}, {&(0x7f0000001b40)=""/4, 0x4}, {&(0x7f0000001b80)=""/97, 0x61}, {&(0x7f0000001c00)=""/221, 0xdd}], 0x5, &(0x7f0000001d80)=""/4096, 0x1000}, 0x80000001}, {{&(0x7f0000002d80)=@phonet, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002e00)=""/245, 0xf5}, {&(0x7f0000002f00)=""/136, 0x88}, {&(0x7f0000002fc0)=""/193, 0xc1}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000003180)=""/68, 0x44}, {&(0x7f0000003200)=""/22, 0x16}, {&(0x7f0000003240)=""/117, 0x75}], 0x7, &(0x7f0000003340)=""/66, 0x42}, 0x3}, {{&(0x7f00000033c0)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003440)=""/247, 0xf7}, {&(0x7f0000003540)=""/100, 0x64}], 0x2}, 0x5}, {{&(0x7f0000003600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003680)=""/249, 0xf9}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/25, 0x19}], 0x3, &(0x7f0000004800)=""/141, 0x8d}, 0x10}], 0x8, 0x101, &(0x7f0000004ac0)={0x77359400}) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xca0d3d61cd558293, {0x40, 0x1, 0xa0000000}}, 0x3a) 3.104469225s ago: executing program 6 (id=501): socket(0x28, 0x5, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000002c0)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000003c0)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000400)={0xfffffffffffffff9, 0xf6d, 0x0, 0xd, 0x7fffffff, 0xfffffffffffffffe, 0x5, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8000000000005a, 0x3}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x408a00, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000540)=0x1) userfaultfd(0x801) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0xbf2, 0x2, 0x0, 0x0, 0x98, 0x101}, 0x20) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000580)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000005c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000600)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r8, &(0x7f0000000640)={'#! ', './file0'}, 0xb) writev(r8, &(0x7f0000000680)=[{&(0x7f00000006c0)="d6", 0x1}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000000c0)={{0x0, 0x100000, 0x8, 0xb, 0x1, 0xfc, 0x0, 0x1, 0x7, 0x1}, {0x40000, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x15, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x8}, {0xeeee8000, 0xffffffff, 0xa, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x1ffc, 0x220010, 0x3, 0x500, 0xfee00900}) 3.05541375s ago: executing program 2 (id=502): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000000000)="0000e20085c75c11a92614431ea3b121", 0x10) setsockopt(r1, 0x107, 0xf, &(0x7f0000000040)="00008634", 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @host, 0x1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) 2.920975004s ago: executing program 2 (id=503): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.force_empty\x00', 0x20202, 0x20) write$P9_RWALK(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x2) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000b80)={0x1}) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000000)={0x0, 0x4000007f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000c00)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000c40)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000c80)={0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000d00)={0x1, 0x1, &(0x7f0000000d40)=""/247, &(0x7f0000000e40)=""/87, &(0x7f0000000ec0)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000f40)={0x1, 0x0, [{0x25000, 0xe8, &(0x7f0000000f80)=""/232}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000001080)=0x1) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000010c0)={{'\x00', 0x3}, {0x7ff}, 0x0, 0x0, 0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)="77786e08d822b4e894c92aececb92a286546abfcf43d8a490836e207204d3db23b934afaa83a4b3f47e0184be3b99e69ba171d017320b136f901dfd2371f576419ec754e602d77a172b7ae0edb9a944e009e6c8bc924c9491ebbb8a6ba6501e339c7a7d45ba9ae89d52e4d9bfe1f0d16569b4d5d59e339bb2df2f6d4be02e1ef475e39635f21163cf832fa11a6acb416b4b86bf456c7e810a764df7dac0d791a8a3bba49af3bf7c364521abb580cd91db8e843722e9d57754fef2a85ea0a2add8b0f25bedbecca0b152f865835c9beb0d3bc5fd11abc23b5a175a05ccc4e68489fbdc093c0f7f5d2d4fd166a9ef713061b28e182b3174cd4733fd8cd1bc385690bbb00ed691ea8cfc7acf835fe13702eb2cdcc9f4955197aee07c40c9536176797888c8073fae3e98a1eeb6bc1bc6b205347306c50ecc7afa0a847e91026de81305c44c274cf4db01f0d23d17f505c20a05515ba74c576d1fb136e66e926cb3d8bfdcf7d2c4edc1ba9a99867beed99a9a21bbe26520f8ced3aef100505c82d3996fc1362c345e5ca5efd453290010e34288cd8e568d235ef81726b5f32decf94f529431479b0", 0x1a6, 0x0, &(0x7f0000001380)={0x2, 0xd4, {0x0, 0xc, 0x3e, "0b02a8bb9d86be8e004881392c15a1ff21813ddd1b016855289c648bc4de920b42c529197e2c7bf022d41454c878798baefa05653b2f3443b2ba6832eb3d", 0x89, "75c1de4d3c4ad8b8b2cbfaf1cc6a65e11795eda97f5a09a4b7abb999dfd1aa963ca40c190860173b2245209739055c4bf1bd2e04ebcd33102f723a4eb33c6f9ddeca642c96b65b9800de0037419737f222df3b4c3287d94e3eb439316001121f0d6dcc7accf4fc03c9c22a4426f7d96b4211d4990e5deddc28ad0a9b26ff5b1f134e318337f9c4bab6"}, 0xc9, "528cb1b9b4fba0d53ded1567609d4ed4cd523bf4bea331e751b3fe8782747cdecc3dcf7d52e86528219ddb3812e074a7a7308047fac72ccf3261b50c3942f9330907ef7f6940ef3b6f6272e1673c8a1daf87c813c00c38d8d82a795a4c8fe3ca5681999d95ec320d8752e28c9d075ecc474fd91e253fc4afbed02f86fc2bc262cd1269ea6002904b190886fa13b076304c0c88c372ba354dd6edf188a6fb2cfaa8c465bcb4c01a2f1b3ec73c03052d5b4f1d913a260aa291eb64bce7f033e414b0ee0f09be06276a22"}, 0x1a9}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001540)={0x0, 0x3ff, 0x5}) r5 = syz_open_dev$usbfs(&(0x7f0000001940), 0x205, 0x8401) fcntl$dupfd(r5, 0x0, r5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000001980)=0x1, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000019c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000001a00)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) 2.907659255s ago: executing program 6 (id=504): r0 = syz_clone(0x131280, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x0) 2.832026993s ago: executing program 6 (id=505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000980)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500add427323b470c47b45602067fffffff81004e220700000001000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 2.772592829s ago: executing program 6 (id=506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) syz_usb_connect$uac1(0x3, 0x94, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) (async) syz_usb_connect$uac1(0x3, 0x94, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0) (async) 2.717097865s ago: executing program 2 (id=507): exit(0xef1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xf3, 0x1800001, 0x81, 0x7fffffff, 0xfff8, 0x0, 0x10000, 0x0, 0x4bfb, 0x4, 0x200000000042, 0x20000000000004, 0x1000, 0x5, 0x10000000009, 0x100000090], 0x25000, 0x108e55}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000001c0)=0xb1, 0x4) accept4$unix(r1, 0x0, 0x0, 0x0) ptrace$cont(0x21, r0, 0x5, 0x4) 1.863080045s ago: executing program 2 (id=508): r0 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000000)=0x3, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e28, @loopback}, 0x10) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e28, @loopback}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000280)={0x10000f, 0xf2, 0x80000, {r6}}, 0x20) (async) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000280)={0x10000f, 0xf2, 0x80000, {r6}}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ftruncate(r7, 0x4) sendfile(r4, r7, 0x0, 0x10) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80c4, &(0x7f0000003540)={{'fd', 0x3d, r3}}) (async) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80c4, &(0x7f0000003540)={{'fd', 0x3d, r3}}) 1.789947363s ago: executing program 2 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="d036"], 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'team_slave_0\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x6}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x40085503, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x39, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x26, 0x4, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0xb, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004ca, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x39b7, 0x0, 0x6, 0x9], 0xeeee8000, 0x202}) ioctl$FIONCLEX(r7, 0x5450) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0100, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x8, 0x48, 0xd, 0xe6, 0x40, 0xfe, 0x0, 0x2, 0x80}, {0x2ffc, 0xd000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x8, 0x7}, {0x48ffc, 0x0, 0xd, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf, 0x8}, {0xeeee0000, 0x3ff8, 0xf, 0x3, 0x17, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7}, {0xeeefa000, 0xffff1000, 0x3, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x7e, 0x2f, 0x1, 0x7}, {0xdddd1000, 0x1000, 0xf, 0x5, 0x7, 0x5, 0x40, 0x3, 0x8, 0x1, 0x44, 0x72}, {0x9000, 0x4000, 0xa, 0x9, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0x4000, 0x30}, {0xffe, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x4, 0x2000, 0xffffffff, [0x8, 0x5, 0xffffffff, 0x20008]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000005c0)={'bridge0\x00', 0x1000}) 913.089884ms ago: executing program 3 (id=516): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0xfd9c, 0x4044881, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}, 0x12}, 0xfffffdfc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0xefbe, 0x4) lseek(r0, 0x0, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xa14, 0x0, 0x6}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000340)=[@decrefs={0x40046307, 0x3}, @request_death={0x400c630e, 0x1}, @register_looper, @freeze_done={0x40086315, 0x2}, @enter_looper], 0x53}) 909.711544ms ago: executing program 3 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000001180)='omfs\x00', 0x2121001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/bridge0/bridge/no_linklocal_learn\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x30e, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09007f0000000000000000000000000000ffff"], 0x4c}}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x44}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0xbaa}], 0x1}}], 0x2, 0x88c4) write$binfmt_script(r8, &(0x7f0000001100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) ioctl$FS_IOC_RESVSP(r6, 0x4030582b, &(0x7f0000001140)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d04, 0x0, 0x3d07}]}) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008881}, 0x80) write$cgroup_pid(r0, &(0x7f00000002c0), 0x12) 693.351447ms ago: executing program 3 (id=518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000040)=0x3, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1, 0x10040) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000003c0)=@urb_type_bulk={0x3, {}, 0x80000000, 0x61, &(0x7f0000000300)="2e51e27b3d449b80069e8e9d4972de516d077d8a404b34fb32fbd0a453d7f533ce3a6fbeeeceb3349bc8c6d417ab2b51dc", 0x31, 0x80, 0x9, 0x80, 0x3, 0x2, &(0x7f0000000380)="25ea"}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/icmp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/165, 0xa5}], 0x1, 0x4, 0x0) sendmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="272410edff", 0x2427}], 0x1}}], 0x1, 0x20000000) 609.102736ms ago: executing program 3 (id=519): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RGETLOCK(r1, &(0x7f0000000100)={0x1f, 0x37, 0x2, {0x1, 0x0, 0x80000000, 0x0, 0x1, '\x00'}}, 0x1f) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/113, 0x71}], 0x1) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000600)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b80)={r2, 0x300}, &(0x7f0000000bc0)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000c00)) (async) r3 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, r2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x10000, 0x7}) (async) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 607.416486ms ago: executing program 3 (id=520): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x1c8d8, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x4) 596.715117ms ago: executing program 3 (id=521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000001c0)="66b8000000000f23d80f21f86635000000300f23f86467660f6e900cedfd15172ef2d1c30f295400660f67f3360ffd72ad6765660fe8dfb8f20e8ee82ea18500", 0x40}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000200)=@svm={0x0, 0x1, 0x1080, {0x40000, 0x5d}, {"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"}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001280)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="66b9b500004066b80800000066ba000000000f306d66b9ad0900000f3266b824f100000f23d80f21f86635800000a00f23f8baa000b8f100ef66b9800000c00f326635000800000f30dc2cf20f070ff8170f00910000", 0x47}], 0x0, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 315.523077ms ago: executing program 4 (id=522): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60000600) unshare(0x62070000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x38, 0x4000006, 0x81, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4122, 0x101a}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000001400)=""/296, 0x128}, {&(0x7f0000001540)=""/161, 0xa1}, {&(0x7f0000001600)=""/209, 0xd1}, {&(0x7f0000001700)=""/228, 0xe4}, {&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/89, 0x59}], 0x8}, 0x1207}], 0x3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000040)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x0, 0x0, 0x4, 0x1}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dvmrp1\x00'}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) setns(0xc9, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) unshare(0x60000600) (async) unshare(0x62070000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x38, 0x4000006, 0x81, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast}}}}) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4122, 0x101a}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000001400)=""/296, 0x128}, {&(0x7f0000001540)=""/161, 0xa1}, {&(0x7f0000001600)=""/209, 0xd1}, {&(0x7f0000001700)=""/228, 0xe4}, {&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/89, 0x59}], 0x8}, 0x1207}], 0x3, 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) futex_waitv(&(0x7f0000000040)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x0, 0x0, 0x4, 0x1}}, 0x2e) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dvmrp1\x00'}) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) (async) 5.114699ms ago: executing program 4 (id=523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000980)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) 0s ago: executing program 4 (id=524): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000180)=0x40b, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40480c4) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000027000100000000000000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f00000005c0)={0xd5, 0x0, 0x884}) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="390000001300034700bb5be1c3e400000000000005000000450000002500000019000d0000000000000bf400534899468546f9e643b78248a46c", 0x3a}], 0x1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002300000004"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x48084) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000700)={0x0, 0x2d9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa92c}}], 0x1, &(0x7f0000000900)={0x2e, 0x8, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1000, 0x0, 0x0, &(0x7f0000000a00)=@buf_1k="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"}}, &(0x7f0000000b00)) kernel console output (not intermixed with test programs): tex_lock+0x97/0x1d0 [ 44.599365][ T835] ? __cfi_mutex_lock+0x10/0x10 [ 44.599447][ T835] ksys_read+0x145/0x260 [ 44.599530][ T835] ? __cfi_ksys_read+0x10/0x10 [ 44.599613][ T835] ? __kasan_check_read+0x15/0x20 [ 44.599688][ T835] __x64_sys_read+0x7f/0x90 [ 44.599773][ T835] x64_sys_call+0x2638/0x2ee0 [ 44.599835][ T835] do_syscall_64+0x57/0xf0 [ 44.599898][ T835] ? clear_bhb_loop+0x50/0xa0 [ 44.599970][ T835] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.600045][ T835] RIP: 0033:0x7fa2ea76034e [ 44.600097][ T835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.600140][ T835] RSP: 002b:00007fa2eb61afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.600202][ T835] RAX: ffffffffffffffda RBX: 00007fa2eb61b6c0 RCX: 00007fa2ea76034e [ 44.600252][ T835] RDX: 000000000000000f RSI: 00007fa2eb61b0a0 RDI: 0000000000000005 [ 44.600299][ T835] RBP: 00007fa2eb61b090 R08: 0000000000000000 R09: 0000000000000000 [ 44.600355][ T835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.600411][ T835] R13: 00007fa2eaa26038 R14: 00007fa2eaa25fa0 R15: 00007ffc69796bb8 [ 44.600456][ T835] [ 45.073699][ T311] usb 4-1: device descriptor read/64, error -71 [ 45.073699][ T67] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.203669][ T67] usb 2-1: device descriptor read/64, error -71 [ 45.323756][ T311] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 45.443689][ T67] usb 2-1: device descriptor read/64, error -71 [ 45.453700][ T311] usb 4-1: device descriptor read/64, error -71 [ 45.683674][ T67] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.693998][ T311] usb 4-1: device descriptor read/64, error -71 [ 45.751819][ T854] raw_sendmsg: syz.0.127 forgot to set AF_INET. Fix it! [ 45.811592][ T311] usb usb4-port1: attempt power cycle [ 45.824093][ T67] usb 2-1: device descriptor read/64, error -71 [ 46.073674][ T67] usb 2-1: device descriptor read/64, error -71 [ 46.083666][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.173700][ T311] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 46.183748][ T67] usb usb2-port1: attempt power cycle [ 46.204818][ T311] usb 4-1: device descriptor read/8, error -71 [ 46.243669][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 46.250229][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.261560][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.271703][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.284826][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.294422][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.304255][ T45] usb 3-1: config 0 descriptor?? [ 46.344815][ T311] usb 4-1: device descriptor read/8, error -71 [ 46.523672][ T67] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.544818][ T67] usb 2-1: device descriptor read/8, error -71 [ 46.603807][ T311] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 46.624346][ T859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 46.625690][ T311] usb 4-1: device descriptor read/8, error -71 [ 46.668527][ T861] fuse: Bad value for 'fd' [ 46.673121][ T862] fuse: Bad value for 'fd' [ 46.678702][ T67] usb 2-1: device descriptor read/8, error -71 [ 46.715606][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.723002][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.730526][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.737834][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.745184][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.752420][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.759685][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.767061][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.774394][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.781724][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.789036][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.796342][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.803591][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.810982][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.818288][ T311] usb 4-1: device descriptor read/8, error -71 [ 46.824518][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 46.834365][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input4 [ 46.847407][ T45] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 46.933888][ T311] usb usb4-port1: unable to enumerate USB device [ 46.943681][ T67] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.975218][ T67] usb 2-1: device descriptor read/8, error -71 [ 47.105176][ T67] usb 2-1: device descriptor read/8, error -71 [ 47.173693][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.224210][ T67] usb usb2-port1: unable to enumerate USB device [ 47.333692][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 47.353491][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.372714][ T9] usb 1-1: config 0 has no interface number 0 [ 47.378915][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 47.395136][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 47.413654][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.423827][ T9] usb 1-1: Product: syz [ 47.428029][ T9] usb 1-1: Manufacturer: syz [ 47.432747][ T9] usb 1-1: SerialNumber: syz [ 47.443079][ T9] usb 1-1: config 0 descriptor?? [ 47.453821][ T9] smsc75xx v1.0.0 [ 47.538456][ T887] capability: warning: `syz.3.136' uses deprecated v2 capabilities in a way that may be insecure [ 47.655395][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 47.676393][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 47.693646][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 47.723702][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 47.853676][ T871] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.015155][ T871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 48.033845][ T871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.053700][ T871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 48.072820][ T871] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.095957][ T871] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 48.105082][ T871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 48.123286][ T871] usb 4-1: Product: syz [ 48.129777][ T871] usb 4-1: Manufacturer: syz [ 48.804598][ T9] usb 3-1: USB disconnect, device number 13 [ 48.870219][ T919] ======================================================= [ 48.870219][ T919] WARNING: The mand mount option has been deprecated and [ 48.870219][ T919] and is ignored by this kernel. Remove the mand [ 48.870219][ T919] option from the mount to silence this warning. [ 48.870219][ T919] ======================================================= [ 48.905949][ T919] overlayfs: conflicting options: nfs_export=on,index=off [ 48.933158][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 48.933178][ T36] audit: type=1400 audit(1793647104.920:857): avc: denied { bpf } for pid=920 comm="syz.2.140" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.011166][ T871] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 49.018371][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 49.031045][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 49.039751][ T36] audit: type=1400 audit(1793647105.030:858): avc: denied { bind } for pid=922 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.054473][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 49.068903][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 49.079074][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 49.088196][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 49.097911][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 49.107090][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 49.116260][ T871] usb 4-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 49.125389][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 49.134634][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 49.143897][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 49.154359][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 49.164074][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 7 on unit 48: -71 (exp. 1). [ 49.173425][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 49.182976][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 49.192093][ T871] usb 4-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 49.201276][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 16 on unit 48: -71 (exp. 1). [ 49.210519][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 49.219758][ T871] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 49.228982][ T871] usb 4-1: No streaming interface found for terminal 2. [ 49.238540][ T871] usb 4-1: USB disconnect, device number 9 [ 49.253310][ T934] WARNING! power/level is deprecated; use power/control instead [ 49.388824][ T36] audit: type=1400 audit(1793647105.380:859): avc: denied { search } for pid=945 comm="syz.1.147" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 49.487344][ T36] audit: type=1400 audit(1793647105.480:860): avc: denied { map } for pid=948 comm="syz.1.148" path="/proc/115/net/vlan/config" dev="proc" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.511672][ T36] audit: type=1400 audit(1793647105.510:861): avc: denied { execute } for pid=948 comm="syz.1.148" path="/proc/115/net/vlan/config" dev="proc" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.585776][ T36] audit: type=1400 audit(1793647105.580:862): avc: denied { read } for pid=953 comm="syz.1.150" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.590103][ T955] overlayfs: workdir and upperdir must be separate subtrees [ 49.635663][ T36] audit: type=1400 audit(1793647105.580:863): avc: denied { open } for pid=953 comm="syz.1.150" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.681754][ T36] audit: type=1400 audit(1793647105.580:864): avc: denied { ioctl } for pid=953 comm="syz.1.150" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.734550][ T36] audit: type=1400 audit(1793647105.630:865): avc: denied { listen } for pid=953 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.925449][ T311] usb 1-1: USB disconnect, device number 6 [ 49.951261][ T36] audit: type=1400 audit(1793647105.940:866): avc: denied { execute } for pid=968 comm="syz.0.155" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 50.345596][ T976] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 50.623678][ T311] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.786569][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 50.799678][ T311] usb 3-1: can't read configurations, error -61 [ 50.904606][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.911713][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.918838][ T1038] bridge_slave_0: entered allmulticast mode [ 50.925245][ T1038] bridge_slave_0: entered promiscuous mode [ 50.932220][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.939338][ T311] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 50.940027][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.954132][ T1038] bridge_slave_1: entered allmulticast mode [ 50.960562][ T1038] bridge_slave_1: entered promiscuous mode [ 50.977763][ T1046] ÿÿÿÿÿÿ: renamed from bridge0 (while UP) [ 51.019686][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.026792][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.034130][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.041173][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.064851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.072160][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.081771][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.088901][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.098140][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.105226][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.109032][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.120477][ T311] usb 3-1: can't read configurations, error -61 [ 51.127062][ T311] usb usb3-port1: attempt power cycle [ 51.147143][ T1038] veth0_vlan: entered promiscuous mode [ 51.158178][ T1038] veth1_macvtap: entered promiscuous mode [ 51.223677][ T743] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.373664][ T743] usb 2-1: Using ep0 maxpacket: 8 [ 51.380394][ T743] usb 2-1: unable to get BOS descriptor or descriptor too short [ 51.394426][ T743] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 51.405171][ T743] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 51.420765][ T743] usb 2-1: config 4 has no interface number 0 [ 51.429244][ T743] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 51.438947][ T743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.448005][ T743] usb 2-1: Product: syz [ 51.452493][ T743] usb 2-1: Manufacturer: syz [ 51.458419][ T743] usb 2-1: SerialNumber: syz [ 51.483645][ T311] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 51.505915][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.513572][ T311] usb 3-1: can't read configurations, error -61 [ 51.663701][ T311] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 51.686649][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.694381][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.694536][ T311] usb 3-1: can't read configurations, error -61 [ 51.708983][ T311] usb usb3-port1: unable to enumerate USB device [ 51.721483][ T743] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 51.728209][ T743] usb 2-1: No valid video chain found. [ 51.736414][ T743] usb 2-1: USB disconnect, device number 12 [ 51.833754][ T9] usb 4-1: device descriptor read/64, error -71 [ 52.073761][ T9] usb 4-1: device descriptor read/64, error -71 [ 52.198622][ T1064] Zero length message leads to an empty skb [ 52.232575][ T1069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.241700][ T1069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.323759][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 52.453798][ T9] usb 4-1: device descriptor read/64, error -71 [ 52.453799][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.463778][ T45] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 52.605389][ T311] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 52.614684][ T311] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 52.622758][ T311] usb 5-1: Product: syz [ 52.627841][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 52.635880][ T311] usb 5-1: config 0 descriptor?? [ 52.641967][ T311] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 52.649625][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.660092][ T311] usb 5-1: Detected FT232H [ 52.664785][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.674796][ T45] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 52.683949][ T45] usb 2-1: New USB device strings: Mfr=245, Product=194, SerialNumber=0 [ 52.692315][ T45] usb 2-1: Product: syz [ 52.696539][ T45] usb 2-1: Manufacturer: syz [ 52.703351][ T45] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 52.709813][ T45] usb 2-1: Failed to create links for entity 1 [ 52.713783][ T9] usb 4-1: device descriptor read/64, error -71 [ 52.716148][ T45] usb 2-1: Failed to register entities (-22). [ 52.823788][ T9] usb usb4-port1: attempt power cycle [ 52.864377][ T311] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 52.871450][ T311] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 52.878593][ T311] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 52.885690][ T311] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 52.894792][ T311] usb 5-1: USB disconnect, device number 2 [ 52.901875][ T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 52.911599][ T311] ftdi_sio 5-1:0.0: device disconnected [ 52.917501][ T1069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.926051][ T1069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.935291][ T1069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.943881][ T1069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.954798][ T1069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.963344][ T1069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.972710][ T743] usb 2-1: USB disconnect, device number 13 [ 53.163675][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 53.184686][ T9] usb 4-1: device descriptor read/8, error -71 [ 53.314775][ T9] usb 4-1: device descriptor read/8, error -71 [ 53.326312][ T1079] netlink: 'syz.2.186': attribute type 7 has an invalid length. [ 53.509225][ T1090] overlayfs: failed to resolve './bus': -2 [ 53.518124][ T1090] FAULT_INJECTION: forcing a failure. [ 53.518124][ T1090] name fail_futex, interval 1, probability 0, space 0, times 0 [ 53.531279][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: syz.1.191 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 53.531319][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 53.531337][ T1090] Call Trace: [ 53.531346][ T1090] [ 53.531355][ T1090] __dump_stack+0x21/0x30 [ 53.531399][ T1090] dump_stack_lvl+0x140/0x1c0 [ 53.531426][ T1090] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.531454][ T1090] ? is_bpf_text_address+0x17b/0x1a0 [ 53.531491][ T1090] dump_stack+0x19/0x20 [ 53.531517][ T1090] should_fail_ex+0x3c2/0x510 [ 53.531560][ T1090] should_fail+0xf/0x20 [ 53.531600][ T1090] get_futex_key+0x178/0x940 [ 53.531627][ T1090] ? __cfi_get_futex_key+0x10/0x10 [ 53.531650][ T1090] ? stack_depot_save_flags+0x38/0x800 [ 53.531688][ T1090] futex_wait_setup+0xae/0x260 [ 53.531725][ T1090] ? kasan_save_track+0x3e/0x80 [ 53.531751][ T1090] ? __cfi_futex_wait_setup+0x10/0x10 [ 53.531789][ T1090] ? alloc_file_pseudo+0x142/0x1f0 [ 53.531823][ T1090] ? __sys_socket+0x14c/0x1c0 [ 53.531851][ T1090] ? __asan_memcpy+0x5a/0x80 [ 53.531884][ T1090] __futex_wait+0x12c/0x3d0 [ 53.531914][ T1090] ? __cfi___futex_wait+0x10/0x10 [ 53.531953][ T1090] ? __cfi_futex_wake_mark+0x10/0x10 [ 53.531990][ T1090] ? __kasan_check_read+0x15/0x20 [ 53.532026][ T1090] ? futex_wake+0x627/0x950 [ 53.532064][ T1090] futex_wait+0x128/0x7c0 [ 53.532101][ T1090] ? __cfi_futex_wait+0x10/0x10 [ 53.532138][ T1090] do_futex+0x32a/0x510 [ 53.532169][ T1090] ? errseq_sample+0x48/0x70 [ 53.532198][ T1090] ? file_init_path+0x434/0x590 [ 53.532232][ T1090] ? __cfi_do_futex+0x10/0x10 [ 53.532261][ T1090] ? alloc_file_pseudo+0x191/0x1f0 [ 53.532295][ T1090] __se_sys_futex+0x13c/0x320 [ 53.532328][ T1090] ? __x64_sys_futex+0x110/0x110 [ 53.532358][ T1090] ? is_dma_buf_file+0x11/0x50 [ 53.532402][ T1090] __x64_sys_futex+0xe9/0x110 [ 53.532430][ T1090] x64_sys_call+0x227f/0x2ee0 [ 53.532463][ T1090] do_syscall_64+0x57/0xf0 [ 53.532488][ T1090] ? clear_bhb_loop+0x50/0xa0 [ 53.532527][ T1090] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.532564][ T1090] RIP: 0033:0x7f2cf099fb19 [ 53.532586][ T1090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.532609][ T1090] RSP: 002b:00007f2cf18470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 53.532640][ T1090] RAX: ffffffffffffffda RBX: 00007f2cf0c25fa8 RCX: 00007f2cf099fb19 [ 53.532660][ T1090] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2cf0c25fa8 [ 53.532683][ T1090] RBP: 00007f2cf0c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 53.532701][ T1090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.532718][ T1090] R13: 00007f2cf0c26038 R14: 00007ffc161e7210 R15: 00007ffc161e72f8 [ 53.532746][ T1090] [ 53.584063][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.606806][ T1090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.645562][ T9] usb 4-1: device descriptor read/8, error -71 [ 53.649713][ T1090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.704201][ T871] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 53.875199][ T9] usb 4-1: device descriptor read/8, error -71 [ 53.883684][ T311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.993871][ T9] usb usb4-port1: unable to enumerate USB device [ 54.013663][ T311] usb 2-1: device descriptor read/64, error -71 [ 54.022711][ T871] usb 3-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 54.031944][ T871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.040022][ T871] usb 3-1: Product: syz [ 54.044397][ T871] usb 3-1: Manufacturer: syz [ 54.049063][ T871] usb 3-1: SerialNumber: syz [ 54.253709][ T311] usb 2-1: device descriptor read/64, error -71 [ 54.263500][ T871] usb 3-1: Can't get UAC3 power state for id 10 [ 54.270531][ T871] usb 3-1: BAAD SPEAKERPHONE c_chmask mismatch [ 54.280761][ T871] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.296855][ T871] usb 3-1: USB disconnect, device number 18 [ 54.312048][ T475] udevd[475]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.486436][ T1100] netlink: 'syz.3.195': attribute type 11 has an invalid length. [ 54.513828][ T311] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 54.572749][ T1105] 9pnet: p9_errstr2errno: server reported unknown error tun [ 54.580140][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.599941][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.609112][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.618081][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.627125][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.636179][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.645150][ T311] usb 2-1: device descriptor read/64, error -71 [ 54.645835][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.660418][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.669525][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.678564][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.687532][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.712367][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 54.712384][ T36] audit: type=1400 audit(1793647110.700:895): avc: denied { write } for pid=1113 comm="syz.3.199" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.714109][ T1114] 9pnet_fd: Insufficient options for proto=fd [ 54.745241][ T31] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.758686][ T31] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 54.769946][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 54.779136][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.802532][ T1118] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 54.811365][ T1118] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 54.820809][ T1118] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 54.833904][ T1118] overlayfs: missing 'lowerdir' [ 54.841758][ T36] audit: type=1400 audit(1793647110.830:896): avc: denied { write } for pid=1113 comm="syz.3.199" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.864064][ T36] audit: type=1400 audit(1793647110.830:897): avc: denied { remove_name } for pid=1113 comm="syz.3.199" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.886829][ T36] audit: type=1400 audit(1793647110.830:898): avc: denied { unlink } for pid=1113 comm="syz.3.199" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.923675][ T311] usb 2-1: device descriptor read/64, error -71 [ 54.991355][ T36] audit: type=1400 audit(1793647110.980:899): avc: denied { search } for pid=1095 comm="syz.4.193" name="/" dev="configfs" ino=2337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.013741][ T31] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 55.024138][ T31] usb 5-1: USB disconnect, device number 3 [ 55.033780][ T311] usb usb2-port1: attempt power cycle [ 55.197194][ T1131] 9pnet_fd: p9_fd_create_tcp (1131): problem connecting socket to 127.0.0.1 [ 55.383669][ T311] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 55.404729][ T311] usb 2-1: device descriptor read/8, error -71 [ 55.443664][ T871] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 55.534795][ T311] usb 2-1: device descriptor read/8, error -71 [ 55.556369][ T36] audit: type=1400 audit(1793647111.550:900): avc: denied { setopt } for pid=1132 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.575850][ T36] audit: type=1400 audit(1793647111.550:901): avc: denied { accept } for pid=1132 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 55.603662][ T871] usb 3-1: Using ep0 maxpacket: 8 [ 55.609944][ T871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.621020][ T871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 55.631198][ T1138] FAULT_INJECTION: forcing a failure. [ 55.631198][ T1138] name failslab, interval 1, probability 0, space 0, times 0 [ 55.634565][ T871] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 55.647424][ T1138] CPU: 1 UID: 0 PID: 1138 Comm: syz.4.207 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 55.647514][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.647556][ T1138] Call Trace: [ 55.647575][ T1138] [ 55.647596][ T1138] __dump_stack+0x21/0x30 [ 55.647661][ T1138] dump_stack_lvl+0x140/0x1c0 [ 55.647723][ T1138] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.647798][ T1138] dump_stack+0x19/0x20 [ 55.647850][ T1138] should_fail_ex+0x3c2/0x510 [ 55.647944][ T1138] should_failslab+0xac/0x100 [ 55.648014][ T1138] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 55.648137][ T1138] ? key_alloc+0x338/0x1060 [ 55.648202][ T1138] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 55.648295][ T1138] kmemdup_noprof+0x31/0x80 [ 55.648369][ T1138] key_alloc+0x338/0x1060 [ 55.648450][ T1138] keyring_alloc+0x4b/0xc0 [ 55.648533][ T1138] lookup_user_key+0x485/0x1230 [ 55.648622][ T1138] ? __cfi_lookup_user_key+0x10/0x10 [ 55.648694][ T1138] ? do_futex+0x32a/0x510 [ 55.648750][ T1138] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 55.648828][ T1138] ? strncpy_from_user+0x14f/0x280 [ 55.648913][ T1138] __se_sys_add_key+0x317/0x4b0 [ 55.648974][ T1138] ? __x64_sys_add_key+0xf0/0xf0 [ 55.649028][ T1138] ? __kasan_check_write+0x18/0x20 [ 55.649116][ T1138] ? fpregs_restore_userregs+0x11c/0x260 [ 55.649190][ T1138] __x64_sys_add_key+0xc3/0xf0 [ 55.649254][ T1138] x64_sys_call+0x195f/0x2ee0 [ 55.649317][ T1138] do_syscall_64+0x57/0xf0 [ 55.649370][ T1138] ? clear_bhb_loop+0x50/0xa0 [ 55.649478][ T1138] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.649564][ T1138] RIP: 0033:0x7f2f6f99fb19 [ 55.649613][ T1138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.649666][ T1138] RSP: 002b:00007f2f70836028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 55.649729][ T1138] RAX: ffffffffffffffda RBX: 00007f2f6fc25fa0 RCX: 00007f2f6f99fb19 [ 55.649767][ T1138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 55.649800][ T1138] RBP: 00007f2f6fa37af8 R08: ffffffffffffffff R09: 0000000000000000 [ 55.649873][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.649914][ T1138] R13: 00007f2f6fc26038 R14: 00007f2f6fc25fa0 R15: 00007fffa59f0328 [ 55.649965][ T1138] [ 55.783730][ T311] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 55.792007][ T871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.813758][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 55.821011][ T871] usb 3-1: config 0 descriptor?? [ 55.837815][ T311] usb 2-1: device descriptor read/8, error -71 [ 55.870137][ T871] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 55.929854][ T871] usbhid 3-1:0.0: can't add hid device: -22 [ 55.935866][ T871] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 56.014737][ T311] usb 2-1: device descriptor read/8, error -71 [ 56.033661][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 56.039820][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 210, changing to 7 [ 56.052350][ T45] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 56.060059][ T1130] overlayfs: failed to resolve './file0/file1': -2 [ 56.062425][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.071448][ T1143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.076122][ T45] usb 4-1: Product: syz [ 56.092012][ T45] usb 4-1: Manufacturer: syz [ 56.096693][ T45] usb 4-1: SerialNumber: syz [ 56.123738][ T311] usb usb2-port1: unable to enumerate USB device [ 56.303816][ T36] audit: type=1400 audit(1793647112.290:902): avc: denied { write } for pid=1132 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.481865][ T1145] rust_binder: 1144:1145 got reply transaction with no transaction stack [ 56.490428][ T1145] rust_binder: 1144:1145 transaction reply to 0:0 failed EINVAL, code 1 size 0-0 line thread.rs:1560 [ 56.502621][ T9] rust_binder: 1144: undelivered TRANSACTION_ERROR: 29201 [ 56.510803][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.524944][ T45] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 56.532669][ T45] usb 4-1: unit 2 not found! [ 56.548713][ T36] audit: type=1400 audit(1793647112.540:903): avc: denied { shutdown } for pid=1146 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.553360][ T45] usb 4-1: USB disconnect, device number 14 [ 56.578838][ T36] audit: type=1400 audit(1793647112.570:904): avc: denied { write } for pid=1146 comm="syz.1.210" path="socket:[11479]" dev="sockfs" ino=11479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.739050][ T1174] Unsupported ieee802154 address type: 0 [ 57.515816][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 58.035346][ T1239] rust_binder: Write failure EFAULT in pid:74 [ 58.041599][ T1239] rust_binder: 1238:1239 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 58.049763][ T1239] rust_binder: 1238:1239 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 58.118300][ T1243] FAULT_INJECTION: forcing a failure. [ 58.118300][ T1243] name failslab, interval 1, probability 0, space 0, times 0 [ 58.131060][ T1243] CPU: 0 UID: 0 PID: 1243 Comm: syz.4.236 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 58.131096][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 58.131116][ T1243] Call Trace: [ 58.131121][ T1243] [ 58.131127][ T1243] __dump_stack+0x21/0x30 [ 58.131147][ T1243] dump_stack_lvl+0x140/0x1c0 [ 58.131161][ T1243] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.131177][ T1243] ? stack_trace_save+0xaa/0x100 [ 58.131205][ T1243] dump_stack+0x19/0x20 [ 58.131218][ T1243] should_fail_ex+0x3c2/0x510 [ 58.131244][ T1243] should_failslab+0xac/0x100 [ 58.131261][ T1243] __kmalloc_cache_noprof+0x41/0x470 [ 58.131285][ T1243] ? proc_self_get_link+0x119/0x290 [ 58.131306][ T1243] proc_self_get_link+0x119/0x290 [ 58.131326][ T1243] ? security_inode_follow_link+0x7e/0x180 [ 58.131348][ T1243] ? __cfi_proc_self_get_link+0x10/0x10 [ 58.131368][ T1243] pick_link+0x6d4/0xe80 [ 58.131392][ T1243] step_into+0xc33/0xf10 [ 58.131414][ T1243] ? read_word_at_a_time+0x1a/0x40 [ 58.131431][ T1243] ? set_root+0x420/0x420 [ 58.131454][ T1243] ? inode_permission+0xf3/0x4c0 [ 58.131470][ T1243] link_path_walk+0x746/0xeb0 [ 58.131496][ T1243] path_openat+0x298/0x35a0 [ 58.131515][ T1243] ? kasan_save_alloc_info+0x3a/0x50 [ 58.131537][ T1243] ? __kasan_slab_alloc+0x73/0x90 [ 58.131553][ T1243] ? getname+0x1b/0x30 [ 58.131566][ T1243] ? x64_sys_call+0xe69/0x2ee0 [ 58.131583][ T1243] ? do_syscall_64+0x57/0xf0 [ 58.131600][ T1243] ? do_filp_open+0x440/0x440 [ 58.131619][ T1243] do_filp_open+0x1f2/0x440 [ 58.131638][ T1243] ? __cfi_do_filp_open+0x10/0x10 [ 58.131659][ T1243] ? alloc_fd+0x4c1/0x570 [ 58.131675][ T1243] do_sys_openat2+0x134/0x1d0 [ 58.131703][ T1243] ? fput+0x1a4/0x230 [ 58.131721][ T1243] ? do_sys_open+0x100/0x100 [ 58.131742][ T1243] ? __cfi_ksys_write+0x10/0x10 [ 58.131767][ T1243] __x64_sys_openat+0x13a/0x170 [ 58.131788][ T1243] x64_sys_call+0xe69/0x2ee0 [ 58.131805][ T1243] do_syscall_64+0x57/0xf0 [ 58.131820][ T1243] ? clear_bhb_loop+0x50/0xa0 [ 58.131842][ T1243] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.131862][ T1243] RIP: 0033:0x7f2f6f96034e [ 58.131876][ T1243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.131890][ T1243] RSP: 002b:00007f2f70835ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.131907][ T1243] RAX: ffffffffffffffda RBX: 00007f2f708366c0 RCX: 00007f2f6f96034e [ 58.131920][ T1243] RDX: 0000000000000002 RSI: 00007f2f70835f90 RDI: ffffffffffffff9c [ 58.131969][ T1243] RBP: 00007f2f6fa37af8 R08: 0000000000000000 R09: 0000000000000000 [ 58.131985][ T1243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.132003][ T1243] R13: 00007f2f6fc26038 R14: 00007f2f6fc25fa0 R15: 00007fffa59f0328 [ 58.132034][ T1243] [ 58.437097][ T9] usb 3-1: USB disconnect, device number 19 [ 58.487412][ T1254] SELinux: policydb string SE L does not match my string SE Linux [ 58.495457][ T1254] SELinux: failed to load policy [ 58.656204][ T1263] netlink: 'syz.2.244': attribute type 4 has an invalid length. [ 59.559978][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.568867][ T1283] bridge_slave_0 (unregistering): left allmulticast mode [ 59.576602][ T1283] bridge_slave_0 (unregistering): left promiscuous mode [ 59.583646][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.633684][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.697231][ T1301] netlink: 'syz.2.256': attribute type 25 has an invalid length. [ 59.773686][ T9] usb 5-1: device descriptor read/64, error -71 [ 59.835632][ T1305] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“�ë) failed with errno=-22 [ 60.013636][ T9] usb 5-1: device descriptor read/64, error -71 [ 60.263637][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.296320][ T36] kauditd_printk_skb: 349 callbacks suppressed [ 60.296338][ T36] audit: type=1400 audit(1793647116.290:1254): avc: denied { read } for pid=1314 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.351697][ T36] audit: type=1400 audit(1793647116.340:1255): avc: denied { mounton } for pid=1314 comm="syz.1.259" path="/proc/197/cgroup" dev="proc" ino=12143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 60.375305][ T36] audit: type=1400 audit(1793647116.340:1256): avc: denied { mounton } for pid=1314 comm="syz.1.259" path="/proc/197/cgroup" dev="proc" ino=4026532323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.404007][ T9] usb 5-1: device descriptor read/64, error -71 [ 60.456067][ T1325] Invalid ELF header type: 2 != 1 [ 60.457187][ T36] audit: type=1400 audit(1793647116.450:1257): avc: denied { module_load } for pid=1324 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 60.513400][ T1331] SELinux: policydb version 1595553468 does not match my version range 15-33 [ 60.525009][ T1330] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.540172][ T1331] SELinux: failed to load policy [ 60.546966][ T1330] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.595114][ T1338] rust_binder: Write failure EINVAL in pid:212 [ 60.673740][ T9] usb 5-1: device descriptor read/64, error -71 [ 60.773672][ T311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 60.783740][ T9] usb usb5-port1: attempt power cycle [ 60.793682][ T743] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 60.853684][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 60.924862][ T311] usb 4-1: config 1 has too many interfaces: 34, using maximum allowed: 32 [ 60.933547][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.943730][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 34 [ 60.952701][ T311] usb 4-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 60.953707][ T743] usb 2-1: Using ep0 maxpacket: 16 [ 60.961801][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.969946][ T743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.983950][ T45] usb 3-1: device descriptor read/64, error -71 [ 60.986284][ T743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.004943][ T743] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 61.014888][ T743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.023682][ T743] usb 2-1: config 0 descriptor?? [ 61.123660][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.144689][ T9] usb 5-1: device descriptor read/8, error -71 [ 61.198205][ T871] usb 4-1: USB disconnect, device number 15 [ 61.233650][ T45] usb 3-1: device descriptor read/64, error -71 [ 61.274622][ T9] usb 5-1: device descriptor read/8, error -71 [ 61.473657][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 61.513655][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.534611][ T9] usb 5-1: device descriptor read/8, error -71 [ 61.603672][ T45] usb 3-1: device descriptor read/64, error -71 [ 61.665159][ T9] usb 5-1: device descriptor read/8, error -71 [ 61.773801][ T9] usb usb5-port1: unable to enumerate USB device [ 61.843654][ T45] usb 3-1: device descriptor read/64, error -71 [ 61.953737][ T45] usb usb3-port1: attempt power cycle [ 62.229826][ T36] audit: type=1400 audit(1793647118.220:1258): avc: denied { getopt } for pid=1345 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.230707][ T1346] __nla_validate_parse: 60 callbacks suppressed [ 62.230781][ T1346] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.268'. [ 62.264777][ T1346] netlink: 280 bytes leftover after parsing attributes in process `syz.3.268'. [ 62.303664][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 62.324718][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.332127][ T36] audit: type=1400 audit(1793647118.320:1259): avc: denied { mounton } for pid=1347 comm="syz.3.269" path="/69/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.373224][ T1342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.381872][ T1342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.447751][ T1360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.456234][ T1362] SELinux: Context system_u:object_r:setrans_initrc_exec_t:s0 is not valid (left unmapped). [ 62.458379][ T1360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.469925][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.480923][ T36] audit: type=1400 audit(1793647118.470:1260): avc: denied { relabelto } for pid=1358 comm="syz.4.273" name="file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:setrans_initrc_exec_t:s0" [ 62.508527][ T36] audit: type=1400 audit(1793647118.470:1261): avc: denied { associate } for pid=1358 comm="syz.4.273" name="file0" dev="tmpfs" ino=204 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:setrans_initrc_exec_t:s0" [ 62.753660][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 62.774797][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.833675][ T311] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.904748][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.984867][ T311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1601, setting to 1024 [ 62.997657][ T311] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 63.006860][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.015095][ T45] usb usb3-port1: unable to enumerate USB device [ 63.021553][ T311] usb 5-1: Product: syz [ 63.026288][ T311] usb 5-1: Manufacturer: syz [ 63.030952][ T311] usb 5-1: SerialNumber: syz [ 63.118819][ T1368] program syz.3.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.239514][ T311] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 63.246544][ T311] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 63.253503][ T311] usb 5-1: unit 3 not found! [ 63.258414][ T311] usb 5-1: 6:0: failed to get current value for ch 0 (-71) [ 63.271493][ T311] usb 5-1: USB disconnect, device number 8 [ 63.285090][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.566634][ T743] usbhid 2-1:0.0: can't add hid device: -71 [ 63.579664][ T743] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 63.594659][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 63.611973][ T743] usb 2-1: USB disconnect, device number 18 [ 63.640368][ T1374] FAULT_INJECTION: forcing a failure. [ 63.640368][ T1374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.654919][ T1374] CPU: 0 UID: 0 PID: 1374 Comm: syz.1.277 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 63.654955][ T1374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.654970][ T1374] Call Trace: [ 63.654978][ T1374] [ 63.654987][ T1374] __dump_stack+0x21/0x30 [ 63.655014][ T1374] dump_stack_lvl+0x140/0x1c0 [ 63.655036][ T1374] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.655058][ T1374] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 63.655094][ T1374] dump_stack+0x19/0x20 [ 63.655114][ T1374] should_fail_ex+0x3c2/0x510 [ 63.655149][ T1374] should_fail_alloc_page+0xec/0x110 [ 63.655174][ T1374] __alloc_pages_noprof+0x1c0/0x7e0 [ 63.655202][ T1374] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.655234][ T1374] ? folio_add_lru+0x116/0x400 [ 63.655257][ T1374] ? __cfi_folio_add_lru+0x10/0x10 [ 63.655282][ T1374] __folio_alloc_noprof+0x14/0x80 [ 63.655310][ T1374] folio_prealloc+0x46/0x220 [ 63.655334][ T1374] do_pte_missing+0x16af/0x4440 [ 63.655362][ T1374] ? pte_marker_clear+0x1b0/0x1b0 [ 63.655386][ T1374] ? cgroup_rstat_updated+0x144/0x800 [ 63.655418][ T1374] ? kmem_cache_free+0x4b1/0x4f0 [ 63.655450][ T1374] ? vm_area_free+0xee/0x140 [ 63.655481][ T1374] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 63.655515][ T1374] handle_mm_fault+0x1189/0x1ba0 [ 63.655537][ T1374] ? __kasan_check_write+0x18/0x20 [ 63.655574][ T1374] ? __cfi_handle_mm_fault+0x10/0x10 [ 63.655597][ T1374] ? follow_page_pte+0x4b2/0xba0 [ 63.655627][ T1374] ? gup_must_unshare+0x1e0/0x1e0 [ 63.655654][ T1374] ? vma_is_secretmem+0x11/0x50 [ 63.655682][ T1374] ? check_vma_flags+0x36d/0x3a0 [ 63.655710][ T1374] __get_user_pages+0x114b/0x22d0 [ 63.655742][ T1374] ? populate_vma_page_range+0x220/0x220 [ 63.655768][ T1374] ? down_read+0x7f/0xe0 [ 63.655798][ T1374] ? __cfi_down_read+0x10/0x10 [ 63.655837][ T1374] ? __cfi_do_mmap+0x10/0x10 [ 63.655870][ T1374] __mm_populate+0x300/0x440 [ 63.655897][ T1374] vm_mmap_pgoff+0x426/0x4b0 [ 63.655931][ T1374] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 63.655964][ T1374] ? xfd_validate_state+0x68/0x140 [ 63.655999][ T1374] ksys_mmap_pgoff+0xfa/0x1e0 [ 63.656030][ T1374] ? __kasan_check_write+0x18/0x20 [ 63.656062][ T1374] __x64_sys_mmap+0x121/0x140 [ 63.656087][ T1374] x64_sys_call+0x13bf/0x2ee0 [ 63.656110][ T1374] do_syscall_64+0x57/0xf0 [ 63.656131][ T1374] ? clear_bhb_loop+0x50/0xa0 [ 63.656162][ T1374] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.656189][ T1374] RIP: 0033:0x7f2cf099fb19 [ 63.656208][ T1374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.656229][ T1374] RSP: 002b:00007f2cf1847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 63.656256][ T1374] RAX: ffffffffffffffda RBX: 00007f2cf0c25fa0 RCX: 00007f2cf099fb19 [ 63.656274][ T1374] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 63.656289][ T1374] RBP: 00007f2cf0a37af8 R08: ffffffffffffffff R09: 00000000cd0b3000 [ 63.656307][ T1374] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 63.656323][ T1374] R13: 00007f2cf0c26038 R14: 00007f2cf0c25fa0 R15: 00007ffc161e72f8 [ 63.656345][ T1374] [ 63.986123][ T36] audit: type=1400 audit(1793647119.970:1262): avc: denied { unlink } for pid=1038 comm="syz-executor" name="file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:setrans_initrc_exec_t:s0" [ 64.033644][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.051570][ T36] audit: type=1400 audit(1793647120.040:1263): avc: denied { getopt } for pid=1382 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.145482][ T1394] futex_wake_op: syz.1.284 tries to shift op by 144; fix this program [ 64.273668][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.337768][ T1403] syz.4.287 uses obsolete (PF_INET,SOCK_PACKET) [ 64.394883][ T1398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 64.513678][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 64.618184][ T1412] block device autoloading is deprecated and will be removed. [ 64.643769][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.703679][ T743] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 64.854274][ T743] usb 2-1: Using ep0 maxpacket: 32 [ 64.860486][ T743] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.871586][ T743] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 64.881611][ T743] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 64.891541][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.897824][ T743] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.911606][ T743] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.920701][ T743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.928754][ T743] usb 2-1: SerialNumber: syz [ 64.934370][ T1410] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.941714][ T1410] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.954089][ T743] hub 2-1:1.0: bad descriptor, ignoring hub [ 64.960132][ T743] hub 2-1:1.0: probe with driver hub failed with error -5 [ 64.967490][ T743] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 65.023752][ T9] usb usb4-port1: attempt power cycle [ 65.150113][ T1410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.158739][ T1410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.168417][ T743] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 65.194018][ T743] usb 2-1: USB disconnect, device number 19 [ 65.363672][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 65.384658][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.515521][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.753713][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 65.774785][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.848546][ T1431] netlink: 388 bytes leftover after parsing attributes in process `syz.4.295'. [ 65.857953][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 65.857969][ T36] audit: type=1400 audit(1793647121.850:1269): avc: denied { ioctl } for pid=1430 comm="syz.4.295" path="socket:[13584]" dev="sockfs" ino=13584 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.910379][ T36] audit: type=1400 audit(1793647121.900:1270): avc: denied { mounton } for pid=1432 comm="syz.4.296" path="/40/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 65.953046][ T36] audit: type=1400 audit(1793647121.900:1271): avc: denied { write } for pid=1432 comm="syz.4.296" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 65.979174][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.985654][ T1433] loop5: detected capacity change from 0 to 7 [ 65.995722][ T318] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.009331][ T318] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.023832][ T318] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.037243][ T318] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.050644][ T318] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.072374][ T36] audit: type=1400 audit(1793647122.060:1272): avc: denied { create } for pid=1441 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.093755][ T9] usb usb4-port1: unable to enumerate USB device [ 66.363669][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 66.514889][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 66.524825][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 66.536465][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 66.545800][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.553991][ T9] usb 5-1: Product: syz [ 66.558449][ T9] usb 5-1: Manufacturer: syz [ 66.563073][ T9] usb 5-1: SerialNumber: syz [ 66.567929][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 66.576501][ T9] usb 5-1: config 0 descriptor?? [ 66.581747][ T1442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 66.589362][ T1442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 66.703637][ T1419] Bluetooth: hci0: command 0x1003 tx timeout [ 66.709756][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.723657][ T10] usb 4-1: device descriptor read/64, error -71 [ 66.770848][ T1451] input: syz1 as /devices/virtual/input/input5 [ 66.781447][ T36] audit: type=1400 audit(1793647122.770:1273): avc: denied { setcurrent } for pid=1450 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.802484][ T1442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 66.811108][ T1442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 66.818571][ T36] audit: type=1401 audit(1793647122.770:1274): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 66.983666][ T10] usb 4-1: device descriptor read/64, error -71 [ 67.021300][ T36] audit: type=1400 audit(1793647123.010:1275): avc: denied { setopt } for pid=1441 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.212512][ T9] Error reading MAC address [ 67.224038][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 67.234297][ T9] usb 5-1: USB disconnect, device number 9 [ 67.383684][ T10] usb 4-1: device descriptor read/64, error -71 [ 67.606743][ T1461] kvm: kvm [1460]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x0 [ 67.645575][ T10] usb 4-1: device descriptor read/64, error -71 [ 67.763776][ T10] usb usb4-port1: attempt power cycle [ 67.819391][ T36] audit: type=1400 audit(1793647123.810:1276): avc: denied { nlmsg_tty_audit } for pid=1467 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 68.113707][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 68.140038][ T10] usb 4-1: device descriptor read/8, error -71 [ 68.274842][ T10] usb 4-1: device descriptor read/8, error -71 [ 68.513658][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 68.545497][ T10] usb 4-1: device descriptor read/8, error -71 [ 68.675043][ T10] usb 4-1: device descriptor read/8, error -71 [ 68.703970][ T1477] overlay: Unknown parameter 'smackfsdef' [ 68.783765][ T10] usb usb4-port1: unable to enumerate USB device [ 68.963677][ T311] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 69.124809][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.135803][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.146701][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.156917][ T311] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 69.166179][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.175142][ T311] usb 5-1: config 0 descriptor?? [ 69.181111][ T311] usb 5-1: bad CDC descriptors [ 69.218744][ T1482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.312072][ T36] audit: type=1400 audit(1793647125.300:1277): avc: denied { nlmsg_write } for pid=1484 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.362323][ T1485] SELinux: failed to load policy [ 69.382105][ T1480] PM: Enabling pm_trace changes system date and time during resume. [ 69.382105][ T1480] PM: Correct system time has to be restored manually after resume. [ 69.404084][ T311] usb 5-1: USB disconnect, device number 10 [ 69.703660][ T743] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 69.866398][ T743] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 69.876309][ T743] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 69.888992][ T743] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 69.898400][ T743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.918354][ T743] usb 4-1: Product: syz [ 69.922650][ T743] usb 4-1: Manufacturer: syz [ 69.928062][ T743] usb 4-1: SerialNumber: syz [ 69.934020][ T743] usb 4-1: config 0 descriptor?? [ 69.947466][ T1489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.956916][ T1489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.188998][ T1489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.199520][ T1489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.363675][ T45] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 70.411636][ T743] Error reading MAC address [ 70.426490][ T743] usb 4-1: USB disconnect, device number 24 [ 70.514718][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.535967][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.563658][ T45] usb 5-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 70.582951][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.594488][ T45] usb 5-1: config 0 descriptor?? [ 70.666272][ T36] audit: type=1400 audit(1793647126.660:1278): avc: denied { read write } for pid=1501 comm="syz.2.316" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.973457][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 70.973475][ T36] audit: type=1400 audit(1793647126.960:1280): avc: denied { read } for pid=1512 comm="syz.3.319" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.973854][ T1513] FAULT_INJECTION: forcing a failure. [ 70.973854][ T1513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.993716][ T36] audit: type=1400 audit(1793647126.960:1281): avc: denied { open } for pid=1512 comm="syz.3.319" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.003180][ T1513] CPU: 1 UID: 0 PID: 1513 Comm: syz.3.319 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 71.003262][ T1513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.003303][ T1513] Call Trace: [ 71.003323][ T1513] [ 71.003344][ T1513] __dump_stack+0x21/0x30 [ 71.003429][ T1513] dump_stack_lvl+0x140/0x1c0 [ 71.003483][ T1513] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.003537][ T1513] ? chrdev_open+0x4e8/0x610 [ 71.003590][ T1513] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 71.003677][ T1513] dump_stack+0x19/0x20 [ 71.003726][ T1513] should_fail_ex+0x3c2/0x510 [ 71.003821][ T1513] should_fail_alloc_page+0xec/0x110 [ 71.003884][ T1513] __alloc_pages_noprof+0x1c0/0x7e0 [ 71.003992][ T1513] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 71.004067][ T1513] ? __kasan_kmalloc+0x96/0xb0 [ 71.004128][ T1513] get_zeroed_page_noprof+0x1f/0x50 [ 71.004251][ T1513] mon_alloc_buff+0x6a/0x280 [ 71.004324][ T1513] mon_bin_open+0x1fd/0x540 [ 71.004378][ T1513] chrdev_open+0x4e8/0x610 [ 71.004422][ T1513] ? __cfi_chrdev_open+0x10/0x10 [ 71.004474][ T1513] ? bpf_lsm_file_open+0xd/0x20 [ 71.004535][ T1513] ? __cfi_chrdev_open+0x10/0x10 [ 71.004586][ T1513] do_dentry_open+0x97f/0x1510 [ 71.004657][ T1513] vfs_open+0x86/0x240 [ 71.004723][ T1513] ? __cfi_vfs_open+0x10/0x10 [ 71.004784][ T1513] ? may_open+0x352/0x430 [ 71.004844][ T1513] path_openat+0x2c49/0x35a0 [ 71.004912][ T1513] ? kasan_save_alloc_info+0x3a/0x50 [ 71.004982][ T1513] ? getname+0x1b/0x30 [ 71.005031][ T1513] ? x64_sys_call+0xe69/0x2ee0 [ 71.005090][ T1513] ? do_syscall_64+0x57/0xf0 [ 71.005149][ T1513] ? do_filp_open+0x440/0x440 [ 71.005219][ T1513] do_filp_open+0x1f2/0x440 [ 71.005283][ T1513] ? __cfi_do_filp_open+0x10/0x10 [ 71.005389][ T1513] ? alloc_fd+0x4c1/0x570 [ 71.005437][ T1513] do_sys_openat2+0x134/0x1d0 [ 71.005531][ T1513] ? fput+0x1a4/0x230 [ 71.005607][ T1513] ? do_sys_open+0x100/0x100 [ 71.005700][ T1513] __x64_sys_openat+0x13a/0x170 [ 71.005772][ T1513] x64_sys_call+0xe69/0x2ee0 [ 71.005832][ T1513] do_syscall_64+0x57/0xf0 [ 71.005884][ T1513] ? clear_bhb_loop+0x50/0xa0 [ 71.005972][ T1513] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.006042][ T1513] RIP: 0033:0x7f894816034e [ 71.006077][ T1513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.006125][ T1513] RSP: 002b:00007f8949110b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.006187][ T1513] RAX: ffffffffffffffda RBX: 00007f89491116c0 RCX: 00007f894816034e [ 71.006228][ T1513] RDX: 0000000000000000 RSI: 00007f8949110c00 RDI: ffffffffffffff9c [ 71.006267][ T1513] RBP: 00007f8949110c00 R08: 0000000000000000 R09: 0000000000000000 [ 71.006308][ T1513] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 71.006347][ T1513] R13: 00007f8948426038 R14: 00007f8948425fa0 R15: 00007fff1d6e1508 [ 71.006397][ T1513] [ 71.021764][ T1514] FAULT_INJECTION: forcing a failure. [ 71.021764][ T1514] name failslab, interval 1, probability 0, space 0, times 0 [ 71.336612][ T1518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 71.347428][ T45] lenovo 0003:04B3:3103.0003: No inputs registered, leaving [ 71.365741][ T45] lenovo 0003:04B3:3103.0003: hidraw0: USB HID v0.00 Device [HID 04b3:3103] on usb-dummy_hcd.4-1/input0 [ 71.370098][ T1518] netlink: 1 bytes leftover after parsing attributes in process `syz.2.320'. [ 71.377155][ T1514] CPU: 1 UID: 0 PID: 1514 Comm: syz.3.319 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 71.377237][ T1514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.377278][ T1514] Call Trace: [ 71.377298][ T1514] [ 71.377320][ T1514] __dump_stack+0x21/0x30 [ 71.377384][ T1514] dump_stack_lvl+0x140/0x1c0 [ 71.377451][ T1514] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.377526][ T1514] dump_stack+0x19/0x20 [ 71.377576][ T1514] should_fail_ex+0x3c2/0x510 [ 71.377664][ T1514] should_failslab+0xac/0x100 [ 71.377718][ T1514] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 71.377808][ T1514] ? kstrdup_const+0x45/0x60 [ 71.377877][ T1514] ? __kasan_check_write+0x18/0x20 [ 71.377960][ T1514] ? _raw_spin_lock+0x92/0x120 [ 71.378000][ T1514] kstrdup+0x4d/0x130 [ 71.378072][ T1514] ? kstrdup_const+0x3a/0x60 [ 71.378137][ T1514] kstrdup_const+0x45/0x60 [ 71.378210][ T1514] __kernfs_new_node+0xaa/0x740 [ 71.378272][ T1514] ? down_write+0xee/0x2b0 [ 71.378346][ T1514] ? kernfs_new_node+0x280/0x280 [ 71.378417][ T1514] ? __kasan_check_write+0x18/0x20 [ 71.378515][ T1514] ? down_write+0xee/0x2b0 [ 71.378606][ T1514] ? __cfi_down_write+0x10/0x10 [ 71.378679][ T1514] ? __kasan_check_write+0x18/0x20 [ 71.378760][ T1514] kernfs_new_node+0x154/0x280 [ 71.378826][ T1514] __kernfs_create_file+0x52/0x280 [ 71.378906][ T1514] cgroup_addrm_files+0x775/0xac0 [ 71.379013][ T1514] ? compute_effective_progs+0x7e8/0x860 [ 71.379088][ T1514] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 71.379154][ T1514] ? bpf_prog_array_free+0x36/0x40 [ 71.379230][ T1514] ? cgroup_bpf_inherit+0x472/0x4c0 [ 71.379314][ T1514] ? __kasan_check_write+0x18/0x20 [ 71.379391][ T1514] ? _raw_spin_lock_irq+0x93/0x120 [ 71.379439][ T1514] css_populate_dir+0x2be/0x3d0 [ 71.379516][ T1514] cgroup_mkdir+0x11da/0x1590 [ 71.379577][ T1514] ? __cfi_cgroup_mkdir+0x10/0x10 [ 71.379635][ T1514] kernfs_iop_mkdir+0x1be/0x2d0 [ 71.379700][ T1514] vfs_mkdir+0x591/0x810 [ 71.379772][ T1514] do_mkdirat+0x240/0x530 [ 71.379851][ T1514] ? strncpy_from_user+0x14f/0x280 [ 71.379966][ T1514] ? __cfi_do_mkdirat+0x10/0x10 [ 71.380030][ T1514] ? getname_flags+0x203/0x6b0 [ 71.380085][ T1514] __x64_sys_mkdir+0x70/0x80 [ 71.380152][ T1514] x64_sys_call+0x26c8/0x2ee0 [ 71.380215][ T1514] do_syscall_64+0x57/0xf0 [ 71.380268][ T1514] ? clear_bhb_loop+0x50/0xa0 [ 71.380344][ T1514] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.380427][ T1514] RIP: 0033:0x7f894819fb19 [ 71.380484][ T1514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.380527][ T1514] RSP: 002b:00007f89490f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 71.380590][ T1514] RAX: ffffffffffffffda RBX: 00007f8948426090 RCX: 00007f894819fb19 [ 71.380633][ T1514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000e00 [ 71.380675][ T1514] RBP: 00007f8948237af8 R08: 0000000000000000 R09: 0000000000000000 [ 71.380709][ T1514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.380750][ T1514] R13: 00007f8948426128 R14: 00007f8948426090 R15: 00007fff1d6e1508 [ 71.380802][ T1514] [ 71.380949][ T1514] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 71.543883][ T1518] netlink: 'syz.2.320': attribute type 11 has an invalid length. [ 71.656037][ T45] usb 5-1: USB disconnect, device number 11 [ 71.962631][ T1544] af_packet: tpacket_rcv: packet too big, clamped from 4715 to 3952. macoff=96 [ 72.092012][ T1555] serio: Serial port ptm1 [ 73.207631][ T36] audit: type=1400 audit(1793647129.200:1282): avc: denied { append } for pid=1572 comm="syz.3.333" name="uprobe_events" dev="tracefs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 73.366320][ T36] audit: type=1400 audit(1793647129.360:1283): avc: denied { mount } for pid=1579 comm="syz.3.336" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 73.484483][ T1587] input: syz0 as /devices/virtual/input/input7 [ 73.531139][ T36] audit: type=1400 audit(1793647129.520:1284): avc: denied { watch } for pid=1588 comm="syz.3.340" path="/92/file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 73.613633][ T36] audit: type=1400 audit(1793647129.560:1285): avc: denied { accept } for pid=1588 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 73.717234][ T1598] ptp ptp0: only physical clock in use now [ 74.003662][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 74.053728][ T311] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 74.175148][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.183682][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 74.193905][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.208532][ T9] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 74.217914][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.220258][ T311] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 74.226564][ T9] usb 5-1: Product: syz [ 74.238455][ T9] usb 5-1: Manufacturer: syz [ 74.243135][ T9] usb 5-1: SerialNumber: syz [ 74.248608][ T311] usb 4-1: config 0 has no interface number 0 [ 74.254949][ T311] usb 4-1: config 0 interface 41 has no altsetting 0 [ 74.256528][ T1601] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.264249][ T311] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 74.279520][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.287578][ T311] usb 4-1: Product: syz [ 74.291835][ T311] usb 4-1: Manufacturer: syz [ 74.296485][ T311] usb 4-1: SerialNumber: syz [ 74.305565][ T311] usb 4-1: config 0 descriptor?? [ 74.483218][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 74.501818][ T9] usb 5-1: USB disconnect, device number 12 [ 75.113718][ T311] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 75.164901][ T36] audit: type=1400 audit(1793647131.160:1286): avc: denied { listen } for pid=1610 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.188874][ T36] audit: type=1400 audit(1793647131.180:1287): avc: denied { connect } for pid=1610 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.326897][ T311] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 75.344743][ T311] usb 4-1: USB disconnect, device number 25 [ 75.433649][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 75.594732][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 75.606861][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 75.628416][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 75.637744][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.653644][ T9] usb 5-1: Product: syz [ 75.663651][ T9] usb 5-1: Manufacturer: syz [ 75.673648][ T9] usb 5-1: SerialNumber: syz [ 75.682706][ T9] usb 5-1: config 0 descriptor?? [ 75.693919][ T1608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.701215][ T1608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.904504][ T1615] futex_wake_op: syz.3.350 tries to shift op by 144; fix this program [ 75.914587][ T9] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 75.953746][ T9] usb 5-1: USB disconnect, device number 13 [ 76.091324][ T36] audit: type=1326 audit(1793647132.080:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.2.351" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ea79fb19 code=0x0 [ 76.159467][ T36] audit: type=1400 audit(1793647132.150:1289): avc: denied { getopt } for pid=1620 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.213675][ T36] audit: type=1326 audit(1793647132.200:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.2.354" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ea79fb19 code=0x0 [ 76.719654][ T1640] netlink: 'syz.3.357': attribute type 12 has an invalid length. [ 76.923669][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 77.075292][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.094590][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 77.111410][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.131746][ T9] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 77.141140][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.149592][ T9] usb 5-1: Product: syz [ 77.159661][ T9] usb 5-1: Manufacturer: syz [ 77.164878][ T9] usb 5-1: SerialNumber: syz [ 77.170147][ T1646] futex_wake_op: syz.2.360 tries to shift op by 144; fix this program [ 77.179769][ T1636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 77.187527][ T36] audit: type=1326 audit(1793647133.180:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.2.360" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ea79fb19 code=0x0 [ 77.353654][ T743] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 77.525134][ T743] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.539217][ T743] usb 4-1: config index 0 descriptor too short (expected 40744, got 96) [ 77.551227][ T743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.573632][ T743] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.592996][ T743] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 77.613641][ T743] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 77.635380][ T743] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 77.663651][ T743] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.683546][ T743] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 77.715210][ T743] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 77.733703][ T743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.750644][ T743] usb 4-1: Product: syz [ 77.754973][ T743] usb 4-1: Manufacturer: syz [ 77.759631][ T743] usb 4-1: SerialNumber: syz [ 77.974829][ T743] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 78.003407][ T743] usb 4-1: USB disconnect, device number 26 [ 78.018372][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.614381][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 79.631063][ T36] audit: type=1400 audit(1793647135.620:1292): avc: denied { append } for pid=1681 comm="syz.3.369" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.645063][ T9] usb 5-1: USB disconnect, device number 14 [ 79.772280][ T1688] netlink: 'syz.4.372': attribute type 16 has an invalid length. [ 79.850258][ T1691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.859579][ T1691] overlayfs: missing 'lowerdir' [ 79.866432][ T1691] capability: warning: `syz.4.373' uses 32-bit capabilities (legacy support in use) [ 79.993642][ T354] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 80.038241][ T1703] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.153667][ T354] usb 4-1: Invalid ep0 maxpacket: 64 [ 80.283664][ T354] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 80.453647][ T354] usb 4-1: Invalid ep0 maxpacket: 64 [ 80.459184][ T354] usb usb4-port1: attempt power cycle [ 80.813684][ T354] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 80.834039][ T354] usb 4-1: Invalid ep0 maxpacket: 64 [ 80.963663][ T354] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 80.984061][ T354] usb 4-1: Invalid ep0 maxpacket: 64 [ 80.989599][ T354] usb usb4-port1: unable to enumerate USB device [ 81.159739][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.167013][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.174381][ T1705] bridge_slave_0: entered allmulticast mode [ 81.180743][ T1705] bridge_slave_0: entered promiscuous mode [ 81.188148][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.195484][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.202991][ T1705] bridge_slave_1: entered allmulticast mode [ 81.209636][ T1705] bridge_slave_1: entered promiscuous mode [ 81.216894][ T1699] bridge_slave_1: left allmulticast mode [ 81.222688][ T1699] bridge_slave_1: left promiscuous mode [ 81.228553][ T1699] ÿÿÿÿÿÿ: port 2(bridge_slave_1) entered disabled state [ 81.236451][ T1699] ÿÿÿÿÿÿ: port 1(bridge_slave_0) entered disabled state [ 81.346185][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.353328][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.360704][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.367811][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.376596][ T1699] veth1_macvtap: left promiscuous mode [ 81.382142][ T1699] veth0_vlan: left promiscuous mode [ 81.442995][ T1698] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.450492][ T1698] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.460384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.467472][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.476949][ T1698] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.484029][ T1698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.513433][ T1705] veth0_vlan: entered promiscuous mode [ 81.524908][ T1705] veth1_macvtap: entered promiscuous mode [ 81.583674][ T354] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 81.735565][ T354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.745190][ T354] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 81.763647][ T354] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.778184][ T354] usb 3-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 81.788646][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.801208][ T354] usb 3-1: Product: syz [ 81.807561][ T354] usb 3-1: Manufacturer: syz [ 81.812238][ T354] usb 3-1: SerialNumber: syz [ 81.818919][ T1712] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.045357][ T354] usb 3-1: MIDIStreaming interface descriptor not found [ 82.063677][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.070013][ T1419] Bluetooth: hci0: command 0x1003 tx timeout [ 82.086884][ T354] usb 3-1: USB disconnect, device number 24 [ 82.362073][ T1715] cgroup: fork rejected by pids controller in /syz5 [ 82.368887][ T67] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 82.426124][ T36] audit: type=1400 audit(1793647138.420:1293): avc: denied { mounton } for pid=1749 comm="syz.5.380" path="/proc/35" dev="proc" ino=20273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.536765][ T67] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 82.546001][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.554619][ T67] usb 5-1: Product: syz [ 82.558975][ T67] usb 5-1: Manufacturer: syz [ 82.563857][ T67] usb 5-1: SerialNumber: syz [ 82.569885][ T67] usb 5-1: config 0 descriptor?? [ 82.576687][ T67] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 82.671962][ T1762] netlink: 72 bytes leftover after parsing attributes in process `syz.2.381'. [ 82.731509][ T36] audit: type=1400 audit(1793647138.720:1294): avc: denied { open } for pid=1761 comm="syz.2.381" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.777285][ T743] usb 5-1: USB disconnect, device number 15 [ 82.814087][ T36] audit: type=1400 audit(1793647138.810:1295): avc: denied { map } for pid=1767 comm="syz.2.384" path="socket:[21135]" dev="sockfs" ino=21135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.891111][ T1766] Invalid logical block size (4352) [ 82.963646][ T354] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.024452][ T1784] program syz.3.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.130679][ T354] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 83.143348][ T354] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.153795][ T354] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.166977][ T354] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 83.176628][ T354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.191654][ T354] usb 6-1: config 0 descriptor?? [ 83.198100][ T354] usb-storage 6-1:0.0: USB Mass Storage device detected [ 83.214834][ T354] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 83.300760][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.313515][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.322583][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.335244][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.344836][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.357570][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.367178][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.379801][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.388865][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.401506][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.417535][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.430945][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.440165][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.453137][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.462386][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.477011][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.482027][ T36] audit: type=1326 audit(1793647139.470:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.5.382" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f695fd9fb19 code=0x0 [ 83.486916][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.524113][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.533323][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1792 comm=syz.4.390 [ 83.582048][ T36] audit: type=1400 audit(1793647139.570:1297): avc: denied { setattr } for pid=1794 comm="syz.2.391" name="NETLINK" dev="sockfs" ino=21552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.619616][ T67] usb 6-1: USB disconnect, device number 2 [ 83.627161][ T36] audit: type=1400 audit(1793647139.570:1298): avc: denied { getopt } for pid=1794 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.654962][ T1800] rust_binder: 1799:1800 no such ref 3 [ 83.660717][ T1800] rust_binder: 1799:1800 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 83.669240][ T36] audit: type=1400 audit(1793647139.600:1299): avc: denied { wake_alarm } for pid=1796 comm="syz.4.392" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.690657][ T1800] rust_binder: 1799:1800 BC_FREEZE_NOTIFICATION_DONE 0000000000000002 not found [ 83.701440][ T1800] rust_binder: Write failure EINVAL in pid:328 [ 83.707863][ T36] audit: type=1400 audit(1793647139.640:1300): avc: denied { read } for pid=1763 comm="syz.5.382" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 83.738679][ T36] audit: type=1400 audit(1793647139.640:1301): avc: denied { open } for pid=1763 comm="syz.5.382" path="/2/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 83.976104][ T1818] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 83.992008][ T1818] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 84.012140][ T1818] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 84.020592][ T1818] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 84.040218][ T1818] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 84.049574][ T1818] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 84.057896][ T1818] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 84.068904][ T1818] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 84.077568][ T1818] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 84.086296][ T1818] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 84.200953][ T1839] rust_binder: 1838:1839 no such ref 3 [ 84.206712][ T1839] rust_binder: 1838:1839 BC_FREEZE_NOTIFICATION_DONE 0000000000000002 not found [ 84.215941][ T1839] rust_binder: Write failure EINVAL in pid:225 [ 84.373726][ T354] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 84.524980][ T354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.533421][ T354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.543669][ T354] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 84.552718][ T354] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 84.563667][ T354] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 84.576907][ T354] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 84.587775][ T354] usb 4-1: config 1 interface 1 has no altsetting 0 [ 84.596647][ T354] usb 4-1: string descriptor 0 read error: -22 [ 84.602984][ T354] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 84.612157][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.426850][ T354] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 85.442403][ T354] usb 4-1: USB disconnect, device number 31 [ 85.581466][ T36] audit: type=1400 audit(1793647141.570:1302): avc: denied { ioctl } for pid=1861 comm="syz.2.412" path="socket:[22127]" dev="sockfs" ino=22127 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.583949][ T1862] tipc: Can't bind to reserved service type 0 [ 85.637192][ T1871] rust_binder: 1870:1871 no such ref 3 [ 85.642773][ T1871] rust_binder: 1870:1871 BC_FREEZE_NOTIFICATION_DONE 0000000000000002 not found [ 85.651958][ T1871] rust_binder: Write failure EINVAL in pid:360 [ 85.903670][ T67] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 86.054736][ T67] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.064985][ T67] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.073926][ T67] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 86.083013][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.096760][ T67] usb 3-1: 0:1 : does not exist [ 86.294967][ T67] usb 3-1: USB disconnect, device number 25 [ 86.593657][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 86.744809][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.755805][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.765760][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 86.775457][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.784471][ T9] usb 4-1: config 0 descriptor?? [ 87.193308][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 87.203308][ T9] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 87.273708][ T9] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 87.285318][ T9] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 87.303785][ T9] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 87.572404][ T311] usb 4-1: USB disconnect, device number 32 [ 87.585013][ T311] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 87.613653][ T31] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 87.764880][ T31] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 87.773283][ T31] usb 5-1: config 1 has no interface number 0 [ 87.780437][ T31] usb 5-1: config 1 interface 105 has no altsetting 0 [ 87.788962][ T31] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 87.798653][ T31] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 87.806936][ T31] usb 5-1: Product: syz [ 87.811246][ T31] usb 5-1: Manufacturer: syz [ 87.816185][ T31] usb 5-1: SerialNumber: syz [ 88.488243][ T1699] bridge_slave_1: left allmulticast mode [ 88.498892][ T1699] bridge_slave_1: left promiscuous mode [ 88.504788][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.523852][ T1699] bridge_slave_0: left allmulticast mode [ 88.529982][ T1699] bridge_slave_0: left promiscuous mode [ 88.537555][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.548500][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 88.548518][ T36] audit: type=1400 audit(1793647144.540:1305): avc: denied { setopt } for pid=1904 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.700581][ T1699] veth1_macvtap: left promiscuous mode [ 88.709547][ T1699] veth0_vlan: left promiscuous mode [ 88.719238][ T1915] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.727292][ T1914] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.831295][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 88.842734][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 88.860850][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.868052][ T31] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 16:d7:41:75:b2:ed [ 88.872784][ T1917] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.888382][ T1917] bridge_slave_0: entered allmulticast mode [ 88.895155][ T1917] bridge_slave_0: entered promiscuous mode [ 88.896592][ T31] usb 5-1: USB disconnect, device number 16 [ 88.903413][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.914052][ T1917] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.921139][ T1917] bridge_slave_1: entered allmulticast mode [ 88.928121][ T1917] bridge_slave_1: entered promiscuous mode [ 88.942065][ T31] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 89.000876][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.007998][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.015341][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.022414][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.023842][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 89.037624][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 89.050456][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 89.063459][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 89.074960][ T36] audit: type=1400 audit(1793647145.070:1306): avc: denied { map } for pid=1924 comm="syz.3.433" path="/proc/399/task/400/smaps" dev="proc" ino=22659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 89.108007][ T36] audit: type=1400 audit(1793647145.070:1307): avc: denied { execute } for pid=1924 comm="syz.3.433" path="/proc/399/task/400/smaps" dev="proc" ino=22659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 89.158662][ T1917] veth0_vlan: entered promiscuous mode [ 89.172116][ T1917] veth1_macvtap: entered promiscuous mode [ 89.184799][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 89.194726][ T9] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 89.203557][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.214767][ T9] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 89.224535][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 89.233907][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.248821][ T9] usb 3-1: config 0 descriptor?? [ 89.264996][ T9] usb 3-1: Found UVC 9.00 device (046d:0825) [ 89.583683][ T31] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 89.593928][ T743] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 89.734462][ T31] usb 7-1: not running at top speed; connect to a high speed hub [ 89.743056][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.745544][ T743] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.753800][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.763886][ T743] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.773212][ T31] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 89.781705][ T743] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 89.800457][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.802457][ T743] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 89.820815][ T743] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.834707][ T31] usb 7-1: Found UVC 71.01 device (0000:0000) [ 89.844043][ T743] usb 5-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 89.848202][ T31] usb 7-1: No valid video chain found. [ 89.853383][ T743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.868037][ T743] usb 5-1: Product: syz [ 89.879713][ T36] audit: type=1400 audit(1793647145.870:1308): avc: denied { bind } for pid=1919 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.901074][ T9] uvcvideo 3-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 89.911432][ T743] usb 5-1: Manufacturer: syz [ 89.916737][ T743] usb 5-1: SerialNumber: syz [ 89.921559][ T9] uvcvideo 3-1:0.1: Failed to initialize the device (-71). [ 89.932071][ T36] audit: type=1400 audit(1793647145.870:1309): avc: denied { setopt } for pid=1919 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.949635][ T9] usb 3-1: USB disconnect, device number 26 [ 90.037595][ T45] usb 7-1: USB disconnect, device number 2 [ 90.148678][ T743] usb 5-1: 1:1 : invalid UAC_AS_GENERAL desc [ 90.154923][ T743] usb 5-1: 0:2 : does not exist [ 90.164554][ T743] usb 5-1: USB disconnect, device number 17 [ 90.223665][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 90.374994][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.387453][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 90.396672][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.404817][ T31] usb 4-1: Product: syz [ 90.409066][ T31] usb 4-1: Manufacturer: syz [ 90.413757][ T31] usb 4-1: SerialNumber: syz [ 90.416219][ T1960] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 90.428320][ T36] audit: type=1400 audit(1793647146.420:1310): avc: denied { relabelto } for pid=1959 comm="syz.2.443" name="111" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 90.456066][ T36] audit: type=1400 audit(1793647146.420:1311): avc: denied { associate } for pid=1959 comm="syz.2.443" name="111" dev="tmpfs" ino=622 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 90.485646][ T31] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 90.491857][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 90.508761][ T36] audit: type=1400 audit(1793647146.420:1312): avc: denied { write } for pid=300 comm="syz-executor" name="111" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 90.535073][ T36] audit: type=1400 audit(1793647146.420:1313): avc: denied { remove_name } for pid=300 comm="syz-executor" name="binderfs" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 90.562292][ T36] audit: type=1400 audit(1793647146.450:1314): avc: denied { rmdir } for pid=300 comm="syz-executor" name="111" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 90.663136][ T1966] FAULT_INJECTION: forcing a failure. [ 90.663136][ T1966] name failslab, interval 1, probability 0, space 0, times 0 [ 90.676296][ T1966] CPU: 1 UID: 0 PID: 1966 Comm: syz.6.446 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 90.676341][ T1966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.676358][ T1966] Call Trace: [ 90.676366][ T1966] [ 90.676375][ T1966] __dump_stack+0x21/0x30 [ 90.676402][ T1966] dump_stack_lvl+0x140/0x1c0 [ 90.676422][ T1966] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.676446][ T1966] dump_stack+0x19/0x20 [ 90.676464][ T1966] should_fail_ex+0x3c2/0x510 [ 90.676499][ T1966] should_failslab+0xac/0x100 [ 90.676524][ T1966] __kmalloc_cache_noprof+0x41/0x470 [ 90.676558][ T1966] ? __asan_memcpy+0x5a/0x80 [ 90.676589][ T1966] ? ip6addrlbl_add+0x14d/0xad0 [ 90.676614][ T1966] ip6addrlbl_add+0x14d/0xad0 [ 90.676640][ T1966] ip6addrlbl_net_init+0x221/0x410 [ 90.676665][ T1966] ops_init+0x2ff/0x5d0 [ 90.676699][ T1966] ? __kasan_check_write+0x18/0x20 [ 90.676728][ T1966] ? rwsem_read_trylock+0x275/0x5a0 [ 90.676756][ T1966] setup_net+0x227/0x9b0 [ 90.676786][ T1966] ? copy_net_ns+0xa20/0xa20 [ 90.676816][ T1966] ? down_read_killable+0x7f/0x100 [ 90.676848][ T1966] ? __cfi_down_read_killable+0x10/0x10 [ 90.676881][ T1966] copy_net_ns+0x4fc/0xa20 [ 90.676913][ T1966] create_new_namespaces+0x390/0x6f0 [ 90.676937][ T1966] unshare_nsproxy_namespaces+0x124/0x180 [ 90.676960][ T1966] ksys_unshare+0x4f9/0x920 [ 90.676993][ T1966] ? fput+0x1a4/0x230 [ 90.677018][ T1966] ? __cfi_ksys_unshare+0x10/0x10 [ 90.677051][ T1966] ? __kasan_check_write+0x18/0x20 [ 90.677084][ T1966] __x64_sys_unshare+0x3c/0x50 [ 90.677118][ T1966] x64_sys_call+0x2998/0x2ee0 [ 90.677142][ T1966] do_syscall_64+0x57/0xf0 [ 90.677163][ T1966] ? clear_bhb_loop+0x50/0xa0 [ 90.677193][ T1966] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.677221][ T1966] RIP: 0033:0x7f224699fb19 [ 90.677240][ T1966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.677261][ T1966] RSP: 002b:00007f2247784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 90.677286][ T1966] RAX: ffffffffffffffda RBX: 00007f2246c25fa0 RCX: 00007f224699fb19 [ 90.677304][ T1966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 90.677319][ T1966] RBP: 00007f2246a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 90.677341][ T1966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.677356][ T1966] R13: 00007f2246c26038 R14: 00007f2246c25fa0 R15: 00007fff7e4c7ec8 [ 90.677374][ T1966] [ 90.744908][ T9] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 90.756303][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 90.945955][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 90.952426][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 90.958784][ T743] usb 4-1: USB disconnect, device number 33 [ 90.959058][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 90.968255][ T1971] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 90.971032][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 90.997460][ T67] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 91.006427][ T9] usb 3-1: unable to get BOS descriptor set [ 91.013148][ T9] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 91.023977][ T9] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 91.035244][ T9] usb 3-1: string descriptor 0 read error: -22 [ 91.041439][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 91.051032][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.070736][ T1973] FAULT_INJECTION: forcing a failure. [ 91.070736][ T1973] name failslab, interval 1, probability 0, space 0, times 0 [ 91.083479][ T1973] CPU: 1 UID: 0 PID: 1973 Comm: syz.6.448 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 91.083510][ T1973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.083525][ T1973] Call Trace: [ 91.083532][ T1973] [ 91.083539][ T1973] __dump_stack+0x21/0x30 [ 91.083564][ T1973] dump_stack_lvl+0x140/0x1c0 [ 91.083587][ T1973] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.083610][ T1973] dump_stack+0x19/0x20 [ 91.083628][ T1973] should_fail_ex+0x3c2/0x510 [ 91.083658][ T1973] should_failslab+0xac/0x100 [ 91.083680][ T1973] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 91.083712][ T1973] ? __kasan_check_write+0x18/0x20 [ 91.083742][ T1973] ? _raw_spin_lock+0x92/0x120 [ 91.083762][ T1973] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x499/0x1ac0 [ 91.083818][ T1973] ? __cfi__raw_spin_lock+0x10/0x10 [ 91.083840][ T1973] krealloc_noprof+0x8d/0x130 [ 91.083874][ T1973] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x499/0x1ac0 [ 91.083913][ T1973] ? __cfi_selinux_file_open+0x10/0x10 [ 91.083949][ T1973] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 91.083979][ T1973] ? avc_has_extended_perms+0x7fb/0xe60 [ 91.083996][ T1973] ? __asan_memcpy+0x5a/0x80 [ 91.084017][ T1973] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x4200 [ 91.084044][ T1973] ? __asan_set_shadow_00+0x12/0x20 [ 91.084063][ T1973] ? do_vfs_ioctl+0x1824/0x2010 [ 91.084078][ T1973] ? arch_stack_walk+0x10a/0x170 [ 91.084095][ T1973] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 91.084112][ T1973] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 91.084138][ T1973] ? _parse_integer+0x2e/0x40 [ 91.084162][ T1973] ? ioctl_has_perm+0x39a/0x500 [ 91.084184][ T1973] ? has_cap_mac_admin+0xd0/0xd0 [ 91.084207][ T1973] ? proc_fail_nth_write+0x184/0x220 [ 91.084226][ T1973] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 91.084246][ T1973] ? selinux_file_ioctl+0x732/0x1480 [ 91.084268][ T1973] ? vfs_write+0xbcf/0xfd0 [ 91.084290][ T1973] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 91.084313][ T1973] ? hook_file_ioctl+0x1ef/0x590 [ 91.084334][ T1973] ? __cfi_vfs_write+0x10/0x10 [ 91.084355][ T1973] ? __cfi_hook_file_ioctl+0x10/0x10 [ 91.084374][ T1973] ? __kasan_check_write+0x18/0x20 [ 91.084396][ T1973] ? mutex_unlock+0x90/0x240 [ 91.084414][ T1973] ? __cfi_mutex_unlock+0x10/0x10 [ 91.084434][ T1973] ? __fget_files+0x2bc/0x330 [ 91.084449][ T1973] ? bpf_lsm_file_ioctl+0xd/0x20 [ 91.084465][ T1973] ? security_file_ioctl+0x3e/0x110 [ 91.084486][ T1973] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 91.084511][ T1973] __se_sys_ioctl+0x126/0x1b0 [ 91.084526][ T1973] __x64_sys_ioctl+0x7f/0xa0 [ 91.084541][ T1973] x64_sys_call+0x1878/0x2ee0 [ 91.084557][ T1973] do_syscall_64+0x57/0xf0 [ 91.084572][ T1973] ? clear_bhb_loop+0x50/0xa0 [ 91.084592][ T1973] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.084611][ T1973] RIP: 0033:0x7f224699fb19 [ 91.084624][ T1973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.084637][ T1973] RSP: 002b:00007f2247784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.084654][ T1973] RAX: ffffffffffffffda RBX: 00007f2246c25fa0 RCX: 00007f224699fb19 [ 91.084665][ T1973] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 91.084676][ T1973] RBP: 00007f2247784090 R08: 0000000000000000 R09: 0000000000000000 [ 91.084685][ T1973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.084694][ T1973] R13: 00007f2246c26038 R14: 00007f2246c25fa0 R15: 00007fff7e4c7ec8 [ 91.084708][ T1973] [ 91.165469][ T67] usb 5-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 91.227487][ T1975] rust_binder: 1974:1975 no such ref 3 [ 91.232631][ T67] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.237463][ T1975] rust_binder: 1974:1975 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 91.244016][ T67] usb 5-1: New USB device found, idVendor=047f, idProduct=f000, bcdDevice= 0.01 [ 91.251055][ T1975] rust_binder: 1974:1975 BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 91.256345][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.260165][ T1975] rust_binder: Write failure EINVAL in pid:15 [ 91.273708][ T67] usb 5-1: config 0 descriptor?? [ 91.305026][ T1964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.528139][ T1964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.539905][ T311] usb 3-1: USB disconnect, device number 27 [ 91.763690][ T67] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 91.830249][ T1991] loop3: detected capacity change from 0 to 1 [ 91.924775][ T67] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.935010][ T67] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 91.947763][ T67] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 91.957113][ T67] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.965810][ T67] usb 7-1: Product: syz [ 91.970284][ T67] usb 7-1: Manufacturer: syz [ 91.975147][ T67] usb 7-1: SerialNumber: syz [ 91.980878][ T1979] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 92.009966][ T2014] syzkaller0: entered promiscuous mode [ 92.015549][ T2014] syzkaller0: entered allmulticast mode [ 92.021914][ T2014] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 92.080612][ T2018] rust_binder: Write failure EFAULT in pid:386 [ 92.107298][ T402] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.162883][ T2027] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 92.190192][ T2027] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 92.272867][ T2027] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 92.284166][ T67] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 92.295540][ T2027] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 92.302408][ T2027] pci 0000:00:05.0: vgaarb: bridge control possible [ 92.309012][ T2027] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 92.319872][ T67] usb 7-1: USB disconnect, device number 3 [ 92.328962][ T2027] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 93.367385][ T2049] rust_binder: Write failure EFAULT in pid:412 [ 93.584051][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 93.584080][ T36] audit: type=1400 audit(1793647149.580:1357): avc: denied { ioctl } for pid=2054 comm="syz.6.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.643690][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 93.651882][ T36] audit: type=1400 audit(1793647149.640:1358): avc: denied { ioctl } for pid=2054 comm="syz.6.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.677046][ T36] audit: type=1400 audit(1793647149.640:1359): avc: denied { ioctl } for pid=2054 comm="syz.6.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.702634][ T36] audit: type=1400 audit(1793647149.650:1360): avc: denied { ioctl } for pid=2054 comm="syz.6.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.728183][ T36] audit: type=1400 audit(1793647149.720:1361): avc: denied { ioctl } for pid=2054 comm="syz.6.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.737215][ T743] usb 5-1: USB disconnect, device number 18 [ 93.762717][ T36] audit: type=1400 audit(1793647149.750:1362): avc: denied { unmount } for pid=1038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.788248][ T36] audit: type=1400 audit(1793647149.750:1363): avc: denied { read } for pid=1038 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.812107][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 93.836123][ T2059] overlayfs: conflicting options: metacopy=off,verity=require [ 93.842626][ T31] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 93.848244][ T36] audit: type=1400 audit(1793647149.780:1364): avc: denied { read open } for pid=1038 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.853064][ T31] usb 7-1: config 0 has no interface number 0 [ 93.891539][ T36] audit: type=1400 audit(1793647149.780:1365): avc: denied { ioctl } for pid=1038 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.905604][ T31] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.928451][ T36] audit: type=1400 audit(1793647149.820:1366): avc: denied { ioctl } for pid=2054 comm="syz.6.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.933759][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.962824][ T31] usb 7-1: Product: syz [ 93.967776][ T31] usb 7-1: Manufacturer: syz [ 93.972479][ T31] usb 7-1: SerialNumber: syz [ 93.982862][ T31] usb 7-1: config 0 descriptor?? [ 93.995562][ T31] smsc95xx v2.0.0 [ 94.133696][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.140052][ T1419] Bluetooth: hci0: command 0x1003 tx timeout [ 94.177746][ T67] rust_binder: 2062: undelivered TRANSACTION_ERROR: 29189 [ 94.551989][ T2091] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.843640][ T743] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 95.024051][ T743] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 95.027944][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.049137][ T743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.074468][ T743] usb 4-1: Product: syz [ 95.079178][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 95.092242][ T743] usb 4-1: Manufacturer: syz [ 95.099760][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.103678][ T743] usb 4-1: SerialNumber: syz [ 95.117794][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.250774][ T2124] rust_binder: 2123:2124 no such ref 3 [ 95.262661][ T2124] rust_binder: 2123:2124 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 95.271260][ T2124] rust_binder: 2123:2124 BC_FREEZE_NOTIFICATION_DONE 0000000000000002 not found [ 95.280813][ T2124] rust_binder: Write failure EINVAL in pid:428 [ 95.374868][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 95.387510][ T743] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 95.391838][ T31] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 95.427313][ T743] usb 4-1: found format II with max.bitrate = 44931, frame size=8 [ 95.438888][ T743] usb 4-1: found format II with max.bitrate = 44931, frame size=8 [ 95.441226][ T31] usb 7-1: USB disconnect, device number 4 [ 95.458962][ T743] usb 4-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 95.522705][ T743] usb 4-1: USB disconnect, device number 34 [ 95.719891][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.953628][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 96.094292][ T31] usb 5-1: device descriptor read/64, error -71 [ 96.223727][ T311] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 96.333628][ T31] usb 5-1: device descriptor read/64, error -71 [ 96.396680][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.411145][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.421749][ T311] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 96.430878][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.444078][ T311] usb 4-1: config 0 descriptor?? [ 96.601452][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 96.613640][ T45] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 96.753639][ T31] usb 5-1: device descriptor read/64, error -71 [ 96.763648][ T45] usb 7-1: device descriptor read/64, error -71 [ 96.869585][ T311] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 96.898381][ T311] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 96.923688][ T311] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 96.931448][ T311] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 96.940510][ T311] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 96.993647][ T31] usb 5-1: device descriptor read/64, error -71 [ 97.023651][ T45] usb 7-1: device descriptor read/64, error -71 [ 97.073710][ T311] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 97.114455][ T311] usb 4-1: USB disconnect, device number 35 [ 97.122172][ T31] usb usb5-port1: attempt power cycle [ 97.252289][ T2197] fuse: Invalid rootmode [ 97.252307][ T2196] fuse: Invalid rootmode [ 97.263654][ T45] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 97.403671][ T45] usb 7-1: device descriptor read/64, error -71 [ 97.473664][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 97.498898][ T31] usb 5-1: device descriptor read/8, error -71 [ 97.637730][ T31] usb 5-1: device descriptor read/8, error -71 [ 97.644076][ T45] usb 7-1: device descriptor read/64, error -71 [ 97.753764][ T45] usb usb7-port1: attempt power cycle [ 97.776939][ T311] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 97.872981][ T2207] __nla_validate_parse: 45 callbacks suppressed [ 97.873000][ T2207] netlink: 72 bytes leftover after parsing attributes in process `syz.3.512'. [ 97.893648][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 97.913638][ T311] usb 3-1: device descriptor read/64, error -71 [ 97.943411][ T31] usb 5-1: device descriptor read/8, error -71 [ 97.972499][ T2213] batadv_slave_0: entered promiscuous mode [ 97.980308][ T2212] batadv_slave_0: left promiscuous mode [ 98.082814][ T31] usb 5-1: device descriptor read/8, error -71 [ 98.093626][ T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 98.138103][ T45] usb 7-1: device descriptor read/8, error -71 [ 98.163665][ T311] usb 3-1: device descriptor read/64, error -71 [ 98.214096][ T31] usb usb5-port1: unable to enumerate USB device [ 98.286438][ T45] usb 7-1: device descriptor read/8, error -71 [ 98.403668][ T311] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 98.533805][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 98.544356][ T311] usb 3-1: device descriptor read/64, error -71 [ 98.555981][ T45] usb 7-1: device descriptor read/8, error -71 [ 98.615914][ T36] kauditd_printk_skb: 1357 callbacks suppressed [ 98.615939][ T36] audit: type=1400 audit(1793647160.609:2724): avc: denied { read } for pid=2232 comm="syz.3.521" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.656715][ T36] audit: type=1400 audit(1793647160.639:2725): avc: denied { read open } for pid=2232 comm="syz.3.521" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.680978][ T36] audit: type=1400 audit(1793647160.639:2726): avc: denied { ioctl } for pid=2232 comm="syz.3.521" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.708473][ T45] usb 7-1: device descriptor read/8, error -71 [ 98.709361][ T36] audit: type=1400 audit(1793647160.639:2727): avc: denied { read write } for pid=2232 comm="syz.3.521" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.738801][ T36] audit: type=1400 audit(1793647160.639:2728): avc: denied { read write open } for pid=2232 comm="syz.3.521" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.787624][ T36] audit: type=1400 audit(1793647160.649:2729): avc: denied { ioctl } for pid=2232 comm="syz.3.521" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.793775][ T311] usb 3-1: device descriptor read/64, error -71 [ 98.833727][ T45] usb usb7-port1: unable to enumerate USB device [ 98.840204][ T36] audit: type=1400 audit(1793647160.649:2730): avc: denied { ioctl } for pid=2199 comm="syz.2.509" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.877474][ T36] audit: type=1400 audit(1793647160.649:2731): avc: denied { ioctl } for pid=2199 comm="syz.2.509" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.908901][ T36] audit: type=1400 audit(1793647160.649:2732): avc: denied { ioctl } for pid=2199 comm="syz.2.509" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.934487][ T36] audit: type=1400 audit(1793647160.649:2733): avc: denied { ioctl } for pid=2199 comm="syz.2.509" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.960877][ T2240] futex_wake_op: syz.4.522 tries to shift op by 144; fix this program [ 98.969512][ T311] usb usb3-port1: attempt power cycle [ 98.987453][ T2243] futex_wake_op: syz.4.522 tries to shift op by 144; fix this program [ 99.129043][ T2249] netlink: 'syz.4.524': attribute type 13 has an invalid length. [ 99.183078][ T12] ------------[ cut here ]------------ [ 99.188661][ T12] WARNING: CPU: 0 PID: 12 at drivers/block/ublk_drv.c:1583 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 99.199186][ T12] Modules linked in: [ 99.203139][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 99.214758][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.224894][ T12] Workqueue: iou_exit io_ring_exit_work [ 99.230501][ T12] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 99.236916][ T12] Code: 5d c3 cc cc cc cc cc e8 fd d8 30 fe 0f 0b eb e3 e8 f4 d8 30 fe 0f 0b eb da e8 eb d8 30 fe 0f 0b e9 4d fe ff ff e8 df d8 30 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 99.256581][ T12] RSP: 0018:ffffc900000c7990 EFLAGS: 00010293 [ 99.262691][ T12] RAX: ffffffff83587e51 RBX: 1ffff1102271f76d RCX: ffff888102654f00 [ 99.270724][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 99.278807][ T12] RBP: ffffc900000c79e0 R08: 0000000000000003 R09: 0000000000000004 [ 99.286840][ T12] R10: 0000000000000000 R11: ffffffff83586e30 R12: ffff8881311a0000 [ 99.294880][ T12] R13: ffff8881138fbb40 R14: ffff88812bb94b00 R15: ffff88812bb94b10 [ 99.302887][ T12] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 99.311893][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.313826][ T311] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 99.318539][ T12] CR2: 0000000000000000 CR3: 0000000143bae000 CR4: 00000000003526b0 [ 99.334182][ T12] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 99.342224][ T12] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 99.350291][ T12] Call Trace: [ 99.353628][ T12] [ 99.356585][ T12] ublk_ch_uring_cmd+0x6f/0xa0 [ 99.361391][ T12] io_uring_try_cancel_uring_cmd+0x196/0x280 [ 99.367488][ T12] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 99.370106][ T311] usb 3-1: device descriptor read/8, error -71 [ 99.373425][ T12] ? io_uring_cancel_generic+0x6eb/0x6eb [ 99.385288][ T12] ? __cfi___switch_to+0x10/0x10 [ 99.390274][ T12] io_ring_exit_work+0x23d/0x83b [ 99.395305][ T12] ? _raw_spin_unlock+0x45/0x60 [ 99.400219][ T12] ? __cfi_io_ring_exit_work+0x10/0x10 [ 99.405744][ T12] ? kick_pool+0xb9/0x540 [ 99.410144][ T12] process_scheduled_works+0x7f7/0x1060 [ 99.415800][ T12] worker_thread+0xc99/0x13f0 [ 99.420524][ T12] kthread+0x2c7/0x360 [ 99.424666][ T12] ? __cfi_worker_thread+0x10/0x10 [ 99.429817][ T12] ? __cfi_kthread+0x10/0x10 [ 99.434461][ T12] ret_from_fork+0x64/0xa0 [ 99.438931][ T12] ? __cfi_kthread+0x10/0x10 [ 99.443569][ T12] ret_from_fork_asm+0x1a/0x30 [ 99.448436][ T12] [ 99.451483][ T12] ---[ end trace 0000000000000000 ]--- [ 99.516589][ T311] usb 3-1: device descriptor read/8, error -71 [ 99.763683][ T311] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 99.787238][ T311] usb 3-1: device descriptor read/8, error -71 [ 99.927327][ T311] usb 3-1: device descriptor read/8, error -71 [ 100.034223][ T311] usb usb3-port1: unable to enumerate USB device