last executing test programs: 3m2.795258944s ago: executing program 0 (id=426): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/155) socket$inet(0x2, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000940)="2e1221b23bb601c494d3df173e75feff000d9d90491c0024", 0x18}, {&(0x7f00000000c0)="00400000e87767", 0x7}], 0x2) setsockopt$sock_void(r3, 0x1, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) (async) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/155) (async) socket$inet(0x2, 0x2, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) listen(r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000940)="2e1221b23bb601c494d3df173e75feff000d9d90491c0024", 0x18}, {&(0x7f00000000c0)="00400000e87767", 0x7}], 0x2) (async) setsockopt$sock_void(r3, 0x1, 0x2d, 0x0, 0x0) (async) 3m2.746444926s ago: executing program 0 (id=427): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x0, 0x12}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0x8000000000000000}) 3m2.424282514s ago: executing program 0 (id=428): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x100000}], 0x1, 0x40012021, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r6, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m1.549151796s ago: executing program 0 (id=429): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) inotify_init1(0x800) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = dup(r4) syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m0.927018381s ago: executing program 0 (id=430): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) statfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x18, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x500000c, 0x10, 0xffffffffffffffff, 0xbb9eb000) write(r1, &(0x7f0000000000), 0x0) lsm_list_modules(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m0.868375602s ago: executing program 0 (id=431): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x1}, @register_looper], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x3, 0xffc, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m51.754131438s ago: executing program 32 (id=402): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) 2m50.08265383s ago: executing program 4 (id=433): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x38) syz_usb_connect$uac3(0x6, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="7a2535e7f500c1f2ff3b022cc458956b070ecfa36b3fd8b3a5563c6e67a0cf50c491e31de18858eb382ac228f6b29bbd2199af99c6dabe40baf9f68f1bbe63efe6c48e8a27692d9c751068fe9780c679703c509aa2c85e00a0af31f29ce0bab9561dd5f3e3f206e455", @ANYRES8=0x0, @ANYRESHEX=r0], 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0x2, 0xc, 0xc, 0x9}) 2m49.546137783s ago: executing program 4 (id=434): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x10000007, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b5, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x80003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0xfffffffb, 0x79, 0x8, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x0, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x9, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0xfffffffe, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8ad, 0x2000006f, 0x8e, 0x2, 0xb, 0x7, 0x2, 0x809, 0x40, 0xa7, 0xa000, 0x0, 0x200b397, 0x8001, 0x200001, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x0, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x43ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x40, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x8000491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x234, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000c, 0x7, 0xdd81, 0x7, 0x7f, 0x9d27, 0x8, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x1000, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xdcce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7ff7, 0x3, 0x6, 0xf, 0x8000000e, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x9, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000400)={{r1, 0x0, 0x4000, 0x0, 0x6, 0x0, 0x0}, {[0x6, 0x200, 0x8abb, 0x2ab3]}, 0x9, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x5], 0x25000, 0x344}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r7], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x786d) mmap$IORING_OFF_SQ_RING(0x0, 0x8000004, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r11, 0x800448d2, 0x0) 2m48.536888528s ago: executing program 33 (id=412): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000080)="411d0c028310ba221ee95a24a492fcb6bbbee61a986bc3c8b5b96eee83a2040007651b127d999c87b9") r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xf00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x800448f0, &(0x7f0000000080)) 2m48.532452888s ago: executing program 4 (id=436): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) userfaultfd(0x1) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x9c, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/195, 0x0, 0x1, 0x9}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0xb}}, &(0x7f0000000500)}}, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f00000005c0)}, 0x1000}, @request_death, @free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="14e9703b1fcc178927000000000000aa192309ebe36337aaf1834a71fdb06ecaa99612a0ce3679c0f423359bd3dab74621d19e53d5e00c0c8e73402ea0e49075ceb3001f759d9d4f8511d8b3432f93f46f17e54a19ae3a43e7802e055509007ff0ab6abf0aeea5d23ffc2fc5512e5afb2cd712be3593b9e116526606f50014895d387b643acc4a32f1aeba07c5151c6455c2ea21030f276a77229d7b8c6a0cd8b3c4645b920339479d4c6cb93e9dbe75f025ef26b081cecf"], 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = dup(r13) syz_ublk_setup_queues(0xffffffffffffffff, r12, &(0x7f0000000180)={0x0, 0x2, 0x40000, 0xfffffffe, 0x367, 0x0, r14}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4707, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x77}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 2m47.571613062s ago: executing program 34 (id=422): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x10000000, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x800) pread64(r3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x1}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000500)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m47.523845983s ago: executing program 4 (id=438): userfaultfd(0x1) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000440)=""/64, 0x103f000, 0x800, 0x7, 0x1}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000380)={0x7, 0x0, [{0x4000000d, 0x7f, 0xbee, 0x8}, {0x2, 0xf490, 0xc, 0x5, 0x3}, {0x4, 0xfffffff7, 0x3, 0x1, 0x1}, {0x80000000, 0x81, 0x1, 0x2, 0xfa}, {0xd, 0xc1b, 0x2, 0x6, 0xd}, {0x2, 0x5, 0x7a0, 0x5, 0x6}, {0x80000007, 0x1000, 0x4, 0x4, 0x6}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB='\f\x00:'], 0x2c}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$NILFS_IOCTL_RESIZE(r6, 0x40086e8b, &(0x7f0000000140)=0xfaf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) preadv2(r1, &(0x7f0000000480)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000280)=""/80, 0x50}], 0x2, 0x6, 0x4, 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m47.319199788s ago: executing program 4 (id=439): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) statfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x18, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x500000c, 0x10, 0xffffffffffffffff, 0xbb9eb000) write(r1, &(0x7f0000000000), 0x0) lsm_list_modules(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m47.25566452s ago: executing program 4 (id=440): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x800000000006, 0x2, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003080)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c132023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1000000006153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5619dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "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"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r11, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x8015) connect$inet6(r10, &(0x7f0000001040)={0xa, 0x4e24, 0xa5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001080)={0x20, r4, 0x2, 0x2, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1328, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000010c0)={'wg2\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f0000001140)={&(0x7f0000000040), 0xc, &(0x7f0000000980)={&(0x7f0000001300)={0x3c0, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200, 0xe}}}}, [@NL80211_ATTR_FRAME={0x330, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9b}, @device_b, @from_mac=@device_b, @device_b, {0x0, 0xff}, "", @void, @value=@ver_80211n={0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9, 0xad6}}, @ntf_ch_w={0x7, 0x0, 0x1}}}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {}, @device_b, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x8}, {0x8, 0x2}}}}, @NL80211_ATTR_MAC={0xa}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x11}, 0x40840) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c002b80080004"], 0x2c}], 0x1}, 0x0) 2m46.46417234s ago: executing program 5 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x53) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000000)=""/62) 2m45.407464356s ago: executing program 35 (id=431): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x1}, @register_looper], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x3, 0xffc, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m45.019782066s ago: executing program 5 (id=443): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000009b80), 0x149202, 0x0) ioctl$FICLONE(r4, 0x80811501, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f0000000080), 0x0, 0xfe, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', r2, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @loopback}}}}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x82) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r7, 0x0, 0x48004) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf252c0000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r11 = open(&(0x7f0000000040)='./file1\x00', 0x610a02, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r12, 0x1) ioctl$TUNSETLINK(r11, 0x400454cd, 0x320) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, 0x0) 2m44.802998181s ago: executing program 5 (id=444): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 2m44.768921962s ago: executing program 5 (id=445): r0 = socket(0x28, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004'], 0x28}, 0x4000810) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) 2m44.678567504s ago: executing program 5 (id=446): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) statfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x18, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x500000c, 0x10, 0xffffffffffffffff, 0xbb9eb000) write(r1, &(0x7f0000000000), 0x0) lsm_list_modules(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m44.621273506s ago: executing program 5 (id=447): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="13000000270001"], 0x50}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) syz_usb_connect(0x2, 0xd2b, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002baaa1a106d049708e310010203010902190d037fb8500a090426080ed3e679040b24060001b6bcd16596a50524004ca60d240f0102000000020001000306241a0600060a24010200b0000201020b240701030005ab17422309240305030303040b0924040603c018251809240306ff010303050905080000040480809c09e7c11f9a925940060000006ea30477468f69b077dd8dfa3a8b25215baa274824e81d22765e44ec419a3076b78234ce37611c2cc3d97883ba6abca89acf8f74479eed658bfeff481d2c79cb651cf6126a67686e07898f2d5cadd5d89b4f22f649de3367dd9244bab5c9b7ae846a8f4e917f2c0fe71010358153483300c0a8b992534e3921b9ac1f6b0b7ef2a10cde429fb6d04b54679c15d45e931d3081e2f8e027dad3a4d57b1de35715bd729d2f002bd29d6631c6798009050f10000280030a0725010c020b000725010002e7e4090508034000000c000725010c090600072501080852000905000200020d07098d119173f8fc439764c2617355c67172278084c84d895abe8f51177a6979e21513e6692dd7216a3fe092a0da9fa6f8cd4ebed628dce388471b71d690b009694953a23210f19f311b46863fada19f33f9d2bea6c0ec4bef12dc7393c4161a579ef494da04b629dae50dc85b0a20687b47a76fc65ea9d5681a50ac732752a27a51c120b98714ecfe251a506c8aa30905060000020203c2072501040f0900530d6d556398be3f0d1b86f942715dc90ca4e3d6579f5a37bbb2ed00d0971f5810c9cb548441f2ab9352ca6ff066c3ea9dc7bfe13d53a58ebcf4e336aed224df8e1476a69d6e6f422aa74cb495ca44bae9b7940905090208000e0409072501080207000725010c020700090502100002000f00682268d376e82337b7ea839fa01caa4342212767137b45504be1475def634373a6091666957e4d6215d5f5355af6ce0b8503e011e36c666598d04cee193865130bf8679eef7f5907cdd4c3122729dbd72e9c8be62e1006523ba33e19c73eb73600804d4ee641bcd2072501080d030009050d10080003040198020093dada9c176a79255fe591699485e3d52de58f53d270c8e646cce38ea1ecd801ddba55c90e8593d127a73b516ca0e87278a6282f20610840e846a607c8dabfbc40a1cfe5edcea9b90e45238fec22495c3afc1a982216f63c021256082248032c2453177302b93986f159f93850d5e7ca2f45cf78e75c38b6133e4f3da3bf45a2f6cb163f7abb513c0f70e63d3b5829d992fdb933801f1170ed94311b7c7408986d3f7ed69fb8a459b254abacbf82dd4e806ba9ed09050c0040000f0701470856a9d0006c70bcf51ff0ef69acdb0e046eaecd80fb4cbc17276f5cfccc9063d788a888aee851f788dacdee49abe2c2d0a3b4ee42b571ba04dd6ccab715042af402db476deb072501000831000905000020000201060905021010000500ff090500104000020b06072501046b0500ab0fa0b7325d271613c968d30c19b242b14cabd47d64e49d2ced6e655282a818758c6579dd5676f2de04bc02b2e237bf2c901c730637ed56d16c7ec636c7678a01a5f4d07b9048756a077e1a6f1585222b3268c49abb10bdde557d4cc0107bd35f086a7a2fdaf2c922de572d5c7daf713adeec1806fb46e6c7de2e66bd57a1805ed80d4ca517e7eb966dba016ad93e899c2b00dca5de35a179023a992c74d25fee0fcf012f62eba36f894f09050d0000040304060725010c090800c53101529a81ec2de3b5cf72d2b7b4d57b233571d76c8fe0157575f53c58b5c8f4d68ad5267285a5a968bccff22b6f2f4fa4bb212f00b8ae9a21a309f9b06aadfcfedef9aea385010e7b6760e923bb07a3e2cee4397b91fd6469b19cd65f1b92ce1bb797b9bce663621e3f26be7f527d5d43659e9a42aacffff74024ca6f3434a128beb32adaf1f2d4a296dc56c014af4640c0085fd82e41c617b17fad75dc67aba4dd334b18ea6c3fcbea302d860f6a9d8f98df9ad7794dc1714d42ba27b41b559a64edb60905050c0002001f040725010c00371e9708d908f3efc759b257ff4ae6cee9d3f506c6bc67a944b6beeb3c6e18b4ad761d03fb845e3720455706f969b11bcd0127610b592bbdbd557f65b8c61474f4c216c06c2ee6ec4f53260cc2aa472080e159bcc5583dd6f236b6bc25338f9806780df7c41f80d3186b8e2dc35db84b61e7c1b231a8c0684510843c4e585fc79418c92b43350d5b1f4ee2462392ec1797f85628974b486b910904a00609d6403c07052406000005240008600d240e019100000008000400540c241b03000004080308000408241c0c000bf9ff05240101040e24070860380100ff0f06000d000c241b370cab8806050800010e2407021b00080040510400d5027c0dd71e0ed9d32e409d3f767a257f4b3e6b8309e2f8c09efdf140fcfad798c87d4f4e9af5beb3902091a8c1d6934926643f3545459baf0b81378e15c14793aa17e8a2ecdfe5b068ef538b7897b9ebfc47199dcc90c8da0e9bec303c83d1a9a0a8a9a1c0313dfa8e8b2f8ef27e1052441043584ebea8eab375b77ed70905030c400005ff0307250104befeff09050c002000a51c0bf6068c3fd5607254da57fa4a6754d956b009977ba5e9e38fe2183d3b85f521888ef9190c413fded81985c38d21b8532373f5e678f41002bd96d527db2b462b7763fb9bf6d187bff4a02f68ff4bd0a5e33da1bdd13bd0f76cb56114b1ac2be1c3e71ca35b11453cde34717a4e6d1913693c5d1afb5b78d533b5848e2e5334421bac16a515654a9831114fb105bd205722300dcb56ec2573f6d92229b8b830902dc8ef8aefc4531e559286e157253ec67be3d7d088e58261c9381ecf71228914f7b67a7708a8e62c808a3a924ab7330131bf1587290acebeac105d1d83302b1b2dcd4f913f4cdfd5bb4d374532f7306f887781aa2cec3209050700000201fc0007250108010500090501000800023d800725010c0007000725010404030009050202ff030006b009050000ff0302e3000725010c060700090580101000020c08090503014000fa08fb09050f00400004037209048a07109feab550db2255a65c6b0ee9b1408ba480eefd6dcfcda823cdd250f5549df075f448596205ccafa5cb72f43da897d09370a7229f4a082c4311821fc23b27d70e1ade49a15aa6a93fd8115d48c28bc68b9a01d6b61620bf6ef4b681f4e462122f42f6242d39817a313e93f602ce807943a99fd831f48e726f48ed2e8e0abc48794209cde823f809656ae097270bdbf4fc92bf4be333bdf6daaedbf824c6dd441e6dcba530519b74087c0f519353b0764e734f6a20613b20ef729dbc4122c449fa1e688ea3b3e6f1da9e00197586c9d5b5b582ad80bfa7e521e3832b39934f0b09050a10000240c100072501085f0fdd0725010c0748fe0905081020000809000725010c00020009050e0c0000ffea0707250100080400740a4d6800229c6d710611771d4b110d2092799a3a12653e830e35abd13a0b351f71d681914ca7674506c969aa2e5da49559b6756f0f154ad9dac74492459d820a5c5543137d4dd4e6c66be00e0ef6ed65ac840593b48d5eb704cef0d7f175a62b9a94916de665c379d9c1cb473156754a6266cbddf3ea9b1a69830905071008048100060725010004020020110867895c668861ddb921adffd228f998ddd325ca029365cfc92c88cb251809050510ff0302079f072501040110000725010c6f090009050c1010000709f90725010c0307003e03be4e0d418de68c7de3afc60d76db15005e23c48dc0f773bff8606f807d3fdb933a8fc2db2dcf6884edf1e9e156df86c2c2a06c61e2f782c5bcf4883d0905800020004701fa09050a0c20000e0f050725010c05f9ff090503004000000b0c2603f6514e751cd1065e389d289a9cfdb29fd9887a4b0051a8bcb14487fed1df724e535a9df1aa21dca87ef089d16ba9f97352fb9553a63cce54a5b8c622e1b1794740c062a466f3876a74dab3ddaf186d3756f9d3b0d9c3a22fa20f40b853e1d8f52248b627cb56c08e36a05539a58af3b22bf38ce2259cc4a944dcbf1bfcdcf2845152b086a1d0fcbf4803bfff56276564143194fcaba28154cd0356099bf08212cebaedb58a4cb76b0edd052c1a9737d026b62b0fa6513a0fefa6d179a8de4ca8b03b8ed6794f0c17accefe8ce50709050000000410340a09050c0c0800ff040007250108060b005d11232d7abfd8d2063968cfb4dbbb7aaabb33fa6ec4d75c97b0cd49f31c363b7225fc1e20aeb2813041fd97b1d064a876780d73df109fba5015651ec027f50fac8ad87f0f7c6feaab33c6e2cc068c32df7725dde98381bf9488e9e9b909050a10000405000109050c00400002050309050f10ff0302030209050f00a7070509100905000310007f8004d50755a03996a749430b112e4587d8b24eae1a20f59d548e0daa67772ade99315a2b2982f3629ac4e026c8fc6fac527aa1e42ff4e8ff4580797dd6451107ab3bb702b53ea73a73f561554689c4967a41c91e81193c69f827b8da13c1bcad3c5d67137973bb25a337b46d467a0c1fec060d8b5b7b537179e3239ca60cca6be9312b6dd65041a6b9293295f4a44279b4a07115b2dd12efe9eda76ec651b4d451b7a669e33d2b31562c439f415d67ff8c61108c8b8e02031dedaa6f7aec726c20ae6667785b99170ed2a1fb0807bdf97b044f6e51c2fc"], &(0x7f00000000c0)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x300, 0xfe, 0xc0, 0xaf, 0xff, 0xb}, 0xb7, &(0x7f0000001180)={0x5, 0xf, 0xb7, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x9, 0x3}, @generic={0xab, 0x10, 0x1, "d35c892fb0b027d850dc4598fc8b7f285ce88482c1499c69817a32ed36f5f8e4a3e2ebd582859409d40d355d6c90f260165cb18c6728bfa11d480b220d4bb719f05c310f861c6a253946908c967736b666b30b150320b16460d338f87ee49e21c864cc4cb0d43693e64090539d38697270772758ba0c9fb97104c4bd1c566ddf79d354957fe11c2d19aa03cb70fc55124dcd718ca8f7bb3beea7ebc9ecc9118f44968e05e2e7ec56"}]}, 0x7, [{0xe9, &(0x7f00000015c0)=@string={0xe9, 0x3, "4f1f0b11c3dafcd317fbdd784f8b9759efb7a92baf4884b553d84565c283d17058d3230dc6138e34527f89eabb3f55bce1370fa7fe48dfc7c91a5cb515af15b3c2d7c8f0cf7fc6fa69f7d4f2e33976e28e016cd8783d42c03de3c1305d94bae8416986dc14bf31ae7bf5255b4fe8b5adde96be4daa0cd998bae7855a3849cdaa041920ccaebaa453f31f0907fa35b99ba33aaac1ac39d2db6016e9281a8c2be9b094850c505cd1f0a4761a9b809658cbc2d28ef55df110168914f9e0fe858117e6c34662ede114f6107e5f8c0be89e96d9a5a4d3ac267571c424df6bb68328956b83c784c34410"}}, {0x47, &(0x7f0000001280)=ANY=[@ANYBLOB="470302157a605feacb4d99b4eec7848280ce44e2c115cf22ab5bac0359c9dbdcb2ff37b30200000000000000e9ae7cb6db0feee575a812bdf8051b29119d27aaff15e07a421313"]}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x820}}, {0xf2, &(0x7f0000001700)=@string={0xf2, 0x3, "f9f159a8aa06a1eddc487cc545cbcb703f66376691e4c29f960333387c2fa8fad314ca939b4b46f8aaa2c26657f01c5a789251bf5dfd244961a00c525b6b0e4f50de0d7f5e89ddb5a74548debaf87d8b6848d1f86b737c73023743e9ee9aee6f9a13acba7f6e8bff40ff7d86fd3b206fd277ec5ae0b8d246cca10852e958fc324e6d7cd408bf6f4095dd09bafaf23a012c2fb7290a325d85b9b4526a02252ddc4ab478d5272c017636096f377ffa918cb553960b80b93a3014f2766af37fe0a1cdc4e92a9e8cd5ea93ae346957000c1d573ac3c64f3c8f6001436fdbbe135899ea3eb672c5c08cd8e54d770a4a03757d"}}, {0xed, &(0x7f0000001380)=@string={0xed, 0x3, "866de3f72ea2165bf26aaffcfa2ec60621be1fa58df384846d4b671e1e0b6e3131809265e2d868298c27ab9406cf362e0e9960576cff06dedfceaacd68faf5ca19c8aef6e908f16cbaa8687ffbcdb010326479d707f6872e42335cd4c7ba8e0e1fd30afc14d940a4ef2164951c9de3274866188222d5f85bb2f947159c3ebade75031c6d606b8b472ecc80a8c578fb139c67e5a1305726930122f2fdd86a25ca247a15edd21f6d8bc8a8c0ac3325007dc9100494ea1316cb43cd1c3150f7c53581860c2fe4fcd7ae7afe7b6404ff0db4f04a1fe48dcf86e7e5294c87163d2fb4b1766a0ae0e62df4948978"}}, {0xd0, &(0x7f0000001480)=@string={0xd0, 0x3, "2ff0facba7067d20f0f695801ba135a1b2d7641130a3c9e3672d183d706554d81fdc80e9687e279c3f9db1e347a4eb32a92c5ba4b5b19b66ada3562e45c0612da46e53272ee4a5a20995402f373f7231940305ebafc5bfe26dcdb541d1a54183eb879858529be188343d7cb4c8fb4b1a5997b5ccb95e54e5f6759cddd338555b81594ed612cc9834a353afdea868b0b34ab46d99b408a68b8e7b65af0f4f0703ffc4ba4b02b24e5f91b5becef229785d3362cbe5d9e8a7f5beb8632e22856538465fbd1764d22b7a1c013b2edfaa"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x40e}}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x8) connect$inet(r5, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept$inet(r4, 0x0, 0x0) sendto(r6, &(0x7f0000000100)='ab\r', 0x3, 0x8800, 0x0, 0x0) close(0x4) socket$inet6(0xa, 0x2, 0x0) memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000040)='cramfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x149) read$FUSE(r7, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r8 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) ioctl$FITHAW(r8, 0xc0045878) syz_usb_connect$uac2(0x1, 0x87, &(0x7f00000016c0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 2m32.136821135s ago: executing program 36 (id=440): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x800000000006, 0x2, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003080)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c132023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1000000006153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5619dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r11, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x8015) connect$inet6(r10, &(0x7f0000001040)={0xa, 0x4e24, 0xa5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001080)={0x20, r4, 0x2, 0x2, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1328, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000010c0)={'wg2\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f0000001140)={&(0x7f0000000040), 0xc, &(0x7f0000000980)={&(0x7f0000001300)={0x3c0, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200, 0xe}}}}, [@NL80211_ATTR_FRAME={0x330, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9b}, @device_b, @from_mac=@device_b, @device_b, {0x0, 0xff}, "", @void, @value=@ver_80211n={0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9, 0xad6}}, @ntf_ch_w={0x7, 0x0, 0x1}}}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {}, @device_b, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x8}, {0x8, 0x2}}}}, @NL80211_ATTR_MAC={0xa}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x11}, 0x40840) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c002b80080004"], 0x2c}], 0x1}, 0x0) 2m29.403338653s ago: executing program 37 (id=447): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="13000000270001"], 0x50}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) syz_usb_connect(0x2, 0xd2b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x300, 0xfe, 0xc0, 0xaf, 0xff, 0xb}, 0xb7, &(0x7f0000001180)={0x5, 0xf, 0xb7, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x9, 0x3}, @generic={0xab, 0x10, 0x1, "d35c892fb0b027d850dc4598fc8b7f285ce88482c1499c69817a32ed36f5f8e4a3e2ebd582859409d40d355d6c90f260165cb18c6728bfa11d480b220d4bb719f05c310f861c6a253946908c967736b666b30b150320b16460d338f87ee49e21c864cc4cb0d43693e64090539d38697270772758ba0c9fb97104c4bd1c566ddf79d354957fe11c2d19aa03cb70fc55124dcd718ca8f7bb3beea7ebc9ecc9118f44968e05e2e7ec56"}]}, 0x7, [{0xe9, &(0x7f00000015c0)=@string={0xe9, 0x3, "4f1f0b11c3dafcd317fbdd784f8b9759efb7a92baf4884b553d84565c283d17058d3230dc6138e34527f89eabb3f55bce1370fa7fe48dfc7c91a5cb515af15b3c2d7c8f0cf7fc6fa69f7d4f2e33976e28e016cd8783d42c03de3c1305d94bae8416986dc14bf31ae7bf5255b4fe8b5adde96be4daa0cd998bae7855a3849cdaa041920ccaebaa453f31f0907fa35b99ba33aaac1ac39d2db6016e9281a8c2be9b094850c505cd1f0a4761a9b809658cbc2d28ef55df110168914f9e0fe858117e6c34662ede114f6107e5f8c0be89e96d9a5a4d3ac267571c424df6bb68328956b83c784c34410"}}, {0x47, &(0x7f0000001280)=ANY=[@ANYBLOB="470302157a605feacb4d99b4eec7848280ce44e2c115cf22ab5bac0359c9dbdcb2ff37b30200000000000000e9ae7cb6db0feee575a812bdf8051b29119d27aaff15e07a421313"]}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x820}}, {0xf2, &(0x7f0000001700)=@string={0xf2, 0x3, "f9f159a8aa06a1eddc487cc545cbcb703f66376691e4c29f960333387c2fa8fad314ca939b4b46f8aaa2c26657f01c5a789251bf5dfd244961a00c525b6b0e4f50de0d7f5e89ddb5a74548debaf87d8b6848d1f86b737c73023743e9ee9aee6f9a13acba7f6e8bff40ff7d86fd3b206fd277ec5ae0b8d246cca10852e958fc324e6d7cd408bf6f4095dd09bafaf23a012c2fb7290a325d85b9b4526a02252ddc4ab478d5272c017636096f377ffa918cb553960b80b93a3014f2766af37fe0a1cdc4e92a9e8cd5ea93ae346957000c1d573ac3c64f3c8f6001436fdbbe135899ea3eb672c5c08cd8e54d770a4a03757d"}}, {0xed, &(0x7f0000001380)=@string={0xed, 0x3, "866de3f72ea2165bf26aaffcfa2ec60621be1fa58df384846d4b671e1e0b6e3131809265e2d868298c27ab9406cf362e0e9960576cff06dedfceaacd68faf5ca19c8aef6e908f16cbaa8687ffbcdb010326479d707f6872e42335cd4c7ba8e0e1fd30afc14d940a4ef2164951c9de3274866188222d5f85bb2f947159c3ebade75031c6d606b8b472ecc80a8c578fb139c67e5a1305726930122f2fdd86a25ca247a15edd21f6d8bc8a8c0ac3325007dc9100494ea1316cb43cd1c3150f7c53581860c2fe4fcd7ae7afe7b6404ff0db4f04a1fe48dcf86e7e5294c87163d2fb4b1766a0ae0e62df4948978"}}, {0xd0, &(0x7f0000001480)=@string={0xd0, 0x3, "2ff0facba7067d20f0f695801ba135a1b2d7641130a3c9e3672d183d706554d81fdc80e9687e279c3f9db1e347a4eb32a92c5ba4b5b19b66ada3562e45c0612da46e53272ee4a5a20995402f373f7231940305ebafc5bfe26dcdb541d1a54183eb879858529be188343d7cb4c8fb4b1a5997b5ccb95e54e5f6759cddd338555b81594ed612cc9834a353afdea868b0b34ab46d99b408a68b8e7b65af0f4f0703ffc4ba4b02b24e5f91b5becef229785d3362cbe5d9e8a7f5beb8632e22856538465fbd1764d22b7a1c013b2edfaa"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x40e}}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x8) connect$inet(r5, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept$inet(r4, 0x0, 0x0) sendto(r6, &(0x7f0000000100)='ab\r', 0x3, 0x8800, 0x0, 0x0) close(0x4) socket$inet6(0xa, 0x2, 0x0) memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000040)='cramfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x149) read$FUSE(r7, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r8 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) ioctl$FITHAW(r8, 0xc0045878) syz_usb_connect$uac2(0x1, 0x87, &(0x7f00000016c0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 2m11.905937417s ago: executing program 7 (id=601): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$inet(0x2, 0x80000, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/10, 0xa}], 0x1) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="01", 0x1) r2 = socket(0x10, 0x4, 0x0) write(r2, &(0x7f0000000040)="240000005a001f001c1e93c789e2f89e1007f41108000400020100020800038005000000", 0x24) 2m11.868812378s ago: executing program 7 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000180)={0x0, 0x7071, 0x0, 0x2, 0x23e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000580)={0x0, 0x5da0, 0x80, 0x2, 0x22d, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad67, 0x200, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x250f, 0x800, 0x3, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2b, 0x10, 0xfffffffc, 0x88}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1708, 0x1, 0x1, 0x21}}], 0x4, &(0x7f0000002080)={0x2e, 0x10, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x94}, 0x0, 0x0, '\x00', {0x2, 0x44, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x44}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000012c0)="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", 0xbaa}], 0x1}}], 0x2, 0x88c4) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) unshare(0x2c020400) unshare(0xa040000) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="b9"}) r9 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) 2m11.110931557s ago: executing program 7 (id=610): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_getevents(0x0, 0x7, 0x0, 0x0, &(0x7f0000001200)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x8, 0x3, {0x53, 0x6, 0x17, {0x9, 0x2c6}, {0x7fff, 0xb}, @period={0x5b, 0x6, 0x2, 0x38, 0x1, {0xbe01, 0x65f6, 0xf302, 0x3ef8}, 0x0, 0x0}}, {0x56, 0x1, 0x39, {0xabc8, 0x3}, {0x5, 0xcb65}, @rumble={0x8, 0x1}}}) 2m10.464349653s ago: executing program 7 (id=615): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='uid_map\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x10073f0, 0x9}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000000540)) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r5 = openat(r4, &(0x7f00000003c0)='./file0\x00', 0x20041, 0x38) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x1}) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14e174135c0b87af) r6 = syz_open_dev$loop(&(0x7f0000000680), 0x75f, 0xa8182) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x8, 0x1d, "9e6b35a35cdeaca9fccb07200ee805ba4046dea16210ebbfa86340d4b1b7aa353318bacda53a95f1231a95c1cd79b510a7c61ea6b7c1a56129836ab110ecc8b7", "30cd849ec5d224f13c3565cdf068a7c6de0b70be7f97cab4959439419195d518a94fb80a8782d01f1329658b061fef107971c805f4f987eb5ff08ce9bd70783b", "107a9f5c6554ca8aa0a04498146795d52de053c3bd3b072d8492be987753a41f", [0x1, 0x800]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0xc028ae92, &(0x7f00000000c0)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r10 = dup(0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="02aaeb8fa314246c0000000000000000010000020c00034000000000000002000c0003400000000000000001"], 0x2c}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01"], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x2000800, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472576e733d66602c726b646e6f3df7422e064e9d644e1a2ed98435cd37aab52f2fcbbaf88a22be9556ef56baeb55f2229945b166cade23df4564dca90a309d0a3c4527be4ff2357bf3491fdb512b785b15bd7e9036ab9ca3fa0748833c6aa9e9b48692f2746da13dbddf6a63b234d2b64e4a61", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',version=9p2000.u,access=client,\x00']) accept4$unix(r5, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x1000) 2m7.35183977s ago: executing program 7 (id=630): openat$rtc(0xffffff9c, &(0x7f0000000040), 0x4e2540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000500), 0x221490, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x1800, @rand_addr=0xff}}) 2m7.269273592s ago: executing program 7 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40094) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffbf, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb7a, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0xffffbfffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x23f, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfe5e, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xfc45, 0xffffffffffffffff, 0xffbfffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff6, 0x40, 0xffffffffffffffff, 0xffffffffffffffff, 0xbc1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xbffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x800, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1m51.328567268s ago: executing program 38 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40094) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffbf, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb7a, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0xffffbfffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x23f, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfe5e, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xfc45, 0xffffffffffffffff, 0xffbfffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff6, 0x40, 0xffffffffffffffff, 0xffffffffffffffff, 0xbc1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xbffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x800, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1m49.876880204s ago: executing program 9 (id=718): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb601fffc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "ef62742737d285b8", "1fdfe0479cba257482137c852b432a349c5967d771e2596a01d6c09f76a8ff70", "2349e214", "f32ae96943af158f"}, 0x38) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x200000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8006}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1m49.857669624s ago: executing program 9 (id=719): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = getpgrp(0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x3, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0x9b58, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x100, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x1, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x1, 0x7f, 0x9d27, 0x9, 0x4, 0x100, 0x2, 0x6, 0x807ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x8, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x8003, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="08000000001f", 0x6}, {0x0}], 0x2}}], 0x2, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x2000000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/ftrace/filter\x00', 0x20, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x1}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x8, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_pidfd_open(r3, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1, 0x6, 0x26000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000001c0)={0x6, 0x26000, 0x8, 0xffffffffffffffff, 0xa}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 1m49.784467436s ago: executing program 9 (id=720): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x6, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r0 = syz_usb_connect$hid(0x3, 0x89, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xd8f, 0x1, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000"], 0x0}, 0x0) 1m49.269381229s ago: executing program 9 (id=725): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x630603, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = userfaultfd(0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x610000, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000000c0)=0xd) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0xe, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480d0}, 0x8c0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2f0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) close(0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000001c0)={0x8, 'veth0_virt_wifi\x00', {'nr0\x00'}, 0x6ece}) 1m49.239390189s ago: executing program 9 (id=726): openat$rtc(0xffffff9c, &(0x7f0000000040), 0x4e2540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) timer_delete(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding/file0\x00', 0x201, 0x8) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000500), 0x221490, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f}) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x1e00, @rand_addr=0xff}}) 1m49.177211681s ago: executing program 9 (id=727): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x800100}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 1m33.859317692s ago: executing program 39 (id=727): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x800100}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 1m9.31247553s ago: executing program 6 (id=1011): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x6000, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)={[{@subsystem='blkio'}]}) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4c07, 0x0) 1m9.31222632s ago: executing program 6 (id=1012): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="01000900000000000000aaaaaaaaaaaa000000000000bbbbbbbbbbbbfdffffffffffffffffffffff14bdbd9b95d9ffffffffffff0180c2000002"]) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x510, 0x4) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x8}, 0xdb) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/34, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3c) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) r4 = creat(0x0, 0x198) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$FIOCLEX(r4, 0x5451) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005740)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000, {}, 0x0, 0xfffffffffffffffe}}) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f01c30fc7390f01cbb9080b00000f1a0fc72d1454d498b9800000c00f3235001000000f308fe8eca2a8810000003766baf80cb8303fa984eff20f2160ed660f38810b", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m9.072958227s ago: executing program 6 (id=1017): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000002400)=""/4097, 0x1001}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 1m8.916433881s ago: executing program 6 (id=1018): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x800, 0x0, 0x22}, 0x18) (async) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "0496fa03"}]}}, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xb2, 0x8d, 0x68, 0x20, 0x421, 0x48e, 0x4a71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0x14, 0x3, 0x1, 0x2, 0x2, 0xff, 0x4, [], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x7, 0x8}}]}}]}}]}}, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x40000) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x3a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x37}, {&(0x7f0000000000)=""/260, 0x111}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 32) 1m5.916055845s ago: executing program 6 (id=1043): openat$rtc(0xffffff9c, &(0x7f0000000040), 0x4e2540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000500), 0x221490, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x1e00, @rand_addr=0xff}}) 1m5.877678085s ago: executing program 6 (id=1044): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="200000005f00019cb7584395a083df5acf09"], 0x20}], 0x1}, 0x24000080) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x3, 0x836, 0x8, 0x4}, 0x4c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsopen(0x0, 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000140)={0x8}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) 50.40017934s ago: executing program 40 (id=1044): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="200000005f00019cb7584395a083df5acf09"], 0x20}], 0x1}, 0x24000080) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x3, 0x836, 0x8, 0x4}, 0x4c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsopen(0x0, 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000140)={0x8}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) 13.621390982s ago: executing program 3 (id=1423): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000005c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x4, 0x4, 0x800, 0x0, 0x179, 0x5, "60c4906d"}}, 0x11c) write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00'], 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x8, 0x4, {0x53, 0x6, 0x17, {0x5, 0x2c6}, {0x7fff, 0x9}, @period={0x5b, 0x6, 0x6, 0x38, 0x1, {0xbe01, 0x65f6, 0xf30a, 0x6}, 0x0, 0x0}}, {0x57, 0x1, 0xffff, {0xabc8, 0x3}, {0x5, 0xcb65}, @rumble={0x8, 0x1}}}) 13.516058905s ago: executing program 3 (id=1424): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x31079000) syz_ublk_setup_queues(r6, r2, &(0x7f0000000340)={0x0, 0x8221, 0x4, 0x2, 0x1ce, 0x0, r6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9cc9, 0x1000, 0x3, 0x27e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xabc0, 0x0, 0x3, 0x3af, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ce6, 0x40, 0x1, 0x73}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3201, 0x420, 0xc981, 0x339, 0x0, r6}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x38, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xd}, 0x0, 0x0, '\x00', {0x4, 0xaae, 0x0, &(0x7f0000001dc0)=@buf_512="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"}}, &(0x7f0000002e40)) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x180, 0x3, 0x2f8}, &(0x7f0000001280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x999c, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x14, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x400, 0xffffffff, 0x39b}}], 0x1, 0x0, 0x0) 13.507552776s ago: executing program 3 (id=1426): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000004d40)=""/4052, 0xfd4}, {&(0x7f0000000880)=""/212, 0xd4}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000002200)=""/4088, 0xff8}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f0000000000)=""/74, 0x4a}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/154, 0x9a}], 0x9}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0, 0x4000}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x1}], 0x8, 0x0, 0x0) 13.491265336s ago: executing program 3 (id=1427): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2710}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x20, 0x18, 0x7, "9ad5798929b15c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x20, 0x18, 0x7, "9ad5798929b15c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.936003419s ago: executing program 3 (id=1430): openat$rtc(0xffffff9c, &(0x7f0000000040), 0x4e2540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000500), 0x221490, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x1f00, @rand_addr=0xff}}) 12.820312162s ago: executing program 3 (id=1431): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x1, 0x44, 0x4, 0xffff, 0x400000000009, 0x2, 0x2, 0x7, 0xb, 0x3ff, 0x6, 0x7, 0x0, 0x80, 0x4000007e], 0x2, 0x167c43}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 9.139983614s ago: executing program 1 (id=1457): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.116411839s ago: executing program 1 (id=1471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 5.988442802s ago: executing program 1 (id=1472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mlockall(0x1) mlockall(0x7) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000040)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1140, 0xfffffdf4) 5.977924862s ago: executing program 2 (id=1473): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000000c0)=""/128, 0x80}], 0x3}}, {{0x0, 0xe5c, 0x0}, 0x1}], 0x2, 0x2, 0x0) 5.938157493s ago: executing program 2 (id=1474): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000001, 0xab7, 0x4, 0x1000, 0x1, 0x5}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x2, 0x0, 0x9}}, 0xa) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5412, &(0x7f0000000340)={0x0, 0xbc, 0x1, 0x8000, 0x11f, 0x0, r0}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x2400c840}, 0x24088800) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x6) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000000c0)={0xd13, 0x200, 0x6, 0x875f, 0x7, "ea71000500f9000000024200215f058400", 0x4000000, 0x400}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x42) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000001a80)={0x14, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x6) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xa) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents(r9, &(0x7f0000000200)=""/4096, 0x1000) getdents64(r9, 0x0, 0x4f) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) listen(r3, 0x5) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) 5.835211006s ago: executing program 2 (id=1475): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') exit(0x7ffd) write$binfmt_script(r1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000540)=ANY=[@ANYBLOB="64697273796e63c7e92006c0c430cbb4468adac56c0a27b407143f2d133360abf04114bd5bec12325b38eb05226a905eabda5a6fad031ec194f58d6512721ac05849eaf5c2cf4055233cc01cebed82ec454a7ad05d07824b6ffcd7e3698966238c94a5a925aad18dcdf0f5c72b27f478d851b9591ef6d774cfe15ba12c23f63d0d18b8abdf3c94516df378b04402"]) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0xfffff, r0) r2 = syz_usb_connect(0x6, 0x34, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$printer(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x9, 0x6d, {0x6d, 0xf, "a0850115aab6e8ae06ba1f890251a25046e5ff48015af8af16ebc08cb319c300e194a861cd57037d51546d477d3e5d69a3c8c426c15c4580bb6d37809f264bfc01f2097d34fcd4bd495ddf3010264fe6f812473c2cfcce608c3622347de2760081b205fcb0e46f4510440b"}}, &(0x7f0000000180)={0x0, 0x3, 0xb, @string={0xb, 0x3, "150e8cb7109d274f86"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="201417000000791461bb434b4ca11cbc6bfe769de3859a9e7bf304d6ee"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xcc}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000300)={0x20, 0x0, 0xc2, {0xc0, "60bdf4ac19513632a0c5abb14c9c61491ceea772d684eb3aca3cc1e83774fd61f790a35b954535c2e19b8460e9df3a775fd01b8facafb38a4e453ca1b9f993ae4bf71659ebe03074a0b018887e9f1ccce4fc01f879a6fcd6794a99c7b9cbba312d8518c2c2d7e3acd7237104ccb213d991d05b231355255718bebbd4ca3cae54d43f1b9883ecd60fe759108b563d235246c2f81c1bb891845981c0681841ac1f3ca8a0d45b1688c472ad8d6972b8174eabb9f009e9b9a73e13af3048f290211b"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x20}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}}) rmdir(&(0x7f0000000000)='./file0\x00') 5.468206365s ago: executing program 1 (id=1478): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="0f20e06635800000000f22e066b8b200781c0f23c80f21f866350c0010000f23f80f381ee6f20f2023660f38819f00002e0fc72f360f7f960d00642e0f38cbbbc200660fde790cba400066ed", 0x4c}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6443, &(0x7f0000000240)={0x0, 0xa241, 0x1408, 0x1, 0x121, 0x0, r0}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000012c0)={{r7, 0x671, 0xffffffffffffffff, 0xe939, 0x2ea, 0x2, 0x2, 0x19, 0x7, 0x0, 0xfffffffc, 0x0, 0x90, 0x6, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') unlinkat(r9, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x1, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UI_DEV_DESTROY(r10, 0x5502) r11 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r11, @ANYBLOB='\a'], 0x0) 3.880520074s ago: executing program 1 (id=1485): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'lo\x00', {0x1}, 0x4}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x404d001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff, 0xa}, {@in=@broadcast, 0x4d4, 0x32}, @in=@local, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0x2, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x4008a) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8001, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendto(r2, &(0x7f0000000500)="cd1c9d5020bc2d7a23b46312e428e43f1aa30b0d7d4a09737bde61a2dbb5ac6d9efefa311205307b115c945d3de479d18aa5fb4e97ff5264b76e74", 0x3b, 0x1, &(0x7f0000000580)=@can={0x1d, r4}, 0x80) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000007c0)={0x7, 0x28, [0x8, 0x4, 0x3, 0x4], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160016000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r8, &(0x7f0000000000)='7', 0x1) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f00000001c0)='vlan0\x00') gettimeofday(0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203010902600002010070060904000001020d0000092406000126caa40c05240001000d240f0104000000040004000a06241a020004090581030e020d06aa0904010000020d00000904010102020d000009058202ff030803ed090503024000010002"], &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x80, 0x6, 0x7, 0x10, 0x40}, 0x12, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f12000b0707108bc74053e40000000000"], 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x426}}, {0xbb, &(0x7f0000000300)=@string={0xbb, 0x3, "9c8c423780bdfb8cc426c031ea2567ea640594c8fddf1f382e7ee583d89efa271a5edeaea18eb5c1c1121378565775f6c94bf713467d7610a536d1161c291ac6f44a404126cffc39ffb7528b17f31b7bb3e976a9de9587f045f78465fc2a835a882fb218bc8e67b7bd0bf2daa35b04e9836bf0ae099f51d0dabcefc14c0bd8c99e868a613c46fb828f9b88a8675cb7d24d3306a74892461d5e2fac76d942e2d8f61a5bc386c0d72f432e23be1a21a0f4fe4d1e396f26291f7f"}}, {0x48, &(0x7f00000003c0)=@string={0x48, 0x3, "9bd9259ee625a0e9a0291af74347ebac19ac6ff753bbb9aa9080995c122852a59293646053c23c3e70f56672c8322cd5bbdfb7f474ac6b89de9c3ebcc4a46ad6993037bf4b3f"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41d}}]}) 2.848233649s ago: executing program 2 (id=1488): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f00000002c0)=0x80000000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000200)='bo', 0x2) getsockopt$inet_opts(r7, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) write(r5, &(0x7f0000000000)="01", 0x1) 2.408020691s ago: executing program 2 (id=1491): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x7d3000, 0x0) r1 = dup(r0) unshare(0x20000000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b"], 0x23c}}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) close_range(r3, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) mknodat$null(r1, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x6e0f3ba7acaead74, 0x103) write(r4, &(0x7f0000000380)='1', 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='7', 0x1) accept(r6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x30b82e080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x1e, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) wait4(0x0, &(0x7f0000000080), 0x80000000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 2.204004706s ago: executing program 2 (id=1492): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.815653626s ago: executing program 1 (id=1493): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x7, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x2, [{0x78, &(0x7f0000000080)=@string={0x78, 0x3, "2d4a82ac515a31f170ca081142d1f48d15849b7efd8f6bd553ae5ac27fb5fb330e3913af0fc9f6c1c2da1dd95ba17c1f59bff9233e044c49c2ed1748adfae11708356709284b3c8e875b6975b89d2908c80cf59ec0edcd76005f88f484fe9426cc2936a1990adb5a7ff8dd1842916d7b987186fa77d9"}}, {0x9, &(0x7f00000002c0)=@string={0x9, 0x3, "db714ada17ab73"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000540)={0xe, 0x4, 0x400, 0x10001, 0xb0d}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x46900, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) preadv2(r5, &(0x7f0000001580)=[{&(0x7f0000000240)=""/126, 0x7e}], 0x1, 0x101, 0x8, 0x14) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4098, 0x1f000}], 0x100000000000012a) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x3e, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001e00)={0x14, &(0x7f0000001cc0)={0x40, 0x23, 0xe2, {0xe2, 0xc, "d01a807525d9e55510d5d8b9f6e8b394cb5e5688147d271d8a6c5ea0a2a5bddbfad2b1c5a5b73ee0bfdea30ac6b6f21884b747f6bc30e267f1f9f0ee362d15000187cb6ce910f6926f1fc6653abd96d6d09b5e631a3e388727879a3628fddfadbb9734fb3aef4e2159db472589b867e35e62b950230760de34737edd8c59df96084231c281f42059fc1929faa03518b6e8dd94aded743b0623b67e71d70431d2fec6002f7230c89fb008d2fa590e75e23c2cad55461d109e57d36ad05e5c4445f8a39ba0ce74a3c6421ddc8970052fc0b0f1e0722a8c8387ff08754bc462c0ad"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000002000)={0x34, &(0x7f0000001e40)={0x0, 0x14, 0x40, "03e9838954122c9d42b95b0081a5f70a1376d233c36c4503eacc8fc184eaf748e030c46a9c0c53d9889e18d2ec6b26890dd7fe89c609e713ab11ad969da9949e"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001f40)={0x20, 0x0, 0x28, {0x26, "036ac5a711d9967a62667495c29b8c2e644e73c6994f5b7292c387f2af61b44fd108e17b79f3"}}, &(0x7f0000001f80)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000001fc0)={0x20, 0x0, 0x1, 0x3}}) ptrace$pokeuser(0x6, r6, 0x388, 0x419182b0) ptrace$pokeuser(0x6, r6, 0x388, 0xffefffffff6f0000) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc2302010203010902120001000000000904", @ANYRESDEC], 0x0) recvmmsg(r2, &(0x7f0000004080), 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000680)={0x2c, &(0x7f0000000380)={0x40, 0x21, 0xbb, {0xbb, 0x8, "82ce1602402450a06b37ef28acaf38fe6256ec0e644ea15ca685ee98f86ea9093cf9c44f505a702c2018372af985a300a2db9f1952da8f9f79f9196a7c19a48bea23a6e5d9b2103aca4007bcc1e06617bdcdfa24863a62fb5116ae8432958db2d2f683f56506133efd552740b089f88f61303016ea7d1129b0082732186f83090da13eaf46ad11536a54eadf6a7b8e4eb090abf11991463ad8d59a58fa539f302e489f75bc6443440f02b36da79243e5b84d6fae7aeec5b6d5"}}, &(0x7f0000000500)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "f39662dec96da651a10477569cf25a6a699755c682b20c30b9dfe71daae74b030c57d7ebf4dd79d831964b6c0ef741bb8ec772cc434979b534d189c90e58ff59b9510e0164d53ec1cb47c25cf22c3f269f162746159a5e9caf3db9156301bb4f6f61c13d73976642d9c784db7a18e66419b1c7b7aa35a037b7b21057f3f52cb761ab641deb1aacbb32fa4adadfd5f8cc8e5fe8027120bcb1"}}, &(0x7f00000005c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x9, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x5, 0x4}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0xd, 0xfa, "5574e568", "f98f2737"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0xb, 0x0, 0x2, 0x88b9, 0x3ff}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x0, 0x9, 0x7e, "591df8b6676655adc7a72b787245eb0c7cf7f5843a0769653c9ba2ef9e16263d5dbfd23f7db3b0bfa8399ac5b4754f13603b82dbddd9b8ebf71a605b1a0b7ad809f98642a8a0947ca1c9531cef1c467c94f3d6655bfaaccea7c40dcc77fe90c49e115030ee39228e4c113ecef1f6527b628bab6946f908f9102dff05b244"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xdc}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x4, [0xf0f]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0xb, 0x2, "ff06"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @random="99ef121c9df7"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "ffa1"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x62}}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000c00)={0x14, &(0x7f0000000180)={0x0, 0x9, 0x63, {0x63, 0x3, "0f46a035d788301b7fab622bcc4a4e1d8a0a50698cdbdc1386e9d63e44a746228603086b0517538ab7d7743547424f41bd9d12674ac559bf27a46d8eacadec538dbe3196c74ddcc80002cea716887441740756452d32624e671fa82f47f2739d4e"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000c40)={0x0, 0x10, 0x76, "21574399644ff44a0c2f4ed713ce0750db257d73592fe368bd166ba2cb9fb66b3e399bae4f080a716024c278ad9106b529e27169c2820121391a52f712c737913e4d2f2de118f8365c636dc6b6c2d8cab77088c3d3f38e90048326320a85439a94f86f0a6bc0a4c533cdf51e08f26e648bb17c41673e"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x69}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0xa10, 0x1ff, 0x9, 0x9, 0x4, 0x7, 0x3, 0x0, 0x1, 0x100, 0x3, 0x80}}, &(0x7f0000000d80)={0x20, 0x85, 0x4, 0xef}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000e40)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 168.420846ms ago: executing program 8 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdfee01"], 0x34}}, 0x20048010) 168.213446ms ago: executing program 8 (id=1516): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x1, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x6}, {0x0, 0x0, 0x4}, 0x40, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, 0x154}}, 0x0) 160.303596ms ago: executing program 8 (id=1517): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"560c3ba4b46a1a6830cd57742cb71e04eadedf287c37cd73ba73d61aaeb6dd3b08b983d64a9b82a9f72276a9a53c2e538588a27c5f6f2c7db8e2b162845129684de1f250a23156c2b009125cb9c1be419958d2984126dabdb204319adb6f94752d9f20d4e44fa1904fec13fd91d00998117bdbbc5775e3aa462a1ced37e68771105d5da9e7bfb4ff8ade409772377709dee8403d2cd0f676f0fa5e89de8acfa1b92f33cb85137e0f9a62e0ddc0af5f7bb0e55f211a1b9c6bb3ba1807416ba00095429923c81cb77257eb3f9feb1551959e0e6c05b69185b3b0eae0b25b77d53a1029d12949d196b1c4ea3f457cc63e3077e22ce382aff654a9dc625ddc0f9f4e167a93a8a353a1cba76b004f3771ca725da8a055137deb41ef21fc94d78322934cde3857e04b64cd3058389973d93cfacb98ce48466b08a4fd971d1f690f52aeedccfdb59312733d5facc75547da1d9d87b83da3c2a8dd2b7b567b9236e0cb28963b0cc91abcba50453b29ba09626ced3880e884071a4e87827a4dbe849784688877bfb99a68e90c13088f53da55cfb034098519dfe6c99f8bfdb946763e875ee17789d662d2b2aa3ecd325824b9814d8c5bdec9b609904ccc0c89e83fbba2ae528ecf9c209d64972b7b612ab467955336655b407303652bda2443731ef012916833d6dd45d8989a349225a958fcd45f64d0e95b35ceb22c1ef352fb5e3c6d4d64c95e66a05e32df0917bca3eb02d08a3bd5e3dcf32aab850f0376b8c9141f34c0b85f2759d686f01398947c16bd7abc0ba046f002ab672fea378875de51f5921cfb98396d1092979715d49324d98ec139cc9989042a7523f533be2fba20f773aac25df20edd100df9d3caa84954e5b60775638900e73075c41b55d870e69e75a6bc57331f8ac346a9f923f3fbb3ea09f12af31f28c6e6a1efc56b14a404bd1c912759274b36a879a99e597307348020b7b30fcafc3c9064af70670dc8b82faeecad30c319589ae038e00a1bb94953b4292d4b27110347abc1476998103cd8a6b0930e43002702f00a1bbbb6ab96f9f179a87102ae3b4e8995921c0434289d8e8e979c6e6eb4dd4d8fffd012aabdb71e33c4eb79823dcae59a221ffd0f8b0266cdd5f9acf9ab9d03714ea362ce1aa9bd422dbd16b9df8a37dbf34af0f3ecf88ae6ddca8fc1995c2c1a297c053c1d826d7448df1be964653c73fa72b1a3c328a43bcc753ddda6f51c8ef682f5a18592551c4a187170fa1fff2ef667a12b6ce731953fcc44d464b561cefcb4c9b1ade1690e75059d9f282ec0dec6188c034d61d7d5eee087319b03464eb61ab2eec1a145d5cfcb1bd0286124d025308f53d35d165cc47c2a87b78dd5a0d82a716f35a6682fd53138dd67df1d5a869f8eb23db2db2ce9e6e58ffa105bb3519b43eedfec0daf36aded29c9c68eedc46132f532f4da68027ed3d560e68d56c7ea40beb5752aea6c615378ff01aa5a18e710ce4c6c09ad03600c16e6d4f661fc4cd464a4de38cb28166cb05fd67827b4c1c152e0ab11f1180a03ee517abec9009da3ecc84b5c5bcf38ff5e74c57a1f6c24db42a96be737d3af807a1b446e53309d5eb3734e637a1fa96868892b042005af4c09c0b9530d7b717247f7ea3298c2727e5ea528f2d2db30cfef3c949f985671931ba73ffd65a6af72ae31c0c5d5b25a3d66910e9aa36f78e4b1a7bff97a0ce6d5d3e6354b0732c2d9f9e0355af79acd7ae33889658cbf4d7d12b72c51f1f6b19b570daa4c24870851c2a1ad89167e7a9a419d47a3061f080eab769c00201e654047acfc7d34085df924d243702d463769677553ac8e78cd7b1065c595febed4b3f9ed6462d71a307aac13e03a8a6434a05a21019637f82a710f5e92963dca955c103d4a8fccda6b1693b250e193e36b6d584cd225ba621bb83f3dda0f50e604d1cc8a56d9f3f83da7b33bc25579f07fcf99fac89fab224c32be4501de90722dadeab5d91b3974cca313068c9c53c3677d66b27efb80cb912b51d22ec626e3b3666a56300ecf9c6bf1684b68afc9155cadb19e15b44644c298d6136e33bf4863fd018e364a6719ad558aa7c34deffc02875a663b529520a332d418e064515e3bf9e7cb6a1ea4580322e2c718fb4ea6c063483976b8c22925a879f0628c502f0b7de8a3741d92e6a73aaaafbdeab63bd15402e8f1d14d00242d2285f613955dd68b3dc48caf700ba254339e3b666e282f43e89f56933809520ee28b303ac129f3e7de0dfd2d801dddba6b20b945e7d80e833cfc4af9c57ac895e05a413da6f516619f4c273a283836f11925ca31d73b26c38741b44146554cb6a6b4e51c6e61014d1b050475a20b2e6219933b62dadd469151c8eda5444fe07c03ea7eb4511585ba5e12c46f148bcf807dcb90f8c7c4879f2fb5b38cde089bc9662ec5871ceef09e571d854c88f6c53cb41b81c1635da7177150f2b16a108116deb6ace3539e490b4713b949ce0792eb2abe4a7926c4dc9a9e10bd3cf9d428f25e7767b051bf3adb0b8837db5f719cd3da39b5383eaa6c710ef63e188c0bcb58e169a837f69d10a43b3734f9040fda1d0e58e0edad62d8bac4c729186ebd89b40b60ef2c5c1fc4875193ec7a1a405a14b0901447b93bc4348425b1044d882c89310820d9644d18553038797f022373ec6723ca6e84de5f7dd7f3f9b6b2f5b44756dfbac8efabee20b0eba48c5b77d0f8c986ef7081a2015b6f1c9c3b6dcd7d3ec1ab29782d6f3956cf9c58ba80b065742f53cc1298bd82dd0630387ed230440ebd58dae1decc96532a868fa6851baf4f0528833f779bbd89981fbc316fd4288381b5f91234910a91cc4b6b2c2536b3941c6a52ffa6ba1bb0bec50f3a156033e3bd5985715cd92a46f1cf1f8dd865c6903ec62630c5ae6deb7a203d7d20210a73e6486d7581a2a86e004541a5313a615600a4b79734f8246a0a778aca19a842ae36eebc314be95cbf852ee5ce7172df6b7c235b3ed31d820dc0c84baea43fe9d404121c6476c4b8acd8f94244ebf4c3d739eef2d71535a11b3e220ac77f265195725d375fcc5a699d4263a269c1554ae7e5924528f11eefd7bf077edc96ad85b283f9c1b09a7489df686d4a1c594b87e95f7af011513bf3765319961d34484546ce70907208ae1e222a2e6b61b708215e348889b11c058f1d95dfc7d5fcd1d25604eb44f1a079e9d88f9d955e3d9e374116bc18d4ef7b225c5abaf1b07b05b2b67f9b1fa4152c747ac2833524c5e4e0b0af4e514c35e47959fca45bfd95742e2dbf044e421eb64dc508ff6dc574e55ebe8e680ad1d228b919bef3f6abb6b3503f0cad880a367d046c7ec3c058d1ac936c6c8068e2f52884fad0426bdfa39a653ee2e3d4adfd0df98e95f7a3ab204112c30dba4a5b0fe336c6a31611cf4fb64da540e125e97425d9dd53731b0ed659445fed524ae5c2a4142d646b7c11274a0a5547d5bea248b5a6416aac81991df1c2354398407beb5fa90e051a7197a586d5b8f18054555e6a9123aecc999841a735ad6a99df1450682bf51523e41e576b4f783def51795d0b263f08396c224cccc99bddf35bc694a2d458f52cd8032cbaddf8ed3f35464429d2f1f8b2747160e179e20a4badb76197097baafb01075409f39e098a2f3018cb37a4e08b4be01945c433554243c5dedb40e6e4c531dc9a9c68df74877a3e62dcb986652a1f1be16a476daa5fad2fc4512dc3328dfdd6b8058f51c5f2f1c5bc206e75caefd044446a2aa4040913995b6bf973aed375c4cd2ab4f90b7a2fcbfdb751370be4bb4309b00c4d49f7795ae2998fe354dd3d35b618077a4ea98496cf1e64995c493aee8307b68679a31392bfcbc26609b65a26d806c5c64760fdb73fa30b8107475e5c8b685d0ea6e457698a0085cf46b99419bf923da70ba1f9ab6eb9056e58b78ca673a153350a831743984de2e547871502d0d27f4d959fa3f63a1d823dc54049314fb3a33d73de508682379f250b8ed0a8baa52748529abeb6657fb933a9155cb81076672726933b4b36a7e8cc83a76147b2eb9cc81e9a34e43ec7b4cf837a246e7bd2de7f9c8d5c6aba8538134056da9a219420c708c903c25b39ccf04667b1c3bb99b53f9f173e26a9367a6b1926ec66b97397eaa8524c3250a83002731c99e9a92be94261154b02f4b7d1102a028f72f65af018fad202b0d8e7060da715350fe14a8574fbb68c7abe531934dcc729de88e94599694e50119fb959585eac617a67ebc9d28192bb0c9a766aae981917ad13d80d9df0cccdcc8f63ddd84261c76a7304f12bf95687bb4f83e769d9d5c8b4f07df79b0ac92560f83e8e4c92c82132f39207c3e6d61b8e55e32c875737d7eeb7246c94bdc733aff0135b4ef2a5271150ef5391e132ae0e1e9175cf568e33b3245feea516770c99565ce7f106efc9ae147c867abb7a60c8861320aafc5b7e502959cbcbbed2d3a0938d7731c6b5c83a7c9b762a12b681655965b576ec486f06ccae37bfc9ce4756f2e1da5af7650706ab7da7ec2cec182a0e908e15c7a4f93386120b5ecadb54addfad3d363a4a1d71dc3ec79a77a801c70205aa389ba4ebee14719b4b67ed7b499a2dc8e324ac0c6e48b38d49a27de8ab7c982c082cd3702ea51be4d44db05eb9c3ecad7593545d215d1f2657956a27b0661f4731b580977e837b7f40d57eec56dab41c43b314c34cbba704713e1d5be52bbba59703eceff938b8594f23e38d5a31616533cfb5946257143313781531bdaf76e3a10786bfe7a48e975e33dbdd1dc824ffcd86e334a7557895f9282ebaa5e739422e791bf1998093ca1c195e709ae60851e6eb458dcd03cc963ea90f5856d732b383bf965e82e0a3e3c9c5d06ce7e413985f8c48007f7c34d65d52051a7efddbad5d0159acb9f14845c68761d057f2c360118feb1274056491a8eb26450f3318c17e8d15e53e05fd05d0647b6a5d00cef6f1a04d68a687cab03b62a51425801599e20a1112c5e2e09d369ceeb03854ac9a9f24c5bd1a5a8f5e45ea98b2527094fcd77722c6537b4e38202a971aff976c2dee47eb8f79c808f07af762f8aba9f4e9f80addf24b3600406dbf8e2efa9e85140344646756e5028bdae2deef27d19b10fd4de663a73a65b224df46e1c0218d4e2503cef132eb95ba90b4bb962da0af8dd9a34f9825254c139fc24d8fb3e47586d4f79a4ee52c8856b0f234edc67e128fa81dc23444f270615306dcbe49693381a528e7a8af723335c5fb74df8b7959e3efedc0fc25df6bdaecd55f9e71dae4ccb34dcb07c03678c20040e729576a126e5c6d0d3b3bcdd030507abfc7d99caa498734564f61d97c281886e6e0c4c2b644e23910533555bf897909aafb06065b6f90471117be4289cdc922b419bec8e2c261431df9432d65ed29213e469100aecb37229593a29243e9b0c82c5f1c0542a5c89332daa3ea6453576772ac93d872d80da5174b3bfec44ae2eba73aab93ca8d40d7b5930d72cad6d88a4098b2147e11a351aa07c1c760bd488e06f648df68be03a69a4d74ad6ad6900fa01171e1bdf241ee669c53cc29bd52bd1d33ba6f890d89c1e694869e85d87a937f8f1e27e3465f5eb1248b592583da69379a6ebf4cd4882ce7ce4c3e099169a0d992a7af78276ad32168529d7464021b900585aa1d1246cf3e6588540094db5fb182105fbcf859a2fadb3f08630fda5fd3159e0c4f2d091e92d93004bd46ede9f3cdc5d85b15d12b3a8fd0692b1ddb7e2328f8e1b3b971e9f4ca0806884f542bf20c0b8228f4524d5691fe", 0x1000}}, 0x1006) r1 = openat(r0, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000500)='B', 0x1000) r2 = syz_open_dev$usbfs(0x0, 0x78, 0x160ac3) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, 0x0) socket(0x2b, 0x80801, 0x1) write$tun(0xffffffffffffffff, 0x0, 0x8) 132.150597ms ago: executing program 8 (id=1518): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) symlinkat(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 499.42µs ago: executing program 8 (id=1519): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x19) ioctl(r0, 0x40085500, 0x0) 0s ago: executing program 8 (id=1520): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0/file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x800) syz_fuse_handle_req(r0, &(0x7f0000006200)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2b90a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f84d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf6ea6bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb90e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36b8047d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90b4ccffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cfa2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e00", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa8, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x4, 0x4080000000004, 0xfffffffd, 0x7, {0x2, 0xfff, 0x808, 0x3, 0x8, 0x81, 0xfaae, 0x6, 0x5, 0x4000, 0xe44, r2, r3, 0x4, 0x81000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 3-1: new high-speed USB device number 18 using dummy_hcd [ 210.735816][ T444] hub 2-1:0.0: USB hub found [ 210.876349][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 210.882774][ T31] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 210.891177][ T31] usb 3-1: config 0 has no interface number 0 [ 210.897342][ T31] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 210.908382][ T31] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 210.919999][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 210.929140][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.937307][ T31] usb 3-1: Product: syz [ 210.940003][ T444] hub 2-1:0.0: 1 port detected [ 210.941498][ T31] usb 3-1: Manufacturer: syz [ 210.950917][ T31] usb 3-1: SerialNumber: syz [ 210.959948][ T31] usb 3-1: config 0 descriptor?? [ 211.141505][ T444] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 211.158427][ T444] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 211.185642][ T444] usbhid 2-1:0.0: can't add hid device: -71 [ 211.198380][ T444] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.228939][ T444] usb 2-1: USB disconnect, device number 29 [ 211.349561][ T4249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4249 comm=syz.8.1132 [ 211.582683][ T4251] rust_binder: Error in use_page_slow: ESRCH [ 211.582714][ T4251] rust_binder: use_range failure ESRCH [ 211.588792][ T4251] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 211.594599][ T4251] rust_binder: Failure in copy_transaction_data: ESRCH [ 211.602807][ T4251] rust_binder: 4250:4251 transaction call to 4250:0 failed ESRCH, code 0 size 104-24 [ 211.681910][ T444] rust_binder: 4250: undelivered TRANSACTION_ERROR: 29201 [ 211.689667][ T4258] binder: Bad value for 'max' [ 211.896141][ T4266] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1138'. [ 211.943005][ T4270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4270 comm=syz.8.1139 [ 211.993756][ T4272] netlink: 'syz.8.1141': attribute type 4 has an invalid length. [ 212.001534][ T4272] netlink: 'syz.8.1141': attribute type 5 has an invalid length. [ 212.021874][ T4272] netlink: 'syz.8.1141': attribute type 5 has an invalid length. [ 212.029799][ T4272] netlink: 3269 bytes leftover after parsing attributes in process `syz.8.1141'. [ 212.080143][ T36] audit: type=1326 audit(1788461708.002:18970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.1.1142" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f5c19e159 code=0x0 [ 212.233316][ T4279] FAULT_INJECTION: forcing a failure. [ 212.233316][ T4279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.246718][ T4279] CPU: 0 UID: 0 PID: 4279 Comm: syz.3.1144 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 212.246759][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.246777][ T4279] Call Trace: [ 212.246787][ T4279] [ 212.246797][ T4279] __dump_stack+0x21/0x30 [ 212.246842][ T4279] dump_stack_lvl+0x140/0x1c0 [ 212.246880][ T4279] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.246919][ T4279] ? check_stack_object+0x81/0x150 [ 212.246958][ T4279] ? __virt_addr_valid+0x2a1/0x370 [ 212.246991][ T4279] dump_stack+0x19/0x20 [ 212.247028][ T4279] should_fail_ex+0x3c2/0x510 [ 212.247060][ T4279] should_fail+0xf/0x20 [ 212.247090][ T4279] should_fail_usercopy+0x1e/0x30 [ 212.247124][ T4279] _copy_from_user+0x20/0xa0 [ 212.247161][ T4279] memdup_user+0x81/0x170 [ 212.247187][ T4279] ? strndup_user+0x40/0xd0 [ 212.247212][ T4279] strndup_user+0x6c/0xd0 [ 212.247237][ T4279] uinput_ioctl_handler+0xaf2/0x1360 [ 212.247268][ T4279] ? uinput_release+0x70/0x70 [ 212.247295][ T4279] ? mutex_unlock+0x90/0x240 [ 212.247329][ T4279] ? __fget_files+0x2bc/0x330 [ 212.247362][ T4279] uinput_ioctl+0x2c/0x40 [ 212.247390][ T4279] ? __cfi_uinput_ioctl+0x10/0x10 [ 212.247417][ T4279] __se_sys_ioctl+0x126/0x1b0 [ 212.247452][ T4279] __x64_sys_ioctl+0x7f/0xa0 [ 212.247486][ T4279] x64_sys_call+0x1878/0x2ee0 [ 212.247512][ T4279] do_syscall_64+0x57/0xf0 [ 212.247551][ T4279] ? clear_bhb_loop+0x50/0xa0 [ 212.247589][ T4279] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.247619][ T4279] RIP: 0033:0x7f33e1b9e159 [ 212.247642][ T4279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.247666][ T4279] RSP: 002b:00007f33e2a53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.247696][ T4279] RAX: ffffffffffffffda RBX: 00007f33e1e25fa0 RCX: 00007f33e1b9e159 [ 212.247718][ T4279] RDX: 0000200000000040 RSI: 000000004008556c RDI: 0000000000000003 [ 212.247737][ T4279] RBP: 00007f33e2a53090 R08: 0000000000000000 R09: 0000000000000000 [ 212.247755][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.247773][ T4279] R13: 00007f33e1e26038 R14: 00007f33e1e25fa0 R15: 00007fff9ebeb308 [ 212.247798][ T4279] [ 212.343578][ T31] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 212.634785][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 212.645840][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 212.662065][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 212.673536][ T31] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 212.682774][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.694279][ T31] usb 9-1: config 0 descriptor?? [ 212.700732][ T31] hub 9-1:0.0: USB hub found [ 212.907335][ T31] hub 9-1:0.0: 1 port detected [ 212.912242][ T4291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.926352][ T4291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.956588][ T4291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.965131][ T4291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.039482][ T4296] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 213.108090][ T31] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 213.117068][ T31] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 213.137122][ T31] usbhid 9-1:0.0: can't add hid device: -71 [ 213.143126][ T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 213.177852][ T31] usb 9-1: USB disconnect, device number 59 [ 213.355488][ T616] usb 3-1: USB disconnect, device number 18 [ 213.527016][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.536459][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.740146][ T616] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 213.747879][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.758406][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.870547][ T31] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 213.901856][ T616] usb 3-1: config 6 has an invalid interface number: 9 but max is 1 [ 213.909982][ T3360] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 213.909985][ T616] usb 3-1: config 6 has an invalid interface number: 240 but max is 1 [ 213.926143][ T616] usb 3-1: config 6 has no interface number 0 [ 213.932441][ T616] usb 3-1: config 6 has no interface number 1 [ 213.938629][ T616] usb 3-1: config 6 interface 9 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 213.949902][ T616] usb 3-1: config 6 interface 9 altsetting 1 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 213.961672][ T616] usb 3-1: config 6 interface 9 altsetting 1 endpoint 0x86 has an invalid bInterval 129, changing to 7 [ 213.973179][ T616] usb 3-1: config 6 interface 9 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.986485][ T616] usb 3-1: config 6 interface 240 altsetting 68 has a duplicate endpoint with address 0x6, skipping [ 213.997437][ T616] usb 3-1: config 6 interface 240 altsetting 68 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 214.008667][ T616] usb 3-1: config 6 interface 9 has no altsetting 0 [ 214.016927][ T616] usb 3-1: config 6 interface 240 has no altsetting 0 [ 214.026206][ T616] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=c4.60 [ 214.035347][ T616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.043457][ T616] usb 3-1: Product: syz [ 214.047755][ T616] usb 3-1: Manufacturer: syz [ 214.052567][ T616] usb 3-1: SerialNumber: syz [ 214.057951][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.061551][ T3360] usb 9-1: Using ep0 maxpacket: 8 [ 214.071467][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 214.073062][ T3360] usb 9-1: config 0 has an invalid interface number: 151 but max is 1 [ 214.087767][ T3360] usb 9-1: config 0 has no interface number 1 [ 214.088041][ T31] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 214.094377][ T3360] usb 9-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.102396][ T31] usb 2-1: config 0 has no interface number 0 [ 214.113658][ T3360] usb 9-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 214.119413][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 214.131586][ T3360] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 214.142585][ T31] usb 2-1: config 0 interface 88 has no altsetting 0 [ 214.153901][ T3360] usb 9-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 214.163130][ T31] usb 2-1: string descriptor 0 read error: -22 [ 214.170830][ T3360] usb 9-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.176832][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 214.190235][ T3360] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 214.198645][ T31] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 214.210628][ T3360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 214.222981][ T31] usb 2-1: config 0 descriptor?? [ 214.233287][ T4322] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 214.239529][ T3360] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 214.247692][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input70 [ 214.255771][ T3360] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 214.271686][ T3360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.280824][ T3360] usb 9-1: Product: syz [ 214.285419][ T3360] usb 9-1: Manufacturer: syz [ 214.299352][ T3360] usb 9-1: SerialNumber: syz [ 214.310692][ T616] usbhid 3-1:6.240: couldn't find an input interrupt endpoint [ 214.323504][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 214.332027][ T616] usb 3-1: USB disconnect, device number 19 [ 214.345965][ T3360] usb 9-1: config 0 descriptor?? [ 214.351276][ T4324] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 214.373113][ T3360] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 214.395220][ T4328] fuse: Unknown parameter 'group_iD' [ 214.446948][ T3360] usb 2-1: USB disconnect, device number 30 [ 214.573188][ T616] usb 9-1: USB disconnect, device number 60 [ 214.626521][ T4335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 215.246814][ T616] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 215.417803][ T616] usb 2-1: Using ep0 maxpacket: 16 [ 215.446406][ T36] audit: type=1400 audit(1788461711.357:18971): avc: denied { listen } for pid=4347 comm="syz.3.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.550554][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.559852][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.632962][ T4342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.651372][ T4342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.662166][ T616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.679452][ T616] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 215.687034][ T616] usb 2-1: can't read configurations, error -71 [ 216.211553][ T4365] FAULT_INJECTION: forcing a failure. [ 216.211553][ T4365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.224914][ T4365] CPU: 0 UID: 0 PID: 4365 Comm: syz.1.1181 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 216.224955][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.224971][ T4365] Call Trace: [ 216.224980][ T4365] [ 216.224989][ T4365] __dump_stack+0x21/0x30 [ 216.225029][ T4365] dump_stack_lvl+0x140/0x1c0 [ 216.225063][ T4365] ? __cfi_dump_stack_lvl+0x10/0x10 [ 216.225104][ T4365] ? check_stack_object+0x81/0x150 [ 216.225130][ T4365] ? __virt_addr_valid+0x2a1/0x370 [ 216.225170][ T4365] dump_stack+0x19/0x20 [ 216.225202][ T4365] should_fail_ex+0x3c2/0x510 [ 216.225232][ T4365] should_fail+0xf/0x20 [ 216.225258][ T4365] should_fail_usercopy+0x1e/0x30 [ 216.225293][ T4365] _copy_from_user+0x20/0xa0 [ 216.225326][ T4365] memdup_user+0x81/0x170 [ 216.225348][ T4365] ? strndup_user+0x40/0xd0 [ 216.225417][ T4365] strndup_user+0x6c/0xd0 [ 216.225441][ T4365] __se_sys_mount+0xe2/0x480 [ 216.225468][ T4365] ? ksys_write+0x1f3/0x260 [ 216.225495][ T4365] ? __x64_sys_mount+0xf0/0xf0 [ 216.225523][ T4365] __x64_sys_mount+0xc3/0xf0 [ 216.225549][ T4365] x64_sys_call+0x2021/0x2ee0 [ 216.225579][ T4365] do_syscall_64+0x57/0xf0 [ 216.225614][ T4365] ? clear_bhb_loop+0x50/0xa0 [ 216.225643][ T4365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 216.225670][ T4365] RIP: 0033:0x7f3f5c19e159 [ 216.225691][ T4365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.225712][ T4365] RSP: 002b:00007f3f5d078028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.225739][ T4365] RAX: ffffffffffffffda RBX: 00007f3f5c425fa0 RCX: 00007f3f5c19e159 [ 216.225758][ T4365] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000200000000240 [ 216.225777][ T4365] RBP: 00007f3f5d078090 R08: 0000200000000280 R09: 0000000000000000 [ 216.225794][ T4365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.225810][ T4365] R13: 00007f3f5c426038 R14: 00007f3f5c425fa0 R15: 00007ffcb246f088 [ 216.225832][ T4365] [ 216.843969][ T616] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 216.994633][ T616] usb 2-1: Using ep0 maxpacket: 8 [ 217.016785][ T616] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 217.025961][ T616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.033986][ T616] usb 2-1: Product: syz [ 217.038682][ T616] usb 2-1: Manufacturer: 뻑땊ᰏ浭朂哈밦뱰몾ꨛ뮐摼鈱郸돷苡끶ퟧ靪꘣巃킕濌H뽞읨ᅹ㨹ጎꎉ돝怈㌲깷혦站㈾＄輨켌픁髖〉ڴ汈斊仚凋斎뼊ⷫਵ䜒琲㋇痞力뱽粒麪㺢ୖ薛董裟ﴒ侍꫈⟩꛲섿僘ㅐ䇵羑㞄ߺ莤軗⹜萸ꗐ퓔맣鱕닠鞤寺欿鹈٥䧴拵㊃쀓铐尿獵렵ጿ첃ᬢ穆Χ [ 217.074965][ T616] usb 2-1: SerialNumber: syz [ 217.139745][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.149339][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.159223][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.168495][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.293609][ T616] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 217.300754][ T4382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.316165][ T616] usb 2-1: USB disconnect, device number 33 [ 217.336920][ T4382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.346729][ T36] audit: type=1400 audit(1788461713.258:18972): avc: denied { shutdown } for pid=4380 comm="syz.8.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.371721][ T1956] udevd[1956]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.389190][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.398159][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.408198][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.418309][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.537021][ T31] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 217.688868][ T31] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.717797][ T31] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.729294][ T31] usb 9-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 217.738501][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.746592][ T31] usb 9-1: Product: syz [ 217.751114][ T31] usb 9-1: Manufacturer: ౑뢶ᙍ铴⇈぀좉牟⩏琼ꗊƋ琢嘀螖䀏ꌌ䐕뷙䉩胈絫獶ꗏ朤᪄韭تᆁӚ㙮ᆯ᭩쀝嫶㾹⢕먬锋霛蠻鳢겵᫞ᆽ⧍ᇤॱ㊕㜵ⷽ眚ﾽ︂郧函涻ة杲澋 [ 217.772167][ T31] usb 9-1: SerialNumber: syz [ 217.865571][ T4389] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 217.982191][ T31] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 218.010544][ T31] usb 9-1: USB disconnect, device number 61 [ 218.040330][ T1825] udevd[1825]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.629127][ T36] audit: type=1326 audit(1788461714.523:18973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.8.1201" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c8139e159 code=0x0 [ 218.704495][ T4421] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 218.844791][ T4423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.892993][ T4423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.908056][ T4424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.917242][ T4424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.384971][ T616] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 219.531686][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.547198][ T616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 219.555388][ T616] usb 2-1: not running at top speed; connect to a high speed hub [ 219.564306][ T616] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 219.566175][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.582956][ T616] usb 2-1: language id specifier not provided by device, defaulting to English [ 219.593538][ T616] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 219.602891][ T616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.611092][ T616] usb 2-1: Product: syz [ 219.615390][ T616] usb 2-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 219.642142][ T616] usb 2-1: SerialNumber: syz [ 219.726417][ T10] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 219.856974][ T10] usb 9-1: device descriptor read/64, error -71 [ 219.865840][ T4437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.875477][ T4437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.886448][ T616] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 219.907403][ T616] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 219.919870][ T616] usb 2-1: USB disconnect, device number 34 [ 219.936566][ T1825] udevd[1825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.118060][ T10] usb 9-1: device descriptor read/64, error -71 [ 220.359066][ T10] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 220.445315][ T4457] netlink: 'syz.1.1216': attribute type 22 has an invalid length. [ 220.499688][ T10] usb 9-1: device descriptor read/64, error -71 [ 220.714114][ T4469] syzkaller1: entered allmulticast mode [ 220.750991][ T10] usb 9-1: device descriptor read/64, error -71 [ 220.795423][ T4472] FAULT_INJECTION: forcing a failure. [ 220.795423][ T4472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.809874][ T4472] CPU: 0 UID: 0 PID: 4472 Comm: syz.3.1222 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 220.809912][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.809928][ T4472] Call Trace: [ 220.809937][ T4472] [ 220.809947][ T4472] __dump_stack+0x21/0x30 [ 220.809986][ T4472] dump_stack_lvl+0x140/0x1c0 [ 220.810019][ T4472] ? __cfi_dump_stack_lvl+0x10/0x10 [ 220.810052][ T4472] ? __kasan_check_read+0x15/0x20 [ 220.810077][ T4472] ? vmx_read_guest_seg_ar+0x179/0x350 [ 220.810109][ T4472] dump_stack+0x19/0x20 [ 220.810148][ T4472] should_fail_ex+0x3c2/0x510 [ 220.810177][ T4472] should_fail+0xf/0x20 [ 220.810210][ T4472] should_fail_usercopy+0x1e/0x30 [ 220.810238][ T4472] __kvm_read_guest_page+0x177/0x210 [ 220.810265][ T4472] kvm_vcpu_read_guest_page+0x31c/0x400 [ 220.810293][ T4472] kvm_fetch_guest_virt+0x146/0x190 [ 220.810316][ T4472] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 220.810338][ T4472] __do_insn_fetch_bytes+0x57d/0x740 [ 220.810364][ T4472] ? x86_decode_insn+0xfa7/0x50b0 [ 220.810388][ T4472] ? x86_decode_insn+0x50b0/0x50b0 [ 220.810413][ T4472] ? x86_decode_insn+0x4053/0x50b0 [ 220.810437][ T4472] ? __kasan_check_write+0x18/0x20 [ 220.810463][ T4472] x86_decode_insn+0x326/0x50b0 [ 220.810490][ T4472] ? __kasan_check_write+0x18/0x20 [ 220.810516][ T4472] ? __cfi_x86_decode_insn+0x10/0x10 [ 220.810540][ T4472] ? __kasan_check_write+0x18/0x20 [ 220.810564][ T4472] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 220.810594][ T4472] ? __asan_memset+0x39/0x50 [ 220.810617][ T4472] ? init_decode_cache+0x7c/0x90 [ 220.810642][ T4472] ? init_emulate_ctxt+0x403/0x540 [ 220.810670][ T4472] ? kvm_inject_realmode_interrupt+0x2d0/0x2d0 [ 220.810701][ T4472] x86_decode_emulated_instruction+0x66/0x180 [ 220.810731][ T4472] x86_emulate_instruction+0x2d7/0x19f0 [ 220.810759][ T4472] ? mmu_page_zap_pte+0x380/0x380 [ 220.810788][ T4472] ? __cfi_kvm_io_bus_sort_cmp+0x10/0x10 [ 220.810821][ T4472] ? kvm_io_bus_write+0x295/0x5e0 [ 220.810853][ T4472] kvm_mmu_page_fault+0x341/0x9a0 [ 220.810885][ T4472] handle_ept_misconfig+0xfd/0x270 [ 220.810911][ T4472] vmx_handle_exit+0x13ac/0x1c00 [ 220.810946][ T4472] ? kvm_deliver_exception_payload+0xd0/0x1e0 [ 220.810978][ T4472] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 220.811015][ T4472] vcpu_run+0x4c14/0x7830 [ 220.811061][ T4472] ? signal_pending+0xc0/0xc0 [ 220.811093][ T4472] ? complete_emulated_mmio+0x4ef/0x790 [ 220.811123][ T4472] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 220.811154][ T4472] ? _parse_integer_limit+0x195/0x1e0 [ 220.811182][ T4472] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 220.811222][ T4472] ? kstrtoull+0x13b/0x1e0 [ 220.811246][ T4472] ? kstrtouint+0x78/0xf0 [ 220.811269][ T4472] ? ioctl_has_perm+0x1bc/0x500 [ 220.811292][ T4472] ? __asan_memcpy+0x5a/0x80 [ 220.811316][ T4472] ? ioctl_has_perm+0x408/0x500 [ 220.811340][ T4472] ? has_cap_mac_admin+0xd0/0xd0 [ 220.811365][ T4472] ? __kasan_check_write+0x18/0x20 [ 220.811388][ T4472] ? mutex_lock_killable+0x97/0x1d0 [ 220.811416][ T4472] ? __cfi_mutex_lock_killable+0x10/0x10 [ 220.811444][ T4472] ? proc_fail_nth_write+0x184/0x220 [ 220.811480][ T4472] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 220.811517][ T4472] kvm_vcpu_ioctl+0xa43/0x1000 [ 220.811542][ T4472] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 220.811566][ T4472] ? __cfi_vfs_write+0x10/0x10 [ 220.811592][ T4472] ? __kasan_check_write+0x18/0x20 [ 220.811616][ T4472] ? mutex_unlock+0x90/0x240 [ 220.811642][ T4472] ? __cfi_mutex_unlock+0x10/0x10 [ 220.811670][ T4472] ? __fget_files+0x2bc/0x330 [ 220.811701][ T4472] ? bpf_lsm_file_ioctl+0xd/0x20 [ 220.811733][ T4472] ? security_file_ioctl+0x3e/0x110 [ 220.811757][ T4472] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 220.811781][ T4472] __se_sys_ioctl+0x126/0x1b0 [ 220.811812][ T4472] __x64_sys_ioctl+0x7f/0xa0 [ 220.811842][ T4472] x64_sys_call+0x1878/0x2ee0 [ 220.811865][ T4472] do_syscall_64+0x57/0xf0 [ 220.811900][ T4472] ? clear_bhb_loop+0x50/0xa0 [ 220.811928][ T4472] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 220.811956][ T4472] RIP: 0033:0x7f33e1b9e159 [ 220.811976][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.811998][ T4472] RSP: 002b:00007f33e2a53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.812025][ T4472] RAX: ffffffffffffffda RBX: 00007f33e1e25fa0 RCX: 00007f33e1b9e159 [ 220.812044][ T4472] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 220.812060][ T4472] RBP: 00007f33e2a53090 R08: 0000000000000000 R09: 0000000000000000 [ 220.812077][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.812092][ T4472] R13: 00007f33e1e26038 R14: 00007f33e1e25fa0 R15: 00007fff9ebeb308 [ 220.812114][ T4472] [ 221.020225][ T4477] usb usb8: usbfs: process 4477 (syz.1.1223) did not claim interface 0 before use [ 221.253118][ T10] usb usb9-port1: attempt power cycle [ 221.430985][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.443760][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.624282][ T10] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 221.645366][ T10] usb 9-1: device descriptor read/8, error -71 [ 221.684837][ T36] audit: type=1400 audit(1788461717.570:18974): avc: denied { accept } for pid=4485 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.778173][ T10] usb 9-1: device descriptor read/8, error -71 [ 221.986399][ T4494] x_tables: duplicate underflow at hook 2 [ 222.025955][ T10] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 222.047043][ T10] usb 9-1: device descriptor read/8, error -71 [ 222.083920][ T444] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 222.187653][ T10] usb 9-1: device descriptor read/8, error -71 [ 222.246840][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 222.254555][ T444] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 222.262772][ T444] usb 2-1: config 0 has no interface number 0 [ 222.268977][ T444] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.279986][ T444] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.289985][ T444] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 222.304136][ T10] usb usb9-port1: unable to enumerate USB device [ 222.313978][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.333304][ T444] usb 2-1: config 0 descriptor?? [ 222.889441][ T10] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 222.957862][ T444] usbhid 2-1:0.3: can't add hid device: -71 [ 222.965437][ T444] usbhid 2-1:0.3: probe with driver usbhid failed with error -71 [ 222.987129][ T444] usb 2-1: USB disconnect, device number 35 [ 223.041132][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.060108][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.080740][ T10] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 223.090143][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.098209][ T10] usb 9-1: Product: syz [ 223.118562][ T10] usb 9-1: Manufacturer: syz [ 223.123351][ T10] usb 9-1: SerialNumber: syz [ 223.345831][ T10] usb 9-1: unit 4 not found! [ 223.357239][ T10] usb 9-1: USB disconnect, device number 66 [ 223.377075][ T1825] udevd[1825]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 223.624988][ T4533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.634461][ T4533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.047911][ T36] audit: type=1400 audit(1788461719.921:18975): avc: denied { append } for pid=4542 comm="syz.8.1249" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.086442][ T4545] netlink: 'syz.8.1250': attribute type 1 has an invalid length. [ 224.426273][ T4568] FAULT_INJECTION: forcing a failure. [ 224.426273][ T4568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.439443][ T4568] CPU: 1 UID: 0 PID: 4568 Comm: syz.3.1259 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 224.439481][ T4568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.439497][ T4568] Call Trace: [ 224.439506][ T4568] [ 224.439515][ T4568] __dump_stack+0x21/0x30 [ 224.439554][ T4568] dump_stack_lvl+0x140/0x1c0 [ 224.439587][ T4568] ? __cfi_dump_stack_lvl+0x10/0x10 [ 224.439623][ T4568] dump_stack+0x19/0x20 [ 224.439655][ T4568] should_fail_ex+0x3c2/0x510 [ 224.439684][ T4568] should_fail+0xf/0x20 [ 224.439711][ T4568] should_fail_usercopy+0x1e/0x30 [ 224.439742][ T4568] _copy_from_iter+0x1a6/0x1520 [ 224.439776][ T4568] ? __virt_addr_valid+0x2a1/0x370 [ 224.439806][ T4568] ? __cfi__copy_from_iter+0x10/0x10 [ 224.439837][ T4568] ? __check_object_size+0x54c/0x870 [ 224.439873][ T4568] ? __cfi___check_object_size+0x10/0x10 [ 224.439900][ T4568] ? skb_put+0x10e/0x200 [ 224.439927][ T4568] netlink_sendmsg+0x66d/0xad0 [ 224.439961][ T4568] ? __cfi_netlink_sendmsg+0x10/0x10 [ 224.439996][ T4568] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 224.440023][ T4568] ? security_socket_sendmsg+0x3d/0x100 [ 224.440058][ T4568] ____sys_sendmsg+0x9a1/0xa00 [ 224.440090][ T4568] ? __import_iovec+0x5b9/0x7d0 [ 224.440126][ T4568] ? __sys_sendmsg_sock+0x50/0x50 [ 224.440165][ T4568] ? import_iovec+0x80/0xb0 [ 224.440201][ T4568] ___sys_sendmsg+0x2a6/0x370 [ 224.440234][ T4568] ? __sys_sendmsg+0x260/0x260 [ 224.440266][ T4568] ? proc_fail_nth_write+0x184/0x220 [ 224.440303][ T4568] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 224.440344][ T4568] ? __fget_files+0x2bc/0x330 [ 224.440376][ T4568] __x64_sys_sendmsg+0x1be/0x2a0 [ 224.440409][ T4568] ? fput+0x1a4/0x230 [ 224.440441][ T4568] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 224.440474][ T4568] ? ksys_write+0x1f3/0x260 [ 224.440501][ T4568] ? __kasan_check_read+0x15/0x20 [ 224.440527][ T4568] x64_sys_call+0x2a4c/0x2ee0 [ 224.440550][ T4568] do_syscall_64+0x57/0xf0 [ 224.440586][ T4568] ? clear_bhb_loop+0x50/0xa0 [ 224.440614][ T4568] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.440640][ T4568] RIP: 0033:0x7f33e1b9e159 [ 224.440661][ T4568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.440683][ T4568] RSP: 002b:00007f33e2a53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.440709][ T4568] RAX: ffffffffffffffda RBX: 00007f33e1e25fa0 RCX: 00007f33e1b9e159 [ 224.440729][ T4568] RDX: 0000000000050012 RSI: 0000200000000580 RDI: 0000000000000003 [ 224.440745][ T4568] RBP: 00007f33e2a53090 R08: 0000000000000000 R09: 0000000000000000 [ 224.440762][ T4568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.440783][ T4568] R13: 00007f33e1e26038 R14: 00007f33e1e25fa0 R15: 00007fff9ebeb308 [ 224.440806][ T4568] [ 224.626399][ T444] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 224.899092][ T444] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.907138][ T444] usb 2-1: config 0 has no interface number 0 [ 224.927479][ T444] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.938571][ T444] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.948702][ T444] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 224.958002][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.970525][ T444] usb 2-1: config 0 descriptor?? [ 225.189711][ T4566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.200462][ T4566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.278838][ T616] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 225.343495][ T36] audit: type=1326 audit(1788461721.215:18976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4576 comm="syz.3.1263" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e1b9e159 code=0x0 [ 225.421419][ T444] prodikeys 0003:041E:2801.0015: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 225.439453][ T616] usb 9-1: device descriptor read/64, error -71 [ 225.439983][ T444] hid_prodikeys: hid-prodikeys: failed to find output report [ 225.439983][ T444] [ 225.614595][ T599] usb 2-1: USB disconnect, device number 36 [ 225.680368][ T616] usb 9-1: device descriptor read/64, error -71 [ 225.921301][ T616] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 226.081911][ T616] usb 9-1: device descriptor read/64, error -71 [ 226.260274][ T36] audit: type=1400 audit(1788461722.122:18977): avc: denied { name_bind } for pid=4582 comm="syz.3.1265" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 226.293792][ T4583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.302344][ T4583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.342943][ T616] usb 9-1: device descriptor read/64, error -71 [ 226.378403][ T4589] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1268'. [ 226.387638][ T4589] gretap0: entered promiscuous mode [ 226.393035][ T4589] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1268'. [ 226.402162][ T4589] 0{X: renamed from gretap0 [ 226.408048][ T4589] 0{X: left promiscuous mode [ 226.413263][ T4589] 0{X: entered allmulticast mode [ 226.419107][ T4589] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 226.453474][ T616] usb usb9-port1: attempt power cycle [ 226.804732][ T616] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 226.836258][ T616] usb 9-1: device descriptor read/8, error -71 [ 226.915081][ T444] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 226.935628][ T4600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=4600 comm=syz.3.1273 [ 226.960027][ T4600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=4600 comm=syz.3.1273 [ 226.972883][ T4600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=4600 comm=syz.3.1273 [ 226.979227][ T4603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1169'. [ 226.994512][ T4603] tipc: Invalid UDP bearer configuration [ 226.994528][ T4603] tipc: Enabling of bearer rejected, failed to enable media [ 227.008586][ T616] usb 9-1: device descriptor read/8, error -71 [ 227.014944][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 227.033497][ T4605] netlink: 'syz.2.1274': attribute type 4 has an invalid length. [ 227.076090][ T444] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 227.096697][ T444] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 227.106794][ T36] audit: type=1400 audit(1788461722.979:18978): avc: denied { append } for pid=4612 comm="syz.2.1276" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.110907][ T444] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.139263][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.147894][ T444] usb 2-1: Product: syz [ 227.152226][ T444] usb 2-1: Manufacturer: syz [ 227.156893][ T444] usb 2-1: SerialNumber: syz [ 227.256405][ T616] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 227.280664][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.288197][ T616] usb 9-1: device descriptor read/8, error -71 [ 227.293570][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.303994][ T36] audit: type=1400 audit(1788461723.168:18979): avc: denied { setopt } for pid=4625 comm="syz.3.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.313059][ T4626] netlink: 'syz.3.1280': attribute type 4 has an invalid length. [ 227.331583][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 227.371941][ T4598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.418039][ T616] usb 9-1: device descriptor read/8, error -71 [ 227.527515][ T616] usb usb9-port1: unable to enumerate USB device [ 227.866354][ T4628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.875042][ T4628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.983247][ T4598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.191952][ T444] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 228.198457][ T444] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 228.206165][ T444] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 228.281949][ T4640] FAULT_INJECTION: forcing a failure. [ 228.281949][ T4640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.295105][ T4640] CPU: 1 UID: 0 PID: 4640 Comm: syz.2.1286 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 228.295141][ T4640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.295156][ T4640] Call Trace: [ 228.295165][ T4640] [ 228.295180][ T4640] __dump_stack+0x21/0x30 [ 228.295211][ T4640] dump_stack_lvl+0x140/0x1c0 [ 228.295234][ T4640] ? __cfi_dump_stack_lvl+0x10/0x10 [ 228.295281][ T4640] ? vmx_read_guest_seg_ar+0x179/0x350 [ 228.295312][ T4640] dump_stack+0x19/0x20 [ 228.295345][ T4640] should_fail_ex+0x3c2/0x510 [ 228.295365][ T4640] should_fail+0xf/0x20 [ 228.295383][ T4640] should_fail_usercopy+0x1e/0x30 [ 228.295424][ T4640] __kvm_read_guest_page+0x177/0x210 [ 228.295458][ T4640] kvm_vcpu_read_guest+0x3a6/0x510 [ 228.295490][ T4640] read_emulate+0x30/0x50 [ 228.295523][ T4640] emulator_read_write_onepage+0x7f4/0xe00 [ 228.295555][ T4640] emulator_read_write+0x2a5/0x690 [ 228.295580][ T4640] ? emulate_push+0x6d0/0x6d0 [ 228.295606][ T4640] emulator_read_emulated+0x40/0x50 [ 228.295629][ T4640] ? __cfi_emulator_read_emulated+0x10/0x10 [ 228.295645][ T4640] segmented_read+0x1c5/0x410 [ 228.295664][ T4640] x86_emulate_insn+0x30e/0x4140 [ 228.295698][ T4640] ? kvm_inject_realmode_interrupt+0x2d0/0x2d0 [ 228.295727][ T4640] ? __kasan_check_write+0x18/0x20 [ 228.295750][ T4640] ? kvm_release_pfn_clean+0x31/0x60 [ 228.295779][ T4640] x86_emulate_instruction+0xbf7/0x19f0 [ 228.295802][ T4640] kvm_mmu_page_fault+0x341/0x9a0 [ 228.295824][ T4640] handle_ept_violation+0x256/0x450 [ 228.295864][ T4640] ? vmx_vcpu_run+0x1116/0x1f70 [ 228.295916][ T4640] ? __cfi_handle_ept_violation+0x10/0x10 [ 228.295935][ T4640] vmx_handle_exit+0x1376/0x1c00 [ 228.295961][ T4640] ? kvm_deliver_exception_payload+0xd0/0x1e0 [ 228.296001][ T4640] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 228.296036][ T4640] vcpu_run+0x4c14/0x7830 [ 228.296080][ T4640] ? signal_pending+0xc0/0xc0 [ 228.296103][ T4640] ? complete_emulated_mmio+0x4ef/0x790 [ 228.296137][ T4640] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 228.296169][ T4640] ? _parse_integer_limit+0x195/0x1e0 [ 228.296195][ T4640] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 228.296226][ T4640] ? kstrtoull+0x13b/0x1e0 [ 228.296243][ T4640] ? kstrtouint+0x78/0xf0 [ 228.296259][ T4640] ? ioctl_has_perm+0x1bc/0x500 [ 228.296290][ T4640] ? __asan_memcpy+0x5a/0x80 [ 228.296315][ T4640] ? ioctl_has_perm+0x408/0x500 [ 228.296339][ T4640] ? has_cap_mac_admin+0xd0/0xd0 [ 228.296361][ T4640] ? __kasan_check_write+0x18/0x20 [ 228.296385][ T4640] ? mutex_lock_killable+0x97/0x1d0 [ 228.296410][ T4640] ? __cfi_mutex_lock_killable+0x10/0x10 [ 228.296444][ T4640] ? proc_fail_nth_write+0x184/0x220 [ 228.296485][ T4640] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 228.296525][ T4640] kvm_vcpu_ioctl+0xa43/0x1000 [ 228.296542][ T4640] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 228.296558][ T4640] ? __cfi_vfs_write+0x10/0x10 [ 228.296576][ T4640] ? __kasan_check_write+0x18/0x20 [ 228.296612][ T4640] ? mutex_unlock+0x90/0x240 [ 228.296637][ T4640] ? __cfi_mutex_unlock+0x10/0x10 [ 228.296669][ T4640] ? __fget_files+0x2bc/0x330 [ 228.296690][ T4640] ? bpf_lsm_file_ioctl+0xd/0x20 [ 228.296711][ T4640] ? security_file_ioctl+0x3e/0x110 [ 228.296728][ T4640] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 228.296763][ T4640] __se_sys_ioctl+0x126/0x1b0 [ 228.296792][ T4640] __x64_sys_ioctl+0x7f/0xa0 [ 228.296823][ T4640] x64_sys_call+0x1878/0x2ee0 [ 228.296839][ T4640] do_syscall_64+0x57/0xf0 [ 228.296862][ T4640] ? clear_bhb_loop+0x50/0xa0 [ 228.296897][ T4640] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 228.296923][ T4640] RIP: 0033:0x7f199f99e159 [ 228.296943][ T4640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.296970][ T4640] RSP: 002b:00007f19a0893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.296988][ T4640] RAX: ffffffffffffffda RBX: 00007f199fc25fa0 RCX: 00007f199f99e159 [ 228.297001][ T4640] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 228.297012][ T4640] RBP: 00007f19a0893090 R08: 0000000000000000 R09: 0000000000000000 [ 228.297023][ T4640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.297051][ T4640] R13: 00007f199fc26038 R14: 00007f199fc25fa0 R15: 00007ffeb723bce8 [ 228.297072][ T4640] [ 228.724906][ T444] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 228.733365][ T444] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 228.839395][ T4655] can: request_module (can-proto-0) failed. [ 228.852302][ T10] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 228.935825][ T36] audit: type=1400 audit(1788461724.792:18980): avc: denied { write } for pid=4658 comm="syz.3.1289" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 228.937928][ T4659] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 228.958037][ T36] audit: type=1400 audit(1788461724.792:18981): avc: denied { setattr } for pid=4658 comm="syz.3.1289" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 228.974794][ T4659] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1289'. [ 229.024526][ T444] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 229.032356][ T3360] usb 2-1: USB disconnect, device number 37 [ 229.040962][ T3360] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 229.054430][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.065845][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.087927][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 229.100909][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 229.113740][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.126686][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.135030][ T10] usb 9-1: Product: syz [ 229.139934][ T10] usb 9-1: Manufacturer: syz [ 229.144791][ T10] usb 9-1: SerialNumber: syz [ 229.160691][ T4635] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 229.170409][ T10] cdc_mbim 9-1:1.0: skipping garbage [ 229.186410][ T444] usb 3-1: not running at top speed; connect to a high speed hub [ 229.195581][ T444] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 229.206853][ T444] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 229.218178][ T444] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 229.233459][ T444] usb 3-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 229.243448][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.251737][ T444] usb 3-1: Product: 稒鏸ꛛ㖑鐕⯦ә牿⹧舘庨ꛋꋼ虙䜓ᕑ楟ᐇ䣷쇒ꐵ•᷺૒ⱳ毫舴ෙࠛ።ꛖ槃笭튁つ翳◸⡷챋蟜閖燖逈ᚓള婌谀틼箣ᢼ干읭罟醭ꧽ￀醵 [ 229.273346][ T444] usb 3-1: Manufacturer: 鏙萁乗迎舏＂鄝ត斟싡띩黶릗梊嗚◿闌䂤ラ☪ࣩ잹፵ጭ些ꮼ抬⊿溺㿜ﷲꤲ䴩底㖕퀨ﯤ逵ᚊ [ 229.290028][ T444] usb 3-1: SerialNumber: ఄ [ 229.357570][ T4683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.366283][ T4683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.375483][ T4635] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 229.382665][ T4635] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 229.702543][ T444] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 229.720862][ T444] usb 3-1: USB disconnect, device number 20 [ 229.796144][ T4635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.804920][ T4635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.821509][ T4703] syz.1.1300 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 229.967654][ T4711] fuse: Invalid rootmode [ 230.015074][ T4635] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 230.030418][ T4635] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 230.047017][ T10] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 230.052925][ T36] audit: type=1400 audit(1788461725.908:18982): avc: denied { write } for pid=4712 comm="syz.3.1303" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 230.076230][ T10] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 230.093676][ T10] wwan wwan0: port wwan0mbim0 attached [ 230.111966][ T10] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, c6:80:2c:ee:e1:bd [ 230.168660][ T4716] FAULT_INJECTION: forcing a failure. [ 230.168660][ T4716] name failslab, interval 1, probability 0, space 0, times 0 [ 230.195642][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.3.1304 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 230.195682][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.195698][ T4716] Call Trace: [ 230.195706][ T4716] [ 230.195717][ T4716] __dump_stack+0x21/0x30 [ 230.195757][ T4716] dump_stack_lvl+0x140/0x1c0 [ 230.195790][ T4716] ? __cfi_dump_stack_lvl+0x10/0x10 [ 230.195823][ T4716] ? __cfi_avc_has_perm+0x10/0x10 [ 230.195853][ T4716] ? stack_trace_save+0xaa/0x100 [ 230.195882][ T4716] dump_stack+0x19/0x20 [ 230.195915][ T4716] should_fail_ex+0x3c2/0x510 [ 230.195943][ T4716] should_failslab+0xac/0x100 [ 230.195975][ T4716] __kmalloc_cache_noprof+0x41/0x470 [ 230.196002][ T4716] ? proc_thread_self_get_link+0x11a/0x290 [ 230.196040][ T4716] proc_thread_self_get_link+0x11a/0x290 [ 230.196076][ T4716] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 230.196105][ T4716] ? __cfi_proc_thread_self_get_link+0x10/0x10 [ 230.196142][ T4716] pick_link+0x6d7/0xe80 [ 230.196168][ T4716] step_into+0xc33/0xf10 [ 230.196192][ T4716] ? read_word_at_a_time+0x1a/0x40 [ 230.196223][ T4716] ? set_root+0x420/0x420 [ 230.196247][ T4716] ? inode_permission+0xf3/0x4c0 [ 230.196284][ T4716] link_path_walk+0x746/0xeb0 [ 230.196313][ T4716] path_openat+0x298/0x35a0 [ 230.196348][ T4716] ? kasan_save_alloc_info+0x3a/0x50 [ 230.196371][ T4716] ? __kasan_slab_alloc+0x73/0x90 [ 230.196401][ T4716] ? getname+0x1b/0x30 [ 230.196426][ T4716] ? x64_sys_call+0xe69/0x2ee0 [ 230.196449][ T4716] ? do_syscall_64+0x57/0xf0 [ 230.196486][ T4716] ? do_filp_open+0x440/0x440 [ 230.196526][ T4716] do_filp_open+0x1f2/0x440 [ 230.196560][ T4716] ? __cfi_do_filp_open+0x10/0x10 [ 230.196596][ T4716] ? alloc_fd+0x4c1/0x570 [ 230.196626][ T4716] do_sys_openat2+0x134/0x1d0 [ 230.196660][ T4716] ? irqentry_exit+0x4a/0x60 [ 230.196695][ T4716] ? exc_page_fault+0x65/0xc0 [ 230.196723][ T4716] ? do_sys_open+0x100/0x100 [ 230.196759][ T4716] __x64_sys_openat+0x13a/0x170 [ 230.196795][ T4716] x64_sys_call+0xe69/0x2ee0 [ 230.196817][ T4716] do_syscall_64+0x57/0xf0 [ 230.196851][ T4716] ? clear_bhb_loop+0x50/0xa0 [ 230.196880][ T4716] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 230.196911][ T4716] RIP: 0033:0x7f33e1b5e98e [ 230.196931][ T4716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.196953][ T4716] RSP: 002b:00007f33e2a52f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.196979][ T4716] RAX: ffffffffffffffda RBX: 00007f33e2a536c0 RCX: 00007f33e1b5e98e [ 230.196998][ T4716] RDX: 0000000000000002 RSI: 00007f33e1c3492b RDI: ffffffffffffff9c [ 230.197016][ T4716] RBP: 00007f33e1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 230.197032][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.197048][ T4716] R13: 00007f33e1e26038 R14: 00007f33e1e25fa0 R15: 00007fff9ebeb308 [ 230.197069][ T4716] [ 230.549865][ T4716] FAULT_INJECTION: forcing a failure. [ 230.549865][ T4716] name failslab, interval 1, probability 0, space 0, times 0 [ 230.569247][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.3.1304 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 230.569290][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.569305][ T4716] Call Trace: [ 230.569314][ T4716] [ 230.569322][ T4716] __dump_stack+0x21/0x30 [ 230.569360][ T4716] dump_stack_lvl+0x140/0x1c0 [ 230.569392][ T4716] ? __cfi_dump_stack_lvl+0x10/0x10 [ 230.569425][ T4716] ? get_random_u64+0x2f5/0x4a0 [ 230.569460][ T4716] dump_stack+0x19/0x20 [ 230.569491][ T4716] should_fail_ex+0x3c2/0x510 [ 230.569538][ T4716] should_failslab+0xac/0x100 [ 230.569569][ T4716] kmem_cache_alloc_noprof+0x42/0x410 [ 230.569596][ T4716] ? prepare_creds+0x47/0x6b0 [ 230.569623][ T4716] ? __kasan_check_write+0x18/0x20 [ 230.569649][ T4716] prepare_creds+0x47/0x6b0 [ 230.569677][ T4716] copy_creds+0xe4/0x5d0 [ 230.569704][ T4716] copy_process+0x8ee/0x3350 [ 230.569736][ T4716] ? selinux_file_permission+0x318/0xb60 [ 230.569764][ T4716] ? __cfi_copy_process+0x10/0x10 [ 230.569793][ T4716] ? proc_fail_nth_write+0x184/0x220 [ 230.569831][ T4716] kernel_clone+0x233/0x810 [ 230.569863][ T4716] ? __cfi_kernel_clone+0x10/0x10 [ 230.569896][ T4716] __x64_sys_clone+0x1b7/0x230 [ 230.569929][ T4716] ? __cfi___x64_sys_clone+0x10/0x10 [ 230.569965][ T4716] ? __kasan_check_read+0x15/0x20 [ 230.569991][ T4716] x64_sys_call+0x2b3c/0x2ee0 [ 230.570014][ T4716] do_syscall_64+0x57/0xf0 [ 230.570049][ T4716] ? clear_bhb_loop+0x50/0xa0 [ 230.570078][ T4716] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 230.570105][ T4716] RIP: 0033:0x7f33e1b9e159 [ 230.570125][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.570148][ T4716] RSP: 002b:00007f33e2a52fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 230.570174][ T4716] RAX: ffffffffffffffda RBX: 00007f33e1e25fa0 RCX: 00007f33e1b9e159 [ 230.570193][ T4716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 230.570209][ T4716] RBP: 00007f33e2a53090 R08: 0000000000000000 R09: 0000000000000000 [ 230.570225][ T4716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 230.570251][ T4716] R13: 00007f33e1e26038 R14: 00007f33e1e25fa0 R15: 00007fff9ebeb308 [ 230.570279][ T4716] [ 230.804690][ T3360] usb 9-1: USB disconnect, device number 71 [ 230.811024][ T3360] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 230.892060][ T3360] wwan wwan0: port wwan0mbim0 disconnected [ 230.983776][ T4740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1308'. [ 231.017806][ T4734] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 231.363037][ T312] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 231.408096][ T4761] FAULT_INJECTION: forcing a failure. [ 231.408096][ T4761] name failslab, interval 1, probability 0, space 0, times 0 [ 231.420831][ T4761] CPU: 1 UID: 0 PID: 4761 Comm: syz.8.1312 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 231.420871][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.420893][ T4761] Call Trace: [ 231.420899][ T4761] [ 231.420906][ T4761] __dump_stack+0x21/0x30 [ 231.420937][ T4761] dump_stack_lvl+0x140/0x1c0 [ 231.420962][ T4761] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.420989][ T4761] dump_stack+0x19/0x20 [ 231.421012][ T4761] should_fail_ex+0x3c2/0x510 [ 231.421034][ T4761] ? security_prepare_creds+0x66/0x260 [ 231.421053][ T4761] should_failslab+0xac/0x100 [ 231.421075][ T4761] __kmalloc_noprof+0x69/0x510 [ 231.421094][ T4761] ? kasan_save_alloc_info+0x3a/0x50 [ 231.421110][ T4761] ? security_prepare_creds+0x66/0x260 [ 231.421128][ T4761] ? __kasan_slab_alloc+0x73/0x90 [ 231.421150][ T4761] security_prepare_creds+0x66/0x260 [ 231.421171][ T4761] prepare_creds+0x46d/0x6b0 [ 231.421191][ T4761] copy_creds+0xe4/0x5d0 [ 231.421211][ T4761] copy_process+0x8ee/0x3350 [ 231.421233][ T4761] ? __cfi_futex_wake_mark+0x10/0x10 [ 231.421250][ T4761] ? futex_wake+0x666/0x950 [ 231.421266][ T4761] ? __cfi_copy_process+0x10/0x10 [ 231.421312][ T4761] ? find_vma+0xd3/0x120 [ 231.421341][ T4761] kernel_clone+0x233/0x810 [ 231.421372][ T4761] ? __cfi_kernel_clone+0x10/0x10 [ 231.421394][ T4761] ? do_futex+0x32a/0x510 [ 231.421440][ T4761] __x64_sys_clone+0x1b7/0x230 [ 231.421473][ T4761] ? __cfi___x64_sys_clone+0x10/0x10 [ 231.421508][ T4761] ? __kasan_check_write+0x18/0x20 [ 231.421534][ T4761] ? fpregs_restore_userregs+0x11c/0x260 [ 231.421567][ T4761] ? switch_fpu_return+0x12/0x20 [ 231.421589][ T4761] x64_sys_call+0x2b3c/0x2ee0 [ 231.421605][ T4761] do_syscall_64+0x57/0xf0 [ 231.421631][ T4761] ? clear_bhb_loop+0x50/0xa0 [ 231.421651][ T4761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.421676][ T4761] RIP: 0033:0x7f4c8139e159 [ 231.421691][ T4761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.421706][ T4761] RSP: 002b:00007f4c82226fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 231.421725][ T4761] RAX: ffffffffffffffda RBX: 00007f4c81625fa0 RCX: 00007f4c8139e159 [ 231.421738][ T4761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 231.421750][ T4761] RBP: 00007f4c81435024 R08: 0000000000000000 R09: 0000000000000000 [ 231.421762][ T4761] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.421773][ T4761] R13: 00007f4c81626038 R14: 00007f4c81625fa0 R15: 00007ffe998f2048 [ 231.421788][ T4761] [ 231.675914][ T599] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 231.709066][ T4765] FAULT_INJECTION: forcing a failure. [ 231.709066][ T4765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.722580][ T4765] CPU: 1 UID: 0 PID: 4765 Comm: syz.8.1314 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 231.722622][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.722640][ T4765] Call Trace: [ 231.722649][ T4765] [ 231.722660][ T4765] __dump_stack+0x21/0x30 [ 231.722709][ T4765] dump_stack_lvl+0x140/0x1c0 [ 231.722736][ T4765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.722766][ T4765] dump_stack+0x19/0x20 [ 231.722791][ T4765] should_fail_ex+0x3c2/0x510 [ 231.722813][ T4765] should_fail_alloc_page+0xec/0x110 [ 231.722839][ T4765] __alloc_pages_noprof+0x1c0/0x7e0 [ 231.722867][ T4765] ? kernel_text_address+0xa9/0xe0 [ 231.722912][ T4765] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 231.722941][ T4765] ? unwind_get_return_address+0x51/0x90 [ 231.722967][ T4765] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 231.723006][ T4765] get_free_pages_noprof+0x14/0x40 [ 231.723062][ T4765] kasan_populate_vmalloc_pte+0x4c/0x170 [ 231.723094][ T4765] __apply_to_page_range+0x7c2/0xd00 [ 231.723131][ T4765] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 231.723159][ T4765] ? apply_to_page_range+0x60/0x60 [ 231.723183][ T4765] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 231.723205][ T4765] apply_to_page_range+0x3f/0x60 [ 231.723227][ T4765] kasan_populate_vmalloc+0x64/0x80 [ 231.723247][ T4765] alloc_vmap_area+0x1e8e/0x26f0 [ 231.723276][ T4765] ? kasan_save_alloc_info+0x3a/0x50 [ 231.723294][ T4765] ? vm_map_ram+0xdd0/0xdd0 [ 231.723321][ T4765] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 231.723342][ T4765] ? __get_vm_area_node+0x150/0x390 [ 231.723370][ T4765] __get_vm_area_node+0x1f8/0x390 [ 231.723398][ T4765] __vmalloc_node_range_noprof+0x340/0x1300 [ 231.723427][ T4765] ? copy_process+0x57c/0x3350 [ 231.723454][ T4765] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 231.723484][ T4765] ? kasan_save_alloc_info+0x3a/0x50 [ 231.723501][ T4765] ? __kasan_slab_alloc+0x73/0x90 [ 231.723523][ T4765] ? arch_dup_task_struct+0x5b/0xe0 [ 231.723552][ T4765] ? __asan_memcpy+0x5a/0x80 [ 231.723571][ T4765] dup_task_struct+0x5d6/0xd80 [ 231.723594][ T4765] ? copy_process+0x57c/0x3350 [ 231.723617][ T4765] ? _raw_spin_lock_irq+0x93/0x120 [ 231.723645][ T4765] ? copy_process+0x3350/0x3350 [ 231.723670][ T4765] ? __kasan_check_write+0x18/0x20 [ 231.723691][ T4765] copy_process+0x57c/0x3350 [ 231.723714][ T4765] ? __cfi_futex_wake_mark+0x10/0x10 [ 231.723733][ T4765] ? futex_wake+0x666/0x950 [ 231.723751][ T4765] ? __cfi_copy_process+0x10/0x10 [ 231.723774][ T4765] ? find_vma+0xd3/0x120 [ 231.723794][ T4765] kernel_clone+0x233/0x810 [ 231.723818][ T4765] ? __cfi_kernel_clone+0x10/0x10 [ 231.723842][ T4765] ? do_futex+0x32a/0x510 [ 231.723869][ T4765] __x64_sys_clone+0x1b7/0x230 [ 231.723893][ T4765] ? __cfi___x64_sys_clone+0x10/0x10 [ 231.723922][ T4765] ? __kasan_check_write+0x18/0x20 [ 231.723941][ T4765] ? fpregs_restore_userregs+0x11c/0x260 [ 231.723965][ T4765] ? switch_fpu_return+0x12/0x20 [ 231.723989][ T4765] x64_sys_call+0x2b3c/0x2ee0 [ 231.724007][ T4765] do_syscall_64+0x57/0xf0 [ 231.724034][ T4765] ? clear_bhb_loop+0x50/0xa0 [ 231.724056][ T4765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.724078][ T4765] RIP: 0033:0x7f4c8139e159 [ 231.724095][ T4765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.724113][ T4765] RSP: 002b:00007f4c82226fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 231.724133][ T4765] RAX: ffffffffffffffda RBX: 00007f4c81625fa0 RCX: 00007f4c8139e159 [ 231.724148][ T4765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 231.724170][ T4765] RBP: 00007f4c81435024 R08: 0000000000000000 R09: 0000000000000000 [ 231.724185][ T4765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.724198][ T4765] R13: 00007f4c81626038 R14: 00007f4c81625fa0 R15: 00007ffe998f2048 [ 231.724216][ T4765] [ 231.724240][ T4765] syz.8.1314: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 231.753067][ T4763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1313'. [ 231.757206][ T312] usb 2-1: device descriptor read/64, error -71 [ 231.782852][ T4765] ,cpuset= [ 231.812945][ T599] usb 3-1: device descriptor read/64, error -71 [ 231.853417][ T4765] syz8 [ 232.141022][ T312] usb 2-1: device descriptor read/64, error -71 [ 232.156950][ T4765] ,mems_allowed=0 [ 232.160627][ T4765] CPU: 0 UID: 0 PID: 4765 Comm: syz.8.1314 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 232.160653][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.160665][ T4765] Call Trace: [ 232.160671][ T4765] [ 232.160679][ T4765] __dump_stack+0x21/0x30 [ 232.160708][ T4765] dump_stack_lvl+0x140/0x1c0 [ 232.160733][ T4765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 232.160760][ T4765] dump_stack+0x19/0x20 [ 232.160784][ T4765] warn_alloc+0x1e7/0x2c0 [ 232.160810][ T4765] ? __cfi_warn_alloc+0x10/0x10 [ 232.160834][ T4765] ? __get_vm_area_node+0x211/0x390 [ 232.160862][ T4765] ? __get_vm_area_node+0x211/0x390 [ 232.160888][ T4765] __vmalloc_node_range_noprof+0x365/0x1300 [ 232.160920][ T4765] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 232.160949][ T4765] ? kasan_save_alloc_info+0x3a/0x50 [ 232.160966][ T4765] ? __kasan_slab_alloc+0x73/0x90 [ 232.160988][ T4765] ? arch_dup_task_struct+0x5b/0xe0 [ 232.161015][ T4765] ? __asan_memcpy+0x5a/0x80 [ 232.161034][ T4765] dup_task_struct+0x5d6/0xd80 [ 232.161057][ T4765] ? copy_process+0x57c/0x3350 [ 232.161084][ T4765] ? _raw_spin_lock_irq+0x93/0x120 [ 232.161112][ T4765] ? copy_process+0x3350/0x3350 [ 232.161135][ T4765] ? __kasan_check_write+0x18/0x20 [ 232.161154][ T4765] copy_process+0x57c/0x3350 [ 232.161201][ T4765] ? __cfi_futex_wake_mark+0x10/0x10 [ 232.161227][ T4765] ? futex_wake+0x666/0x950 [ 232.161252][ T4765] ? __cfi_copy_process+0x10/0x10 [ 232.161284][ T4765] ? find_vma+0xd3/0x120 [ 232.161303][ T4765] kernel_clone+0x233/0x810 [ 232.161327][ T4765] ? __cfi_kernel_clone+0x10/0x10 [ 232.161350][ T4765] ? do_futex+0x32a/0x510 [ 232.161376][ T4765] __x64_sys_clone+0x1b7/0x230 [ 232.161400][ T4765] ? __cfi___x64_sys_clone+0x10/0x10 [ 232.161426][ T4765] ? __kasan_check_write+0x18/0x20 [ 232.161445][ T4765] ? fpregs_restore_userregs+0x11c/0x260 [ 232.161468][ T4765] ? switch_fpu_return+0x12/0x20 [ 232.161490][ T4765] x64_sys_call+0x2b3c/0x2ee0 [ 232.161507][ T4765] do_syscall_64+0x57/0xf0 [ 232.161532][ T4765] ? clear_bhb_loop+0x50/0xa0 [ 232.161553][ T4765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 232.161574][ T4765] RIP: 0033:0x7f4c8139e159 [ 232.161590][ T4765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.161605][ T4765] RSP: 002b:00007f4c82226fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 232.161624][ T4765] RAX: ffffffffffffffda RBX: 00007f4c81625fa0 RCX: 00007f4c8139e159 [ 232.161637][ T4765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 232.161649][ T4765] RBP: 00007f4c81435024 R08: 0000000000000000 R09: 0000000000000000 [ 232.161660][ T4765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.161672][ T4765] R13: 00007f4c81626038 R14: 00007f4c81625fa0 R15: 00007ffe998f2048 [ 232.161688][ T4765] [ 232.161695][ T4765] Mem-Info: [ 232.187424][ T36] audit: type=1400 audit(1788461728.030:18983): avc: denied { setattr } for pid=4766 comm="syz.3.1315" name="NETLINK" dev="sockfs" ino=53761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.189698][ T4765] active_anon:24339 inactive_anon:400 isolated_anon:0 [ 232.189698][ T4765] active_file:21926 inactive_file:2788 isolated_file:0 [ 232.189698][ T4765] unevictable:0 dirty:67 writeback:0 [ 232.189698][ T4765] slab_reclaimable:25323 slab_unreclaimable:58869 [ 232.189698][ T4765] mapped:25225 shmem:15618 pagetables:1086 [ 232.189698][ T4765] sec_pagetables:0 bounce:0 [ 232.189698][ T4765] kernel_misc_reclaimable:0 [ 232.189698][ T4765] free:1495136 free_pcp:2244 free_cma:0 [ 232.204423][ T599] usb 3-1: device descriptor read/64, error -71 [ 232.211560][ T4765] Node 0 active_anon:97356kB inactive_anon:1600kB active_file:87704kB inactive_file:11152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100900kB dirty:268kB writeback:0kB shmem:62472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6832kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no [ 232.385018][ T312] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 232.391711][ T4765] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963368kB mlocked:0kB bounce:0kB free_pcp:5204kB local_pcp:5204kB free_cma:0kB [ 232.475263][ T599] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 232.535467][ T4765] lowmem_reserve[]: [ 232.605674][ T312] usb 2-1: device descriptor read/64, error -71 [ 232.618736][ T4765] 0 3921 3921 [ 232.622174][ T4765] Normal free:3022080kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97440kB inactive_anon:1600kB active_file:87732kB inactive_file:11104kB unevictable:0kB writepending:372kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4368kB local_pcp:2984kB free_cma:0kB [ 232.653798][ T4765] lowmem_reserve[]: 0 0 0 [ 232.658258][ T4765] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 232.673905][ T4765] Normal: 3*4kB (ME) 238*8kB (UME) 298*16kB (ME) 2190*32kB (UME) 814*64kB (UME) 245*128kB (UME) 90*256kB (UME) 46*512kB (UME) 21*1024kB (UME) 14*2048kB (UM) 675*4096kB (M) = 3021788kB [ 232.692290][ T4765] 40725 total pagecache pages [ 232.696093][ T599] usb 3-1: device descriptor read/64, error -71 [ 232.697077][ T4765] 402 pages in swap cache [ 232.707636][ T4765] Free swap = 122580kB [ 232.711789][ T4765] Total swap = 124996kB [ 232.715976][ T4765] 2097051 pages RAM [ 232.719796][ T4765] 0 pages HighMem/MovableOnly [ 232.724485][ T4765] 352243 pages reserved [ 232.728692][ T4765] 0 pages cma reserved [ 232.735006][ T4765] Memory allocations: [ 232.739051][ T4765] 0 B 0 init/main.c:1477 func:do_initcalls [ 232.746298][ T4765] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 232.754387][ T4765] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 232.762158][ T4765] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 232.770151][ T4765] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 232.778129][ T4765] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 232.787338][ T4765] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 232.795268][ T4765] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 232.803246][ T4765] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 232.811224][ T4765] 0 B 0 init/initramfs.c:101 func:find_link [ 232.840538][ T4773] bridge_slave_1: mtu greater than device maximum [ 232.856782][ T312] usb 2-1: device descriptor read/64, error -71 [ 232.929515][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.938630][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.946808][ T599] usb 3-1: device descriptor read/64, error -71 [ 232.957717][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.968259][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.973939][ T312] usb usb2-port1: attempt power cycle [ 233.047830][ T36] audit: type=1400 audit(1788461728.897:18984): avc: denied { map } for pid=4786 comm="syz.8.1320" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.071135][ T599] usb usb3-port1: attempt power cycle [ 233.100542][ T4787] kernel profiling enabled (shift: 5) [ 233.121707][ T36] audit: type=1400 audit(1788461728.967:18985): avc: denied { shutdown } for pid=4786 comm="syz.8.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.318269][ T312] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 233.339310][ T312] usb 2-1: device descriptor read/8, error -71 [ 233.418411][ T599] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 233.439663][ T599] usb 3-1: device descriptor read/8, error -71 [ 233.469730][ T312] usb 2-1: device descriptor read/8, error -71 [ 233.522739][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.531382][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.542342][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.550983][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.570307][ T599] usb 3-1: device descriptor read/8, error -71 [ 233.709425][ T312] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 233.730722][ T312] usb 2-1: device descriptor read/8, error -71 [ 233.809858][ T599] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 233.831786][ T599] usb 3-1: device descriptor read/8, error -71 a [ 233.862576][ T312] usb 2-1: device descriptor read/8, error -71 |-|kF[(}Dfl_F٨ ~{cVaV]~Cw֑, [ 233.961488][ T599] usb 3-1: device descriptor read/8, error -71 [ 233.970573][ T312] usb usb2-port1: unable to enumerate USB device [ 234.072315][ T599] usb usb3-port1: unable to enumerate USB device [ 234.179596][ T4812] random: crng reseeded on system resumption [ 234.258383][ T36] audit: type=1400 audit(1788461730.093:18986): avc: denied { create } for pid=4817 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 234.495362][ T10] rust_binder: 4833: undelivered TRANSACTION_COMPLETE [ 234.599483][ T36] audit: type=1400 audit(1788461730.432:18987): avc: denied { getopt } for pid=4835 comm="syz.1.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.622749][ T312] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 234.657769][ T4839] netlink: 'syz.1.1338': attribute type 27 has an invalid length. [ 234.700095][ T4841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'. [ 234.775373][ T312] usb 3-1: device descriptor read/64, error -71 [ 234.887265][ T4851] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1343'. [ 235.020408][ T312] usb 3-1: device descriptor read/64, error -71 [ 235.264719][ T312] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 235.293346][ T36] audit: type=1400 audit(1788461731.130:18988): avc: denied { read } for pid=4864 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.345056][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 235.405077][ T312] usb 3-1: device descriptor read/64, error -71 [ 235.651728][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1349'. [ 235.675975][ T312] usb 3-1: device descriptor read/64, error -71 [ 235.786434][ T312] usb usb3-port1: attempt power cycle [ 236.137468][ T312] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 236.158551][ T312] usb 3-1: device descriptor read/8, error -71 [ 236.250791][ T4882] EXT4-fs: dax option not supported [ 236.256976][ T36] audit: type=1400 audit(1788461732.087:18989): avc: denied { mount } for pid=4881 comm="syz.8.1353" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 236.319118][ T312] usb 3-1: device descriptor read/8, error -71 [ 236.359577][ T4886] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 236.374765][ T4886] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 236.394706][ T4894] 9pnet_fd: Insufficient options for proto=fd [ 236.536344][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.544834][ T10] usb 9-1: new low-speed USB device number 72 using dummy_hcd [ 236.553433][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.558897][ T312] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 236.590040][ T312] usb 3-1: device descriptor read/8, error -71 [ 236.689508][ T10] usb 9-1: device descriptor read/64, error -71 [ 236.740694][ T312] usb 3-1: device descriptor read/8, error -71 [ 236.819689][ T444] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 236.850019][ T312] usb usb3-port1: unable to enumerate USB device [ 236.940318][ T10] usb 9-1: device descriptor read/64, error -71 [ 236.970268][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 236.976866][ T444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.987953][ T444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.997978][ T444] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 237.007088][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.016112][ T444] usb 2-1: config 0 descriptor?? [ 237.180831][ T10] usb 9-1: new low-speed USB device number 73 using dummy_hcd [ 237.252268][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.260932][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.311254][ T10] usb 9-1: device descriptor read/64, error -71 [ 237.404975][ T4917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1365'. [ 237.430966][ T444] savu 0003:1E7D:2D5A.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 237.465176][ T4917] team_slave_1: entered promiscuous mode [ 237.471031][ T4917] team_slave_1: entered allmulticast mode [ 237.552530][ T10] usb 9-1: device descriptor read/64, error -71 [ 237.672515][ T10] usb usb9-port1: attempt power cycle [ 237.973410][ T4952] netlink: 'syz.3.1371': attribute type 9 has an invalid length. [ 238.006681][ T4954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.016311][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.024172][ T10] usb 9-1: new low-speed USB device number 74 using dummy_hcd [ 238.044718][ T10] usb 9-1: device descriptor read/8, error -71 [ 238.175136][ T10] usb 9-1: device descriptor read/8, error -71 [ 238.235690][ T312] usb 2-1: USB disconnect, device number 42 [ 238.424808][ T10] usb 9-1: new low-speed USB device number 75 using dummy_hcd [ 238.445929][ T10] usb 9-1: device descriptor read/8, error -71 [ 238.548993][ T36] audit: type=1400 audit(1788461734.379:18990): avc: denied { write } for pid=4958 comm="syz.3.1374" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 238.559616][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.581445][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.588045][ T10] usb 9-1: device descriptor read/8, error -71 [ 238.594635][ T4959] input: syz1 as /devices/virtual/input/input74 [ 238.655591][ T3360] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 238.705824][ T10] usb usb9-port1: unable to enumerate USB device [ 238.785923][ T3360] usb 2-1: device descriptor read/64, error -71 [ 239.026672][ T3360] usb 2-1: device descriptor read/64, error -71 [ 239.123612][ T4962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.132532][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.132649][ T4962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.145723][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.277492][ T3360] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 239.300227][ T36] audit: type=1400 audit(1788461735.127:18991): avc: denied { mount } for pid=4965 comm="syz.8.1377" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 239.417887][ T3360] usb 2-1: device descriptor read/64, error -71 [ 239.428829][ T36] audit: type=1400 audit(1788461735.257:18992): avc: denied { map } for pid=4975 comm="syz.8.1380" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.658649][ T3360] usb 2-1: device descriptor read/64, error -71 [ 239.680175][ T4981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.689163][ T4981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.708805][ T31] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 239.769099][ T3360] usb usb2-port1: attempt power cycle [ 239.859240][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 239.865553][ T31] usb 9-1: config 6 has an invalid interface number: 251 but max is 1 [ 239.874144][ T31] usb 9-1: config 6 has an invalid interface number: 9 but max is 1 [ 239.882205][ T31] usb 9-1: config 6 has no interface number 0 [ 239.888302][ T31] usb 9-1: config 6 has no interface number 1 [ 239.894473][ T31] usb 9-1: config 6 interface 251 has no altsetting 0 [ 239.901324][ T31] usb 9-1: config 6 interface 9 has no altsetting 0 [ 239.909307][ T31] usb 9-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 239.918975][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.927035][ T31] usb 9-1: Product: syz [ 239.931257][ T31] usb 9-1: Manufacturer: syz [ 239.935866][ T31] usb 9-1: SerialNumber: syz [ 240.120045][ T3360] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 240.141190][ T3360] usb 2-1: device descriptor read/8, error -71 [ 240.149236][ T36] audit: type=1400 audit(1788461735.964:18993): avc: denied { mount } for pid=4977 comm="syz.8.1381" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 240.271658][ T3360] usb 2-1: device descriptor read/8, error -71 [ 240.406336][ T4996] syz.2.1388(4996): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 240.511260][ T3360] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 240.532463][ T3360] usb 2-1: device descriptor read/8, error -71 [ 240.662743][ T3360] usb 2-1: device descriptor read/8, error -71 [ 240.671862][ T65] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 240.685908][ T36] audit: type=1400 audit(1788461736.503:18994): avc: denied { unmount } for pid=1930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 240.772265][ T3360] usb usb2-port1: unable to enumerate USB device [ 240.822212][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 240.828717][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.839229][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.849374][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 240.862515][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.870650][ T65] usb 3-1: SerialNumber: syz [ 240.878460][ T65] usb 3-1: 0:2 : does not exist [ 240.897822][ T5001] FAULT_INJECTION: forcing a failure. [ 240.897822][ T5001] name failslab, interval 1, probability 0, space 0, times 0 [ 240.910750][ T5001] CPU: 0 UID: 0 PID: 5001 Comm: syz.8.1390 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 240.910793][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.910810][ T5001] Call Trace: [ 240.910820][ T5001] [ 240.910831][ T5001] __dump_stack+0x21/0x30 [ 240.910958][ T5001] dump_stack_lvl+0x140/0x1c0 [ 240.910992][ T5001] ? __cfi_dump_stack_lvl+0x10/0x10 [ 240.911027][ T5001] ? ref_tracker_alloc+0x356/0x5b0 [ 240.911182][ T5001] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 240.911216][ T5001] ? __netlink_kernel_create+0x173/0x8a0 [ 240.911336][ T5001] ? genl_pernet_init+0xb8/0x170 [ 240.911361][ T5001] dump_stack+0x19/0x20 [ 240.911397][ T5001] should_fail_ex+0x3c2/0x510 [ 240.911428][ T5001] ? __netlink_kernel_create+0x2bb/0x8a0 [ 240.911462][ T5001] should_failslab+0xac/0x100 [ 240.911563][ T5001] __kmalloc_noprof+0x69/0x510 [ 240.911623][ T5001] ? sock_init_data_uid+0x5da/0x870 [ 240.911721][ T5001] ? __netlink_kernel_create+0x2bb/0x8a0 [ 240.911757][ T5001] __netlink_kernel_create+0x2bb/0x8a0 [ 240.911790][ T5001] ? __netlink_kernel_create+0x6ff/0x8a0 [ 240.911823][ T5001] ? __cfi___netlink_kernel_create+0x10/0x10 [ 240.911858][ T5001] ? __asan_memcpy+0x5a/0x80 [ 240.911885][ T5001] genl_pernet_init+0xb8/0x170 [ 240.911908][ T5001] ? __cfi_genl_pernet_init+0x10/0x10 [ 240.911931][ T5001] ? rtnetlink_net_init+0xbf/0x140 [ 240.911992][ T5001] ? __cfi_genl_rcv+0x10/0x10 [ 240.912014][ T5001] ? __cfi_genl_bind+0x10/0x10 [ 240.912036][ T5001] ? __cfi_genl_unbind+0x10/0x10 [ 240.912057][ T5001] ? __cfi_genl_release+0x10/0x10 [ 240.912079][ T5001] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 240.912104][ T5001] ? __cfi_rtnetlink_bind+0x10/0x10 [ 240.912131][ T5001] ? __kasan_check_write+0x18/0x20 [ 240.912156][ T5001] ? __mutex_init+0xa6/0x1a0 [ 240.912373][ T5001] ops_init+0x302/0x5d0 [ 240.912421][ T5001] ? __kasan_check_write+0x18/0x20 [ 240.912448][ T5001] ? rwsem_read_trylock+0x275/0x5a0 [ 240.912489][ T5001] setup_net+0x227/0x9b0 [ 240.912550][ T5001] ? copy_net_ns+0xa20/0xa20 [ 240.912589][ T5001] ? down_read_killable+0x7f/0x100 [ 240.912693][ T5001] ? __cfi_down_read_killable+0x10/0x10 [ 240.912728][ T5001] copy_net_ns+0x4fc/0xa20 [ 240.912767][ T5001] create_new_namespaces+0x390/0x6f0 [ 240.912863][ T5001] unshare_nsproxy_namespaces+0x124/0x180 [ 240.912904][ T5001] ksys_unshare+0x4f9/0x920 [ 240.912983][ T5001] ? fput+0x1a4/0x230 [ 240.913048][ T5001] ? __cfi_ksys_unshare+0x10/0x10 [ 240.913083][ T5001] ? __kasan_check_write+0x18/0x20 [ 240.913111][ T5001] __x64_sys_unshare+0x3c/0x50 [ 240.913145][ T5001] x64_sys_call+0x2998/0x2ee0 [ 240.913170][ T5001] do_syscall_64+0x57/0xf0 [ 240.913230][ T5001] ? clear_bhb_loop+0x50/0xa0 [ 240.913301][ T5001] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 240.913331][ T5001] RIP: 0033:0x7f4c8139e159 [ 240.913354][ T5001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.913378][ T5001] RSP: 002b:00007f4c82206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 240.913406][ T5001] RAX: ffffffffffffffda RBX: 00007f4c81626090 RCX: 00007f4c8139e159 [ 240.913426][ T5001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062000000 [ 240.913444][ T5001] RBP: 00007f4c81435024 R08: 0000000000000000 R09: 0000000000000000 [ 240.913461][ T5001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.913477][ T5001] R13: 00007f4c81626128 R14: 00007f4c81626090 R15: 00007ffe998f2048 [ 240.913499][ T5001] [ 241.285386][ T5003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.294963][ T5003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.685603][ T65] usb 3-1: USB disconnect, device number 29 [ 241.696495][ T1956] udevd[1956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.785082][ T312] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 241.935521][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 241.942268][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.950907][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.961112][ T312] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 241.971992][ T312] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.984509][ T312] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 241.993809][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.001861][ T312] usb 2-1: Product: syz [ 242.006164][ T312] usb 2-1: Manufacturer: syz [ 242.010794][ T312] usb 2-1: SerialNumber: syz [ 242.202527][ T5024] FAULT_INJECTION: forcing a failure. [ 242.202527][ T5024] name failslab, interval 1, probability 0, space 0, times 0 [ 242.215435][ T5024] CPU: 1 UID: 0 PID: 5024 Comm: syz.2.1399 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 242.215467][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.215479][ T5024] Call Trace: [ 242.215486][ T5024] [ 242.215495][ T5024] __dump_stack+0x21/0x30 [ 242.215525][ T5024] dump_stack_lvl+0x140/0x1c0 [ 242.215550][ T5024] ? __cfi_dump_stack_lvl+0x10/0x10 [ 242.215577][ T5024] dump_stack+0x19/0x20 [ 242.215601][ T5024] should_fail_ex+0x3c2/0x510 [ 242.215622][ T5024] should_failslab+0xac/0x100 [ 242.215645][ T5024] kmem_cache_alloc_noprof+0x42/0x410 [ 242.215666][ T5024] ? security_file_alloc+0x49/0x220 [ 242.215754][ T5024] ? kasan_save_alloc_info+0x3a/0x50 [ 242.215772][ T5024] security_file_alloc+0x49/0x220 [ 242.215788][ T5024] init_file+0x9e/0x210 [ 242.215811][ T5024] alloc_empty_file+0xd9/0x270 [ 242.215834][ T5024] ? _raw_spin_unlock+0x45/0x60 [ 242.215862][ T5024] alloc_file_pseudo+0x142/0x1f0 [ 242.215886][ T5024] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 242.215910][ T5024] ? _raw_spin_unlock+0x45/0x60 [ 242.215937][ T5024] anon_inode_getfile+0xaa/0x190 [ 242.216007][ T5024] do_signalfd4+0x1e9/0x490 [ 242.216032][ T5024] ? __kasan_check_write+0x18/0x20 [ 242.216050][ T5024] __x64_sys_signalfd+0x132/0x180 [ 242.216076][ T5024] ? __cfi___x64_sys_signalfd+0x10/0x10 [ 242.216103][ T5024] ? switch_fpu_return+0x12/0x20 [ 242.216157][ T5024] x64_sys_call+0x316/0x2ee0 [ 242.216182][ T5024] do_syscall_64+0x57/0xf0 [ 242.216208][ T5024] ? clear_bhb_loop+0x50/0xa0 [ 242.216228][ T5024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 242.216249][ T5024] RIP: 0033:0x7f199f99e159 [ 242.216264][ T5024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.216279][ T5024] RSP: 002b:00007f19a0893028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 242.216328][ T5024] RAX: ffffffffffffffda RBX: 00007f199fc25fa0 RCX: 00007f199f99e159 [ 242.216346][ T5024] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 242.216363][ T5024] RBP: 00007f199fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 242.216378][ T5024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.216394][ T5024] R13: 00007f199fc26038 R14: 00007f199fc25fa0 R15: 00007ffeb723bce8 [ 242.216422][ T5024] [ 242.256587][ T36] audit: type=1400 audit(1788461738.068:18995): avc: denied { setattr } for pid=5023 comm="syz.2.1399" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 242.263223][ T312] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 242.404552][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.435828][ T312] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 242.455160][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.512618][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1400'. [ 242.526920][ T312] usb 2-1: 2:1 : can't get High Capability descriptor [ 242.578367][ T5033] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1402'. [ 242.683474][ T5038] FAULT_INJECTION: forcing a failure. [ 242.683474][ T5038] name fail_futex, interval 1, probability 0, space 0, times 1 [ 242.696362][ T5038] CPU: 0 UID: 0 PID: 5038 Comm: syz.3.1405 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 242.696400][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.696416][ T5038] Call Trace: [ 242.696426][ T5038] [ 242.696436][ T5038] __dump_stack+0x21/0x30 [ 242.696478][ T5038] dump_stack_lvl+0x140/0x1c0 [ 242.696522][ T5038] ? __cfi_dump_stack_lvl+0x10/0x10 [ 242.696555][ T5038] ? unwind_get_return_address+0x51/0x90 [ 242.696678][ T5038] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 242.696752][ T5038] dump_stack+0x19/0x20 [ 242.696775][ T5038] should_fail_ex+0x3c2/0x510 [ 242.696796][ T5038] should_fail+0xf/0x20 [ 242.696867][ T5038] get_futex_key+0x5c4/0x940 [ 242.696936][ T5038] ? __cfi_get_futex_key+0x10/0x10 [ 242.696976][ T5038] ? kasan_save_track+0x4f/0x80 [ 242.697006][ T5038] futex_wake+0x150/0x950 [ 242.697028][ T5038] ? __cfi_futex_wake+0x10/0x10 [ 242.697053][ T5038] ? perf_lock_task_context+0x398/0x450 [ 242.697115][ T5038] ? __perf_event_period+0x490/0x490 [ 242.697143][ T5038] ? mutex_unlock+0x90/0x240 [ 242.697171][ T5038] do_futex+0x37d/0x510 [ 242.697204][ T5038] ? __kasan_check_read+0x15/0x20 [ 242.697222][ T5038] ? __cfi_do_futex+0x10/0x10 [ 242.697244][ T5038] ? __kasan_check_write+0x18/0x20 [ 242.697281][ T5038] mm_release+0x15f/0x300 [ 242.697310][ T5038] ? exit_mm_release+0x50/0x50 [ 242.697339][ T5038] ? futex_exit_release+0x11d/0x1f0 [ 242.697367][ T5038] exit_mm_release+0x29/0x50 [ 242.697387][ T5038] do_exit+0x832/0x2850 [ 242.697442][ T5038] ? futex_wake+0x666/0x950 [ 242.697463][ T5038] ? __cfi_do_exit+0x10/0x10 [ 242.697498][ T5038] ? futex_wait+0x2b8/0x7c0 [ 242.697514][ T5038] ? __cfi_futex_wait+0x10/0x10 [ 242.697530][ T5038] ? __kasan_check_write+0x18/0x20 [ 242.697547][ T5038] ? _raw_spin_lock_irq+0x93/0x120 [ 242.697596][ T5038] do_group_exit+0x21f/0x2f0 [ 242.697626][ T5038] ? __kasan_check_write+0x18/0x20 [ 242.697655][ T5038] ? recalc_sigpending+0x16c/0x1d0 [ 242.697692][ T5038] get_signal+0x134c/0x1490 [ 242.697740][ T5038] arch_do_signal_or_restart+0xbc/0x700 [ 242.697771][ T5038] ? prctl_set_seccomp+0x80/0x80 [ 242.697835][ T5038] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 242.697855][ T5038] syscall_exit_to_user_mode+0x57/0xb0 [ 242.697876][ T5038] do_syscall_64+0x63/0xf0 [ 242.697924][ T5038] ? clear_bhb_loop+0x50/0xa0 [ 242.697951][ T5038] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 242.697981][ T5038] RIP: 0033:0x7f33e1b9e159 [ 242.697996][ T5038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.698011][ T5038] RSP: 002b:00007f33e2a530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 242.698030][ T5038] RAX: fffffffffffffe00 RBX: 00007f33e1e25fa8 RCX: 00007f33e1b9e159 [ 242.698061][ T5038] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33e1e25fa8 [ 242.698077][ T5038] RBP: 00007f33e1e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 242.698092][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.698108][ T5038] R13: 00007f33e1e26038 R14: 00007fff9ebeb220 R15: 00007fff9ebeb308 [ 242.698127][ T5038] [ 243.028387][ T5041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.037021][ T5041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.048815][ T312] usb 2-1: USB disconnect, device number 47 [ 243.129050][ T3360] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 243.282229][ T3360] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 243.291368][ T3360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.299402][ T3360] usb 3-1: Product: syz [ 243.303636][ T3360] usb 3-1: Manufacturer: syz [ 243.308310][ T3360] usb 3-1: SerialNumber: syz [ 243.316115][ T3360] ums-karma 3-1:1.0: USB Mass Storage device detected [ 243.324175][ T3360] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 243.324175][ T3360] Please send a copy of this message to and [ 243.432779][ T36] audit: type=1400 audit(1788461739.245:18996): avc: denied { setattr } for pid=5044 comm="syz.8.1407" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.544062][ T3360] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5 [ 243.574001][ T5053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5053 comm=syz.3.1410 [ 243.588024][ T5053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1410'. [ 243.601791][ T5053] tipc: New replicast peer: 255.255.255.255 [ 243.625945][ T5053] tipc: Enabled bearer , priority 10 [ 243.672441][ T5061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.682193][ T5061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.694290][ T312] usb 3-1: USB disconnect, device number 30 [ 243.901429][ T3360] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 244.051753][ T3360] usb 2-1: Using ep0 maxpacket: 16 [ 244.059669][ T3360] usb 2-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 244.068824][ T3360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.076993][ T3360] usb 2-1: Product: syz [ 244.081192][ T3360] usb 2-1: Manufacturer: syz [ 244.085885][ T3360] usb 2-1: SerialNumber: syz [ 244.905403][ T3360] usb 2-1: MIDIStreaming interface descriptor not found [ 244.916166][ T3360] usb 2-1: USB disconnect, device number 48 [ 244.926595][ T1990] udevd[1990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.966760][ T31] asix 9-1:6.251: probe with driver asix failed with error -22 [ 244.976313][ T31] asix 9-1:6.9: probe with driver asix failed with error -22 [ 245.053249][ T5082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.062366][ T5082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.634813][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.644079][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.294488][ T5093] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.1422' sets config #1986356271 [ 246.331795][ T31] hid (null): unknown global tag 0xc [ 246.337950][ T31] hid-generic 0004:0800:0000.0017: unknown main item tag 0x6 [ 246.345995][ T31] hid-generic 0004:0800:0000.0017: unknown global tag 0xc [ 246.353857][ T31] hid-generic 0004:0800:0000.0017: item 0 0 1 12 parsing failed [ 246.361836][ T31] hid-generic 0004:0800:0000.0017: probe with driver hid-generic failed with error -22 [ 246.387197][ T5097] futex_wake_op: syz.3.1424 tries to shift op by 144; fix this program [ 246.398315][ T36] audit: type=1400 audit(1788461742.206:18997): avc: denied { map } for pid=5096 comm="syz.3.1424" path="/259/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.457939][ T5104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.467259][ T5104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.699201][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 246.849580][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 246.857960][ T31] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 246.868488][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.881698][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 246.890957][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.904692][ T31] usb 2-1: config 0 descriptor?? [ 246.913609][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 246.919556][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 246.929122][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 248.029938][ T5122] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57872 sclass=netlink_xfrm_socket pid=5122 comm=syz.2.1434 [ 248.283526][ T312] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 248.435268][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.454058][ T312] usb 3-1: not running at top speed; connect to a high speed hub [ 248.464557][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.474940][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.487178][ T312] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 248.496424][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.504711][ T312] usb 3-1: Product: ᰞ [ 248.509026][ T312] usb 3-1: Manufacturer: я [ 248.597877][ T5128] rust_binder: Write failure EINVAL in pid:579 [ 248.618809][ T5130] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1437'. [ 249.299401][ T5158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.308803][ T5158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.587145][ T31] usb 2-1: USB disconnect, device number 49 [ 249.919330][ T36] audit: type=1400 audit(1788461745.717:18998): avc: denied { read write } for pid=5178 comm="syz.8.1450" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 249.944955][ T36] audit: type=1400 audit(1788461745.717:18999): avc: denied { open } for pid=5178 comm="syz.8.1450" path="/214/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 250.718564][ T5193] netlink: 'syz.1.1455': attribute type 4 has an invalid length. [ 250.726402][ T5193] netlink: 'syz.1.1455': attribute type 6 has an invalid length. [ 250.734199][ T5193] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1455'. [ 250.810567][ T5201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=554 sclass=netlink_route_socket pid=5201 comm=syz.8.1459 [ 250.834337][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1459'. [ 250.890356][ T36] audit: type=1400 audit(1788461746.674:19000): avc: denied { map } for pid=5202 comm="syz.8.1460" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 250.974207][ T312] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 250.997081][ T312] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 251.014395][ T312] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 251.020882][ T3360] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 251.031684][ T312] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 251.052042][ T312] usb 3-1: USB disconnect, device number 31 [ 251.068112][ T1825] udevd[1825]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 251.094925][ T509] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.181128][ T3360] usb 2-1: Using ep0 maxpacket: 32 [ 251.190816][ T3360] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 251.211246][ T3360] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.231268][ T3360] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.250676][ T3360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.261522][ T3360] usb 2-1: config 0 descriptor?? [ 251.281703][ T3360] hub 2-1:0.0: bad descriptor, ignoring hub [ 251.287658][ T3360] hub 2-1:0.0: probe with driver hub failed with error -5 [ 251.301808][ T3360] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 251.923664][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.932221][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.659059][ T5215] FAULT_INJECTION: forcing a failure. [ 252.659059][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 252.671853][ T5215] CPU: 0 UID: 0 PID: 5215 Comm: syz.8.1464 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 252.671892][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.671906][ T5215] Call Trace: [ 252.671915][ T5215] [ 252.671924][ T5215] __dump_stack+0x21/0x30 [ 252.671964][ T5215] dump_stack_lvl+0x140/0x1c0 [ 252.671999][ T5215] ? __cfi_dump_stack_lvl+0x10/0x10 [ 252.672034][ T5215] ? __kasan_check_write+0x18/0x20 [ 252.672061][ T5215] ? copy_mm+0x307/0x1da0 [ 252.672092][ T5215] dump_stack+0x19/0x20 [ 252.672124][ T5215] should_fail_ex+0x3c2/0x510 [ 252.672154][ T5215] should_failslab+0xac/0x100 [ 252.672185][ T5215] kmem_cache_alloc_noprof+0x42/0x410 [ 252.672210][ T5215] ? alloc_pid+0xa5/0xb80 [ 252.672330][ T5215] ? __asan_memcpy+0x5a/0x80 [ 252.672356][ T5215] alloc_pid+0xa5/0xb80 [ 252.672385][ T5215] copy_process+0x1467/0x3350 [ 252.672420][ T5215] ? __cfi_copy_process+0x10/0x10 [ 252.672451][ T5215] ? __kmalloc_cache_noprof+0x23c/0x470 [ 252.672478][ T5215] ? __kasan_check_write+0x18/0x20 [ 252.672503][ T5215] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 252.672534][ T5215] vhost_task_create+0x1f7/0x3f0 [ 252.672586][ T5215] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 252.672615][ T5215] ? __cfi_vhost_task_create+0x10/0x10 [ 252.672643][ T5215] ? __cfi_vhost_task_fn+0x10/0x10 [ 252.672669][ T5215] ? __kasan_check_write+0x18/0x20 [ 252.672693][ T5215] ? mutex_lock+0x97/0x1d0 [ 252.672721][ T5215] ? __cfi_mutex_lock+0x10/0x10 [ 252.672747][ T5215] ? kernel_text_address+0xa9/0xe0 [ 252.672790][ T5215] kvm_mmu_post_init_vm+0x161/0x300 [ 252.672827][ T5215] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 252.672874][ T5215] ? _parse_integer_limit+0x195/0x1e0 [ 252.672936][ T5215] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 252.672970][ T5215] ? kstrtoull+0x13b/0x1e0 [ 252.673022][ T5215] ? kstrtouint+0x78/0xf0 [ 252.673048][ T5215] ? ioctl_has_perm+0x1bc/0x500 [ 252.673102][ T5215] ? __asan_memcpy+0x5a/0x80 [ 252.673128][ T5215] ? ioctl_has_perm+0x408/0x500 [ 252.673153][ T5215] ? has_cap_mac_admin+0xd0/0xd0 [ 252.673187][ T5215] ? __kasan_check_write+0x18/0x20 [ 252.673211][ T5215] ? mutex_lock_killable+0x97/0x1d0 [ 252.673240][ T5215] ? __cfi_mutex_lock_killable+0x10/0x10 [ 252.673267][ T5215] ? proc_fail_nth_write+0x184/0x220 [ 252.673348][ T5215] kvm_vcpu_ioctl+0xa43/0x1000 [ 252.673381][ T5215] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 252.673406][ T5215] ? __cfi_vfs_write+0x10/0x10 [ 252.673432][ T5215] ? __kasan_check_write+0x18/0x20 [ 252.673457][ T5215] ? mutex_unlock+0x90/0x240 [ 252.673484][ T5215] ? __cfi_mutex_unlock+0x10/0x10 [ 252.673513][ T5215] ? __fget_files+0x2bc/0x330 [ 252.673594][ T5215] ? bpf_lsm_file_ioctl+0xd/0x20 [ 252.673684][ T5215] ? security_file_ioctl+0x3e/0x110 [ 252.673706][ T5215] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 252.673729][ T5215] __se_sys_ioctl+0x126/0x1b0 [ 252.673789][ T5215] __x64_sys_ioctl+0x7f/0xa0 [ 252.673820][ T5215] x64_sys_call+0x1878/0x2ee0 [ 252.673844][ T5215] do_syscall_64+0x57/0xf0 [ 252.673880][ T5215] ? clear_bhb_loop+0x50/0xa0 [ 252.673909][ T5215] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.673937][ T5215] RIP: 0033:0x7f4c8139e159 [ 252.673958][ T5215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.673982][ T5215] RSP: 002b:00007f4c82227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.674009][ T5215] RAX: ffffffffffffffda RBX: 00007f4c81625fa0 RCX: 00007f4c8139e159 [ 252.674029][ T5215] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 252.674045][ T5215] RBP: 00007f4c82227090 R08: 0000000000000000 R09: 0000000000000000 [ 252.674062][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.674077][ T5215] R13: 00007f4c81626038 R14: 00007f4c81625fa0 R15: 00007ffe998f2048 [ 252.674099][ T5215] [ 253.149303][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.852620][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 253.918188][ T3360] usb 2-1: USB disconnect, device number 50 [ 254.015574][ T5238] X.509: Couldn't decode AuthKeyIdentifier [ 254.139114][ T5241] binder: Unknown parameter 'dirsync 0˴Fl [ 254.139114][ T5241] '?-3`A[2[8"j^ZoerXI@U#<EJz]Koif#%э+'xQYt[' [ 254.142239][ T36] audit: type=1400 audit(1788461749.926:19001): avc: denied { remount } for pid=5239 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.481172][ T5249] input: syz1 as /devices/virtual/input/input78 [ 254.564671][ T5257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.573372][ T5257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.595192][ T5257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.604629][ T5257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.615429][ T5257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.624873][ T5257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.740065][ T312] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 254.890439][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 254.896931][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.907361][ T312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.918618][ T312] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.927972][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.936219][ T312] usb 2-1: Product: syz [ 254.940713][ T312] usb 2-1: Manufacturer: syz [ 254.945399][ T312] usb 2-1: SerialNumber: syz [ 255.164481][ T312] usb 2-1: 0:2 : does not exist [ 255.176155][ T312] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 255.186298][ T5260] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=5260 comm=syz.8.1482 [ 255.201329][ T312] usb 2-1: USB disconnect, device number 51 [ 255.223383][ T5260] FAULT_INJECTION: forcing a failure. [ 255.223383][ T5260] name failslab, interval 1, probability 0, space 0, times 0 [ 255.236601][ T1825] udevd[1825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 255.251418][ T5260] CPU: 0 UID: 0 PID: 5260 Comm: syz.8.1482 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 255.251532][ T5260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.251575][ T5260] Call Trace: [ 255.251605][ T5260] [ 255.251636][ T5260] __dump_stack+0x21/0x30 [ 255.251760][ T5260] dump_stack_lvl+0x140/0x1c0 [ 255.251853][ T5260] ? __cfi_dump_stack_lvl+0x10/0x10 [ 255.251956][ T5260] ? avc_has_perm_noaudit+0x289/0x360 [ 255.252136][ T5260] dump_stack+0x19/0x20 [ 255.252221][ T5260] should_fail_ex+0x3c2/0x510 [ 255.252305][ T5260] should_failslab+0xac/0x100 [ 255.252395][ T5260] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 255.252422][ T5260] ? x64_sys_call+0x2608/0x2ee0 [ 255.252444][ T5260] ? do_syscall_64+0x57/0xf0 [ 255.252523][ T5260] ? __d_alloc+0x42/0x8c0 [ 255.252603][ T5260] ? expand_files+0xda/0x6f0 [ 255.252702][ T5260] __d_alloc+0x42/0x8c0 [ 255.252766][ T5260] d_alloc_pseudo+0x23/0xc0 [ 255.252838][ T5260] alloc_file_pseudo+0xde/0x1f0 [ 255.252933][ T5260] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 255.253020][ T5260] ? _raw_spin_unlock+0x45/0x60 [ 255.253110][ T5260] sock_alloc_file+0xbe/0x2b0 [ 255.253217][ T5260] __sys_socket+0x14c/0x1c0 [ 255.253288][ T5260] __x64_sys_socket+0x7e/0x90 [ 255.253354][ T5260] x64_sys_call+0x2608/0x2ee0 [ 255.253417][ T5260] do_syscall_64+0x57/0xf0 [ 255.253512][ T5260] ? clear_bhb_loop+0x50/0xa0 [ 255.253595][ T5260] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 255.253668][ T5260] RIP: 0033:0x7f4c8139e159 [ 255.253730][ T5260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.253786][ T5260] RSP: 002b:00007f4c82227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 255.253853][ T5260] RAX: ffffffffffffffda RBX: 00007f4c81625fa0 RCX: 00007f4c8139e159 [ 255.253906][ T5260] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 255.253964][ T5260] RBP: 00007f4c81435024 R08: 0000000000000000 R09: 0000000000000000 [ 255.254029][ T5260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.254078][ T5260] R13: 00007f4c81626038 R14: 00007f4c81625fa0 R15: 00007ffe998f2048 [ 255.254138][ T5260] [ 255.498990][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.509239][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.313859][ T312] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 256.465419][ T312] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.476507][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.483204][ T312] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 256.492579][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.504311][ T312] usb 2-1: config 0 descriptor?? [ 256.635224][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.643741][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.660392][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.669183][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.114851][ T5269] netlink: 'syz.1.1485': attribute type 4 has an invalid length. [ 257.122819][ T5269] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1485'. [ 257.157480][ T5269] FAULT_INJECTION: forcing a failure. [ 257.157480][ T5269] name failslab, interval 1, probability 0, space 0, times 0 [ 257.190773][ T5269] CPU: 1 UID: 0 PID: 5269 Comm: syz.1.1485 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 257.190817][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.190838][ T5269] Call Trace: [ 257.190846][ T5269] [ 257.190856][ T5269] __dump_stack+0x21/0x30 [ 257.190906][ T5269] dump_stack_lvl+0x140/0x1c0 [ 257.190941][ T5269] ? __cfi_dump_stack_lvl+0x10/0x10 [ 257.190979][ T5269] dump_stack+0x19/0x20 [ 257.191012][ T5269] should_fail_ex+0x3c2/0x510 [ 257.191042][ T5269] should_failslab+0xac/0x100 [ 257.191074][ T5269] __kmalloc_node_noprof+0x69/0x500 [ 257.191101][ T5269] ? __kvmalloc_node_noprof+0x128/0x300 [ 257.191197][ T5269] __kvmalloc_node_noprof+0x128/0x300 [ 257.191222][ T5269] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 257.191247][ T5269] ? __asan_memset+0x39/0x50 [ 257.191272][ T5269] alloc_netdev_mqs+0xaf4/0x13d0 [ 257.191347][ T5269] br_add_bridge+0x3c/0xf0 [ 257.191405][ T5269] br_ioctl_stub+0x5b6/0xcd0 [ 257.191426][ T5269] ? __cfi_br_ioctl_stub+0x10/0x10 [ 257.191443][ T5269] ? selinux_file_ioctl+0x732/0x1480 [ 257.191483][ T5269] ? vfs_write+0xbcf/0xfd0 [ 257.191503][ T5269] ? __kasan_check_write+0x18/0x20 [ 257.191549][ T5269] ? mutex_lock+0x97/0x1d0 [ 257.191577][ T5269] ? __cfi_do_futex+0x10/0x10 [ 257.191610][ T5269] ? mutex_unlock+0x90/0x240 [ 257.191636][ T5269] ? __cfi_br_ioctl_stub+0x10/0x10 [ 257.191659][ T5269] sock_ioctl+0x4dd/0x7e0 [ 257.191682][ T5269] ? __cfi_sock_ioctl+0x10/0x10 [ 257.191722][ T5269] ? __fget_files+0x2bc/0x330 [ 257.191754][ T5269] ? bpf_lsm_file_ioctl+0xd/0x20 [ 257.191789][ T5269] ? security_file_ioctl+0x3e/0x110 [ 257.191807][ T5269] ? __cfi_sock_ioctl+0x10/0x10 [ 257.191833][ T5269] __se_sys_ioctl+0x126/0x1b0 [ 257.191856][ T5269] __x64_sys_ioctl+0x7f/0xa0 [ 257.191878][ T5269] x64_sys_call+0x1878/0x2ee0 [ 257.191894][ T5269] do_syscall_64+0x57/0xf0 [ 257.191920][ T5269] ? clear_bhb_loop+0x50/0xa0 [ 257.191941][ T5269] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.191960][ T5269] RIP: 0033:0x7f3f5c19e159 [ 257.191975][ T5269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.191991][ T5269] RSP: 002b:00007f3f5d078028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.192010][ T5269] RAX: ffffffffffffffda RBX: 00007f3f5c425fa0 RCX: 00007f3f5c19e159 [ 257.192024][ T5269] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000009 [ 257.192036][ T5269] RBP: 00007f3f5c235024 R08: 0000000000000000 R09: 0000000000000000 [ 257.192047][ T5269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.192058][ T5269] R13: 00007f3f5c426038 R14: 00007f3f5c425fa0 R15: 00007ffcb246f088 [ 257.192073][ T5269] [ 257.428161][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.502638][ T5287] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=5287 comm=syz.2.1491 [ 257.520016][ T5287] FAULT_INJECTION: forcing a failure. [ 257.520016][ T5287] name failslab, interval 1, probability 0, space 0, times 0 [ 257.532855][ T5287] CPU: 1 UID: 0 PID: 5287 Comm: syz.2.1491 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 257.532897][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.532914][ T5287] Call Trace: [ 257.532924][ T5287] [ 257.532935][ T5287] __dump_stack+0x21/0x30 [ 257.532983][ T5287] dump_stack_lvl+0x140/0x1c0 [ 257.533021][ T5287] ? __cfi_dump_stack_lvl+0x10/0x10 [ 257.533060][ T5287] dump_stack+0x19/0x20 [ 257.533095][ T5287] should_fail_ex+0x3c2/0x510 [ 257.533127][ T5287] should_failslab+0xac/0x100 [ 257.533158][ T5287] kmem_cache_alloc_noprof+0x42/0x410 [ 257.533185][ T5287] ? __kasan_slab_alloc+0x73/0x90 [ 257.533217][ T5287] ? sk_prot_alloc+0x69/0x3a0 [ 257.533246][ T5287] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 257.533275][ T5287] sk_prot_alloc+0x69/0x3a0 [ 257.533305][ T5287] sk_alloc+0x40/0x590 [ 257.533335][ T5287] __vsock_create+0x3e/0x950 [ 257.533479][ T5287] vsock_create+0x13e/0x460 [ 257.533503][ T5287] __sock_create+0x3a2/0x810 [ 257.533532][ T5287] __sys_socket+0xe1/0x1c0 [ 257.533560][ T5287] __x64_sys_socket+0x7e/0x90 [ 257.533587][ T5287] x64_sys_call+0x2608/0x2ee0 [ 257.533609][ T5287] do_syscall_64+0x57/0xf0 [ 257.533647][ T5287] ? clear_bhb_loop+0x50/0xa0 [ 257.533677][ T5287] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.533706][ T5287] RIP: 0033:0x7f199f99e159 [ 257.533729][ T5287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.533751][ T5287] RSP: 002b:00007f19a0893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 257.533779][ T5287] RAX: ffffffffffffffda RBX: 00007f199fc25fa0 RCX: 00007f199f99e159 [ 257.533809][ T5287] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 257.533826][ T5287] RBP: 00007f199fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 257.533844][ T5287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.533860][ T5287] R13: 00007f199fc26038 R14: 00007f199fc25fa0 R15: 00007ffeb723bce8 [ 257.533883][ T5287] [ 257.534960][ T5285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.542985][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.547259][ T5285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.762552][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 257.777502][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.790621][ T312] usb 2-1: USB disconnect, device number 52 [ 258.037905][ T313] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 258.188233][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 258.194680][ T313] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 258.205260][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.218469][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.227549][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.237028][ T313] usb 3-1: config 0 descriptor?? [ 258.250019][ T313] hub 3-1:0.0: bad descriptor, ignoring hub [ 258.256082][ T313] hub 3-1:0.0: probe with driver hub failed with error -5 [ 258.263783][ T313] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 258.367692][ T5294] input: syz1 as /devices/virtual/input/input79 [ 258.375118][ T312] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 258.539005][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 258.549766][ T312] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.574044][ T312] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.593077][ T312] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 258.618545][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.635469][ T312] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 258.655674][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.670051][ T312] usb 2-1: config 0 descriptor?? [ 258.716955][ T5307] loop0: detected capacity change from 0 to 32768 [ 258.728030][ T1825] udevd[1825]: incorrect linux_raid_member checksum on /dev/loop0 [ 258.841155][ T5314] FAULT_INJECTION: forcing a failure. [ 258.841155][ T5314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.854538][ T5314] CPU: 1 UID: 0 PID: 5314 Comm: syz.8.1503 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 258.854577][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.854594][ T5314] Call Trace: [ 258.854603][ T5314] [ 258.854614][ T5314] __dump_stack+0x21/0x30 [ 258.854663][ T5314] dump_stack_lvl+0x140/0x1c0 [ 258.854700][ T5314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 258.854739][ T5314] ? text_poke_loc_init+0x7d0/0x7d0 [ 258.854774][ T5314] dump_stack+0x19/0x20 [ 258.854809][ T5314] should_fail_ex+0x3c2/0x510 [ 258.854841][ T5314] should_fail_alloc_page+0xec/0x110 [ 258.854876][ T5314] __alloc_pages_noprof+0x1c0/0x7e0 [ 258.855017][ T5314] ? mutex_unlock+0x90/0x240 [ 258.855048][ T5314] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 258.855089][ T5314] ? cpus_read_unlock+0x68/0xa0 [ 258.855115][ T5314] ? static_key_slow_inc+0x25/0x30 [ 258.855187][ T5314] ? kvm_create_lapic+0x137/0x550 [ 258.855222][ T5314] ? kvm_mmu_create+0x18d/0x2b0 [ 258.855257][ T5314] kvm_arch_vcpu_create+0x1e8/0xb90 [ 258.855296][ T5314] kvm_vm_ioctl_create_vcpu+0x3a7/0xab0 [ 258.855336][ T5314] kvm_vm_ioctl+0x7bd/0xc40 [ 258.855373][ T5314] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 258.855409][ T5314] ? ioctl_has_perm+0x1bc/0x500 [ 258.855435][ T5314] ? __asan_memcpy+0x5a/0x80 [ 258.855463][ T5314] ? ioctl_has_perm+0x408/0x500 [ 258.855489][ T5314] ? has_cap_mac_admin+0xd0/0xd0 [ 258.855516][ T5314] ? futex_wait+0x2b8/0x7c0 [ 258.855541][ T5314] ? __cfi_futex_wait+0x10/0x10 [ 258.855590][ T5314] ? selinux_file_ioctl+0x732/0x1480 [ 258.855616][ T5314] ? vfs_write+0xbcf/0xfd0 [ 258.855644][ T5314] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 258.855670][ T5314] ? do_futex+0x32a/0x510 [ 258.855705][ T5314] ? __cfi_do_futex+0x10/0x10 [ 258.855745][ T5314] ? mutex_unlock+0x90/0x240 [ 258.855779][ T5314] ? __fget_files+0x2bc/0x330 [ 258.855812][ T5314] ? bpf_lsm_file_ioctl+0xd/0x20 [ 258.855847][ T5314] ? security_file_ioctl+0x3e/0x110 [ 258.855872][ T5314] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 258.855908][ T5314] __se_sys_ioctl+0x126/0x1b0 [ 258.855940][ T5314] __x64_sys_ioctl+0x7f/0xa0 [ 258.855971][ T5314] x64_sys_call+0x1878/0x2ee0 [ 258.855995][ T5314] do_syscall_64+0x57/0xf0 [ 258.856032][ T5314] ? clear_bhb_loop+0x50/0xa0 [ 258.856061][ T5314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 258.856090][ T5314] RIP: 0033:0x7f4c8139e159 [ 258.856113][ T5314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.856137][ T5314] RSP: 002b:00007f4c82227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.856175][ T5314] RAX: ffffffffffffffda RBX: 00007f4c81625fa0 RCX: 00007f4c8139e159 [ 258.856195][ T5314] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 258.856212][ T5314] RBP: 00007f4c81435024 R08: 0000000000000000 R09: 0000000000000000 [ 258.856229][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.856246][ T5314] R13: 00007f4c81626038 R14: 00007f4c81625fa0 R15: 00007ffe998f2048 [ 258.856270][ T5314] [ 259.393667][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.403019][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.422932][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.441891][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.464948][ T312] hid (null): unknown global tag 0xd [ 259.470345][ T312] hid (null): unknown global tag 0xc [ 259.475718][ T312] hid (null): unknown global tag 0xc [ 259.485402][ T312] hid (null): unknown global tag 0xc [ 259.490754][ T312] hid (null): unknown global tag 0xd [ 259.503358][ T312] hid (null): invalid report_count 56930 [ 259.509140][ T312] hid (null): invalid report_size 1525849174 [ 259.515384][ T312] hid (null): unknown global tag 0xe [ 259.520759][ T312] hid (null): unknown global tag 0x79 [ 259.855095][ T36] audit: type=1400 audit(1788461755.622:19002): avc: denied { create } for pid=5346 comm="syz.8.1518" name="tcm.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 260.094777][ T5352] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 260.107438][ T5352] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 260.115895][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.8.1520 Not tainted syzkaller #0 0aeaa9ab517470fdb6a7d2a0748c92464a674951 [ 260.127486][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.137594][ T5352] RIP: 0010:step_into+0x117/0xf10 [ 260.142677][ T5352] Code: 8d 73 38 c6 44 24 5f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 f3 0b 00 00 45 8b 36 4c 8b bc 24 88 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 f2 0b 00 00 45 8b 3f 44 89 fe 81 e6 00 [ 260.162328][ T5352] RSP: 0018:ffffc9000114f760 EFLAGS: 00010206 [ 260.168450][ T5352] RAX: 0000000000000003 RBX: ffffc9000114fc40 RCX: 0000000000080000 [ 260.176467][ T5352] RDX: ffffc90014afe000 RSI: 0000000000000188 RDI: 0000000000000189 [ 260.184744][ T5352] RBP: ffffc9000114f858 R08: ffff888110d2c99f R09: 1ffff110221a5933 [ 260.192757][ T5352] R10: dffffc0000000000 R11: ffffed10221a5934 R12: 1ffff92000229f8f [ 260.200772][ T5352] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000018 [ 260.208788][ T5352] FS: 00007f4c822066c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 260.217768][ T5352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.224392][ T5352] CR2: 0000200000008000 CR3: 00000001301ca000 CR4: 00000000003526b0 [ 260.232414][ T5352] DR0: 0000000000000000 DR1: 000000001c7800b2 DR2: 0000000000000000 [ 260.240425][ T5352] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 260.248445][ T5352] Call Trace: [ 260.251756][ T5352] [ 260.254727][ T5352] ? down_read+0x95/0xe0 [ 260.259026][ T5352] ? set_root+0x420/0x420 [ 260.263397][ T5352] ? __kasan_check_write+0x18/0x20 [ 260.268557][ T5352] ? up_read+0x26/0x1c0 [ 260.272771][ T5352] walk_component+0x253/0x450 [ 260.277500][ T5352] path_lookupat+0x155/0x440 [ 260.282212][ T5352] do_o_path+0xa0/0x220 [ 260.286421][ T5352] ? percpu_counter_add_batch+0x105/0x1a0 [ 260.292189][ T5352] ? do_tmpfile+0x280/0x280 [ 260.296744][ T5352] ? alloc_empty_file+0x120/0x270 [ 260.301860][ T5352] path_openat+0x2e91/0x35a0 [ 260.306504][ T5352] ? stack_depot_save_flags+0x38/0x800 [ 260.312015][ T5352] ? kasan_save_track+0x4f/0x80 [ 260.316920][ T5352] ? kasan_save_track+0x3e/0x80 [ 260.321827][ T5352] ? kasan_save_alloc_info+0x3a/0x50 [ 260.327155][ T5352] ? __kasan_slab_alloc+0x73/0x90 [ 260.332238][ T5352] ? getname+0x1b/0x30 [ 260.336360][ T5352] ? do_sys_openat2+0xda/0x1d0 [ 260.341272][ T5352] ? __x64_sys_openat+0x13a/0x170 [ 260.346462][ T5352] ? x64_sys_call+0xe69/0x2ee0 [ 260.351272][ T5352] ? do_syscall_64+0x57/0xf0 [ 260.355917][ T5352] ? do_filp_open+0x440/0x440 [ 260.360652][ T5352] do_filp_open+0x1f2/0x440 [ 260.365212][ T5352] ? __cfi_do_filp_open+0x10/0x10 [ 260.370294][ T5352] ? alloc_fd+0x4c1/0x570 [ 260.374671][ T5352] do_sys_openat2+0x134/0x1d0 [ 260.379406][ T5352] ? do_sys_open+0x100/0x100 [ 260.384076][ T5352] ? __kasan_check_write+0x18/0x20 [ 260.389236][ T5352] ? fput+0x1a4/0x230 [ 260.393280][ T5352] __x64_sys_openat+0x13a/0x170 [ 260.398213][ T5352] x64_sys_call+0xe69/0x2ee0 [ 260.402946][ T5352] do_syscall_64+0x57/0xf0 [ 260.407448][ T5352] ? clear_bhb_loop+0x50/0xa0 [ 260.412193][ T5352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 260.418153][ T5352] RIP: 0033:0x7f4c8139e159 [ 260.422626][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.442288][ T5352] RSP: 002b:00007f4c82206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.450774][ T5352] RAX: ffffffffffffffda RBX: 00007f4c81626090 RCX: 00007f4c8139e159 [ 260.458826][ T5352] RDX: 00000000feffffff RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 260.466863][ T5352] RBP: 00007f4c81435024 R08: 0000000000000000 R09: 0000000000000000 [ 260.474883][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.482902][ T5352] R13: 00007f4c81626128 R14: 00007f4c81626090 R15: 00007ffe998f2048 [ 260.490937][ T5352] [ 260.494003][ T5352] Modules linked in: [ 260.498355][ T5352] ---[ end trace 0000000000000000 ]--- [ 260.521119][ T36] audit: type=1400 audit(1788461756.281:19003): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 260.560354][ T36] audit: type=1400 audit(1788461756.281:19004): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.563771][ T5352] RIP: 0010:step_into+0x117/0xf10 [ 260.598553][ T36] audit: type=1400 audit(1788461756.281:19005): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.601569][ T5352] Code: 8d 73 38 c6 44 24 5f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 f3 0b 00 00 45 8b 36 4c 8b bc 24 88 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 f2 0b 00 00 45 8b 3f 44 89 fe 81 e6 00 [ 260.620993][ T36] audit: type=1400 audit(1788461756.281:19006): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.659105][ T5352] RSP: 0018:ffffc9000114f760 EFLAGS: 00010206 [ 260.661059][ T36] audit: type=1400 audit(1788461756.281:19007): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.662875][ T5352] [ 260.668093][ T36] audit: type=1400 audit(1788461756.281:19008): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.699379][ T5352] RAX: 0000000000000003 RBX: ffffc9000114fc40 RCX: 0000000000080000 [ 260.714148][ T36] audit: type=1400 audit(1788461756.281:19009): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.735268][ T5352] RDX: ffffc90014afe000 RSI: 0000000000000188 RDI: 0000000000000189 [ 260.762233][ T5352] RBP: ffffc9000114f858 R08: ffff888110d2c99f R09: 1ffff110221a5933 [ 260.774184][ T5352] R10: dffffc0000000000 R11: ffffed10221a5934 R12: 1ffff92000229f8f [ 260.782317][ T5352] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000018 [ 260.791286][ T5352] FS: 00007f4c822066c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 260.800513][ T5352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.807400][ T5352] CR2: 00007f3f5c3ef2f8 CR3: 00000001301ca000 CR4: 00000000003526b0 [ 260.815635][ T5352] DR0: 0000000000000000 DR1: 000000001c7800b2 DR2: 0000000000000000 [ 260.826349][ T5352] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 260.835079][ T5352] Kernel panic - not syncing: Fatal exception [ 260.841836][ T5352] Kernel Offset: disabled [ 260.846181][ T5352] Rebooting in 86400 seconds..