last executing test programs: 19.407709212s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x27c}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r4 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000a8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2004f500", @ANYRES16=r6, @ANYBLOB="080025bd7000ffdbdf25630000000c0099000700000011000000"], 0x20}}, 0x844) r7 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TIOCCBRK(r7, 0x5428) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3400001310000100f5c8f3c229bd700001dcdf250c00fe80000000"], 0x34}], 0x1}, 0x840) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pwrite64(r8, &(0x7f0000000500)="32fca8", 0x3, 0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) 19.032204846s ago: executing program 0 (id=5): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x5, 0x2, 0x7, 0x9}, {0x118f, 0x8d, 0x7, 0x1}, {0x6c32, 0xf6, 0x14, 0x8}, {0x400, 0x1, 0x9, 0x7}, {0xff, 0x3, 0x2, 0x3}, {0x8, 0x3, 0x9, 0xb}, {0xfbff, 0xe, 0x80, 0x1000}]}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0x9, 0x4) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 6.062620904s ago: executing program 2 (id=70): syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040710408060000000000010902200001010080fa0904000002ffffff00070581020002"], 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, 0x0, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.803735362s ago: executing program 2 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="66b9800000c00f326635004000000f30baa000ec66b9800000c00f326635000100000f30660fc735baf80c66b87e9df98c66efbafc0cb80000eff30fc7b104902e81f764f2f0300a65f0830f00baf80c66b8a9d7aa8766efbafc0cec", 0x5c}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) 4.533505656s ago: executing program 2 (id=79): open$dir(0x0, 0x200000, 0x180) r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x301200, 0x4) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x1e7) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000000900"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 3.989286713s ago: executing program 32 (id=5): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x5, 0x2, 0x7, 0x9}, {0x118f, 0x8d, 0x7, 0x1}, {0x6c32, 0xf6, 0x14, 0x8}, {0x400, 0x1, 0x9, 0x7}, {0xff, 0x3, 0x2, 0x3}, {0x8, 0x3, 0x9, 0xb}, {0xfbff, 0xe, 0x80, 0x1000}]}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0x9, 0x4) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 3.986650923s ago: executing program 1 (id=82): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/23, 0x17, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00') 3.881589674s ago: executing program 1 (id=83): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000300)=0xfffffffffffffd96) 3.881313684s ago: executing program 1 (id=84): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x4000, 0xffffffffffff, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) keyctl$setperm(0x5, r2, 0x172831) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, r1, 0x100000000000019) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e9c, @local}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) 3.843808222s ago: executing program 1 (id=85): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008ac059f0200000000000109022400010000904809e1d3c8945e038c040921068041eb211800090581034000102400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x160, 0x10, 0x1, 0x2, 0x1, {{@in6=@remote, @in=@private=0x4, 0x0, 0x9, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@rand_addr=0x64010102, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd28, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x0, 0x70bd25}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) 3.426271504s ago: executing program 4 (id=81): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x4000, 0xffffffffffff, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) keyctl$setperm(0x5, r2, 0x172831) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, r1, 0x100000000000019) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e9c, @local}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000480)={{0x2, 0x1, 0x4, 0x2, 0xbfec}}) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) dup3(0xffffffffffffffff, r4, 0x0) 3.379826773s ago: executing program 4 (id=86): syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040710408060000000000010902200001010080fa0904000002ffffff00070581020002"], 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, 0x0, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.83827455s ago: executing program 2 (id=87): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x1, 0x9d4}}}, &(0x7f0000000600)) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) (async) syz_usb_ep_write(r2, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") 2.223686321s ago: executing program 4 (id=88): r0 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xc16, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x20, 0x60, 0x9, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0xe43}}, {{{0x9, 0x5, 0x81, 0x3, 0x618, 0x2, 0xd, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xc, 0x4, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@empty, 0x4f1f, 0xfffb, 0x4e23, 0x402, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x3, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x104, 0xfefffffffffffffe, 0x5, 0x800009}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x210005, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x1, 0x17, 0x5, 0x0, 0xfdfffffb}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200135"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x3, 0x4) 1.969879661s ago: executing program 3 (id=90): keyctl$invalidate(0x15, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000000c0)={0x0, 0x1}) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200001, 0x2, 0x0, 0x5, 0x3ffd}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.959332623s ago: executing program 3 (id=91): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x14, 0xc, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) io_setup(0x5, &(0x7f0000000440)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x1e, 0x800, 0x70bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x8080) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = openat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', &(0x7f0000001140)={0x103000, 0x81}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) unshare(0x400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") io_submit(r1, 0x2, &(0x7f0000001240)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000001040)="1cadb37e5f51e917ddb287e7281456a84b863ff30ede7ba2545832753d3e744f0c7144a6cd7b993e92488e3ce24535851df5f34798f24796175bc7f01ec2d20d5ce6a1e548f80e62b98827f3b3650b8613630b4222ead880b03d7fe8dc4ee95e073d3c42ded0f5989a247bdd806d259c3f85a73fad0f611aed4d6a1ab06e88ba3e57b4e06af3ae86ba287482636c984dd8d5754b1c1fabb240223a9a4b651bbc5b76bd55e1fffc1979190df493f88829a8f8", 0xb2, 0x3, 0x0, 0x1, r5}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f00000011c0)="0058b82f8f24dc310c04b911642ad3c53cdda78cd190af2e78c719333fdb2958a5503c51f16df46d", 0x28, 0x4afb2e90, 0x0, 0x2, r5}]) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000) getpid() r7 = socket$inet6(0xa, 0x4, 0x7e) sendto$inet6(r7, &(0x7f00000000c0)="800037bbfa9ba1ce", 0x8, 0x4000, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.753410694s ago: executing program 3 (id=92): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc1101, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000080), 0x4) timer_gettime(0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) connect$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc001102c, 0x0, 0x81}]}) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='}m', 0x2}], 0x1) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)) 1.715209652s ago: executing program 3 (id=93): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x4000, 0xffffffffffff, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) keyctl$setperm(0x5, r2, 0x172831) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, r1, 0x100000000000019) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e9c, @local}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) 1.696902285s ago: executing program 4 (id=94): mount(0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d81"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x33315ff8, 0x102280}) r3 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000280), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x8000002) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x488d, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14865aa978f8748c5d0ef6caf443b49c3c31bf18d356010000", @ANYRES16=r8, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x8014) sendto$packet(r3, &(0x7f00000004c0)='q', 0x5e0, 0x881, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x87, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x8000100000001, 0x1, 0x2, 0x3, 0xf000000000000403, 0x10000000000002, 0xfffdffffffffffff, 0x9, 0x0, 0x40000000001c, 0x400, 0xffffffffffffffff, 0x9], 0xeeee0000, 0x81801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 1.694738146s ago: executing program 3 (id=95): open$dir(0x0, 0x200000, 0x180) r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x301200, 0x4) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x1e7) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000000900"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 876.852647ms ago: executing program 2 (id=96): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x4000, 0xffffffffffff, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) keyctl$setperm(0x5, r2, 0x172831) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, r1, 0x100000000000019) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e9c, @local}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000480)={{0x2, 0x1, 0x4, 0x2, 0xbfec}}) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) dup3(0xffffffffffffffff, r4, 0x0) 875.493977ms ago: executing program 2 (id=97): syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040710408060000000000010902200001010080fa0904000002ffffff00070581020002"], 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 789.464094ms ago: executing program 1 (id=98): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r0, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0xffffffff, 0x13c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa1b8, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x1a2}}], 0x4, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./dev/sda1\x00', 0x8000, 0x16d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) sendto$packet(r1, &(0x7f0000000180)="42ee633b3736bda697e1404c27f0be2f11e74957cb169f0b6a5c3548da04dc9dbcd9dff2b5f1c4c3e7c4b6656dacca45eaccfc447a1924", 0x37, 0x20000000, &(0x7f0000000340)={0x11, 0x1, r2, 0x1, 0x6, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x131e000, 0x800, 0x0, 0x6}, 0x20) r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x0, 0x3) 717.072368ms ago: executing program 1 (id=99): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf788, r8, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1, 0x0, 0x0, 0xb00}}], 0x1, 0x20000081) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x45, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1837, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xd4, 0x9a, 0x9}}]}}}]}}]}}, 0x0) (async) r9 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1837, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xd4, 0x9a, 0x9}}]}}}]}}]}}, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, 0x0, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f00000001c0)) syz_usb_control_io(r9, &(0x7f0000000000)={0x2c, &(0x7f0000000500)={0x20, 0x21, 0x28, {0x28, 0xf, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x1, 0x5c, {0x5c, 0x21, "48165fced4ea7fbe8a35f022aa04b68907bdfc5c22d82e9ff10d67cb85019ab87a5007236ea8d3ee3b021581bb69476610247f607301820ae2cac94b20c4cbecac748aa9bd6191537598965cd4cde981bc7225d7813919a414ec"}}, &(0x7f0000000180)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "0d536b32c68b7919d0f87129d3e3c0098bf63e9d3485fb70b7"}}, &(0x7f0000000240)={0x0, 0xf, 0x98, {0x5, 0xf, 0x98, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x9, 0xf000, 0xbd, [0xf, 0x3f, 0x3f00, 0xff3fc0, 0xc0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "52b4472d5168879dba0ef7ec0a297169"}, @generic={0x51, 0x10, 0x3, "56ef29e6129c59aa7181d482780b19bb81324cf012b6524cba46d38627d54ad4e1848bb215e633d140e2bfa65013e648da62fcdf246243f41c0963cb295b73cd8334e7617993b86e4c8b41fc9daa"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa5, 0x0, 0x6}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x6, 0x7, "3ecb9833", "aeb43bb1"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x1, 0x8, 0xb1, 0x3, 0xd}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x16, 0xb4, "d7366520da0cf9050410d4be9bdce487170e6288ad4bfa4f601f12bedfd3e8601a91df5ddc74a1e215b704dcbfdd935523e2874d770d1f74b1af2daf27fedf12531bc28b4d1e307ed74f8f34d734452e01a82b56576f483a2b6d12a6bdfab0d3cabde1e26f0b137662864fc2d2c0282961a09e58136423977ad271cc7010e3396d1c626874db75ac52481b14d8ae714639f35d85978bf79b690e1c796c00b4dac7ecbad5a31096a8cc1c48c4c2639d978e632b4f"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x58, 0x8, [0xf000]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "e73a"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "b0eb"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xcd47}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x1, 0x5c, {0x5c, 0x21, "48165fced4ea7fbe8a35f022aa04b68907bdfc5c22d82e9ff10d67cb85019ab87a5007236ea8d3ee3b021581bb69476610247f607301820ae2cac94b20c4cbecac748aa9bd6191537598965cd4cde981bc7225d7813919a414ec"}}, &(0x7f0000000180)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "0d536b32c68b7919d0f87129d3e3c0098bf63e9d3485fb70b7"}}, &(0x7f0000000240)={0x0, 0xf, 0x98, {0x5, 0xf, 0x98, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x9, 0xf000, 0xbd, [0xf, 0x3f, 0x3f00, 0xff3fc0, 0xc0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "52b4472d5168879dba0ef7ec0a297169"}, @generic={0x51, 0x10, 0x3, "56ef29e6129c59aa7181d482780b19bb81324cf012b6524cba46d38627d54ad4e1848bb215e633d140e2bfa65013e648da62fcdf246243f41c0963cb295b73cd8334e7617993b86e4c8b41fc9daa"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa5, 0x0, 0x6}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x6, 0x7, "3ecb9833", "aeb43bb1"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x1, 0x8, 0xb1, 0x3, 0xd}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x16, 0xb4, "d7366520da0cf9050410d4be9bdce487170e6288ad4bfa4f601f12bedfd3e8601a91df5ddc74a1e215b704dcbfdd935523e2874d770d1f74b1af2daf27fedf12531bc28b4d1e307ed74f8f34d734452e01a82b56576f483a2b6d12a6bdfab0d3cabde1e26f0b137662864fc2d2c0282961a09e58136423977ad271cc7010e3396d1c626874db75ac52481b14d8ae714639f35d85978bf79b690e1c796c00b4dac7ecbad5a31096a8cc1c48c4c2639d978e632b4f"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x58, 0x8, [0xf000]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "e73a"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "b0eb"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xcd47}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001200)={{r4}, "9d614cc00ad6715f61e69f1ebb59925b63966dbb454a4cae7d9d93f413809e4eef79bff4836eed2193224dfa18d68f98498b73e16245afda3672ae2cb8b93f85fbed4cb24cd5e94000939f9c4b998561f3748b4dcd83eb0fd7e0c245269add47a03b9964861930d9e18b3296fe6f063f480daedee677c65964d9970d48ad1d15b99f67f92c0890f6abfc09fc13d9b00cd81a1b6b54e4c03186998a48969b4b0173e206bead40264bab41b46c00bd0952222a7a9328582cd1c26d2c82deeda0dae27c5237b58b52b442b21d6e3ccb88ea50bad06fe406dc4873e5570478e0778d46b342f013b5187e619eefba8c5448c8611383f2d0bb71e0ad061ae412a39434d3ac3f23ea39856ad2e56c8760e94c23f3afb4678396238f8fe0beefadef30c6a0919815e69ba1bcf7b8c90106ba3d98ffc3447dd666ddf8340a84d34adba84fc072ec147fba5814fdcdec819d85295069345a6815b44ac5b6ace6e7b8607233d23aae7faa531a77067349d162a007defb7b03851f5bbc407089574edfc33269dce09b120a35fa23225dc0106a0f02ba4e84a263807028ff33055387781001fa3cb11a1b237c5a27601251d89a9d3ee9f0126ebae113dcc084e9c9861416687979e187b27d02d97dbf47da04c1450f2c690068f0e1759bf49ce6a1fd730ad80bd18be9d9816151c4a9d81e22a0c5b8e3619c642ee2364851c09a8b845e9a84e0562c2626b8606dfcdeaee0764cd501bb44336ea654724b6f7fbe8c443277eccb1c2c2f9b68be1003e28384e0ca5f515cf18241c4801902f14b92315f6afb33f00160b3a211427100fd62194ba8a21bff6b01d5d921dc6dc9cfd50026a6c399c7b1b5f5653f8613acac55cba1404abbd5ca3ff5f3c9f70298159a685d5100eef658bb7087f30c7d4f62bd8470256e5b7bf550c1fe57ba103195d18a79c9a994fda89a37ef3869b12893d3a29e21fd72f56fc8ffe89e0e8b31072258787378e4df258a77f5d311edbd4cb67fc8f61a55b18728bf6e29435c3e57575422b1de5ac8cbd1f994f8716b46f0a6e2b4d72417b125edf73ebd4192d75d3421b4beecc72cc5685a116e0881f39374078b4268eda70ad0c04e7ee5322f690b31bf63ecafe338966a2331a6278e229d2dc810bb613d86ec9b13a1440784e83987fdc141ec98103372557a989763903a4cbeb4b3c494038552845d83231e0617462cee3cd6eeabab24c013a7473faf3c5d6010f3e68d77661c78fc6315a38c6a44789171105b676255dc8f6bb4f950de9b6f188e99eeba9c3846edd004b25ae791ce4bcdbe1ceee16441b8afce0dfe815228fef2f9fd3202034ca3832f67d579bb5afe933144301d47a93bb98692a551f4ba187a56e05a290f96508f515d46a3055f8b28843291233ac9a424677e9c1767be31b398a84d6d347a0421719f4c432d5bc5d81e536340081aba1869f3eaae0cbb52fcd6b83e34223c254ac906dd5dfb1ca2aae2678892823d515862f1764310f204731819e4a0874c98cd9ac374c39ba0d3e9c633c870c51c75f209b05c075c28c379244e357461548bc2ea57fe1bbfab5938931ac029ab0be4ca7f01cde78d9301eff81b22195179325e17c7fe3b818fd7fdbf02b9a60185370c66f826114a0fd8e3ce01dea827d5f5915cff8c823d066a4b7f9b4e6d3e4a885ed101147332397067cc2a1dc4bb861e26799de3fea8f9eb98baabb3286842d3b72fdbbda01afca5ba68fb84261110a03d519b2c0daf45bb0771ae9bcab003a2cedfb41bcb142acee6a4798353219283b455fc5026903168c6b14043855d6de4b5490472eee24e5838ce8e1b6228a729464a71154227803337dbfc42b529f64e120715bd5c25f236f85c6a8f4700ac81ad97b949cb66c2d15e3be4eadd3480be04148b6a577872c5ea9beb20bfae835e08ca66e47dbc1a148aa5eab68f86d05d0db67dcc06a7011446df9eea81772af016fae80dfea6f180b1d330b18d3c832059ed39652b04924a383a46ef55baa2ca3f904f31ae0e0c50c47cde3550fea16d8df5ec39d840f1b92fe08220a0f29bcdac7dd8195b9f2176475578d54284ce2d656628da405fb9ecd1253111cfa164a5e95bbb450219ac6db615cf5dd902a07b5537a279c87cc8d454f52b4bd3119dd4a780399cac9a60f78c02925be795da4251c1547ea24e8f2462c4e44346d101f0131d1e7d2e49e0e1897cfeab630c6460afd8efc309fd40fa89173625524c7a859f704eb9c2bcb01abb2aee8dca11a4d1e82c33d1b1899775690789521e5838a12fa360ce97b23e4be43efe2c29d9689bc8fbb415f1390e16eb42e41fd8cbab1a271393dac72249acf6ae67316dbec9825308702c1df1aa6499cab7d039dad450bb1d62fd00ccd77b106c02b6b5712f95d3efed568dd6d2867513b15397a5896457e5f408f883992a4d49a1abccabd6664dad4ac0a6eea0106e62789127bcb72d452d64645bd036b6acd4dfd71355d8710ce182cd9011f1903cb7f37884aef832d854c324b6cee71353f04499891e99fca6a994adcee50bc7c4b62057176db301bbefa552279b3927de0d770cac89a5b820efdabe982aef9a4a840024bc73ada2b14a05fd724fb9486c38b200d555ee4865548c19cdec8a97bf35ae42af5c945926e57c5a61e2f25e27aa4a0eaf8c3ceeea33164fb0e60b7619725a6155d002afe63910f73c716c45f2e7859a48cf19be213dd0f000ba594108613eaf321a4076190c523b92dfc209a07db59504b998d8654687ba767291c116fc8cc16438d0375f39d46b12a7ea5c2c60c941d96703961ad5b1faaffa97e009ec332223f69bed6036bb4966986f52e49e1406cdaadc101a7f928f68ed1b6ff0f2c33491b61f17025c1230dc9d62b50c1bed4476261c8527c58e9b64a88816f4d510e48b25ec45797ec2ef4cf05b521d3c8c62dbe59b1967e3c9e5b2e1880b4d0f1f47ad112f8e14db34ddd84498a5b01ae2da275def02d953c3ce793b230e3d97838611732995c99ef038b32de41799529195d78a9ee61b7a631fa8f10654230bee91e0b07d500c09b0449991c894f3181dbd6db930b188d5fc1af47d6cf65c290cd7e6c355b92f6ff793acb0d5146cf7ef09c0d7eb29a24dde03c52a552c1129cfd3ee3d5ac87cc5151f6cb5be75ff1528b59acdd49833134fc5a521bed59f117fa20c85812aaaaeb0791df8a68e8e711da1e1ec79eef6d162d83a11fc081c9b6f4ee0a2fb972e7c7c925c3f692bdbf3a879a5c14bf307efb3a006ae23d8c8bd6e84e9008a746a1ccd871ffed3d55f9581dd90628b39f3c43e69deed00cab595ceb41e9212e046cc4725b6e89734e02ce6329d86823b6f96a9c5efc9d4d45da49367881f8fc7569d787a9d614f77fe81310da4ab6fcf3e5d4cbf1ebef5a9ceb9a9a8028b8c5ad6c0cd8bbbe218e4629b189a1b85699d3fe6c8496f882c1219f43dda311a5be1fb8ed26f6aaec5d82f0f2ae22dd50cba0ebb89c4803747944a1a399f655430110e1fa740e6b7887dd65b387e602a2c45fb9215c605782cd8e75a767d869d7cbbd1440b8b371266b1bd25acc8712644a3687b9eb033763aafefcd2050bb226393fb480df4b8fd1b9c85d1317407797b61deb637f305ed00802868b40cb275f9aa2ddc5bc548f10b4f3892fe48ebed96a4491c177c81b7dedcc293b8a5d32b50eb6faf0ea5014d3fe569ca9b9c5efaa32d5fd85cb012d1578827a46078e8bd9d859882c68563517fe1ef4ae8098da5a5b78ce539dc232577434d0f66bd3291f1e94e014d98af791112e65a1c848e9ea4f33ea0a57f6c43ee65f481e3c5ac4a147d7874c4a08d072ddd2dfcce6437201c3535bf5c4caa8dbc0370b3963b55566ad559fef43cf2644ee1e6dbaf1029043b4b8c723e5031ed0cac88c5ed182fdd7a384eacd7ae57ce0d1ff00517e437b64e0590ce5e0008a408c2dac9fc938bc6e073135f0e4b60088ba7a6ded6e027a64b06e0d94cd21f0d292cc655a51fb26241f726f3d6a3a8c4620095511e4fda860e2cbe7ca100e606c7ab61b8340bcd6d184052f995347527456d4ee0359a924c1a46bdd28848b7fd555c81d8187c3e5a92d1aadc6bb8ef7cfd337bcf1d063a34b0a5744b23cc34862a489f5eced20917190fd35a6c59daf6fbd7d9ceecf620bdcae5ad8d6a2c86b044c6a7b40e3a17a07eebc086c55b680478ce92dbb4804b2f868313223ab36962dc8a81c0635783c7e873d3ad3af9adf904ba85a2c03ae7c526a933a5be12fbe70e1c9b8f84b29bb55f110c59fdf9334ad26e47a060099e987aba1f16f5463784e026132de048ff93984a93633ec9aece7c38d204ab29689880ee2f9c248e83a89dd5c1df7d3c3558b85925871a338aa88a0088fed4064adfa73d893cb9db1cd59c4a5a0ccfa4ec5741df71ca08d9124db884d00d80a532121080bbf1a9c9aaafd7353a6e30f0bcf5df158fcac64046d39adb2eb24d20f5b9bb7088e1cf71a5f0fc259b30dccf7b34dfdd81d0116bbe40d662da9da6babfa0bb632cead6ed10b9d3bd6a9174bf2270a93a94bb336b79c696ad9143506d35bacedec31c36d82dc08c9f72f2539d3de9b41e06d9a89d05e843cbd46ac9f0fc297e75580c8a5d1e253d51c9eb5ff2ccd9ae74aa803e6e8c0cfaf477b714125140a99db1b1d9693d21b0c6f02a660c53b215f32ee3b6834d64610d23e19218691cc9ce0aefb0e9566ad1edeb68400180d36ddaed23d917f3d28a83b171f0a74170a444cb64d84b20965413c5761703e3c517f5ea60eb11a929f48c4f72f0065a3b5cd2aecfca117d1b10934ecca00c6c128523e0ca3d0ad136567d13114e589707fbc0efdb9de64e6fff6131d4d2ff8237b0e2635e85783508f19277b97fb65689619e5a23d1f77285eb371a0ea97427d7e10e5dc11f4b155626219d9f2b060c3cb7660c1c04ea69cf221786a9c08ec8c88c78ba2fd426542af3086f90f88ed1ee8f296a29a6dd242f30e22aa33dd307163851cfc46665541afc1620b5e280b096bf5b0215acc41fd0d3a2a886f22bb3cf2b6923770d416eb6f042a1a5abb13bda362915689620e629efe2cd863815df528f9c7b44e95ee35b24568faca328c6a77da07fac35d4ff01ee251335248c5da082b09ec95e0b95f3059bb4257fb59c5d7f360ce0a622958a5007ba30bbef9af385ef36ed9879dffa54e298faf608a4ed01b4c00559c0b36e0b185d914d83b04f602147090e278ed96f876005da1cde29753a1f1d3aa14dd1524c9e465d6c0e9869d26862fce3452a09bb459bb4dc8638589d00078ac9fbec8b618fce90e7fcec524631d35d4abd04ab51cad3cab648843814598aa0791651508f384b5f74c2b0cc10f97b95641dfa910b80d05efd74c379643ca6b2761e27d767a7957504f059d053173581268ab57d64e6f9f328e581aeef855a4f3a02fa556334f542e99bf0f93d02be059b0829f5c34d9777353e5dc8e8a906a2088320adee41ef9e6f01741c2821bd1ac1e0f9f566dd284775cc063d346278339b2c45b9f6c61a31d268b251ad1ac263f486f69873e94c48250b63c190dfe6d6efe3b0e73f4ad9fb77dc11c7efd8991c4c923df2bd894d388ef454942c8620552fbee2ed34fe7709bde1f61f5f9b0a2ee4ca425ea2be8f4db8a76a6a18a233737aff55be5788e5a721ef0c5c38683d115cff516a9e72de2627eef8ac4222ceb9abb9bd66dd259cd34dedf9679c73df03d58108e3c748b802b5fe244e2634cb7307ea0932ac1a2a4586d555d2d7265bf1"}) 251.50353ms ago: executing program 4 (id=100): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1}, 0x22) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffff5d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x5f5, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x1aa}}}, &(0x7f0000000280)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) process_vm_writev(0x0, &(0x7f00000051c0)=[{&(0x7f0000004e40)=""/168, 0xa8}], 0x1, &(0x7f0000006300)=[{&(0x7f0000005240)=""/76, 0x4c}], 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) (async) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x8010aebb, &(0x7f0000000280)={[{0x5, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb9, 0x0, 0x0, 0xa, 0x0, 0xc}, {0x89, 0x42, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x3}, {0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}], 0x5}) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r12, 0xc008ae09, &(0x7f0000000000)={0x6, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000000, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCOUTQ(r13, 0x5411, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="baa000ec650fc71a66b834ef4d310f23d80f21f86635c00000900f23f8f2af0f20c06635100000000f22c00fc77f00660f38812dc4e3fdcf5d354cbaf80c66b8c4a1a18a66efbafc0cecbaa100ed", 0x4e}], 0x1, 0x4498bda7e2139f4d, 0x0, 0x0) (async) r14 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x6d14, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x80, 0x401, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x4, 0x3e1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x0, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xebc, 0x20, 0x2, 0x79, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x489, 0x0, 0x0}}, 0x0) 77.377295ms ago: executing program 4 (id=101): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x2a900, 0x195) (async) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x10000) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) (async) wait4(0x0, 0x0, 0x8, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x2400c091) (async) r8 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 22.865306][ T313] __dump_stack+0x21/0x30 [ 22.865345][ T313] dump_stack_lvl+0x140/0x1c0 [ 22.865371][ T313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 22.865400][ T313] dump_stack+0x19/0x20 [ 22.865425][ T313] should_fail_ex+0x3c2/0x510 [ 22.865446][ T313] should_failslab+0xac/0x100 [ 22.865476][ T313] kmem_cache_alloc_noprof+0x42/0x410 [ 22.865497][ T313] ? key_alloc+0x2ee/0x1060 [ 22.865524][ T313] ? key_user_lookup+0x263/0x4f0 [ 22.865549][ T313] key_alloc+0x2ee/0x1060 [ 22.865576][ T313] keyring_alloc+0x4b/0xc0 [ 22.865595][ T313] join_session_keyring+0x121/0x440 [ 22.865619][ T313] ? lookup_user_key+0x548/0x1230 [ 22.865642][ T313] lookup_user_key+0x54f/0x1230 [ 22.865668][ T313] ? __cfi_lookup_user_key+0x10/0x10 [ 22.865691][ T313] ? do_futex+0x37d/0x510 [ 22.865716][ T313] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 22.865742][ T313] ? strncpy_from_user+0x14f/0x280 [ 22.865768][ T313] __se_sys_add_key+0x317/0x4b0 [ 22.865787][ T313] ? __x64_sys_add_key+0xf0/0xf0 [ 22.865808][ T313] ? __kasan_check_write+0x18/0x20 [ 22.865829][ T313] ? fpregs_restore_userregs+0x11c/0x260 [ 22.865854][ T313] __x64_sys_add_key+0xc3/0xf0 [ 22.865876][ T313] x64_sys_call+0x195f/0x2ee0 [ 22.865893][ T313] do_syscall_64+0x57/0xf0 [ 22.865912][ T313] ? clear_bhb_loop+0x50/0xa0 [ 22.865934][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 22.865956][ T313] RIP: 0033:0x7f43e279e159 [ 22.865980][ T313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.865996][ T313] RSP: 002b:00007f43e36a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 22.866026][ T313] RAX: ffffffffffffffda RBX: 00007f43e2a25fa0 RCX: 00007f43e279e159 [ 22.866041][ T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 22.866053][ T313] RBP: 00007f43e283506b R08: fffffffffffffffd R09: 0000000000000000 [ 22.866066][ T313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 22.866076][ T313] R13: 00007f43e2a26038 R14: 00007f43e2a25fa0 R15: 00007ffe95e903f8 [ 22.866092][ T313] [ 22.873444][ T313] rust_binder: Write failure EFAULT in pid:2 [ 22.888408][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.916704][ T313] Zero length message leads to an empty skb [ 23.107350][ T324] fuse: Bad value for 'fd' [ 23.172874][ T321] fuse: Bad value for 'fd' [ 23.184342][ T324] process 'syz.3.4' launched 'P' with NULL argv: empty string added [ 23.310322][ T337] overlayfs: overlapping lowerdir path [ 23.332540][ T337] overlayfs: overlapping lowerdir path [ 23.342695][ T340] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7958 sclass=netlink_xfrm_socket pid=340 comm=syz.3.8 [ 23.368962][ T339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 23.611215][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.651242][ T311] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 23.721129][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.772235][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 23.783879][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 23.799417][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 23.810793][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 23.824141][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 23.833397][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.842996][ T45] usb 3-1: config 0 descriptor?? [ 23.848308][ T337] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 23.881128][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 23.895992][ T9] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 23.909818][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.918704][ T9] usb 4-1: Product: syz [ 23.923115][ T9] usb 4-1: Manufacturer: syz [ 23.927747][ T9] usb 4-1: SerialNumber: syz [ 24.143761][ T353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.164550][ T353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.221527][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 24.228478][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 24.245474][ T9] usb 4-1: USB disconnect, device number 2 [ 24.265809][ T45] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 24.291123][ T45] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.312159][ T45] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.330015][ T45] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 24.362346][ T45] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 24.523394][ T45] usb 3-1: USB disconnect, device number 2 [ 25.055027][ T385] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18'. [ 25.234397][ T390] rust_binder: Write failure EINVAL in pid:25 [ 25.311122][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.483880][ T45] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 25.493307][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.501473][ T45] usb 3-1: Product: syz [ 25.505908][ T45] usb 3-1: Manufacturer: syz [ 25.510510][ T45] usb 3-1: SerialNumber: syz [ 25.541116][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.702233][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.712465][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.724095][ T310] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 25.733432][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.741626][ T310] usb 4-1: Product: syz [ 25.745896][ T310] usb 4-1: Manufacturer: syz [ 25.750512][ T310] usb 4-1: SerialNumber: syz [ 25.959537][ T310] usb 4-1: 0:1 : does not exist [ 25.966124][ T310] usb 4-1: 0:2 : does not exist [ 25.971518][ T310] usb 4-1: unit 0 not found! [ 25.982642][ T310] usb 4-1: USB disconnect, device number 3 [ 26.006448][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.046664][ T408] overlayfs: overlapping lowerdir path [ 26.053016][ T408] overlayfs: overlapping lowerdir path [ 26.233830][ T45] usb 3-1: USB disconnect, device number 3 [ 26.264130][ T410] ./dev/sda1: Can't lookup blockdev [ 26.301121][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.390990][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 26.391007][ T36] audit: type=1400 audit(1790721478.880:173): avc: denied { create } for pid=412 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.431105][ T36] audit: type=1400 audit(1790721478.890:174): avc: denied { getopt } for pid=412 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.450938][ T36] audit: type=1400 audit(1790721478.900:175): avc: denied { read write } for pid=416 comm="syz.2.29" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.479486][ T36] audit: type=1400 audit(1790721478.900:176): avc: denied { open } for pid=416 comm="syz.2.29" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.503216][ T36] audit: type=1400 audit(1790721478.900:177): avc: denied { ioctl } for pid=416 comm="syz.2.29" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.528340][ T36] audit: type=1400 audit(1790721478.920:178): avc: denied { append } for pid=418 comm="syz.2.30" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.551024][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 26.563699][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 26.575030][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 26.586578][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.601195][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.611449][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.620134][ T9] usb 2-1: config 0 descriptor?? [ 26.625501][ T408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 26.801151][ T314] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.961125][ T314] usb 4-1: Using ep0 maxpacket: 8 [ 26.968871][ T314] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 26.978298][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.986502][ T314] usb 4-1: Product: syz [ 26.990817][ T314] usb 4-1: Manufacturer: syz [ 26.995646][ T314] usb 4-1: SerialNumber: syz [ 27.036812][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x3 [ 27.046088][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.053753][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.061619][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 27.076078][ T9] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 27.205964][ T314] usb 4-1: 1:1 : no cluster descriptor [ 27.211846][ T314] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 27.221958][ T314] usb 4-1: 1:1 : no cluster descriptor [ 27.227748][ T314] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 27.240904][ T314] usb 4-1: 1:1 : no cluster descriptor [ 27.249039][ T314] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 27.259089][ T314] usb 4-1: USB disconnect, device number 4 [ 27.272170][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.293160][ T45] usb 2-1: USB disconnect, device number 2 [ 27.740439][ T36] audit: type=1400 audit(1790721480.230:179): avc: denied { getopt } for pid=437 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.819810][ T440] ./dev/sda1: Can't lookup blockdev [ 27.959712][ T36] audit: type=1400 audit(1790721480.450:180): avc: denied { getopt } for pid=449 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.963629][ T443] futex_wake_op: syz.3.37 tries to shift op by 144; fix this program [ 27.999674][ T36] audit: type=1400 audit(1790721480.490:181): avc: denied { map } for pid=442 comm="syz.3.37" path="socket:[4047]" dev="sockfs" ino=4047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 28.177088][ T36] audit: type=1400 audit(1790721480.670:182): avc: denied { create } for pid=455 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.251641][ T458] netlink: 9 bytes leftover after parsing attributes in process `syz.1.40'. [ 28.260506][ T458] z00ªX¹¦: renamed from gretap0 (while UP) [ 28.267338][ T458] z00ªX¹¦: entered allmulticast mode [ 28.551157][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.716308][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.726609][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.745442][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 28.765524][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.061110][ T314] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.222114][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.241114][ T314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 29.260151][ T314] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 29.284096][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.303015][ T314] usb 4-1: Found UVC 1.00 device (046d:0825) [ 29.511130][ T467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.44'. [ 29.531170][ T314] usb 4-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 29.541575][ T314] usb 4-1: No streaming interface found for terminal 2. [ 29.561328][ T314] usb 4-1: USB disconnect, device number 5 [ 30.102604][ T314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.241129][ T314] usb 2-1: device descriptor read/64, error -71 [ 30.491127][ T314] usb 2-1: device descriptor read/64, error -71 [ 30.731128][ T314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.861128][ T314] usb 2-1: device descriptor read/64, error -71 [ 30.967852][ T488] overlayfs: overlapping lowerdir path [ 31.101126][ T314] usb 2-1: device descriptor read/64, error -71 [ 31.211128][ T64] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.218750][ T314] usb usb2-port1: attempt power cycle [ 31.316368][ T310] usb 3-1: USB disconnect, device number 4 [ 31.338604][ T490] ./dev/sda1: Can't lookup blockdev [ 31.392114][ T64] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.411105][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 31.426408][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 31.450130][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.471255][ T64] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.490474][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.515152][ T64] usb 4-1: config 0 descriptor?? [ 31.527685][ T488] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.571122][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.592192][ T314] usb 2-1: device descriptor read/8, error -71 [ 31.722201][ T314] usb 2-1: device descriptor read/8, error -71 [ 31.936989][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x3 [ 31.946541][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.954223][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.962052][ T64] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 31.978565][ T64] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.001127][ T314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.032153][ T314] usb 2-1: device descriptor read/8, error -71 [ 32.162143][ T314] usb 2-1: device descriptor read/8, error -71 [ 32.202347][ T9] usb 4-1: USB disconnect, device number 6 [ 32.271234][ T314] usb usb2-port1: unable to enumerate USB device [ 32.740714][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 32.740729][ T36] audit: type=1400 audit(1790721485.230:199): avc: denied { write execute } for pid=498 comm="syz.3.54" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.825282][ T36] audit: type=1400 audit(1790721485.320:200): avc: denied { write } for pid=498 comm="syz.3.54" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.911097][ T36] audit: type=1400 audit(1790721485.400:201): avc: denied { read } for pid=500 comm="syz.1.55" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.935590][ T36] audit: type=1400 audit(1790721485.400:202): avc: denied { open } for pid=500 comm="syz.1.55" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.958692][ T36] audit: type=1400 audit(1790721485.420:203): avc: denied { name_bind } for pid=502 comm="syz.1.56" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.998625][ T36] audit: type=1400 audit(1790721485.420:204): avc: denied { node_bind } for pid=502 comm="syz.1.56" saddr=fc02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.035928][ T507] netlink: 'syz.1.56': attribute type 28 has an invalid length. [ 33.045833][ T36] audit: type=1400 audit(1790721485.530:205): avc: denied { bind } for pid=505 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.053848][ T511] ======================================================= [ 33.053848][ T511] WARNING: The mand mount option has been deprecated and [ 33.053848][ T511] and is ignored by this kernel. Remove the mand [ 33.053848][ T511] option from the mount to silence this warning. [ 33.053848][ T511] ======================================================= [ 33.083276][ T36] audit: type=1400 audit(1790721485.530:206): avc: denied { map } for pid=502 comm="syz.1.56" path="socket:[4488]" dev="sockfs" ino=4488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.129960][ T514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.149018][ T514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.149644][ T36] audit: type=1400 audit(1790721485.530:207): avc: denied { read } for pid=502 comm="syz.1.56" path="socket:[4488]" dev="sockfs" ino=4488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.281137][ T314] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.421154][ T314] usb 4-1: device descriptor read/64, error -71 [ 33.461109][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.612237][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.622482][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.635575][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 33.644836][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.671120][ T314] usb 4-1: device descriptor read/64, error -71 [ 33.800053][ T518] ./dev/sda1: Can't lookup blockdev [ 33.908324][ T9] usb 3-1: USB disconnect, device number 5 [ 33.914261][ T314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.061122][ T314] usb 4-1: device descriptor read/64, error -71 [ 34.301157][ T314] usb 4-1: device descriptor read/64, error -71 [ 34.421126][ T314] usb usb4-port1: attempt power cycle [ 34.440843][ T524] overlayfs: overlapping lowerdir path [ 34.681119][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.761122][ T314] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 34.782218][ T314] usb 4-1: device descriptor read/8, error -71 [ 34.842131][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 34.857999][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 34.870397][ T36] audit: type=1400 audit(1790721487.360:208): avc: denied { mount } for pid=525 comm="syz.1.63" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 34.871314][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 34.908763][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.921778][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.930900][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.940741][ T314] usb 4-1: device descriptor read/8, error -71 [ 34.952208][ T9] usb 3-1: config 0 descriptor?? [ 34.959220][ T524] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 34.992963][ T530] overlayfs: overlapping lowerdir path [ 35.078629][ T537] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 35.181124][ T314] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.200588][ T537] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 35.212122][ T314] usb 4-1: device descriptor read/8, error -71 [ 35.354389][ T314] usb 4-1: device descriptor read/8, error -71 [ 35.372901][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x3 [ 35.397972][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.405452][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.413072][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 35.424551][ T9] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 35.491217][ T314] usb usb4-port1: unable to enumerate USB device [ 35.651801][ T314] usb 3-1: USB disconnect, device number 6 [ 36.166269][ T549] ./dev/sda1: Can't lookup blockdev [ 36.421109][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.595978][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.606151][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.631103][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 36.640164][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.919088][ T310] usb 3-1: USB disconnect, device number 7 [ 37.041130][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.201151][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 37.207831][ T31] usb 2-1: config 0 has no interfaces? [ 37.214782][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 37.223989][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.232020][ T31] usb 2-1: Product: syz [ 37.236273][ T31] usb 2-1: Manufacturer: syz [ 37.240877][ T31] usb 2-1: SerialNumber: syz [ 37.249689][ T31] usb 2-1: config 0 descriptor?? [ 37.459949][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.468954][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.486303][ T310] usb 2-1: USB disconnect, device number 7 [ 37.666550][ T582] overlayfs: overlapping lowerdir path [ 37.911178][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.014062][ T584] ./dev/sda1: Can't lookup blockdev [ 38.080746][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 38.101142][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 38.120222][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 38.142673][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.161621][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.170771][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.189381][ T9] usb 3-1: config 0 descriptor?? [ 38.202015][ T582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 38.264374][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 38.264389][ T36] audit: type=1400 audit(1790721490.760:221): avc: denied { create } for pid=587 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.315121][ T36] audit: type=1400 audit(1790721490.810:222): avc: denied { getopt } for pid=589 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.366921][ T36] audit: type=1400 audit(1790721490.860:223): avc: denied { mounton } for pid=593 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.415355][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.422460][ T593] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.429746][ T593] bridge_slave_0: entered allmulticast mode [ 38.436012][ T593] bridge_slave_0: entered promiscuous mode [ 38.442870][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.449914][ T593] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.457015][ T593] bridge_slave_1: entered allmulticast mode [ 38.463486][ T593] bridge_slave_1: entered promiscuous mode [ 38.472735][ T376] bridge_slave_1: left allmulticast mode [ 38.478375][ T376] bridge_slave_1: left promiscuous mode [ 38.484157][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.491636][ T376] bridge_slave_0: left allmulticast mode [ 38.497274][ T376] bridge_slave_0: left promiscuous mode [ 38.503105][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.591619][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.598672][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.605940][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.612983][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.621317][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x3 [ 38.628722][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 38.631145][ T310] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 38.647195][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 38.654905][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 38.667103][ T9] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 38.679619][ T593] veth0_vlan: entered promiscuous mode [ 38.694118][ T593] veth1_macvtap: entered promiscuous mode [ 38.704127][ T376] veth1_macvtap: left promiscuous mode [ 38.709630][ T376] veth0_vlan: left promiscuous mode [ 38.754701][ T36] audit: type=1400 audit(1790721491.250:224): avc: denied { mounton } for pid=593 comm="syz-executor" path="/root/syzkaller.xdyUZk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.781473][ T36] audit: type=1400 audit(1790721491.250:225): avc: denied { unmount } for pid=593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.822289][ T310] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.831511][ T310] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 38.840622][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.860834][ T310] usb 2-1: config 0 descriptor?? [ 38.891879][ T10] usb 3-1: USB disconnect, device number 8 [ 39.091173][ T600] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.243631][ T600] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.253787][ T600] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.266810][ T600] usb 5-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 39.275880][ T600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.502569][ T427] usb 5-1: USB disconnect, device number 2 [ 39.631174][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.781133][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 39.787276][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.798219][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 39.808112][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 39.818153][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 39.832365][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.841497][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 39.849474][ T10] usb 3-1: SerialNumber: syz [ 39.855000][ T607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 39.862326][ T607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 39.870016][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 39.876087][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 40.070501][ T606] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.077703][ T606] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.187348][ T613] ./dev/sda1: Can't lookup blockdev [ 40.281605][ T36] audit: type=1400 audit(1790721492.780:226): avc: denied { read write } for pid=616 comm="syz.3.91" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 40.305288][ T36] audit: type=1400 audit(1790721492.780:227): avc: denied { open } for pid=616 comm="syz.3.91" path="/28/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 40.328812][ T36] audit: type=1400 audit(1790721492.780:228): avc: denied { ioctl } for pid=616 comm="syz.3.91" path="/28/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 40.331892][ T10] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 40.406024][ T36] audit: type=1400 audit(1790721492.900:229): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.427170][ T36] audit: type=1400 audit(1790721492.900:230): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.581651][ C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68! [ 40.589747][ C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03! [ 40.597255][ C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 50! [ 40.610936][ C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 63! [ 40.618332][ C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 20! [ 40.781126][ T600] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 40.801099][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.828413][ T31] usb 3-1: USB disconnect, device number 9 [ 40.836606][ T31] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 40.943689][ T600] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 40.955316][ T600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 40.966754][ T600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 40.973840][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 40.978153][ T600] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.995833][ T600] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.996522][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.004958][ T600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.013615][ T10] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 41.032825][ T10] usb 5-1: config 179 has no interface number 0 [ 41.035281][ T600] usb 4-1: config 0 descriptor?? [ 41.044865][ T640] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 41.046233][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.073612][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 41.082787][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.304602][ T638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 41.365069][ T10] usb 5-1: USB disconnect, device number 3 [ 41.398548][ T31] usb 2-1: USB disconnect, device number 8 [ 41.407244][ T689] ./dev/sda1: Can't lookup blockdev [ 41.455974][ T600] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x3 [ 41.463590][ T600] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 41.470988][ T600] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 41.479034][ T600] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 41.489205][ T600] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 41.641128][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.711686][ T600] usb 4-1: USB disconnect, device number 11 [ 41.792174][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.802360][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.815378][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 41.824440][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.871126][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.026361][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.037778][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.047479][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.062601][ T9] usb 3-1: USB disconnect, device number 10 [ 42.063368][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 42.077599][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 42.085715][ T31] usb 2-1: Product: syz [ 42.089889][ T31] usb 2-1: Manufacturer: syz [ 42.094508][ T31] usb 2-1: SerialNumber: syz [ 42.257172][ T707] FAULT_INJECTION: forcing a failure. [ 42.257172][ T707] name failslab, interval 1, probability 0, space 0, times 0 [ 42.283862][ T707] CPU: 0 UID: 0 PID: 707 Comm: syz.3.102 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 42.283893][ T707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.283914][ T707] Call Trace: [ 42.283920][ T707] [ 42.283928][ T707] __dump_stack+0x21/0x30 [ 42.283962][ T707] dump_stack_lvl+0x140/0x1c0 [ 42.283988][ T707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.284013][ T707] ? cgroup_bpf_inherit+0x472/0x4c0 [ 42.284033][ T707] dump_stack+0x19/0x20 [ 42.284056][ T707] should_fail_ex+0x3c2/0x510 [ 42.284079][ T707] should_failslab+0xac/0x100 [ 42.284103][ T707] __kmalloc_cache_noprof+0x41/0x470 [ 42.284124][ T707] ? cgroup_mkdir+0xbe2/0x1600 [ 42.284148][ T707] cgroup_mkdir+0xbe2/0x1600 [ 42.284172][ T707] ? __cfi_cgroup_mkdir+0x10/0x10 [ 42.284194][ T707] kernfs_iop_mkdir+0x1be/0x2d0 [ 42.284220][ T707] vfs_mkdir+0x591/0x810 [ 42.284246][ T707] do_mkdirat+0x240/0x530 [ 42.284270][ T707] ? strncpy_from_user+0x14f/0x280 [ 42.284293][ T707] ? __cfi_do_mkdirat+0x10/0x10 [ 42.284318][ T707] ? getname_flags+0x203/0x6b0 [ 42.284340][ T707] __x64_sys_mkdir+0x70/0x80 [ 42.284365][ T707] x64_sys_call+0x26c8/0x2ee0 [ 42.284382][ T707] do_syscall_64+0x57/0xf0 [ 42.284401][ T707] ? clear_bhb_loop+0x50/0xa0 [ 42.284425][ T707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.284449][ T707] RIP: 0033:0x7f969d19e159 [ 42.284466][ T707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.284481][ T707] RSP: 002b:00007f969df80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 42.284502][ T707] RAX: ffffffffffffffda RBX: 00007f969d425fa0 RCX: 00007f969d19e159 [ 42.284517][ T707] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000000 [ 42.284530][ T707] RBP: 00007f969d23506b R08: 0000000000000000 R09: 0000000000000000 [ 42.284541][ T707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.284552][ T707] R13: 00007f969d426038 R14: 00007f969d425fa0 R15: 00007ffd7709db48 [ 42.284568][ T707] [ 42.284673][ T707] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 42.504226][ T707] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 42.512623][ T707] CPU: 0 UID: 0 PID: 707 Comm: syz.3.102 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 42.523982][ T707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.534029][ T707] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 42.539488][ T707] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 f7 2a 61 00 48 8b bb 08 01 00 00 [ 42.559105][ T707] RSP: 0018:ffffc9000d977ca8 EFLAGS: 00010206 [ 42.565271][ T707] RAX: ac51f480bb22ef00 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 42.573245][ T707] RDX: ffff88812efea380 RSI: ffff88812f662000 RDI: ffff888100042000 [ 42.581210][ T707] RBP: ffffc9000d977d58 R08: ffffffff81eeecf0 R09: ffffffff8109c108 [ 42.589169][ T707] R10: ffffffff85a52a67 R11: ffffffff85c0012f R12: 0000000000000021 [ 42.597125][ T707] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88812f662010 [ 42.605092][ T707] FS: 00007f969df806c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.614014][ T707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.620587][ T707] CR2: 00007f969df7fff8 CR3: 0000000120c88000 CR4: 00000000003526b0 [ 42.628550][ T707] Call Trace: [ 42.631817][ T707] [ 42.634734][ T707] ? __cfi_cgroup_mkdir+0x10/0x10 [ 42.639751][ T707] kernfs_iop_mkdir+0x1be/0x2d0 [ 42.644600][ T707] vfs_mkdir+0x591/0x810 [ 42.648839][ T707] do_mkdirat+0x240/0x530 [ 42.653159][ T707] ? strncpy_from_user+0x14f/0x280 [ 42.658259][ T707] ? __cfi_do_mkdirat+0x10/0x10 [ 42.663098][ T707] ? getname_flags+0x203/0x6b0 [ 42.667848][ T707] __x64_sys_mkdir+0x70/0x80 [ 42.672430][ T707] x64_sys_call+0x26c8/0x2ee0 [ 42.677089][ T707] do_syscall_64+0x57/0xf0 [ 42.681490][ T707] ? clear_bhb_loop+0x50/0xa0 [ 42.686157][ T707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.692043][ T707] RIP: 0033:0x7f969d19e159 [ 42.696456][ T707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.716057][ T707] RSP: 002b:00007f969df80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 42.724467][ T707] RAX: ffffffffffffffda RBX: 00007f969d425fa0 RCX: 00007f969d19e159 [ 42.732433][ T707] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000000 [ 42.740398][ T707] RBP: 00007f969d23506b R08: 0000000000000000 R09: 0000000000000000 [ 42.748361][ T707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 42.756321][ T707] R13: 00007f969d426038 R14: 00007f969d425fa0 R15: 00007ffd7709db48 [ 42.764293][ T707] [ 42.767300][ T707] Modules linked in: [ 42.771499][ T707] ---[ end trace 0000000000000000 ]--- [ 42.779690][ T707] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 42.785237][ T707] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 f7 2a 61 00 48 8b bb 08 01 00 00 [ 42.801409][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 42.813511][ T707] RSP: 0018:ffffc9000d977ca8 EFLAGS: 00010206 [ 42.832238][ T707] RAX: ac51f480bb22ef00 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 42.836517][ T31] usb 2-1: USB disconnect, device number 9 [ 42.885795][ T31] usblp0: removed [ 42.891203][ T707] RDX: ffff88812efea380 RSI: ffff88812f662000 RDI: ffff888100042000 [ 42.899280][ T707] RBP: ffffc9000d977d58 R08: ffffffff81eeecf0 R09: ffffffff8109c108 [ 42.907290][ T707] R10: ffffffff85a52a67 R11: ffffffff85c0012f R12: 0000000000000021 [ 42.915279][ T707] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88812f662010 [ 42.923288][ T707] FS: 00007f969df806c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.932249][ T707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.938845][ T707] CR2: 00005628291ef138 CR3: 0000000120c88000 CR4: 00000000003526b0 [ 42.946876][ T707] Kernel panic - not syncing: Fatal exception [ 42.953187][ T707] Kernel Offset: disabled [ 42.957525][ T707] Rebooting in 86400 seconds..