last executing test programs: 1m16.389349994s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getegid() r5 = getuid() mount$tmpfs(0x0, &(0x7f0000000300)='./sys/class/devcoredump/disabled\x00', &(0x7f0000000340), 0x800010, &(0x7f00000026c0)={[{@grpquota}, {@quota}, {@huge_never}, {@size={'size', 0x3d, [0x37, 0x65, 0x32, 0x6b, 0x65, 0x65]}}, {@size={'size', 0x3d, [0x0, 0x0, 0x33]}}, {@gid={'gid', 0x3d, r3}}, {@noswap}, {@gid={'gid', 0x3d, r4}}], [{@subj_type}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r5}}, {@subj_type={'subj_type', 0x3d, 'syz0\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x12}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '[@]##'}}]}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x40d4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002740)={0x2020}, 0x15b9) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m16.200259409s ago: executing program 1 (id=5): unshare(0x68040000) unshare(0x10200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x2bf3, &(0x7f0000000080)={0x0, 0x2897, 0x2000, 0x3, 0x19a}, &(0x7f0000000100), &(0x7f0000000180), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'bridge_slave_0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x14, r3, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0xc891) 1m16.157345599s ago: executing program 1 (id=6): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x401) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2f0681, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = dup(r1) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r3, 0xc, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e64, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r7, r7, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 1m16.018276783s ago: executing program 32 (id=6): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x401) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2f0681, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = dup(r1) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r3, 0xc, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e64, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r7, r7, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 1m8.644277282s ago: executing program 0 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = getpgrp(0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="6a2c00953662474df5f3ff34945fed59089bb43989daaa1f771514042c5fa567ffd364509e99ca11877bf36dbb52f9439383df95f62d5b5b91ac44dec0dc283200fcc82cdffc0ea51e07b6d4092d0f52c775fc731bbd987b1eaada721905d914792770eb08f916f5a126de0917fdd5825cdc33cf3840b5f0f65c2731827971dbfcfa98ace4e6ed4d3217fa7eac8138375ffce0e8", 0x94}, {&(0x7f0000000400)="d056d0d4c41f6a28d51b1aa15ce9ac099d9c048b38a2800b78a3c5f06fe46f4931dc15337c63512ae1804083caa3994463f25a86fe2041fed273b2f541a2ed540f7891668292e361157a587b6f73747f877b3782d7779390a126de406ad3e134954822325e97d5d011039658d48a8865bacd9dc582efd09848dc6bfedb8e995085587384eae296c20e517a05c2e96e523f20e035b5a7c3919548bcf65e506f02b87980", 0xa3}], 0x2}}], 0x1, 0x2000) tkill(r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000080)="f081550000a000000f004818430f01ca0fbe252e8a094d36420f70562600b9800000c00f3267420f01c366bad004b00bee2c0cb8b782678eef66ba470f080ced45c194710a000000058a3bc4827dbcae48b805000000000000000f23d80f21f835000000200f23f89008f2", 0x6b}], 0x1, 0x2, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f147f000800000904000a000000000009000000000000004c780001a198", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000001000)="fc", 0x1, 0x1000) fsync(r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000280)={0x0, r4, 0xffffffffffffffff, 0x8, 0x2560, '\x00', {0x80000000, 0x3, 0x4dc, 0x0, 0x2, 0x7, 0x7, 0x904, {0x2, 0x7}, {0xfffffffffffffff8, 0x8}, {0x7fffffff, 0x40}, 0x0, 0x9, 0x1, 0x9, 0xf4, 0x3, 0x8, 0x0, 0x0, 0x4, '\x00', 0x9, 0x3ff, 0xc, 0xffff}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) getpgrp(0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="6a2c00953662474df5f3ff34945fed59089bb43989daaa1f771514042c5fa567ffd364509e99ca11877bf36dbb52f9439383df95f62d5b5b91ac44dec0dc283200fcc82cdffc0ea51e07b6d4092d0f52c775fc731bbd987b1eaada721905d914792770eb08f916f5a126de0917fdd5825cdc33cf3840b5f0f65c2731827971dbfcfa98ace4e6ed4d3217fa7eac8138375ffce0e8", 0x94}, {&(0x7f0000000400)="d056d0d4c41f6a28d51b1aa15ce9ac099d9c048b38a2800b78a3c5f06fe46f4931dc15337c63512ae1804083caa3994463f25a86fe2041fed273b2f541a2ed540f7891668292e361157a587b6f73747f877b3782d7779390a126de406ad3e134954822325e97d5d011039658d48a8865bacd9dc582efd09848dc6bfedb8e995085587384eae296c20e517a05c2e96e523f20e035b5a7c3919548bcf65e506f02b87980", 0xa3}], 0x2}}], 0x1, 0x2000) (async) tkill(r3, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000080)="f081550000a000000f004818430f01ca0fbe252e8a094d36420f70562600b9800000c00f3267420f01c366bad004b00bee2c0cb8b782678eef66ba470f080ced45c194710a000000058a3bc4827dbcae48b805000000000000000f23d80f21f835000000200f23f89008f2", 0x6b}], 0x1, 0x2, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r4, &(0x7f0000000000)="240000001a005f147f000800000904000a000000000009000000000000004c780001a198", 0x24) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) (async) pwrite64(r5, &(0x7f0000001000)="fc", 0x1, 0x1000) (async) fsync(r5) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000280)={0x0, r4, 0xffffffffffffffff, 0x8, 0x2560, '\x00', {0x80000000, 0x3, 0x4dc, 0x0, 0x2, 0x7, 0x7, 0x904, {0x2, 0x7}, {0xfffffffffffffff8, 0x8}, {0x7fffffff, 0x40}, 0x0, 0x9, 0x1, 0x9, 0xf4, 0x3, 0x8, 0x0, 0x0, 0x4, '\x00', 0x9, 0x3ff, 0xc, 0xffff}}) (async) 1m8.603938803s ago: executing program 0 (id=51): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00fe0000000000000000000800040001000000", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x12000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m7.642360596s ago: executing program 0 (id=62): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x7709, &(0x7f00000000c0)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pwritev(r1, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x4, 0xfff) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000022c0), 0x0, 0x40000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x73) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/bridge0/bridge/no_linklocal_learn\x00', 0x0, 0x48) read$FUSE(r8, &(0x7f0000000240)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002280)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendfile(r0, r0, 0x0, 0x24002de8) 1m7.228031356s ago: executing program 0 (id=64): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581033b4cc6"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m5.256646654s ago: executing program 0 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, 0x0) ioctl(r2, 0xc138fd0e, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$tipc2(0x0, r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f00006c9000/0x4000)=nil, 0x4000, 0x3, 0x2010, r3, 0xbe003000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") (async) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") syz_clone3(&(0x7f0000000600)={0x100000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)=0x0, {0x26}, &(0x7f00000003c0)=""/218, 0xda, &(0x7f00000004c0)=""/252, 0x0, 0x0, {r2}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000680)={r5}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffffe}, 0x3}, 0x31) (async) socket$packet(0x11, 0x0, 0x300) (async) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888) 1m5.128341687s ago: executing program 0 (id=80): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000100033062cbd7000000000007f70bf9e"], 0xf0}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macsec0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000000007000000441d0d"], 0x38}}], 0x1, 0x46000) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=', @ANYRESHEX=r2]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000000740)={&(0x7f0000000640)=[{0x3285, 0x2, 0x0, {0x9e, 0xfffffff7}}, {0x200, 0x0, 0x0, {0x6, 0x1, 0x2}}, {0x8, 0x2, 0x0, {0x6cf, 0x3, 0x2}}, {0x6, 0x3, 0x0, {0x2, 0x2}}, {0x1, 0x2, 0x0, {0x6, 0x2, 0x1}}, {0xd, 0x2, 0x0, {0x6, 0x8001, 0x2}}, {0xc, 0x1, 0x0, {0x6, 0x9}}, {0xfffffffffffffff7, 0x2, 0x0, {0xf8, 0x2}}], 0x8, 0x20, 0x6, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000020, 0xa9, 0x2f93) ioctl$VHOST_VDPA_GET_VQS_COUNT(r5, 0x8004af80, &(0x7f0000000000)) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x7e, 0x80800) r8 = getpgrp(0x0) r9 = gettid() kcmp(r8, r9, 0x7ffffffe, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x0, r7}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000540)={0x0, 0x3, 0x2, 0x9}) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x2}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x4, 0x6, 0xb, 0x7, 0x9, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x1, 0x1002, 0xf1, 0xb, 0x7ffffff7ffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x4450}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 56.436082109s ago: executing program 2 (id=118): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r2], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x4880) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000000)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) 55.14432232s ago: executing program 2 (id=130): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x40002, 0x260, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xf1cb, 0x8, 0x3, 0x310, 0x0, r8}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaea4, 0x200, 0x2, 0x2cd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x59c1, 0x8000, 0x1, 0x119, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a3b, 0x200, 0x3, 0x3aa, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x39da, 0x1, 0x0, 0x166, 0x0, r8}}], 0x4, &(0x7f0000001a00)={0x2e, 0x1c, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x41b}, 0x0, r5, '\x00', {0x4, 0xa50, 0x0, &(0x7f0000000a00)=@buf_max_buf="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"}}, &(0x7f0000001a80)) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) getuid() mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ASSERT(r10, 0x29, 0xcf, 0x0, 0x0) unlinkat(r8, &(0x7f0000000100)='./file1\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x2, 'vlan1\x00', {0x9}, 0x2}) syz_open_procfs(0x0, 0x0) 52.091874824s ago: executing program 2 (id=144): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0xffffffff, 0x1000, 0xffffffff, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x43) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x1, 0x5, 0x7}}, 0xfffffffffffffd01) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0xa) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0xffffffff, 0x1000, 0xffffffff, 0x7ff, 0xf84, 0x3}, 0x1c) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) (async) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) (async) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x43) (async) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) (async) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x1, 0x5, 0x7}}, 0xfffffffffffffd01) (async) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0xa) (async) 49.903704818s ago: executing program 33 (id=80): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000100033062cbd7000000000007f70bf9e"], 0xf0}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macsec0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000000007000000441d0d"], 0x38}}], 0x1, 0x46000) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=', @ANYRESHEX=r2]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000000740)={&(0x7f0000000640)=[{0x3285, 0x2, 0x0, {0x9e, 0xfffffff7}}, {0x200, 0x0, 0x0, {0x6, 0x1, 0x2}}, {0x8, 0x2, 0x0, {0x6cf, 0x3, 0x2}}, {0x6, 0x3, 0x0, {0x2, 0x2}}, {0x1, 0x2, 0x0, {0x6, 0x2, 0x1}}, {0xd, 0x2, 0x0, {0x6, 0x8001, 0x2}}, {0xc, 0x1, 0x0, {0x6, 0x9}}, {0xfffffffffffffff7, 0x2, 0x0, {0xf8, 0x2}}], 0x8, 0x20, 0x6, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000020, 0xa9, 0x2f93) ioctl$VHOST_VDPA_GET_VQS_COUNT(r5, 0x8004af80, &(0x7f0000000000)) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x7e, 0x80800) r8 = getpgrp(0x0) r9 = gettid() kcmp(r8, r9, 0x7ffffffe, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x0, r7}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000540)={0x0, 0x3, 0x2, 0x9}) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x2}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x4, 0x6, 0xb, 0x7, 0x9, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x1, 0x1002, 0xf1, 0xb, 0x7ffffff7ffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x4450}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 49.031448959s ago: executing program 2 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x10000, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x250) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x40000041) 48.914834321s ago: executing program 2 (id=161): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) syz_usb_connect$uac2(0x5, 0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="120100030000002035121000400001020301090288000301000002080b0111210a2002090400000001d74a5402240107"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x14, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x24, 0x0, &(0x7f0000000740)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0xc102, 0x0) pwritev(r4, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}], 0x1, 0x0, 0x800) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r5 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x7f, @any, 0x7, 0x2}, 0xe) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7d8, 0x0, 0x80000001, 0x9, 0x8, r5}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208020300ecff08ac50065453d4dba6f9623f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a6800001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000", 0xb9) r8 = syz_open_procfs(r6, &(0x7f0000000000)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) mkdirat(r8, &(0x7f0000000040)='./file0\x00', 0x1) 48.839039213s ago: executing program 2 (id=162): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0xa001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0xf, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x8, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x80000000, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x7fffffff, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x2], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x406, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x1, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x24, 0x1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 48.704854637s ago: executing program 34 (id=162): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0xa001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0xf, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x8, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x80000000, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x7fffffff, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x2], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x406, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x1, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x24, 0x1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 47.196336094s ago: executing program 3 (id=172): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fallocate(r3, 0x0, 0x4, 0x3) (async) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) (async) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x4, 0x800006, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x100, 0x78a}}, 0x50) (async, rerun: 32) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000540)="6414db45d5", 0x5}], 0x1, 0x0) (async, rerun: 32) close(0x3) (async) r5 = pidfd_getfd(r2, r2, 0x0) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000280)={0x2, 0x4000}) (async) read$FUSE(r6, &(0x7f0000001400)={0x2020}, 0x2020) (async, rerun: 64) setns(r5, 0x66020000) (async, rerun: 64) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x1}, {0x2}, 0x14b, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="ae8abf2c10444e5ea6d4c6cf83b3a717100822e7e3b9306e310ca77c99af1c2a16dc51cdab9e65484016f9ad4d02f3d876d9a5fd70f304dbb1e93025745e5a1df8b1bd5e7f9bbcc4cc28f312c10c15b4af0601d5a72466a798a418c3ea93aa38f3f77736105b392e6503156809340b12323132e89a45e31349d978737052ad032d7019a4425c74b80a4ee6a7b8b167619d65e4595233b5588f44c974fa08a5ce14211693d00120d0dc8c074f73e747", 0xaf, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe1}) 46.299688935s ago: executing program 3 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f00000001c0)='./mnt\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0x400, &(0x7f0000000240)) 46.293750985s ago: executing program 3 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) getxattr(&(0x7f0000000180)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@random={'trusted.', 'proc\x00'}, &(0x7f0000000280)=""/26, 0x1a) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="c74424007e0a782ec744240284000000c7442406000000000f0114240f01dc67f3450f6fbb0a00000066420f0766baf80cb82cb91a8bef66bafc0cb089ee0f070f0132450f0766baa100ec8f6838a2d258", 0x51}], 0x1, 0xe8, 0x0, 0x0) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x5) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r6, 0x8000}], 0x1, 0x0, 0x0, 0x0) r7 = dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x13) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x25000, 0x58000, 0x0, 0x1, 0xf, 0x80, 0xac, 0x0, 0x0, 0x77, 0x8, 0x20}, {0x1000, 0x10000, 0xb, 0x5, 0xff, 0x8, 0x7, 0x9, 0x3, 0x26, 0x81, 0x1}, {0x1, 0x7000, 0xd, 0x9, 0xff, 0x66, 0x5, 0x1, 0x6, 0x8, 0x0, 0x62}, {0x1000, 0xfeeb9001, 0x0, 0x1, 0xe, 0xad, 0xc, 0x0, 0x2, 0x6, 0x76, 0xb9}, {0xffc, 0x3000, 0xd, 0xff, 0xff, 0x9, 0x1, 0x9, 0xf, 0xf1, 0x2, 0x1}, {0xffff1000, 0x4, 0xd, 0x0, 0xe, 0x22, 0xb4, 0x0, 0x0, 0x81, 0xca, 0x4}, {0x3ff8, 0x2000, 0xf, 0x6, 0x3, 0x2, 0x40, 0x4, 0x5, 0x2, 0x4, 0x1}, {0x1, 0x79ffe, 0x10, 0xfd, 0x1, 0x6, 0x3, 0x7, 0x6, 0x22, 0xd, 0x9}, {0x25000, 0x7}, {0x6e000, 0x4}, 0xa0000000, 0x0, 0x1ff8, 0x440210, 0xd, 0xe400, 0x41000, [0x8, 0x7fffffffffffffff, 0x5, 0x1b58]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r8, &(0x7f0000000040)='\a', 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f01cb67d2a317000000f326f082855fca8765dd8d05003e0f22a62e670f01cb0f090f01c4640fc79c0000f20f09", 0x2e}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) chdir(&(0x7f00000001c0)='./cgroup.cpu/memory.force_empty\x00') 45.393136257s ago: executing program 3 (id=194): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101402, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="200008000000000000000000070000008608ffffffff0502860600000000dbab"], 0x20}}], 0x1, 0x8090) sendmsg$sock(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000008010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="bfaae954", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000855}, 0x4c000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101402, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="200008000000000000000000070000008608ffffffff0502860600000000dbab"], 0x20}}], 0x1, 0x8090) (async) sendmsg$sock(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000008010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="bfaae954", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000855}, 0x4c000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 45.320979629s ago: executing program 3 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4", 0x82}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c2", 0x43}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000380)="1a5638b8670e94f99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c0972f10feb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64702b3d9abdadd9f9fc7a36e68d46b7000000d5da7e0df66612c47df71f4b332c87d097fd987d7cb65032439cf402", 0x84}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be36856378", 0x92}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0", 0x83}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b", 0x1e}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r1, &(0x7f0000001e00)="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", 0x2c9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 45.24441747s ago: executing program 3 (id=196): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), r0) 38.608698312s ago: executing program 6 (id=230): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x3000400, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/10, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000240)={0x0, &(0x7f00000004c0)=[@wrmsr={0x65, 0x20, {0x26b, 0x80000001}}], 0x20}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000003080)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x0, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="f33ea323483a97ccaff0e245cb5e31757b33e3b28503f46d87eeba5f9b5b498086", 0x21}, {&(0x7f0000000100)="288692a480823d33217c08606ccbe316706879dbe0ecdba64ab557c962d08fee160f2f370cd4fd8e2ef2b293755aed1b19d864a5c3cd2ee597934ab2f390c38db756c7398fae62ef28f0ee2dcd5eba14056eb40ba824dad3745aaa662cb051fd086fa7f805ebc4f6ffddc1a9e82d269381d4f5cdff2149a511d2e0f417cf3179fcff791fb9a35d26d15b15835b6ea71b846d02b5a9a4e7a8cdc5c7", 0x9b}, {&(0x7f0000000300)="d3fe1c8e6399532114d8f7c6dcfd30ed97eb23ff3944e2ab1fe33835adc915b651b0eb53690bd3225e184114d8f21ba074fcede5db9076e372e3b3e7", 0x3c}, {&(0x7f0000000340)="59b88f8a2f3af3320becb3173a2bba58306bda8bf96bda34720cd361d25ac0e4902eff7b790b8be4ef9ff76e20d2d25c4d8cc8c431755006afe2ed32d1ec7684dffeff2b2d581c84ad02f20401d5a312a30a95d622544c01ce2af138406f1ab9d5f6edd611764384fb0a391a760623777609046e355f2d0840f5a70830a6b0a4edfeaa7ab9001379e4c5773ae6e243313668c2592218978f3010d2cff12761e4cb548a7867e09dfb0ac9b068c6c7f1cc69bd6f2b00285888888f8d7a9e18b93e775199ac0bb82998", 0xc8}], 0x4, &(0x7f0000000500)=[{0x18, 0x115, 0x7, "3123f504d3"}, {0xe0, 0x1, 0x6, "b1379de6cc7fa113edc87d5eea69155d45bab404d76634e87318bcb8c97d8c2204daad0570c361877f59b62a20771b0fbd98e91cb878662061474ab160e81c3e23f7ad977abbbf003b9197cf4ec8fabcac328d8f89982c862ed7dea29a39e67aae470ce0920a710d1e85fe36d2bd7ae72f2a60ccfe7cb1bc1c22c8e2b5c752cf6def033ce313f54f69b6ea4d9d877bf0ca7efe313f5aa59563f68df18112328b00d9e0b0457416241191127c87036f12f494e0ff558b0f2d91af4514c1247ed2895a256b8cbf3ec581859cbcd2e66e62"}, {0x88, 0x1, 0x4, "ba828ff775c5f339b707ea78b77d69cbe617f88b57076016614d72a99354031ea520969b215ba2fd370eb9fad211b1966980537b448cc57e37be30729174f4e2df4c90646615d665735861fd378ffdf7732b5fe402f924b98352ec1890264e624ef3fe1e93aa7256ec0a3091702dfd5e7838484c0c1b7768"}, {0xc8, 0x110, 0x0, "06afeea2da415e20f27e179727cb563ebdef5375bd59762b4d58ef6147a921235c6bb8b194ece8d67af94d90524b3a48237648b674c8aa2a9a7a7b9c03f5fc5663edd136c9c6673652db7e49d6630050df8f9233a6e7108715f27a872f9c6a11198e02478f110235c2e81e56fba126d55bf4967df77f349c3e72b2bfbc7fd920909f75640ad74ad7ef318b9465aa252141f8fc9181e8241a70d416a306100873904513eae47937464fdc8859f54474398c671f8ccac43813"}, {0x68, 0x84, 0xa7d3, "3be6ae490aff90663d2feefce7ee78d5a8b635eb7cf9900db24e525a71e670489fbfa7ec0beb1998db964bf1de63815cad508c60fa011cbd53154ea6d85872e2bd2b6391b8375cf907dabcdd15228a4e591bd8bcfca3b9"}, {0x68, 0x29, 0x2, "6dcf0a7004420b3f14e41fd2f6343387dbe16ace7642e7df9e3208b7b05942fae9427658b02889e5ec86febcf79d46d9ec1564c484aa0d30719a0441c56d0fbee8aff56e5fc6cbdd170bb404ab33cb1877af70256890"}, {0x100, 0x119, 0x1, "dbfa2eb087fed752d0fa1bf96eced8c97043be1f658305d1876c12b592793696f8d885b6fba5e973e6d1231876297d5a1001072c7f9e9aa519275e514b4ad5d04d1b4340d0b811cfa432e9248ecff6683e407fc583a0f536d8749e6ce2a18fce2e76d401f124139cc504043b746645df3e882d46bc9612a405ecb17533f216d0e0dc3f8de23c8ad47e186acc67c49d78f3f51e4c325f7b321edb4db18845cd4738a1ff9cdee52956304643db4b9f011f548c63b5e25b2f166fa6544cd054ac6bd027ee8645de1c4096fc26fe66b4ff901ce8f6c37e682e38d48f603f1b1790c5f0843c301ac268fd84"}, {0x98, 0x10d, 0xffffff26, "223796c99fa0ed81aec4650702bc60b1b4a05bf57c54778cd0996577fd23acdd61c52406c3e161a520b447ba192220b6639564bb13fac61a8f29117f0721210cbf77752e61341baceb657967fca95355f98f3c971edd86e78947820cd7c31af149b044083dc16f66bf27f4d3a62aeaa4e2ed326af58690fc1263e4d27de50965b559"}], 0x4b0}}, {{&(0x7f00000009c0)=@llc={0x1a, 0x322, 0x3, 0x0, 0x8, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=[{0x70, 0x1, 0x9, "73f23108d597ae6ff34aed3c744304d3db7600d6acef8b2a77e909a1e6102b18fcdbb6004cf51c9be27a3b4e795102323539ff5d95d37dd771dcb35cf2a9e04830e2ee2a19050c08659bcf95edfa34ecb7519efa35704af5e0c42a"}, {0xa0, 0x108, 0x1e, "a754f0cd3c1083664dbf242cea49b075b976d8f54004e0bd0b409a45caee0ab5c3d824b6badc654164b89e487ab8656a770f7671e4e6d09bc9befde9e326daeb71ba5a0bf7ec2cbc3416f6b1b17249d0b98f6fcaaf71294ec6f4ff983f73418b9b6f57a641c86cf6dd9c8cc1ec08be53df593db2e040835a20c9eed4916ce17867800b82eaaa85fe4662e66a81"}, {0x1010, 0x10b, 0x40e3, "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"}], 0x1120}}, {{&(0x7f0000002bc0)=@l2tp6={0xa, 0x0, 0x2, @private1, 0x4, 0x3}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)="1a71de1b881f0ec74d78e56b26d1bfad35dfb37f02359a962d52bb48057efd121fad1fec0c79d5fbd4fab2d5ef53763233ba76fdbb7182441aabf1d4233d4d7d39c800d0f60da3857de76fdc23237e9baac2952998af54866667866287c51dc38a24dd3521f3c3973995a6e06df36c946f8fd7702cbcf23bd4c8669ad91876b69ca14deb3fd9670aa884fc3b5373ac8adef2baaccdc108d8432f200d5f7d0a12abe0687b6139def89357533237a968cf8884d34fc056", 0xb6}, {&(0x7f0000002d00)="0a0667dafb6abe1dd13033fc7a8c", 0xe}], 0x2, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"], 0x2f8}}], 0x3, 0x0) syz_usb_connect(0x3, 0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904500b05a97a37020a24010a0306020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 37.150693027s ago: executing program 6 (id=239): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x10, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$lock(r1, 0x6, &(0x7f0000000300)={0x1, 0x3, 0x400, 0x5}) getitimer(0x1, &(0x7f0000000000)) 37.084369669s ago: executing program 6 (id=240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114", 0x4a}], 0x1}, 0x0) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000005000/0x2000)=nil, 0x2000}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000340)=[@enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xee54, 0x5}}, @wrmsr={0x65, 0x20, {0xa85, 0x8}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x2f, 0x1, 0x7, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x822f}}, @nested_load_syzos={0x136, 0x105, {0x2, 0x1, [@nested_load_code={0x12e, 0x7d, {0x1, "c40379630d0a0000000b420f013a66b8ee000f00d0410f302e450fbabefdffffff06c7442400e7000000c74424028000c0feff2c24c74424000000c0fec744240202000000c7442406000000000f011c24660f38813966ba4200ed66bad00466b8000066ef"}}, @out_dx={0x6a, 0x28, {0x1696, 0x0, 0x13b7}}, @in_dx={0x69, 0x20, {0xbd97, 0x6}}, @wrmsr={0x65, 0x20, {0x266, 0x3ff}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x51, 0x1, 0x88, 0x1}}, @wr_crn={0x67, 0x20, {0x2, 0xffff}}, @set_irq_handler={0xc8, 0x20, {0x5e, 0x1}}, @wr_drn={0x68, 0x20, {0x2, 0x659b}}], 0x24d}) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000600)=0x979) 37.083865469s ago: executing program 6 (id=241): r0 = open(0x0, 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x1, 0x1, 0x2, 0xa, 0x3, 0x80, {0x6, 0x17d, 0xfffffffffffffffd, 0x0, 0x103, 0x7cf4, 0x9, 0x7ffffffd, 0x0, 0x1000, 0x20000000, 0x0, 0x0, 0x3ff, 0x7}}, {0x0, 0x3}}}, 0xa0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) keyctl$chown(0x4, 0x0, r3, r4) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x5, 0x0, 0x101, 0x300, "6872147374c4028000000000caafcf7d4e021f6a1a3ca18570073fbce2ffff07"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r6, 0x1) (async) flock(r5, 0x5) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r7, &(0x7f0000000340)=""/19, 0x13, 0x0) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18f) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r8, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0xd) (async) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) (async, rerun: 32) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (rerun: 32) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xd82, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) openat(r5, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x90) 36.589181461s ago: executing program 6 (id=242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) (async) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = dup(r0) connect$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, @none, 0x8}, 0xa) 36.500171473s ago: executing program 6 (id=243): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x808140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2a, 0x22, 0x0, 0x1000003, 0x8, 0xa9, 0x8, 0x2, 0x1}) syz_clone(0xc01f1980, 0x0, 0x4b, 0x0, 0x0, 0x0) 36.399966786s ago: executing program 35 (id=243): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x808140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2a, 0x22, 0x0, 0x1000003, 0x8, 0xa9, 0x8, 0x2, 0x1}) syz_clone(0xc01f1980, 0x0, 0x4b, 0x0, 0x0, 0x0) 30.008001371s ago: executing program 36 (id=196): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), r0) 17.456065216s ago: executing program 4 (id=405): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x705, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200400d4}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x672, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1002, 0x2, 0x9, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x1, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 17.271983441s ago: executing program 4 (id=406): sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x280}) ioctl$UBLK_U_CMD_STOP_DEV(r0, 0xc0207507, &(0x7f0000000200)={0x0}) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000280)={r1}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x378e) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000300)={0x3, 0xe6, "8e27a25dfc8be7e50ff4ac73b0642f57edd9e85eb5852b4bbb1e68cec224420b94a30144ad5b295bb6a8d38ba3100477f58da9b739e90264e107f5bcffdc637897e99a85852c5be95a342ec7def5d0f8e3347bcfd38079d7365e14b1772da5397ccb23034e7e338b4a778e7dd6cd9db0d996375c85a83e559c5f150ac13bbd2b0be7c3f4bafad93bf92b564e1c2b2588e35f40588e1ba2916c85be3a740e45c6b04babc2c425d80cc453b609dfbebaeca2252ca954ff05dcd6e61cd2efd6220ea6e2ca0f2b0be0d8202dcd06bfc981cd4e959896c1c72aef6f53608794e5b4eda1674a274620"}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xff) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000440)={0xffffffff}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x161) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0), 0xc40, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) write$nbd(r4, &(0x7f0000000540)={0x67446698, 0x1, 0x2, 0x2, 0x3, "600a56864ea52712386e3a48d0336fdb7d65ff267636207d7168f0acb0cdf4ca82d275ad2644f730c3da12efd9238aa5fdcd368ee052a35b1f6f49a235aaa74e382b7537c27e86a9896ef5244edd35a6416cbb783311a46e3c19"}, 0x6a) r5 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x101, 0x204000) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000600)) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000640)={0xd, 0x1}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffff8) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffff9) write$P9_RLOPEN(r4, &(0x7f0000000680)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x6}, 0xd073}}, 0x18) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000006c0)={0x4, 0x1}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000700)={0x1}) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000740)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x10b, 0x1}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x120, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 17.27123093s ago: executing program 4 (id=407): r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x20) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}, @hopopts={{0x18, 0x29, 0x36, {0xe44716a42bac69f7}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x4) write$tun(r0, 0x0, 0x1c) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040029df250e0003000800340005000008003c0005000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000000000)=0x4800008, 0x4) (async) r5 = syz_open_pts(r3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', 0x100) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000200)={0xfffe, 0xb3fd, 0x8, 0xb3, 0x4b, "060000fa0600"}) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x6) (async) syz_usb_connect$uac1(0x1, 0x90, &(0x7f0000000680)=ANY=[@ANYBLOB="1201010200000008da0b144040000102030109027e0003018160030904000000010100000a24010900280002"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 16.750784653s ago: executing program 4 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) setns(0xc9, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aea000f30300f272d9d53bf00b9e76dc30101220f01c3", 0x60}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x10003, 0x2, 0x70000, 0x2000, &(0x7f0000163000/0x2000)=nil}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) (async) setxattr$system_posix_acl(&(0x7f0000000100)='./mnt\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=0x0, @ANYBLOB="040007000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="e6a0cddd29d3e8a8ba08f195c236fa23998f0fe0a3f028d577a42cc34919515a929b4864b33e72b53c2587f4f62775bc3848ab5459bccddb7e0b96ca765bd930c31fa463e2714b4f359b39862efd32c6475c41645e05d2fa167d84068e349e80f09110362b03", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="10000100000000002000000000000000"], 0x64, 0x1) 16.600130837s ago: executing program 4 (id=410): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000002000)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x1, 0x3, 0x1, 0x6, 0x2, [0xc0000, 0x9, 0x3, 0xd11]}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x800) 16.4812431s ago: executing program 4 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x7b, 0x0, 0x0) 16.412177051s ago: executing program 37 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x7b, 0x0, 0x0) 4.207893827s ago: executing program 5 (id=441): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x4, @private=0xa010102, 0x4e24, 0x0, 'lblcr\x00', 0x4, 0x3, 0x5c}, {@private=0xa010100, 0x4e20, 0x1, 0xffff6c82, 0x7, 0xffff3faf}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x80, 0x700, 0x0, 0x94a, {{0xa, 0x4, 0x2, 0x31, 0x28, 0x67, 0x0, 0x89, 0x29, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x8, 0xe0, 0x0, 0x6, [0x10]}, @timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x4, [{@local, 0x9}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000d00)={0x4c, 0x12, 0x100, 0x70bd28, 0x25dfdbfd, {0x18, 0x6, 0xe, 0x9, {0x4e23, 0x4e21, [0xdd2, 0x9, 0x9, 0x7ff], [0x6, 0xee92, 0x9, 0x7], r4, [0x53, 0x6]}, 0x7, 0x7fffffff}}, 0x4c}, 0x1, 0x0, 0x0, 0x2c00800d}, 0x8000) r5 = socket$inet(0x2, 0x2, 0x1) ioctl(r5, 0x4a, &(0x7f00000009c0)="7710ddf14989fab481df0ba585fd40cf2467730a471f6b377b67a65a3c5958d7edc5d40d32767705e4a7faa836bb5c73a6cf31ce03") socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000002c0)="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", 0x559, r12) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_add_dev(r9, 0x0, r0, 0x0, &(0x7f0000000900)={0x2e, 0x10, 0x0, r14, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x2, 0x335, 0x0, 0x0, 0x1000, 0x3, r8, 0x0, 0x8}}}, &(0x7f0000000980)=0x0) syz_ublk_setup_queues(r14, r15, &(0x7f0000000840)={0x0, 0xc4df, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000e706, 0x800, 0x1000002, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x20000, 0x4003bfff, 0x2b9, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73b1, 0x8000, 0x0, 0x22f, 0x0, r10}}], 0x1, 0x0, 0x0) 4.11448778s ago: executing program 8 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='prev_comm ~ \"*\"', 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./ffs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x5) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) (async, rerun: 32) pipe2$9p(&(0x7f0000000080), 0x800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) (async) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') (async) r3 = syz_usb_connect$hid(0x3, 0x58, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xec, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xc1, 0xe4}}}}}]}}]}}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000) (async, rerun: 64) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200c280100002803c26313852642792c3cbdeace918d0fb74237cc4b44b73b5173080000008881ceaa52973661d6"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.944754064s ago: executing program 5 (id=444): syz_clone(0x20202000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000100), 0x86800) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0xc2) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x222) 3.860179776s ago: executing program 5 (id=445): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x109301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x10000) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='\x00', 0x1, 0x800c815, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000dc0)={0x1, 'veth0_virt_wifi\x00', {}, 0x6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x5, 0x9, 0x1000}, {0xfffb, 0x0, 0x9, 0x1}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x60) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x30000, 0xc0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) sendmsg$tipc(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5d194df136ec3186b5725f9553dcfb402ae9ecb254dc69b8df9bd0c88f78f44cbdb20b534a8d92caa3e25fc65d20ffdfd325b01cd18849b03de1a25b8fef801116067d2308e90f9c733c6f23", 0x4c}, {&(0x7f00000002c0)="e21af66254122092b7c6628e96e2e4443a853408249e078756debdf8cd35aa6a9d0a7911e1cc4173b3a9d064fc4b231a47bfa5e825b7af7a4efd69a3de59b47dfb68323e8c9dcc12ef8a4c0b42b6afa1dbb1e225ae50f8c9b516f6359c4d43320794e8138b4e9af122a5fef9c0d8408d64d5a12ac4", 0x75}], 0x2, &(0x7f0000000380)="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", 0xfc, 0x40000}, 0x20044021) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120101020be505208205a6b72710010203"], 0x0) getrandom(&(0x7f0000000080)=""/58, 0x3a, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x15, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x4, 0x9, "ec584f8c", "828e3f6e"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000a40)={0x14, &(0x7f00000009c0)={0x20, 0xc, 0x22, {0x22, 0x21, "b46e33ab368b4bf0dec4265b395df7f08aa16ddd431ceeffd27ad8064fbc89d0"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x20, 0x16, 0xf7, "38d90431cd523ac2a4ea007949e7c5920b2ed25627bbb595bf709a31812cf4fa5c0f70e6957d18facd420dce8162e9bc866a42231d5c8b3c17acaa0c20895ac0587412d287837851bca17dc9d91a98eac4a36471acda811db47b43f676bbc5a20be3e116fddeba86554c32a4f29d3534411af38e710a84d8e9c67e039649f2e74d8e360ef301018c115c302f82557e3641c954dd834806cc9df0cc4d49c4b0886c21e7e4d853f018cd0243a2c42a67396d1dd8baad0fa88a5e417285fadce6336ac7c70a05917c46b3b304f42fed68a1c18b4e4066aaee401d6c42097fc927172503ad9ef27391d0c2478cfd91bb9a4bffad96024351da"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x0, 0xadf, 0x0, 0x7ff, 0x1000, 0xd, 0x4, 0x6, 0x1, 0x5, 0x2, 0xc80e}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000000c80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000cc0)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000000d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 3.615096142s ago: executing program 9 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) (async) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000003500)={&(0x7f00000027c0)={0x50, 0x0, 0xa5ef, {0x7, 0x2d, 0x5, 0xffffffff800000a8, 0x3, 0x7f, 0x4, 0xfffffd64, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106d0495c200022400010000003e09040000f70300010009210400fc01222800090581031000030c08"], 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close(r4) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x3cd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) (async) setsockopt$inet_int(r8, 0x0, 0x15, &(0x7f0000000080)=0x6, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c273ec834cf67726f75705769643d9b916aeeb5d01c47523a3ffefac6a3", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.616600841s ago: executing program 7 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) r0 = socket$pptp(0x18, 0x1, 0x2) close(0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r1) bind$pptp(r0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86822, &(0x7f0000000040)={[{@huge_always}]}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='270', 0x3) open(0x0, 0x60840, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/134, 0x86) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async, rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 1.191076111s ago: executing program 7 (id=450): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x80000000002}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000, 0x0) shutdown(r1, 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x6, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) 1.036339805s ago: executing program 8 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xa000, 0x0, {}, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.015949055s ago: executing program 8 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000101010100000000000000000a0000043c0001800c000280050001003a0000002c00018014000300fc02000000000000000000000000000014000400ff020000000000000000000000000001140019800800020002020000080001000209"], 0x64}}, 0x0) 1.001758905s ago: executing program 8 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x802, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl(0xffffffffffffffff, 0x2c4d, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r0, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc095) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44) r4 = accept$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008484}, 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) fchdir(0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x0, 0x4, 0xa0, @dev={0xfe, 0x80, '\x00', 0x43}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x7, 0x2}}) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "0700567812080078", "12345678123456781234567812345678", "4aa45678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "5a2047c1ee070096", "0200550200000000917794865181c67a", "212ac500", "12d732d01e424eff"}, 0x28) sendto$inet(r2, &(0x7f0000000300)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 912.353938ms ago: executing program 8 (id=454): r0 = eventfd2(0x80005, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='maps\x00') exit(0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f0000000480)=""/82, 0x52) eventfd2(0x80005, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='maps\x00') (async) exit(0x3) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') (async) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) (async) read(r0, &(0x7f0000000480)=""/82, 0x52) (async) 799.09144ms ago: executing program 5 (id=455): r0 = open(&(0x7f0000000140)='./bus\x00', 0x800c2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) write(r0, &(0x7f0000000280)="8651", 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00000a4000/0x3000)=nil, &(0x7f0000340000/0x3000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) sendfile(r0, r0, 0x0, 0x800000a1e) 768.469681ms ago: executing program 5 (id=456): write(0xffffffffffffffff, &(0x7f0000000180)=' \x00', 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1660f3a1429af320f01d9660ff7e31bf7c4c1672aaf65cd000066b81d018ec805000000b90000c0fe0f41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x63}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f0000000080)='tmpfs\x00', 0x5) fadvise64(r3, 0x4ec5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r3, @ANYRESOCT=r4], 0x3c}}, 0x20040001) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x8c03, &(0x7f0000000100)=ANY=[@ANYBLOB="bc2022c1", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) close_range(r3, r4, 0x2) 632.240725ms ago: executing program 5 (id=457): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000000000000001, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x3, 0x7, 0x0, 0x4, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x6, 0x5, 0x0, 0x40f439, 0x9}) pread64(r4, &(0x7f0000000600), 0x100, 0x3f00) 600.098275ms ago: executing program 9 (id=458): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000400)="05", 0x1}], 0x1) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000009b80), 0x149202, 0x0) ioctl$FICLONE(r4, 0x80811501, r4) r5 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r5, &(0x7f00000001c0)=""/227, 0xe3, 0x40010120, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) (async) write(r6, &(0x7f0000000000)='3', 0x4e) fcntl$setsig(r6, 0xa, 0x0) (async) fcntl$setsig(r6, 0xa, 0x0) socket(0x2, 0x805, 0x0) (async) socket(0x2, 0x805, 0x0) r7 = getpid() setpgid(0x0, r7) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000dd2eff78000000000000000028e0ebc615f18d2461a0b9000000000000c0c2bf05000000"], 0x28}}, 0xc8c0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000040)) 575.807346ms ago: executing program 7 (id=459): mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) close(0x3) unshare(0x60000600) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) stat(&(0x7f0000009340)='./tracing/uprobe_events\x00', &(0x7f0000009380)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f0200000007395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="eac962f7946d7dac4afb9d7f303d3d3a063d1b5d7bb3df729f2d037625a60987cd4d1aed2ffa026bdbdbb7b9bf21ede5e536acb0f39afc147105092ee7b6436d4e351e98a109edc0fa080a9a7c32162c2f271c", @ANYRESOCT=r3, @ANYRES16, @ANYRESHEX=r6, @ANYRESDEC=r2, @ANYRES16=r7, @ANYRES8=0x0], 0x28}, 0x1, 0x0, 0x0, 0x200180a4}, 0x4000010) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b00fbff100003006332c5ab004c32ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x7e) 528.308077ms ago: executing program 9 (id=460): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x3ffffd, 0x0, {0x26, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20000010) 526.498697ms ago: executing program 9 (id=461): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x2, 0x102000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) close(0x3) 398.00997ms ago: executing program 7 (id=462): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x70f1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xebfb, 0x1000, 0xfffffe, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58f, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20000, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000100)={0x0, 0x49, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="145c9e003613cbd1f762744a145ece4792db94741bfd289d88af98747b6592c410490ffd3aa367a486a0feac6cd71206cb68fc726a009e09bdf76e4440405661402a4c50d01861e8942155ae7edc600f9e9dc20791765a9af707bd7f7080f44256484db7f90ab9d4ad672cff30816011ecc6e21b3df4bf5c5d980c1ae0016237e0f872905f183e37970ba2cc7cddbdf308f5e18e1bdba79bd05e91a06f9703fa19e0efd898054618f11bff49ea87f1ffc16cd357840ec9cdd5a759073325", @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251e000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 344.140732ms ago: executing program 9 (id=463): r0 = socket$inet(0x2, 0x80000, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fff0000}, {0xa5ce, 0x4, 0x0, 0x8}, {0xc, 0x2, 0x5}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r4, 0x0, 0x0, 0x100, &(0x7f0000003400)={0x0, 0x989680}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0xf40, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000200)=0x2, 0x4) read(r5, 0x0, 0xfffffe3a) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000180)={{0x3, 0x2, 0x200, 0x2, 0x18}, 0x42, 0x7}) close_range(r2, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x9) r6 = signalfd4(r0, &(0x7f0000000080)={[0xffff]}, 0x8, 0x80000) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x0, 0x1c, 0xfa}, {0x3, 0x3, 0x6, 0x662}, {0x5, 0x1, 0x0, 0x101}, {0x0, 0x0, 0x5, 0x575}, {0xfffe, 0x83, 0x4}]}, 0x10) 264.012823ms ago: executing program 9 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0xb6, 0x8, 0xe5, 0xb7, 0x18, 0xe, 0x86, 0x40, 0x49, 0xbc, 0x2, 0x8, 0x0, 0x6, 0x3, 0x4}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = dup2(r2, r2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @empty, 0x40}, 0x1c) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0xf, 0x2}) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) clock_settime(0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x786d) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x6bb6c4a5b2d350aa, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0xfffffff6, &(0x7f0000000180)={[0x405]}, 0x8) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x20004850) 195.618785ms ago: executing program 7 (id=465): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000ff, 0x0, 0x1}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000721000/0x4000)=nil, 0x4000, 0xe, 0x7, 0x20000) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) 79.808858ms ago: executing program 8 (id=466): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, &(0x7f0000000240), 0xb3a8) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000006900)=[{{&(0x7f00000009c0), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/47, 0x2f}, {&(0x7f0000000a80)=""/122, 0x7a}, {&(0x7f0000000b00)=""/145, 0x91}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000000cc0)=""/26, 0x1a}, {&(0x7f0000000f80)=""/57, 0x39}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/23, 0x17}, {&(0x7f0000004480)=""/111, 0x6f}, {&(0x7f0000004500)=""/194, 0xc2}, {&(0x7f0000004600)=""/7, 0x7}, {&(0x7f0000004640)=""/73, 0x49}], 0x8, &(0x7f0000004740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004780), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004800)=""/11, 0xb}, {&(0x7f0000004840)=""/68, 0x44}, {&(0x7f00000048c0)=""/114, 0x72}, {&(0x7f0000004940)=""/232, 0xe8}, {&(0x7f0000004a40)=""/78, 0x4e}, {&(0x7f0000004ac0)=""/13, 0xd}, {&(0x7f0000004b00)=""/31, 0x1f}], 0x7, &(0x7f0000004bc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000005200)=[{&(0x7f0000004d80)=""/129, 0x81}, {&(0x7f0000004e40)=""/194, 0xc2}, {&(0x7f0000004f40)=""/110, 0x6e}, {&(0x7f0000004fc0)=""/75, 0x4b}, {&(0x7f0000005040)=""/180, 0xb4}, {&(0x7f0000005100)=""/207, 0xcf}], 0x6, &(0x7f0000005280)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000005380)=@abs, 0x6e, &(0x7f0000005540)=[{&(0x7f0000005400)=""/233, 0xe9}, {&(0x7f0000005500)=""/35, 0x23}], 0x2, &(0x7f0000005580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f00000056c0)=@abs, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005740)=""/137, 0x89}, {&(0x7f0000005800)=""/110, 0x6e}, {&(0x7f0000005880)=""/223, 0xdf}, {&(0x7f0000005980)=""/233, 0xe9}, {&(0x7f0000005a80)=""/112, 0x70}, {&(0x7f0000005b00)=""/154, 0x9a}, {&(0x7f0000005bc0)=""/46, 0x2e}, {&(0x7f0000005c00)=""/169, 0xa9}, {&(0x7f0000005cc0)=""/193, 0xc1}], 0x9, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000006080)=[{&(0x7f0000005f80)=""/19, 0x13}, {&(0x7f0000005fc0)=""/88, 0x58}, {&(0x7f0000006040)=""/51, 0x33}], 0x3, &(0x7f00000060c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000006100)=@abs, 0x6e, &(0x7f0000006480)=[{&(0x7f0000006180)=""/61, 0x3d}, {&(0x7f00000061c0)=""/248, 0xf8}, {&(0x7f00000062c0)=""/236, 0xec}, {&(0x7f00000063c0)=""/180, 0xb4}], 0x4, &(0x7f00000064c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000006540), 0x6e, &(0x7f0000006640)=[{&(0x7f00000065c0)=""/112, 0x70}], 0x1, &(0x7f0000006680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006740)=""/52, 0x34}], 0x1, &(0x7f00000067c0)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0xa, 0x2102, &(0x7f0000006b80)={0x77359400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r4, &(0x7f0000003400)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x0, 0x1, 0x4, 0x2}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000540)="cad7c0d1e0a194752b9ec7a8aa38e8308ff44f5534cc952ef1b4e7fc4fa6615e068fe509aad2b82140c64f9787c48cf8a6fb70b47caf06d996dc9ebbd5991a7abcbb47354c35b85e67ce0761052f81ac752579df5f0902165c97b7ee4dd1bee68b3f4190d7b44b11200087e8eacf2506c355a09ff0096dc4b74f52826f843b45fd569b4b60f9d741cf241b1aca155c71d68261684939c0edb94de127be404b5cc8bffbd32b0ddf2a14f74d14a24a99b5b931be93d3ab1425b0fb9d68ba5533fe9b782f863c5d6957b002c293", 0xcc}, {&(0x7f0000000640)="d2aa35d622e353e31f83436a087c3093cb45aa931999c1d7407ce4fc309f63ec56e2eca1b27f49febb9560829d8aa2a054527d3be48b2cab72231aa94115a017f73d47e1e3eb", 0x46}, {&(0x7f00000006c0)="9728a8988d9efcdccc61f75f3d1a5143e3bb9a2f5335ae200fb46532f650b7f0337b5a67b3c7f6328356ee561e62424f40ef710ed20b47ff5011287ee7ba58e0f6da66d192db3403ce0357a9ef0c58781e45a88b39a1b2d75d3b8cc6d372883a148b4f9e229bb1c911faf95672fd9fce1c4c6d15aeb5f1e0977c9db504cf9bad29", 0x81}, {&(0x7f0000000780)="43467bb06a9e5ff64e21a4de9e0f755c9bf300504691b7a6c83b69c208d2c27777464017e5faa0a39e48a8362a6018d454a4f92a99419df709fdb1768ef6c82f8885bd58ca2baf41d3ddf2dc881a0fdb42b003fab81c4136ba9e6062cbdba125bfe97a358153d7ea5c42345fbb48527920cb3b69b66ef9d5332b7705b9184a3a93f4a71ae424070b934ec843ac61cc276958e7ec6fe09cd9a90561787a7398a1f28e994629f55aaad47822b365026336225d518f133f2f3420821b7c4155caa64a4bd712d611e3091f7c30847fbe8310097b0bc3f71e588b76853a492d0642f8319affb966424437998c94c8006422d762ae9357c482ae760679", 0xfa}, {&(0x7f0000000880)="ba0843aec930ad9bdeb2e9eabd2d027c31966b29c5f3f1d6e47ebfff5037017556fec32d5ad98b9087228f5a144d89c290baac479c4d046c859a90ac0b0d60857de287598fe9f780348dfef0e03e819ba9119345e5f793da2c94f97b93caac2a6942ce1c8d0ccbbab3ef6c439ac9755a18ef436f599e346640e7aa967168e55b58b00dce54c9d7e2e6f536339c8227087cab329edac65150ba46ea5e766e4b87176a4858fc232d9702fa", 0xaa}, {&(0x7f0000000940)="45de5d77a43805dee57b33caa7d9f3d234b714e8a0eed9c3b2a40d4e23bb60ccf43e97ea96df4761431459b7f4ce834bfdc8ad275710ae0657d825ee7d95a6c7c81e04c735962ddfbb0f6dcc743a87507cc7445bccd69e59e017aeb2d9ccd848c917251cc8da4ff6c880bfc45c9aa4439e24dce20329465ec8c2f42d8e6ecb57", 0x80}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="8453b900a8ce1f19bcb4db85f076cb7a7745595391e58f57e240fdc6af1fa8d8e918cf7fff67d720f55cc07af090da50719916d065015e9216b1a64197098137d43c", 0x42}, {&(0x7f0000002e40)="e36b6178ea591447c5dacbdcab733da24ae022d7d360d88cd770c1fb922cf1f6cab3ff920e2dcc406bad0cb3", 0x2c}], 0x9, &(0x7f0000002f40)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x18) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000fc0)={0x0, 0x1, 0x6}, 0x10) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x5da2, &(0x7f0000000140)={0x0, 0x927a, 0x1, 0x3, 0x278, 0x0, r0}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r9, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r11) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f00000004c0)={0x0, 0x42d0, 0x10, 0x1, 0x7f}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r8}}], 0x1, 0x0, 0x0) 0s ago: executing program 7 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0xa2) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = dup(r2) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000616263646566676869226b6c6d6e6f70"], 0x18, 0xfffffffffffffff9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000002380)={@id, 0x40, r5, '\x00', @b}) fallocate(r4, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0xfec5effc, 0x2000, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x102000}) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f00000002c0)=[{0x6, 0x3, 0x0, 0x7fff2000}, {0x1, 0x6, 0x7, 0x7}, {0x8, 0x7, 0x3, 0xbf}, {0x8, 0xad, 0x4, 0x2f}, {0x8, 0xc2, 0x3, 0xfff}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000180)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14) close_range(r10, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 60][ T352] usb 4-1: SerialNumber: syz [ 37.195097][ T447] usb usb5-port1: attempt power cycle [ 37.214981][ T66] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 37.344997][ T66] usb 3-1: device descriptor read/64, error -71 [ 37.534977][ T447] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 37.556101][ T447] usb 5-1: device descriptor read/8, error -71 [ 37.584974][ T66] usb 3-1: device descriptor read/64, error -71 [ 37.686066][ T447] usb 5-1: device descriptor read/8, error -71 [ 37.834971][ T66] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 37.940458][ T447] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 37.975016][ T66] usb 3-1: device descriptor read/64, error -71 [ 37.982335][ T447] usb 5-1: device descriptor read/8, error -71 [ 38.116213][ T447] usb 5-1: device descriptor read/8, error -71 [ 38.214970][ T66] usb 3-1: device descriptor read/64, error -71 [ 38.225155][ T447] usb usb5-port1: unable to enumerate USB device [ 38.296293][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.305223][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.325081][ T66] usb usb3-port1: attempt power cycle [ 38.515273][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.526082][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.676570][ T66] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 38.699740][ T66] usb 3-1: device descriptor read/8, error -71 [ 38.837389][ T66] usb 3-1: device descriptor read/8, error -71 [ 38.934330][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 38.934348][ T36] audit: type=1400 audit(1791118072.100:226): avc: denied { create } for pid=640 comm="syz.4.87" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.961344][ T641] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 38.991329][ T36] audit: type=1400 audit(1791118072.140:227): avc: denied { relabelto } for pid=640 comm="syz.4.87" name="file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hald_mac_exec_t:s0" [ 39.019570][ T36] audit: type=1400 audit(1791118072.140:228): avc: denied { associate } for pid=640 comm="syz.4.87" name="file0" dev="tmpfs" ino=155 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_mac_exec_t:s0" [ 39.094968][ T66] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 39.115995][ T66] usb 3-1: device descriptor read/8, error -71 [ 39.122424][ T36] audit: type=1400 audit(1791118072.290:229): avc: denied { unlink } for pid=333 comm="syz-executor" name="file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hald_mac_exec_t:s0" [ 39.158454][ T36] audit: type=1400 audit(1791118072.330:230): avc: denied { mount } for pid=643 comm="syz.3.88" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.182133][ T36] audit: type=1400 audit(1791118072.360:231): avc: denied { search } for pid=643 comm="syz.3.88" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 39.203834][ T36] audit: type=1400 audit(1791118072.360:232): avc: denied { read write } for pid=643 comm="syz.3.88" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.227036][ T36] audit: type=1400 audit(1791118072.360:233): avc: denied { open } for pid=643 comm="syz.3.88" path="/24/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.255098][ T66] usb 3-1: device descriptor read/8, error -71 [ 39.365047][ T66] usb usb3-port1: unable to enumerate USB device [ 39.936865][ T36] audit: type=1400 audit(1791118073.110:234): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.036614][ T660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.063380][ T660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.314982][ T66] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 40.466332][ T66] usb 5-1: unable to get BOS descriptor or descriptor too short [ 40.478337][ T66] usb 5-1: not running at top speed; connect to a high speed hub [ 40.493426][ T66] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 40.517587][ T66] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 40.526803][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.541757][ T66] usb 5-1: Product: ࡃ [ 40.554963][ T66] usb 5-1: Manufacturer: 絈劵柭䄘䥭浲픵⡉㗴வ鞼默潻⹜ꌮѺ⢏觜၍﹈웣徨ꉤ穆⊫ꖿ೛흾ﲁ䴉傷ೌ풆酷뢤贅꺆惽㘭鰤᫉宝歠췓⪱폍ट鋨䰡撎ሟ䶐⮘᚟ [ 40.800225][ T36] audit: type=1400 audit(1791118073.970:235): avc: denied { bind } for pid=675 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.821933][ T379] usb 5-1: USB disconnect, device number 8 [ 40.890514][ T297] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.759411][ T690] SELinux: failed to load policy [ 42.195478][ T701] FAULT_INJECTION: forcing a failure. [ 42.195478][ T701] name failslab, interval 1, probability 0, space 0, times 0 [ 42.224961][ T701] CPU: 0 UID: 0 PID: 701 Comm: syz.2.100 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 42.225000][ T701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.225018][ T701] Call Trace: [ 42.225025][ T701] [ 42.225034][ T701] __dump_stack+0x21/0x30 [ 42.225095][ T701] dump_stack_lvl+0x140/0x1c0 [ 42.225131][ T701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.225169][ T701] dump_stack+0x19/0x20 [ 42.225202][ T701] should_fail_ex+0x3c2/0x510 [ 42.225234][ T701] should_failslab+0xac/0x100 [ 42.225265][ T701] kmem_cache_alloc_noprof+0x42/0x410 [ 42.225292][ T701] ? security_inode_alloc+0x51/0x230 [ 42.225361][ T701] ? __cfi_make_kgid+0x10/0x10 [ 42.225391][ T701] security_inode_alloc+0x51/0x230 [ 42.225422][ T701] inode_init_always_gfp+0x756/0x9e0 [ 42.225453][ T701] ? __cfi_proc_alloc_inode+0x10/0x10 [ 42.225477][ T701] alloc_inode+0xc5/0x270 [ 42.225511][ T701] new_inode+0x25/0x1e0 [ 42.225558][ T701] ? _raw_spin_lock+0x92/0x120 [ 42.225585][ T701] proc_get_inode+0x25/0x6f0 [ 42.225612][ T701] proc_lookup_de+0x258/0x300 [ 42.225639][ T701] proc_tgid_net_lookup+0x66/0x100 [ 42.225666][ T701] path_openat+0x1124/0x35a0 [ 42.225708][ T701] ? do_filp_open+0x440/0x440 [ 42.225745][ T701] do_filp_open+0x1f2/0x440 [ 42.225780][ T701] ? __cfi_do_filp_open+0x10/0x10 [ 42.225817][ T701] ? __cfi_kfree_link+0x10/0x10 [ 42.225857][ T701] ? alloc_fd+0x4c1/0x570 [ 42.225888][ T701] do_sys_openat2+0x134/0x1d0 [ 42.225926][ T701] ? do_sys_open+0x100/0x100 [ 42.225966][ T701] __x64_sys_openat+0x13a/0x170 [ 42.226005][ T701] x64_sys_call+0xe69/0x2ee0 [ 42.226028][ T701] do_syscall_64+0x57/0xf0 [ 42.226054][ T701] ? clear_bhb_loop+0x50/0xa0 [ 42.226088][ T701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.226121][ T701] RIP: 0033:0x7fc07555e98e [ 42.226142][ T701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.226164][ T701] RSP: 002b:00007fc0764cfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 42.226191][ T701] RAX: ffffffffffffffda RBX: 00007fc0764d06c0 RCX: 00007fc07555e98e [ 42.226211][ T701] RDX: 0000000000000002 RSI: 00007fc0764cff90 RDI: ffffffffffffff9c [ 42.226228][ T701] RBP: 00007fc07563506b R08: 0000000000000000 R09: 0000000000000000 [ 42.226245][ T701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.226260][ T701] R13: 00007fc075826038 R14: 00007fc075825fa0 R15: 00007ffd92cc7e08 [ 42.226281][ T701] [ 42.582055][ T710] FAULT_INJECTION: forcing a failure. [ 42.582055][ T710] name fail_futex, interval 1, probability 0, space 0, times 1 [ 42.595006][ T710] CPU: 1 UID: 0 PID: 710 Comm: syz.2.104 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 42.595040][ T710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.595055][ T710] Call Trace: [ 42.595062][ T710] [ 42.595071][ T710] __dump_stack+0x21/0x30 [ 42.595110][ T710] dump_stack_lvl+0x140/0x1c0 [ 42.595143][ T710] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.595177][ T710] dump_stack+0x19/0x20 [ 42.595217][ T710] should_fail_ex+0x3c2/0x510 [ 42.595245][ T710] should_fail+0xf/0x20 [ 42.595271][ T710] get_futex_key+0x178/0x940 [ 42.595300][ T710] ? __sched_text_start+0x10/0x10 [ 42.595327][ T710] ? __cfi_get_futex_key+0x10/0x10 [ 42.595358][ T710] futex_wait_setup+0xae/0x260 [ 42.595380][ T710] ? __cfi_futex_wait_setup+0x10/0x10 [ 42.595402][ T710] ? __asan_memcpy+0x5a/0x80 [ 42.595426][ T710] __futex_wait+0x12c/0x3d0 [ 42.595448][ T710] ? __cfi___futex_wait+0x10/0x10 [ 42.595470][ T710] ? __cfi_futex_wake_mark+0x10/0x10 [ 42.595492][ T710] ? __kasan_check_read+0x15/0x20 [ 42.595515][ T710] ? futex_wake+0x627/0x950 [ 42.595536][ T710] futex_wait+0x128/0x7c0 [ 42.595556][ T710] ? __cfi_futex_wait+0x10/0x10 [ 42.595596][ T710] ? selinux_socket_setsockopt+0x324/0x3d0 [ 42.595637][ T710] do_futex+0x32a/0x510 [ 42.595670][ T710] ? errseq_sample+0x48/0x70 [ 42.595707][ T710] ? file_init_path+0x434/0x590 [ 42.595742][ T710] ? __cfi_do_futex+0x10/0x10 [ 42.595778][ T710] __se_sys_futex+0x13c/0x320 [ 42.595812][ T710] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 42.595850][ T710] ? __x64_sys_futex+0x110/0x110 [ 42.595885][ T710] ? __kasan_check_write+0x18/0x20 [ 42.595913][ T710] __x64_sys_futex+0xe9/0x110 [ 42.595948][ T710] x64_sys_call+0x227f/0x2ee0 [ 42.595970][ T710] do_syscall_64+0x57/0xf0 [ 42.595996][ T710] ? clear_bhb_loop+0x50/0xa0 [ 42.596029][ T710] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.596064][ T710] RIP: 0033:0x7fc07559e159 [ 42.596085][ T710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.596106][ T710] RSP: 002b:00007fc0764d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.596133][ T710] RAX: ffffffffffffffda RBX: 00007fc075825fa8 RCX: 00007fc07559e159 [ 42.596152][ T710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc075825fa8 [ 42.596169][ T710] RBP: 00007fc075825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 42.596193][ T710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.596209][ T710] R13: 00007fc075826038 R14: 00007ffd92cc7d20 R15: 00007ffd92cc7e08 [ 42.596232][ T710] [ 42.785105][ T379] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 42.881380][ T352] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -110 [ 42.914980][ T350] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.044947][ T379] usb 5-1: Using ep0 maxpacket: 32 [ 43.051256][ T379] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.084939][ T379] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.105677][ T379] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 43.114754][ T379] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 43.134949][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 43.142603][ T379] usb 5-1: Product: syz [ 43.155918][ T379] usb 5-1: Manufacturer: syz [ 43.167348][ T379] hub 5-1:4.0: USB hub found [ 43.294943][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 43.306092][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 43.334947][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 43.354935][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 43.374962][ T379] hub 5-1:4.0: 2 ports detected [ 43.379953][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 43.389442][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.405329][ T10] usb 3-1: config 0 descriptor?? [ 43.571744][ T705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.585204][ T705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.615206][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.629641][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.813029][ T379] hub 5-1:4.0: set hub depth failed [ 43.826405][ T379] usb 5-1: USB disconnect, device number 9 [ 43.856015][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.875734][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.892137][ T10] apple 0003:05AC:0320.0001: ignoring exceeding usage max [ 43.907819][ T724] SELinux: failed to load policy [ 43.916582][ T10] apple 0003:05AC:0320.0001: hidraw0: USB HID v0.81 Device [HID 05ac:0320] on usb-dummy_hcd.2-1/input0 [ 43.987225][ T729] SELinux: failed to load policy [ 44.001117][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 44.001134][ T36] audit: type=1400 audit(1791118077.170:248): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.093035][ T45] usb 3-1: USB disconnect, device number 18 [ 44.635170][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 44.743930][ T36] audit: type=1400 audit(1791118077.910:249): avc: denied { read } for pid=747 comm="syz.2.113" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.777275][ T36] audit: type=1400 audit(1791118077.910:250): avc: denied { open } for pid=747 comm="syz.2.113" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.800465][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 44.810226][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 44.819531][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 44.835765][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 44.855007][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 44.874950][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 44.899412][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 44.919439][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 44.944971][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2035, setting to 1024 [ 44.977845][ T45] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 44.994939][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.007204][ T45] usb 5-1: Product: syz [ 45.011422][ T45] usb 5-1: Manufacturer: syz [ 45.016264][ T45] usb 5-1: SerialNumber: syz [ 45.026157][ T45] usb 5-1: config 0 descriptor?? [ 45.032881][ T744] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 45.040311][ T744] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 45.070215][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.091978][ T36] audit: type=1400 audit(1791118078.260:251): avc: denied { read append } for pid=753 comm="syz.3.116" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.142977][ T36] audit: type=1400 audit(1791118078.290:252): avc: denied { open } for pid=753 comm="syz.3.116" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.250641][ T379] usb 5-1: USB disconnect, device number 10 [ 45.326067][ T36] audit: type=1400 audit(1791118078.500:253): avc: denied { read } for pid=763 comm="syz.2.118" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.353167][ T36] audit: type=1400 audit(1791118078.520:254): avc: denied { open } for pid=763 comm="syz.2.118" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.532105][ T36] audit: type=1400 audit(1791118078.700:255): avc: denied { ioctl } for pid=771 comm="syz.3.120" path="socket:[14835]" dev="sockfs" ino=14835 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.580967][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.589446][ T379] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 45.597275][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.765768][ T379] usb 3-1: not running at top speed; connect to a high speed hub [ 45.774338][ T379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.792890][ T379] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 45.802220][ T379] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 45.824945][ T379] usb 3-1: Product: syz [ 45.826778][ T36] audit: type=1400 audit(1791118078.990:256): avc: denied { name_bind } for pid=778 comm="syz.4.123" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.829155][ T379] usb 3-1: Manufacturer: syz [ 45.868445][ T379] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 45.875011][ T379] usb 3-1: No streaming interface found for terminal 2. [ 46.079827][ T379] usb 3-1: USB disconnect, device number 19 [ 46.115129][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 46.137936][ T782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 46.244995][ T10] usb 5-1: device descriptor read/64, error -71 [ 46.346886][ T36] audit: type=1400 audit(1791118079.520:257): avc: denied { create } for pid=789 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 46.450507][ T794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.459944][ T794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.515071][ T10] usb 5-1: device descriptor read/64, error -71 [ 46.765024][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 46.895024][ T379] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 46.902895][ T10] usb 5-1: device descriptor read/64, error -71 [ 47.066442][ T379] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.076735][ T379] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.086159][ T379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.104634][ T379] usb 3-1: config 0 descriptor?? [ 47.144976][ T10] usb 5-1: device descriptor read/64, error -71 [ 47.184461][ T814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.193854][ T814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.255122][ T10] usb usb5-port1: attempt power cycle [ 47.605021][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 47.626090][ T10] usb 5-1: device descriptor read/8, error -71 [ 47.776902][ T10] usb 5-1: device descriptor read/8, error -71 [ 47.869348][ T820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 48.024974][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 48.066015][ T10] usb 5-1: device descriptor read/8, error -71 [ 48.197359][ T10] usb 5-1: device descriptor read/8, error -71 [ 48.314972][ T10] usb usb5-port1: unable to enumerate USB device [ 48.943301][ T840] netlink: 'syz.4.142': attribute type 2 has an invalid length. [ 48.951149][ T840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.142'. [ 49.215109][ T10] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 49.364961][ T10] usb 5-1: device descriptor read/64, error -71 [ 49.604977][ T10] usb 5-1: device descriptor read/64, error -71 [ 49.622314][ T45] usb 3-1: USB disconnect, device number 20 [ 49.638906][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 49.638933][ T36] audit: type=1400 audit(1791118082.810:266): avc: denied { read write } for pid=844 comm="syz.2.144" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.668736][ T36] audit: type=1400 audit(1791118082.840:267): avc: denied { open } for pid=844 comm="syz.2.144" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.702732][ T447] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.721387][ T447] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.743522][ T36] audit: type=1400 audit(1791118082.910:268): avc: denied { setopt } for pid=847 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.844979][ T10] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 49.858487][ T36] audit: type=1400 audit(1791118083.030:269): avc: denied { write } for pid=844 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.898221][ T36] audit: type=1400 audit(1791118083.050:270): avc: denied { read } for pid=844 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.934944][ T36] audit: type=1400 audit(1791118083.100:271): avc: denied { mount } for pid=847 comm="syz.3.145" name="/" dev="ramfs" ino=16399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.984988][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.224971][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.335063][ T10] usb usb5-port1: attempt power cycle [ 50.648113][ T862] ./dev/sda1: Can't lookup blockdev [ 50.694970][ T10] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 50.715921][ T10] usb 5-1: device descriptor read/8, error -71 [ 50.736367][ T867] batadv_slave_1: entered promiscuous mode [ 50.744960][ T36] audit: type=1400 audit(1791118083.910:272): avc: denied { create } for pid=866 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 50.845980][ T10] usb 5-1: device descriptor read/8, error -71 [ 50.928031][ T870] batadv_slave_1: left promiscuous mode [ 51.002275][ T36] audit: type=1400 audit(1791118084.170:273): avc: denied { append } for pid=885 comm="syz.3.151" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.029912][ T887] netlink: 'syz.3.151': attribute type 46 has an invalid length. [ 51.038446][ T887] netlink: 'syz.3.151': attribute type 28 has an invalid length. [ 51.094977][ T10] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 51.115951][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.246212][ T36] audit: type=1400 audit(1791118084.420:274): avc: denied { read write } for pid=892 comm="syz.3.152" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 51.279232][ T36] audit: type=1400 audit(1791118084.420:275): avc: denied { open } for pid=892 comm="syz.3.152" path="/60/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 51.303042][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.318978][ T895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.328353][ T895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.341993][ T895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.351323][ T895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.415075][ T10] usb usb5-port1: unable to enumerate USB device [ 51.915914][ T898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.924488][ T898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.055614][ T310] bridge_slave_1: left allmulticast mode [ 52.061989][ T310] bridge_slave_1: left promiscuous mode [ 52.067896][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.075730][ T310] bridge_slave_0: left allmulticast mode [ 52.081442][ T310] bridge_slave_0: left promiscuous mode [ 52.087733][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.200090][ T902] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.209484][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.217112][ T902] bridge_slave_0: entered allmulticast mode [ 52.223559][ T902] bridge_slave_0: entered promiscuous mode [ 52.231114][ T310] veth1_macvtap: left promiscuous mode [ 52.237196][ T310] veth0_vlan: left promiscuous mode [ 52.306236][ T902] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.313471][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.325514][ T902] bridge_slave_1: entered allmulticast mode [ 52.331781][ T902] bridge_slave_1: entered promiscuous mode [ 52.384956][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 52.401196][ T902] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.408303][ T902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.415663][ T902] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.422722][ T902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.447605][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.455143][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.467031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.474123][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.495122][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.502227][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.524958][ T10] usb 5-1: device descriptor read/64, error -71 [ 52.556924][ T902] veth0_vlan: entered promiscuous mode [ 52.570399][ T902] veth1_macvtap: entered promiscuous mode [ 52.628162][ T917] overlayfs: overlapping lowerdir path [ 52.634424][ T917] overlayfs: failed to resolve './bus': -2 [ 52.640514][ T922] ./dev/sda1: Can't lookup blockdev [ 52.648731][ T917] overlayfs: failed to resolve './bus': -2 [ 52.655703][ T917] overlayfs: failed to resolve './bus': -2 [ 52.662173][ T917] overlayfs: failed to resolve './bus': -2 [ 52.668688][ T917] overlayfs: failed to resolve './bus': -2 [ 52.683763][ T917] overlayfs: failed to resolve './bus': -2 [ 52.697189][ T917] overlayfs: failed to resolve './bus': -2 [ 52.709848][ T917] overlayfs: failed to resolve './bus': -2 [ 52.718107][ T924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.726711][ T917] overlayfs: failed to resolve './bus': -2 [ 52.735902][ T924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.743855][ T917] overlayfs: failed to resolve './bus': -2 [ 52.758147][ T917] overlayfs: failed to resolve './bus': -2 [ 52.764353][ T917] overlayfs: failed to resolve './bus': -2 [ 52.765740][ T10] usb 5-1: device descriptor read/64, error -71 [ 52.776941][ T924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.777978][ T917] overlayfs: failed to resolve './bus': -2 [ 52.791664][ T917] overlayfs: failed to resolve './bus': -2 [ 52.797843][ T924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.805858][ T917] overlayfs: failed to resolve './bus': -2 [ 52.813068][ T917] overlayfs: failed to resolve './bus': -2 [ 52.825316][ T917] overlayfs: failed to resolve './bus': -2 [ 52.837389][ T917] overlayfs: failed to resolve './bus': -2 [ 52.843510][ T917] overlayfs: failed to resolve './bus': -2 [ 52.850334][ T917] overlayfs: failed to resolve './bus': -2 [ 52.856620][ T917] overlayfs: failed to resolve './bus': -2 [ 52.862746][ T917] overlayfs: failed to resolve './bus': -2 [ 52.869744][ T917] overlayfs: failed to resolve './bus': -2 [ 52.876374][ T917] overlayfs: failed to resolve './bus': -2 [ 52.882472][ T917] overlayfs: failed to resolve './bus': -2 [ 52.888952][ T917] overlayfs: failed to resolve './bus': -2 [ 52.895367][ T917] overlayfs: failed to resolve './bus': -2 [ 52.901475][ T917] overlayfs: failed to resolve './bus': -2 [ 52.907554][ T917] overlayfs: failed to resolve './bus': -2 [ 52.914004][ T917] overlayfs: failed to resolve './bus': -2 [ 52.926481][ T917] overlayfs: failed to resolve './bus': -2 [ 52.932448][ T12] bridge_slave_1: left allmulticast mode [ 52.938855][ T12] bridge_slave_1: left promiscuous mode [ 52.944769][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.952474][ T917] overlayfs: failed to resolve './bus': -2 [ 52.958616][ T12] bridge_slave_0: left allmulticast mode [ 52.964829][ T12] bridge_slave_0: left promiscuous mode [ 52.970703][ T917] overlayfs: failed to resolve './bus': -2 [ 52.972260][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.995173][ T917] overlayfs: failed to resolve './bus': -2 [ 53.001211][ T917] overlayfs: failed to resolve './bus': -2 [ 53.008903][ T917] overlayfs: failed to resolve './bus': -2 [ 53.017531][ T917] overlayfs: failed to resolve './bus': -2 [ 53.025033][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 53.032793][ T917] overlayfs: failed to resolve './bus': -2 [ 53.039304][ T917] overlayfs: failed to resolve './bus': -2 [ 53.045642][ T917] overlayfs: failed to resolve './bus': -2 [ 53.065276][ T917] overlayfs: failed to resolve './bus': -2 [ 53.071647][ T917] overlayfs: failed to resolve './bus': -2 [ 53.078646][ T917] overlayfs: failed to resolve './bus': -2 [ 53.086099][ T917] overlayfs: failed to resolve './bus': -2 [ 53.095138][ T917] overlayfs: failed to resolve './bus': -2 [ 53.101320][ T917] overlayfs: failed to resolve './bus': -2 [ 53.107748][ T917] overlayfs: failed to resolve './bus': -2 [ 53.113876][ T917] overlayfs: failed to resolve './bus': -2 [ 53.120354][ T917] overlayfs: failed to resolve './bus': -2 [ 53.126666][ T917] overlayfs: failed to resolve './bus': -2 [ 53.133860][ T12] tipc: Disabling bearer [ 53.139592][ T917] overlayfs: failed to resolve './bus': -2 [ 53.145682][ T12] tipc: Left network mode [ 53.151454][ T917] overlayfs: failed to resolve './bus': -2 [ 53.157598][ T12] veth1_macvtap: left promiscuous mode [ 53.163423][ T12] veth0_vlan: left promiscuous mode [ 53.168861][ T10] usb 5-1: device descriptor read/64, error -71 [ 53.169042][ T917] overlayfs: failed to resolve './bus': -2 [ 53.183756][ T917] overlayfs: failed to resolve './bus': -2 [ 53.196081][ T917] overlayfs: failed to resolve './bus': -2 [ 53.212329][ T917] overlayfs: failed to resolve './bus': -2 [ 53.225111][ T917] overlayfs: failed to resolve './bus': -2 [ 53.242589][ T917] overlayfs: failed to resolve './bus': -2 [ 53.253378][ T917] overlayfs: failed to resolve './bus': -2 [ 53.265634][ T917] overlayfs: failed to resolve './bus': -2 [ 53.272043][ T917] overlayfs: failed to resolve './bus': -2 [ 53.278404][ T917] overlayfs: failed to resolve './bus': -2 [ 53.284437][ T917] overlayfs: failed to resolve './bus': -2 [ 53.290778][ T917] overlayfs: failed to resolve './bus': -2 [ 53.361757][ T936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.368949][ T936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.376373][ T936] bridge_slave_0: entered allmulticast mode [ 53.382661][ T936] bridge_slave_0: entered promiscuous mode [ 53.390569][ T936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.398541][ T936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.405689][ T936] bridge_slave_1: entered allmulticast mode [ 53.411963][ T936] bridge_slave_1: entered promiscuous mode [ 53.434962][ T10] usb 5-1: device descriptor read/64, error -71 [ 53.459206][ T945] FAULT_INJECTION: forcing a failure. [ 53.459206][ T945] name failslab, interval 1, probability 0, space 0, times 0 [ 53.471884][ T945] CPU: 0 UID: 0 PID: 945 Comm: syz.3.166 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 53.471919][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.471935][ T945] Call Trace: [ 53.471943][ T945] [ 53.471953][ T945] __dump_stack+0x21/0x30 [ 53.471995][ T945] dump_stack_lvl+0x140/0x1c0 [ 53.472030][ T945] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.472065][ T945] dump_stack+0x19/0x20 [ 53.472106][ T945] should_fail_ex+0x3c2/0x510 [ 53.472137][ T945] should_failslab+0xac/0x100 [ 53.472168][ T945] __kmalloc_cache_noprof+0x41/0x470 [ 53.472196][ T945] ? __kasan_kmalloc+0x96/0xb0 [ 53.472226][ T945] ? ramfs_init_fs_context+0x62/0x190 [ 53.472253][ T945] ramfs_init_fs_context+0x62/0x190 [ 53.472277][ T945] ? __cfi_ramfs_init_fs_context+0x10/0x10 [ 53.472304][ T945] alloc_fs_context+0x5c4/0x800 [ 53.472338][ T945] fs_context_for_mount+0x26/0x40 [ 53.472370][ T945] __se_sys_fsopen+0xab/0x390 [ 53.472392][ T945] __x64_sys_fsopen+0x5f/0x80 [ 53.472412][ T945] x64_sys_call+0x2d40/0x2ee0 [ 53.472435][ T945] do_syscall_64+0x57/0xf0 [ 53.472460][ T945] ? clear_bhb_loop+0x50/0xa0 [ 53.472494][ T945] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.472524][ T945] RIP: 0033:0x7fc83219e159 [ 53.472543][ T945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.472565][ T945] RSP: 002b:00007fc83301a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 53.472591][ T945] RAX: ffffffffffffffda RBX: 00007fc832425fa0 RCX: 00007fc83219e159 [ 53.472610][ T945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 53.472626][ T945] RBP: 00007fc83223506b R08: 0000000000000000 R09: 0000000000000000 [ 53.472643][ T945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.472658][ T945] R13: 00007fc832426038 R14: 00007fc832425fa0 R15: 00007ffcfe9e0dc8 [ 53.472679][ T945] [ 53.517107][ T936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.557796][ T10] usb usb5-port1: attempt power cycle [ 53.561717][ T936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.691219][ T936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.698289][ T936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.714000][ T947] rust_binder: 946:947 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 53.722322][ T947] rust_binder: Write failure EINVAL in pid:283 [ 53.722460][ T947] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 53.743140][ T947] rust_binder: Write failure EFAULT in pid:283 [ 53.746138][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.760758][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.765930][ T447] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.779313][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.786439][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.795771][ T951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.804882][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.805544][ T951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.812027][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.848526][ T936] veth0_vlan: entered promiscuous mode [ 53.860347][ T936] veth1_macvtap: entered promiscuous mode [ 53.896571][ T953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.163'. [ 53.919238][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 53.927434][ T447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.938644][ T447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.948498][ T447] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.956669][ T10] usb 5-1: device descriptor read/8, error -71 [ 53.961759][ T447] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.977113][ T447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.986070][ T447] usb 6-1: config 0 descriptor?? [ 54.096360][ T10] usb 5-1: device descriptor read/8, error -71 [ 54.335031][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 54.358646][ T10] usb 5-1: device descriptor read/8, error -71 [ 54.496125][ T10] usb 5-1: device descriptor read/8, error -71 [ 54.597760][ T938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.606427][ T938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.615943][ T10] usb usb5-port1: unable to enumerate USB device [ 54.623367][ T447] usbhid 6-1:0.0: can't add hid device: -71 [ 54.629540][ T447] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 54.638450][ T447] usb 6-1: USB disconnect, device number 2 [ 54.840568][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 54.840587][ T36] audit: type=1400 audit(1791118088.010:295): avc: denied { read } for pid=969 comm="syz.6.173" path="socket:[16267]" dev="sockfs" ino=16267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.975573][ T975] program syz.6.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.984025][ T36] audit: type=1400 audit(1791118088.150:296): avc: denied { mounton } for pid=974 comm="syz.6.175" path="/dev/sda1" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.020612][ T36] audit: type=1400 audit(1791118088.150:297): avc: denied { connect } for pid=974 comm="syz.6.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.042288][ T36] audit: type=1400 audit(1791118088.150:298): avc: denied { listen } for pid=974 comm="syz.6.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.062388][ T36] audit: type=1400 audit(1791118088.150:299): avc: denied { accept } for pid=974 comm="syz.6.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.086522][ T981] sd 0:0:1:0: PR command failed: 1026 [ 55.091999][ T981] sd 0:0:1:0: Sense Key : 0x5 [current] [ 55.098691][ T981] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 55.124938][ T36] audit: type=1400 audit(1791118088.290:300): avc: denied { nlmsg_write } for pid=983 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 55.150187][ T986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 55.240944][ T36] audit: type=1400 audit(1791118088.410:301): avc: denied { search } for pid=991 comm="syz.6.180" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.294351][ T36] audit: type=1400 audit(1791118088.460:302): avc: denied { unmount } for pid=333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.319005][ T36] audit: type=1400 audit(1791118088.490:303): avc: denied { setopt } for pid=1006 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.340136][ T36] audit: type=1400 audit(1791118088.490:304): avc: denied { ioctl } for pid=1006 comm="syz.4.186" path="socket:[17339]" dev="sockfs" ino=17339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.452340][ T1014] netlink: 'syz.5.189': attribute type 46 has an invalid length. [ 55.495115][ T447] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.513181][ T1018] FAULT_INJECTION: forcing a failure. [ 55.513181][ T1018] name failslab, interval 1, probability 0, space 0, times 0 [ 55.525938][ T1018] CPU: 1 UID: 0 PID: 1018 Comm: syz.3.191 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 55.525977][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 55.525993][ T1018] Call Trace: [ 55.526001][ T1018] [ 55.526011][ T1018] __dump_stack+0x21/0x30 [ 55.526051][ T1018] dump_stack_lvl+0x140/0x1c0 [ 55.526084][ T1018] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.526117][ T1018] ? kernel_text_address+0xa9/0xe0 [ 55.526152][ T1018] ? __kasan_check_write+0x18/0x20 [ 55.526180][ T1018] dump_stack+0x19/0x20 [ 55.526212][ T1018] should_fail_ex+0x3c2/0x510 [ 55.526244][ T1018] should_failslab+0xac/0x100 [ 55.526275][ T1018] __kmalloc_node_noprof+0x69/0x500 [ 55.526303][ T1018] ? __kvmalloc_node_noprof+0x128/0x300 [ 55.526329][ T1018] __kvmalloc_node_noprof+0x128/0x300 [ 55.526353][ T1018] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 55.526376][ T1018] ? __x64_sys_getxattr+0xa5/0xc0 [ 55.526403][ T1018] ? mfill_atomic_pte_zeropage+0x2e0/0x3b0 [ 55.526430][ T1018] do_getxattr+0xf1/0x430 [ 55.526456][ T1018] getxattr+0x196/0x250 [ 55.526484][ T1018] ? path_getxattr+0x210/0x210 [ 55.526516][ T1018] ? putname+0x113/0x150 [ 55.526544][ T1018] path_getxattr+0x10b/0x210 [ 55.526573][ T1018] ? path_setxattr+0x5a0/0x5a0 [ 55.526600][ T1018] ? __kasan_check_write+0x18/0x20 [ 55.526625][ T1018] ? fpregs_restore_userregs+0x11c/0x260 [ 55.526657][ T1018] __x64_sys_getxattr+0xa5/0xc0 [ 55.526683][ T1018] x64_sys_call+0x2c80/0x2ee0 [ 55.526705][ T1018] do_syscall_64+0x57/0xf0 [ 55.526730][ T1018] ? clear_bhb_loop+0x50/0xa0 [ 55.526762][ T1018] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.526794][ T1018] RIP: 0033:0x7fc83219e159 [ 55.526825][ T1018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.526846][ T1018] RSP: 002b:00007fc83301a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 55.526873][ T1018] RAX: ffffffffffffffda RBX: 00007fc832425fa0 RCX: 00007fc83219e159 [ 55.526891][ T1018] RDX: 0000200000000280 RSI: 00002000000001c0 RDI: 0000200000000180 [ 55.526910][ T1018] RBP: 00007fc83223506b R08: 0000000000000000 R09: 0000000000000000 [ 55.526927][ T1018] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000000 [ 55.526943][ T1018] R13: 00007fc832426038 R14: 00007fc832425fa0 R15: 00007ffcfe9e0dc8 [ 55.526964][ T1018] [ 55.615888][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 55.694794][ T447] usb 7-1: device descriptor read/64, error -71 [ 55.924960][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 55.931676][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.943212][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.953219][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.963032][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.986654][ T10] usb 5-1: config 0 descriptor?? [ 55.996089][ T10] hub 5-1:0.0: USB hub found [ 56.055007][ T447] usb 7-1: device descriptor read/64, error -71 [ 56.203403][ T10] hub 5-1:0.0: 1 port detected [ 56.254984][ T352] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 56.294981][ T447] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.405942][ T1029] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 56.434199][ T352] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 56.444316][ T352] usb 6-1: can't read configurations, error -71 [ 56.446919][ T447] usb 7-1: device descriptor read/64, error -71 [ 56.476674][ T1036] x86/PAT: syz.3.195:1036 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 56.625647][ T1037] x86/PAT: syz.3.195:1037 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 56.705027][ T447] usb 7-1: device descriptor read/64, error -71 [ 56.802024][ T10] hub 5-1:0.0: activate --> -90 [ 56.815559][ T447] usb usb7-port1: attempt power cycle [ 56.958964][ T1039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=1039 comm=syz.5.197 [ 57.164996][ T447] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.192699][ T447] usb 7-1: device descriptor read/8, error -71 [ 57.269693][ T45] usb 5-1: USB disconnect, device number 23 [ 57.275242][ T352] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.354481][ T447] usb 7-1: device descriptor read/8, error -71 [ 57.434996][ T352] usb 6-1: Using ep0 maxpacket: 8 [ 57.441609][ T352] usb 6-1: unable to get BOS descriptor or descriptor too short [ 57.455485][ T352] usb 6-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 57.465847][ T352] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.478785][ T352] usb 6-1: config 1 interface 1 has no altsetting 0 [ 57.487028][ T352] usb 6-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 57.496222][ T352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.504340][ T352] usb 6-1: Product: syz [ 57.508646][ T352] usb 6-1: Manufacturer: 筐䯡휗蘮倌䳑່⇳僗변摰ⱑ嘞廉莐 [ 57.517242][ T352] usb 6-1: SerialNumber: syz [ 57.595005][ T447] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 57.616071][ T447] usb 7-1: device descriptor read/8, error -71 [ 57.729686][ T352] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 57.738005][ T352] usb 6-1: selecting invalid altsetting 0 [ 57.744405][ T352] usb 6-1: unable to issue vendor read request (ret = -71) [ 57.752000][ T352] usb 6-1: unable to issue vendor read request (ret = -71) [ 57.759836][ T352] usb 6-1: unable to issue vendor read request (ret = -71) [ 57.767587][ T352] usb 6-1: unable to issue vendor read request (ret = -71) [ 57.767607][ T447] usb 7-1: device descriptor read/8, error -71 [ 57.787222][ T352] usb 6-1: USB disconnect, device number 4 [ 57.808438][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.892770][ T447] usb usb7-port1: unable to enumerate USB device [ 57.976540][ T1048] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 58.101243][ T1053] fuse: Bad value for 'rootmode' [ 58.231638][ T1069] netlink: 'syz.6.205': attribute type 16 has an invalid length. [ 58.247372][ T1071] netlink: 'syz.4.204': attribute type 16 has an invalid length. [ 58.272705][ T1069] tipc: Started in network mode [ 58.287724][ T1069] tipc: Node identity 7f000001, cluster identity 4711 [ 58.315091][ T1069] tipc: New replicast peer: 0.0.0.0 [ 58.320652][ T1069] tipc: Enabled bearer , priority 10 [ 58.343209][ T1071] netlink: 'syz.4.204': attribute type 16 has an invalid length. [ 58.353580][ T1076] tipc: Disabling bearer [ 58.675525][ T447] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 58.824994][ T478] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 58.832633][ T447] usb 5-1: device descriptor read/64, error -71 [ 58.986173][ T478] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.997545][ T478] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.007534][ T478] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 59.017342][ T478] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.026444][ T478] usb 7-1: config 0 descriptor?? [ 59.075496][ T447] usb 5-1: device descriptor read/64, error -71 [ 59.354990][ T447] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 59.405000][ T352] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 59.437798][ T478] hid (null): unknown global tag 0xd [ 59.447952][ T478] playstation 0003:054C:0DF2.0003: unknown global tag 0xd [ 59.455225][ T478] playstation 0003:054C:0DF2.0003: item 0 2 1 13 parsing failed [ 59.463157][ T478] playstation 0003:054C:0DF2.0003: Parse failed [ 59.469564][ T478] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22 [ 59.484988][ T447] usb 5-1: device descriptor read/64, error -71 [ 59.563481][ T352] usb 6-1: unable to get BOS descriptor or descriptor too short [ 59.572026][ T352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.582281][ T352] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.592718][ T352] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 59.601900][ T352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.611374][ T352] usb 6-1: Product: syz [ 59.615748][ T352] usb 6-1: Manufacturer: syz [ 59.620374][ T352] usb 6-1: SerialNumber: syz [ 59.637195][ T352] usb 6-1: selecting invalid altsetting 1 [ 59.643360][ T352] usb 6-1: unit 6 not found! [ 59.644274][ T478] usb 7-1: USB disconnect, device number 6 [ 59.725023][ T447] usb 5-1: device descriptor read/64, error -71 [ 59.837301][ T447] usb usb5-port1: attempt power cycle [ 59.858415][ T1110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.867528][ T1110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.876342][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 59.876360][ T36] audit: type=1400 audit(1791118093.050:316): avc: denied { mounton } for pid=1104 comm="syz.5.216" path="/14/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.911135][ T36] audit: type=1400 audit(1791118093.080:317): avc: denied { append } for pid=1104 comm="syz.5.216" name="uprobe_events" dev="tracefs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 60.174975][ T447] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 60.196651][ T447] usb 5-1: device descriptor read/8, error -71 [ 60.326097][ T447] usb 5-1: device descriptor read/8, error -71 [ 60.574969][ T447] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 60.596110][ T447] usb 5-1: device descriptor read/8, error -71 [ 60.726128][ T447] usb 5-1: device descriptor read/8, error -71 [ 60.820543][ T36] audit: type=1400 audit(1791118093.990:318): avc: denied { read } for pid=1118 comm="syz.6.219" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.855243][ T447] usb usb5-port1: unable to enumerate USB device [ 60.866489][ T36] audit: type=1400 audit(1791118093.990:319): avc: denied { open } for pid=1118 comm="syz.6.219" path="/15/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.891299][ T36] audit: type=1400 audit(1791118094.010:320): avc: denied { ioctl } for pid=1118 comm="syz.6.219" path="/15/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.104969][ T447] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 62.182518][ T352] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 62.199715][ T36] audit: type=1400 audit(1791118095.370:321): avc: denied { getattr } for pid=1138 comm="syz.5.225" path="/" dev="nsfs" ino=4026532315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.235057][ T352] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.247124][ T352] usb 6-1: USB disconnect, device number 5 [ 62.258244][ T447] usb 7-1: Using ep0 maxpacket: 32 [ 62.266160][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.283083][ T447] usb 7-1: unable to get BOS descriptor or descriptor too short [ 62.292741][ T447] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 62.323506][ T447] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.344104][ T447] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 62.358208][ T447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.366795][ T447] usb 7-1: Product: syz [ 62.371051][ T447] usb 7-1: Manufacturer: syz [ 62.381958][ T447] usb 7-1: SerialNumber: syz [ 62.434323][ T1146] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 62.442006][ T36] audit: type=1400 audit(1791118095.600:322): avc: denied { load_policy } for pid=1145 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.464674][ T1146] SELinux: failed to load policy [ 62.606705][ T447] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 62.615343][ T447] usb 7-1: 3:0: cannot get min/max values for control 3 (id 3) [ 62.623738][ T447] usb 7-1: 3:0: cannot get min/max values for control 4 (id 3) [ 62.633828][ T447] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 62.645366][ T447] usb 7-1: 3:0: cannot get min/max values for control 8 (id 3) [ 62.653730][ T447] usb 7-1: 3:0: cannot get min/max values for control 8 (id 3) [ 62.664272][ T447] usb 7-1: 3:0: failed to get current value for ch 1 (-71) [ 62.671972][ T447] usb 7-1: 3:0: failed to get current value for ch 2 (-71) [ 62.680226][ T447] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 62.688376][ T447] usb 7-1: 3:0: cannot get min/max values for control 12 (id 3) [ 62.695027][ T352] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 62.698079][ T447] usb 7-1: 3:0: cannot get min/max values for control 12 (id 3) [ 62.724987][ T447] usb 7-1: USB disconnect, device number 7 [ 62.784968][ T379] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 62.862064][ T352] usb 6-1: unable to get BOS descriptor or descriptor too short [ 62.870325][ T352] usb 6-1: not running at top speed; connect to a high speed hub [ 62.880637][ T352] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 62.889782][ T352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.898146][ T352] usb 6-1: Product: syz [ 62.902333][ T352] usb 6-1: Manufacturer: syz [ 62.907619][ T352] usb 6-1: SerialNumber: syz [ 62.953768][ T379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.964079][ T379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.975117][ T379] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.989631][ T379] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.999922][ T379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.008058][ T379] usb 5-1: Product: syz [ 63.012347][ T379] usb 5-1: Manufacturer: syz [ 63.017041][ T379] usb 5-1: SerialNumber: syz [ 63.024041][ T379] cdc_mbim 5-1:1.0: skipping garbage [ 63.118155][ T1144] kvm: kvm [1143]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 63.129039][ T1144] kvm: kvm [1143]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 63.150184][ T36] audit: type=1400 audit(1791118096.320:323): avc: denied { getattr } for pid=1156 comm="syz.6.230" name="/" dev="incremental-fs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.200137][ T352] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 63.215038][ T352] usb 6-1: USB disconnect, device number 6 [ 63.254265][ T1157] netlink: 'syz.6.230': attribute type 46 has an invalid length. [ 63.424445][ T379] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 63.433029][ T379] cdc_mbim 5-1:1.0: bind() failure [ 63.440026][ T379] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 63.454947][ T379] cdc_ncm 5-1:1.1: bind() failure [ 63.504969][ T447] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 63.656511][ T447] usb 7-1: unable to get BOS descriptor or descriptor too short [ 63.665202][ T447] usb 7-1: config 129 has an invalid interface number: 80 but max is 0 [ 63.675266][ T447] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 63.683526][ T447] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 63.693039][ T447] usb 7-1: config 129 has no interface number 0 [ 63.699519][ T447] usb 7-1: config 129 has no interface number 1 [ 63.706111][ T447] usb 7-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 63.719908][ T447] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 63.731099][ T447] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 63.744556][ T447] usb 7-1: config 129 interface 80 has no altsetting 0 [ 63.751695][ T447] usb 7-1: config 129 interface 5 has no altsetting 0 [ 63.761083][ T447] usb 7-1: string descriptor 0 read error: -22 [ 63.767567][ T447] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 63.778109][ T447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.789693][ T447] usb 7-1: MIDIStreaming interface descriptor not found [ 63.992909][ T447] usb 7-1: USB disconnect, device number 8 [ 64.178274][ T36] audit: type=1400 audit(1791118097.350:324): avc: denied { map } for pid=1168 comm="syz.5.233" path="pipe:[16667]" dev="pipefs" ino=16667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 64.237640][ T36] audit: type=1400 audit(1791118097.410:325): avc: denied { bind } for pid=1172 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.624950][ T379] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.784967][ T379] usb 6-1: Using ep0 maxpacket: 8 [ 64.805733][ T379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.816811][ T379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.826944][ T379] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.840088][ T379] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 64.849392][ T379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.866353][ T379] usb 6-1: config 0 descriptor?? [ 65.262097][ T13] bridge_slave_1: left allmulticast mode [ 65.268366][ T13] bridge_slave_1: left promiscuous mode [ 65.274072][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.284595][ T13] bridge_slave_0: left allmulticast mode [ 65.285396][ T379] uclogic 0003:2179:0077.0004: interface is invalid, ignoring [ 65.297272][ T13] bridge_slave_0: left promiscuous mode [ 65.311181][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.470059][ T13] tipc: Left network mode [ 65.479967][ T13] veth1_macvtap: left promiscuous mode [ 65.495206][ T13] veth0_vlan: left promiscuous mode [ 65.495732][ T1188] Invalid logical block size (4) [ 65.508756][ T1188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.520519][ T1212] Invalid logical block size (4) [ 65.525230][ T9] usb 5-1: USB disconnect, device number 28 [ 65.535843][ T1188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.728885][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.737481][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.744604][ T1200] bridge_slave_0: entered allmulticast mode [ 65.751415][ T1200] bridge_slave_0: entered promiscuous mode [ 65.758813][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.766065][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.773166][ T1200] bridge_slave_1: entered allmulticast mode [ 65.781097][ T1200] bridge_slave_1: entered promiscuous mode [ 65.848725][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.855097][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 65.855868][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.870760][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.877850][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.913843][ T765] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.921769][ T765] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.938922][ T765] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.946028][ T765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.955850][ T765] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.962929][ T765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.993272][ T1200] veth0_vlan: entered promiscuous mode [ 66.007526][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 66.008029][ T1200] veth1_macvtap: entered promiscuous mode [ 66.021495][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.040374][ T9] usb 5-1: Product: syz [ 66.044810][ T9] usb 5-1: Manufacturer: syz [ 66.050523][ T9] usb 5-1: SerialNumber: syz [ 66.061362][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 66.061379][ T36] audit: type=1400 audit(1791118099.230:328): avc: denied { mount } for pid=1200 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.109148][ T1219] Zero length message leads to an empty skb [ 66.259873][ T1214] SELinux: syz.4.245 (1214) set checkreqprot to 1. This is no longer supported. [ 66.259873][ T36] audit: type=1400 audit(1791118099.430:329): avc: denied { setcheckreqprot } for pid=1213 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.658525][ T1227] netlink: 'syz.7.247': attribute type 3 has an invalid length. [ 66.683298][ T36] audit: type=1400 audit(1791118099.850:330): avc: denied { read write } for pid=1228 comm="syz.7.248" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.709059][ T36] audit: type=1400 audit(1791118099.850:331): avc: denied { open } for pid=1228 comm="syz.7.248" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.833474][ T36] audit: type=1400 audit(1791118100.000:332): avc: denied { setattr } for pid=1232 comm="syz.4.250" name="timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 66.888069][ T1237] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 66.896897][ T1237] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.252'. [ 66.926451][ T447] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.096195][ T447] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 67.107806][ T447] usb 8-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.121249][ T447] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.128116][ T447] usb 8-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 67.137520][ T447] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.146712][ T447] usb 8-1: config 0 descriptor?? [ 67.496757][ T66] usb 6-1: USB disconnect, device number 7 [ 67.558584][ T447] wacom 0003:056A:00B5.0005: item fetching failed at offset 0/6 [ 67.566745][ T447] wacom 0003:056A:00B5.0005: parse failed [ 67.572659][ T447] wacom 0003:056A:00B5.0005: probe with driver wacom failed with error -22 [ 67.755106][ T36] audit: type=1400 audit(1791118100.930:333): avc: denied { ioctl } for pid=1228 comm="syz.7.248" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.756432][ T447] usb 8-1: USB disconnect, device number 2 [ 67.875057][ T66] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 67.942603][ T1249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.951548][ T1249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.044969][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 68.051417][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.062694][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.072681][ T66] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.086225][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.096778][ T66] usb 6-1: config 0 descriptor?? [ 68.103528][ T66] hub 6-1:0.0: USB hub found [ 68.304133][ T66] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 68.516375][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.525503][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.534147][ T1257] FAULT_INJECTION: forcing a failure. [ 68.534147][ T1257] name failslab, interval 1, probability 0, space 0, times 0 [ 68.547286][ T1257] CPU: 0 UID: 0 PID: 1257 Comm: syz.4.259 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 68.547330][ T1257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.547348][ T1257] Call Trace: [ 68.547356][ T1257] [ 68.547365][ T1257] __dump_stack+0x21/0x30 [ 68.547408][ T1257] dump_stack_lvl+0x140/0x1c0 [ 68.547446][ T1257] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.547485][ T1257] dump_stack+0x19/0x20 [ 68.547519][ T1257] should_fail_ex+0x3c2/0x510 [ 68.547549][ T1257] ? sk_prot_alloc+0x104/0x3a0 [ 68.547583][ T1257] should_failslab+0xac/0x100 [ 68.547615][ T1257] __kmalloc_noprof+0x69/0x510 [ 68.547642][ T1257] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 68.547670][ T1257] ? sk_prot_alloc+0x104/0x3a0 [ 68.547703][ T1257] ? security_inode_alloc+0x51/0x230 [ 68.547739][ T1257] sk_prot_alloc+0x104/0x3a0 [ 68.547773][ T1257] ? security_inode_alloc+0xc2/0x230 [ 68.547808][ T1257] sk_alloc+0x40/0x590 [ 68.547842][ T1257] can_create+0x2ee/0x5e0 [ 68.547889][ T1257] __sock_create+0x3a5/0x810 [ 68.547922][ T1257] __sys_socket+0xe1/0x1c0 [ 68.547952][ T1257] __x64_sys_socket+0x7e/0x90 [ 68.547983][ T1257] x64_sys_call+0x2608/0x2ee0 [ 68.548006][ T1257] do_syscall_64+0x57/0xf0 [ 68.548032][ T1257] ? clear_bhb_loop+0x50/0xa0 [ 68.548068][ T1257] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.548101][ T1257] RIP: 0033:0x7f033679e159 [ 68.548123][ T1257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.548146][ T1257] RSP: 002b:00007f0337704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 68.548171][ T1257] RAX: ffffffffffffffda RBX: 00007f0336a25fa0 RCX: 00007f033679e159 [ 68.548190][ T1257] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 68.548206][ T1257] RBP: 00007f033683506b R08: 0000000000000000 R09: 0000000000000000 [ 68.548221][ T1257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.548236][ T1257] R13: 00007f0336a26038 R14: 00007f0336a25fa0 R15: 00007fffa539b278 [ 68.548258][ T1257] [ 68.767551][ T66] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x3 [ 68.785161][ T66] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 69.012600][ T1260] tipc: Enabling not permitted [ 69.018263][ T1260] tipc: Enabling of bearer rejected, failed to enable media [ 69.028694][ T1260] 9p: Unknown Cache mode or invalid value dev/kvm [ 69.096751][ T352] usb 6-1: USB disconnect, device number 8 [ 69.215718][ T1266] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 69.255698][ T1266] netlink: 'syz.4.262': attribute type 4 has an invalid length. [ 69.401070][ T36] audit: type=1400 audit(1791118102.570:334): avc: denied { map } for pid=1270 comm="syz.4.263" path="socket:[20496]" dev="sockfs" ino=20496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 69.455566][ T36] audit: type=1400 audit(1791118102.630:335): avc: denied { bind } for pid=1273 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.485464][ T1278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.494180][ T1278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.515165][ T36] audit: type=1400 audit(1791118102.630:336): avc: denied { accept } for pid=1273 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.694148][ T36] audit: type=1400 audit(1791118102.860:337): avc: denied { ioctl } for pid=1289 comm="syz.5.269" path="socket:[19755]" dev="sockfs" ino=19755 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.839989][ T1303] can0: slcan on ttyS3. [ 69.899390][ T1303] can0 (unregistered): slcan off ttyS3. [ 70.046013][ T66] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.204974][ T66] usb 8-1: Using ep0 maxpacket: 8 [ 70.215655][ T66] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.235509][ T66] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 70.244531][ T66] usb 8-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 70.261358][ T66] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 70.274690][ T66] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.289600][ T66] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 70.298899][ T66] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.307077][ T66] usb 8-1: Product: syz [ 70.311269][ T66] usb 8-1: Manufacturer: syz [ 70.316133][ T66] usb 8-1: SerialNumber: syz [ 70.440070][ T1346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.450472][ T1346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.459896][ T1347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.468990][ T1347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.675005][ T478] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 70.683130][ T1346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.705853][ T1346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.866138][ T478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 70.877564][ T478] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 70.886998][ T478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.900080][ T478] usb 6-1: config 0 descriptor?? [ 71.118883][ T1349] FAULT_INJECTION: forcing a failure. [ 71.118883][ T1349] name failslab, interval 1, probability 0, space 0, times 0 [ 71.138268][ T66] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 71.145715][ T1349] CPU: 1 UID: 0 PID: 1349 Comm: syz.4.279 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 71.145760][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.145776][ T1349] Call Trace: [ 71.145785][ T1349] [ 71.145793][ T1349] __dump_stack+0x21/0x30 [ 71.145837][ T1349] dump_stack_lvl+0x140/0x1c0 [ 71.145874][ T1349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.145913][ T1349] dump_stack+0x19/0x20 [ 71.145948][ T1349] should_fail_ex+0x3c2/0x510 [ 71.145980][ T1349] should_failslab+0xac/0x100 [ 71.146033][ T1349] kmem_cache_alloc_noprof+0x42/0x410 [ 71.146063][ T1349] ? fcntl_setlk+0xb4/0x10a0 [ 71.146092][ T1349] ? __cfi_futex_wake_mark+0x10/0x10 [ 71.146117][ T1349] fcntl_setlk+0xb4/0x10a0 [ 71.146146][ T1349] ? avc_has_perm_noaudit+0x26b/0x360 [ 71.146180][ T1349] ? __asan_memcpy+0x5a/0x80 [ 71.146206][ T1349] ? avc_has_perm_noaudit+0x289/0x360 [ 71.146240][ T1349] ? avc_has_perm+0x155/0x240 [ 71.146271][ T1349] ? __cfi_fcntl_setlk+0x10/0x10 [ 71.146300][ T1349] ? __cfi_avc_has_perm+0x10/0x10 [ 71.146333][ T1349] ? __kasan_check_write+0x18/0x20 [ 71.146360][ T1349] do_fcntl+0x8c2/0x1580 [ 71.146391][ T1349] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 71.146419][ T1349] ? check_fcntl_cmd+0xb0/0xb0 [ 71.146454][ T1349] ? bpf_lsm_file_fcntl+0xd/0x20 [ 71.146486][ T1349] ? security_file_fcntl+0x3e/0x110 [ 71.146513][ T1349] __se_sys_fcntl+0xe4/0x180 [ 71.146543][ T1349] __x64_sys_fcntl+0x7f/0xa0 [ 71.146572][ T1349] x64_sys_call+0x1cb3/0x2ee0 [ 71.146604][ T1349] do_syscall_64+0x57/0xf0 [ 71.146632][ T1349] ? clear_bhb_loop+0x50/0xa0 [ 71.146668][ T1349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.146702][ T1349] RIP: 0033:0x7f033679e159 [ 71.146723][ T1349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.146745][ T1349] RSP: 002b:00007f0337704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 71.146772][ T1349] RAX: ffffffffffffffda RBX: 00007f0336a25fa0 RCX: 00007f033679e159 [ 71.146791][ T1349] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 71.146809][ T1349] RBP: 00007f033683506b R08: 0000000000000000 R09: 0000000000000000 [ 71.146827][ T1349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.146843][ T1349] R13: 00007f0336a26038 R14: 00007f0336a25fa0 R15: 00007fffa539b278 [ 71.146866][ T1349] [ 71.149467][ T66] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 71.400758][ T66] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.409140][ T9] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 71.425749][ T9] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 71.452159][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.473151][ T66] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 71.488570][ T66] usb 8-1: USB disconnect, device number 3 [ 71.502200][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.529103][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.765331][ T10] usb 4-1: USB disconnect, device number 8 [ 71.784076][ T1361] netlink: 'syz.7.283': attribute type 32 has an invalid length. [ 71.941420][ T297] bridge_slave_1: left allmulticast mode [ 71.948319][ T297] bridge_slave_1: left promiscuous mode [ 71.954066][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.962461][ T297] bridge_slave_0: left allmulticast mode [ 71.968373][ T297] bridge_slave_0: left promiscuous mode [ 71.974161][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.982589][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 71.982606][ T36] audit: type=1400 audit(1791118105.150:351): avc: denied { ioctl } for pid=1368 comm="syz.7.286" path="socket:[19958]" dev="sockfs" ino=19958 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.121683][ T297] veth1_macvtap: left promiscuous mode [ 72.127323][ T297] veth0_vlan: left promiscuous mode [ 72.201857][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.208973][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.216120][ T1365] bridge_slave_0: entered allmulticast mode [ 72.222507][ T1365] bridge_slave_0: entered promiscuous mode [ 72.229906][ T36] audit: type=1400 audit(1791118105.400:352): avc: denied { ioctl } for pid=1376 comm="syz.7.289" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.230055][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.264527][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.275324][ T1365] bridge_slave_1: entered allmulticast mode [ 72.281794][ T1365] bridge_slave_1: entered promiscuous mode [ 72.344444][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.351581][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.358899][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.366003][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.392988][ T765] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.400724][ T765] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.410463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.417579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.427244][ T765] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.434338][ T765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.466710][ T1365] veth0_vlan: entered promiscuous mode [ 72.480711][ T1365] veth1_macvtap: entered promiscuous mode [ 72.525210][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.547413][ T36] audit: type=1400 audit(1791118105.720:353): avc: denied { read } for pid=1382 comm="syz.8.282" path="socket:[21310]" dev="sockfs" ino=21310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.600259][ T1389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.609286][ T1389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.664993][ T10] usb 8-1: device descriptor read/64, error -71 [ 72.905268][ T10] usb 8-1: device descriptor read/64, error -71 [ 73.144987][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 73.284946][ T10] usb 8-1: device descriptor read/64, error -71 [ 73.450201][ T478] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 73.465110][ T478] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 73.478370][ T36] audit: type=1400 audit(1791118106.650:354): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=529 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.499025][ T478] usb 6-1: USB disconnect, device number 9 [ 73.500574][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 73.516540][ T36] audit: type=1400 audit(1791118106.650:355): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=529 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.536211][ T1404] WARNING! power/level is deprecated; use power/control instead [ 73.540167][ T10] usb 8-1: device descriptor read/64, error -71 [ 73.552808][ T36] audit: type=1400 audit(1791118106.650:356): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=529 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.579177][ T36] audit: type=1400 audit(1791118106.720:357): avc: denied { view } for pid=1403 comm="syz.5.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.645015][ T618] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.655175][ T10] usb usb8-port1: attempt power cycle [ 73.775017][ T618] usb 9-1: device descriptor read/64, error -71 [ 73.788597][ T36] audit: type=1400 audit(1791118106.960:358): avc: denied { ioctl } for pid=1408 comm="syz.5.297" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.887690][ T1418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.897261][ T1420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.906804][ T1418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.915591][ T1420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.005031][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 74.015036][ T618] usb 9-1: device descriptor read/64, error -71 [ 74.036322][ T10] usb 8-1: device descriptor read/8, error -71 [ 74.166098][ T10] usb 8-1: device descriptor read/8, error -71 [ 74.254975][ T618] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 74.384986][ T618] usb 9-1: device descriptor read/64, error -71 [ 74.404966][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 74.426003][ T10] usb 8-1: device descriptor read/8, error -71 [ 74.478501][ T36] audit: type=1326 audit(1791118107.650:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f033679e159 code=0x0 [ 74.556021][ T10] usb 8-1: device descriptor read/8, error -71 [ 74.626058][ T618] usb 9-1: device descriptor read/64, error -71 [ 74.665048][ T10] usb usb8-port1: unable to enumerate USB device [ 74.734328][ T36] audit: type=1400 audit(1791118107.900:360): avc: denied { cmd } for pid=1455 comm="iou-wrk-1456" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 74.746610][ T618] usb usb9-port1: attempt power cycle [ 74.854976][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 74.935709][ T1476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.945925][ T1476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.954214][ T1476] netlink: 'syz.4.306': attribute type 12 has an invalid length. [ 74.994977][ T9] usb 6-1: device descriptor read/64, error -71 [ 75.094973][ T618] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 75.115917][ T618] usb 9-1: device descriptor read/8, error -71 [ 75.235101][ T9] usb 6-1: device descriptor read/64, error -71 [ 75.246100][ T618] usb 9-1: device descriptor read/8, error -71 [ 75.474968][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 75.484943][ T618] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 75.506034][ T618] usb 9-1: device descriptor read/8, error -71 [ 75.604966][ T9] usb 6-1: device descriptor read/64, error -71 [ 75.636259][ T618] usb 9-1: device descriptor read/8, error -71 [ 75.745068][ T618] usb usb9-port1: unable to enumerate USB device [ 75.844957][ T9] usb 6-1: device descriptor read/64, error -71 [ 75.955077][ T9] usb usb6-port1: attempt power cycle [ 76.294975][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 76.316092][ T9] usb 6-1: device descriptor read/8, error -71 [ 76.446136][ T9] usb 6-1: device descriptor read/8, error -71 [ 76.684948][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 76.706103][ T9] usb 6-1: device descriptor read/8, error -71 [ 76.794965][ T618] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 76.836083][ T9] usb 6-1: device descriptor read/8, error -71 [ 76.944944][ T618] usb 9-1: Using ep0 maxpacket: 16 [ 76.945150][ T9] usb usb6-port1: unable to enumerate USB device [ 76.951812][ T618] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.967882][ T618] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.978513][ T618] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 76.992011][ T618] usb 9-1: config 0 interface 0 has no altsetting 0 [ 76.998939][ T618] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 77.008528][ T618] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.020487][ T618] usb 9-1: config 0 descriptor?? [ 77.224973][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 77.376105][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.387106][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.398662][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 77.407768][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.415807][ T9] usb 8-1: Product: syz [ 77.419999][ T9] usb 8-1: Manufacturer: syz [ 77.424622][ T9] usb 8-1: SerialNumber: syz [ 77.432737][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 77.438734][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 77.450678][ T618] hid (null): unknown global tag 0xd [ 77.456201][ T618] hid (null): unknown global tag 0xc [ 77.461576][ T618] hid (null): nested delimiters [ 77.631537][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 77.631561][ T36] audit: type=1400 audit(1791118110.800:363): avc: denied { call } for pid=1493 comm="syz.7.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.634678][ T1496] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 77.637800][ T1500] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 77.646203][ T36] audit: type=1400 audit(1791118110.810:364): avc: denied { connect } for pid=1491 comm="syz.8.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.659084][ T1498] kvm: kvm [1497]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 77.681566][ T36] audit: type=1400 audit(1791118110.850:365): avc: denied { ioctl } for pid=1497 comm="syz.5.309" path="socket:[20273]" dev="sockfs" ino=20273 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.691469][ T1498] kvm: kvm [1497]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 77.710098][ T66] rust_binder: 1493: undelivered TRANSACTION_ERROR: 29189 [ 77.731048][ T1498] kvm: kvm [1497]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 77.749886][ T618] usb 8-1: USB disconnect, device number 8 [ 77.757333][ T478] usb 9-1: USB disconnect, device number 6 [ 77.760551][ T1498] kvm: kvm [1497]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 77.774068][ T36] audit: type=1400 audit(1791118110.870:366): avc: denied { write } for pid=1491 comm="syz.8.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.779413][ T1498] kvm: kvm [1497]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 77.797495][ T36] audit: type=1400 audit(1791118110.920:367): avc: denied { setopt } for pid=1491 comm="syz.8.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.882411][ T1504] capability: warning: `syz.5.310' uses 32-bit capabilities (legacy support in use) [ 77.947978][ T36] audit: type=1400 audit(1791118111.120:368): avc: denied { remount } for pid=1509 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.080912][ T1518] FAULT_INJECTION: forcing a failure. [ 78.080912][ T1518] name failslab, interval 1, probability 0, space 0, times 0 [ 78.113843][ T1518] CPU: 1 UID: 0 PID: 1518 Comm: syz.5.315 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 78.113896][ T1518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.113913][ T1518] Call Trace: [ 78.113922][ T1518] [ 78.113932][ T1518] __dump_stack+0x21/0x30 [ 78.113975][ T1518] dump_stack_lvl+0x140/0x1c0 [ 78.114012][ T1518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.114048][ T1518] ? xas_find_marked+0xc97/0xda0 [ 78.114078][ T1518] ? xas_nomem+0x71/0x2c0 [ 78.114106][ T1518] dump_stack+0x19/0x20 [ 78.114140][ T1518] should_fail_ex+0x3c2/0x510 [ 78.114171][ T1518] should_failslab+0xac/0x100 [ 78.114204][ T1518] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 78.114234][ T1518] ? kstrdup_const+0x45/0x60 [ 78.114258][ T1518] kstrdup+0x4d/0x130 [ 78.114278][ T1518] ? kstrdup_const+0x3a/0x60 [ 78.114300][ T1518] kstrdup_const+0x45/0x60 [ 78.114322][ T1518] alloc_vfsmnt+0xed/0x610 [ 78.114360][ T1518] clone_mnt+0x6e/0xbe0 [ 78.114391][ T1518] ? __kasan_kmalloc+0x96/0xb0 [ 78.114424][ T1518] copy_tree+0xe2/0xcb0 [ 78.114447][ T1518] ? down_write+0xee/0x2b0 [ 78.114482][ T1518] ? __cfi_down_write+0x10/0x10 [ 78.114518][ T1518] copy_mnt_ns+0x186/0x8f0 [ 78.114544][ T1518] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 78.114570][ T1518] ? create_new_namespaces+0x48/0x6f0 [ 78.114608][ T1518] create_new_namespaces+0xd9/0x6f0 [ 78.114646][ T1518] unshare_nsproxy_namespaces+0x124/0x180 [ 78.114685][ T1518] ksys_unshare+0x4f9/0x920 [ 78.114718][ T1518] ? fput+0x1a4/0x230 [ 78.114753][ T1518] ? __cfi_ksys_unshare+0x10/0x10 [ 78.114787][ T1518] ? __kasan_check_write+0x18/0x20 [ 78.114814][ T1518] __x64_sys_unshare+0x3c/0x50 [ 78.114855][ T1518] x64_sys_call+0x2998/0x2ee0 [ 78.114879][ T1518] do_syscall_64+0x57/0xf0 [ 78.114907][ T1518] ? clear_bhb_loop+0x50/0xa0 [ 78.114941][ T1518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.114971][ T1518] RIP: 0033:0x7fed8779e159 [ 78.114990][ T1518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.115009][ T1518] RSP: 002b:00007fed861f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 78.115036][ T1518] RAX: ffffffffffffffda RBX: 00007fed87a25fa0 RCX: 00007fed8779e159 [ 78.115054][ T1518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 78.115070][ T1518] RBP: 00007fed8783506b R08: 0000000000000000 R09: 0000000000000000 [ 78.115085][ T1518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.115100][ T1518] R13: 00007fed87a26038 R14: 00007fed87a25fa0 R15: 00007fffaf54e988 [ 78.115130][ T1518] [ 78.465651][ T1533] tipc: Started in network mode [ 78.470570][ T1533] tipc: Node identity 2000004, cluster identity 4711 [ 78.492012][ T1533] tipc: Node number set to 33554436 [ 78.576693][ T36] audit: type=1400 audit(1791118111.740:369): avc: denied { ioctl } for pid=1541 comm="syz.4.322" path="socket:[22637]" dev="sockfs" ino=22637 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.603657][ T1544] program syz.7.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.622058][ T1542] Invalid argument reading file caps for ./file0 [ 78.659209][ T1546] printk: legacy console [ttyS0] disabled [ 78.716082][ T1546] printk: legacy console [ttyS0] enabled [ 78.779942][ T1554] netlink: 2 bytes leftover after parsing attributes in process `syz.7.326'. [ 78.792651][ T1554] netlink: 2 bytes leftover after parsing attributes in process `syz.7.326'. [ 78.804936][ T618] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 78.986345][ T618] usb 9-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 79.012097][ T618] usb 9-1: config 0 interface 0 has no altsetting 0 [ 79.024208][ T618] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 79.033470][ T618] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.054594][ T618] usb 9-1: config 0 descriptor?? [ 79.134940][ T10] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 79.284937][ T10] usb 8-1: device descriptor read/64, error -71 [ 79.426490][ T1565] overlayfs: missing 'lowerdir' [ 79.432281][ T1565] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 79.446439][ T1565] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 79.462182][ T1540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.471032][ T1540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.484029][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.494978][ T1575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.503557][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.512335][ T1575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.525129][ T10] usb 8-1: device descriptor read/64, error -71 [ 79.539736][ T36] audit: type=1400 audit(1791118112.710:371): avc: denied { unmount } for pid=333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 79.569160][ T1579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.577273][ T1580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16478 sclass=netlink_route_socket pid=1580 comm=syz.5.330 [ 79.580379][ T1579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.599891][ T36] audit: type=1400 audit(1791118112.770:372): avc: denied { create } for pid=1578 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.764959][ T10] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 79.894950][ T10] usb 8-1: device descriptor read/64, error -71 [ 80.099178][ T618] usbhid 9-1:0.0: can't add hid device: -71 [ 80.112006][ T618] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 80.122267][ T618] usb 9-1: USB disconnect, device number 7 [ 80.135344][ T10] usb 8-1: device descriptor read/64, error -71 [ 80.170568][ T1591] incfs_lookup_dentry err:-13 [ 80.175340][ T1591] incfs: Can't find or create .index dir in ./file0 [ 80.182058][ T1591] incfs: mount failed -13 [ 80.187813][ T1591] incfs_lookup_dentry err:-13 [ 80.192560][ T1591] incfs: Can't find or create .index dir in ./file0 [ 80.199310][ T1591] incfs: mount failed -13 [ 80.245123][ T10] usb usb8-port1: attempt power cycle [ 80.314309][ T1609] kvm: MONITOR instruction emulated as NOP! [ 80.359040][ T1609] kvm: kvm [1606]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xa707 [ 80.417851][ T1619] netlink: 6924 bytes leftover after parsing attributes in process `syz.4.343'. [ 80.452298][ T1623] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 80.466861][ T1623] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 80.499405][ T1617] netlink: 'syz.5.341': attribute type 7 has an invalid length. [ 80.507205][ T1617] netlink: 'syz.5.341': attribute type 5 has an invalid length. [ 80.516470][ T1617] netlink: 17 bytes leftover after parsing attributes in process `syz.5.341'. [ 80.593693][ T10] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 80.625919][ T10] usb 8-1: device descriptor read/8, error -71 [ 80.734321][ T1659] syzkaller0: entered promiscuous mode [ 80.740374][ T1659] syzkaller0: entered allmulticast mode [ 80.747684][ T1659] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 80.766481][ T10] usb 8-1: device descriptor read/8, error -71 [ 80.902342][ T1687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.911801][ T1687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.922920][ T1687] devpts: called with bogus options [ 80.993178][ T1695] netlink: 'syz.8.363': attribute type 16 has an invalid length. [ 81.004967][ T10] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 81.032911][ T10] usb 8-1: device descriptor read/8, error -71 [ 81.186179][ T10] usb 8-1: device descriptor read/8, error -71 [ 81.295073][ T10] usb usb8-port1: unable to enumerate USB device [ 81.414959][ T9] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 81.441812][ T1702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.450502][ T1702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.566037][ T9] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 81.574215][ T9] usb 9-1: config 0 has no interface number 0 [ 81.580373][ T9] usb 9-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 81.591310][ T9] usb 9-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 81.604515][ T9] usb 9-1: config 0 interface 49 has no altsetting 0 [ 81.612576][ T9] usb 9-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 81.621669][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.629719][ T9] usb 9-1: Product: syz [ 81.633875][ T9] usb 9-1: Manufacturer: syz [ 81.638506][ T9] usb 9-1: SerialNumber: syz [ 81.643767][ T9] usb 9-1: config 0 descriptor?? [ 81.815256][ T1710] mmap: syz.5.370 (1710): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 81.850537][ T9] ftdi_sio 9-1:0.49: FTDI USB Serial Device converter detected [ 81.860389][ T9] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 81.867893][ T9] usb 9-1: USB disconnect, device number 8 [ 81.874494][ T9] ftdi_sio 9-1:0.49: device disconnected [ 81.998990][ T1723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.375'. [ 82.010172][ T1727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.018782][ T1727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.140409][ T1738] kvm_intel: kvm [1737]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 82.217349][ T1741] zram0: detected capacity change from 0 to 8 [ 82.246878][ T1741] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.587386][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.613980][ T1822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1822 comm=syz.4.388 [ 82.632859][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 82.638495][ T1822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=1822 comm=syz.4.388 [ 82.711216][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 82.711234][ T36] audit: type=1400 audit(1791118115.880:398): avc: denied { ioctl } for pid=1826 comm="syz.4.390" path="/111/tracing/uprobe_events" dev="tracefs" ino=1072 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 82.763426][ T36] audit: type=1400 audit(1791118115.930:399): avc: denied { setopt } for pid=1830 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.765087][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 82.806109][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.817213][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.827053][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 82.837128][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.847458][ T9] usb 9-1: config 0 descriptor?? [ 82.932011][ T36] audit: type=1400 audit(1791118116.100:400): avc: denied { map } for pid=1838 comm="syz.4.395" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.945022][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 82.961105][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.971411][ T10] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 82.980515][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.990678][ T10] usb 8-1: config 0 descriptor?? [ 82.997220][ T10] usb 8-1: bad CDC descriptors [ 83.005683][ T1844] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.031415][ T1847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 83.056561][ T1847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.066488][ T1851] netlink: 'syz.8.383': attribute type 4 has an invalid length. [ 83.071440][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x2 [ 83.081633][ T1847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.082779][ T1851] netlink: 'syz.8.383': attribute type 4 has an invalid length. [ 83.099010][ T1852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.109047][ T9] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 83.115363][ T1852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.197752][ T1858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.206407][ T1858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.214630][ T10] usb 8-1: USB disconnect, device number 13 [ 83.333157][ T9] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 83.340751][ T9] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 83.347940][ T9] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 83.357614][ T9] usb 9-1: USB disconnect, device number 9 [ 83.620047][ T36] audit: type=1400 audit(1791118116.790:401): avc: denied { execute } for pid=1861 comm="syz.4.398" name="file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.642154][ T36] audit: type=1400 audit(1791118116.790:402): avc: denied { execute_no_trans } for pid=1861 comm="syz.4.398" path="/117/file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.697599][ T1867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.706509][ T1867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.742699][ T36] audit: type=1326 audit(1791118116.910:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1836 comm="syz.5.394" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8779e159 code=0x7fc00000 [ 83.768094][ T36] audit: type=1326 audit(1791118116.910:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1836 comm="syz.5.394" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed8779e159 code=0x7fc00000 [ 83.793268][ T36] audit: type=1326 audit(1791118116.910:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1836 comm="syz.5.394" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8779e159 code=0x7fc00000 [ 83.827808][ T36] audit: type=1326 audit(1791118116.910:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1836 comm="syz.5.394" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8779e159 code=0x7fc00000 [ 84.064953][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 84.144958][ T478] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 84.216072][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.244977][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.254834][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 84.274923][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.286839][ T1882] netlink: 296 bytes leftover after parsing attributes in process `syz.4.404'. [ 84.296726][ T9] usb 6-1: config 0 descriptor?? [ 84.306130][ T478] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 84.317632][ T478] usb 9-1: config 0 has no interface number 0 [ 84.327631][ T478] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 84.340103][ T478] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.355874][ T478] usb 9-1: Product: syz [ 84.364936][ T478] usb 9-1: Manufacturer: syz [ 84.369587][ T478] usb 9-1: SerialNumber: syz [ 84.389608][ T478] usb 9-1: config 0 descriptor?? [ 84.500250][ T1891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.509744][ T1891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.721518][ T9] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 84.729719][ T9] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 84.737520][ T9] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 84.746187][ T9] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 84.753618][ T9] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 84.767670][ T9] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 84.999485][ T478] asix 9-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 85.010142][ T478] asix 9-1:0.251: probe with driver asix failed with error -524 [ 85.037283][ T1900] ./dev/sda1: Can't lookup blockdev [ 85.121393][ T9] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 32: -32 [ 85.134927][ T9] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense firmware info: -32 [ 85.144290][ T9] playstation 0003:054C:0DF2.0009: Failed to get firmware info from DualSense [ 85.174935][ T9] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 85.184871][ T9] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -32 [ 85.189778][ T478] usb 5-1: USB disconnect, device number 29 [ 85.201734][ T9] usb 6-1: USB disconnect, device number 14 [ 85.257705][ T1774] bridge_slave_1: left allmulticast mode [ 85.263413][ T1774] bridge_slave_1: left promiscuous mode [ 85.269562][ T1774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.278193][ T1774] bridge_slave_0: left allmulticast mode [ 85.283968][ T1774] bridge_slave_0: left promiscuous mode [ 85.289942][ T1774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.402425][ T1774] tipc: Left network mode [ 85.413927][ T1774] veth1_macvtap: left promiscuous mode [ 85.444983][ T1774] veth0_vlan: left promiscuous mode [ 85.624723][ T1905] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.633976][ T1905] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.641109][ T1905] bridge_slave_0: entered allmulticast mode [ 85.647601][ T1905] bridge_slave_0: entered promiscuous mode [ 85.657395][ T1905] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.664460][ T1905] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.671618][ T1905] bridge_slave_1: entered allmulticast mode [ 85.678028][ T1905] bridge_slave_1: entered promiscuous mode [ 85.747259][ T1905] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.754319][ T1905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.761799][ T1905] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.768877][ T1905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.793550][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.801116][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.810513][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.817617][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.827916][ T1776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.835003][ T1776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.864297][ T1905] veth0_vlan: entered promiscuous mode [ 85.877130][ T1905] veth1_macvtap: entered promiscuous mode [ 85.909116][ T36] audit: type=1400 audit(1791118119.080:407): avc: granted { setsecparam } for pid=1918 comm="syz.9.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 85.917151][ T618] kernel write not supported for file [eventfd] (pid: 618 comm: kworker/1:6) [ 85.954965][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 86.073609][ T1922] SELinux: failed to load policy [ 86.084990][ T478] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 86.098452][ T1924] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.107344][ T1924] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 86.116403][ T1924] overlayfs: missing 'lowerdir' [ 86.123622][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 86.134125][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.142352][ T9] usb 8-1: Product: syz [ 86.146904][ T9] usb 8-1: Manufacturer: syz [ 86.154948][ T9] usb 8-1: SerialNumber: syz [ 86.244965][ T478] usb 6-1: Using ep0 maxpacket: 8 [ 86.251144][ T478] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 86.260435][ T478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.269302][ T478] usb 6-1: config 0 descriptor?? [ 86.363505][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.372224][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.380904][ T9] usb 8-1: USB disconnect, device number 14 [ 86.405192][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.475962][ T1917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.484609][ T1917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.493938][ T478] usb 6-1: string descriptor 0 read error: -71 [ 86.500452][ T478] uvcvideo 6-1:0.0: Found multiple Units with ID 1 [ 86.507054][ T478] usb 6-1: Found UVC 0.00 device (2833:0201) [ 86.514004][ T478] usb 6-1: No valid video chain found. [ 86.520449][ T478] usb 6-1: USB disconnect, device number 15 [ 86.554943][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 86.561279][ T10] usb 10-1: config index 0 descriptor too short (expected 1060, got 36) [ 86.569859][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.580992][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.591318][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.604460][ T10] usb 10-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 86.613675][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.622613][ T10] usb 10-1: config 0 descriptor?? [ 86.909257][ T9] usb 9-1: USB disconnect, device number 10 [ 86.998021][ T1941] futex_wake_op: syz.8.424 tries to shift op by 144; fix this program [ 87.108074][ T1954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.426'. [ 87.255000][ T379] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 87.384954][ T379] usb 8-1: device descriptor read/64, error -71 [ 87.624962][ T379] usb 8-1: device descriptor read/64, error -71 [ 87.642532][ T1926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.653222][ T1926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.653744][ T10] sony 0003:1345:3008.000A: can't set operational mode: step 2 [ 87.668796][ T10] sony 0003:1345:3008.000A: Failed to set controller into operational mode [ 87.680006][ T10] sony 0003:1345:3008.000A: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.9-1/input0 [ 87.692294][ T10] sony 0003:1345:3008.000A: failed to claim input [ 87.864956][ T379] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 87.994979][ T379] usb 8-1: device descriptor read/64, error -71 [ 88.144957][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 88.234953][ T379] usb 8-1: device descriptor read/64, error -71 [ 88.294991][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 88.301427][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.312562][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 88.322551][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 88.332460][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.345630][ T379] usb usb8-port1: attempt power cycle [ 88.351667][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.360970][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.369053][ T10] usb 9-1: SerialNumber: syz [ 88.375034][ T1962] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 88.382228][ T1962] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 88.395924][ T10] hub 9-1:1.0: bad descriptor, ignoring hub [ 88.401872][ T10] hub 9-1:1.0: probe with driver hub failed with error -5 [ 88.409413][ T10] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 88.597032][ T10] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 88.625466][ T10] usb 9-1: USB disconnect, device number 11 [ 88.684939][ T379] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 88.706134][ T379] usb 8-1: device descriptor read/8, error -71 [ 88.836089][ T379] usb 8-1: device descriptor read/8, error -71 [ 89.060753][ T1970] sit0: entered promiscuous mode [ 89.066882][ T1970] netlink: 'syz.5.431': attribute type 1 has an invalid length. [ 89.074576][ T1970] netlink: 1 bytes leftover after parsing attributes in process `syz.5.431'. [ 89.085025][ T379] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 89.116018][ T379] usb 8-1: device descriptor read/8, error -71 [ 89.225811][ T352] usb 10-1: USB disconnect, device number 2 [ 89.246061][ T379] usb 8-1: device descriptor read/8, error -71 [ 89.355136][ T379] usb usb8-port1: unable to enumerate USB device [ 97.054431][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 97.054452][ T36] audit: type=1400 audit(1791118130.220:409): avc: denied { bind } for pid=1975 comm="syz.9.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.085486][ T36] audit: type=1400 audit(1791118130.230:410): avc: denied { connect } for pid=1975 comm="syz.9.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.107827][ T36] audit: type=1400 audit(1791118130.230:411): avc: denied { sqpoll } for pid=1975 comm="syz.9.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.196500][ T1997] loop8: detected capacity change from 0 to 16384 [ 97.364935][ T352] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 97.386650][ T1999] loop8: detected capacity change from 16384 to 16383 [ 97.421763][ T36] audit: type=1400 audit(1791118130.590:412): avc: denied { bind } for pid=2002 comm="syz.5.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.451651][ T36] audit: type=1400 audit(1791118130.590:413): avc: denied { shutdown } for pid=2002 comm="syz.5.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.545535][ T352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.568957][ T352] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.585088][ T352] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.594274][ T352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.636916][ T352] usb 8-1: config 0 descriptor?? [ 97.652654][ T352] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 97.924956][ T352] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 98.084925][ T352] usb 9-1: Using ep0 maxpacket: 16 [ 98.093777][ T352] usb 9-1: config 0 interface 0 has no altsetting 0 [ 98.106328][ T352] usb 9-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 98.116803][ T352] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.135198][ T352] usb 9-1: config 0 descriptor?? [ 98.177433][ T2031] fuse: Unknown parameter ''>4groupWid' [ 98.205424][ T379] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 98.342376][ T352] usbhid 9-1:0.0: can't add hid device: -32 [ 98.348467][ T352] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 98.356375][ T379] usb 6-1: Using ep0 maxpacket: 32 [ 98.367935][ T2026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.376463][ T2026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.101345][ T66] usb 8-1: USB disconnect, device number 19 [ 100.169376][ T36] audit: type=1400 audit(1791118133.340:414): avc: denied { bind } for pid=2043 comm="syz.7.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.190877][ T2044] FAULT_INJECTION: forcing a failure. [ 100.190877][ T2044] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 100.204176][ T2044] CPU: 1 UID: 0 PID: 2044 Comm: syz.7.449 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 100.204210][ T2044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.204238][ T2044] Call Trace: [ 100.204246][ T2044] [ 100.204255][ T2044] __dump_stack+0x21/0x30 [ 100.204314][ T2044] dump_stack_lvl+0x140/0x1c0 [ 100.204345][ T2044] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.204381][ T2044] ? __kasan_check_write+0x18/0x20 [ 100.204400][ T2044] dump_stack+0x19/0x20 [ 100.204427][ T2044] should_fail_ex+0x3c2/0x510 [ 100.204468][ T2044] should_fail_alloc_page+0xec/0x110 [ 100.204497][ T2044] __alloc_pages_noprof+0x1c0/0x7e0 [ 100.204532][ T2044] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 100.204558][ T2044] ? folio_add_lru+0x116/0x400 [ 100.204580][ T2044] ? __cfi_folio_add_lru+0x10/0x10 [ 100.204622][ T2044] __folio_alloc_noprof+0x14/0x80 [ 100.204654][ T2044] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 100.204686][ T2044] ? shmem_replace_folio+0x9b0/0x9b0 [ 100.204706][ T2044] ? shmem_huge_global_enabled+0x2da/0x360 [ 100.204726][ T2044] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 100.204765][ T2044] shmem_get_folio_gfp+0x5cd/0x12e0 [ 100.204793][ T2044] ? shmem_get_folio+0xc0/0xc0 [ 100.204822][ T2044] ? inode_to_bdi+0x6d/0x100 [ 100.204846][ T2044] shmem_write_begin+0xf4/0x260 [ 100.204871][ T2044] generic_perform_write+0x32c/0x970 [ 100.204917][ T2044] ? __cfi_generic_perform_write+0x10/0x10 [ 100.204948][ T2044] ? generic_write_checks_count+0x426/0x540 [ 100.204982][ T2044] ? file_update_time+0xa3/0x210 [ 100.205003][ T2044] shmem_file_write_iter+0x105/0x130 [ 100.205026][ T2044] vfs_write+0x762/0xfd0 [ 100.205060][ T2044] ? __cfi_vfs_write+0x10/0x10 [ 100.205084][ T2044] ? __cfi_mutex_lock+0x10/0x10 [ 100.205114][ T2044] ? fdget_pos+0x1f0/0x310 [ 100.205144][ T2044] ksys_write+0x145/0x260 [ 100.205161][ T2044] ? xfd_validate_state+0x68/0x140 [ 100.205185][ T2044] ? __cfi_ksys_write+0x10/0x10 [ 100.205221][ T2044] ? __kasan_check_write+0x18/0x20 [ 100.205244][ T2044] ? fpregs_restore_userregs+0x11c/0x260 [ 100.205277][ T2044] __x64_sys_write+0x7f/0x90 [ 100.205295][ T2044] x64_sys_call+0x271c/0x2ee0 [ 100.205310][ T2044] do_syscall_64+0x57/0xf0 [ 100.205326][ T2044] ? clear_bhb_loop+0x50/0xa0 [ 100.205366][ T2044] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.205395][ T2044] RIP: 0033:0x7f8d89d9e159 [ 100.205413][ T2044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.205437][ T2044] RSP: 002b:00007f8d8aba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.205454][ T2044] RAX: ffffffffffffffda RBX: 00007f8d8a025fa0 RCX: 00007f8d89d9e159 [ 100.205467][ T2044] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000027 [ 100.205478][ T2044] RBP: 00007f8d89e3506b R08: 0000000000000000 R09: 0000000000000000 [ 100.205505][ T2044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.205519][ T2044] R13: 00007f8d8a026038 R14: 00007f8d8a025fa0 R15: 00007ffc080e48c8 [ 100.205538][ T2044] [ 100.685981][ T352] usb 9-1: USB disconnect, device number 12 [ 100.966046][ T379] usb 6-1: unable to get BOS descriptor or descriptor too short [ 100.973918][ T379] usb 6-1: too many configurations: 73, using maximum allowed: 8 [ 100.982345][ T379] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 100.990061][ T379] usb 6-1: can't read configurations, error -71 [ 101.034976][ T2067] kvm: kvm [2066]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 101.051481][ T2067] tmpfs: Unknown parameter ' "0x0000000000000000' [ 101.186956][ T2073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=11997 sclass=netlink_tcpdiag_socket pid=2073 comm=syz.9.458 [ 101.257523][ T36] audit: type=1400 audit(1791118134.430:415): avc: denied { getattr } for pid=2076 comm="syz.7.459" path="/43/tracing/uprobe_events" dev="tracefs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.289453][ T36] audit: type=1400 audit(1791118134.460:416): avc: denied { map } for pid=2076 comm="syz.7.459" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.326462][ T66] rust_binder: 2076: undelivered transaction 9, process died [ 101.491275][ T36] audit: type=1400 audit(1791118134.653:417): avc: denied { connect } for pid=2090 comm="syz.9.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.741766][ T2101] ================================================================== [ 101.749901][ T2101] BUG: KASAN: slab-use-after-free in string+0x20f/0x2b0 [ 101.756860][ T2101] Read of size 1 at addr ffff8881056ff360 by task syz.7.467/2101 [ 101.764737][ T2101] [ 101.767078][ T2101] CPU: 0 UID: 0 PID: 2101 Comm: syz.7.467 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 101.767112][ T2101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.767128][ T2101] Call Trace: [ 101.767135][ T2101] [ 101.767144][ T2101] __dump_stack+0x21/0x30 [ 101.767183][ T2101] dump_stack_lvl+0x140/0x1c0 [ 101.767218][ T2101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.767252][ T2101] ? kasan_save_alloc_info+0x3a/0x50 [ 101.767277][ T2101] print_address_description+0x71/0x210 [ 101.767315][ T2101] print_report+0x4a/0x70 [ 101.767347][ T2101] kasan_report+0x162/0x1a0 [ 101.767381][ T2101] ? string+0x20f/0x2b0 [ 101.767403][ T2101] ? string+0x20f/0x2b0 [ 101.767424][ T2101] __asan_report_load1_noabort+0x18/0x20 [ 101.767449][ T2101] string+0x20f/0x2b0 [ 101.767471][ T2101] vsnprintf+0xe65/0x1ad0 [ 101.767494][ T2101] seq_printf+0x189/0x290 [ 101.767526][ T2101] ? __cfi_seq_printf+0x10/0x10 [ 101.767559][ T2101] ? __kvmalloc_node_noprof+0x173/0x300 [ 101.767583][ T2101] show_interrupts+0x6d2/0x7f0 [ 101.767613][ T2101] seq_read_iter+0xa7d/0xf30 [ 101.767646][ T2101] ? futex_wait+0x2b8/0x7c0 [ 101.767681][ T2101] proc_reg_read_iter+0x1ea/0x2c0 [ 101.767710][ T2101] vfs_read+0x60e/0xc70 [ 101.767737][ T2101] ? __cfi_vfs_read+0x10/0x10 [ 101.767763][ T2101] ? __cfi_mutex_lock+0x10/0x10 [ 101.767796][ T2101] ksys_read+0x145/0x260 [ 101.767822][ T2101] ? __cfi_ksys_read+0x10/0x10 [ 101.767848][ T2101] ? __kasan_check_write+0x18/0x20 [ 101.767870][ T2101] ? fpregs_restore_userregs+0x11c/0x260 [ 101.767901][ T2101] __x64_sys_read+0x7f/0x90 [ 101.767926][ T2101] x64_sys_call+0x2638/0x2ee0 [ 101.767948][ T2101] do_syscall_64+0x57/0xf0 [ 101.767970][ T2101] ? clear_bhb_loop+0x50/0xa0 [ 101.768004][ T2101] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.768036][ T2101] RIP: 0033:0x7f8d89d9e159 [ 101.768057][ T2101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.768076][ T2101] RSP: 002b:00007f8d8aba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.768101][ T2101] RAX: ffffffffffffffda RBX: 00007f8d8a025fa0 RCX: 00007f8d89d9e159 [ 101.768120][ T2101] RDX: 0000000000002020 RSI: 0000200000000340 RDI: 0000000000000003 [ 101.768137][ T2101] RBP: 00007f8d89e3506b R08: 0000000000000000 R09: 0000000000000000 [ 101.768154][ T2101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.768169][ T2101] R13: 00007f8d8a026038 R14: 00007f8d8a025fa0 R15: 00007ffc080e48c8 [ 101.768202][ T2101] [ 101.768209][ T2101] [ 102.021256][ T2101] Allocated by task 1: [ 102.025342][ T2101] kasan_save_track+0x3e/0x80 [ 102.030057][ T2101] kasan_save_alloc_info+0x3a/0x50 [ 102.035194][ T2101] __kasan_kmalloc+0x96/0xb0 [ 102.039840][ T2101] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 102.046301][ T2101] kvasprintf+0xf1/0x260 [ 102.050568][ T2101] kasprintf+0xe3/0x140 [ 102.054754][ T2101] serial_core_register_port+0x83b/0x23c0 [ 102.060493][ T2101] serial_ctrl_register_port+0x21/0x30 [ 102.065980][ T2101] uart_add_one_port+0x21/0x30 [ 102.070759][ T2101] serial8250_register_8250_port+0x17ab/0x21d0 [ 102.076931][ T2101] serial_pnp_probe+0x54b/0x750 [ 102.081799][ T2101] pnp_device_probe+0x316/0x4e0 [ 102.086672][ T2101] really_probe+0x2e1/0x8b0 [ 102.091189][ T2101] __driver_probe_device+0x193/0x280 [ 102.096922][ T2101] driver_probe_device+0x54/0x3f0 [ 102.101963][ T2101] __driver_attach+0x422/0x5e0 [ 102.106739][ T2101] bus_for_each_dev+0x246/0x2d0 [ 102.111623][ T2101] driver_attach+0x46/0x50 [ 102.116081][ T2101] bus_add_driver+0x393/0x730 [ 102.120781][ T2101] driver_register+0x2b7/0x3c0 [ 102.125562][ T2101] pnp_register_driver+0x81/0x90 [ 102.130549][ T2101] serial8250_pnp_init+0x19/0x20 [ 102.135618][ T2101] serial8250_init+0xcc/0x1d0 [ 102.140321][ T2101] do_one_initcall+0x1e8/0x6a0 [ 102.145095][ T2101] do_initcall_level+0x174/0x2e5 [ 102.150061][ T2101] do_initcalls+0x7e/0x160 [ 102.154491][ T2101] do_basic_setup+0x95/0xb0 [ 102.159011][ T2101] kernel_init_freeable+0x2b1/0x400 [ 102.164247][ T2101] kernel_init+0x21/0x1e0 [ 102.168625][ T2101] ret_from_fork+0x67/0xa0 [ 102.173172][ T2101] ret_from_fork_asm+0x1a/0x30 [ 102.177960][ T2101] [ 102.180295][ T2101] Freed by task 1546: [ 102.184276][ T2101] kasan_save_track+0x3e/0x80 [ 102.188969][ T2101] kasan_save_free_info+0x44/0x50 [ 102.194002][ T2101] __kasan_slab_free+0x5f/0x80 [ 102.198807][ T2101] kfree+0x158/0x440 [ 102.202722][ T2101] serial_core_unregister_port+0x469/0xa50 [ 102.208548][ T2101] serial_ctrl_unregister_port+0x21/0x30 [ 102.214210][ T2101] uart_remove_one_port+0x21/0x30 [ 102.219252][ T2101] serial8250_unregister_port+0x1cc/0x6b0 [ 102.225016][ T2101] serial_pnp_remove+0x5d/0xa0 [ 102.229819][ T2101] pnp_device_remove+0x8d/0x270 [ 102.234707][ T2101] device_release_driver_internal+0x4ad/0x830 [ 102.240787][ T2101] device_driver_detach+0x3f/0x50 [ 102.245842][ T2101] unbind_store+0x1ab/0x1f0 [ 102.250371][ T2101] drv_attr_store+0x91/0xb0 [ 102.254900][ T2101] sysfs_kf_write+0x13e/0x160 [ 102.259597][ T2101] kernfs_fop_write_iter+0x319/0x510 [ 102.264913][ T2101] vfs_write+0x762/0xfd0 [ 102.269194][ T2101] ksys_write+0x145/0x260 [ 102.273557][ T2101] __x64_sys_write+0x7f/0x90 [ 102.278169][ T2101] x64_sys_call+0x271c/0x2ee0 [ 102.282862][ T2101] do_syscall_64+0x57/0xf0 [ 102.287298][ T2101] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.293214][ T2101] [ 102.295550][ T2101] The buggy address belongs to the object at ffff8881056ff360 [ 102.295550][ T2101] which belongs to the cache kmalloc-8 of size 8 [ 102.309304][ T2101] The buggy address is located 0 bytes inside of [ 102.309304][ T2101] freed 8-byte region [ffff8881056ff360, ffff8881056ff368) [ 102.322763][ T2101] [ 102.325101][ T2101] The buggy address belongs to the physical page: [ 102.331529][ T2101] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881056ff920 pfn:0x1056ff [ 102.341689][ T2101] flags: 0x4000000000000200(workingset|zone=1) [ 102.347870][ T2101] page_type: f5(slab) [ 102.351867][ T2101] raw: 4000000000000200 ffff888100041500 ffffea00041caf50 ffffea00044f96d0 [ 102.360464][ T2101] raw: ffff8881056ff920 000000000080007b 00000001f5000000 0000000000000000 [ 102.369055][ T2101] page dumped because: kasan: bad access detected [ 102.375488][ T2101] page_owner tracks the page as allocated [ 102.381219][ T2101] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2966208331, free_ts 0 [ 102.398775][ T2101] post_alloc_hook+0x37d/0x3b0 [ 102.403564][ T2101] prep_new_page+0x2d/0x180 [ 102.408101][ T2101] get_page_from_freelist+0x4aea/0x4ba0 [ 102.413673][ T2101] __alloc_pages_noprof+0x35a/0x7e0 [ 102.418896][ T2101] alloc_slab_page+0x6b/0x1e0 [ 102.423596][ T2101] allocate_slab+0x69/0x430 [ 102.428131][ T2101] ___slab_alloc+0x591/0x8c0 [ 102.432745][ T2101] __kmalloc_node_track_caller_noprof+0x2e3/0x4f0 [ 102.439175][ T2101] kstrdup+0x4d/0x130 [ 102.443168][ T2101] kstrdup_const+0x45/0x60 [ 102.447601][ T2101] __kernfs_new_node+0xaa/0x740 [ 102.452468][ T2101] kernfs_new_node+0x154/0x280 [ 102.457249][ T2101] kernfs_create_link+0xa8/0x200 [ 102.462214][ T2101] sysfs_do_create_link_sd+0x8a/0x120 [ 102.467596][ T2101] sysfs_create_link+0x6c/0x90 [ 102.472407][ T2101] device_create_sys_dev_entry+0x123/0x1a0 [ 102.478218][ T2101] page_owner free stack trace missing [ 102.483599][ T2101] [ 102.485933][ T2101] Memory state around the buggy address: [ 102.491569][ T2101] ffff8881056ff200: 05 fc fc fc 03 fc fc fc 06 fc fc fc 05 fc fc fc [ 102.499650][ T2101] ffff8881056ff280: 06 fc fc fc 06 fc fc fc 05 fc fc fc 03 fc fc fc [ 102.507719][ T2101] >ffff8881056ff300: 03 fc fc fc 05 fc fc fc 00 fc fc fc fa fc fc fc [ 102.515803][ T2101] ^ [ 102.523007][ T2101] ffff8881056ff380: 07 fc fc fc 06 fc fc fc 05 fc fc fc fa fc fc fc [ 102.531077][ T2101] ffff8881056ff400: 05 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc [ 102.539136][ T2101] ================================================================== [ 102.547211][ T2101] Disabling lock debugging due to kernel taint [ 102.561005][ T36] audit: type=1400 audit(1791118135.654:418): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 102.583707][ T36] audit: type=1400 audit(1791118135.654:419): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.636711][ T36] audit: type=1400 audit(1791118135.654:420): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.660506][ T36] audit: type=1400 audit(1791118135.654:421): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.686154][ T36] audit: type=1400 audit(1791118135.654:422): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.706716][ T36] audit: type=1400 audit(1791118135.654:423): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.733227][ T36] audit: type=1400 audit(1791118135.654:424): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1