last executing test programs: 1m13.603598583s ago: executing program 1 (id=31): r0 = memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u\x1a\xc4z\x16\x1af\x890+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002900)="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", 0x2000, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000049c0)={0x90, 0x0, 0x3fffffffffffe, {0x2, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x800000, 0x10001, 0x1ffffffffffe, 0x9, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r4, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast2, @in=@multicast2, 0x4e24, 0x3, 0x4e22, 0xfc00, 0x2, 0xa0, 0x0, 0x5e, 0x0, r4}, {0x3, 0x0, 0x81, 0x2, 0x7, 0xfffffffffffffffd, 0x83a, 0x4}, {0x20000000008, 0x7, 0x5, 0x7}, 0xfd, 0x6e6bb2, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x33}, 0x0, @in=@local, 0x2000001, 0x5, 0x3, 0xee, 0x9, 0x478, 0x1}}, 0xe8) ioprio_set$uid(0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) execveat(r0, &(0x7f00000005c0)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000640)=0xefbe, 0x4) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.764671519s ago: executing program 1 (id=40): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000200)={0x0, 0x0}) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000000400)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f00000000c0)) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0090000180c2000003bbbbbbbbbbbb86dd6fa704e400140600"], 0x4e) 1m12.628600553s ago: executing program 1 (id=42): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000340)='./cgroup/../file0\x00', 0x161) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840), 0x200002, 0x0) rmdir(&(0x7f0000000880)='./cgroup/../file0\x00') syz_usb_connect(0x2, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00"], 0x0) syz_clone3(&(0x7f0000000900)={0x204a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) ioctl(r5, 0x7, &(0x7f0000000980)="4fc0f893eeb3e3e83e29672bd1d89ff7864275d1d692c95c082451eff1c5f284e46ce7da7f18b929f820c3ff8eaaa9cdc9139b17ddbea918e382a507ca17db26affc0fcc86aef7732ea910935306ef10c38e6e431910d0ef7a378ee2c5f0607f7eaa1922f703c48b101720c823b5076dd0bba936101f55f58f5d1aaac88508e29d81e34747cc231b355f94e7f5cc8a3980c51918b6115be2cb8e67a47cec02f366f25494b1b36aff5ab600a7d861238931ede118153a2a8034cac708489d378013afd43002ee074716adf4e7524737d1c3") pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000500)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000540)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f, 0x0, r5}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4496, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="401830000000ca470100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m9.588273466s ago: executing program 1 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000019c0)='./tracing\x00', &(0x7f0000001a00)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r3 = dup(r2) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) setuid(r4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = accept4$vsock_stream(r3, &(0x7f0000001a80)={0x28, 0x0, 0x0, @my}, &(0x7f0000001ac0)=0x10, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000001c00)=0xe8) sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003080)={0x1530, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@generic="6a4a06", @nested={0x1510, 0x8, 0x0, 0x1, [@nested={0x150c, 0x147, 0x0, 0x1, [@nested={0x149a, 0x98, 0x0, 0x1, [@nested={0x2f4, 0xe6, 0x0, 0x1, [@generic="64f64415f89603cb02fb334e464c049e351bd2a47fec0d5410fca2ae32420459e4302a96830bc5fae2a555eca128a1862d8ff77d4ba0557c770ea23b6cae9488a6a74983464ff783f476f82325bb32a6abcf9de35406565824ca93609297f54c60482c952a79d78c784b7a9e70aa5ed54828630b42d6eef5b3764b64edfd8b74a9f87c0258780255ea52101e82f4b9c12aa2bd136933c0af98f6924cf38a3d8e5e544a91bc8b8b836fc3479452f398e940d69c66ddbe79819550773abbd5341dc0a2e1f9ac1dbb7be9fcd5bb2370b2e1a77a8231f7e0efe71ce1454a401031c3df927d6e0f9a94692300ac91690a0ea368557e", @generic="0479b9edc868afba185f879fdc1a0c91e9d7c95463e81d1c07249934ccbd764910c2b2159b3ed93f53c6b15a36d0efa3ec87fd8adc2f0c61b90c6ea68e70c084c3cfdd017d78f2edaa23373d7e84bf7aaf8ce6d0cf4b4a8fe45f98", @generic="6a310dba13c3ecfc2d6b022b8b16cba2b6061a65d0f4125e482cfa862c59056895641b5564d2358155ecd6d5681cb6cc3ab8c2e1c657e88b9e4848232ea168626f93959dafd8be0a04a1967cec9b3aca83ebd08a41adcafd0bf0f2a860b074c6bd56af13e1885d648461d1b9d4e3b16ce74fa8b27d616e5d255a87d6e0621a6670571f880fb3077b49703a68ebc43f0a0f5fe3c3be2b", @nested={0xf8, 0x151, 0x0, 0x1, [@typed={0xf3, 0x128, 0x0, 0x0, @binary="ca9ed7c0d9792f43149fa420c0d93e6b9e01aa59be8309dabf3d4cbb35b6d6e42f13a0696b63b0799e6843551a948a2803725c74a65a3eea869d55126e42f543f9a9ce0874b0ea4b9e063fb2886964e288c42d0314156be22b221b85303f4eefad86d45fd2278baf595e8f8f5917af485011d4f35f53a50cfdd990d9b095d7d17a540c0950e4c899ed8b551d4c64c9a7ff18f7d128a9b9aa80e837041d1f2d77b03c305d0af01fe64c76de8030376bab6aac039292afe239089cee2be3bb0cb9553c9361805b3d891a1d7e30496a3f193fbca4930e1a26258ce4f3320bde4acbcb2af96aceee33ec7fdeb95c718605"}]}, @nested={0x4, 0x139}, @nested={0x4, 0x3b}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0x101}]}, @typed={0x8, 0xb9, 0x0, 0x0, @pid}, @nested={0x8, 0x11a, 0x0, 0x1, [@nested={0x4, 0x99}]}, @nested={0x108e, 0x66, 0x0, 0x1, [@generic="6918ee9154be834955dcefab2d6efd10b647123248310a37465eba4a8ec35b2a6173a245a04c85dfb657ef89735a5efefababfd7a9f67203645f9a026d903539f06892543932d0efcb7725aeb166178a14a8fce3c63647414c8a7f8ed1d944f555d50e5c95003d53f08d469f3f94e3275e5c26cd0ee33719e237eef343d5445c29c8c55b5bb1cf30cf5d6572df73ad09db20d28a700231650ba8d7a93ecf0f7cba5078478ea840173496648c9c019b02b19ae1805984969d3193a302080424db9ccd2a885bfdbe5f5a92b1011958d3773ebe72de578cae568f1bf0b34961143108477d3c84d1dee1b35b7b11ad62ddccae8565e769cad64cda7832d323cb6adea515259d7e30175500502e9b205bf73568cd000bae5be31c7e229965f53d31b0265286ec729bf8bb927d2eaaee7b4b58b53ea2afa65959f48545c8b00d372a3cff7732b1c4541aaa41e2e4597c1d1c1b0abfb4dde41e9169c97e0e90e0bf212a4e00a4294fc961d358172c3595eb3e14ea673356898f8769acf6f5db035be947fa93de7cb9e5b89f36980429ac05b70bb4115364a3a4d4fdd237bfd40574115de29a2bd62b077f1d0046735b940f5a5029844e83378051a0c7a95c21e34b147d8b0eff66e12a3d6a81e2ff8a51b1b7a13c0a2b4fe3e3d49ec274f8225838e1e32a463abb4f92f4991bce25ff132d25d25c5c4ce8ee3db22ab4836cf22941503019dcea5193c625cc8800c3bd756917c0ce729aef3e1de7c90d554dcbf3ae9de0ec23b4dad85d707bdb3a8a0b930a6432e322c6260774bdd6c99590fb1f9628252c339d5ee289df532cb30c8fa132ee76f8ec3b4a6a92b58ebed0715579e8318634f851089b6767e745b9293bfeded0d8726033ed5a5901a8311262baf9f016a0878dadd4a30f6e3dc09c7f68366259e302b96b87722ce81cffd09a71b9e13fa77446668d9674939f75f7e6713b1cff2505de7df20c7349cca77fd44434d904af2638e1e38474d3422d0e489cb5c67373dab2db0e4918441fa270d6425f960ee06902668701b213a4fb28e6d8960542bd04fdd1aabe80f70041f27764cf22a9df23d5a3da902e54e6c0190f08f3c54301cbfb5c43d52964565f2b02cbc19a44b38ef8faf6edfc7d415bbf566624c626db9e5e020b6687b40096cbedd46da83b6d7a605f4af8e656703145a73d5dfd62d7aa921a0728b8d6bacc5f86305a0c10938c1e8ab97a82e7b6dfed6c91b1701d99533404ff647e84e609df1f1f782f8ff62af84ca5895215932560bc50354549ccdf2a3c532efc03f483894c8d9f609e585b356b2fdc8cd629ffe32a168fd6fd496728234aac27dd5d1d8387c6305d474d26a908cdbb6e47a1e3d4b56a3073edef175a8e6a720bde803822e94bf89e0e6e07b82e95f302b87ab8a699824816a2c2f2bd66092bd5b0e6dbbbfdec4da76225572fd3fdb13d9ef746b54d0c732973d3637159db5be1cf1c8f1d3af2540842cf0fca613d6e1394e5395fb5547d783b80bdb948ded9c19b40b554e2af9f06aa5122d91a519e5b20cfcfbccb0002927b98c9c6484e87aa100bf39e37d17ead2d7cb395e3aece4d855eba8f1cfc9971cddf05270dc8d7624bf50c2cb85f404e510abc070fdd5dd5f95f2094eab329dd627218f01f531a4629de28b55bdbe75e6a75ff7d881edd0d5030a88f18eec08ed79645967fd5c1921b94fa7139a4fec05c3142b831beb1140f231747be86a50035baad59976326bc1679b3468eae5a4614757cc42e327ae1499f1cb88b1fad518210287240a1c1dc1eb74b5218526487be1709584bfc7ebf7526ddc12c38094ccc6804d522e070fa0946771bf982e578d8990c4555dd4f2f23fc2ad7baefb9c87b1d81ebd8ab56b23336560fa215eb8b59a58223404991ed6697699c2c78b5e2c3ae4ef384d8d2955c62c247209a23ac719f6d6ca1d87cdb90d12403a62a96c2aff8770fd9b8d732a4e48abd5bde96dd255bd8001dfac555a3a7b46293dd26662af068bf13766411d5902b0d69585b644adcd3773b173970b65a23cff3b9d84a3515071984b1d7b3c71c8f2ec072fad12263b4cf50fa58a848fa816602ea151c59b06646b8953d36fa1802376637b634f75fb2f9ff20b63b4f3cd97096c4f3a312f39fb8185c2f7dd6cc2868462a804baadd4593a11c2d98051e9b7669a72961d0263f2da2f7245c1d93a965885d955199f2120ca2dd4eb89ced1a2c8529f6d367eff39ab0c8e92eb05c1f1322b28ec73683d5b081ccad0f2debdcef92ea2b8d4e4b63e82d6c1f42d341526689791f18071ade21f03616718da217105493c3967fd511c748fdba4cf720ef5ef6fb32d992bec3d94d47cc6c18dd434012d857d25ee21420dff6bc609559fb971132e3d0b74cc98310b1d184e1a54df60e6bead7fc13a31bc5c2c24a7caaf85aa0726706c6e8aaeac752ff5c1282acab2a59e4c7b0278ac297275ca49e54273ac54239662616b87524156b37961aadedea8f1518a70f50d24d1966df1978f2344c7e235e19117128d7f56a7fad7e5c405606b957e2f074c46963ae492c008fd41a6867869313df71ec540b337f34db68eb2e5ecb0b464ca96fc89a65314f33a9dbe0700a49e3b322cd2aa932cdcc14aa33d00411d75ef5155143a8ccc7793ef542f671eaa457a3aee5ac2b9568b1037f9f92c5ec800bef0001613120b705bd11933a0c9b308c1b66a5972ddd4821f7a94eafc4aef614aa9b85a3f9ffa26eede555fd64b077e006556a70e422f8fff5280fc714a67e053f4d5ce3472de7a4ec6e9032175c766a8044f4429e531ba0ad9f85363516ff3ef884a39f85a3409d3f0789c13609228828a7bc5d7dff4b53b7ba18eba963568fd6ccec882740c8c128164546f45ff57a878be9868a1d3a3d47e5ee25c85973202bf5d9aea9329c3cac1cb351d8dbbb97bfc4bec10bf744ae6691bf3085c136f95a9707298a054c826c41a0a163552abe404bc92604eaa20ac0ca6ece8482fee99ccb7ffca880fff5355bd5b41bafee1df297327fdbaeea62efa89c6b584210e48446a60908482811168bdc35e45fdf921892de5019cd0ed231433a890e738b2426cb2e8ec6dd3a68351a5cdd76fa31cbc42b6833b327ea7f5d7fd0818bb3fbdac933c189b3b8644a657fa22fdf1cc15d272f837254d4d0feb4410253c897328731c841af8e96730bffa49bb810c7d4c21845cb6f0b9d8184dd51dfe09395ec37a9089e79bd135847eac9edfbbc60af1f13e67dbe0d09e615b837812f1df17399964d4eacd106c73398e858552b8e421e0bf348d90abcb448e8d77597198802455957ec1a66aa4b6be92cd4f896abd8ee6f7ead72602020f96f57d1b5ba0a657b918d6530051e62943f0d48922d9d94701173c1e97b56fe5b368b628e0bfd9f62e25bfae0c808ae7a370a1004f1eb55f056719ab23d887d037a02ba3a00f0a62b3c885a78b64a1d427c0d23aa9457563e46f4f6d8c193a94e1269ea60ee4e5927e1156e10ff7aa02974a076416c300a9f89afe0ec1f1b6967ca0412681b5f27b15d2890b4930cd98e10487b0eeff8234dedd6606f8cd7b76ab44e545f6606db7e5e9de9c56fae0b6e6a334f44910b76f28c1379839cb6124e6ff99002a23a66ee6d6fcac5ecf4add3844869998c935bf3dd8a90ecffeda775d31d1f8d6b2bcc3aa2af93cd7d4b59f44f7199aca13c112bed16b5691ab1fd032601177d5bec3baeba5b06d4b328e2480fb49dc514b084ed067b14f04d3f5baa7a2e3210eba0bec065eb216b1b1893ab77e9dd3a69c7955f26a01d06d70cb6150cf63a95c628e4af875d9a25b78a0aea451aa41d902bafe67705ae5e625855dd0cebdca72d9341f30ac5f09f58c088deaae81d060fdd6b4bbe139549beeadc8fd1110bce847d158fe530b9e835472d80f3a63af6c7fbf23f433c79aa81a1df0bd14ad289827a1d4a191c65264cc63fed85102ccb5a98d2a0aac6d09dec592d69ee3ab4daf78ce63f264d9d2c3b000077cd11286f1f63988d1ef0e21f99bcf36214869c3131be1a8dbc1f391f8272f8a61a6ed62f5540ede5806e1f9e6afed037462f522c418d73ba338c90727d73f8e7cc14fdd3de0a0c4e95381914dd993e9a7f91e3bbb787491a3a5427e5f61572f392d3835e9f2dbfcab3aec52c28d0607b83ed80f6c26c0deeb713bb83b02378a041e0eed0419e16542e34d0fa45d784794117cf5f27f5a64074dd36b37cc4ed95ea557d0944c2035366ccaf6cf5571bbe6a0c762904ae3f4da7b8f45d516c651399e215fdbad96d6b007fe2f670b24ba783ade13ae76d262ec79db42ff59ee35b18f4f566e1d9b9633e10f426baf61552566f711b19b3bfb3b518d6d0178d82a109647c200b022c70ee063abc47a467ca7ce07a44cf4614f5b6afa4752b734a03aa90958c2a550c08641d8ec6f63addadf56ece3d3631bf4c826a348e4d766d3b6a9574e337b77f00ceac0f2c288fc267e05c17a00e44f979bd5ffd05088a6cc3e2e82b704f137b27a5ca4126d29e8b4511b260ee896c686279467b427882c5b0ed1c992233d498fa056c7cd635ad269fa2595e4abd7d4cd1b0350983232820932ddedde310ace2acbb88cd84f3d86e68c31d6668aa0382693e8837cb84880293a84846e0f0990d66eec5becc6a0882710ad477db259f89f5c99ba59a817b9c90c127ca726596549e3476fc16884a7cf047f59b23fa22ccc4292faf4de642d4bf3b747580f885ff7dc74a6195bbf41c54b31533009d209211a0a8ef6f0475255a71b6d6413fc1865831305a26160b7f1c4e7c1a1706479f2624c944da8d362762be223928d508d16913530721e87ae05b761f706b701ef7a64e6cd94b2c2907907909cc3604a6d2186a9f7e97c2fcec81497f1a5c2f69a03847dfeac399cb45a5b4e7e1b62e7751e9d199e5e64149b90bdf3f49dbafa78fcb8795dff94a2d94f3b3a02d3d55cacbe20ac949e61c62c29f25119a946b5ac71d01e26ec39966cc013b467b069669cd351804b5609ce4038580293e094cfd87c579aa496fefe3a9c352f9a5b9793cf3b72a9996ea7105f4dea79187f2670cd6c87b6a2a79db75df6745c4fee0e5fe753290d99ba4a402013fccb19d7a2f38d3a736bba8b3022008b636c813edda0a8c9391829f60224f1ca80853f1bdaf66f04ef5e65f4fc5fa67981043e3fbf0c0abde3619f0fed1a3897ed22f3d53dc95bc8681ea231fae6b1ce9c0f23f7b6e9c8ee6ac882920ef93f48370f34d9b7c199c89c80f15aa0b0dff9711df0b45b13b720556d5a6e0fd76783a13832417e7edc4d4530528325dae8423a1532281932fa75d7897c107890c95754fca403b824e43894208cf52718925a5885081e9a7e7816de84209416225acdeb39c350572fecc477c94462de26195f0a21a4b72dde4f88d31f6817e1c16824b1cb1436336c60ea3ec331db912929922bd8574979e4ab9915149ee1d514adea384ac2da8e46768b4bbc8a41f2da795a98712928e133d9fc26cf58713bc8491128baea3388c6300552e361c20dbbfe0ded0d2c55754030524c5f2fce89941eaae8dac66dd1ebc84d50ee666d741a563c4f348b036d8dc1383d1e37fde13cbbfcffff3f3dd9c01ae2e8e9cf82d9615ee663a47358d5d0371ceb922352cb68b294e132bf7128c516297cf9ab0341725d9375c4dacfa20b857d7275b2710ad3d0afa4312bf939f8bd5f6ca51e2ed31909d0f7f1c0044e25567ad29c1a0924e5e0a6f24a2adb053481fc94cd206a20ca7ca60c59552647dc4", @generic="88779b6d7430ebf6fa196cb0802210f0cbabb10936eb49ee982d02a9186d361a391cd531be335719e0f26568ba74bf0c88841e4b19ea00b2c312b19d80b970284004302d16d2c61bde8b9b02196cb56477f66547e30b30671d757f1b2aefc5218e25d09d886f57c42d632acc808eef6bd85e79a930728b8d4cdc", @generic="aea98a0bd943e52f7690c2df6eab84493e7a"]}, @generic="cde8289440b12dfc1a7db3bdf6b92c05e5f34d5266b51971fa261d233a92f627e8d2383099b0bf9881d7a1a4ac669aa0898fdc3fd8c14a7ad57bca27caed828d2e2f2d72827ff372d28126140d03ccb87d5d7fde2fbc3e6bac9f4ef51c4e30e75eecc54d759ef3b3041985e1dee4eaad3a5241983ba20895d836fbbf0fc8526c8929c1ca2917e31879d8412759002c8570e7718beb213d888bc3417aba0fb540c0c774d351fd7d016fad30fcffb51f0525c2def91914009e0aa29921cf301d38f9c384283310ee34818d78b164944e939ee48323085d0c7f3420", @nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x6, 0x13e, 0x0, 0x0, @str='\xb8\x14'}]}, @nested={0x1c, 0x150, 0x0, 0x1, [@nested={0x18, 0x8a, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x11}, @typed={0x8, 0x12e, 0x0, 0x0, @uid=r8}]}]}]}, @typed={0x69, 0x7a, 0x0, 0x0, @binary="7e8359e8f8711759b2010b3c11cbb1e6f9d445a4570d3e7f1797da273b6597f416d07865a25f11bb41298da13b9a27bee05f2a2fde5c001e772108e76f8c4f55385a1681ce4e9852f26a2237c99c0947464274b04f5d1c104f27ca2af3bc3e2b90e5cdf3a9"}]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="bf74a7df"]}]}, 0x1530}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_TDX_FINALIZE_VM(r5, 0xc008aeba, &(0x7f0000000200)) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x5, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x8}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x4000000, 0x14f2, 0x20, 0xa9, 0x2, 0x80000000106c, 0x100, 0x1ff0000000000, 0x80000004000083, 0x1c00000, 0x8, 0x0, 0x1000000004, 0x0, 0x8000], 0x1, 0x384214}) 1m9.476961307s ago: executing program 1 (id=97): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 1m9.401619145s ago: executing program 1 (id=99): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82f41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file1/file0\x00', 0xe) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000480)='./file1\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee00, 0x0) dup2(0xffffffffffffffff, r1) r2 = socket(0x2, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000027c0)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002880)="01000000feffff7f640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x20004090) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000240)={0x1, 'vlan1\x00', {}, 0x5832}) inotify_init() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='freezer.self_freezing\x00', 0x26e1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$FUSE(r5, &(0x7f00000006c0)={0x2020}, 0x2020) renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f000016a000/0x2000)=nil, 0x2000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x807, 0x0, 0xffffffff}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$netlink(0x10, 0x3, 0x0) 1m9.299978976s ago: executing program 32 (id=99): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82f41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file1/file0\x00', 0xe) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000480)='./file1\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee00, 0x0) dup2(0xffffffffffffffff, r1) r2 = socket(0x2, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000027c0)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002880)="01000000feffff7f640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x20004090) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000240)={0x1, 'vlan1\x00', {}, 0x5832}) inotify_init() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='freezer.self_freezing\x00', 0x26e1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$FUSE(r5, &(0x7f00000006c0)={0x2020}, 0x2020) renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f000016a000/0x2000)=nil, 0x2000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x807, 0x0, 0xffffffff}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$netlink(0x10, 0x3, 0x0) 1m2.792799565s ago: executing program 0 (id=221): openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x80040, 0x80) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 1m2.745891669s ago: executing program 0 (id=223): openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1000) 1m2.704347123s ago: executing program 2 (id=227): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000061c0)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000380), {[{{@arp={@multicast2, @private=0xa010102, 0xffffffff, 0xffffffff, 0xc, 0x9, {@mac=@local, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8000, 0x2, 0x2, 0x4, 0x4, 0x34b0, 'wlan1\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffb}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @loopback, 0x2, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0x0, 0x9, 0xe, {@mac=@link_local, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="2e916229e087", {[0xff, 0x0, 0xff, 0x7f, 0xff]}}, 0x6, 0x0, 0xf03e, 0x0, 0x7, 0x20, 'batadv_slave_1\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0xc}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x1, 0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000002c0)={r0, r2, 0x7, 0x85, &(0x7f0000000200)="42af9ac726c9ca2b4a57a68cb34ed53c107866c65821f010e70afee069cccfcde438d57cc83f6e9cb5044bb6a0b2db81a01e36c0939ecbe5e7572fd6a95beda3fc4bc721454e9b87666b8eb66a996ca79bf94c97e2efdbc659f9f5f17fb0ea781cfb25d10b39d8e9eb77b4a9b8312fddeee77507048397c6da3cbbf49c552d1733251d3f01", 0x80, 0xff, 0x3, 0xffff, 0x9, 0x5, 0x6, 'syz1\x00'}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000000c0)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @window={0x3, 0x58, 0x2000}, @window={0x3, 0x9, 0x2}, @timestamp, @window={0x3, 0x5, 0x1}, @timestamp, @sack_perm, @mss={0x2, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r1, &(0x7f0000000180)="3e59c5beb4d84d216f9534ffa7c3726250c3794085c94096c5a47757349d474bc5744ff0d75a092e0adfdc50ed57dfc1d05a5eef535253e8a54122c0aca4b7e6f0df93b6d0d9e47cf1096d7c73428b45ef37cb6ac9b93a0016c77000f7883d59e231cca5675e09a94821d22eecd1b748", 0xfffffe22, 0x8040, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000006200)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2976e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1ab041583db6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff085319cdd6bd368e6283625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000800)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000840)={0xa, 0xfffc, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000880)='bridge0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000a00), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1m2.703634423s ago: executing program 0 (id=228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100, 0x1, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.events.local\x00', 0x275a, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/slabinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001040)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=[r0, r1, r0, r1], 0x10}, @fda={0x66646185, 0x2}, @child_ptr={0x70742a85, 0x1, &(0x7f0000000340)=[r0, r1], 0x8, 0x0, 0x8}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x40}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f00000008c0)='asymmetric\x00', 0x0, &(0x7f0000000900)="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", 0x559, 0xffffffffffffffff) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, {[0x7, 0x3, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0x6]}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000000c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x810400}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)={0x140, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0xa0, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x140}}, 0x4) ioctl$XFS_IOC_FSGROWFSDATA(r8, 0x4010586e, &(0x7f0000000880)={0x6, 0x80000000}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x100, 0x0, &(0x7f0000000440)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r9}]}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000f) 1m2.526087832s ago: executing program 2 (id=231): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)='\x00') (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000540)=0x4, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000140)='nl80211\x00\xfd\"0\xcc\xd2W\x84Pb\xd7\x87,h\xce\x98\xec\xc2oe\x85\xfd/\xff\xc1\x80u\xd63\xeb\n\x8d~\xc9\x11\xe1\xcf\xf6l\x82Q\x1b\xd9Py\xfe=\xb60\x11\xdd\xae\xbd~\xc51\x1a\xb7\x81#`\x81\xf3\xefE\x06F\vy\v\xe32\x01\xc3K\x1f\xe7u\xa5T@G\xda\x1c\xd7\xb5\xe8\\\xd5z\x7f\xc8Y1\xa9\x9a\xa4\x0e\x9d\x83AVJ@\x99\xbcAx\xff\xbfZ\x17\x9c\x00_\xbb\x19\xb9O\\\xd8ujf|)H\xf6>1i') madvise(0xfffffffffffffffc, 0x2000, 0x14) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000640)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$evdev(&(0x7f0000000680), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000006c0)=""/95) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x40008d1}, 0x8010) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x9, 0xa, 0x4, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x20, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl1\x00', r5, 0x29, 0x0, 0x7, 0x7, 0x2a, @mcast1, @loopback, 0x7880, 0x8000, 0x4, 0x4}}) (async) r6 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x1e, 0x1, 0x70bd25, 0x25dfdbfb, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4) (async) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc02, 0x3}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1m2.426304812s ago: executing program 0 (id=232): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x571, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000440)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000480)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd40}, 0x2141) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mapper/control\x00', &(0x7f0000000380), 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x800, 0x178) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000580)=0xb, 0x4) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0x11, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_PACKETS={0xc}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8020}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff0000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4000044) ioctl(r1, 0xc178fd0c, &(0x7f00000001c0)="04000000000000000000000078010000380100000100000000000000000000000000000000000000003f") mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x32874000) ioctl$ASHMEM_SET_NAME(r4, 0x8008770b, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) 1m2.339006051s ago: executing program 0 (id=233): ioperm(0x8, 0xffffffffc0000000, 0x10001) 1m2.230250702s ago: executing program 0 (id=243): mount$overlay(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000180)={[{@redirect_dir_off}]}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000400)={0x3, {{0x2, 0x40, @multicast1}}, {{0x2, 0x400, @rand_addr=0x64010101}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000540)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c040) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @empty, 0x3973abd4}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0, 0x1a}, {&(0x7f0000000300)=""/223, 0xdf}], 0x2}, 0x4}, {{0x0, 0x0, 0x0}, 0xce6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xb935}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000007840)=""/111, 0x6f}], 0x1}, 0x4}], 0x8, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1m2.184759937s ago: executing program 33 (id=243): mount$overlay(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000180)={[{@redirect_dir_off}]}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000400)={0x3, {{0x2, 0x40, @multicast1}}, {{0x2, 0x400, @rand_addr=0x64010101}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000540)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c040) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @empty, 0x3973abd4}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0, 0x1a}, {&(0x7f0000000300)=""/223, 0xdf}], 0x2}, 0x4}, {{0x0, 0x0, 0x0}, 0xce6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xb935}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000007840)=""/111, 0x6f}], 0x1}, 0x4}], 0x8, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1m0.962313353s ago: executing program 2 (id=250): write(0xffffffffffffffff, &(0x7f0000000380)="08008edf773c8000", 0xfd) 1m0.962205123s ago: executing program 2 (id=251): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000180)={0x2000000, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}}, 0x120) (fail_nth: 1) 1m0.962079873s ago: executing program 2 (id=252): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r2, 0x0, 0x8, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0xffffffffffffbff9, 0x0, 0xcb92, 0x2, 0x23, 0x3, 0x401}, {0x5, 0xb}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0xf9, 0x4, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x21, 0x810) read(r1, &(0x7f00000002c0)=""/100, 0x64) r4 = getgid() fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) mount$bpf(0x0, &(0x7f0000000180)='./debug/bluetooth/rfcomm\x00', &(0x7f00000001c0), 0x5, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x2}}, {@gid={'gid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0xbc5}}, {@mode={'mode', 0x3d, 0x8000000000000001}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsroot}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@flag='lazytime'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise}]}) 1m0.78910702s ago: executing program 2 (id=253): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xa001) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x4004550d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000004c0)=0x2000000) write$tun(r1, &(0x7f0000000740)={@val={0x0, 0x88b5}, @void, @llc={@snap={0xaa, 0x1, ')', "981473", 0x809b, "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"}}}, 0xfe1d) 45.760089945s ago: executing program 34 (id=253): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xa001) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x4004550d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000004c0)=0x2000000) write$tun(r1, &(0x7f0000000740)={@val={0x0, 0x88b5}, @void, @llc={@snap={0xaa, 0x1, ')', "981473", 0x809b, "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"}}}, 0xfe1d) 38.343130488s ago: executing program 3 (id=530): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 14) 38.331344529s ago: executing program 3 (id=531): syz_open_procfs(0x0, 0x0) readlink(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)=""/164, 0xa4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="2e1221b23bb601c493d3df163e75963d000d606712e9000d2f8db0049d9049", 0x1f}, {&(0x7f0000000380)="8bcceb21", 0x4}], 0x2) keyctl$KEYCTL_WATCH_KEY(0x6, r0, r1, 0x24) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000580)={&(0x7f00000005c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x200, &(0x7f0000000680)={&(0x7f00000006c0)="c94522e546f93f6dedf11f1509685636", 0x60}) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0xc, 0x0, 0x0, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x2]}, 0xffffffff, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002200000ffffffff01000000"}]}, 0x60}}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f00000004c0)={0x3c, 0x2d, 0x40008, 0x1e, 0x100009, 0xaa, 0x5, 0x10000002}) 38.259735927s ago: executing program 3 (id=532): ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, 0xffffffffffffffff, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x58000, 0x25000, 0xb, 0x0, 0x7, 0x4, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0x1, 0xa, 0x0, 0x5, 0x7, 0xff, 0x1}, {0xa03a19760224864a, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x5, 0x98, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x81, 0x8, 0x2, 0x5}, {0x6000, 0xffff1000, 0x10, 0x1, 0x0, 0x4, 0x7, 0xfc, 0x5, 0x3c}, {0x70000, 0x50000, 0x0, 0x78, 0x5, 0x40, 0xd, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0xdddd0000, 0xddde1000, 0x11, 0x3, 0x4, 0x2, 0xa0, 0x20, 0x0, 0x3, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x3, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000}, {0x30000, 0x2}, 0x80010031, 0x0, 0x0, 0x23c, 0x1, 0x0, 0x80a0000, [0x3, 0x0, 0x3fffffffffd]}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000080)={'syz_tun\x00', @ifru_map={0x4, 0x9, 0x1000, 0xd, 0x8, 0x9}}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000000c0)=0x405, 0x4) 38.244634118s ago: executing program 3 (id=533): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000380)="2a008edf773c8000", 0xfd) 38.233020129s ago: executing program 3 (id=534): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xcc, 0x40000) (async) statx(0xffffffffffffffff, 0x0, 0x7000, 0x200, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) (async, rerun: 32) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0x50434900, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) (rerun: 32) write(r1, &(0x7f0000000880)='27', 0x2) r2 = memfd_create(&(0x7f00000008c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\x00\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff(\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x00\x10\x00\x00N&\xf8#\x80z8Z\xd2}\xf5\xe4\x15\xb3r\x11g\xe7)\xaa\x91\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\r\xc2\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r3 = getpgid(0x0) prlimit64(r3, 0x7, &(0x7f0000000a00)={0xe7, 0x5}, &(0x7f0000000a40)) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x40047705, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000ac0)) (async) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8d2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r5, 0x4, 0x7f, 0x100000001}) (async) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r6, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000380)=""/119, 0x77}], 0x5}, 0x7}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/218, 0xda}], 0x1, &(0x7f0000000640)=""/107, 0x6b}, 0xffffffff}], 0x2, 0x10000, &(0x7f0000000740)={0x77359400}) 38.144863868s ago: executing program 3 (id=535): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001600)={0x0, {0x2, 0x4e1f, @empty}, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e23, @empty}, 0x107, 0x0, 0x0, 0x0, 0x5}) r2 = syz_create_resource$futex(&(0x7f0000000100)=0x1) r3 = syz_create_resource$futex(&(0x7f0000000140)=0x1) r4 = syz_create_resource$futex(&(0x7f0000000180)=0x1) futex(r3, 0xb, 0x1, 0x0, r4, 0x1) futex(r2, 0x5, 0x1, 0x0, r3, 0x3000020) ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000080)) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x42040, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x701440, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x700, 0xfdef) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$selinux_access(r9, &(0x7f0000001680)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) timer_create(0x7, &(0x7f0000001500)={0x0, 0x15, 0x0, @thr={&(0x7f0000000280)="6195a1dcf2b3281a5b850a3b526bee0fb1ed04679e549d6ec2c291047ae63b87bbccb6de246fa956b925c6bd1f613a1e37c44c5372ced4868206e1bb78", &(0x7f0000000500)="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"}}, &(0x7f0000001540)=0x0) timer_settime(r10, 0x0, &(0x7f0000000200)={{r7, r8+10000000}, {0x77359400}}, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000017c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f0000001800)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880), 0x4008, &(0x7f00000018c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000001580)={0x74, 0x0, 0x1884}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x7, 0x6, 0x1c8c, 0x4, 0x2, 0x401, 0x8000}, &(0x7f0000000300)={0x1, 0x566, 0x80000001, 0x9, 0x1, 0xa4, 0x7ff, 0x80000001}, &(0x7f0000000340)={0x7, 0x0, 0x6, 0xc2, 0x98, 0x7, 0x0, 0x7}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x1]}, 0x8}) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000004c0)={0xd, 0x7, 0x40000, 0x100015, 0x100009, 0xaa, 0x48e, 0x2}) 23.060905059s ago: executing program 35 (id=535): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001600)={0x0, {0x2, 0x4e1f, @empty}, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e23, @empty}, 0x107, 0x0, 0x0, 0x0, 0x5}) r2 = syz_create_resource$futex(&(0x7f0000000100)=0x1) r3 = syz_create_resource$futex(&(0x7f0000000140)=0x1) r4 = syz_create_resource$futex(&(0x7f0000000180)=0x1) futex(r3, 0xb, 0x1, 0x0, r4, 0x1) futex(r2, 0x5, 0x1, 0x0, r3, 0x3000020) ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000080)) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x42040, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x701440, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x700, 0xfdef) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$selinux_access(r9, &(0x7f0000001680)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) timer_create(0x7, &(0x7f0000001500)={0x0, 0x15, 0x0, @thr={&(0x7f0000000280)="6195a1dcf2b3281a5b850a3b526bee0fb1ed04679e549d6ec2c291047ae63b87bbccb6de246fa956b925c6bd1f613a1e37c44c5372ced4868206e1bb78", &(0x7f0000000500)="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"}}, &(0x7f0000001540)=0x0) timer_settime(r10, 0x0, &(0x7f0000000200)={{r7, r8+10000000}, {0x77359400}}, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000017c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f0000001800)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880), 0x4008, &(0x7f00000018c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000001580)={0x74, 0x0, 0x1884}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x7, 0x6, 0x1c8c, 0x4, 0x2, 0x401, 0x8000}, &(0x7f0000000300)={0x1, 0x566, 0x80000001, 0x9, 0x1, 0xa4, 0x7ff, 0x80000001}, &(0x7f0000000340)={0x7, 0x0, 0x6, 0xc2, 0x98, 0x7, 0x0, 0x7}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x1]}, 0x8}) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000004c0)={0xd, 0x7, 0x40000, 0x100015, 0x100009, 0xaa, 0x48e, 0x2}) 17.031403009s ago: executing program 4 (id=751): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x8d4}, 0x40000000) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 16.854120367s ago: executing program 4 (id=754): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000800)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001100)=[{&(0x7f0000000780)="3900000013000318680907070000800f0000ff3f040000ff170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0xffffff99}, {&(0x7f0000000840)="787469366b8097b15a91bba0479f8197b110cd33baee35827eb54acdc4d2b52b51bd4645faad7b0eeeb74d21b0b7f438aed770ef8ecc418ca65c2e0e5a75cb1d46caaebfa06644e957257f952746b3b7e1e1bbf4e7e43ec7948063d50205c01616f16d909a9ce68043391dfcc0f64039a5b902c4c8993c79227f2af09c7c4939d6b1ee84c73aaa1959aee2681f844b8d652bcf482fbdae0b815028f83c775f0c9043075b4b9b92032d8b880fc81f6bd3a740b87aa4b951353499237fb3c1266b4d2da3b4d48c49d1d9470734682df29708c194d9574552417caa29e3e8bbeead74ea2d482e45e12608bd114d34f6e461bc1a1127"}, {&(0x7f0000000940)="008cb37c03181de61d6b6aca792e663d3770832000a8de22a8074360080000003b9ebcf07a84fbd5b3269523ee696d75672059f7b4d7cc0bdfcbf0337cbe64d2480536d11f28784bc2e5176852c3cfe8b562f308aa8317575a23473bc011d794d6538460756b13de16297db53eba8d682ae5976b194108f57a67944983e5a62f38c7cc129f86748c87da89e1b357d6b3bf5683230637885431eebd625a1878fbc83fef485d6aa40f53ce185cbf1c9390b4c7763745bcbccf0dd8c956320433368c4cee6d8c28964b7422bfa6c1922f"}, {&(0x7f0000000a40)="7f8a6eabff9ed3d35639d580900c75b57206ba8729c108cfde84adabbd05752e2ac0cfeee6"}, {&(0x7f0000000a80)="091ef0e834784938135fbfea2a9f3541d71845ffb42d53b2df69bb7420fe598a56ecb3024089189d586d8a8f7b0064fcf52bbaf2e93fbc66ad55414431a104c01ca3f4d898691d489061a9998045"}, {&(0x7f0000000b00)="44e74acf2ded286c9ce8e1d199ad0261491bb4a08eaab8de3a0e020b0bcfcf8d7ea740a889ee680f25a774993ea0e1082e362cef10e6e0306430ebf6334638adda443160b41df014edc3577bad3a5e4a796f7f99635a1c84927d7b03a59afb9d7c03c05c6252edbe846fa41d5cf1358a0d44a45b5b24342b4b3a4b7dd2e5fe455af1cfeab37ac669ea2e8369cff12e25836e5acfa9cbda4f7026ebf4397484c2db00102baa650398db263fd3b627349e27b46a5ac886c55722fd474df3c8b05664698b7b38a6d5c02328de55fd4675f952bcff51e962edd6"}, {&(0x7f0000000c00)="9a8b4c872d0ac13f4b126260a48cd6b88113082691cf8200452abb678f903efc33de15efee65d13ababf71db59de969f7de2020eedffa2111ad0baa1a470b506c7ef0417ccdb7781f1d7fe2dd8dfe3ec24b3131330ab829949e427aa5989a9a3494d653604f697a4a2563040d7e43cfcf6d6fe366c2a99a804a9b954"}, {&(0x7f0000000c80)="3ca23d9351c79c3c3f674fc64e252f1594d35ec9e2"}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x2) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000040)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x1, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="50000000300005040000000000000000000000003c000100380001000900010067616374000000002800028008000200000000208e36a7e1fbc46000000000000000000000002000000000000c000300", 0x50}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000340)=""/247, &(0x7f0000000440)=""/87, &(0x7f0000000540)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f0000000600)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000680)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000d00)={0x0, 0x3ff, 0x5}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) 16.752862647s ago: executing program 4 (id=755): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x101140, 0x59, 0x21}, 0x18) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000480), 0x492492492492846, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x401}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x68680, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='0', 0x1) 15.760991649s ago: executing program 4 (id=769): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic='^']}, 0x34}], 0x1}, 0x0) lseek(r0, 0x10001, 0x3) 15.760736649s ago: executing program 4 (id=770): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x60000600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000340)=0xff, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000540)=0x4) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000008e2bd05800000ebbbbbbbbbbbb08004500002000680000032f907800001fe13e513f0e67652d7be1e0000001a0006558000c907801090000"], 0x32) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x100) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @local}, 0x10) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) read(r5, 0x0, 0xeffd) socket$nl_generic(0x10, 0x3, 0x10) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r6, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x2, 0x465, 0x0, 0x0, 0x1000, 0x1c9e959d, 0x0, 0x0, 0x106}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x477c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000580)={0xe, 0x8, 0x400, 0xa, 0xe, 0x20, 0x6}) tkill(r10, 0x12) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x40001, 0x3ad}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x7, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b45, 0x1000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x99, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 15.609621485s ago: executing program 4 (id=774): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)=""/4099, 0x1003}, {&(0x7f0000001b40)=""/51, 0x33}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/71, 0x47}, {0x0}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 13.105751782s ago: executing program 6 (id=796): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000180)=""/122, 0x7a}], 0x1) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xffffffbd, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 12.599442884s ago: executing program 6 (id=801): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x41, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @none}, 0xe) write(r1, &(0x7f0000000540)='100', 0x3) pipe2(&(0x7f0000000580), 0x800) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 12.599201565s ago: executing program 6 (id=802): r0 = syz_socket_connect_nvme_tcp() close(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0xd931d3864d39dcdb) r3 = open(&(0x7f0000000240)='./file0\x00', 0x800, 0x10e) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000280)={r2, 0x0, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x82, 0x140) write(r4, &(0x7f0000000180)='3', 0x4e) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='/dev/audio#\x00\xc7D\n\xb9U\xff\xc1_\xc9K<\xb5s\xe6\x9f\x8aTr\xc7\x1e\xddNL\x87\xd8\xb2:\x8f\x12\xe0\xc0\x95\xbc\a\xe3\xd8') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @empty, 0xbf7b}, 0x1c) 11.731410654s ago: executing program 6 (id=806): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)=""/4096, &(0x7f00000030c0)=""/4096, &(0x7f00000040c0)=""/4096}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000050c0)={0x1, 0x0, &(0x7f0000005100)=""/4096, &(0x7f0000006100)=""/4096, &(0x7f0000007100)=""/4096}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000008100)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000008180)={0x0, 0x1}, 0x10) connect$vsock_stream(r1, &(0x7f00000081c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x72, 0x0, 0x1007}]}) timer_create(0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 10.881040361s ago: executing program 6 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='sys_mnt\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) write(r0, &(0x7f0000000240)="73a614c513168732a31ef7", 0xb) (async) write(r0, &(0x7f0000000240)="73a614c513168732a31ef7", 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpgid(0x0) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffffa) (async) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffffa) fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2, r9}) close(r7) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000740)={0x1, 0x0, [{0x4000009e}]}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000740)={0x1, 0x0, [{0x4000009e}]}) 10.832686236s ago: executing program 6 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8ba, 0x23}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x4c}}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="dc180000", @ANYRES16=r1, @ANYBLOB="02002abd7000fcdbdf2589f2000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18dc}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_usb_connect(0x0, 0x5b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f55437072413010001"], 0x0) 4.738888422s ago: executing program 5 (id=848): unshare(0x60000600) open(&(0x7f0000000900)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000940)='./file0\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f00000009c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x8880, 0x85) r2 = socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_SETINFO(r1, 0x0, r3, &(0x7f0000001740)={0xcd8, 0x0, 0x1, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f00000011c0)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_ublk_setup_io_uring(0x20, &(0x7f0000000a40)={0x0, 0x0, 0x4, 0x40002, 0x1a5}, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000fc0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000b80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c00)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000c40)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x17d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x8000, 0x2, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x40, 0x0, 0x2a7}}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001600)={0x1, &(0x7f0000001640)=[{0x2, 0x8, 0x3a, 0x3c2a}]}) timer_create(0x8, &(0x7f00000007c0)={0x0, 0x15, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000800)=0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001780)={'sit0\x00', &(0x7f00000017c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000f00)={@multicast1, @multicast1, @rand_addr=0x64010102}, 0xc) timer_settime(r8, 0x0, &(0x7f0000000840)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(r8, 0x0, &(0x7f0000000880)={{}, {0x77359400}}, &(0x7f00000008c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/71, 0x47) syz_usb_connect$uac3(0x3, 0xa9, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2a, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @processing_unit={0xd, 0x24, 0x9, 0x6, 0x1, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7f, 0x0, 0xdf}]}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) sendmsg(r9, &(0x7f0000001180)={&(0x7f0000000f40)=@generic={0x10, "cfc64a38dedc83de66de9895535607e53548a77e1cefd04eeed75f503037a29e0b58a95ed9cb29d2b7cdcdad5950e6368cc36a9ac431509f48ab3e7888de6be778dbc4aafd8008fc41dd7a9e3153a9530600df6054648656989d121bacfc411f56392727b1519c66fe715ad4952916d5cee9190384ae50ce013fd6279ac9"}, 0x80, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=[{0x40, 0x113, 0x9, "9e5ded7caa464f21a2cd69036ca09b5679d7fac9fb1539d8ed948a010245bff5246779b62a4aa5fb139a1be06a"}, {0x68, 0x10e, 0x7, "2ca3591e92bcb12f877a5a6199985e787c6c353f4719e71ff0c8fcee43c361ade5c15d11d5dae92c7cfa3f0ac299b5f376ddf3cdadf4cae0b58c244b91a59fbfd5d18f3e06dd21f478cc5aecee06eec2a8bc93ef"}, {0x70, 0x10d, 0x100, "9d9a7307af8fd6eb3100e73a604f11590627af11b09ff0b88759356a5ce4c52b8870794fe2a32af1a25b71a01735788f18cc5af3896417d4c972c87482b453de64e82ce541c627c552557833a466d05d46f449c7a612e2f396f4"}, {0x50, 0x114, 0x7f, "730d443ece4d317bf7d7966aaa830b20e0bc55f9025478f4f61b5a7184095314172f6dc7fc2147768bff300ea313055cc32db664657613f2247db225"}], 0x168}, 0x24040040) syz_usb_connect$uac3(0x3, 0xa7, &(0x7f0000001800)=ANY=[@ANYBLOB="120100020000002082058205400001020301090295000301048081080b0201012530040904000000010130000a24010d0a00a40000000904010000010230000904fdf5f3848b4dc5a9010101010230000a24020226800300080c090501090873c0000006060a25250e00000005020009040200000102300001023000102402020500ff070328f9f91fb9032d0d24020100020902f55614c0f60905820908000108580a2525cb00000003"], &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x9, 0xe, 0x5, 0x40, 0x3}, 0x24, &(0x7f0000000280)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "0ea7b2f25199dd69108af7f0a74f48f2"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xda, 0x30, 0xa, 0x5}]}, 0x8, [{0xbf, &(0x7f00000002c0)=@string={0xbf, 0x3, "18ae8275dc2dd2121e32e24546077e732cd9cdcc08faf0fb965cf39ca5574a8e5351ead7671b67a6193b4eb3916ba67a8618be292b2acab4528b580d4fdd4d287f5d40182c604e4b26f1185dbfdc7c4489b85c7c67de2087952e730f8b5281193ff3267e1fbe8dc54b2929e8967d690e79a89b983328256ef5db2ab7d8ca8d279cc18fd915709100db7bd99f4bb29e140be6ca4d0d0ea3db054a6ab746802dddaf20be36e17ae4297a06670306bbcf175252724ae0ac83b85b77e7369a"}}, {0xfb, &(0x7f0000000380)=@string={0xfb, 0x3, "d4d183dc882e60c3ba6df6bde006f7e99a4c07ee3597c9083d2ee844d46e771ce73fbf9092ebf7d3c00dde8e97feb30facf03159313fca95740708d4a2ba54d48010e60c9a81317b688287ceb76b47951cb3cf5af18c839c6313d076404afa71aae466e7233522872a26d435e4841564c867adce890ae93f553d1bb2e956d5aa7e7e5fdcf95ac3a3be71bd0a642a257aae22df577eb3cc45c3246e917aeb27404fe4153b911b7c411115108cf20b7119fcdca4c07c78d0c9f1cbba26787422a6846cf68f67244e41950a8fbfa38d99e7b823d70ddad0d54e8722c616f5facc562b560e35089dfabf4e980c0afb6604c2550da1e807d4daaa31"}}, {0xbd, &(0x7f0000000480)=ANY=[@ANYBLOB="bd039a0f48c85ea0a25af48b1f5fb3ecd4d63284697907c49a2e5539e603a59727cc498c36c483d439e80538ef61e7bdbfddde7b3d7d265b2f2c3dd072d038694a600675d5e94a7acabb557c7789ee0edaecc8fc8672627fea0492bc735929d716a9124642e7e06e05a8153f6a105b373b44f88761ea8726595b3c23bc92a9952d95419794eb53b53ca4c974065033ab920c24d76f8085b5a1057dd8a8ef8b4fb2699ce5af8a0a2bec05a7c5f50d57df063728776fde00000000000000"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1009}}, {0x28, &(0x7f0000000580)=@string={0x28, 0x3, "6796b31e7d833661a1ff8ce1d0b097c143b9b0a74ee4e8dde722eada00e484265801c1eeab47"}}, {0xdb, &(0x7f00000005c0)=@string={0xdb, 0x3, "29d393342fbc9dcb6eced9eb8d233a592a4175cb2ead52fe0493c85eea2d89b236a87cf1840f97361e43f82a40137198c25e7ee999c576aa2ed931b543ac32b214d943d327af3e3270f036e2149a6efd9cb21ef80b85a932a4d4798c08809cb379c0b596cd3325323cb3129c83a111bf9dcd094feaae4bc84c29691709dd0e93ac924ad51605ceb0536e52552fa6b261dfc7207b1911512ffc309a214094e1a4edb04f315ae45b750b9bf32758f6f99df417374045133ea040f208536c0c4c12f55bbfe5403eed3948c25b816c37ff1870da733e023b59afa2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x444}}]}) 3.447947345s ago: executing program 5 (id=854): r0 = socket(0x1e, 0x805, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x40002}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xe) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)) add_key(&(0x7f00000003c0)='.dead\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffb) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendto(r0, &(0x7f0000000140)="dfe16e96e6b1fc982194fbdaed6e0b8cec86cbed5eecb28190dd36ad3457bfd2752145bc1045e8e2114e11cbdd7147f1562f92ad780ed7d4b1b07c81b8f38ca8cb18645c5c64627915304a45f3dccb1cb813d19c6af955af1f2ef233c25232bfb38531a79d0828b2a1fc6665c81108d48330ef55bfa4fe6ee55b7e6e20cf76743f1a7baa17571bbf567783fdfd0c1d61d7", 0x91, 0x4000001, &(0x7f0000000240)=@can={0x1d, r6}, 0x80) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x6000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x2, 0x90) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x7fff) close(r0) 3.375687842s ago: executing program 5 (id=855): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0xd400) 3.291956161s ago: executing program 5 (id=857): memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 2.411580962s ago: executing program 5 (id=860): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f00000006c0)={'bridge0\x00', @random="01000020109b"}) 2.320941631s ago: executing program 5 (id=861): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000040)=ANY=[]) socket$inet6_tcp(0xa, 0x1, 0x0) 2.277121775s ago: executing program 7 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000340)=@filename='./dev/file0\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='afs\x00', 0x8410, 0x0) setxattr$security_selinux(&(0x7f0000000200)='./dev\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0x0) accept4$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/file0\x00', &(0x7f00000001c0)={0x604000, 0xa2, 0x4}, 0x18) readlinkat(r1, &(0x7f00000002c0)='./dev/sda1\x00', &(0x7f0000000300)=""/27, 0x1b) 2.210990342s ago: executing program 7 (id=863): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001040)={0x1, 0x0, [{0x0, 0x1000, &(0x7f0000001080)=""/4096}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x3, 0xfffffffd, &(0x7f00000020c0)=""/4096, &(0x7f0000008240)=""/4103, &(0x7f0000009280)=""/4101, 0x70000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000050c0)={0x1, 0x0, &(0x7f0000005100)=""/4096, &(0x7f0000006100)=""/4096, &(0x7f0000007100)=""/4096}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000008100)={@my=0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000008140)=0x1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000440)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)) r2 = accept4$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, &(0x7f00000005c0)=0x10, 0x800) copy_file_range(r2, 0x0, r1, &(0x7f00000004c0)=0xfffffffffffffff7, 0x8, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x60840, 0xa) getxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='system.sockprotoname\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000008180)={0x0, 0x1}, 0x10) connect$vsock_stream(r3, &(0x7f00000081c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x75, 0xa8341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000400)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000000180)={0x204010000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0xfffffed1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000200)={{0x1, 0x3, 0xfffffffa, 0x1}, 0x0, 0x8}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="01031c0003001400060061811cac02390600fc0200"], 0x26b) connect$vsock_stream(r3, &(0x7f0000008200)={0x28, 0x0, 0x2710, @my=0x0, 0x1}, 0x10) 2.020964312s ago: executing program 7 (id=864): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xd, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000088f0e1200000000000001090224000100003001090400000b03000300092109000a90252c0009058103ff"], 0x0) 810.400676ms ago: executing program 7 (id=865): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0x9, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x49, 0x6, 0x4, 0x2, 0x42, 0xf6, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x4, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.413903ms ago: executing program 36 (id=774): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)=""/4099, 0x1003}, {&(0x7f0000001b40)=""/51, 0x33}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/71, 0x47}, {0x0}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 37.837516ms ago: executing program 7 (id=867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_pidfd_open(0x0, 0x0) setpgid(0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0xffffffff, 0x30, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x2}, @child_ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x8}}}, 0x40}]}) 0s ago: executing program 7 (id=868): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) eventfd(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf30, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): : config 0 interface 0 has no altsetting 0 [ 52.205537][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 52.224902][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.237315][ T10] usb 6-1: config 0 descriptor?? [ 52.417939][ T529] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 52.430806][ T486] rust_binder: 1069: undelivered TRANSACTION_ERROR: 29189 [ 52.438766][ T486] rust_binder: 1069: undelivered TRANSACTION_ERROR: 29201 [ 52.485782][ T36] audit: type=1400 audit(1793665121.430:274): avc: denied { mounton } for pid=1104 comm="syz.3.309" path="/97/file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 52.513638][ T36] audit: type=1400 audit(1793665121.460:275): avc: denied { ioctl } for pid=1104 comm="syz.3.309" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.590194][ T529] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 52.614535][ T529] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.634935][ T529] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.667558][ T529] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 52.692744][ T529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.708402][ T529] usb 5-1: config 0 descriptor?? [ 52.724106][ T529] usb-storage 5-1:0.0: USB Mass Storage device detected [ 52.748449][ T529] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 52.854823][ T529] usb 6-1: USB disconnect, device number 3 [ 52.920226][ T486] usb 5-1: USB disconnect, device number 4 [ 53.512054][ T1122] tmpfs: Bad value for 'uid' [ 53.516846][ T1122] tmpfs: Bad value for 'uid' [ 53.697640][ T486] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.848768][ T486] usb 5-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config [ 53.860336][ T486] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 53.869993][ T486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.175606][ T486] usb 5-1: string descriptor 0 read error: -71 [ 54.186551][ T486] aiptek 5-1:105.0: interface has no int in endpoints, but must have minimum 1 [ 54.198780][ T486] usb 5-1: USB disconnect, device number 5 [ 54.321002][ T1133] rust_binder: validate_parent_fixup: new_min_offset=8, sg_entry.length=0 [ 54.337749][ T1133] rust_binder: 1132:1133 error while translating object: EINVAL [ 54.349104][ T1133] rust_binder: 1132:1133 transaction call to 1132:0 failed EINVAL, code 4294967295 size 112-24 line thread.rs:1007 [ 54.389431][ T486] rust_binder: 1132: undelivered TRANSACTION_ERROR: 29201 [ 54.454043][ T1137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.318'. [ 54.523854][ T1143] netlink: 48 bytes leftover after parsing attributes in process `syz.5.321'. [ 54.738975][ T1155] rust_binder: validate_parent_fixup: new_min_offset=8, sg_entry.length=0 [ 54.762023][ T1155] rust_binder: 1154:1155 error while translating object: EINVAL [ 54.780869][ T1155] rust_binder: 1154:1155 transaction call to 1154:0 failed EINVAL, code 4294967295 size 112-24 line thread.rs:1007 [ 54.824977][ T486] rust_binder: 1154: undelivered TRANSACTION_ERROR: 29201 [ 54.987527][ T1165] device-mapper: table: 252:1: thin-pool: unknown target type [ 54.995198][ T1165] device-mapper: ioctl: error adding target to table [ 55.003005][ T1165] device-mapper: ioctl: The device has no table. [ 55.014501][ T1165] device-mapper: ioctl: The device has no table. [ 55.215125][ T36] audit: type=1400 audit(1793665124.160:276): avc: denied { create } for pid=1171 comm="syz.4.333" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.258680][ T36] audit: type=1400 audit(1793665124.190:277): avc: denied { write } for pid=1171 comm="syz.4.333" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.302261][ T1174] rust_binder: validate_parent_fixup: new_min_offset=8, sg_entry.length=0 [ 55.304229][ T36] audit: type=1400 audit(1793665124.190:278): avc: denied { open } for pid=1171 comm="syz.4.333" path="/62/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.320224][ T1174] rust_binder: 1173:1174 error while translating object: EINVAL [ 55.357043][ T1174] rust_binder: 1173:1174 transaction call to 1173:0 failed EINVAL, code 4294967295 size 112-24 line thread.rs:1007 [ 55.365546][ T36] audit: type=1400 audit(1793665124.200:279): avc: denied { ioctl } for pid=1171 comm="syz.4.333" path="/62/file0" dev="tmpfs" ino=348 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.409093][ T310] rust_binder: 1173: undelivered TRANSACTION_ERROR: 29201 [ 55.427568][ T36] audit: type=1400 audit(1793665124.230:280): avc: denied { unlink } for pid=585 comm="syz-executor" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.510887][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 55.568196][ T1184] netlink: 100 bytes leftover after parsing attributes in process `syz.3.339'. [ 55.689167][ T1194] rust_binder: validate_parent_fixup: new_min_offset=8, sg_entry.length=0 [ 55.707983][ T1194] rust_binder: 1192:1194 error while translating object: EINVAL [ 55.715739][ T1194] rust_binder: 1192:1194 transaction call to 1192:0 failed EINVAL, code 4294967295 size 112-24 line thread.rs:1007 [ 55.757838][ T1197] FAULT_INJECTION: forcing a failure. [ 55.757838][ T1197] name failslab, interval 1, probability 0, space 0, times 0 [ 55.770568][ T1197] CPU: 1 UID: 0 PID: 1197 Comm: syz.5.345 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 55.770613][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 55.770630][ T1197] Call Trace: [ 55.770644][ T1197] [ 55.770656][ T1197] __dump_stack+0x21/0x30 [ 55.770685][ T1197] dump_stack_lvl+0x140/0x1c0 [ 55.770711][ T1197] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.770741][ T1197] ? swake_up_one_online_ipi+0x30/0x30 [ 55.770782][ T1197] dump_stack+0x19/0x20 [ 55.770811][ T1197] should_fail_ex+0x3c2/0x510 [ 55.770857][ T1197] should_failslab+0xac/0x100 [ 55.770890][ T1197] kmem_cache_alloc_noprof+0x42/0x410 [ 55.770936][ T1197] ? fdb_create+0x1c5/0x1210 [ 55.770978][ T1197] fdb_create+0x1c5/0x1210 [ 55.771019][ T1197] ? fdb_find_rcu+0xb0/0x540 [ 55.771058][ T1197] ? fdb_find_rcu+0x4f2/0x540 [ 55.771095][ T1197] ? trace_br_fdb_update+0x170/0x170 [ 55.771141][ T1197] ? br_fdb_find_rcu+0x50/0x50 [ 55.771178][ T1197] ? fdb_notify+0x150/0x150 [ 55.771221][ T1197] fdb_add_local+0x140/0x260 [ 55.771260][ T1197] br_fdb_change_mac_address+0x496/0x4d0 [ 55.771308][ T1197] br_stp_change_bridge_id+0xcd/0x3e0 [ 55.771343][ T1197] ? __cfi_br_stp_change_bridge_id+0x10/0x10 [ 55.771381][ T1197] ? _raw_spin_lock_bh+0x96/0x130 [ 55.771412][ T1197] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 55.771444][ T1197] ? dev_pre_changeaddr_notify+0x15b/0x1f0 [ 55.771487][ T1197] ? __cfi_dev_pre_changeaddr_notify+0x10/0x10 [ 55.771533][ T1197] br_set_mac_address+0x1ae/0x2d0 [ 55.771579][ T1197] dev_set_mac_address+0x29b/0x530 [ 55.771624][ T1197] ? __cfi_dev_set_mac_address+0x10/0x10 [ 55.771666][ T1197] ? full_name_hash+0xa1/0xf0 [ 55.771699][ T1197] dev_set_mac_address_user+0x35/0x60 [ 55.771741][ T1197] dev_ifsioc+0x9b5/0xc10 [ 55.771772][ T1197] dev_ioctl+0x9c1/0x1000 [ 55.771802][ T1197] sock_do_ioctl+0x249/0x330 [ 55.771833][ T1197] ? sock_show_fdinfo+0xd0/0xd0 [ 55.771861][ T1197] ? hook_file_ioctl+0x1ef/0x590 [ 55.771901][ T1197] ? __cfi_vfs_write+0x10/0x10 [ 55.771942][ T1197] ? hook_file_ioctl+0x1/0x590 [ 55.771980][ T1197] ? __kasan_check_write+0x18/0x20 [ 55.772021][ T1197] ? mutex_unlock+0x90/0x240 [ 55.772053][ T1197] sock_ioctl+0x568/0x7e0 [ 55.772100][ T1197] ? __cfi_sock_ioctl+0x10/0x10 [ 55.772142][ T1197] ? __fget_files+0x2bc/0x330 [ 55.772175][ T1197] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.772208][ T1197] ? security_file_ioctl+0x3e/0x110 [ 55.772252][ T1197] ? __cfi_sock_ioctl+0x10/0x10 [ 55.772293][ T1197] __se_sys_ioctl+0x126/0x1b0 [ 55.772327][ T1197] __x64_sys_ioctl+0x7f/0xa0 [ 55.772358][ T1197] x64_sys_call+0x1878/0x2ee0 [ 55.772386][ T1197] do_syscall_64+0x57/0xf0 [ 55.772419][ T1197] ? clear_bhb_loop+0x50/0xa0 [ 55.772458][ T1197] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.772497][ T1197] RIP: 0033:0x7fe0d1f9fb19 [ 55.772523][ T1197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.772546][ T1197] RSP: 002b:00007fe0d2dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.772589][ T1197] RAX: ffffffffffffffda RBX: 00007fe0d2225fa0 RCX: 00007fe0d1f9fb19 [ 55.772613][ T1197] RDX: 00002000000006c0 RSI: 0000000000008924 RDI: 0000000000000004 [ 55.772632][ T1197] RBP: 00007fe0d2dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 55.772656][ T1197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.772675][ T1197] R13: 00007fe0d2226038 R14: 00007fe0d2225fa0 R15: 00007ffd01d37008 [ 55.772703][ T1197] [ 55.811876][ T10] rust_binder: 1192: undelivered TRANSACTION_ERROR: 29201 [ 56.140677][ T1202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.348'. [ 56.392541][ T36] audit: type=1400 audit(1793665125.340:281): avc: denied { ioctl } for pid=1215 comm="syz.5.352" path="/dev/binderfs/binder_logs/transactions_hashed" dev="binder" ino=1048670 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.429505][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.539452][ T1230] FAULT_INJECTION: forcing a failure. [ 56.539452][ T1230] name failslab, interval 1, probability 0, space 0, times 0 [ 56.554239][ T1230] CPU: 0 UID: 0 PID: 1230 Comm: syz.4.359 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 56.554275][ T1230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 56.554289][ T1230] Call Trace: [ 56.554296][ T1230] [ 56.554304][ T1230] __dump_stack+0x21/0x30 [ 56.554329][ T1230] dump_stack_lvl+0x140/0x1c0 [ 56.554349][ T1230] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.554382][ T1230] dump_stack+0x19/0x20 [ 56.554400][ T1230] should_fail_ex+0x3c2/0x510 [ 56.554431][ T1230] should_failslab+0xac/0x100 [ 56.554453][ T1230] __kmalloc_node_noprof+0x69/0x500 [ 56.554485][ T1230] ? __kvmalloc_node_noprof+0x128/0x300 [ 56.554515][ T1230] __kvmalloc_node_noprof+0x128/0x300 [ 56.554541][ T1230] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 56.554569][ T1230] ? percpu_ref_init+0x1a0/0x4d0 [ 56.554598][ T1230] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 56.554624][ T1230] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 56.554649][ T1230] io_uring_create+0x2e0/0x13f0 [ 56.554673][ T1230] ? __kasan_check_write+0x18/0x20 [ 56.554703][ T1230] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 56.554732][ T1230] ? __kasan_check_write+0x18/0x20 [ 56.554761][ T1230] ? __x64_sys_io_uring_setup+0x80/0x80 [ 56.554794][ T1230] ? __kasan_check_read+0x15/0x20 [ 56.554827][ T1230] __x64_sys_io_uring_setup+0x5f/0x80 [ 56.554857][ T1230] x64_sys_call+0x22c0/0x2ee0 [ 56.554882][ T1230] do_syscall_64+0x57/0xf0 [ 56.554904][ T1230] ? clear_bhb_loop+0x50/0xa0 [ 56.554936][ T1230] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.554965][ T1230] RIP: 0033:0x7faa96b9fb19 [ 56.554985][ T1230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.555005][ T1230] RSP: 002b:00007faa955f6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 56.555030][ T1230] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007faa96b9fb19 [ 56.555048][ T1230] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000f00 [ 56.555065][ T1230] RBP: 00007faa955f7090 R08: 0000000000000000 R09: 0000000000000101 [ 56.555080][ T1230] R10: 0000200000000180 R11: 0000000000000206 R12: 0000200000000140 [ 56.555096][ T1230] R13: 0000200000000180 R14: 0000200000000100 R15: 00007fff5f125238 [ 56.555116][ T1230] [ 56.784032][ T10] usb 4-1: device descriptor read/64, error -71 [ 56.862007][ T1238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.363'. [ 56.967714][ T36] audit: type=1400 audit(1793665125.910:282): avc: denied { nlmsg_write } for pid=1245 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 57.032482][ T10] usb 4-1: device descriptor read/64, error -71 [ 57.224367][ T36] audit: type=1400 audit(1793665126.170:283): avc: denied { getopt } for pid=1256 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.277560][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 57.322366][ T1266] loop6: detected capacity change from 0 to 1 [ 57.332371][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 57.437608][ T10] usb 4-1: device descriptor read/64, error -71 [ 57.697601][ T10] usb 4-1: device descriptor read/64, error -71 [ 57.788665][ T1272] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 57.808030][ T10] usb usb4-port1: attempt power cycle [ 57.951218][ T1276] netlink: 'syz.5.377': attribute type 12 has an invalid length. [ 57.959721][ T1276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=1276 comm=syz.5.377 [ 57.959869][ T1277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=1277 comm=syz.5.377 [ 58.020560][ T36] audit: type=1400 audit(1793665126.970:284): avc: denied { ioctl } for pid=1281 comm="syz.5.379" path="socket:[10099]" dev="sockfs" ino=10099 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.047762][ T36] audit: type=1400 audit(1793665127.000:285): avc: denied { mounton } for pid=1281 comm="syz.5.379" path="/54/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 58.159902][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 58.190303][ T1288] rust_binder: validate_parent_fixup: new_min_offset=8, sg_entry.length=0 [ 58.208629][ T10] usb 4-1: device descriptor read/8, error -71 [ 58.209933][ T1288] rust_binder: 1287:1288 error while translating object: EINVAL [ 58.229201][ T1288] rust_binder: 1287:1288 transaction call to 1287:0 failed EINVAL, code 4294967295 size 112-24 line thread.rs:1007 [ 58.243879][ T310] rust_binder: 1287: undelivered TRANSACTION_ERROR: 29201 [ 58.315318][ T1304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'. [ 58.348547][ T10] usb 4-1: device descriptor read/8, error -71 [ 58.577619][ T529] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 58.587745][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 58.608740][ T10] usb 4-1: device descriptor read/8, error -71 [ 58.729193][ T529] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.737411][ T529] usb 5-1: not running at top speed; connect to a high speed hub [ 58.746912][ T529] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 244, changing to 4 [ 58.758348][ T10] usb 4-1: device descriptor read/8, error -71 [ 58.766426][ T529] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 58.775822][ T529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.784063][ T529] usb 5-1: Product: syz [ 58.788527][ T529] usb 5-1: Manufacturer: syz [ 58.793188][ T529] usb 5-1: SerialNumber: syz [ 58.877741][ T10] usb usb4-port1: unable to enumerate USB device [ 59.006178][ T1304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.017906][ T1304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.041614][ T529] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 59.063019][ T529] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 59.084749][ T529] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 59.111148][ T529] usb 5-1: USB disconnect, device number 6 [ 59.240754][ T36] audit: type=1326 audit(1793665128.190:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1317 comm="syz.3.395" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984819fb19 code=0x7ffc0000 [ 59.266441][ T36] audit: type=1326 audit(1793665128.190:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1317 comm="syz.3.395" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984819fb19 code=0x7ffc0000 [ 59.291934][ T36] audit: type=1326 audit(1793665128.190:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1317 comm="syz.3.395" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f984819fb19 code=0x7ffc0000 [ 59.317664][ T36] audit: type=1326 audit(1793665128.210:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1317 comm="syz.3.395" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984819fb19 code=0x7ffc0000 [ 59.343170][ T36] audit: type=1326 audit(1793665128.210:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1317 comm="syz.3.395" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984819fb19 code=0x7ffc0000 [ 59.677593][ T486] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 59.850291][ T486] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 59.859455][ T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.867487][ T486] usb 4-1: Product: syz [ 59.872007][ T486] usb 4-1: Manufacturer: syz [ 59.876675][ T486] usb 4-1: SerialNumber: syz [ 59.947623][ T310] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 60.109205][ T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.131498][ T310] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.164549][ T310] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 60.179154][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.197771][ T310] usb 5-1: Product: syz [ 60.208401][ T310] usb 5-1: Manufacturer: syz [ 60.213054][ T310] usb 5-1: SerialNumber: syz [ 60.239948][ T310] zaurus 5-1:1.0: probe with driver zaurus failed with error -22 [ 60.449724][ T45] usb 5-1: USB disconnect, device number 7 [ 61.351475][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 61.381449][ T1362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.410'. [ 61.387768][ T529] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 61.412551][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 61.488187][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 61.488207][ T36] audit: type=1400 audit(1793665130.440:339): avc: denied { bind } for pid=1363 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.558611][ T529] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 61.587540][ T529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 61.597553][ T529] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 61.606676][ T529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.638272][ T529] usb 5-1: config 0 descriptor?? [ 61.731229][ T1372] SELinux: Context system_u:object_r:crontab_exec_t:s0 is not valid (left unmapped). [ 61.752154][ T36] audit: type=1400 audit(1793665130.700:340): avc: denied { relabelto } for pid=1371 comm="syz.5.415" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crontab_exec_t:s0" [ 61.817676][ T36] audit: type=1400 audit(1793665130.700:341): avc: denied { associate } for pid=1371 comm="syz.5.415" name="ptmx" dev="devtmpfs" ino=24 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crontab_exec_t:s0" [ 61.870387][ T529] usb 5-1: string descriptor 0 read error: -71 [ 61.877423][ T529] usbhid 5-1:0.0: can't add hid device: -22 [ 61.897590][ T529] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 61.906370][ T36] audit: type=1400 audit(1793665130.700:342): avc: denied { ioctl } for pid=1371 comm="syz.5.415" path="/dev/ptmx" dev="devtmpfs" ino=24 ioctlcmd=0x5408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crontab_exec_t:s0" [ 61.947660][ T529] usb 5-1: USB disconnect, device number 8 [ 61.984766][ T36] audit: type=1400 audit(1793665130.700:343): avc: denied { write } for pid=1371 comm="syz.5.415" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crontab_exec_t:s0" [ 62.246926][ T45] usb 4-1: USB disconnect, device number 9 [ 62.321759][ T1385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 62.331282][ T1385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 62.341418][ T1385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 62.419137][ T1391] device-mapper: table: 252:3: thin-pool: unknown target type [ 62.436845][ T1391] device-mapper: ioctl: error adding target to table [ 62.448909][ T1391] device-mapper: ioctl: The device has no table. [ 62.455579][ T1391] device-mapper: ioctl: The device has no table. [ 62.820029][ T36] audit: type=1400 audit(1793665131.760:344): avc: denied { create } for pid=1412 comm="syz.5.430" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.874488][ T36] audit: type=1400 audit(1793665131.820:345): avc: denied { mounton } for pid=1412 comm="syz.5.430" path="/80/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.927657][ T36] audit: type=1400 audit(1793665131.850:346): avc: denied { open } for pid=1412 comm="syz.5.430" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crontab_exec_t:s0" [ 62.988659][ T36] audit: type=1400 audit(1793665131.850:347): avc: denied { nlmsg_read } for pid=1412 comm="syz.5.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.013191][ T491] bridge_slave_1: left allmulticast mode [ 63.019267][ T491] bridge_slave_1: left promiscuous mode [ 63.025001][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.033086][ T491] bridge_slave_0: left allmulticast mode [ 63.039456][ T491] bridge_slave_0: left promiscuous mode [ 63.045205][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.155089][ T491] veth1_macvtap: left promiscuous mode [ 63.164605][ T491] veth0_vlan: left promiscuous mode [ 63.277997][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.285181][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.292356][ T1420] bridge_slave_0: entered allmulticast mode [ 63.298931][ T1420] bridge_slave_0: entered promiscuous mode [ 63.305693][ T1420] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.313047][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.320273][ T1420] bridge_slave_1: entered allmulticast mode [ 63.328862][ T1420] bridge_slave_1: entered promiscuous mode [ 63.382330][ T1420] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.389493][ T1420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.396985][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.404178][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.405018][ T1418] kvm: kvm [1417]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 63.440684][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.448896][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.461190][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.468374][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.489875][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.497094][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.527544][ T1420] veth0_vlan: entered promiscuous mode [ 63.543412][ T1420] veth1_macvtap: entered promiscuous mode [ 63.583908][ T1428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.428'. [ 63.593248][ T1428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.428'. [ 63.602938][ T1428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.428'. [ 63.667643][ T36] audit: type=1400 audit(1793665132.620:348): avc: denied { unlink } for pid=946 comm="syz-executor" name="file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.778522][ T1452] 9pnet_fd: p9_fd_create_tcp (1452): problem connecting socket to 127.0.0.1 [ 63.878514][ T1467] FAULT_INJECTION: forcing a failure. [ 63.878514][ T1467] name failslab, interval 1, probability 0, space 0, times 0 [ 63.891627][ T1467] CPU: 0 UID: 0 PID: 1467 Comm: syz.5.450 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 63.891663][ T1467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 63.891677][ T1467] Call Trace: [ 63.891685][ T1467] [ 63.891693][ T1467] __dump_stack+0x21/0x30 [ 63.891720][ T1467] dump_stack_lvl+0x140/0x1c0 [ 63.891740][ T1467] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.891761][ T1467] ? mutex_unlock+0x90/0x240 [ 63.891788][ T1467] ? __cfi_mutex_unlock+0x10/0x10 [ 63.891815][ T1467] ? flush_workqueue_prep_pwqs+0x417/0x4b0 [ 63.891849][ T1467] dump_stack+0x19/0x20 [ 63.891868][ T1467] should_fail_ex+0x3c2/0x510 [ 63.891910][ T1467] should_failslab+0xac/0x100 [ 63.891933][ T1467] __kmalloc_cache_noprof+0x41/0x470 [ 63.891966][ T1467] ? kvm_uevent_notify_change+0xd9/0x560 [ 63.891988][ T1467] ? __cfi_kvm_vm_release+0x10/0x10 [ 63.892009][ T1467] kvm_uevent_notify_change+0xd9/0x560 [ 63.892030][ T1467] ? blocking_notifier_chain_unregister+0x6f/0xc0 [ 63.892057][ T1467] ? __cfi_kvm_vm_release+0x10/0x10 [ 63.892077][ T1467] kvm_put_kvm+0x9f/0x12d0 [ 63.892099][ T1467] ? kvm_irqfd_release+0x1b5/0x1d0 [ 63.892125][ T1467] ? __fput+0x71e/0xa30 [ 63.892149][ T1467] ? __cfi_kvm_vm_release+0x10/0x10 [ 63.892171][ T1467] kvm_vm_release+0x47/0x70 [ 63.892190][ T1467] __fput+0x20b/0xa30 [ 63.892218][ T1467] ____fput+0x20/0x30 [ 63.892242][ T1467] task_work_run+0x1e8/0x260 [ 63.892273][ T1467] ? __cfi_task_work_run+0x10/0x10 [ 63.892305][ T1467] ? __kasan_check_read+0x15/0x20 [ 63.892337][ T1467] resume_user_mode_work+0x35/0x50 [ 63.892364][ T1467] syscall_exit_to_user_mode+0x63/0xb0 [ 63.892394][ T1467] do_syscall_64+0x63/0xf0 [ 63.892415][ T1467] ? clear_bhb_loop+0x50/0xa0 [ 63.892444][ T1467] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.892480][ T1467] RIP: 0033:0x7fe0d1f9fb19 [ 63.892502][ T1467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.892524][ T1467] RSP: 002b:00007fe0d2dc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 63.892553][ T1467] RAX: 0000000000000000 RBX: 00007fe0d2225fa0 RCX: 00007fe0d1f9fb19 [ 63.892572][ T1467] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 63.892588][ T1467] RBP: 00007fe0d2dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 63.892604][ T1467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.892620][ T1467] R13: 00007fe0d2226038 R14: 00007fe0d2225fa0 R15: 00007ffd01d37008 [ 63.892652][ T1467] [ 64.049486][ T1471] FAULT_INJECTION: forcing a failure. [ 64.049486][ T1471] name failslab, interval 1, probability 0, space 0, times 0 [ 64.169185][ T1471] CPU: 1 UID: 0 PID: 1471 Comm: syz.6.451 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 64.169222][ T1471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 64.169240][ T1471] Call Trace: [ 64.169247][ T1471] [ 64.169257][ T1471] __dump_stack+0x21/0x30 [ 64.169292][ T1471] dump_stack_lvl+0x140/0x1c0 [ 64.169314][ T1471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.169338][ T1471] ? kasan_save_alloc_info+0x3a/0x50 [ 64.169372][ T1471] dump_stack+0x19/0x20 [ 64.169392][ T1471] should_fail_ex+0x3c2/0x510 [ 64.169427][ T1471] should_failslab+0xac/0x100 [ 64.169451][ T1471] __kmalloc_node_noprof+0x69/0x500 [ 64.169485][ T1471] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 64.169518][ T1471] __vmalloc_node_range_noprof+0x529/0x1300 [ 64.169554][ T1471] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 64.169586][ T1471] ? kasan_save_alloc_info+0x3a/0x50 [ 64.169617][ T1471] ? __kasan_slab_alloc+0x73/0x90 [ 64.169642][ T1471] ? arch_dup_task_struct+0x5b/0xe0 [ 64.169668][ T1471] ? __asan_memcpy+0x5a/0x80 [ 64.169704][ T1471] dup_task_struct+0x5d6/0xd80 [ 64.169738][ T1471] ? copy_process+0x579/0x3370 [ 64.169773][ T1471] ? _raw_spin_lock_irq+0x93/0x120 [ 64.169798][ T1471] ? copy_process+0x3370/0x3370 [ 64.169833][ T1471] ? __kasan_check_write+0x18/0x20 [ 64.169869][ T1471] copy_process+0x579/0x3370 [ 64.169903][ T1471] ? __kasan_check_write+0x18/0x20 [ 64.169940][ T1471] ? futex_wake+0x666/0x950 [ 64.169972][ T1471] ? __cfi_copy_process+0x10/0x10 [ 64.170005][ T1471] ? proc_fail_nth_write+0x184/0x220 [ 64.170039][ T1471] kernel_clone+0x233/0x810 [ 64.170074][ T1471] ? __cfi_kernel_clone+0x10/0x10 [ 64.170107][ T1471] ? do_futex+0x37d/0x510 [ 64.170133][ T1471] __x64_sys_clone+0x1b7/0x230 [ 64.170168][ T1471] ? __cfi___x64_sys_clone+0x10/0x10 [ 64.170205][ T1471] ? __kasan_check_write+0x18/0x20 [ 64.170244][ T1471] ? fpregs_restore_userregs+0x11c/0x260 [ 64.170287][ T1471] ? switch_fpu_return+0x12/0x20 [ 64.170322][ T1471] x64_sys_call+0x2b3c/0x2ee0 [ 64.170350][ T1471] do_syscall_64+0x57/0xf0 [ 64.170375][ T1471] ? clear_bhb_loop+0x50/0xa0 [ 64.170409][ T1471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.170441][ T1471] RIP: 0033:0x7f4c5dd9fb19 [ 64.170462][ T1471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.170484][ T1471] RSP: 002b:00007f4c5ec2bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 64.170515][ T1471] RAX: ffffffffffffffda RBX: 00007f4c5e025fa0 RCX: 00007f4c5dd9fb19 [ 64.170535][ T1471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 64.170550][ T1471] RBP: 00007f4c5de37af8 R08: 0000000000000000 R09: 0000000000000000 [ 64.170567][ T1471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 64.170583][ T1471] R13: 00007f4c5e026038 R14: 00007f4c5e025fa0 R15: 00007ffc7e65fde8 [ 64.170605][ T1471] [ 64.170659][ T1471] syz.6.451: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 64.480125][ T1471] CPU: 1 UID: 0 PID: 1471 Comm: syz.6.451 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 64.480169][ T1471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 64.480186][ T1471] Call Trace: [ 64.480193][ T1471] [ 64.480203][ T1471] __dump_stack+0x21/0x30 [ 64.480230][ T1471] dump_stack_lvl+0x140/0x1c0 [ 64.480251][ T1471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.480275][ T1471] dump_stack+0x19/0x20 [ 64.480295][ T1471] warn_alloc+0x1e7/0x2c0 [ 64.480323][ T1471] ? __kasan_check_write+0x18/0x20 [ 64.480355][ T1471] ? __cfi_warn_alloc+0x10/0x10 [ 64.480381][ T1471] ? __kasan_kmalloc+0x28/0xb0 [ 64.480404][ T1471] ? __kmalloc_node_noprof+0x252/0x500 [ 64.480439][ T1471] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 64.480471][ T1471] __vmalloc_node_range_noprof+0x65f/0x1300 [ 64.480507][ T1471] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 64.480538][ T1471] ? kasan_save_alloc_info+0x3a/0x50 [ 64.480568][ T1471] ? __kasan_slab_alloc+0x73/0x90 [ 64.480590][ T1471] ? arch_dup_task_struct+0x5b/0xe0 [ 64.480614][ T1471] ? __asan_memcpy+0x5a/0x80 [ 64.480647][ T1471] dup_task_struct+0x5d6/0xd80 [ 64.480679][ T1471] ? copy_process+0x579/0x3370 [ 64.480710][ T1471] ? _raw_spin_lock_irq+0x93/0x120 [ 64.480733][ T1471] ? copy_process+0x3370/0x3370 [ 64.480763][ T1471] ? __kasan_check_write+0x18/0x20 [ 64.480797][ T1471] copy_process+0x579/0x3370 [ 64.480828][ T1471] ? __kasan_check_write+0x18/0x20 [ 64.480861][ T1471] ? futex_wake+0x666/0x950 [ 64.480890][ T1471] ? __cfi_copy_process+0x10/0x10 [ 64.480921][ T1471] ? proc_fail_nth_write+0x184/0x220 [ 64.480953][ T1471] kernel_clone+0x233/0x810 [ 64.480986][ T1471] ? __cfi_kernel_clone+0x10/0x10 [ 64.481017][ T1471] ? do_futex+0x37d/0x510 [ 64.481044][ T1471] __x64_sys_clone+0x1b7/0x230 [ 64.481078][ T1471] ? __cfi___x64_sys_clone+0x10/0x10 [ 64.481115][ T1471] ? __kasan_check_write+0x18/0x20 [ 64.481147][ T1471] ? fpregs_restore_userregs+0x11c/0x260 [ 64.481189][ T1471] ? switch_fpu_return+0x12/0x20 [ 64.481222][ T1471] x64_sys_call+0x2b3c/0x2ee0 [ 64.481248][ T1471] do_syscall_64+0x57/0xf0 [ 64.481282][ T1471] ? clear_bhb_loop+0x50/0xa0 [ 64.481313][ T1471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.481341][ T1471] RIP: 0033:0x7f4c5dd9fb19 [ 64.481359][ T1471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.481379][ T1471] RSP: 002b:00007f4c5ec2bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 64.481403][ T1471] RAX: ffffffffffffffda RBX: 00007f4c5e025fa0 RCX: 00007f4c5dd9fb19 [ 64.481421][ T1471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 64.481435][ T1471] RBP: 00007f4c5de37af8 R08: 0000000000000000 R09: 0000000000000000 [ 64.481449][ T1471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 64.481463][ T1471] R13: 00007f4c5e026038 R14: 00007f4c5e025fa0 R15: 00007ffc7e65fde8 [ 64.481481][ T1471] [ 64.481502][ T1471] Mem-Info: [ 64.779797][ T1471] active_anon:6470 inactive_anon:0 isolated_anon:0 [ 64.779797][ T1471] active_file:16826 inactive_file:2053 isolated_file:0 [ 64.779797][ T1471] unevictable:958 dirty:54 writeback:0 [ 64.779797][ T1471] slab_reclaimable:3961 slab_unreclaimable:74433 [ 64.779797][ T1471] mapped:24690 shmem:164 pagetables:858 [ 64.779797][ T1471] sec_pagetables:0 bounce:0 [ 64.779797][ T1471] kernel_misc_reclaimable:0 [ 64.779797][ T1471] free:1527493 free_pcp:1686 free_cma:0 [ 64.824726][ T1471] Node 0 active_anon:25880kB inactive_anon:0kB active_file:67304kB inactive_file:8212kB unevictable:3832kB isolated(anon):0kB isolated(file):0kB mapped:98760kB dirty:216kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4608kB pagetables:3432kB sec_pagetables:0kB all_unreclaimable? no [ 64.856679][ T1471] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:0kB free_cma:0kB [ 64.886469][ T1471] lowmem_reserve[]: 0 3920 3920 [ 64.891444][ T1471] Normal free:3162048kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25880kB inactive_anon:0kB active_file:67304kB inactive_file:8212kB unevictable:3832kB writepending:216kB present:5242880kB managed:4014840kB mlocked:3832kB bounce:0kB free_pcp:1964kB local_pcp:832kB free_cma:0kB [ 64.923463][ T1471] lowmem_reserve[]: 0 0 0 [ 64.927900][ T1471] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 64.943598][ T1471] Normal: 61*4kB (UE) 137*8kB (UME) 300*16kB (UME) 436*32kB (UME) 394*64kB (UME) 124*128kB (UME) 37*256kB (UME) 9*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 750*4096kB (UM) = 3160572kB [ 64.963415][ T1471] 19634 total pagecache pages [ 64.968392][ T1471] 1 pages in swap cache [ 64.972667][ T1471] Free swap = 124160kB [ 64.976887][ T1471] Total swap = 124996kB [ 64.981994][ T1471] 2097051 pages RAM [ 64.986274][ T1471] 0 pages HighMem/MovableOnly [ 64.991270][ T1471] 354592 pages reserved [ 64.995516][ T1471] 0 pages cma reserved [ 65.003463][ T1471] Memory allocations: [ 65.007732][ T1471] 0 B 0 init/main.c:1477 func:do_initcalls [ 65.015166][ T1471] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 65.025494][ T1471] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 65.037834][ T1471] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 65.046079][ T1471] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 65.054633][ T1471] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 65.063604][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 65.072964][ T1471] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 65.081173][ T1471] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 65.088643][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 65.098469][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 65.098581][ T1471] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 65.115671][ T1471] 0 B 0 init/initramfs.c:101 func:find_link [ 65.205666][ T637] rust_binder: 1498: undelivered TRANSACTION_COMPLETE [ 65.207918][ T529] rust_binder: 529:529 release transaction 33 in, still active [ 65.897634][ T637] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 66.094053][ T1548] syz.3.478: attempt to access beyond end of device [ 66.094053][ T1548] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 66.109219][ T1548] exFAT-fs (loop3): unable to read boot sector [ 66.115704][ T1548] exFAT-fs (loop3): failed to read boot sector [ 66.122641][ T1548] exFAT-fs (loop3): failed to recognize exfat type [ 66.129690][ T1549] syz.3.478: attempt to access beyond end of device [ 66.129690][ T1549] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 66.143586][ T1549] exFAT-fs (loop3): unable to read boot sector [ 66.150040][ T1549] exFAT-fs (loop3): failed to read boot sector [ 66.156244][ T1549] exFAT-fs (loop3): failed to recognize exfat type [ 66.167670][ T529] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 66.333554][ T529] usb 6-1: unable to get BOS descriptor or descriptor too short [ 66.343783][ T529] usb 6-1: not running at top speed; connect to a high speed hub [ 66.358606][ T1556] device-mapper: table: 252:3: thin-pool: unknown target type [ 66.362176][ T529] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 66.366156][ T1556] device-mapper: ioctl: error adding target to table [ 66.382398][ T529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.390845][ T529] usb 6-1: Product: syz [ 66.395178][ T529] usb 6-1: Manufacturer: syz [ 66.399940][ T529] usb 6-1: SerialNumber: syz [ 66.421791][ T1558] device-mapper: ioctl: The device has no table. [ 66.429039][ T1556] device-mapper: ioctl: The device has no table. [ 67.134429][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 67.134556][ T36] audit: type=1400 audit(1793665136.080:353): avc: denied { bind } for pid=1568 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.161931][ T36] audit: type=1400 audit(1793665136.110:354): avc: denied { map } for pid=1568 comm="syz.3.486" path="socket:[13536]" dev="sockfs" ino=13536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.407625][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 67.558903][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.573341][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 67.584782][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 67.593275][ T45] usb 4-1: Product: syz [ 67.597722][ T45] usb 4-1: Manufacturer: syz [ 67.721559][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.492'. [ 67.862965][ T529] usb 6-1: USB disconnect, device number 4 [ 67.880338][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.009201][ T45] logitech-djreceiver 0003:046D:C52B.0003: hiddev96,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 68.021905][ T45] logitech-djreceiver 0003:046D:C52B.0003: logi_dj_recv_send_report: unable to find dj report [ 68.032270][ T45] logitech-djreceiver 0003:046D:C52B.0003: logi_dj_recv_switch_to_dj_mode error:-19 [ 68.378873][ T36] audit: type=1400 audit(1793665137.330:355): avc: denied { bind } for pid=1589 comm="syz.6.495" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.419938][ T529] usb 4-1: USB disconnect, device number 10 [ 68.422124][ T36] audit: type=1400 audit(1793665137.330:356): avc: denied { node_bind } for pid=1589 comm="syz.6.495" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.719142][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.501'. [ 68.795599][ T1607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.804659][ T1607] netlink: 72 bytes leftover after parsing attributes in process `syz.6.504'. [ 68.814323][ T1607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'. [ 68.991664][ T1614] 9p: Unknown Cache mode or invalid value r [ 69.034446][ T1618] device-mapper: table: 252:3: thin-pool: unknown target type [ 69.042305][ T1618] device-mapper: ioctl: error adding target to table [ 69.049413][ T1618] device-mapper: ioctl: The device has no table. [ 69.056100][ T1618] device-mapper: ioctl: The device has no table. [ 69.102106][ T1626] kvm: apic: phys broadcast and lowest prio [ 69.177617][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 69.332016][ T10] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 69.341795][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.351632][ T10] usb 4-1: Product: syz [ 69.356048][ T10] usb 4-1: Manufacturer: syz [ 69.361037][ T10] usb 4-1: SerialNumber: syz [ 69.368642][ T36] audit: type=1400 audit(1793665138.320:357): avc: denied { cmd } for pid=1635 comm="iou-wrk-1636" path="socket:[14078]" dev="sockfs" ino=14078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.526109][ T1649] /dev/sg0: Can't lookup blockdev [ 69.536347][ T1649] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000006' [ 69.537781][ T36] audit: type=1400 audit(1793665138.490:358): avc: denied { mount } for pid=1648 comm="syz.6.519" name="/" dev="pstore" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 69.588681][ T36] audit: type=1400 audit(1793665138.540:359): avc: denied { unmount } for pid=1420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 69.631155][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 69.639021][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 69.649729][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 69.662677][ T10] usb 4-1: USB disconnect, device number 11 [ 69.680046][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.720195][ T36] audit: type=1400 audit(1793665138.670:360): avc: denied { mounton } for pid=1653 comm="syz.6.521" path="/39/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 69.877583][ T637] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 69.889692][ T1671] netlink: 216 bytes leftover after parsing attributes in process `syz.5.524'. [ 70.007608][ T637] usb 5-1: device descriptor read/64, error -71 [ 70.114649][ T36] audit: type=1400 audit(1793665139.060:361): avc: denied { associate } for pid=1678 comm="syz.5.528" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.257627][ T637] usb 5-1: device descriptor read/64, error -71 [ 70.310119][ T36] audit: type=1400 audit(1793665139.260:362): avc: denied { read write } for pid=1693 comm="syz.3.534" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.377577][ T637] usb usb5-port1: attempt power cycle [ 70.717585][ T637] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 70.739181][ T637] usb 5-1: device descriptor read/8, error -71 [ 70.869127][ T637] usb 5-1: device descriptor read/8, error -71 [ 71.070963][ T1707] 9pnet_virtio: no channels available for device ./cgroup/file0 [ 71.107917][ T1707] device-mapper: table: 252:3: crypt: Error allocating crypto tfm (-ENOENT) [ 71.117558][ T637] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 71.137610][ T1707] device-mapper: ioctl: error adding target to table [ 71.148579][ T637] usb 5-1: device descriptor read/8, error -71 [ 71.278568][ T637] usb 5-1: device descriptor read/8, error -71 [ 71.397636][ T637] usb usb5-port1: unable to enumerate USB device [ 71.907580][ T637] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.057589][ T637] usb 6-1: Using ep0 maxpacket: 16 [ 72.064391][ T637] usb 6-1: unable to get BOS descriptor or descriptor too short [ 72.074719][ T637] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 72.083979][ T637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.092205][ T637] usb 6-1: Product: Ы [ 72.096610][ T637] usb 6-1: Manufacturer: Ф [ 72.101467][ T637] usb 6-1: SerialNumber: 鵮蒴㛱޵ [ 72.317246][ T45] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.333340][ T45] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.343324][ T1722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.353826][ T1722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.538232][ T1728] netlink: 'syz.4.546': attribute type 13 has an invalid length. [ 72.546606][ T1728] erspan0: refused to change device tx_queue_len [ 72.582433][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 72.582453][ T36] audit: type=1400 audit(1793665141.530:369): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 72.622212][ T1724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.544'. [ 72.655266][ T36] audit: type=1400 audit(1793665141.590:370): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.694322][ T36] audit: type=1400 audit(1793665141.590:371): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.733272][ T36] audit: type=1400 audit(1793665141.590:372): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.797558][ T36] audit: type=1400 audit(1793665141.590:373): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.847596][ T36] audit: type=1400 audit(1793665141.710:374): avc: denied { read } for pid=1735 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.907536][ T36] audit: type=1400 audit(1793665141.710:375): avc: denied { open } for pid=1735 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.962553][ T1753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.551'. [ 72.964883][ T36] audit: type=1400 audit(1793665141.710:376): avc: denied { getattr } for pid=1735 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.035054][ T36] audit: type=1400 audit(1793665141.780:377): avc: denied { connect } for pid=1740 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.103490][ T36] audit: type=1400 audit(1793665141.780:378): avc: denied { shutdown } for pid=1740 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.207023][ T1768] FAULT_INJECTION: forcing a failure. [ 73.207023][ T1768] name failslab, interval 1, probability 0, space 0, times 0 [ 73.225891][ T1768] CPU: 0 UID: 0 PID: 1768 Comm: syz.6.553 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 73.225932][ T1768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 73.225948][ T1768] Call Trace: [ 73.225956][ T1768] [ 73.225965][ T1768] __dump_stack+0x21/0x30 [ 73.225995][ T1768] dump_stack_lvl+0x140/0x1c0 [ 73.226017][ T1768] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.226043][ T1768] dump_stack+0x19/0x20 [ 73.226063][ T1768] should_fail_ex+0x3c2/0x510 [ 73.226099][ T1768] should_failslab+0xac/0x100 [ 73.226125][ T1768] kmem_cache_alloc_noprof+0x42/0x410 [ 73.226161][ T1768] ? security_inode_alloc+0x51/0x230 [ 73.226191][ T1768] security_inode_alloc+0x51/0x230 [ 73.226217][ T1768] inode_init_always_gfp+0x756/0x9e0 [ 73.226243][ T1768] alloc_inode+0xc5/0x270 [ 73.226269][ T1768] new_inode+0x25/0x1e0 [ 73.226295][ T1768] ? start_creating+0x1fb/0x310 [ 73.226332][ T1768] __debugfs_create_file+0x14c/0x4b0 [ 73.226370][ T1768] debugfs_create_file+0x4e/0x70 [ 73.226410][ T1768] kvm_create_vm_debugfs+0x48e/0xb50 [ 73.226449][ T1768] ? kvm_enable_virtualization+0x150/0x150 [ 73.226478][ T1768] ? __kasan_check_write+0x18/0x20 [ 73.226513][ T1768] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 73.226546][ T1768] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 73.226572][ T1768] kvm_dev_ioctl+0xb57/0x14c0 [ 73.226597][ T1768] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 73.226623][ T1768] ? bpf_lsm_file_ioctl+0xd/0x20 [ 73.226648][ T1768] ? security_file_ioctl+0x3e/0x110 [ 73.226682][ T1768] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 73.226706][ T1768] __se_sys_ioctl+0x126/0x1b0 [ 73.226732][ T1768] __x64_sys_ioctl+0x7f/0xa0 [ 73.226756][ T1768] x64_sys_call+0x1878/0x2ee0 [ 73.226782][ T1768] do_syscall_64+0x57/0xf0 [ 73.226806][ T1768] ? clear_bhb_loop+0x50/0xa0 [ 73.226839][ T1768] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.226870][ T1768] RIP: 0033:0x7f4c5dd9fb19 [ 73.226891][ T1768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.226913][ T1768] RSP: 002b:00007f4c5ec2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.226938][ T1768] RAX: ffffffffffffffda RBX: 00007f4c5e025fa0 RCX: 00007f4c5dd9fb19 [ 73.226957][ T1768] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 73.226974][ T1768] RBP: 00007f4c5de37af8 R08: 0000000000000000 R09: 0000000000000000 [ 73.226991][ T1768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.227007][ T1768] R13: 00007f4c5e026038 R14: 00007f4c5e025fa0 R15: 00007ffc7e65fde8 [ 73.227028][ T1768] [ 73.293174][ T1768] debugfs: out of free dentries, can not create file 'pages_4k' [ 73.541626][ T150] dummy0: entered promiscuous mode [ 74.734955][ T637] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 74.770739][ T637] usb 6-1: USB disconnect, device number 5 [ 75.097551][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 75.249110][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 75.261604][ T45] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 75.277592][ T45] usb 5-1: config 0 has no interface number 0 [ 75.287571][ T45] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 75.306859][ T45] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 75.326230][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.346440][ T45] usb 5-1: Product: syz [ 75.350796][ T45] usb 5-1: Manufacturer: syz [ 75.355454][ T45] usb 5-1: SerialNumber: syz [ 75.387664][ T45] usb 5-1: config 0 descriptor?? [ 75.397902][ T1819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.578047][ T1867] device-mapper: table: 252:3: thin-pool: unknown target type [ 75.585749][ T1867] device-mapper: ioctl: error adding target to table [ 75.597790][ T1867] device-mapper: ioctl: The device has no table. [ 75.604433][ T1867] device-mapper: ioctl: The device has no table. [ 75.621093][ T1813] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.674142][ T1872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.569'. [ 75.718659][ T1874] netlink: 20 bytes leftover after parsing attributes in process `syz.5.570'. [ 75.831305][ T1880] device-mapper: table: 252:3: thin-pool: unknown target type [ 75.838998][ T1880] device-mapper: ioctl: error adding target to table [ 75.846173][ T1880] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.15794175.0), cmd(14) [ 75.857055][ T1880] device-mapper: ioctl: The device has no table. [ 75.966625][ T1895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.579'. [ 77.352381][ T1925] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2086850833 (33389613328 ns) > initial count (28737999776 ns). Using initial count to start timer. [ 77.371861][ T1925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.472553][ T1934] FAULT_INJECTION: forcing a failure. [ 77.472553][ T1934] name failslab, interval 1, probability 0, space 0, times 0 [ 77.485439][ T1934] CPU: 0 UID: 0 PID: 1934 Comm: syz.6.595 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 77.485478][ T1934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 77.485495][ T1934] Call Trace: [ 77.485504][ T1934] [ 77.485513][ T1934] __dump_stack+0x21/0x30 [ 77.485543][ T1934] dump_stack_lvl+0x140/0x1c0 [ 77.485566][ T1934] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.485592][ T1934] dump_stack+0x19/0x20 [ 77.485613][ T1934] should_fail_ex+0x3c2/0x510 [ 77.485651][ T1934] should_failslab+0xac/0x100 [ 77.485675][ T1934] kmem_cache_alloc_noprof+0x42/0x410 [ 77.485711][ T1934] ? security_inode_alloc+0x51/0x230 [ 77.485740][ T1934] security_inode_alloc+0x51/0x230 [ 77.485768][ T1934] inode_init_always_gfp+0x756/0x9e0 [ 77.485794][ T1934] alloc_inode+0xc5/0x270 [ 77.485819][ T1934] new_inode+0x25/0x1e0 [ 77.485843][ T1934] ? start_creating+0x1fb/0x310 [ 77.485880][ T1934] __debugfs_create_file+0x14c/0x4b0 [ 77.485919][ T1934] debugfs_create_file+0x4e/0x70 [ 77.485955][ T1934] kvm_create_vm_debugfs+0x48e/0xb50 [ 77.485983][ T1934] ? kvm_enable_virtualization+0x150/0x150 [ 77.486010][ T1934] ? __kasan_check_write+0x18/0x20 [ 77.486046][ T1934] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 77.486078][ T1934] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 77.486103][ T1934] kvm_dev_ioctl+0xb57/0x14c0 [ 77.486129][ T1934] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 77.486154][ T1934] ? bpf_lsm_file_ioctl+0xd/0x20 [ 77.486180][ T1934] ? security_file_ioctl+0x3e/0x110 [ 77.486224][ T1934] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 77.486250][ T1934] __se_sys_ioctl+0x126/0x1b0 [ 77.486275][ T1934] __x64_sys_ioctl+0x7f/0xa0 [ 77.486300][ T1934] x64_sys_call+0x1878/0x2ee0 [ 77.486327][ T1934] do_syscall_64+0x57/0xf0 [ 77.486351][ T1934] ? clear_bhb_loop+0x50/0xa0 [ 77.486384][ T1934] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.486440][ T1934] RIP: 0033:0x7f4c5dd9fb19 [ 77.486462][ T1934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.486485][ T1934] RSP: 002b:00007f4c5ec2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.486510][ T1934] RAX: ffffffffffffffda RBX: 00007f4c5e025fa0 RCX: 00007f4c5dd9fb19 [ 77.486530][ T1934] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 77.486545][ T1934] RBP: 00007f4c5de37af8 R08: 0000000000000000 R09: 0000000000000000 [ 77.486561][ T1934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.486577][ T1934] R13: 00007f4c5e026038 R14: 00007f4c5e025fa0 R15: 00007ffc7e65fde8 [ 77.486599][ T1934] [ 77.486789][ T1934] debugfs: out of free dentries, can not create file 'pages_4k' [ 77.661779][ T45] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 77.807651][ T45] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 77.818380][ T45] asix 5-1:0.188: probe with driver asix failed with error -71 [ 77.832835][ T45] usb 5-1: USB disconnect, device number 13 [ 78.037624][ T637] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 78.210735][ T637] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 78.227543][ T637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.245962][ T637] usb 6-1: Product: syz [ 78.250349][ T637] usb 6-1: Manufacturer: syz [ 78.254986][ T637] usb 6-1: SerialNumber: syz [ 78.677418][ T637] usb 6-1: USB disconnect, device number 6 [ 78.711658][ T1585] udevd[1585]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.771397][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 78.771416][ T36] audit: type=1400 audit(1793665147.720:399): avc: denied { bind } for pid=1977 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.811740][ T36] audit: type=1400 audit(1793665147.740:400): avc: denied { getopt } for pid=1977 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.184901][ T36] audit: type=1400 audit(1793665148.130:401): avc: denied { open } for pid=1987 comm="syz.4.613" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=16333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.378006][ T2003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.619'. [ 79.400030][ T2003] loop7: detected capacity change from 0 to 7 [ 79.471958][ T2003] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.487673][ T425] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.510818][ T425] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.519109][ T425] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.527206][ T425] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.535480][ T425] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.699297][ T2013] device-mapper: ioctl: Invalid data size in the ioctl structure: 97 [ 79.758446][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.624'. [ 80.157022][ T2029] netlink: 'syz.4.629': attribute type 12 has an invalid length. [ 80.408993][ T36] audit: type=1326 audit(1793665149.360:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.632" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa96b9fb19 code=0x0 [ 81.040649][ T2060] FAULT_INJECTION: forcing a failure. [ 81.040649][ T2060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.076819][ T2060] CPU: 0 UID: 0 PID: 2060 Comm: syz.5.638 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 81.076859][ T2060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 81.076875][ T2060] Call Trace: [ 81.076883][ T2060] [ 81.076891][ T2060] __dump_stack+0x21/0x30 [ 81.076918][ T2060] dump_stack_lvl+0x140/0x1c0 [ 81.076940][ T2060] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.076967][ T2060] ? __nla_put+0x9e/0xe0 [ 81.076996][ T2060] ? __asan_memcpy+0x5a/0x80 [ 81.077030][ T2060] dump_stack+0x19/0x20 [ 81.077049][ T2060] should_fail_ex+0x3c2/0x510 [ 81.077084][ T2060] should_fail_alloc_page+0xec/0x110 [ 81.077108][ T2060] __alloc_pages_noprof+0x1c0/0x7e0 [ 81.077138][ T2060] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 81.077167][ T2060] ? __nla_put+0x9e/0xe0 [ 81.077194][ T2060] ? __asan_memcpy+0x5a/0x80 [ 81.077226][ T2060] ? skb_put+0x10e/0x200 [ 81.077252][ T2060] ? __nla_put+0x9e/0xe0 [ 81.077287][ T2060] ? nla_put+0xf5/0x160 [ 81.077316][ T2060] __folio_alloc_noprof+0x14/0x80 [ 81.077344][ T2060] folio_prealloc+0x46/0x220 [ 81.077369][ T2060] do_pte_missing+0x16af/0x4440 [ 81.077393][ T2060] ? skb_trim+0x88/0x1a0 [ 81.077423][ T2060] ? rtnl_fill_ifinfo+0x127b/0x1d10 [ 81.077463][ T2060] ? pte_marker_clear+0x1b0/0x1b0 [ 81.077491][ T2060] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 81.077521][ T2060] handle_mm_fault+0x1189/0x1ba0 [ 81.077547][ T2060] ? __cfi_handle_mm_fault+0x10/0x10 [ 81.077570][ T2060] ? find_vma+0xd3/0x120 [ 81.077604][ T2060] ? lock_mm_and_find_vma+0xb8/0x390 [ 81.077628][ T2060] do_user_addr_fault+0x4ee/0x1230 [ 81.077656][ T2060] exc_page_fault+0x58/0xc0 [ 81.077687][ T2060] asm_exc_page_fault+0x2b/0x30 [ 81.077716][ T2060] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 81.077749][ T2060] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 7f 6f 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 81.077768][ T2060] RSP: 0018:ffffc900014ff4b8 EFLAGS: 00050202 [ 81.077789][ T2060] RAX: ffffffff82b14501 RBX: ffff88811804c000 RCX: 0000000000000628 [ 81.077806][ T2060] RDX: 0000000000000000 RSI: ffff88811804c580 RDI: 0000200000001000 [ 81.077823][ T2060] RBP: ffffc900014ff610 R08: ffff88811804cba7 R09: 1ffff11023009974 [ 81.077839][ T2060] R10: dffffc0000000000 R11: ffffed1023009975 R12: 0000200000000a80 [ 81.077856][ T2060] R13: 0000000000000000 R14: 0000000000000ba8 R15: ffffc900014ffd48 [ 81.077873][ T2060] ? _copy_to_iter+0x381/0x1520 [ 81.077904][ T2060] ? _copy_to_iter+0x43f/0x1520 [ 81.077928][ T2060] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 81.077953][ T2060] ? __cfi__copy_to_iter+0x10/0x10 [ 81.077976][ T2060] ? __check_object_size+0x54c/0x870 [ 81.078010][ T2060] ? __cfi___check_object_size+0x10/0x10 [ 81.078043][ T2060] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 81.078067][ T2060] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 81.078102][ T2060] __skb_datagram_iter+0x103/0x940 [ 81.078129][ T2060] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 81.078159][ T2060] skb_copy_datagram_iter+0x44/0x160 [ 81.078192][ T2060] netlink_recvmsg+0x2d4/0xe60 [ 81.078224][ T2060] ? __cfi_netlink_recvmsg+0x10/0x10 [ 81.078255][ T2060] ? __cfi_selinux_file_open+0x10/0x10 [ 81.078300][ T2060] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 81.078335][ T2060] ? security_socket_recvmsg+0x44/0x130 [ 81.078364][ T2060] ? __cfi_netlink_recvmsg+0x10/0x10 [ 81.078394][ T2060] sock_recvmsg+0x188/0x1e0 [ 81.078417][ T2060] ____sys_recvmsg+0x1e7/0x4a0 [ 81.078450][ T2060] ? __sys_recvmsg_sock+0x60/0x60 [ 81.078483][ T2060] ? import_iovec+0x80/0xb0 [ 81.078510][ T2060] ___sys_recvmsg+0x214/0x590 [ 81.078541][ T2060] ? kstrtoull+0x13b/0x1e0 [ 81.078571][ T2060] ? __sys_recvmsg+0x260/0x260 [ 81.078603][ T2060] ? kstrtouint_from_user+0x117/0x170 [ 81.078636][ T2060] ? __x64_sys_openat+0x13a/0x170 [ 81.078672][ T2060] do_recvmmsg+0x328/0x790 [ 81.078704][ T2060] ? __sys_recvmmsg+0x2a0/0x2a0 [ 81.078736][ T2060] ? __cfi_vfs_write+0x10/0x10 [ 81.078772][ T2060] ? fput+0x1a4/0x230 [ 81.078798][ T2060] __x64_sys_recvmmsg+0x199/0x250 [ 81.078830][ T2060] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 81.078862][ T2060] ? __kasan_check_read+0x15/0x20 [ 81.078895][ T2060] x64_sys_call+0x292c/0x2ee0 [ 81.078920][ T2060] do_syscall_64+0x57/0xf0 [ 81.078941][ T2060] ? clear_bhb_loop+0x50/0xa0 [ 81.078971][ T2060] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.079000][ T2060] RIP: 0033:0x7fe0d1f9fb19 [ 81.079018][ T2060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.079036][ T2060] RSP: 002b:00007fe0d2dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 81.079059][ T2060] RAX: ffffffffffffffda RBX: 00007fe0d2225fa0 RCX: 00007fe0d1f9fb19 [ 81.079076][ T2060] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 81.079091][ T2060] RBP: 00007fe0d2dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 81.079105][ T2060] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000001 [ 81.079120][ T2060] R13: 00007fe0d2226038 R14: 00007fe0d2225fa0 R15: 00007ffd01d37008 [ 81.079139][ T2060] [ 82.136183][ T36] audit: type=1400 audit(1793665151.080:403): avc: denied { getopt } for pid=2095 comm="syz.6.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.407565][ T637] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 82.557579][ T637] usb 5-1: Using ep0 maxpacket: 16 [ 82.564370][ T637] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.574368][ T637] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 82.585941][ T637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.594217][ T637] usb 5-1: Product: Ы [ 82.598542][ T637] usb 5-1: Manufacturer: Ф [ 82.603205][ T637] usb 5-1: SerialNumber: 鵮蒴㛱޵ [ 82.819956][ T2097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.829883][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 82.847735][ T2097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.863817][ T45] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.925805][ T2125] FAULT_INJECTION: forcing a failure. [ 82.925805][ T2125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.947570][ T2125] CPU: 1 UID: 0 PID: 2125 Comm: syz.5.664 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 82.947609][ T2125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 82.947625][ T2125] Call Trace: [ 82.947632][ T2125] [ 82.947640][ T2125] __dump_stack+0x21/0x30 [ 82.947666][ T2125] dump_stack_lvl+0x140/0x1c0 [ 82.947693][ T2125] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.947717][ T2125] dump_stack+0x19/0x20 [ 82.947739][ T2125] should_fail_ex+0x3c2/0x510 [ 82.947773][ T2125] should_fail+0xf/0x20 [ 82.947801][ T2125] should_fail_usercopy+0x1e/0x30 [ 82.947820][ T2125] strncpy_from_user+0x29/0x280 [ 82.947851][ T2125] getname_flags+0x106/0x6b0 [ 82.947871][ T2125] getname+0x1b/0x30 [ 82.947888][ T2125] do_sys_openat2+0xda/0x1d0 [ 82.947913][ T2125] ? fput+0x1a4/0x230 [ 82.947935][ T2125] ? do_sys_open+0x100/0x100 [ 82.947959][ T2125] ? ksys_write+0x1f3/0x260 [ 82.947988][ T2125] ? __cfi_ksys_write+0x10/0x10 [ 82.948018][ T2125] __x64_sys_openat+0x13a/0x170 [ 82.948043][ T2125] x64_sys_call+0xe69/0x2ee0 [ 82.948066][ T2125] do_syscall_64+0x57/0xf0 [ 82.948086][ T2125] ? clear_bhb_loop+0x50/0xa0 [ 82.948113][ T2125] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.948138][ T2125] RIP: 0033:0x7fe0d1f9fb19 [ 82.948156][ T2125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.948174][ T2125] RSP: 002b:00007fe0d2dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.948205][ T2125] RAX: ffffffffffffffda RBX: 00007fe0d2225fa0 RCX: 00007fe0d1f9fb19 [ 82.948220][ T2125] RDX: 0000000000101000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 82.948236][ T2125] RBP: 00007fe0d2dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 82.948249][ T2125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.948262][ T2125] R13: 00007fe0d2226038 R14: 00007fe0d2225fa0 R15: 00007ffd01d37008 [ 82.948280][ T2125] [ 83.312506][ T2130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 83.383677][ T2136] netlink: 328 bytes leftover after parsing attributes in process `syz.6.667'. [ 83.410449][ T36] audit: type=1400 audit(1793665152.360:404): avc: denied { accept } for pid=2134 comm="syz.6.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.264149][ T2167] FAULT_INJECTION: forcing a failure. [ 84.264149][ T2167] name failslab, interval 1, probability 0, space 0, times 0 [ 84.311580][ T2167] CPU: 1 UID: 0 PID: 2167 Comm: syz.6.669 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 84.311631][ T2167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 84.311649][ T2167] Call Trace: [ 84.311656][ T2167] [ 84.311666][ T2167] __dump_stack+0x21/0x30 [ 84.311695][ T2167] dump_stack_lvl+0x140/0x1c0 [ 84.311717][ T2167] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.311739][ T2167] ? _raw_spin_lock+0x92/0x120 [ 84.311765][ T2167] dump_stack+0x19/0x20 [ 84.311785][ T2167] should_fail_ex+0x3c2/0x510 [ 84.311822][ T2167] should_failslab+0xac/0x100 [ 84.311847][ T2167] __kmalloc_cache_noprof+0x41/0x470 [ 84.311882][ T2167] ? kvm_create_vm_debugfs+0x362/0xb50 [ 84.311909][ T2167] kvm_create_vm_debugfs+0x362/0xb50 [ 84.311937][ T2167] ? kvm_enable_virtualization+0x150/0x150 [ 84.311963][ T2167] ? __kasan_check_write+0x18/0x20 [ 84.311997][ T2167] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 84.312029][ T2167] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 84.312054][ T2167] kvm_dev_ioctl+0xb57/0x14c0 [ 84.312079][ T2167] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 84.312103][ T2167] ? bpf_lsm_file_ioctl+0xd/0x20 [ 84.312128][ T2167] ? security_file_ioctl+0x3e/0x110 [ 84.312163][ T2167] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 84.312186][ T2167] __se_sys_ioctl+0x126/0x1b0 [ 84.312211][ T2167] __x64_sys_ioctl+0x7f/0xa0 [ 84.312235][ T2167] x64_sys_call+0x1878/0x2ee0 [ 84.312260][ T2167] do_syscall_64+0x57/0xf0 [ 84.312282][ T2167] ? clear_bhb_loop+0x50/0xa0 [ 84.312314][ T2167] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.312344][ T2167] RIP: 0033:0x7f4c5dd9fb19 [ 84.312365][ T2167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.312384][ T2167] RSP: 002b:00007f4c5ec2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.312409][ T2167] RAX: ffffffffffffffda RBX: 00007f4c5e025fa0 RCX: 00007f4c5dd9fb19 [ 84.312427][ T2167] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 84.312442][ T2167] RBP: 00007f4c5de37af8 R08: 0000000000000000 R09: 0000000000000000 [ 84.312457][ T2167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.312471][ T2167] R13: 00007f4c5e026038 R14: 00007f4c5e025fa0 R15: 00007ffc7e65fde8 [ 84.312493][ T2167] [ 84.606703][ T36] audit: type=1400 audit(1793665153.550:405): avc: denied { ioctl } for pid=2172 comm="syz.6.672" path="socket:[19256]" dev="sockfs" ino=19256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.650796][ T486] rust_binder: 2174: undelivered TRANSACTION_COMPLETE [ 85.086587][ T36] audit: type=1400 audit(1793665154.030:406): avc: denied { getopt } for pid=2188 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.136778][ T36] audit: type=1400 audit(1793665154.060:407): avc: denied { bind } for pid=2188 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.249134][ T637] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 85.286562][ T637] usb 5-1: USB disconnect, device number 14 [ 85.513897][ T2213] device-mapper: table: 252:3: thin-pool: unknown target type [ 85.537604][ T2213] device-mapper: ioctl: error adding target to table [ 85.576459][ T36] audit: type=1400 audit(1793665154.520:408): avc: denied { lock } for pid=2212 comm="syz.4.682" path="socket:[18401]" dev="sockfs" ino=18401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 85.600519][ T2213] device-mapper: ioctl: The device has no table. [ 85.607586][ T2213] device-mapper: ioctl: The device has no table. [ 85.617571][ T45] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 85.659701][ T449] rust_binder: 2222: undelivered TRANSACTION_ERROR: 29189 [ 85.737748][ T2233] device-mapper: table: 252:3: snapshot-merge: Cannot get origin device (-ENOENT) [ 85.747105][ T2233] device-mapper: ioctl: error adding target to table [ 85.756231][ T36] audit: type=1400 audit(1793665154.700:409): avc: denied { ioctl } for pid=2232 comm="syz.6.686" path="socket:[18418]" dev="sockfs" ino=18418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.808639][ T45] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.826543][ T45] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.837729][ T45] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 85.849609][ T45] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 85.860051][ T45] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.868158][ T45] usb 6-1: Manufacturer: syz [ 85.878066][ T2205] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 85.931626][ T449] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 85.948747][ T2228] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.964167][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.971405][ T2228] bridge_slave_0: entered allmulticast mode [ 85.977969][ T2228] bridge_slave_0: entered promiscuous mode [ 85.988669][ T2228] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.998550][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.005698][ T2228] bridge_slave_1: entered allmulticast mode [ 86.012299][ T2228] bridge_slave_1: entered promiscuous mode [ 86.108556][ T45] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 86.116729][ T45] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input10 [ 86.127550][ T449] usb 5-1: Using ep0 maxpacket: 32 [ 86.133592][ T45] usb 6-1: USB disconnect, device number 7 [ 86.151294][ T2228] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.158430][ T2228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.165784][ T2228] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.167825][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.172960][ T2228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.207681][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.237622][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.246570][ T449] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 86.267887][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.280272][ T449] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 86.289409][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.304025][ T449] usb 5-1: config 0 descriptor?? [ 86.327565][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.334697][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.371124][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.378266][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.421598][ T2228] veth0_vlan: entered promiscuous mode [ 86.436006][ T2228] veth1_macvtap: entered promiscuous mode [ 86.460335][ T36] audit: type=1400 audit(1793665155.410:410): avc: denied { mount } for pid=2228 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.732076][ T36] audit: type=1400 audit(1793665155.680:411): avc: denied { write } for pid=2225 comm="syz.4.684" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.804182][ T449] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0006/input/input11 [ 86.867310][ T449] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0006/input/input12 [ 86.918391][ T449] kye 0003:0458:5011.0006: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 87.013856][ T2279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.023682][ T2279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.127541][ T637] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 87.267592][ T637] usb 8-1: device descriptor read/64, error -71 [ 87.446960][ T36] audit: type=1326 audit(1793665156.390:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2329 comm="syz.6.711" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c5dd9fb19 code=0x0 [ 87.527571][ T637] usb 8-1: device descriptor read/64, error -71 [ 87.767568][ T637] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 87.907576][ T637] usb 8-1: device descriptor read/64, error -71 [ 88.147573][ T637] usb 8-1: device descriptor read/64, error -71 [ 88.258176][ T637] usb usb8-port1: attempt power cycle [ 88.292628][ T2345] futex_wake_op: syz.6.717 tries to shift op by 144; fix this program [ 88.301388][ T2345] futex_wake_op: syz.6.717 tries to shift op by 144; fix this program [ 88.449791][ T2354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 88.459774][ T2354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.721'. [ 88.468802][ T2354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 88.530128][ T2364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.725'. [ 88.539611][ T2364] FAULT_INJECTION: forcing a failure. [ 88.539611][ T2364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.552852][ T2364] CPU: 0 UID: 0 PID: 2364 Comm: syz.6.725 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 88.552882][ T2364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 88.552896][ T2364] Call Trace: [ 88.552903][ T2364] [ 88.552922][ T2364] __dump_stack+0x21/0x30 [ 88.552949][ T2364] dump_stack_lvl+0x140/0x1c0 [ 88.552967][ T2364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.552989][ T2364] dump_stack+0x19/0x20 [ 88.553007][ T2364] should_fail_ex+0x3c2/0x510 [ 88.553039][ T2364] should_fail+0xf/0x20 [ 88.553068][ T2364] should_fail_usercopy+0x1e/0x30 [ 88.553089][ T2364] _copy_from_iter+0x1a6/0x1520 [ 88.553113][ T2364] ? __cfi__copy_from_iter+0x10/0x10 [ 88.553134][ T2364] ? __check_object_size+0x54c/0x870 [ 88.553167][ T2364] ? __cfi___check_object_size+0x10/0x10 [ 88.553207][ T2364] ? skb_put+0x10e/0x200 [ 88.553231][ T2364] netlink_sendmsg+0x66d/0xad0 [ 88.553260][ T2364] ? __cfi_netlink_sendmsg+0x10/0x10 [ 88.553289][ T2364] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 88.553321][ T2364] ? security_socket_sendmsg+0x3d/0x100 [ 88.553348][ T2364] ? __cfi_netlink_sendmsg+0x10/0x10 [ 88.553376][ T2364] __sys_sendto+0x666/0x6e0 [ 88.553400][ T2364] ? __cfi___sys_sendto+0x10/0x10 [ 88.553427][ T2364] ? __kasan_check_write+0x18/0x20 [ 88.553458][ T2364] ? do_user_addr_fault+0xbf5/0x1230 [ 88.553481][ T2364] ? __cfi_ksys_write+0x10/0x10 [ 88.553512][ T2364] ? __kasan_check_read+0x15/0x20 [ 88.553581][ T2364] __x64_sys_sendto+0xe9/0x100 [ 88.553607][ T2364] x64_sys_call+0x2c2c/0x2ee0 [ 88.553629][ T2364] do_syscall_64+0x57/0xf0 [ 88.553650][ T2364] ? clear_bhb_loop+0x50/0xa0 [ 88.553678][ T2364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.553705][ T2364] RIP: 0033:0x7f4c5dd6034e [ 88.553722][ T2364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.553742][ T2364] RSP: 002b:00007f4c5ec2ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.553765][ T2364] RAX: ffffffffffffffda RBX: 00007f4c5ec2c6c0 RCX: 00007f4c5dd6034e [ 88.553781][ T2364] RDX: 0000000000000024 RSI: 00007f4c5ec2b000 RDI: 0000000000000003 [ 88.553813][ T2364] RBP: 0000000000000000 R08: 00007f4c5ec2af04 R09: 000000000000000c [ 88.553828][ T2364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 88.553842][ T2364] R13: 00007f4c5ec2af58 R14: 00007f4c5ec2b000 R15: 0000000000000000 [ 88.553860][ T2364] [ 88.647726][ T637] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 88.836237][ T311] usb 5-1: USB disconnect, device number 15 [ 88.880416][ T36] audit: type=1400 audit(1793665157.830:413): avc: denied { getattr } for pid=2374 comm="syz.5.730" path="/175/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 88.901961][ T637] usb 8-1: device descriptor read/8, error -71 [ 88.907390][ T36] audit: type=1400 audit(1793665157.830:414): avc: denied { setattr } for pid=2374 comm="syz.5.730" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 89.048651][ T637] usb 8-1: device descriptor read/8, error -71 [ 89.167561][ T311] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 89.297666][ T637] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 89.318077][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 89.324017][ T637] usb 8-1: device descriptor read/8, error -71 [ 89.330746][ T311] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 89.338920][ T311] usb 5-1: config 0 has no interface number 0 [ 89.345048][ T311] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 89.355119][ T311] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 89.366655][ T311] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 89.375858][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.383898][ T311] usb 5-1: Product: syz [ 89.388333][ T311] usb 5-1: Manufacturer: syz [ 89.393024][ T311] usb 5-1: SerialNumber: syz [ 89.398344][ T311] usb 5-1: config 0 descriptor?? [ 89.403650][ T2369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.410903][ T2369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.447596][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.458847][ T637] usb 8-1: device descriptor read/8, error -71 [ 89.567712][ T637] usb usb8-port1: unable to enumerate USB device [ 89.607596][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 89.614076][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.625258][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.629170][ T2369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.635378][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 89.643032][ T2369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.655655][ T45] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 89.671284][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.680572][ T45] usb 6-1: config 0 descriptor?? [ 89.881802][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 89.881821][ T36] audit: type=1400 audit(1793665158.830:416): avc: denied { load_policy } for pid=2368 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.882711][ T2369] SELinux: policydb magic number 0x10000 does not match expected magic number 0xf97cff8c [ 89.918065][ T2369] SELinux: failed to load policy [ 89.924526][ T311] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 89.937188][ T311] asix 5-1:0.34: probe with driver asix failed with error -61 [ 89.976057][ T2400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.984771][ T2400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.127147][ T2392] usb 5-1: USB disconnect, device number 16 [ 90.156933][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0007/input/input13 [ 90.170855][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0007/input/input14 [ 90.188743][ T45] kye 0003:0458:5011.0007: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 90.327587][ T2393] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 90.478326][ T2393] usb 8-1: not running at top speed; connect to a high speed hub [ 90.487083][ T2393] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.497319][ T2393] usb 8-1: config 1 interface 1 has no altsetting 0 [ 90.504712][ T2393] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 90.513897][ T2393] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.526708][ T2393] usb 8-1: Found UVC 1.00 device (046d:0825) [ 90.533748][ T2393] usb 8-1: selecting invalid altsetting 0 [ 90.643793][ T2404] rust_binder: 2403:2404 failed to claim space for a BINDER_TYPE_PTR (offset: 136, limit: 136, size: 36) [ 90.655100][ T2404] rust_binder: 2403:2404 error while translating object: EINVAL [ 90.662880][ T2404] rust_binder: 2403:2404 transaction call to 2403:0 failed EINVAL, code 0 size 112-24 line thread.rs:926 [ 90.724491][ T2393] usb 8-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 90.734180][ T2393] uvcvideo 8-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 90.743081][ T2393] uvcvideo 8-1:1.1: Failed to initialize the device (-71). [ 90.750411][ T2393] usb 8-1: selecting invalid altsetting 0 [ 90.757849][ T2393] usb 8-1: USB disconnect, device number 6 [ 90.786817][ T2404] rust_binder: 2403:2404 no such ref 3 [ 90.792442][ T2404] rust_binder: 2403:2404 no such ref 3 [ 91.332552][ T36] audit: type=1400 audit(1793665160.280:417): avc: denied { write } for pid=2417 comm="syz.7.745" name="config" dev="proc" ino=4026532974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.488764][ T2393] rust_binder: 2403: undelivered TRANSACTION_ERROR: 29201 [ 91.573226][ T36] audit: type=1400 audit(1793665160.520:418): avc: denied { listen } for pid=2435 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.593170][ T36] audit: type=1400 audit(1793665160.520:419): avc: denied { write } for pid=2435 comm="syz.7.752" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 91.682726][ T36] audit: type=1400 audit(1793665160.630:420): avc: denied { setattr } for pid=2440 comm="syz.7.753" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.695971][ T2447] netlink: 'syz.4.754': attribute type 13 has an invalid length. [ 91.713759][ T2447] erspan0: refused to change device tx_queue_len [ 91.899779][ T2460] device-mapper: table: 252:7: thin-pool: unknown target type [ 91.907436][ T2460] device-mapper: ioctl: error adding target to table [ 91.914772][ T2460] device-mapper: ioctl: The device has no table. [ 92.222364][ T10] usb 6-1: USB disconnect, device number 8 [ 92.246994][ T36] audit: type=1400 audit(1793665161.190:421): avc: denied { unmount } for pid=946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.315758][ T2475] FAULT_INJECTION: forcing a failure. [ 92.315758][ T2475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.329274][ T2475] CPU: 1 UID: 0 PID: 2475 Comm: syz.5.766 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 92.329312][ T2475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 92.329328][ T2475] Call Trace: [ 92.329335][ T2475] [ 92.329344][ T2475] __dump_stack+0x21/0x30 [ 92.329375][ T2475] dump_stack_lvl+0x140/0x1c0 [ 92.329389][ T2475] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.329405][ T2475] ? kasan_save_track+0x4f/0x80 [ 92.329421][ T2475] ? kasan_save_track+0x3e/0x80 [ 92.329435][ T2475] ? kasan_save_alloc_info+0x3a/0x50 [ 92.329457][ T2475] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 92.329482][ T2475] dump_stack+0x19/0x20 [ 92.329496][ T2475] should_fail_ex+0x3c2/0x510 [ 92.329521][ T2475] should_fail_alloc_page+0xec/0x110 [ 92.329539][ T2475] __alloc_pages_noprof+0x1c0/0x7e0 [ 92.329561][ T2475] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 92.329583][ T2475] ? __kasan_check_write+0x18/0x20 [ 92.329606][ T2475] ? lockref_get+0x131/0x1c0 [ 92.329625][ T2475] ? __kasan_check_write+0x18/0x20 [ 92.329648][ T2475] get_free_pages_noprof+0x14/0x40 [ 92.329668][ T2475] selinux_genfs_get_sid+0x63/0x2d0 [ 92.329688][ T2475] inode_doinit_with_dentry+0x8f8/0xde0 [ 92.329708][ T2475] ? sb_finish_set_opts+0xa40/0xa40 [ 92.329727][ T2475] ? inode_set_ctime_current+0x1b1/0x2f0 [ 92.329749][ T2475] ? __cfi_inode_set_ctime_current+0x10/0x10 [ 92.329772][ T2475] selinux_d_instantiate+0x2b/0x40 [ 92.329789][ T2475] security_d_instantiate+0xb8/0xf0 [ 92.329807][ T2475] d_instantiate+0x59/0xb0 [ 92.329831][ T2475] __debugfs_create_file+0x264/0x4b0 [ 92.329858][ T2475] debugfs_create_file+0x4e/0x70 [ 92.329882][ T2475] kvm_create_vm_debugfs+0x48e/0xb50 [ 92.329901][ T2475] ? kvm_enable_virtualization+0x150/0x150 [ 92.329919][ T2475] ? __kasan_check_write+0x18/0x20 [ 92.329942][ T2475] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 92.329965][ T2475] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 92.329982][ T2475] kvm_dev_ioctl+0xb57/0x14c0 [ 92.329999][ T2475] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 92.330016][ T2475] ? bpf_lsm_file_ioctl+0xd/0x20 [ 92.330033][ T2475] ? security_file_ioctl+0x3e/0x110 [ 92.330056][ T2475] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 92.330072][ T2475] __se_sys_ioctl+0x126/0x1b0 [ 92.330089][ T2475] __x64_sys_ioctl+0x7f/0xa0 [ 92.330109][ T2475] x64_sys_call+0x1878/0x2ee0 [ 92.330126][ T2475] do_syscall_64+0x57/0xf0 [ 92.330142][ T2475] ? clear_bhb_loop+0x50/0xa0 [ 92.330164][ T2475] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.330185][ T2475] RIP: 0033:0x7fe0d1f9fb19 [ 92.330199][ T2475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.330219][ T2475] RSP: 002b:00007fe0d2dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.330237][ T2475] RAX: ffffffffffffffda RBX: 00007fe0d2225fa0 RCX: 00007fe0d1f9fb19 [ 92.330249][ T2475] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 92.330260][ T2475] RBP: 00007fe0d2037af8 R08: 0000000000000000 R09: 0000000000000000 [ 92.330270][ T2475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.330279][ T2475] R13: 00007fe0d2226038 R14: 00007fe0d2225fa0 R15: 00007ffd01d37008 [ 92.330294][ T2475] [ 92.732090][ T2481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 92.780203][ T36] audit: type=1400 audit(1793665161.730:422): avc: denied { setattr } for pid=2482 comm="syz.4.770" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 92.807743][ T36] audit: type=1326 audit(1793665161.750:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.5.768" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d1f9fb19 code=0x7fc00000 [ 92.833094][ T36] audit: type=1326 audit(1793665161.760:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.5.768" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe0d1f9fb19 code=0x7fc00000 [ 92.858513][ T36] audit: type=1326 audit(1793665161.760:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.5.768" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d1f9fb19 code=0x7fc00000 [ 92.947805][ T2493] futex_wake_op: syz.5.775 tries to shift op by 144; fix this program [ 93.113549][ T2507] overlay: ./file1 is not a directory [ 93.357567][ T45] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 93.508772][ T45] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 93.517219][ T45] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 93.525642][ T45] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 93.534846][ T45] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 93.546000][ T45] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.557842][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.569172][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.580391][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 93.596035][ T45] usb 6-1: string descriptor 0 read error: -22 [ 93.602607][ T45] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 93.611996][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.621020][ T45] usb 6-1: config 0 descriptor?? [ 93.626478][ T2507] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 93.634665][ T45] hub 6-1:0.0: bad descriptor, ignoring hub [ 93.640796][ T45] hub 6-1:0.0: probe with driver hub failed with error -5 [ 93.649336][ T45] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 93.837229][ T10] usb 6-1: USB disconnect, device number 9 [ 94.694211][ T2392] rust_binder: 2440: undelivered death notification, 0000000000000000 [ 94.815846][ T2528] FAULT_INJECTION: forcing a failure. [ 94.815846][ T2528] name failslab, interval 1, probability 0, space 0, times 0 [ 94.828837][ T2528] CPU: 0 UID: 0 PID: 2528 Comm: syz.7.791 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 94.828876][ T2528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 94.828892][ T2528] Call Trace: [ 94.828900][ T2528] [ 94.828909][ T2528] __dump_stack+0x21/0x30 [ 94.828936][ T2528] dump_stack_lvl+0x140/0x1c0 [ 94.828957][ T2528] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.828981][ T2528] dump_stack+0x19/0x20 [ 94.829001][ T2528] should_fail_ex+0x3c2/0x510 [ 94.829038][ T2528] should_failslab+0xac/0x100 [ 94.829062][ T2528] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 94.829097][ T2528] ? is_bpf_text_address+0x17b/0x1a0 [ 94.829126][ T2528] ? __d_alloc+0x42/0x8c0 [ 94.829171][ T2528] __d_alloc+0x42/0x8c0 [ 94.829200][ T2528] ? unwind_get_return_address+0x51/0x90 [ 94.829235][ T2528] d_alloc_parallel+0xe4/0x1370 [ 94.829268][ T2528] ? avc_has_perm_noaudit+0x26b/0x360 [ 94.829293][ T2528] ? __asan_memcpy+0x5a/0x80 [ 94.829326][ T2528] ? selinux_inode_permission+0x3f2/0x5d0 [ 94.829357][ T2528] ? __cfi_d_alloc_parallel+0x10/0x10 [ 94.829388][ T2528] ? __cfi_selinux_inode_permission+0x10/0x10 [ 94.829419][ T2528] ? kasan_save_track+0x4f/0x80 [ 94.829439][ T2528] ? __kmalloc_cache_noprof+0x23c/0x470 [ 94.829472][ T2528] ? kvm_create_vm_debugfs+0x362/0xb50 [ 94.829496][ T2528] ? make_vfsuid+0x4d/0xa0 [ 94.829526][ T2528] ? generic_permission+0x1ec/0x590 [ 94.829549][ T2528] __lookup_slow+0x150/0x420 [ 94.829573][ T2528] ? __d_lookup+0x4e8/0x550 [ 94.829605][ T2528] ? lookup_one_len+0x300/0x300 [ 94.829630][ T2528] ? lookup_one_common+0x320/0x470 [ 94.829656][ T2528] lookup_one_len+0x1a1/0x300 [ 94.829681][ T2528] ? __kasan_check_write+0x18/0x20 [ 94.829715][ T2528] ? __cfi_lookup_one_len+0x10/0x10 [ 94.829741][ T2528] ? simple_pin_fs+0x9c/0x160 [ 94.829768][ T2528] start_creating+0x173/0x310 [ 94.829806][ T2528] __debugfs_create_file+0x77/0x4b0 [ 94.829842][ T2528] debugfs_create_file+0x4e/0x70 [ 94.829878][ T2528] kvm_create_vm_debugfs+0x48e/0xb50 [ 94.829905][ T2528] ? kvm_enable_virtualization+0x150/0x150 [ 94.829931][ T2528] ? __kasan_check_write+0x18/0x20 [ 94.829966][ T2528] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 94.829998][ T2528] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 94.830023][ T2528] kvm_dev_ioctl+0xb57/0x14c0 [ 94.830049][ T2528] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 94.830075][ T2528] ? bpf_lsm_file_ioctl+0xd/0x20 [ 94.830100][ T2528] ? security_file_ioctl+0x3e/0x110 [ 94.830135][ T2528] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 94.830171][ T2528] __se_sys_ioctl+0x126/0x1b0 [ 94.830196][ T2528] __x64_sys_ioctl+0x7f/0xa0 [ 94.830220][ T2528] x64_sys_call+0x1878/0x2ee0 [ 94.830247][ T2528] do_syscall_64+0x57/0xf0 [ 94.830272][ T2528] ? clear_bhb_loop+0x50/0xa0 [ 94.830305][ T2528] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.830335][ T2528] RIP: 0033:0x7efda019fb19 [ 94.830357][ T2528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.830377][ T2528] RSP: 002b:00007efda0f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.830403][ T2528] RAX: ffffffffffffffda RBX: 00007efda0425fa0 RCX: 00007efda019fb19 [ 94.830421][ T2528] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 94.830437][ T2528] RBP: 00007efda0237af8 R08: 0000000000000000 R09: 0000000000000000 [ 94.830452][ T2528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.830467][ T2528] R13: 00007efda0426038 R14: 00007efda0425fa0 R15: 00007ffed3598bd8 [ 94.830489][ T2528] [ 95.200046][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 95.200065][ T36] audit: type=1400 audit(1793665164.150:492): avc: denied { mounton } for pid=2529 comm="syz.6.792" path="/proc/280/cgroup" dev="proc" ino=21290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 95.324573][ T2535] kvm: kvm [2534]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 95.369215][ T2539] bpf: Bad value for 'gid' [ 95.393391][ T36] audit: type=1400 audit(1793665164.340:493): avc: denied { watch } for pid=2538 comm="syz.6.795" path="/115" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.563207][ T2554] FAULT_INJECTION: forcing a failure. [ 95.563207][ T2554] name failslab, interval 1, probability 0, space 0, times 0 [ 95.592369][ T2554] CPU: 1 UID: 0 PID: 2554 Comm: syz.6.801 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 95.592411][ T2554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 95.592437][ T2554] Call Trace: [ 95.592445][ T2554] [ 95.592456][ T2554] __dump_stack+0x21/0x30 [ 95.592487][ T2554] dump_stack_lvl+0x140/0x1c0 [ 95.592510][ T2554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.592534][ T2554] ? simple_lookup+0xc7/0x100 [ 95.592560][ T2554] dump_stack+0x19/0x20 [ 95.592579][ T2554] should_fail_ex+0x3c2/0x510 [ 95.592618][ T2554] should_failslab+0xac/0x100 [ 95.592644][ T2554] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 95.592681][ T2554] ? alloc_inode+0xa9/0x270 [ 95.592707][ T2554] ? __kasan_check_write+0x18/0x20 [ 95.592742][ T2554] alloc_inode+0xa9/0x270 [ 95.592768][ T2554] new_inode+0x25/0x1e0 [ 95.592792][ T2554] ? start_creating+0x1fb/0x310 [ 95.592830][ T2554] __debugfs_create_file+0x14c/0x4b0 [ 95.592869][ T2554] debugfs_create_file+0x4e/0x70 [ 95.592905][ T2554] kvm_create_vm_debugfs+0x48e/0xb50 [ 95.592933][ T2554] ? kvm_enable_virtualization+0x150/0x150 [ 95.592960][ T2554] ? __kasan_check_write+0x18/0x20 [ 95.592994][ T2554] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 95.593026][ T2554] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 95.593051][ T2554] kvm_dev_ioctl+0xb57/0x14c0 [ 95.593077][ T2554] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 95.593104][ T2554] ? bpf_lsm_file_ioctl+0xd/0x20 [ 95.593129][ T2554] ? security_file_ioctl+0x3e/0x110 [ 95.593164][ T2554] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 95.593189][ T2554] __se_sys_ioctl+0x126/0x1b0 [ 95.593214][ T2554] __x64_sys_ioctl+0x7f/0xa0 [ 95.593237][ T2554] x64_sys_call+0x1878/0x2ee0 [ 95.593263][ T2554] do_syscall_64+0x57/0xf0 [ 95.593287][ T2554] ? clear_bhb_loop+0x50/0xa0 [ 95.593319][ T2554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.593351][ T2554] RIP: 0033:0x7f4c5dd9fb19 [ 95.593371][ T2554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.593394][ T2554] RSP: 002b:00007f4c5ec2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.593433][ T2554] RAX: ffffffffffffffda RBX: 00007f4c5e025fa0 RCX: 00007f4c5dd9fb19 [ 95.593453][ T2554] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 95.593469][ T2554] RBP: 00007f4c5de37af8 R08: 0000000000000000 R09: 0000000000000000 [ 95.593485][ T2554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.593499][ T2554] R13: 00007f4c5e026038 R14: 00007f4c5e025fa0 R15: 00007ffc7e65fde8 [ 95.593521][ T2554] [ 95.594673][ T2554] debugfs: out of free dentries, can not create file 'pages_2m' [ 95.954340][ T2558] device-mapper: table: 252:7: thin-pool: unknown target type [ 95.961968][ T2558] device-mapper: ioctl: error adding target to table [ 95.969977][ T2558] device-mapper: ioctl: The device has no table. [ 95.976595][ T2558] device-mapper: ioctl: The device has no table. [ 96.257760][ T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 96.408728][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.419810][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.429837][ T45] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 96.439238][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.452680][ T45] usb 6-1: config 0 descriptor?? [ 96.667711][ T2562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.677187][ T2562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.766640][ T36] audit: type=1400 audit(1793665165.710:494): avc: denied { connect } for pid=2564 comm="syz.7.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.828633][ T36] audit: type=1326 audit(1793665165.780:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2566 comm="syz.6.806" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5dd9fb19 code=0x0 [ 96.908398][ T45] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 96.915996][ T45] playstation 0003:054C:0DF2.0008: item fetching failed at offset 4/5 [ 96.927039][ T45] playstation 0003:054C:0DF2.0008: Parse failed [ 96.940841][ T45] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 97.027562][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 97.153077][ T45] usb 6-1: USB disconnect, device number 10 [ 97.188731][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 97.200106][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50960, setting to 1024 [ 97.213173][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 97.222604][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.230845][ T10] usb 8-1: Product: syz [ 97.235183][ T10] usb 8-1: Manufacturer: syz [ 97.240082][ T10] usb 8-1: SerialNumber: syz [ 97.245938][ T2565] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 97.254876][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 97.260978][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 97.455611][ T36] audit: type=1400 audit(1793665166.400:496): avc: denied { read write } for pid=2564 comm="syz.7.805" name="cdc-wdm0" dev="devtmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 97.456058][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.485926][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.492378][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.499032][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.505304][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.507625][ T36] audit: type=1400 audit(1793665166.400:497): avc: denied { open } for pid=2564 comm="syz.7.805" path="/dev/cdc-wdm0" dev="devtmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 97.511942][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.546635][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.553315][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.559754][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.567006][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.573270][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.579908][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.586181][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.592836][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.599132][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.605916][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.612229][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.618880][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.625169][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 97.631799][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 97.749473][ T36] audit: type=1400 audit(1793665166.700:498): avc: denied { read } for pid=2564 comm="syz.7.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.801566][ T36] audit: type=1400 audit(1793665166.750:499): avc: denied { write } for pid=2564 comm="syz.7.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.822571][ T2577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.805'. [ 97.942690][ T2582] FAULT_INJECTION: forcing a failure. [ 97.942690][ T2582] name failslab, interval 1, probability 0, space 0, times 0 [ 97.985792][ T2582] CPU: 0 UID: 0 PID: 2582 Comm: syz.5.811 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 97.985834][ T2582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 97.985854][ T2582] Call Trace: [ 97.985862][ T2582] [ 97.985872][ T2582] __dump_stack+0x21/0x30 [ 97.985903][ T2582] dump_stack_lvl+0x140/0x1c0 [ 97.985925][ T2582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.985951][ T2582] dump_stack+0x19/0x20 [ 97.985971][ T2582] should_fail_ex+0x3c2/0x510 [ 97.986010][ T2582] should_failslab+0xac/0x100 [ 97.986036][ T2582] kmem_cache_alloc_noprof+0x42/0x410 [ 97.986072][ T2582] ? security_inode_alloc+0x51/0x230 [ 97.986101][ T2582] security_inode_alloc+0x51/0x230 [ 97.986128][ T2582] inode_init_always_gfp+0x756/0x9e0 [ 97.986153][ T2582] alloc_inode+0xc5/0x270 [ 97.986179][ T2582] new_inode+0x25/0x1e0 [ 97.986203][ T2582] ? start_creating+0x1fb/0x310 [ 97.986241][ T2582] __debugfs_create_file+0x14c/0x4b0 [ 97.986279][ T2582] debugfs_create_file+0x4e/0x70 [ 97.986314][ T2582] kvm_create_vm_debugfs+0x48e/0xb50 [ 97.986344][ T2582] ? kvm_enable_virtualization+0x150/0x150 [ 97.986371][ T2582] ? __kasan_check_write+0x18/0x20 [ 97.986415][ T2582] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 97.986448][ T2582] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 97.986473][ T2582] kvm_dev_ioctl+0xb57/0x14c0 [ 97.986501][ T2582] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 97.986527][ T2582] ? bpf_lsm_file_ioctl+0xd/0x20 [ 97.986552][ T2582] ? security_file_ioctl+0x3e/0x110 [ 97.986587][ T2582] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 97.986611][ T2582] __se_sys_ioctl+0x126/0x1b0 [ 97.986636][ T2582] __x64_sys_ioctl+0x7f/0xa0 [ 97.986660][ T2582] x64_sys_call+0x1878/0x2ee0 [ 97.986686][ T2582] do_syscall_64+0x57/0xf0 [ 97.986710][ T2582] ? clear_bhb_loop+0x50/0xa0 [ 97.986741][ T2582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.986773][ T2582] RIP: 0033:0x7fe0d1f9fb19 [ 97.986794][ T2582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.986815][ T2582] RSP: 002b:00007fe0d2dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.986840][ T2582] RAX: ffffffffffffffda RBX: 00007fe0d2225fa0 RCX: 00007fe0d1f9fb19 [ 97.986859][ T2582] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 97.986874][ T2582] RBP: 00007fe0d2037af8 R08: 0000000000000000 R09: 0000000000000000 [ 97.986889][ T2582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.986902][ T2582] R13: 00007fe0d2226038 R14: 00007fe0d2225fa0 R15: 00007ffd01d37008 [ 97.986957][ T2582] [ 97.987040][ T2582] debugfs: out of free dentries, can not create file 'pages_4k' [ 98.769085][ T2589] device-mapper: table: 252:7: thin-pool: unknown target type [ 98.776676][ T2589] device-mapper: ioctl: error adding target to table [ 98.783943][ T2589] device-mapper: ioctl: The device has no table. [ 98.790611][ T2589] device-mapper: ioctl: The device has no table. [ 98.848834][ T36] audit: type=1326 audit(1793665167.800:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.5.815" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0d1f9fb19 code=0x0 [ 99.777858][ T45] usb 8-1: USB disconnect, device number 7 [ 99.839658][ T2600] rust_binder: validate_parent_fixup: new_min_offset=8, sg_entry.length=0 [ 99.867550][ T2600] rust_binder: 2599:2600 error while translating object: EINVAL [ 99.887756][ T2600] rust_binder: 2599:2600 transaction call to 2599:0 failed EINVAL, code 4294967295 size 112-24 line thread.rs:1007 [ 99.917550][ T2392] rust_binder: 2599: undelivered TRANSACTION_ERROR: 29201 [ 99.948246][ T36] audit: type=1400 audit(1793665168.900:501): avc: denied { execute_no_trans } for pid=2603 comm="syz.7.820" path="/26/file1" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.013976][ T2620] FAULT_INJECTION: forcing a failure. [ 101.013976][ T2620] name failslab, interval 1, probability 0, space 0, times 0 [ 101.057794][ T2620] CPU: 1 UID: 0 PID: 2620 Comm: syz.7.827 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 101.057837][ T2620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 101.057852][ T2620] Call Trace: [ 101.057860][ T2620] [ 101.057870][ T2620] __dump_stack+0x21/0x30 [ 101.057899][ T2620] dump_stack_lvl+0x140/0x1c0 [ 101.057922][ T2620] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.057948][ T2620] dump_stack+0x19/0x20 [ 101.057969][ T2620] should_fail_ex+0x3c2/0x510 [ 101.058007][ T2620] should_failslab+0xac/0x100 [ 101.058034][ T2620] __kmalloc_node_noprof+0x69/0x500 [ 101.058070][ T2620] ? __kvmalloc_node_noprof+0x128/0x300 [ 101.058104][ T2620] __kvmalloc_node_noprof+0x128/0x300 [ 101.058137][ T2620] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 101.058170][ T2620] ? memdup_user+0xa0/0x170 [ 101.058200][ T2620] ? strndup_user+0x40/0xd0 [ 101.058245][ T2620] __se_sys_add_key+0x291/0x4b0 [ 101.058268][ T2620] ? __x64_sys_add_key+0xf0/0xf0 [ 101.058290][ T2620] ? __kasan_check_write+0x18/0x20 [ 101.058341][ T2620] ? fpregs_restore_userregs+0x11c/0x260 [ 101.058376][ T2620] __x64_sys_add_key+0xc3/0xf0 [ 101.058397][ T2620] x64_sys_call+0x195f/0x2ee0 [ 101.058423][ T2620] do_syscall_64+0x57/0xf0 [ 101.058447][ T2620] ? clear_bhb_loop+0x50/0xa0 [ 101.058491][ T2620] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.058523][ T2620] RIP: 0033:0x7efda019fb19 [ 101.058544][ T2620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.058565][ T2620] RSP: 002b:00007efda0f91028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 101.058591][ T2620] RAX: ffffffffffffffda RBX: 00007efda0425fa0 RCX: 00007efda019fb19 [ 101.058610][ T2620] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000200000000440 [ 101.058628][ T2620] RBP: 00007efda0237af8 R08: 0000000000000000 R09: 0000000000000000 [ 101.058644][ T2620] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 101.058659][ T2620] R13: 00007efda0426038 R14: 00007efda0425fa0 R15: 00007ffed3598bd8 [ 101.058680][ T2620] [ 101.060136][ T2620] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.531779][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 101.531799][ T36] audit: type=1400 audit(1793665170.480:503): avc: denied { compute_member } for pid=2631 comm="syz.7.831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.607980][ T36] audit: type=1400 audit(1793665170.560:504): avc: denied { mounton } for pid=2633 comm="syz.7.833" path="/32/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.708623][ T36] audit: type=1326 audit(1793665170.660:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.7.835" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efda019fb19 code=0x0 [ 102.469982][ T36] audit: type=1400 audit(1793665171.420:506): avc: denied { write } for pid=2647 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.657079][ T36] audit: type=1400 audit(1793665171.600:507): avc: denied { write } for pid=2654 comm="syz.7.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.729520][ T36] audit: type=1400 audit(1793665171.680:508): avc: denied { create } for pid=2659 comm="syz.5.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 103.649433][ T2668] random: crng reseeded on system resumption [ 103.870008][ T2672] device-mapper: table: 252:7: thin-pool: unknown target type [ 103.887625][ T2672] device-mapper: ioctl: error adding target to table [ 103.906213][ T2672] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(14) [ 103.927134][ T2672] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(14) [ 103.949343][ T2672] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(12) [ 103.972759][ T2672] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(14) [ 103.998220][ T2672] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(4) [ 104.067558][ T2393] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 104.237557][ T2393] usb 6-1: Using ep0 maxpacket: 8 [ 104.250128][ T2393] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 104.259346][ T2393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.267385][ T2393] usb 6-1: Product: syz [ 104.287522][ T2393] usb 6-1: Manufacturer: syz [ 104.292259][ T2393] usb 6-1: SerialNumber: syz [ 104.509609][ T2670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.528485][ T2670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.064753][ T2393] usb 6-1: unit 0 not found! [ 105.087575][ T2393] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 105.115827][ T36] audit: type=1400 audit(1793665174.060:509): avc: denied { ioctl } for pid=2683 comm="syz.5.854" path="socket:[23308]" dev="sockfs" ino=23308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.153169][ T2393] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 105.179398][ T2393] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 105.194500][ T36] audit: type=1400 audit(1793665174.060:510): avc: denied { read } for pid=2683 comm="syz.5.854" name="file2" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.227626][ T2689] netlink: 32 bytes leftover after parsing attributes in process `syz.7.856'. [ 105.236749][ T2691] netlink: 32 bytes leftover after parsing attributes in process `syz.7.856'. [ 105.248926][ T2393] usb 6-1: USB disconnect, device number 11 [ 105.309392][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.371285][ T2392] rust_binder: 2694: undelivered TRANSACTION_ERROR: 29189 [ 105.412436][ T36] audit: type=1326 audit(1793665174.360:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.7.859" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efda019fb19 code=0x0 [ 106.270413][ T36] audit: type=1400 audit(1793665175.220:512): avc: denied { associate } for pid=2703 comm="syz.7.862" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 106.437570][ T2393] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 106.577543][ T2393] usb 6-1: device descriptor read/64, error -71 [ 106.727545][ T449] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 106.827542][ T2393] usb 6-1: device descriptor read/64, error -71 [ 106.887564][ T449] usb 8-1: Using ep0 maxpacket: 8 [ 106.897868][ T449] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.917528][ T449] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 106.940115][ T449] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 106.949469][ T449] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.965255][ T449] usb 8-1: config 0 descriptor?? [ 106.978953][ T449] usbhid 8-1:0.0: fixing wrong optional hid class descriptors count [ 107.001563][ T449] usbhid 8-1:0.0: can't add hid device: -22 [ 107.007794][ T449] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 107.067578][ T2393] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 107.196542][ T449] usb 8-1: USB disconnect, device number 8 [ 107.227538][ T2393] usb 6-1: device descriptor read/64, error -71 [ 107.467601][ T2393] usb 6-1: device descriptor read/64, error -71 [ 107.597677][ T2393] usb usb6-port1: attempt power cycle [ 107.847569][ T2765] kvm: kvm [2764]: vcpu0, guest rIP: 0x1db Unhandled WRMSR(0xc2) = 0xb00061000000ed [ 107.937558][ T2393] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 107.978620][ T2393] usb 6-1: device descriptor read/8, error -71 [ 108.105576][ T2765] kvm: kvm [2764]: vcpu0, guest rIP: 0x1db Unhandled WRMSR(0xc2) = 0xb00061000095f4 [ 108.109098][ T2393] usb 6-1: device descriptor read/8, error -71 [ 108.137465][ T2765] kvm: kvm [2764]: vcpu0, guest rIP: 0x1db Unhandled WRMSR(0xc1) = 0xb000610000cadd [ 108.178826][ T2765] kvm: kvm [2764]: vcpu0, guest rIP: 0x1db Unhandled WRMSR(0xc1) = 0xb00061000000f9 [ 108.202066][ T2765] kvm: kvm [2764]: vcpu0, guest rIP: 0x1db Unhandled WRMSR(0xc2) = 0xb00061000000d9 [ 108.379006][ T2393] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 108.408556][ T2393] usb 6-1: device descriptor read/8, error -71 [ 108.507530][ T2392] rust_binder: 2769: undelivered TRANSACTION_ERROR: 29189 [ 108.538841][ T2393] usb 6-1: device descriptor read/8, error -71 [ 108.610867][ T487] bridge_slave_1: left allmulticast mode [ 108.616587][ T487] bridge_slave_1: left promiscuous mode [ 108.622404][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.630603][ T487] bridge_slave_0: left allmulticast mode [ 108.636295][ T487] bridge_slave_0: left promiscuous mode [ 108.642138][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.648021][ T2393] usb usb6-port1: unable to enumerate USB device [ 108.761326][ T487] veth1_macvtap: left promiscuous mode [ 108.766910][ T487] veth0_vlan: left promiscuous mode [ 108.870373][ T2773] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.880533][ T2773] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.890670][ T2773] bridge_slave_0: entered allmulticast mode [ 108.898263][ T2773] bridge_slave_0: entered promiscuous mode [ 108.908498][ T2773] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.915604][ T2773] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.922990][ T2773] bridge_slave_1: entered allmulticast mode [ 108.929709][ T2773] bridge_slave_1: entered promiscuous mode [ 108.998906][ T2773] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.006048][ T2773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.013419][ T2773] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.020525][ T2773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.031084][ T487] ------------[ cut here ]------------ [ 109.036631][ T487] WARNING: CPU: 0 PID: 487 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 109.046735][ T487] Modules linked in: [ 109.050719][ T487] CPU: 0 UID: 0 PID: 487 Comm: kworker/u8:4 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 109.062797][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 109.072948][ T487] Workqueue: netns cleanup_net [ 109.077812][ T487] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 109.083847][ T487] Code: e8 a1 16 d3 fc 4b 83 3c 3e 00 75 19 e8 85 82 79 fc 49 81 ff f8 07 00 00 74 1b e8 77 82 79 fc 49 83 c7 08 eb c9 e8 6c 82 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 109.103738][ T487] RSP: 0018:ffffc9000b7efb90 EFLAGS: 00010293 [ 109.109891][ T487] RAX: ffffffff850fd4c4 RBX: ffff88812c4d58c0 RCX: ffff888117884f00 [ 109.117959][ T487] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811dc080b8 [ 109.125968][ T487] RBP: ffffc9000b7efbb0 R08: ffffffff88552047 R09: 1ffffffff10aa408 [ 109.134029][ T487] R10: dffffc0000000000 R11: fffffbfff10aa409 R12: dffffc0000000000 [ 109.142132][ T487] R13: dffffc0000000000 R14: ffff88811dc08000 R15: 00000000000000b8 [ 109.150233][ T487] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 109.159437][ T487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.166063][ T487] CR2: 00007f827b447121 CR3: 000000012223e000 CR4: 00000000003526b0 [ 109.174125][ T487] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 109.182239][ T487] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 109.190291][ T487] Call Trace: [ 109.193604][ T487] [ 109.196565][ T487] cleanup_net+0x6bd/0xc90 [ 109.201055][ T487] ? __cfi_cleanup_net+0x10/0x10 [ 109.206041][ T487] ? kick_pool+0xb9/0x540 [ 109.210516][ T487] process_scheduled_works+0x7f7/0x1060 [ 109.216127][ T487] worker_thread+0xc99/0x13f0 [ 109.220904][ T487] kthread+0x2c7/0x360 [ 109.225034][ T487] ? __cfi_worker_thread+0x10/0x10 [ 109.230243][ T487] ? __cfi_kthread+0x10/0x10 [ 109.234891][ T487] ret_from_fork+0x64/0xa0 [ 109.239414][ T487] ? __cfi_kthread+0x10/0x10 [ 109.244139][ T487] ret_from_fork_asm+0x1a/0x30 [ 109.248989][ T487] [ 109.252040][ T487] ---[ end trace 0000000000000000 ]--- [ 109.260806][ T487] ------------[ cut here ]------------ [ 109.266317][ T487] WARNING: CPU: 0 PID: 487 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 109.276554][ T487] Modules linked in: [ 109.280572][ T487] CPU: 0 UID: 0 PID: 487 Comm: kworker/u8:4 Tainted: G W syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 109.293776][ T487] Tainted: [W]=WARN [ 109.297638][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 109.307763][ T487] Workqueue: netns cleanup_net [ 109.312662][ T487] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 109.318826][ T487] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 30 82 79 fc 49 81 ff f8 07 00 00 74 1b e8 22 82 79 fc 49 83 c7 08 eb c5 e8 17 82 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 07 82 79 fc 5b 41 5c 41 5e 41 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.328705][ T36] audit: type=1400 audit(1793665178.210:513): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[2910]" dev="pipefs" ino=2910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 109.338504][ T487] RSP: 0018:ffffc9000b7efb90 EFLAGS: 00010293 [ 109.367650][ T487] RAX: ffffffff850fd519 RBX: ffff88811dc08800 RCX: ffff888117884f00 [ 109.375666][ T487] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811dc08808 [ 109.383721][ T487] RBP: ffffc9000b7efbb0 R08: ffffffff88552047 R09: 1ffffffff10aa408 [ 109.391815][ T487] R10: dffffc0000000000 R11: fffffbfff10aa409 R12: dffffc0000000000 [ 109.399884][ T487] R13: dffffc0000000000 R14: ffff88811dc08000 R15: 0000000000000008 [ 109.407926][ T487] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 109.416896][ T487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.423593][ T487] CR2: 00007f827b447121 CR3: 000000010cbee000 CR4: 00000000003526b0 [ 109.431646][ T487] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 109.439712][ T487] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 109.447768][ T487] Call Trace: [ 109.451082][ T487] [ 109.454051][ T487] cleanup_net+0x6bd/0xc90 [ 109.458536][ T487] ? __cfi_cleanup_net+0x10/0x10 [ 109.463515][ T487] ? kick_pool+0xb9/0x540 [ 109.467913][ T487] process_scheduled_works+0x7f7/0x1060 [ 109.473502][ T487] worker_thread+0xc99/0x13f0 [ 109.478286][ T487] kthread+0x2c7/0x360 [ 109.482409][ T487] ? __cfi_worker_thread+0x10/0x10 [ 109.487587][ T487] ? __cfi_kthread+0x10/0x10 [ 109.492220][ T487] ret_from_fork+0x64/0xa0 [ 109.496672][ T487] ? __cfi_kthread+0x10/0x10 [ 109.501347][ T487] ret_from_fork_asm+0x1a/0x30 [ 109.506156][ T487] [ 109.509240][ T487] ---[ end trace 0000000000000000 ]--- [ 109.515061][ T2259] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.525865][ T2259] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.543576][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.550713][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.637747][ T487] ------------[ cut here ]------------ [ 109.643330][ T487] WARNING: CPU: 0 PID: 487 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 109.652906][ T487] Modules linked in: [ 109.656842][ T487] CPU: 0 UID: 0 PID: 487 Comm: kworker/u8:4 Tainted: G W syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 109.670048][ T487] Tainted: [W]=WARN [ 109.673902][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 109.684051][ T487] Workqueue: netns cleanup_net [ 109.688875][ T487] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 109.694436][ T487] Code: 3c 20 00 74 08 48 89 df e8 3f f3 ed fc 48 8b 3b e8 e7 df d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 db b7 00 cc e8 12 5f 94 fc <0f> 0b e9 b0 fd ff ff e8 06 5f 94 fc 0f 0b e9 18 fe ff ff e8 fa 5e [ 109.714181][ T487] RSP: 0018:ffffc9000b7efb70 EFLAGS: 00010293 [ 109.720323][ T487] RAX: ffffffff84f4f81e RBX: ffff88812c4d58c0 RCX: ffff888117884f00 [ 109.728370][ T487] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888117884f00 [ 109.736385][ T487] RBP: ffffc9000b7efb98 R08: ffffffff88552047 R09: 1ffffffff10aa408 [ 109.744477][ T487] R10: dffffc0000000000 R11: fffffbfff10aa409 R12: 1ffffffff10aa15c [ 109.752541][ T487] R13: dffffc0000000000 R14: ffff88812c4d64c0 R15: dffffc0000000000 [ 109.760595][ T487] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 109.769598][ T487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.776200][ T487] CR2: 00007efda0f90ff8 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 109.784282][ T487] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 109.792330][ T487] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 109.800383][ T487] Call Trace: [ 109.803684][ T487] [ 109.806614][ T487] xfrm_net_exit+0x31/0x80 [ 109.811105][ T487] cleanup_net+0x6bd/0xc90 [ 109.815545][ T487] ? __cfi_cleanup_net+0x10/0x10 [ 109.820533][ T487] ? kick_pool+0xb9/0x540 [ 109.824893][ T487] process_scheduled_works+0x7f7/0x1060 [ 109.830498][ T487] worker_thread+0xc99/0x13f0 [ 109.835230][ T487] kthread+0x2c7/0x360 [ 109.839362][ T487] ? __cfi_worker_thread+0x10/0x10 [ 109.844504][ T487] ? __cfi_kthread+0x10/0x10 [ 109.849156][ T487] ret_from_fork+0x64/0xa0 [ 109.853626][ T487] ? __cfi_kthread+0x10/0x10 [ 109.858370][ T487] ret_from_fork_asm+0x1a/0x30 [ 109.863165][ T487] [ 109.866183][ T487] ---[ end trace 0000000000000000 ]--- [ 109.979276][ T487] bridge_slave_1: left allmulticast mode [ 109.984996][ T487] bridge_slave_1: left promiscuous mode [ 109.991295][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.999100][ T487] bridge_slave_0: left allmulticast mode [ 110.004791][ T487] bridge_slave_0: left promiscuous mode [ 110.010564][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.018479][ T487] bridge_slave_1: left allmulticast mode [ 110.024135][ T487] bridge_slave_1: left promiscuous mode [ 110.029794][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.037282][ T487] bridge_slave_0: left allmulticast mode [ 110.043110][ T487] bridge_slave_0: left promiscuous mode [ 110.048811][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.211621][ T487] veth1_macvtap: left promiscuous mode [ 110.217166][ T487] veth0_vlan: left promiscuous mode [ 110.222868][ T487] veth0_vlan: left promiscuous mode [ 110.598770][ T487] bridge_slave_1: left allmulticast mode [ 110.604568][ T487] bridge_slave_1: left promiscuous mode [ 110.610266][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.617875][ T487] bridge_slave_0: left allmulticast mode [ 110.623563][ T487] bridge_slave_0: left promiscuous mode [ 110.629316][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.637053][ T487] bridge_slave_1: left allmulticast mode [ 110.642829][ T487] bridge_slave_1: left promiscuous mode [ 110.648475][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.655827][ T487] bridge_slave_0: left allmulticast mode [ 110.661544][ T487] bridge_slave_0: left promiscuous mode [ 110.667176][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.811384][ T487] veth1_macvtap: left promiscuous mode [ 110.816920][ T487] veth0_vlan: left promiscuous mode