last executing test programs: 19.667363336s ago: executing program 0 (id=43): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x60, 0x13, 0x8, 0x4931, 0x2f, 0xfffffffc, &(0x7f0000000140)="980affd2d7b5b1b90e70c95c967591d8722e927516ce53c662a35730e688d14d9ee6b23305dcf1bac61049755f73c1"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2006, 0x2, 0x7, 0x7fffffff}]}) syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x3c9103) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0x8) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001380)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000000280)="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", 0xef, 0x0, &(0x7f0000001280)="7c60ab567227f3afcf28fcde0091b5a7b675a3f465d50a77b34621fb240eb36ff91191444d6abdc4ddbd928a0bd91974f9398a1babf24f265687ac7d1ab654118625a0860af0ce2e557113ac4676dc35b72a05fe0f2216ca10debfa351adae9e234553bb3b781f0629c62d13e6ed8ddf7f8e396239d8199bfd03fa968102212718975dea604aea0189b48e12331a3c94939001de0d5c196ad1ffe81de34705e096245b442c21d2a1b8ee8a9fcbc33cb36747923f5ab9f453fde968731a14d63612bec968c3d87232a2705af09af98e8e84b933e40de913917d36c8ba2a389b2c3171f3c6c88406fa19a21e6411385b"}) 18.423961914s ago: executing program 0 (id=52): fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000000)=@v2={0x2000000, [{0x7fff}, {0x9}]}, 0x14, 0x1) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) (async, rerun: 64) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) accept4(r1, 0x0, 0x0, 0x800) 18.36814828s ago: executing program 0 (id=53): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="2c80fce256052b06f8148e045f9b2dec", 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000200)=0x6a, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x1, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r3, &(0x7f0000000300)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000380)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073", 0x63, 0xc2ff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x400a, 0x8}}, @nested_vmlaunch={0x12f, 0x18}], 0x9e}) ioctl$KVM_RUN(r6, 0xae80, 0x0) memfd_create(&(0x7f0000000400)='/dev/kvm\x00', 0x2) 18.354232971s ago: executing program 0 (id=54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000300)={r2, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000340)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18.344238902s ago: executing program 0 (id=55): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e24}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') utimensat(r1, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x200440d0) recvmmsg(r0, &(0x7f00000004c0), 0x4000000000002e2, 0x123, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x1}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000080)="21ef261e003e0691b4d9c7b66389ba0b5f059379b97c3b820c7abb13c9a654e1722de1d4fb4534b37992f57e6c3ba83626d6cfe140738cfc43bdf61cbce0214dba50df75579511b730fccc34c59d4810ed06036cddc4442c416cb4f47bf68081abdad0f74df297b0d7c73707e7a515f8e365338ca67a116c17b2e4917f33f30184a637bc755291dd4fdce93c10a161185a51014777815efbb56c64ee72309343200e3f0565c696902f5c0b750505c16e4715a5112dab65d9ac57352c25ca69", 0xbf}, {&(0x7f0000000140)="a7ef0b8db0adcfa2708e10f49d63d3da103d6cd0e95e1812e947ad192a640cc2c54abc0f7c68a00e422952ceb485bda9ffd8a1907d2414f2627d8f2c5adc4cb770d716fd7fea4ccb3dda9e43b3418794382ee3dd3a910bc574830fc7d2f3ceca631b4830a45e99557feae84476bdc030346791afaf1ac7edbf31a6e98f7020cb1bfc286c4ce1819b2b322c5de122fe4d687ae39153a5b0665cdf434e0f1f73aaaa3abefd9178413084688440a3825f8f7f5e13f90c896aa0dc4b8229964d8cf1881de16afd4b7ddc0679c406a39f98d916d550e0ef35193235", 0xd9}, {&(0x7f0000000240)="5acef843ff913615c24c509d063842c550e2856dba49b04ca166c62ffae58a137a79902aae735bdfd6258fff0d530b1e612058a88cd1ec3fbc74be26e35cf36aa4ff527128871ee03c84e9a6c78b94c3e6a919ab90cd", 0x56}, {&(0x7f00000002c0)="503f4d53b79a5e6888d9785a6a759742e7bfc3e0053320622c4cfdceab48dc62e8e1a5782fe3aac600e4c011", 0x2c}, {&(0x7f00000003c0)="de1d92cea7c51055ff72a245b2e0f66b2a065a67901f7fdbfc47e47bc80d183cbee602867ee185e3d9bbbcdccfe4b51bda839f4c3d6a8a231c0212256b68b8ea22087f771dbf68fe596e24062464b7f9809df2fc434e0ed82115b040637ba448ac861b5f1e49862b5fbd235cd3c9906e67400973f9c259e5535eef784f6e6a61981f31e567fa0c406648d5fbafdc557a4203b90492812fc2", 0x98}, {&(0x7f0000000480)="5564083b48fd792efd36e28aa00b5edfc4b655ee6d4bedd874918d87ff1fe6c68f6402237d1c0b51a862f4fe5582ff5154b8a0087cdcf2f04d953abb280707b859b0f694500f5cad4bc359bc5bcdaf9e7e898816da71ef3ef4f006d09d80e606f4ecd938f889318a51348924800d99dbf4fe7e0891f7f72f7b1654df3ab90b3468906fef73d3ca159d91e2ee3461baf0e354699e9560d2d864040e0ee0c025732db4e6e13505264edd27dcae3d64a4964b534e45f37b2dcef3fa2d86", 0xbc}], 0x6, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r4}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r5}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x5c, 0x1f, '\x00', [@generic={0x7, 0xf3, "32ffbd0748868ec5aa491c5fd9f380366edae6f383343e6d16c1d245a58a3cb3770147d167190a49b90b21ed985067e198bfebb8c9cadeed56932a9eb8c0dd65b4e212b2363e86175a4a59247a4250e6efb6cbc92c8ff786d7ff0c0b8c7473a2614236b6d68ca7304e6c37d45dda4cf2e567ec0001ef4b47fc2532bdd98e92c5d818f46d48576eae27f3c97f600a037c1c5f4415e09ef706aa18c5e4d3b6c5354aee1bc4131868542b4156bc3a334b4ec901e07c2096b96a372f710d0d2241d8fcc2431de6ccc70c0a86743e4864a882fbe724100efc75b80b8286ad946eec6818d7bf62b281839166078fcc7a5d0df3c031e9"}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x200}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x3a, 0x7, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0xfff, [0x3, 0x4cd2b98, 0x8, 0xb, 0x7fff]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x1f0}}, {{&(0x7f0000000900)={0xa, 0x4e23, 0xdde4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x89}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000c40)="2191a2e052b3dad87681d9cefb45188469f394e8553400bef0b962ac7c76c8d0b4c3a485993b360698b131c2d31fcd9d2c67bbc99bfe78715edcc111870e065bb8bdd364a472ecba1486bf3ad4af5713010e1a10e54c75a7380050318a930e193d63278b8dde1b3f8913c997453c92e2fdfe5b588bab8a775013667f9b6849bc5eb177915592bb12c9fe00cbf769314485103e05431b37aecc5df74e6eade1d366cc66079f994f947abad1d5699accc40d01837aa23a51a474c0065c83e56c9289e6a6c6e733046294cc16e62844fb0af3191db97f86cfa3bfb93790bee15d2a0f49a8334949734fbea2dfa43fa7d557a37d08ad7b7872d2b252cb33362f3c047754855e0c004860020475d9677dc2adf5467ce8c84d2bb0a74c0932c5535b172f3ab176195b39ab73f6fbe8ceabadcdff223bce4b15cbe5871a32856ea792b7", 0x140}], 0x1}}, {{&(0x7f0000000a40)={0xa, 0x4e23, 0x1, @private1, 0x4}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a80)="f6e3e8c181443a35e6", 0x9}, {&(0x7f0000000ac0)="8d1ec2b873e14fca40f989947aad6007225d7c03c19e383a89dfeb920496507c257ca7c9ef1d7b96dddc11e71c032962cc0a7ca4b763d76cf999fdd961cea877fa086b3e440814ac05a0", 0x5e}], 0x2}}], 0x3, 0x20e8086) sendmmsg(r0, &(0x7f0000000880), 0x4ff, 0x0) 18.240057043s ago: executing program 0 (id=56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='timerslack_ns\x00') lseek(r2, 0x14, 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000007c0), 0x6, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="010000800100000001000000540300001c85128a6dc5838fccdcf876f17902b597ff963282d93746dce3b253c784316002f00ebc863e63029a73ca60276540c09dfc7fd43b5988000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x44}, 0xa4) r4 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r4, 0xffff) r5 = socket(0x2b, 0x4, 0x8) ftruncate(r5, 0xfffffffffffffffd) fcntl$addseals(r4, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000300)={r4, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000340)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4100000101d6df301e000000360a02000313000b0063616c6c666f7277617264696e670000"], 0x28}, 0x1, 0x0, 0x0, 0x4000820}, 0x805) r7 = syz_create_resource$futex(&(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x777) mount$9p_fd(0x0, &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltuid}]}}) write$P9_RVERSION(r9, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500100001000130400000000ffdbdf25fe80000000000000000000006000000000010000000000000000000100000000fffd00004e24000302000020000000", @ANYRES32=0x0, @ANYRES32=0xee00], 0x150}}, 0x844) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r10, &(0x7f0000000740)={0x2, 0x0, @local}, 0x16) futex(0x0, 0x3, 0x0, 0x0, r7, 0xc5fffffd) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105c02, 0x0) 17.135213846s ago: executing program 1 (id=70): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x2, 0xa, @gpa=0xffc}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xffc, 0x634}}, @nested_create_vm={0x12d, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x4, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control64=0x2028, 0x8, 0x8, 0xfffffffffffffff7}}], 0xf0}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000c29000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="b91e0a0000b806000000ba000000000f30c4e3156aca24c4c3115da10c0000000bc4c209376d0c66baf80cb85434738aef66bafc0cb000ee67670f01c50f79f80fc76d0e0f0017c744240000000000c744240297980000c7442406000000000f011424", 0x63}], 0x1, 0x18, &(0x7f0000000300), 0x0) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro64=0x2401, 0x200000, 0x80}}], 0x68}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$uac3(0x2, 0x97, &(0x7f0000000100)=ANY=[], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14.044018354s ago: executing program 1 (id=100): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@cpuset_v2_mode}, {@xattr}]}) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0xee00, 0x0) keyctl$setperm(0x5, r1, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x4000087, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc2, 0x0) r4 = fsopen(&(0x7f00000005c0)='cgroup\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$vsock_stream(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000040)=0x2f) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='name', &(0x7f0000000640)='ccnA\xf6gr\xe7lo_', 0x0) 13.232506248s ago: executing program 1 (id=101): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000280)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) syz_usb_connect$uac3(0x2, 0xb3, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3d, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x306, 0x6, 0x2, 0x50, 0x7ff, 0x9, 0x9, 0x1ff}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x1, 0xfffffffc, 0x8, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x206, 0x5, 0x7, 0xb, 0x3, 0x6, 0x2, 0x1ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x5057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0xff, 0x110, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x12}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x9, 0x5, 'H'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xff6c, 0x2, 0xa, "a36dee50"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0xc4, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xaf, 0x5, 0x6, {0x7, 0x25, 0x1, 0xc, 0xd, 0x5dad}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x7f, 0xff, 0x2, 0x20, 0xfb}, 0x2e, &(0x7f0000000480)={0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xa, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "f9494f1ca2a1441c2b2e65006556d269"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x5, 0x40, 0x1, 0x5}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2409}}]}) 12.04602366s ago: executing program 1 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './dev'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_on}], [], 0x2c}) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./dev\x00', &(0x7f0000000440), 0x80, 0x0) r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) open_tree(r1, &(0x7f0000000080)='./file2/file0\x00', 0x0) 10.576022561s ago: executing program 1 (id=129): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)=ANY=[]) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0xb375) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000140)) 10.557425243s ago: executing program 1 (id=130): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x1) r0 = openat$sysfs(0xffffff9c, &(0x7f0000004c80)='/sys/power/wake_unlock', 0x82042, 0x102) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000004cc0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0], 0xd0060) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000025c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x4, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000026c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004900)={0x20, 0x0, 0x68cc, {0x0, 0x67aa10b038eec9ed}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000048c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004b80)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}}, 0x14}}, 0x40) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004bc0)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000004c00)=[{&(0x7f0000004c40)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x101001, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x480d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x45, 0x1, 0x3, 0x1, 0x1, 0x10, {0x9, 0x21, 0x2, 0xa, 0x1, {0x22, 0xce0}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000004a80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x2, 0x1, 0x8, 0x4}, 0xf3, &(0x7f0000000080)={0x5, 0xf, 0xf3, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x0, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x101, 0xf0f, 0x4, [0x3f00, 0xcf, 0xffc000, 0x3f00, 0xff000f, 0xff3fde]}, @ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x2, 0xf00f, 0xfeff, [0xff0030, 0xffc0c0, 0xff00ff, 0x3f00]}, @generic={0x9c, 0x10, 0x9, "76f4a8ccd77f732008b5507f1e689cf8b9461ceab64ef4f5fa74a9d4a70caee2570e1fddc9ab3ca1fc3693db6415cb1ac07868d2b2ce8ac7826cf69bd11da04faf901fe6bbb4fdf034612b297bef6e4f1eddf88578366ad5c428b0551de9fdff2680705f512ac4ed4627f5dbd1af623cddd4af3f0aa6719439ac6d9143a7e72092f8ccb9065acd93bcf8ca2beb7c3ce686b7cc628ac3bc9fbd"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x3, 0x7, 0xff1a, 0x5}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x429}}, {0xa4, &(0x7f00000001c0)=@string={0xa4, 0x3, "b7488ad72501875956bc0a8973d16415882302d578897863e1b5fdb90a2870417877a4e97e803bb187f8129b7d7d13a62e7ec7a41bcc9ceeb5ea6641da7d587da5496a51403cd0148facacebf5ad63e9d992917266a59d10d5096115a82515c7ca754483e07e2b0403ded6a42e52350b03d008db3afee8b80cf2a1477a09e086850604846ddef91533261292e41f92b297086c5cfd33f7acedc3f13bccee0f21ea16"}}, {0xcb, &(0x7f0000000280)=@string={0xcb, 0x3, "51d0b87555402067cfa0407ff84804b5d0000b2a42ce27867a92ca47dfec0cacfd8b207bf6f162caa2ac78b46946e8d76cd00fad023afe01580fb819a144650b58d980abadb56b4fe94d601c3f10f7ae43acdf9b90aed5b8a6e9ca6f895b4593737a75e6801d9a3cd435ec84cb5bed980f53a4f87b9f986ac71c8cb2ef99479ce29cff88e168004222cc57555fb256e0095ee0efb79c180449c99364f0271acef7ecadd4ef4121ca8e6b89d7a32de65f2cdc163f1b112abdfae3a1f3933bf1890bf29f43fabc371f75"}}, {0xbc, &(0x7f00000047c0)=@string={0xbc, 0x3, "fae9453293e631b9746f90a7948b8d1f83d73a292cbc1afadc48e52b42b104ddd77e392fc79c073bb1f71225b81021ad7c515f48e57d3758b6a55e15df11f5b470406d00b31084741de9130b423cb68b2369ca9c1bcca2aba1da55055a4cb3d688dec99edbcf0b15d71d7f9f9dad16956f64c6db202e8bfabf7738c3e47d42519983f556d9a62b1e14bc7aae3ba64334ecc85ea5e9bd6f40eee05f187d041cf6ed883a5b9b07de4cd6a196a1c8a87d9587d9154c3a2aaf480123"}}, {0xa0, &(0x7f0000004940)=ANY=[@ANYBLOB="a003f13189e7b732a06cdbccda41f96f81c9e7a79588275be4763f26f8b17dfaf14d5530ce61d8fa58a547f79581d7f561fca4b43fb6e9e69fb2ed763f461de6776b1cb4556bc0ef584e232d7897ed68fa04980aac713e442e63aecc1b9d0e6f39a659bb718c24906d9797525aee2f9693f241aeec0ee5dbb391b49f9ad0a4b72b77c64b8d2769a9fb255d6d7e6fd45a63f173e074434cd6573ed7aa28ece314"]}, {0x5b, &(0x7f0000004a00)=@string={0x5b, 0x3, "75bc3d6246ac8b275f5b09deba91cf9d11f0b16eb42ba889b5880bfaaa498c1b5189cc5cfb790ae1614f43ef19dab3ea53aecc2ee74b85e35dba2d33ee48eabcc96acf2c8c96c76972295f5df029a3eb145ad691f94117794d"}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r5) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000004d40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x44088800}, 0xc, &(0x7f0000004d00)={&(0x7f0000002640)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x10) 10.519394177s ago: executing program 32 (id=130): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x1) r0 = openat$sysfs(0xffffff9c, &(0x7f0000004c80)='/sys/power/wake_unlock', 0x82042, 0x102) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000004cc0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0], 0xd0060) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000025c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x4, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000026c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004900)={0x20, 0x0, 0x68cc, {0x0, 0x67aa10b038eec9ed}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000048c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004b80)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}}, 0x14}}, 0x40) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004bc0)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000004c00)=[{&(0x7f0000004c40)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x101001, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x480d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x45, 0x1, 0x3, 0x1, 0x1, 0x10, {0x9, 0x21, 0x2, 0xa, 0x1, {0x22, 0xce0}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000004a80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x2, 0x1, 0x8, 0x4}, 0xf3, &(0x7f0000000080)={0x5, 0xf, 0xf3, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x0, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x101, 0xf0f, 0x4, [0x3f00, 0xcf, 0xffc000, 0x3f00, 0xff000f, 0xff3fde]}, @ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x2, 0xf00f, 0xfeff, [0xff0030, 0xffc0c0, 0xff00ff, 0x3f00]}, @generic={0x9c, 0x10, 0x9, "76f4a8ccd77f732008b5507f1e689cf8b9461ceab64ef4f5fa74a9d4a70caee2570e1fddc9ab3ca1fc3693db6415cb1ac07868d2b2ce8ac7826cf69bd11da04faf901fe6bbb4fdf034612b297bef6e4f1eddf88578366ad5c428b0551de9fdff2680705f512ac4ed4627f5dbd1af623cddd4af3f0aa6719439ac6d9143a7e72092f8ccb9065acd93bcf8ca2beb7c3ce686b7cc628ac3bc9fbd"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x3, 0x7, 0xff1a, 0x5}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x429}}, {0xa4, &(0x7f00000001c0)=@string={0xa4, 0x3, "b7488ad72501875956bc0a8973d16415882302d578897863e1b5fdb90a2870417877a4e97e803bb187f8129b7d7d13a62e7ec7a41bcc9ceeb5ea6641da7d587da5496a51403cd0148facacebf5ad63e9d992917266a59d10d5096115a82515c7ca754483e07e2b0403ded6a42e52350b03d008db3afee8b80cf2a1477a09e086850604846ddef91533261292e41f92b297086c5cfd33f7acedc3f13bccee0f21ea16"}}, {0xcb, &(0x7f0000000280)=@string={0xcb, 0x3, "51d0b87555402067cfa0407ff84804b5d0000b2a42ce27867a92ca47dfec0cacfd8b207bf6f162caa2ac78b46946e8d76cd00fad023afe01580fb819a144650b58d980abadb56b4fe94d601c3f10f7ae43acdf9b90aed5b8a6e9ca6f895b4593737a75e6801d9a3cd435ec84cb5bed980f53a4f87b9f986ac71c8cb2ef99479ce29cff88e168004222cc57555fb256e0095ee0efb79c180449c99364f0271acef7ecadd4ef4121ca8e6b89d7a32de65f2cdc163f1b112abdfae3a1f3933bf1890bf29f43fabc371f75"}}, {0xbc, &(0x7f00000047c0)=@string={0xbc, 0x3, "fae9453293e631b9746f90a7948b8d1f83d73a292cbc1afadc48e52b42b104ddd77e392fc79c073bb1f71225b81021ad7c515f48e57d3758b6a55e15df11f5b470406d00b31084741de9130b423cb68b2369ca9c1bcca2aba1da55055a4cb3d688dec99edbcf0b15d71d7f9f9dad16956f64c6db202e8bfabf7738c3e47d42519983f556d9a62b1e14bc7aae3ba64334ecc85ea5e9bd6f40eee05f187d041cf6ed883a5b9b07de4cd6a196a1c8a87d9587d9154c3a2aaf480123"}}, {0xa0, &(0x7f0000004940)=ANY=[@ANYBLOB="a003f13189e7b732a06cdbccda41f96f81c9e7a79588275be4763f26f8b17dfaf14d5530ce61d8fa58a547f79581d7f561fca4b43fb6e9e69fb2ed763f461de6776b1cb4556bc0ef584e232d7897ed68fa04980aac713e442e63aecc1b9d0e6f39a659bb718c24906d9797525aee2f9693f241aeec0ee5dbb391b49f9ad0a4b72b77c64b8d2769a9fb255d6d7e6fd45a63f173e074434cd6573ed7aa28ece314"]}, {0x5b, &(0x7f0000004a00)=@string={0x5b, 0x3, "75bc3d6246ac8b275f5b09deba91cf9d11f0b16eb42ba889b5880bfaaa498c1b5189cc5cfb790ae1614f43ef19dab3ea53aecc2ee74b85e35dba2d33ee48eabcc96acf2c8c96c76972295f5df029a3eb145ad691f94117794d"}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r5) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000004d40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x44088800}, 0xc, &(0x7f0000004d00)={&(0x7f0000002640)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x10) 7.67828802s ago: executing program 4 (id=177): r0 = inotify_init() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast2}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@remote, r1}, 0x14) inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x400017e) mknod(&(0x7f0000000540)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000580)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f00000005c0)='./file0\x00', 0x0, 0xa) 7.611988836s ago: executing program 4 (id=180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x189281) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000340)={{0x0, 0x0, 0x1, 0xaffce988836393db, 0x10000}, 0x5, 0x8, 0x400}) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x11, &(0x7f0000000040)="d6b8", 0x2) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getae={0x48, 0x1f, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d5, 0xa, 0x33}, @in=@empty, 0xffff, 0x3504}, [@iptfs_pkt_size={0x8, 0x29, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fcntl$setlease(r5, 0x400, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x10) fcntl$setlease(r7, 0x400, 0x0) 7.603671367s ago: executing program 4 (id=181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) close_range(r1, r1, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) nanosleep(&(0x7f0000000200)={0x77359400}, &(0x7f0000000240)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="0200ffff", 0x4, 0x0, 0x0, 0x2}]) 6.888285531s ago: executing program 2 (id=191): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000180)=""/8137, 0x1122000, 0x800, 0x7}, 0x20) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1f38, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x8, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, [@ms_header={0x7, 0x24, 0x1, 0x40, 0x7}]}}}}}]}}, 0x0) 6.726511337s ago: executing program 4 (id=192): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x10000}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r4, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x40000, &(0x7f0000000140)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0xb375) 6.655478935s ago: executing program 4 (id=194): openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000c40)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}, [@mirror={0x0, 0x40, 0x0, 0xb8, 'mirror\x00', {'core 2 1024 sync', 0x20, 0x3, [{0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}}, {0x20, {@ram_num={'1:', 0x0}, 0x20, '4096'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '4096'}}], ' 2 handle_errors keep_log'}}]}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_RENAME(r2, 0xc138fd05, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x40000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, @uuid={'CRP-syz', 0x0, '1\x00'}}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, 0x0) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000980)='./dm0\x00', 0x6180, r1) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f00000009c0)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000a00)="2737ec", 0x3, 0xff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0xd5) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='cpu.stat\x00', 0x0, 0x0) ioctl$DM_DEV_SET_GEOMETRY(r5, 0xc138fd0f, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 6.652649735s ago: executing program 4 (id=197): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x15, 0x85}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xd) fchdir(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2840, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0), 0x800) write(r1, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000100)='.j&#)\x00') r8 = syz_open_dev$hiddev(&(0x7f0000000000), 0xe, 0x62080) ioctl$HIDIOCGSTRING(r8, 0x81044804, &(0x7f0000000e80)={0x5, "edf2c6434c"}) 5.672049556s ago: executing program 2 (id=202): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x7e) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='f2fs\x00', 0x2008410, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000f0600000013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.868019812s ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffea5, &(0x7f00000004c0)=[{&(0x7f0000000500)="50000000300005040000000000000000000000003c0001003800010009000100676163740000000028000280180002000000000000000000020000000c00030001000000000000200000000000000000", 0x50}], 0x1}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/161, 0xa1, 0xab) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000140)={0x18, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004804}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4008000}}], 0x2, 0x810) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="340000002e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f0000001e39be"], 0x34}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f600700902"], 0x0) 3.172681783s ago: executing program 33 (id=56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='timerslack_ns\x00') lseek(r2, 0x14, 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000007c0), 0x6, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="010000800100000001000000540300001c85128a6dc5838fccdcf876f17902b597ff963282d93746dce3b253c784316002f00ebc863e63029a73ca60276540c09dfc7fd43b5988000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x44}, 0xa4) r4 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r4, 0xffff) r5 = socket(0x2b, 0x4, 0x8) ftruncate(r5, 0xfffffffffffffffd) fcntl$addseals(r4, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000300)={r4, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000340)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4100000101d6df301e000000360a02000313000b0063616c6c666f7277617264696e670000"], 0x28}, 0x1, 0x0, 0x0, 0x4000820}, 0x805) r7 = syz_create_resource$futex(&(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x777) mount$9p_fd(0x0, &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltuid}]}}) write$P9_RVERSION(r9, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500100001000130400000000ffdbdf25fe80000000000000000000006000000000010000000000000000000100000000fffd00004e24000302000020000000", @ANYRES32=0x0, @ANYRES32=0xee00], 0x150}}, 0x844) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r10, &(0x7f0000000740)={0x2, 0x0, @local}, 0x16) futex(0x0, 0x3, 0x0, 0x0, r7, 0xc5fffffd) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105c02, 0x0) 2.580016114s ago: executing program 2 (id=228): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000001300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000001340)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={@multicast2, 0x0, 0x0, 0x10, 0x0, [{@empty}]}}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x3, 0x3f6fae9b, 0x5, &(0x7f00000001c0)=""/5}) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/24, 0x18}], 0x1, 0xffffff00, 0x9) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x24) fstat(r4, &(0x7f0000000340)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001380)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xfffc, 0xffff, 0x1ff, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x28c, 0x30, 0x2, 0x8, 0x3, 0x0, 0xc}, {0x7, 0x42d7, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in6=@rand_addr=' \x01\x00', 0x4d3}, 0x0, @in6=@private1, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x7fffffe, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000001480), 0x800001d, 0x0) 2.567470095s ago: executing program 2 (id=229): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r4, &(0x7f0000000340)=""/157, 0x9d) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000400)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) writev(r3, &(0x7f0000000140), 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000040)={0x0, 0xadaf, 0x10, 0xfffffffd, 0x7f, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x43, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x4, 0x1, 0x3a7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.347042908s ago: executing program 2 (id=232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000010101014ac84ac4da64565c020000070c001980080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101301) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42c40, 0xa0) finit_module(r4, 0x0, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000080)={0x0, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549da8ffff7d34171113d806726628380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed24983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) readv(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000002c0)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x20, 0xb, 0x4, "0efc7e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="20070407000000aadbbb"], 0x0, 0x0, 0x0, 0x0}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 963.592951ms ago: executing program 5 (id=244): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@isdn={0x22, 0x3, 0x7, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="199a73b9eb2876b897c3f8dda87f1ffb60b230e29fd5a38a9f618c5262b7f43ac0dbad6a116338794e9e9450e8c1033382e010565c007f2772e33a834fdce254180f203ad70a8e24a97e84cbd25ee0ece7e3bc32a0b7596138d936e0997b96722c3d26d715", 0x65}, {&(0x7f0000000140)="0d538b25be16b35a7de662c94f342bdf287f314fda0e384deac7d2153c71de6d4b75a4d660ae5cf5d33177950cf720b36ccae382bfbe4af3837f8cf925c58e858fef19bcc17000fc034127de99504757b5f6da916afdd6009cf920c360b4a5764d18106c0a6a198795a00d6b0d8235428b24bb7613b1dc7cde017b467f2fc4bdd110a78eaf40dc185e427fb7c9d41737d49e1a0f64103eb9f425e9ca9169df639646357829eaadfa6a0442af37f043dff44bcc49fcb8c2d6d3ec578ca5299a1f43d98887cccd48686fbd1a03af1a62fbe06858144b329141a1f99372f9ff77d88b190f904a7a914011394b39547fa4b0884d71989e", 0xf5}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/776], 0x308}, 0x40080) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000004340), 0x1ff, 0xa001) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x4004550d, 0x0) listen(r2, 0x2400000) recvmmsg(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000001, 0x0) clock_gettime(0x0, &(0x7f00000042c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)=""/27, 0x1b}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000017c0)=""/54, 0x36}, {&(0x7f0000001800)=""/110, 0x6e}, {&(0x7f0000001880)=""/110, 0x6e}], 0x3, &(0x7f0000001940)}, 0x8}, {{&(0x7f0000001980)=@tipc, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/81, 0x51}, {&(0x7f0000001a80)=""/80, 0x50}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000001b40)=""/180, 0xb4}, {&(0x7f0000001c00)=""/96, 0x60}, {&(0x7f0000001c80)=""/221, 0xdd}, {&(0x7f0000001d80)=""/204, 0xcc}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/148, 0x94}, {&(0x7f0000002f80)=""/24, 0x18}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/228, 0xe4}], 0xa, &(0x7f0000004180)=""/49, 0x31}, 0x1}], 0x4, 0x40002000, &(0x7f0000004300)={r4, r5+10000000}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 905.471516ms ago: executing program 5 (id=245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7188}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffffa}]}]}}}], 0x30}, 0x4000014) (async) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7188}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffffa}]}]}}}], 0x30}, 0x4000014) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000000) (async) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_rdma(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x40020, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x4}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) (async) mount$9p_rdma(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x40020, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x4}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x3) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000002ec0)={0x2, 0x1, 0x1c, 0x5, 0x8e, &(0x7f0000002ac0)="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"}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000140)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000180)=0x2100e6d4, 0x4) write(r2, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/s/p/enable\x00', 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000001c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)=""/4094, 0xffe}, {&(0x7f0000001900)=""/190, 0xbe}, {&(0x7f00000019c0)=""/107, 0x6b}, {&(0x7f0000001a40)=""/4065, 0xfe1}, {&(0x7f0000002a40)=""/109, 0x6d}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x2, 0x40012002, 0x0) pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff}, 0x84880) write(r5, &(0x7f0000000500)="a489d2aae43b0996d3ca8d374d84f4218473a54ece63641d794141", 0xffffffffffffff9b) (async) write(r5, &(0x7f0000000500)="a489d2aae43b0996d3ca8d374d84f4218473a54ece63641d794141", 0xffffffffffffff9b) 856.221331ms ago: executing program 5 (id=246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x8, 0x1d}, {0x4, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f4c}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xf}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in6=@mcast2, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 847.259803ms ago: executing program 5 (id=247): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000001c0)='./mnt\x00') r0 = openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000) r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) read(r1, &(0x7f0000001340)=""/4096, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000002340)='./mnt\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) lchown(&(0x7f0000002400)='./dev\x00', r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/sda1\x00', 0x100081, 0xb) r3 = openat$kvm(0x0, &(0x7f0000002480), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x5) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000024c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000002600)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) mknodat$dm(0xffffffffffffff9c, 0x0, 0x6180, r5) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000002780)='./dm0\x00', 0x2, 0x0) ioctl$DM_DEV_REMOVE(0xffffffffffffffff, 0xc138fd04, 0x0) ioctl$DM_DEV_REMOVE(0xffffffffffffffff, 0xc138fd04, &(0x7f00000027c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) close_range(r4, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x0, 0xe7) fcntl$getownex(r7, 0x10, &(0x7f00000002c0)) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 792.115488ms ago: executing program 5 (id=248): openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000c40)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}, [@mirror={0x0, 0x40, 0x0, 0xb8, 'mirror\x00', {'core 2 1024 sync', 0x20, 0x3, [{0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}}, {0x20, {@ram_num={'1:', 0x0}, 0x20, '4096'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '4096'}}], ' 2 handle_errors keep_log'}}]}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_RENAME(r2, 0xc138fd05, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x40000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, @uuid={'CRP-syz', 0x0, '1\x00'}}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, 0x0) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000980)='./dm0\x00', 0x6180, r1) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f00000009c0)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000a00)="2737ec", 0x3, 0xff8) socket$igmp(0x2, 0x3, 0x2) ioctl$DM_DEV_SET_GEOMETRY(r2, 0xc138fd0f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x501040, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 791.162088ms ago: executing program 5 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001580)='./proc\x00', &(0x7f00000015c0)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000001600)='270', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000001680)='3', 0x4e) sendmsg$NFT_MSG_GETSET(r3, 0x0, 0x4000) unshare(0x40000000) sigaltstack(&(0x7f00000002c0)={&(0x7f0000000300)=""/4074, 0x80000000, 0xfea}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @mcast1, 0xba12}, 0x1c) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bae000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000001340)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}, @nested_load_code={0x12e, 0xfffffffffffffec4, {0x0, "66b819008ee0b9800000c00f3235004000000f30c40279cf1cb0b805000000b9fc0000000f01d9c744240069000000c744240204000100ff2c24410f792da225000066b8c6000f00d066baf80cb88f465f8cef66bafc0cecc7442400f7000000c7442402d8000000ff2c2466e319"}}], 0x113}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x7ff, 0x3723, 0x5, 0x3, 0x12, 0x1, 0xfffffffffffffffc, 0x9, 0x10000002, 0x8003, 0x84000001, 0x200000000, 0x0, 0x3, 0x800000008c], 0x1ffc, 0x3c4210}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000180)}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f00000014c0)={0xdf, 0x0, 0x800}) r10 = socket(0x11, 0x2, 0x0) setsockopt(r10, 0x107, 0x12, &(0x7f00000001c0)="11106e00", 0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) 244.490634ms ago: executing program 3 (id=252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000300)={r2, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000340)=0x1) close_range(r0, 0xffffffffffffffff, 0x4000000) 243.726574ms ago: executing program 3 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f000000b4c0)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001a00)='./proc\x00', &(0x7f0000001a40)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0), 0xa0402, 0x0) (async) io_setup(0x3, &(0x7f0000001b00)=0x0) io_submit(r2, 0x1fffffffffffff10, &(0x7f0000001bc0)=[&(0x7f0000010840)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000010880)=' ', 0x1, 0x4000e3}]) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) write(r0, &(0x7f00000108c0)='2', 0x1) io_pgetevents(r2, 0x1ff, 0x1, &(0x7f0000000000)=[{}], 0x0, &(0x7f0000000080)={&(0x7f0000000040)={[0x10f8]}, 0x8}) r3 = landlock_create_ruleset(&(0x7f0000010900)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x8) 176.071621ms ago: executing program 3 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000280)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x0, 0x21) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x1, @desc1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r5, 0x200000) 153.726834ms ago: executing program 3 (id=255): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f00000019c0)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000580)="580000001400010300000000000000001e000000ff0000000000000000000000000000000000000000ff00000042f51a0e00000000006051a693248b91b3250000bf00000000000000000000000000000000000000013b0d", 0x58) write$cgroup_pid(r2, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) 6.905479ms ago: executing program 3 (id=256): r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000100)='./md0\x00', 0x2, 0x0) fchdir(r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r2, 0x1000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @str='/D00#\x00'}]}]}, 0x20}], 0x1}, 0x0) write(r1, &(0x7f0000000380)='4', 0x1f) 0s ago: executing program 3 (id=257): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xd3, 0x60, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc31, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x7, 0x8, {0x7, 0x25, 0x1, 0x0, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x3, 0xcb, {0x7, 0x25, 0x1, 0x8, 0x4, 0x657a}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000401"], 0x32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.844724][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 14.844740][ T36] audit: type=1400 audit(1793826867.209:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.848784][ T36] audit: type=1400 audit(1793826867.209:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.851706][ T36] audit: type=1400 audit(1793826867.209:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2717]" dev="pipefs" ino=2717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.854704][ T36] audit: type=1400 audit(1793826867.209:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.857308][ T36] audit: type=1400 audit(1793826867.209:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 21.954928][ T36] audit: type=1400 audit(1793826874.319:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.978031][ T36] audit: type=1400 audit(1793826874.339:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.978934][ T286] cgroup: Unknown subsys name 'net' [ 22.005792][ T36] audit: type=1400 audit(1793826874.369:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.005909][ T286] cgroup: Unknown subsys name 'devices' [ 22.151444][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.157070][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.309624][ T36] audit: type=1400 audit(1793826874.669:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.332854][ T36] audit: type=1400 audit(1793826874.669:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.357657][ T36] audit: type=1400 audit(1793826874.669:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.365909][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.390146][ T36] audit: type=1400 audit(1793826874.749:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.415555][ T36] audit: type=1400 audit(1793826874.759:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.448783][ T36] audit: type=1400 audit(1793826874.809:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.449275][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.474277][ T36] audit: type=1400 audit(1793826874.809:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.317334][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.324503][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.331683][ T293] bridge_slave_0: entered allmulticast mode [ 23.337912][ T293] bridge_slave_0: entered promiscuous mode [ 23.346816][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.353890][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.361003][ T293] bridge_slave_1: entered allmulticast mode [ 23.367211][ T293] bridge_slave_1: entered promiscuous mode [ 23.386140][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.393240][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.400399][ T295] bridge_slave_0: entered allmulticast mode [ 23.406655][ T295] bridge_slave_0: entered promiscuous mode [ 23.415460][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.422572][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.429643][ T295] bridge_slave_1: entered allmulticast mode [ 23.435922][ T295] bridge_slave_1: entered promiscuous mode [ 23.461311][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.468370][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.475498][ T296] bridge_slave_0: entered allmulticast mode [ 23.481762][ T296] bridge_slave_0: entered promiscuous mode [ 23.488140][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.495207][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.502300][ T296] bridge_slave_1: entered allmulticast mode [ 23.508425][ T296] bridge_slave_1: entered promiscuous mode [ 23.552792][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.559915][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.567031][ T294] bridge_slave_0: entered allmulticast mode [ 23.573319][ T294] bridge_slave_0: entered promiscuous mode [ 23.582159][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.589190][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.596284][ T294] bridge_slave_1: entered allmulticast mode [ 23.602450][ T294] bridge_slave_1: entered promiscuous mode [ 23.691751][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.698811][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.706099][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.713132][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.748506][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.755585][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.762863][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.769893][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.778714][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.785783][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.793100][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.800137][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.812962][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.820039][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.827295][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.834340][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.855121][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.862615][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.870194][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.877377][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.884976][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.892249][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.899593][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.906988][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.925326][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.932406][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.940033][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.947085][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.985956][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.993076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.001195][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.008235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.022458][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.029533][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.037120][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.044171][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.051955][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.058972][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.069098][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.076153][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.088242][ T293] veth0_vlan: entered promiscuous mode [ 24.119342][ T293] veth1_macvtap: entered promiscuous mode [ 24.147274][ T296] veth0_vlan: entered promiscuous mode [ 24.154444][ T294] veth0_vlan: entered promiscuous mode [ 24.160852][ T295] veth0_vlan: entered promiscuous mode [ 24.182074][ T296] veth1_macvtap: entered promiscuous mode [ 24.198557][ T294] veth1_macvtap: entered promiscuous mode [ 24.208220][ T295] veth1_macvtap: entered promiscuous mode [ 24.222012][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.259221][ T313] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.289326][ T313] input: syz1 as /devices/virtual/input/input4 [ 24.348972][ T329] fuse: blksize only supported for fuseblk [ 24.559823][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.570057][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.594323][ T339] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.711359][ T309] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.720869][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 24.722311][ T309] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.734154][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 24.745271][ T309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 24.754519][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.761225][ T309] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 24.768901][ T45] usb 1-1: Product: syz [ 24.777704][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.782139][ T45] usb 1-1: Manufacturer: syz [ 24.791784][ T309] usb 3-1: config 0 descriptor?? [ 24.797423][ T45] usb 1-1: SerialNumber: syz [ 24.921935][ T347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 24.932062][ T347] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11'. [ 25.007996][ T323] FAULT_INJECTION: forcing a failure. [ 25.007996][ T323] name failslab, interval 1, probability 0, space 0, times 1 [ 25.020766][ T323] CPU: 0 UID: 0 PID: 323 Comm: syz.0.1 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 25.020801][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.020821][ T323] Call Trace: [ 25.020829][ T323] [ 25.020841][ T323] __dump_stack+0x21/0x30 [ 25.020866][ T323] dump_stack_lvl+0x140/0x1c0 [ 25.020884][ T323] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.020901][ T323] ? check_stack_object+0x81/0x150 [ 25.020918][ T323] dump_stack+0x19/0x20 [ 25.020937][ T323] should_fail_ex+0x3c2/0x510 [ 25.020954][ T323] should_failslab+0xac/0x100 [ 25.020969][ T323] __kmalloc_cache_noprof+0x41/0x470 [ 25.020998][ T323] ? memdup_user+0xb1/0x170 [ 25.021021][ T323] ? __se_sys_mount+0x15f/0x480 [ 25.021039][ T323] __se_sys_mount+0x15f/0x480 [ 25.021053][ T323] ? __x64_sys_mount+0xf0/0xf0 [ 25.021062][ T323] ? __kasan_check_write+0x18/0x20 [ 25.021076][ T323] ? fpregs_restore_userregs+0x11c/0x260 [ 25.021090][ T323] __x64_sys_mount+0xc3/0xf0 [ 25.021099][ T323] x64_sys_call+0x2021/0x2ee0 [ 25.021111][ T323] do_syscall_64+0x57/0xf0 [ 25.021130][ T323] ? clear_bhb_loop+0x50/0xa0 [ 25.021156][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.021180][ T323] RIP: 0033:0x7f1fb0d9fb19 [ 25.021198][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.021207][ T323] RSP: 002b:00007f1fb1cdb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.021228][ T323] RAX: ffffffffffffffda RBX: 00007f1fb1025fa0 RCX: 00007f1fb0d9fb19 [ 25.021236][ T323] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 25.021244][ T323] RBP: 00007f1fb0e37b70 R08: 0000200000000180 R09: 0000000000000000 [ 25.021251][ T323] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 25.021261][ T323] R13: 00007f1fb1026038 R14: 00007f1fb1025fa0 R15: 00007fff5e502d08 [ 25.021278][ T323] [ 25.025952][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 25.203174][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.217732][ T45] usb 1-1: USB disconnect, device number 2 [ 25.219283][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.230651][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.250805][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.276261][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.283866][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.291380][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.298606][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.306320][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.313581][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.324917][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.332045][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.339090][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.346213][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.354093][ T309] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 25.361338][ T309] hid-rmi 0003:06CB:81A7.0001: unbalanced collection at end of report description [ 25.370777][ T309] hid-rmi 0003:06CB:81A7.0001: parse failed [ 25.376809][ T309] hid-rmi 0003:06CB:81A7.0001: probe with driver hid-rmi failed with error -22 [ 25.409986][ T318] device-mapper: ioctl: populate_table: next target spec (offset 134) overlaps 'struct dm_ioctl' [ 25.421647][ T318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.439931][ T318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.449205][ T45] usb 3-1: USB disconnect, device number 2 [ 25.470373][ T362] device-mapper: ioctl: Unable to change name on mapped device syzb0 to one that already exists: CRP-syzb1 [ 25.482586][ T362] FAULT_INJECTION: forcing a failure. [ 25.482586][ T362] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.495787][ T362] CPU: 0 UID: 0 PID: 362 Comm: syz.1.16 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 25.495813][ T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.495824][ T362] Call Trace: [ 25.495830][ T362] [ 25.495836][ T362] __dump_stack+0x21/0x30 [ 25.495859][ T362] dump_stack_lvl+0x140/0x1c0 [ 25.495874][ T362] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.495890][ T362] ? check_stack_object+0x138/0x150 [ 25.495916][ T362] dump_stack+0x19/0x20 [ 25.495932][ T362] should_fail_ex+0x3c2/0x510 [ 25.495959][ T362] should_fail+0xf/0x20 [ 25.495975][ T362] should_fail_usercopy+0x1e/0x30 [ 25.495993][ T362] _copy_to_user+0x24/0xa0 [ 25.496014][ T362] simple_read_from_buffer+0xed/0x160 [ 25.496037][ T362] proc_fail_nth_read+0x1aa/0x220 [ 25.496060][ T362] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.496082][ T362] ? bpf_lsm_file_permission+0xd/0x20 [ 25.496103][ T362] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.496125][ T362] vfs_read+0x288/0xc70 [ 25.496149][ T362] ? __cfi_vfs_read+0x10/0x10 [ 25.496174][ T362] ? __kasan_check_write+0x18/0x20 [ 25.496208][ T362] ? mutex_lock+0x97/0x1d0 [ 25.496230][ T362] ? __cfi_mutex_lock+0x10/0x10 [ 25.496255][ T362] ksys_read+0x145/0x260 [ 25.496280][ T362] ? fdget+0x188/0x1e0 [ 25.496303][ T362] ? __cfi_ksys_read+0x10/0x10 [ 25.496327][ T362] ? __x64_sys_pwrite64+0x170/0x230 [ 25.496345][ T362] ? __kasan_check_read+0x15/0x20 [ 25.496370][ T362] __x64_sys_read+0x7f/0x90 [ 25.496395][ T362] x64_sys_call+0x2638/0x2ee0 [ 25.496415][ T362] do_syscall_64+0x57/0xf0 [ 25.496433][ T362] ? clear_bhb_loop+0x50/0xa0 [ 25.496462][ T362] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.496485][ T362] RIP: 0033:0x7f32c4b6034e [ 25.496502][ T362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 25.496517][ T362] RSP: 002b:00007f32c35f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 25.496537][ T362] RAX: ffffffffffffffda RBX: 00007f32c35f76c0 RCX: 00007f32c4b6034e [ 25.496552][ T362] RDX: 000000000000000f RSI: 00007f32c35f70a0 RDI: 0000000000000007 [ 25.496564][ T362] RBP: 00007f32c35f7090 R08: 0000000000000000 R09: 0000000000000000 [ 25.496577][ T362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.496589][ T362] R13: 00007f32c4e26038 R14: 00007f32c4e25fa0 R15: 00007ffcb2058db8 [ 25.496605][ T362] [ 25.758485][ T366] rust_binder: 364:366 got reply transaction with no transaction stack [ 25.761695][ T367] device-mapper: ioctl: Unable to change name on mapped device syzb0 to one that already exists: CRP-syzb1 [ 25.766979][ T366] rust_binder: 364:366 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1556 [ 25.796793][ T367] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18'. [ 25.796808][ T9] rust_binder: 364: undelivered TRANSACTION_ERROR: 29201 [ 25.821747][ T45] rust_binder: 369: undelivered TRANSACTION_COMPLETE [ 25.827302][ T367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=367 comm=syz.1.18 [ 25.831643][ T372] ======================================================= [ 25.831643][ T372] WARNING: The mand mount option has been deprecated and [ 25.831643][ T372] and is ignored by this kernel. Remove the mand [ 25.831643][ T372] option from the mount to silence this warning. [ 25.831643][ T372] ======================================================= [ 25.878202][ T372] 9pnet_fd: Insufficient options for proto=fd [ 25.952134][ T378] kvm: kvm [377]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x1 [ 25.972846][ T379] FAULT_INJECTION: forcing a failure. [ 25.972846][ T379] name failslab, interval 1, probability 0, space 0, times 0 [ 25.985733][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz.3.22 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 25.985766][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.985788][ T379] Call Trace: [ 25.985794][ T379] [ 25.985802][ T379] __dump_stack+0x21/0x30 [ 25.985827][ T379] dump_stack_lvl+0x140/0x1c0 [ 25.985846][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.985872][ T379] dump_stack+0x19/0x20 [ 25.985889][ T379] should_fail_ex+0x3c2/0x510 [ 25.985920][ T379] should_failslab+0xac/0x100 [ 25.985941][ T379] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 25.985970][ T379] ? __d_alloc+0x42/0x8c0 [ 25.985996][ T379] ? __kasan_record_aux_stack+0xb2/0xd0 [ 25.986020][ T379] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 25.986043][ T379] ? __call_rcu_common+0xd5/0x710 [ 25.986072][ T379] __d_alloc+0x42/0x8c0 [ 25.986097][ T379] d_alloc_parallel+0xe4/0x1370 [ 25.986124][ T379] ? avc_has_perm_noaudit+0x26b/0x360 [ 25.986145][ T379] ? __asan_memcpy+0x5a/0x80 [ 25.986169][ T379] ? selinux_inode_permission+0x3f2/0x5d0 [ 25.986193][ T379] ? __cfi_d_alloc_parallel+0x10/0x10 [ 25.986215][ T379] ? __cfi_selinux_inode_permission+0x10/0x10 [ 25.986239][ T379] ? make_vfsuid+0x4d/0xa0 [ 25.986261][ T379] ? generic_permission+0x1ec/0x590 [ 25.986278][ T379] __lookup_slow+0x150/0x420 [ 25.986296][ T379] ? __d_lookup+0x4e8/0x550 [ 25.986317][ T379] ? lookup_one_len+0x300/0x300 [ 25.986337][ T379] ? lookup_one_common+0x320/0x470 [ 25.986359][ T379] lookup_one_len+0x1a1/0x300 [ 25.986380][ T379] ? __kasan_check_write+0x18/0x20 [ 25.986407][ T379] ? __cfi_lookup_one_len+0x10/0x10 [ 25.986426][ T379] ? simple_pin_fs+0x9c/0x160 [ 25.986447][ T379] start_creating+0x173/0x310 [ 25.986464][ T379] ? debugfs_create_dir+0x20/0x470 [ 25.986480][ T379] debugfs_create_dir+0x2b/0x470 [ 25.986498][ T379] kvm_create_vm_debugfs+0x20d/0xb50 [ 25.986517][ T379] ? __mmu_notifier_register+0x364/0x6b0 [ 25.986536][ T379] ? kvm_enable_virtualization+0x150/0x150 [ 25.986556][ T379] ? __kasan_check_write+0x18/0x20 [ 25.986582][ T379] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 25.986607][ T379] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 25.986627][ T379] kvm_dev_ioctl+0xb57/0x14c0 [ 25.986645][ T379] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 25.986665][ T379] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.986683][ T379] ? security_file_ioctl+0x3e/0x110 [ 25.986706][ T379] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 25.986724][ T379] __se_sys_ioctl+0x123/0x1b0 [ 25.986743][ T379] __x64_sys_ioctl+0x7f/0xa0 [ 25.986762][ T379] x64_sys_call+0x1878/0x2ee0 [ 25.986793][ T379] do_syscall_64+0x57/0xf0 [ 25.986814][ T379] ? clear_bhb_loop+0x50/0xa0 [ 25.986841][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.986867][ T379] RIP: 0033:0x7fa00dd9fb19 [ 25.986883][ T379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.986898][ T379] RSP: 002b:00007fa00ec87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.986918][ T379] RAX: ffffffffffffffda RBX: 00007fa00e026090 RCX: 00007fa00dd9fb19 [ 25.986932][ T379] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 25.986944][ T379] RBP: 00007fa00de37b70 R08: 0000000000000000 R09: 0000000000000000 [ 25.986956][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.986967][ T379] R13: 00007fa00e026128 R14: 00007fa00e026090 R15: 00007ffee8b6cfc8 [ 25.986984][ T379] [ 26.347912][ T383] device-mapper: ioctl: Unable to change name on mapped device syzb0 to one that already exists: CRP-syzb1 [ 26.659751][ T309] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.788674][ T400] incfs: Options parsing error. -22 [ 26.794033][ T400] incfs: mount failed -22 [ 26.799403][ T400] process 'syz.3.30' launched './file1' with NULL argv: empty string added [ 26.809739][ T309] usb 1-1: Using ep0 maxpacket: 8 [ 26.816259][ T309] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.827456][ T309] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.837491][ T309] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.850385][ T309] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.856994][ T309] usb 1-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 26.866264][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.875234][ T309] usb 1-1: config 0 descriptor?? [ 27.059740][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.209749][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 27.216056][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 27.224229][ T45] usb 4-1: config 0 has no interface number 0 [ 27.232444][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 27.238094][ T36] kauditd_printk_skb: 112 callbacks suppressed [ 27.238110][ T36] audit: type=1400 audit(1793826879.599:186): avc: denied { map } for pid=405 comm="syz.1.33" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.241604][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.251188][ T36] audit: type=1400 audit(1793826879.619:187): avc: denied { create } for pid=405 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.270304][ T45] usb 4-1: Product: syz [ 27.270325][ T45] usb 4-1: Manufacturer: syz [ 27.270338][ T45] usb 4-1: SerialNumber: syz [ 27.271066][ T45] usb 4-1: config 0 descriptor?? [ 27.300369][ T309] input: HID 0518:0002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0518:0002.0002/input/input5 [ 27.311140][ T36] audit: type=1400 audit(1793826879.639:188): avc: denied { ioctl } for pid=405 comm="syz.1.33" path="socket:[3940]" dev="sockfs" ino=3940 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.353319][ T36] audit: type=1400 audit(1793826879.649:189): avc: denied { sqpoll } for pid=405 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 27.367345][ T45] smsc95xx v2.0.0 [ 27.373029][ T36] audit: type=1400 audit(1793826879.719:190): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=448 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.398123][ T36] audit: type=1400 audit(1793826879.719:191): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=448 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.398233][ T309] ezkey 0003:0518:0002.0002: input,hiddev96,hidraw0: USB HID v0.f1 Device [HID 0518:0002] on usb-dummy_hcd.0-1/input0 [ 27.426384][ T36] audit: type=1400 audit(1793826879.789:192): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=448 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.507581][ T309] usb 1-1: USB disconnect, device number 3 [ 27.573690][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=417 comm=syz.2.35 [ 27.600776][ T420] device-mapper: ioctl: Unable to change name on mapped device syzc0 to one that already exists: CRP-syzc1 [ 27.624774][ T36] audit: type=1400 audit(1793826879.989:193): avc: denied { mounton } for pid=422 comm="syz.2.37" path="/7/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 27.646908][ T36] audit: type=1400 audit(1793826879.989:194): avc: denied { mount } for pid=422 comm="syz.2.37" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.668225][ T36] audit: type=1400 audit(1793826879.999:195): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.754396][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 27.765164][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.091823][ T429] tipc: Started in network mode [ 28.096732][ T429] tipc: Node identity ea1bc7bb7466, cluster identity 4711 [ 28.104039][ T429] tipc: Enabled bearer , priority 10 [ 28.158703][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 28.169584][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 28.319773][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.471071][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 28.482154][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 28.491318][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.499305][ T31] usb 2-1: Product: syz [ 28.503510][ T31] usb 2-1: Manufacturer: syz [ 28.508115][ T31] usb 2-1: SerialNumber: syz [ 28.513592][ T433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.723666][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 28.730708][ T31] usb 2-1: too many endpoints [ 28.737927][ T31] usb 2-1: USB disconnect, device number 2 [ 28.750158][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.920283][ T427] tipc: Resetting bearer [ 28.926963][ T427] tipc: Disabling bearer [ 29.249784][ T438] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.399733][ T438] usb 1-1: Using ep0 maxpacket: 8 [ 29.405961][ T438] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 29.414410][ T438] usb 1-1: config 179 has no interface number 0 [ 29.420699][ T438] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 29.432231][ T438] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 29.443788][ T438] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 29.455113][ T438] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 29.468521][ T438] usb 1-1: config 179 interface 65 has no altsetting 0 [ 29.475440][ T438] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 29.484523][ T438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.495374][ T438] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 29.499820][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.549887][ T95] input input6: unable to receive magic message: -110 [ 29.557344][ T95] input input6: unable to receive magic message: -32 [ 29.564694][ T95] input input6: unable to receive magic message: -32 [ 29.660442][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 29.669004][ T31] usb 2-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 29.680936][ T31] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 29.690015][ T31] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 29.698394][ T438] usb 1-1: USB disconnect, device number 4 [ 29.698824][ T31] usb 2-1: Product: syz [ 29.704280][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 29.708414][ T31] usb 2-1: Manufacturer: syz [ 29.718892][ T438] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 29.727125][ T31] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 29.835660][ T436] usb 4-1: USB disconnect, device number 2 [ 29.858521][ T463] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 29.859153][ T463] @0Ù: renamed from bond_slave_1 [ 29.928442][ T459] FAULT_INJECTION: forcing a failure. [ 29.928442][ T459] name failslab, interval 1, probability 0, space 0, times 0 [ 29.968796][ T459] CPU: 0 UID: 0 PID: 459 Comm: syz.1.46 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 29.968826][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.968838][ T459] Call Trace: [ 29.968844][ T459] [ 29.968851][ T459] __dump_stack+0x21/0x30 [ 29.968874][ T459] dump_stack_lvl+0x140/0x1c0 [ 29.968888][ T459] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.968898][ T459] ? __kmalloc_cache_noprof+0x23c/0x470 [ 29.968919][ T459] ? fat_init_fs_context+0x67/0x520 [ 29.968953][ T459] dump_stack+0x19/0x20 [ 29.968969][ T459] should_fail_ex+0x3c2/0x510 [ 29.968997][ T459] should_failslab+0xac/0x100 [ 29.969011][ T459] __kmalloc_cache_noprof+0x41/0x470 [ 29.969025][ T459] ? __se_sys_fsopen+0x14d/0x390 [ 29.969043][ T459] __se_sys_fsopen+0x14d/0x390 [ 29.969055][ T459] __x64_sys_fsopen+0x5f/0x80 [ 29.969075][ T459] x64_sys_call+0x2d40/0x2ee0 [ 29.969095][ T459] do_syscall_64+0x57/0xf0 [ 29.969115][ T459] ? clear_bhb_loop+0x50/0xa0 [ 29.969140][ T459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.969155][ T459] RIP: 0033:0x7f32c4b9fb19 [ 29.969166][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.969175][ T459] RSP: 002b:00007f32c35f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 29.969187][ T459] RAX: ffffffffffffffda RBX: 00007f32c4e25fa0 RCX: 00007f32c4b9fb19 [ 29.969194][ T459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 29.969201][ T459] RBP: 00007f32c4c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 29.969209][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.969221][ T459] R13: 00007f32c4e26038 R14: 00007f32c4e25fa0 R15: 00007ffcb2058db8 [ 29.969238][ T459] [ 29.997621][ T468] SELinux: Context system_u:object_r:semanage_trans_lock_t:s0 is not valid (left unmapped). [ 30.516021][ T31] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 30.527533][ T31] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 30.538048][ T31] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 30.552698][ T31] usb 2-1: USB disconnect, device number 3 [ 30.603164][ T487] device-mapper: ioctl: Unable to change name on mapped device syzb0 to one that already exists: CRP-syzb1 [ 30.791689][ T495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63570 sclass=netlink_route_socket pid=495 comm=syz.3.60 [ 30.949737][ T436] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.110848][ T436] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 31.121315][ T436] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 31.131945][ T436] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 31.141164][ T436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.149268][ T436] usb 3-1: Product: syz [ 31.153596][ T436] usb 3-1: Manufacturer: syz [ 31.158233][ T436] usb 3-1: SerialNumber: syz [ 31.371460][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.380927][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.510696][ T512] fuse: Bad value for 'user_id' [ 31.515618][ T512] fuse: Bad value for 'user_id' [ 31.590755][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.599790][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.655512][ T436] usb 3-1: USB disconnect, device number 3 [ 31.657852][ T528] 9pnet_fd: Insufficient options for proto=fd [ 31.809751][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 31.939766][ T31] usb 2-1: device descriptor read/64, error -71 [ 32.169647][ T532] device-mapper: ioctl: Unable to change name on mapped device syzc0 to one that already exists: CRP-syzc1 [ 32.181262][ T31] usb 2-1: device descriptor read/64, error -71 [ 32.208220][ T541] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.217380][ T541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.228527][ T544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.237500][ T544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.246625][ T544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.251279][ T548] syz.3.79 (548): attempted to duplicate a private mapping with mremap. This is not supported. [ 32.255844][ T544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.274864][ T544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.283806][ T544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.292803][ T541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.301820][ T544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.77'. [ 32.429751][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 32.559782][ T31] usb 2-1: device descriptor read/64, error -71 [ 32.559782][ T438] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.710885][ T438] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 32.720860][ T438] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 32.732849][ T438] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 32.741966][ T438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.749974][ T438] usb 3-1: Product: syz [ 32.754157][ T438] usb 3-1: Manufacturer: syz [ 32.758752][ T438] usb 3-1: SerialNumber: syz [ 32.764266][ T550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.771489][ T550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.779216][ T438] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 32.790634][ T438] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 32.801398][ T438] usbserial_generic 3-1:1.0: generic converter detected [ 32.809145][ T438] usb 3-1: generic converter now attached to ttyUSB0 [ 32.822800][ T31] usb 2-1: device descriptor read/64, error -71 [ 32.929816][ T31] usb usb2-port1: attempt power cycle [ 32.979551][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 32.989020][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 32.998551][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.007982][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.018144][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.027596][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.037311][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.046721][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.056500][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.065930][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.075616][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.085023][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.094561][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.103984][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.113517][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.122927][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.132474][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.141892][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.151396][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 33.161569][ T438] usb 3-1: USB disconnect, device number 4 [ 33.168080][ T438] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 33.176342][ T438] usbserial_generic 3-1:1.0: device disconnected [ 33.269751][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 33.290723][ T31] usb 2-1: device descriptor read/8, error -71 [ 33.420789][ T31] usb 2-1: device descriptor read/8, error -71 [ 33.550787][ T568] Zero length message leads to an empty skb [ 33.664975][ T551] FAULT_INJECTION: forcing a failure. [ 33.664975][ T551] name fail_futex, interval 1, probability 0, space 0, times 1 [ 33.677873][ T31] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 33.677871][ T551] CPU: 0 UID: 0 PID: 551 Comm: syz.2.80 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 33.677899][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.677910][ T551] Call Trace: [ 33.677916][ T551] [ 33.677924][ T551] __dump_stack+0x21/0x30 [ 33.677946][ T551] dump_stack_lvl+0x140/0x1c0 [ 33.677963][ T551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.677981][ T551] dump_stack+0x19/0x20 [ 33.678001][ T551] should_fail_ex+0x3c2/0x510 [ 33.678027][ T551] should_fail+0xf/0x20 [ 33.678042][ T551] get_futex_key+0x5c4/0x940 [ 33.678060][ T551] ? __cfi_get_futex_key+0x10/0x10 [ 33.678079][ T551] futex_wake+0x150/0x950 [ 33.678108][ T551] ? __kasan_check_write+0x18/0x20 [ 33.678133][ T551] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 33.678153][ T551] ? __cfi_futex_wake+0x10/0x10 [ 33.678174][ T551] ? perf_lock_task_context+0x398/0x450 [ 33.678192][ T551] ? __perf_event_period+0x490/0x490 [ 33.678208][ T551] ? mutex_unlock+0x90/0x240 [ 33.678230][ T551] do_futex+0x37d/0x510 [ 33.678249][ T551] ? __kasan_check_read+0x15/0x20 [ 33.678272][ T551] ? __cfi_do_futex+0x10/0x10 [ 33.678290][ T551] ? __kasan_check_write+0x18/0x20 [ 33.678314][ T551] mm_release+0x15f/0x300 [ 33.678337][ T551] ? exit_mm_release+0x50/0x50 [ 33.678359][ T551] ? futex_exit_release+0x11d/0x1f0 [ 33.678378][ T551] exit_mm_release+0x29/0x50 [ 33.678400][ T551] do_exit+0x832/0x2850 [ 33.678424][ T551] ? __kasan_check_read+0x15/0x20 [ 33.678447][ T551] ? futex_wake+0x627/0x950 [ 33.678468][ T551] ? __cfi_do_exit+0x10/0x10 [ 33.678491][ T551] ? futex_wait+0x2b8/0x7c0 [ 33.678512][ T551] ? __cfi_futex_wait+0x10/0x10 [ 33.678534][ T551] ? __kasan_check_write+0x18/0x20 [ 33.678557][ T551] ? _raw_spin_lock_irq+0x93/0x120 [ 33.678574][ T551] do_group_exit+0x21f/0x2f0 [ 33.678598][ T551] ? __kasan_check_write+0x18/0x20 [ 33.678621][ T551] ? recalc_sigpending+0x16c/0x1d0 [ 33.678642][ T551] get_signal+0x134c/0x1490 [ 33.678661][ T551] arch_do_signal_or_restart+0xbc/0x700 [ 33.678681][ T551] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 33.678702][ T551] ? __kasan_check_write+0x18/0x20 [ 33.678726][ T551] syscall_exit_to_user_mode+0x57/0xb0 [ 33.678751][ T551] do_syscall_64+0x63/0xf0 [ 33.678768][ T551] ? clear_bhb_loop+0x50/0xa0 [ 33.678790][ T551] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.678813][ T551] RIP: 0033:0x7f261639fb19 [ 33.678829][ T551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.678843][ T551] RSP: 002b:00007f26172f20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.678863][ T551] RAX: fffffffffffffe00 RBX: 00007f2616626098 RCX: 00007f261639fb19 [ 33.678877][ T551] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2616626098 [ 33.678888][ T551] RBP: 00007f2616626090 R08: 0000000000000000 R09: 0000000000000000 [ 33.678899][ T551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.678910][ T551] R13: 00007f2616626128 R14: 00007fff48c70f10 R15: 00007fff48c70ff8 [ 33.678925][ T551] [ 34.003758][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 34.003773][ T36] audit: type=1326 audit(1793826886.369:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.010955][ T31] usb 2-1: device descriptor read/8, error -71 [ 34.034908][ T36] audit: type=1326 audit(1793826886.369:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.065979][ T36] audit: type=1326 audit(1793826886.369:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.091000][ T36] audit: type=1326 audit(1793826886.369:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.116025][ T36] audit: type=1326 audit(1793826886.369:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.140963][ T36] audit: type=1326 audit(1793826886.369:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.156401][ T593] overlayfs: failed to resolve './cgroup': -40 [ 34.166567][ T36] audit: type=1326 audit(1793826886.369:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.173334][ T31] usb 2-1: device descriptor read/8, error -71 [ 34.197470][ T36] audit: type=1326 audit(1793826886.369:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.232436][ T36] audit: type=1326 audit(1793826886.369:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.260712][ T36] audit: type=1326 audit(1793826886.369:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.90" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 34.301184][ T600] device-mapper: ioctl: Unable to change name on mapped device syzc0 to one that already exists: CRP-syzc1 [ 34.312954][ T600] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(14) [ 34.323314][ T600] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 34.339838][ T31] usb usb2-port1: unable to enumerate USB device [ 34.779727][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.909715][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.149711][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.409750][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.539734][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.699770][ T436] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 35.779732][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.850793][ T436] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 35.863105][ T436] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 35.872158][ T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.880169][ T436] usb 2-1: Product: syz [ 35.884339][ T436] usb 2-1: Manufacturer: syz [ 35.888903][ T436] usb 2-1: SerialNumber: syz [ 35.894086][ T31] usb usb3-port1: attempt power cycle [ 36.101147][ T614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.111291][ T614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.123475][ T436] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.130898][ T436] usb 2-1: cannot request logical cluster ID: 3 (err: -71) [ 36.138759][ T436] usb 2-1: unit 80 not found! [ 36.169767][ T436] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 36.180642][ T436] usb 2-1: USB disconnect, device number 8 [ 36.188657][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.249752][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.270742][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.400726][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.639323][ T637] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 36.639745][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.671153][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.800808][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.879760][ T309] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.922078][ T31] usb usb3-port1: unable to enumerate USB device [ 36.996711][ T641] 9pnet_fd: Insufficient options for proto=fd [ 37.029751][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 37.035921][ T309] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 37.044026][ T309] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.054131][ T309] usb 2-1: config 0 has no interface number 0 [ 37.060237][ T309] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 37.070087][ T309] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 37.080020][ T309] usb 2-1: config 0 interface 98 has no altsetting 0 [ 37.087973][ T309] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 37.097024][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.105036][ T309] usb 2-1: Product: syz [ 37.109210][ T309] usb 2-1: Manufacturer: syz [ 37.113811][ T309] usb 2-1: SerialNumber: syz [ 37.118909][ T309] usb 2-1: config 0 descriptor?? [ 37.124271][ T637] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.131492][ T637] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.339474][ T637] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.346710][ T637] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.537899][ T643] __nla_validate_parse: 26 callbacks suppressed [ 37.537918][ T643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'. [ 37.556025][ T309] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.566504][ T309] asix 2-1:0.98: probe with driver asix failed with error -71 [ 37.575825][ T309] usb 2-1: USB disconnect, device number 9 [ 37.582617][ T647] syzkaller1: entered promiscuous mode [ 37.588248][ T647] syzkaller1: entered allmulticast mode [ 37.647901][ T653] netlink: 'syz.2.117': attribute type 46 has an invalid length. [ 37.786190][ T658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=658 comm=syz.3.119 [ 37.905866][ T668] incfs: mount failed -22 [ 37.914279][ T436] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.937840][ T671] overlayfs: failed to resolve './file0/file0': -2 [ 38.070738][ T436] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.080916][ T436] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 38.089903][ T436] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 38.098941][ T436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.114022][ T691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 38.139832][ T337] bridge_slave_1: left allmulticast mode [ 38.145514][ T337] bridge_slave_1: left promiscuous mode [ 38.151317][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.160261][ T337] bridge_slave_0: left allmulticast mode [ 38.165936][ T337] bridge_slave_0: left promiscuous mode [ 38.179770][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.286927][ T693] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.294016][ T693] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.301153][ T693] bridge_slave_0: entered allmulticast mode [ 38.307511][ T693] bridge_slave_0: entered promiscuous mode [ 38.314859][ T337] veth1_macvtap: left promiscuous mode [ 38.320526][ T337] veth0_vlan: left promiscuous mode [ 38.357098][ T693] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.364228][ T693] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.371383][ T693] bridge_slave_1: entered allmulticast mode [ 38.377565][ T693] bridge_slave_1: entered promiscuous mode [ 38.395897][ T309] usb 3-1: USB disconnect, device number 9 [ 38.424436][ T693] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.431518][ T693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.438770][ T693] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.445852][ T693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.464463][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.471902][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.482083][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.489149][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.498357][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.505421][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.528102][ T693] veth0_vlan: entered promiscuous mode [ 38.539627][ T693] veth1_macvtap: entered promiscuous mode [ 38.575873][ T702] overlayfs: failed to clone lowerpath [ 38.839719][ T309] usb 5-1: new high-speed USB device number 2 using dummy_hcd                                                                                          [ 39.905840][ T36] audit: type=1400 audit(1793826892.249:275): avc: denied { open } for pid=729 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 39.929396][ T36] audit: type=1400 audit(1793826892.249:276): avc: denied { lock } for pid=729 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 39.951677][ T36] audit: type=1400 audit(1793826892.299:277): avc: denied { accept } for pid=730 comm="syz.2.142" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 syzkaller syzkaller login: [ 40.181997][ T36] audit: type=1326 audit(1793826892.549:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.2.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f261639fb19 code=0x0 [ 40.206485][ T36] audit: type=1326 audit(1793826892.549:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.2.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 40.231740][ T36] audit: type=1326 audit(1793826892.549:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.2.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 40.257076][ T36] audit: type=1326 audit(1793826892.549:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.2.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 40.282335][ T36] audit: type=1326 audit(1793826892.549:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.2.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 40.307460][ T36] audit: type=1326 audit(1793826892.549:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.2.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261639fb19 code=0x7ffc0000 [ 40.479993][ T768] netlink: 'syz.3.151': attribute type 12 has an invalid length. [ 40.657895][ T799] raw_sendmsg: syz.4.163 forgot to set AF_INET. Fix it! [ 40.665827][ T803] netlink: 'syz.3.164': attribute type 13 has an invalid length. [ 40.676280][ T803] erspan0: refused to change device tx_queue_len [ 40.918179][ T829] overlayfs: failed to resolve './file0': -40 [ 41.049868][ T840] device-mapper: ioctl: Unable to change name on mapped device syzc0 to one that already exists: CRP-syzc1 [ 41.088648][ T840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 41.478978][ T854] capability: warning: `syz.3.183' uses deprecated v2 capabilities in a way that may be insecure [ 41.628681][ T856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 42.055106][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.109761][ T906] netlink: 'syz.3.199': attribute type 12 has an invalid length. [ 42.117871][ T906] mmap: syz.3.199 (906) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.212290][ T10] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 42.221436][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.229426][ T10] usb 3-1: Product: syz [ 42.233735][ T10] usb 3-1: Manufacturer: syz [ 42.238360][ T10] usb 3-1: SerialNumber: syz [ 42.269809][ T309] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 42.420735][ T309] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 42.431670][ T309] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.444469][ T309] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.451183][ T309] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 42.460461][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.469492][ T309] usb 5-1: config 0 descriptor?? [ 42.474607][ T10] usb 3-1: cannot find UAC_HEADER [ 42.480340][ T898] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 42.481452][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.498396][ T10] usb 3-1: USB disconnect, device number 10 [ 42.507264][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.898083][ T898] random: crng reseeded on system resumption [ 43.199740][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.351235][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 43.361039][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 43.372226][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 43.381326][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.389380][ T10] usb 3-1: Product: syz [ 43.393554][ T10] usb 3-1: Manufacturer: syz [ 43.398153][ T10] usb 3-1: SerialNumber: syz [ 43.403340][ T10] usb 3-1: config 0 descriptor?? [ 43.408733][ T915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.415994][ T915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.624600][ T915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.631827][ T915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.041609][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 44.244682][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 44.261415][ T10] usb 3-1: USB disconnect, device number 11 [ 44.661402][ T956] ip6gre0: mtu less than device minimum [ 44.667027][ T956] ip6gre0: mtu less than device minimum [ 44.672638][ T956] ip6gre0: mtu less than device minimum [ 44.678204][ T956] ip6gre0: mtu less than device minimum [ 44.683803][ T956] ip6gre0: mtu less than device minimum [ 44.689358][ T956] ip6gre0: mtu less than device minimum [ 44.694946][ T956] ip6gre0: mtu less than device minimum [ 44.700541][ T956] ip6gre0: mtu less than device minimum [ 44.706098][ T956] ip6gre0: mtu less than device minimum [ 44.711681][ T956] ip6gre0: mtu less than device minimum [ 44.770457][ T961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 45.019727][ T436] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.169717][ T436] usb 3-1: Using ep0 maxpacket: 16 [ 45.175261][ T436] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 45.183804][ T436] usb 3-1: config 0 has no interfaces? [ 45.189946][ T436] usb 3-1: config 0 has no interfaces? [ 45.196083][ T436] usb 3-1: config 0 has no interfaces? [ 45.202225][ T436] usb 3-1: config 0 has no interfaces? [ 45.208337][ T436] usb 3-1: config 0 has no interfaces? [ 45.214495][ T436] usb 3-1: config 0 has no interfaces? [ 45.220710][ T436] usb 3-1: config 0 has no interfaces? [ 45.229364][ T436] usb 3-1: config 0 has no interfaces? [ 45.231772][ T36] kauditd_printk_skb: 619 callbacks suppressed [ 45.231800][ T36] audit: type=1400 audit(1793826897.589:903): avc: denied { ioctl } for pid=962 comm="syz.3.220" path="socket:[7474]" dev="sockfs" ino=7474 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.235572][ T963] fuse: Bad value for 'fd' [ 45.270799][ T436] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 45.277014][ T964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=964 comm=syz.3.220 [ 45.279870][ T436] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 45.279892][ T436] usb 3-1: Product: syz [ 45.279905][ T436] usb 3-1: Manufacturer: syz [ 45.285454][ T436] r8152-cfgselector 3-1: Unknown version 0x0000 [ 45.292441][ T964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=964 comm=syz.3.220 [ 45.300666][ T436] r8152-cfgselector 3-1: config 0 descriptor?? [ 45.305060][ T964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=964 comm=syz.3.220 [ 45.346268][ T964] netlink: 200 bytes leftover after parsing attributes in process `syz.3.220'. [ 45.540187][ T411] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 45.625072][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.632213][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.639322][ T976] bridge_slave_0: entered allmulticast mode [ 45.645806][ T976] bridge_slave_0: entered promiscuous mode [ 45.652318][ T976] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.659345][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.666509][ T976] bridge_slave_1: entered allmulticast mode [ 45.672765][ T976] bridge_slave_1: entered promiscuous mode [ 45.717201][ T976] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.724294][ T976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.731590][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.738616][ T976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.759495][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.766907][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.776296][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.783387][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.792565][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.799598][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.823369][ T976] veth0_vlan: entered promiscuous mode [ 45.834874][ T976] veth1_macvtap: entered promiscuous mode [ 45.853016][ T36] audit: type=1400 audit(1793826898.219:904): avc: denied { mount } for pid=976 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.923438][ T986] rust_binder: 985:986 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 45.932435][ T986] rust_binder: Write failure EINVAL in pid:6 [ 45.957841][ T990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.227'. [ 45.967980][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.976611][ T990] bridge_slave_0 (unregistering): left allmulticast mode [ 45.983787][ T990] bridge_slave_0 (unregistering): left promiscuous mode [ 45.990762][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.010059][ T991] device-mapper: table: 252:5: linear: Device lookup failed (-ENOENT) [ 46.018263][ T991] device-mapper: ioctl: error adding target to table [ 46.025874][ T991] device-mapper: table: 252:5: linear: Device lookup failed (-ENOENT) [ 46.034120][ T991] device-mapper: ioctl: error adding target to table [ 46.043395][ T990] device-mapper: ioctl: Unable to rename non-existent device, to LVM-syzf3 [ 46.052373][ T990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=990 comm=syz.5.227 [ 46.115917][ T36] audit: type=1400 audit(1793826898.479:905): avc: denied { read } for pid=989 comm="syz.5.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.145699][ T999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.152810][ T998] rust_binder: 997:998 failed copying into alloc: EFAULT [ 46.159990][ T998] rust_binder: 997:998 transaction call to 997:0 failed EFAULT, code 4294967295 size 112-24 line thread.rs:1117 [ 46.172268][ T436] rust_binder: 997: undelivered TRANSACTION_ERROR: 29201 [ 46.263572][ T1004] tipc: Enabling of bearer rejected, media not registered [ 46.337802][ T1007] netlink: 140 bytes leftover after parsing attributes in process `syz.2.232'. [ 46.347561][ T36] audit: type=1400 audit(1793826898.709:906): avc: denied { write } for pid=1006 comm="syz.2.232" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.430627][ T36] audit: type=1400 audit(1793826898.799:907): avc: denied { map } for pid=1008 comm="syz.5.233" path="pipe:[7727]" dev="pipefs" ino=7727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 46.453239][ T36] audit: type=1400 audit(1793826898.799:908): avc: denied { execute } for pid=1008 comm="syz.5.233" path="pipe:[7727]" dev="pipefs" ino=7727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 46.482529][ T1010] capability: warning: `syz.5.233' uses 32-bit capabilities (legacy support in use) [ 46.580716][ T1016] syz.3.236 (1016): drop_caches: 0 [ 46.599738][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.749759][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 46.755991][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 46.764363][ T31] usb 3-1: config 0 has no interface number 0 [ 46.771969][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 46.781042][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.789024][ T31] usb 3-1: Product: syz [ 46.793225][ T31] usb 3-1: Manufacturer: syz [ 46.797835][ T31] usb 3-1: SerialNumber: syz [ 46.803158][ T31] usb 3-1: config 0 descriptor?? [ 46.808924][ T31] smsc95xx v2.0.0 [ 47.138823][ T36] audit: type=1400 audit(1793826899.499:909): avc: denied { map } for pid=1023 comm="syz.3.239" path="socket:[7755]" dev="sockfs" ino=7755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.161879][ T36] audit: type=1400 audit(1793826899.499:910): avc: denied { read } for pid=1023 comm="syz.3.239" path="socket:[7755]" dev="sockfs" ino=7755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.209530][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 47.220382][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 47.286049][ T1031] FAULT_INJECTION: forcing a failure. [ 47.286049][ T1031] name failslab, interval 1, probability 0, space 0, times 0 [ 47.298723][ T1031] CPU: 0 UID: 0 PID: 1031 Comm: syz.5.242 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 47.298755][ T1031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.298767][ T1031] Call Trace: [ 47.298774][ T1031] [ 47.298782][ T1031] __dump_stack+0x21/0x30 [ 47.298803][ T1031] dump_stack_lvl+0x140/0x1c0 [ 47.298820][ T1031] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.298841][ T1031] ? string+0x283/0x2b0 [ 47.298859][ T1031] dump_stack+0x19/0x20 [ 47.298875][ T1031] should_fail_ex+0x3c2/0x510 [ 47.298892][ T1031] ? context_struct_to_string+0x45c/0xa10 [ 47.298906][ T1031] should_failslab+0xac/0x100 [ 47.298917][ T1031] __kmalloc_noprof+0x69/0x510 [ 47.298932][ T1031] ? context_struct_to_string+0x45c/0xa10 [ 47.298951][ T1031] context_struct_to_string+0x45c/0xa10 [ 47.298976][ T1031] ? string_to_context_struct+0x680/0x680 [ 47.298999][ T1031] ? sidtab_sid2str_get+0x1d7/0x360 [ 47.299024][ T1031] security_sid_to_context_core+0x340/0x5d0 [ 47.299037][ T1031] security_sid_to_context+0x2e/0x50 [ 47.299049][ T1031] avc_audit_post_callback+0x1a8/0x790 [ 47.299067][ T1031] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 47.299079][ T1031] ? audit_log_untrustedstring+0xea/0x100 [ 47.299101][ T1031] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 47.299121][ T1031] common_lsm_audit+0x1bc/0x220 [ 47.299140][ T1031] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 47.299160][ T1031] ? __cfi_common_lsm_audit+0x10/0x10 [ 47.299174][ T1031] slow_avc_audit+0x19f/0x220 [ 47.299184][ T1031] ? __cfi_slow_avc_audit+0x10/0x10 [ 47.299194][ T1031] ? avc_denied+0x113/0x180 [ 47.299204][ T1031] ? avc_perm_nonode+0x19a/0x1d0 [ 47.299215][ T1031] audit_inode_permission+0x1a0/0x280 [ 47.299234][ T1031] ? may_create+0x820/0x820 [ 47.299259][ T1031] ? selinux_inode_permission+0x3f2/0x5d0 [ 47.299298][ T1031] ? avc_has_perm_noaudit+0x21f/0x360 [ 47.299318][ T1031] selinux_inode_permission+0x4e5/0x5d0 [ 47.299340][ T1031] ? __cfi_selinux_inode_permission+0x10/0x10 [ 47.299365][ T1031] ? __kasan_check_write+0x18/0x20 [ 47.299389][ T1031] ? make_vfsuid+0x4d/0xa0 [ 47.299413][ T1031] ? generic_permission+0x1ec/0x590 [ 47.299433][ T1031] security_inode_permission+0xb0/0x150 [ 47.299453][ T1031] inode_permission+0xf3/0x4c0 [ 47.299463][ T1031] may_open+0x197/0x430 [ 47.299473][ T1031] path_openat+0x2ae5/0x35a0 [ 47.299486][ T1031] ? kasan_save_alloc_info+0x3a/0x50 [ 47.299499][ T1031] ? getname+0x1b/0x30 [ 47.299507][ T1031] ? x64_sys_call+0xe69/0x2ee0 [ 47.299526][ T1031] ? do_syscall_64+0x57/0xf0 [ 47.299546][ T1031] ? do_filp_open+0x440/0x440 [ 47.299568][ T1031] do_filp_open+0x1f2/0x440 [ 47.299589][ T1031] ? __cfi_do_filp_open+0x10/0x10 [ 47.299603][ T1031] ? alloc_fd+0x4c1/0x570 [ 47.299613][ T1031] do_sys_openat2+0x134/0x1d0 [ 47.299625][ T1031] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 47.299639][ T1031] ? do_sys_open+0x100/0x100 [ 47.299651][ T1031] __x64_sys_openat+0x13a/0x170 [ 47.299672][ T1031] x64_sys_call+0xe69/0x2ee0 [ 47.299689][ T1031] do_syscall_64+0x57/0xf0 [ 47.299705][ T1031] ? clear_bhb_loop+0x50/0xa0 [ 47.299728][ T1031] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.299748][ T1031] RIP: 0033:0x7f8e7259fb19 [ 47.299763][ T1031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.299776][ T1031] RSP: 002b:00007f8e73518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.299794][ T1031] RAX: ffffffffffffffda RBX: 00007f8e72825fa0 RCX: 00007f8e7259fb19 [ 47.299806][ T1031] RDX: 0000000000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 47.299819][ T1031] RBP: 00007f8e72637b70 R08: 0000000000000000 R09: 0000000000000000 [ 47.299830][ T1031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.299841][ T1031] R13: 00007f8e72826038 R14: 00007f8e72825fa0 R15: 00007ffc0fca7798 [ 47.299857][ T1031] [ 47.680998][ T36] audit: type=1400 audit(1793826899.649:911): avc: denied { read } for pid=1030 comm="syz.5.242" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tsid=95 tclass=chr_file permissive=1 [ 47.702295][ T36] audit: type=1400 audit(1793826900.049:912): avc: denied { open } for pid=1030 comm="syz.5.242" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.760473][ T309] usbhid 5-1:0.0: can't add hid device: -32 [ 47.766447][ T309] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 47.848834][ T1063] device-mapper: table: 252:5: linear: Device lookup failed (-ENOENT) [ 47.857077][ T1063] device-mapper: ioctl: error adding target to table [ 47.875310][ T1066] FAULT_INJECTION: forcing a failure. [ 47.875310][ T1066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.888454][ T1066] CPU: 1 UID: 0 PID: 1066 Comm: syz.5.249 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 47.888488][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.888501][ T1066] Call Trace: [ 47.888507][ T1066] [ 47.888514][ T1066] __dump_stack+0x21/0x30 [ 47.888554][ T1066] dump_stack_lvl+0x140/0x1c0 [ 47.888573][ T1066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.888594][ T1066] dump_stack+0x19/0x20 [ 47.888611][ T1066] should_fail_ex+0x3c2/0x510 [ 47.888640][ T1066] should_fail+0xf/0x20 [ 47.888656][ T1066] should_fail_usercopy+0x1e/0x30 [ 47.888675][ T1066] _copy_from_user+0x20/0xa0 [ 47.888695][ T1066] ___sys_sendmsg+0x1c7/0x370 [ 47.888722][ T1066] ? __sys_sendmsg+0x260/0x260 [ 47.888748][ T1066] ? __cfi_futex_wait+0x10/0x10 [ 47.888776][ T1066] ? __fget_files+0x2bc/0x330 [ 47.888797][ T1066] __x64_sys_sendmsg+0x1be/0x2a0 [ 47.888832][ T1066] ? fput+0x1a4/0x230 [ 47.888854][ T1066] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 47.888879][ T1066] ? __kasan_check_write+0x18/0x20 [ 47.888904][ T1066] ? fpregs_restore_userregs+0x11c/0x260 [ 47.888928][ T1066] ? switch_fpu_return+0x12/0x20 [ 47.888953][ T1066] x64_sys_call+0x2a4c/0x2ee0 [ 47.888973][ T1066] do_syscall_64+0x57/0xf0 [ 47.888993][ T1066] ? clear_bhb_loop+0x50/0xa0 [ 47.889017][ T1066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.889040][ T1066] RIP: 0033:0x7f8e7259fb19 [ 47.889058][ T1066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.889074][ T1066] RSP: 002b:00007f8e73518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.889096][ T1066] RAX: ffffffffffffffda RBX: 00007f8e72825fa0 RCX: 00007f8e7259fb19 [ 47.889112][ T1066] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000005 [ 47.889124][ T1066] RBP: 00007f8e72637b70 R08: 0000000000000000 R09: 0000000000000000 [ 47.889137][ T1066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.889149][ T1066] R13: 00007f8e72826038 R14: 00007f8e72825fa0 R15: 00007ffc0fca7798 [ 47.889165][ T1066] [ 48.036034][ T1068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 48.106931][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 48.148958][ T1075] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 48.221424][ T1079] FAULT_INJECTION: forcing a failure. [ 48.221424][ T1079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.235577][ T1079] CPU: 0 UID: 0 PID: 1079 Comm: syz.3.253 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 48.235607][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.235619][ T1079] Call Trace: [ 48.235624][ T1079] [ 48.235632][ T1079] __dump_stack+0x21/0x30 [ 48.235655][ T1079] dump_stack_lvl+0x140/0x1c0 [ 48.235672][ T1079] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.235692][ T1079] dump_stack+0x19/0x20 [ 48.235708][ T1079] should_fail_ex+0x3c2/0x510 [ 48.235736][ T1079] should_fail+0xf/0x20 [ 48.235751][ T1079] should_fail_usercopy+0x1e/0x30 [ 48.235767][ T1079] _copy_from_user+0x20/0xa0 [ 48.235786][ T1079] set_user_sigmask+0xa8/0x1c0 [ 48.235804][ T1079] ? __cfi_set_user_sigmask+0x10/0x10 [ 48.235822][ T1079] ? __kasan_check_write+0x18/0x20 [ 48.235848][ T1079] __se_sys_io_pgetevents+0x162/0x460 [ 48.235869][ T1079] ? __x64_sys_io_pgetevents+0x110/0x110 [ 48.235889][ T1079] ? __kasan_check_write+0x18/0x20 [ 48.235914][ T1079] __x64_sys_io_pgetevents+0xe9/0x110 [ 48.235934][ T1079] x64_sys_call+0x2e9c/0x2ee0 [ 48.235952][ T1079] do_syscall_64+0x57/0xf0 [ 48.235972][ T1079] ? clear_bhb_loop+0x50/0xa0 [ 48.235996][ T1079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.236019][ T1079] RIP: 0033:0x7fa00dd9fb19 [ 48.236035][ T1079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.236051][ T1079] RSP: 002b:00007fa00eca8028 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 48.236072][ T1079] RAX: ffffffffffffffda RBX: 00007fa00e025fa0 RCX: 00007fa00dd9fb19 [ 48.236086][ T1079] RDX: 0000000000000001 RSI: 00000000000001ff RDI: 00007fa00ec87000 [ 48.236098][ T1079] RBP: 00007fa00de37b70 R08: 0000000000000000 R09: 0000200000000080 [ 48.236111][ T1079] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.236124][ T1079] R13: 00007fa00e026038 R14: 00007fa00e025fa0 R15: 00007ffee8b6cfc8 [ 48.236140][ T1079] [ 48.489717][ T309] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.513098][ T1083] ./dev/sda1: Can't lookup blockdev [ 48.663117][ T309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.689706][ T309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 48.699441][ T309] usb 1-1: Dual-Role OTG device on HNP port [ 48.709509][ T309] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 48.718699][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.727517][ C0] ------------[ cut here ]------------ [ 48.732987][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 48.739708][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0 [ 48.749449][ C0] Modules linked in: [ 48.753361][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 48.764552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.774594][ C0] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 48.779977][ C0] Code: 4d 00 48 c7 c0 a0 c1 6d 86 49 c7 c0 c0 c1 6d 86 4c 0f 44 c0 48 c7 c7 60 c1 6d 86 48 c7 c6 a2 d6 1f 87 44 89 f2 e8 00 c0 46 fd <0f> 0b e9 4c ff ff ff e8 b4 d8 cb fd 49 bc 00 00 00 00 00 fc ff df [ 48.799583][ C0] RSP: 0000:ffffc90000007878 EFLAGS: 00010046 [ 48.805653][ C0] RAX: 5caa9a45823b9f00 RBX: ffff888105b0c0b0 RCX: ffffffff87c156c0 [ 48.813619][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 48.821581][ C0] RBP: ffffc900000078a0 R08: ffff8881f6c29593 R09: 1ffff1103ed852b2 [ 48.829564][ C0] R10: dffffc0000000000 R11: ffffed103ed852b3 R12: dffffc0000000000 [ 48.837527][ C0] R13: ffff888105b0c0b8 R14: 0000000000000081 R15: ffff88813cc8393a [ 48.845503][ C0] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 48.854429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.861000][ C0] CR2: 0000001b2f423ffc CR3: 000000010ff4a000 CR4: 00000000003526b0 [ 48.868967][ C0] Call Trace: [ 48.872244][ C0] [ 48.875084][ C0] hidg_set_alt+0x138/0xa70 [ 48.879593][ C0] set_config+0x80f/0xd10 [ 48.883920][ C0] composite_setup+0x18b0/0x3320 [ 48.888862][ C0] ? __kasan_check_write+0x18/0x20 [ 48.893963][ C0] configfs_composite_setup+0xc6/0x110 [ 48.899427][ C0] dummy_timer+0x2eee/0x4900 [ 48.904027][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 48.909745][ C0] ? sched_clock_cpu+0x75/0x400 [ 48.914599][ C0] ? __kasan_check_read+0x15/0x20 [ 48.919627][ C0] ? __cfi_sched_balance_trigger+0x10/0x10 [ 48.925435][ C0] ? run_posix_cpu_timers+0x2d4/0x620 [ 48.930808][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 48.935728][ C0] ? timerqueue_del+0xd7/0x130 [ 48.940500][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 48.945865][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 48.950798][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 48.955999][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 48.961103][ C0] ? read_tsc+0xd/0x20 [ 48.965167][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 48.971220][ C0] hrtimer_run_softirq+0x159/0x560 [ 48.976330][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 48.981516][ C0] handle_softirqs+0x1b0/0x5b0 [ 48.986266][ C0] __irq_exit_rcu+0x47/0xb0 [ 48.990779][ C0] irq_exit_rcu+0xd/0x30 [ 48.995042][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 49.000669][ C0] [ 49.003591][ C0] [ 49.006505][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 49.012497][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 49.018219][ C0] Code: cc cc cc cc cc cc cc b8 f6 c0 6f 56 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 99 3c 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 49.037814][ C0] RSP: 0000:ffffffff87c07da0 EFLAGS: 000002c2 [ 49.043879][ C0] RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85aac53d [ 49.051855][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000db7f4 [ 49.059813][ C0] RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df [ 49.067784][ C0] R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 [ 49.075752][ C0] R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886dd6a8 [ 49.083717][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 49.088403][ C0] default_idle+0x17/0x30 [ 49.092741][ C0] arch_cpu_idle+0xd/0x20 [ 49.097050][ C0] default_idle_call+0x3e/0x80 [ 49.101804][ C0] do_idle+0x2fc/0x570 [ 49.105868][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 49.111061][ C0] ? do_idle+0x543/0x570 [ 49.115305][ C0] cpu_startup_entry+0x47/0x60 [ 49.120066][ C0] rest_init+0x10b/0x130 [ 49.124297][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 49.129873][ C0] start_kernel+0x46a/0x4bb [ 49.134384][ C0] x86_64_start_reservations+0x2e/0x30 [ 49.139829][ C0] x86_64_start_kernel+0x6a/0x7b [ 49.144760][ C0] common_startup_64+0x13b/0x157 [ 49.149694][ C0] [ 49.152705][ C0] ---[ end trace 0000000000000000 ]--- [ 49.158192][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 49.166296][ T309] usb 1-1: can't set config #1, error -32 [ 49.366622][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 49.377514][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 49.391882][ T31] usb 3-1: USB disconnect, device number 13 [ 49.441403][ T488] usb 5-1: USB disconnect, device number 3