last executing test programs: 2m2.773018787s ago: executing program 1 (id=180): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_sset_info={0x18, 0x0, 0x101}}) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xa000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x2, 0xfc}, {0x0, 0x33331000, 0xa, 0x0, 0x1, 0x80, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0x4, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x1, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0xfd, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0xfffffffffffff000, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m2.688830056s ago: executing program 1 (id=183): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="020600000200000000000091"], 0x10}}, 0x840) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) clock_adjtime(0x6, &(0x7f0000000200)={0x0, 0x8, 0x7, 0xfffffffffffffffe, 0x100000001, 0x1, 0x9c, 0x0, 0x3, 0xff, 0x6, 0x2, 0x95, 0x19a, 0x36, 0xffffffffffffffff, 0xffffffff, 0x6, 0x4, 0x7b7, 0xdd7, 0x8, 0x7, 0x1, 0x9, 0x916}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="d006f6"], 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x1000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x40) r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xa2f, 0x1}}, @nested_vmlaunch={0x12f, 0x18}], 0x78}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, &(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) connect$tipc(r8, &(0x7f0000000380)=@id={0x1e, 0x3, 0x2, {0x4e25, 0x3}}, 0x10) r9 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4603000305090000000000000003003e00f9ffffff0401000000000000e9fcffffffffff1e1652b90280000000330d0000010038000100060007000c00"], 0x78) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000540)=0x474c, 0x4) bind$inet(r10, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f00000005c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r10, &(0x7f0000000600), 0x800001d, 0x0) setsockopt$inet_int(r10, 0x0, 0xc, &(0x7f0000000640)=0xfffffffc, 0x4) setsockopt$inet_int(r10, 0x0, 0x8, &(0x7f0000000680)=0x800fe, 0x4) recvmmsg(r10, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 2m0.837690779s ago: executing program 1 (id=202): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f00000003c0)='r:s/p ./file0:0', 0xf) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4) mknod$loop(&(0x7f00000005c0)='./file0\x00', 0xfff, 0x1) truncate(&(0x7f0000000600)='./file0\x00', 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x4, 0xe000, 0x1000, &(0x7f0000001000/0x1000)=nil}) symlink(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0\x00') r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000402f173400000000000001090224000100000011090400030103000000092108000501226103090581132000040a469391ed2de8ad152a03c2a9067127"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000007c0)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000840)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$hiddev(0x0, 0x2, 0x335802) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x200, 0x0) io_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) chmod(&(0x7f00000006c0)='./file0\x00', 0x23f) setuid(0xee01) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$FUSE_STATX(r7, &(0x7f0000000440)={0x130, 0x0, 0x0, {0x2, 0x6, 0x0, '\x00', {0x2, 0x1, 0x3, 0x7, 0x0, 0x0, 0xa000, '\x00', 0x3, 0x3, 0x0, 0x2, {0xf1, 0x2}, {0x5, 0x8000}, {0x9, 0x456546c3}, {0x83a, 0x9}, 0x8, 0x1, 0xc, 0x4}}}, 0x130) 1m59.151010784s ago: executing program 1 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000340)='./bus\x00') openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file2\x00', 0x0) 1m59.141289595s ago: executing program 1 (id=212): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@nested_load_code={0x12e, 0x4d, {0x3, "f36d660ff6a7ed8800000f20e035000002000f22e065670fc799038000000f799adf000000652626fa0fc71f0f00dc420fc738040f"}}], 0x4d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000027c0)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a00)={[0x6e, 0x0, 0x3, 0x20, 0x3, 0x2, 0x106c, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x0, 0x6, 0x0, 0x8000], 0x1, 0x2c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/image_size', 0x10b902, 0x1c8) read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x9, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peek(0x2, r7, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_dump={0x26, 0x80000000}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="14043600d3fc03fc01004788031c09100628", 0x12, 0x4, &(0x7f0000000100)={0x11, 0x17, r9, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$AUDIT_GET(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x300, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x80) r10 = openat(r3, &(0x7f0000000740)='unbind\x00', 0x1, 0x0) write(r10, &(0x7f0000000000)='cpu0\n', 0x5) 1m59.039943006s ago: executing program 1 (id=213): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000c40)={0x1f, 0x0, @any, 0x1, 0x1}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x7a092814) ptrace$pokeuser(0x6, r1, 0x358, 0xffffffeffffffffe) madvise(&(0x7f0000863000/0x3000)=nil, 0x3000, 0x17) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x24008010) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40810) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000700)=[{{&(0x7f0000000780)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac1414300939"], 0x50}}], 0x1, 0x10) recvmsg(r8, &(0x7f0000000f80)={&(0x7f0000000b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/38, 0x26}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/78, 0x4e}, {&(0x7f0000000d00)=""/76, 0x4c}, {&(0x7f0000000d80)=""/110, 0x6e}], 0x5, &(0x7f0000000e80)=""/247, 0xf7}, 0x10001) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r9, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4884) 1m43.807011317s ago: executing program 32 (id=213): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000c40)={0x1f, 0x0, @any, 0x1, 0x1}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x7a092814) ptrace$pokeuser(0x6, r1, 0x358, 0xffffffeffffffffe) madvise(&(0x7f0000863000/0x3000)=nil, 0x3000, 0x17) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x24008010) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40810) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000700)=[{{&(0x7f0000000780)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac1414300939"], 0x50}}], 0x1, 0x10) recvmsg(r8, &(0x7f0000000f80)={&(0x7f0000000b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/38, 0x26}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/78, 0x4e}, {&(0x7f0000000d00)=""/76, 0x4c}, {&(0x7f0000000d80)=""/110, 0x6e}], 0x5, &(0x7f0000000e80)=""/247, 0xf7}, 0x10001) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r9, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4884) 21.129311223s ago: executing program 4 (id=1120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) setfsuid(0x0) recvmmsg(r1, &(0x7f0000000100), 0x2, 0x0, 0x0) r2 = gettid() ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setns(0xc9, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f0000000000)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) (async) setresuid(0xee01, 0x0, 0x0) (async) setfsuid(0x0) (async) recvmmsg(r1, &(0x7f0000000100), 0x2, 0x0, 0x0) (async) gettid() (async) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) 20.996088387s ago: executing program 4 (id=1126): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740)={r0, 0x50, 0x300}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0xffff9047, 0x2, r3}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, 0xfffffffffffffffe) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740)={r0, 0x50, 0x300}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) eventfd2(0xe5c, 0x80000) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0xffff9047, 0x2, r3}) (async) 20.899545248s ago: executing program 4 (id=1127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'pim6reg1\x00', @broadcast}) 20.841353304s ago: executing program 4 (id=1128): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8948, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x18537e, 0x98) fallocate(r0, 0x0, 0x0, 0x1000f4) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8948, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) open(&(0x7f0000000040)='./bus\x00', 0x18537e, 0x98) (async) fallocate(r0, 0x0, 0x0, 0x1000f4) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) (async) 20.840917134s ago: executing program 4 (id=1129): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) r3 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000001540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r6 = inotify_init1(0x800) (async, rerun: 64) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000003580)={0x0, 0xffff, 0x0, 0x0, 0x0}) (rerun: 64) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000003600)={0x0, 0x0, 0x0}, &(0x7f0000003640)=0xc) keyctl$chown(0x4, 0x0, r9, r10) r11 = gettid() rt_sigqueueinfo(r11, 0x21, &(0x7f0000003680)={0x41, 0x2df9, 0x8}) (async, rerun: 64) fstat(r1, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003780), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000037c0)='./file0\x00', &(0x7f0000003800), 0x0, &(0x7f0000003840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r13, &(0x7f00000038c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r13, &(0x7f0000005900)={0x50, 0x0, r14, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r13, &(0x7f0000005980)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000007980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007a40)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r13, &(0x7f0000007a80)="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", 0x2000, &(0x7f0000009a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009b40)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r16, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000009bc0)={0x1000000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000009c40)=[r17], 0x1}, 0x58) (async) lstat(&(0x7f0000009c80)='./file0\x00', &(0x7f0000009cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = openat$fuse(0xffffffffffffff9c, &(0x7f0000009d40), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000009d80)='./file0\x00', &(0x7f0000009dc0), 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r20, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67728080000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r20, &(0x7f0000009e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r20, &(0x7f000000bec0)={0x50, 0x0, r21, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r20, &(0x7f000000bf40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000df40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000e000)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r20, &(0x7f000000e040)="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", 0x2000, &(0x7f0000010040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000010100)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x400000000000, 0x7fffffff, 0x58, 0xf, 0x9000, 0x9, r22, r23, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r25 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000010580)='./binderfs/binder-control\x00', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000114c0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0), 0x0, &(0x7f0000010200)=[@rights={{0x24, 0x1, 0x1, [r1, r2, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r23}}}], 0xc0, 0x40010}}, {{&(0x7f00000102c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000010540)=[{&(0x7f0000010340)="93a2c4fcd3751ba13fb1140d636bccae51c99ae9d5b4fe1f1d413bb43b50b280733ba52cceb8d0257acbc209a614de5e6796d82708070a895c5e78ed26e91c09b55651a1a44822b0d7895126c5958923035953cf07d04309c811c3", 0x5b}, {&(0x7f00000103c0)="266fda545a3d111cb67761f1335892582e88346ff0895a295ad21ea3fc867ded7e838d9f2f231527d938cf1cabf9936cb2bf38fadb18a765a9dc2429695a2093df8e18e71ed2992aaa44f6ead9a7b070e027697db8e67ee3680f2da1102bfc07a235ec9b6a8b965fb8518ee4a0990cfacc5ad870e26314ae2c7f6483d82211ad432edaea110380ecdefcb5c8a4e904b95cc2b006d7fcc3458cc14f815bdbae81c07056001fc5c4f0935d93d078c6d78f6f9c77c61d90ae49fccf0034d719651f7438d18eb42b490a2b73e28a0b64820db56abed22ad68991310f3012f8ae2a224e", 0xe1}, {&(0x7f00000104c0)="03e4a114ebfda569ca32a8e59a87287de733ba8fbb927ab6cf49d7d38f6166a1f5ff181e7cd0f72b9c8dece494d209df2340d8470f41a122addf42ea86779a6cb7639400440a7bafeb981faf57b1ac58d9909f4928641a219e97127c897175eb70324d716f1b966c1fe0358a38d810e290ff2f13", 0x74}], 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r25, @ANYRES32=r20, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r15, @ANYRES32=r19, @ANYBLOB="d7ff00"/20, @ANYRES64=r7, @ANYRES32=r1], 0x68, 0x20000080}}, {{&(0x7f0000010700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000010b40)=[{&(0x7f0000010780)="357b89014c781a8fdb7d3f7d1586c638f636a4f36e249273e5e24f88ad049108bd99287a3e80640364213519661b0111dae803b086b70d6f5e5d4c", 0x3b}, {&(0x7f00000107c0)="661d44bbf449366ad8bc93c584b987f94f601ecabc9fd2f916facc2ae216a342b38977c88cd73491bd11c74d30f6c474544e70bd320c46f9fef6ca1fda92290127608c4030b79385ebbe6280e82ba5be5bfae7ce2d281cd497cb709814cb77011763affbc0167d3a7239716a392ca895665491c5d6cc3cd58cc91da0a215ae070d86cd43b674933e61ca77e811e2c330b26e1682528abe469fd0715d78f76643d5491b1e740d8e177c7e8b86dd96062139b5041538a92fcd98cdea72d6c4814782d4aa9559de015c860dc11d97410a7536a7c67f4bbb21cf7110445d9365b1bd70a25558f8410ff70f9863fdd6", 0xed}, {&(0x7f00000108c0)="c263c90c82eb51d4a7907da0daf2863e962b4864a41e05a0702549df86ac76a2d03dcac4366783bc439a434a06a96a7dd5449ead372ccdeb0985c0a73cb0a5207e893427f86b80e5c5d11c0f860fcac66d6893be803e897af209e7a724a08aa7368852db6373933ff62754e03b1d6cb3b4", 0x71}, {&(0x7f0000010940)="9f6f8cd5071b7a694a12af22463d9d8439eb0a4f857e699755e71f4885a0f9770588044326c97c19cc5a789e27ad9da8c390f6b77e6973c20f29f80bffaeb8d62c303a9ea867c61997196211e7eca9cf044936ea67e85e7a3a42a175202dd49ce2974ba4953f187ad84990aacf5849235aee4ff9ffae09bf7341197e00bbdc07231abcced4be4a4ba76f3253fac8893c914929de226300858206bde1ad2bbb0b56958a5915b10223a58d335e783341db9e4b638893bb", 0xb6}, {&(0x7f0000010a00)="265a9ade06b954c582e09e4b1e1883c71b3030b5cb7b43a1a6505f5eee670f2feab537283b235c", 0x27}, {&(0x7f0000010a40)="e5e82af25128ec2bcbd74751966f07f697e9506733277c8ef0c47b4447259add6bfb89edd899c216bb14d22d98567269a3d0d4465d7fed5562abbd052a5b6e7dc7604dcc998d195b7397f65e2b834c81023af0e857acf55c9fffb4edce5f5616e276e1ea5beeb4e85406e67ce5ff4905d26919ffdae40f1a7a7597e769e58284a824d85398a7e2d707c9b2f3aa681e6cd76db2dfba8f87509e309c9c0098ee2db0c376971aa23671cbec173e2f91e2605b9e451bc3430db3079d16e7fe4a1f60a55daee9dd1c8827f797b240f3b4856222270024d9e726d5b63323c89bb9a0a7e99555d8135f319c9041a585", 0xec}], 0x6, &(0x7f0000010ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x1000}}, {{&(0x7f0000010f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000011340), 0x0, &(0x7f00000105c0)=[@rights={{0x20, 0x1, 0x1, [r25, 0xffffffffffffffff, r20, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r25, r20, 0xffffffffffffffff, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r24, r12, r23}}}], 0x88, 0x4}}], 0x4, 0x8000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 20.681373472s ago: executing program 4 (id=1132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) utimes(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002580)=ANY=[@ANYBLOB="120100000039e3fd8496d4aee5fc94c4d84abd82791255aa67fd5e89542fc6ffa64b420000000000000109022400010000000b090400", @ANYRES32=r0, @ANYBLOB="75a11bf6c8421721c9560091841b446c638cc74e74deca471030dc92ec09e5d2af832f58570f577fb43116bf112b30eac4000eddd00598e42384353618bd287daa3ef21478547bcebbf19cc8d44ad8eda9d235cf24c07c4f5f5da7dd0e8c24dc907273c601bfd07719d5416a991fe4d3698973a207a3c942b4848a08b25b689238161e5772508202e4cdef7f5231d0f2787e6e0c5eade0f5ddee86c74cc7652e583d448a28bf247bfbee"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x6, 0x9, &(0x7f0000000240)={{0x11, @private=0xa010101, 0x4e20, 0x0, 'lblc\x00', 0x1a, 0x2, 0x2000000}, {@private=0xa010101, 0x0, 0x0, 0x0, 0x7}}, 0x44) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f00000023c0)=[0xffffffffffffffff, 0x0]) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002400)=0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x80000, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c729b6475f93eda1e6d4c146f6f746d6f64653d30303030303030303030303030303030303031303030", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',default_permissions,blksize=0x0000000000001a00,max_read=0x0000000000000005,max_read=0x0000010000000000,uid=', @ANYRESDEC=r5, @ANYBLOB=',subj_type=b&,seclabel,\x00']) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000180)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141201, 0x0) sendfile(r0, r6, 0x0, 0x2) 20.675870652s ago: executing program 33 (id=1132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) utimes(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002580)=ANY=[@ANYBLOB="120100000039e3fd8496d4aee5fc94c4d84abd82791255aa67fd5e89542fc6ffa64b420000000000000109022400010000000b090400", @ANYRES32=r0, @ANYBLOB="75a11bf6c8421721c9560091841b446c638cc74e74deca471030dc92ec09e5d2af832f58570f577fb43116bf112b30eac4000eddd00598e42384353618bd287daa3ef21478547bcebbf19cc8d44ad8eda9d235cf24c07c4f5f5da7dd0e8c24dc907273c601bfd07719d5416a991fe4d3698973a207a3c942b4848a08b25b689238161e5772508202e4cdef7f5231d0f2787e6e0c5eade0f5ddee86c74cc7652e583d448a28bf247bfbee"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x6, 0x9, &(0x7f0000000240)={{0x11, @private=0xa010101, 0x4e20, 0x0, 'lblc\x00', 0x1a, 0x2, 0x2000000}, {@private=0xa010101, 0x0, 0x0, 0x0, 0x7}}, 0x44) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f00000023c0)=[0xffffffffffffffff, 0x0]) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002400)=0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x80000, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c729b6475f93eda1e6d4c146f6f746d6f64653d30303030303030303030303030303030303031303030", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',default_permissions,blksize=0x0000000000001a00,max_read=0x0000000000000005,max_read=0x0000010000000000,uid=', @ANYRESDEC=r5, @ANYBLOB=',subj_type=b&,seclabel,\x00']) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000180)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141201, 0x0) sendfile(r0, r6, 0x0, 0x2) 10.605963286s ago: executing program 0 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'pim6reg1\x00', @broadcast}) 9.094317592s ago: executing program 0 (id=1161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000480)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_stats={0x1d, 0x2, [0x6, 0x81]}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000500)={0x80, 0x0, 0x6}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0xfc, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000640)="0f01cb67d2a317000000f326f082855fca8765dd8d05003e0f22a62e670f01cb0f090f01c4640fc79c0000f20f09", 0x2e}], 0x1, 0x10, 0x0, 0x0) r7 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x251, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x97, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x7fff, 0x8, 0x1, {0x22, 0x2e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x32, 0x1, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x6, 0x4, 0x4b}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x53, 0x6, 0xec, 0x20, 0x7}, 0x1d, &(0x7f0000000700)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x27, 0x3, 0x0, 0xf000, 0xdbd, [0xff00cf, 0xc030, 0x0]}]}, 0x4, [{0x24, &(0x7f0000000740)=@string={0x24, 0x3, "f59da1fc95fc3c8bd723ef3b14a36ef0d84f9f09aca0860f97ce47bb5c1ba73b65c1"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc04}}, {0x54, &(0x7f00000007c0)=@string={0x54, 0x3, "18b2fb4a24984f1f5d9eb7c09597205c790646078f1e3482047b13817218947ba216e45ba40a5132162e9c1ed2b6c77cb12e11bab8ee8150512581cbcfc4e543eab3e345916f94e0bbb2d99e8583b1ca7a12"}}, {0x8b, &(0x7f0000001040)=ANY=[@ANYBLOB="8b0359b4e5ac2ec5e90205081596ade8780d8e65afb1580fbfed177c79ac4662181844e340eaee398d90210d074a44c67e736b52570ba576f5696a5eadd02d15a90b236de3e38c5edde4cfe420aed38986a796a6c8a94e3297cb3d159052a47dd45e71b66fac7fc11a8acf2790b15986648c7be2206f5ee04445894725cd2ecefbc6fa2b6da74aa32f345941dd2eead6449684d8a98e67"]}]}) syz_usb_control_io$hid(r7, &(0x7f0000000c00)={0x24, &(0x7f0000000980)={0x40, 0x7, 0xe1, {0xe1, 0xc, "ee26ec69915e56d7f79e63303fca24356dbbcc2704ae9dfdc1a69e302b41a6c43c0f665f91aec55a21bac9aed46092e6bd5549eaf75bcd65f9152e55ffe980b0f266a7de3861cc8695599271dc35c7484c3b4b2e40338cf5d70d1ca5fa42f9274de5c21b7aab1dbaa396d4754401bb08e27e844d8ab500c934744141af06a433bc166f46538a59055a8aa622c4f70ab6d37f34696910d247e4c7d7027e0842152fcfa5ee84f71edb1e6d7d3ef707f3f1ea45e8e181004a70d3da56cb4a5cbb1de236650baee668c2238d7dc206d53ffb8f3f00f6f288c8576f5b15c2c7f743"}}, &(0x7f0000000a80)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "98e3f6e367c3a80ae8babf646ab3bfd6ac4e6569d4ba8eaf5c66509d9db883d2fb72c085334d5da29a718d36a88c8bb44c02151b8a6e146d0af278549e5a29198de9d0c1becf64599564a5f24dfac1fd5582f1ac7a25676ad9a4d122a0869f3e879857626136a00579ef2495546056802ed76a79271b68293f24f02363f377b0f0ce0ca1690ade5b945c5aab23970a5b6a9a08bc71642c6b96a07bc14ee90da2820cb97cdcb6e659d52aa9ba1717ba7a9785a088a1795c5ce940a938c88e3722eab962f7c8af979ce8c2f2f5f975"}}, &(0x7f0000000c40)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "2eebd973"}, @local=@item_012={0x1, 0x2, 0x8, "9f"}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xb, 0x1, {0x22, 0xbab}}}}, &(0x7f0000000ec0)={0x2c, &(0x7f0000000c40)=ANY=[], &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)=ANY=[@ANYBLOB="2001ae0000001102fdf319f0a4c1551062e439224f5106b15a0d00eb039ac53128ab531c7db4420ffd3889ab6e84149e948a3882ea1c30546ef4a6a8e75646ce94baade05340bef7bce03b6aac75acc3df62571b5806c60fc5d62ad6fdac30567b0f8e2c9b12d218da3e404d5b64f325c7639dfe8c0b64843d4d949b42bf032b5c22f0cb4b373fa4e213911c3986c6b7dcd1512175aff2162dbd2bc5c79f46f416eaf3a039d12bf856996cb9f8b80949a965304f899cad61d06e422e6da9"], &(0x7f0000000e80)={0x20, 0x3, 0x1, 0x6}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000f00)="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", 0x118) mount(&(0x7f0000000680)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, &(0x7f0000000200)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x149000, 0x19a) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000340)={0xb, 0x6, 0x5}) syz_open_dev$hidraw(&(0x7f0000000580), 0x3ff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9.094211623s ago: executing program 2 (id=1162): setrlimit(0x9, &(0x7f0000000000)={0x0, 0x4f87}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 9.093274032s ago: executing program 3 (id=1163): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x120008c) r1 = socket(0x18, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000200)=""/8153, 0x103000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000002240)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000002280)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002300)={'lo\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip6_mr_vif\x00') bind$xdp(r2, &(0x7f0000002340)={0x2c, 0xc, r4, 0x0, 0x0}, 0x10) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="00214500002c00000000400600000a0000010a000002005023500000000100000001601003e800000000", 0x2a}], 0x1, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x0, 0x4f87}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 7.482423629s ago: executing program 2 (id=1164): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mkdir(&(0x7f0000005740)='./sys\x00', 0x1ff) r2 = inotify_init() r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000005980)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000059c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000005ac0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) timer_create(0x0, &(0x7f0000005b00)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000005780)='./sys\x00', &(0x7f00000057c0)='sysfs\x00', 0x0, 0x0) openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000005940), 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./sys/class/tty/ttyS1/console\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000005840)=ANY=[@ANYBLOB='tgam_slave_127\x00'], 0xf) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000004600)={0x80000001, 0x9000, 0x4, 0xffffffffffffffff, 0x3fd0e97d49dc68f8}) timer_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f00005ec000/0x3000)=nil, &(0x7f00000b0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00001e0000/0x4000)=nil, &(0x7f0000bc1000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00009a5000/0x2000)=nil, &(0x7f0000449000/0x4000)=nil, &(0x7f00008d0000/0x3000)=nil, &(0x7f000039a000/0x1000)=nil, &(0x7f00000ed000/0x3000)=nil, &(0x7f00000003c0)="bdcec2e5e67fbe768a1d9e2829da02f959914a0925c07606a6e6ba3163cca39e303914df1cfd85084628a2f8987628d580fa6b32f15aac6eba5dd6e9d3b069127e3eee891155f1f1c94c32644cbc02c831fa81f6bccfe06e501ede9876aafd44e40c18b862bacb6d34cda3df765336a40c327f71ca0c065f46d2f255a3f48187cd718e2850c6deece898e4174452891635ffa858aec72a716b4f419678d6d6d00929215d5855c21287174f1041c4c7", 0xaf, r4}, 0x68) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB="66643dd7e3aa0fd999dbc29a253d07b4f06d0400be3fd07db2c82fa95200adbf9b4dc4b6e9d99b9a", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 7.481942679s ago: executing program 0 (id=1165): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') fchdir(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ff}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) 7.481314479s ago: executing program 3 (id=1166): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='mqueue\x00', 0x200011, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0xfffc, 0xfffffffd, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000900)={@remote}, 0x14) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000980)={'syz_tun\x00', 0x101}) close_range(r0, 0xffffffffffffffff, 0x0) 5.771958807s ago: executing program 0 (id=1167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) (async) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x12, r2, 0xa1f50000) 5.771742377s ago: executing program 2 (id=1168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'pim6reg1\x00', @broadcast}) 5.770216507s ago: executing program 3 (id=1169): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x2, 0x81) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mlockall(0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xe440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x121000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000104010200000000000000000a00000108000540000000a605000100010000000800034000000f2b6edd751e2ffdd0f9cacc0aec6763ce566ed7a2ea97eeea1ebaeecda4702d"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x1ca}) iopl(0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000000000000200"], 0x190) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) sendfile(r0, r2, 0x0, 0x1200000000001) 3.960533695s ago: executing program 0 (id=1170): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x50d, 0x3201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0x6d, "", [{{0x9, 0x4, 0x0, 0x8c, 0x2, 0x3, 0x1, 0x1, 0x7a, {0x9, 0x21, 0x1, 0xb4, 0x1, {0x22, 0xe7e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4, 0x8}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xd, 0x2, 0x5, 0x8, 0x3}, 0x83, &(0x7f0000000080)={0x5, 0xf, 0x83, 0x6, [@generic={0x4e, 0x10, 0x3, "49179658ff8510ec4e2c4632b4937bf3f3df34289c764ed14eb5fd9c042abb7b532394037a156637be85c53e8b1ef964bec5e9e78409a00d3eaf76bdc5703e0bbde0580406538b88d2bd05"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0xb, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "357a79bdc37af80e721ed63f02b9d70b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x7, 0x1, 0xba, 0x1}]}, 0xa, [{0x4a, &(0x7f0000000140)=@string={0x4a, 0x3, "f469574be60ad40d7e135970bfa98b42cd9e7da8c49da55269db17eb0ea4e381fa57d3337737d738619a7b8b3c5b9b851db044c16cb8243d8de3a278a33d291e3360a828f67d2eb2"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40f}}, {0xe5, &(0x7f0000000300)=@string={0xe5, 0x3, "a186bfe98473c226c72d80d530059d558d15aac09bf86c1de4eca52a3d1a0d024f64bf18cf4ce4d9f0e2cb52d50660a161b5d3b7ecff18b9559b3146dc2462fcf8a307761b6f3e200f7ded5f854ba17b7c505f04bbe8567886f24e434769b8945068a9f360131b6d65e4fdeb7414353b6beb05755ba297d711ec39237d8ff7cb60046d34c1348c1aea4ddb586a88f9ea31d5769bf669ba00e78706b9ecdacf35946f897d7df2c1a7e400802d9c813b02687b3315f8f98712f3ee80ef137b14c86b4c75005fedfdcafeaae60842b81eb8c5a537f6e834576781d168bda7275c210924f5"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x485c}}, {0xc2, &(0x7f0000000600)=@string={0xc2, 0x3, "ac9f862ae67d387ad746e006e7853e87db8775d2d8aee6ed3f5c311c4e787c3a06ff6c59968af3d6e935bbb4021f0e3a8e8f3aeabe7bfae236d2ee7190874b7cb91db6ffe520c3be80d120b48610bed0508db1c73ea51f6a3b8bcb7d560ff74353e4f011f3eed4c49df94405bdbf0be4fd16f5179583cc1bbc713952c05a654fc43b45891be0b2fa78d3f34dbc3c9f0f2b141939926e76d5ae156f83f4d9462275a43a88f02d95b680f753e2ee34cde4253efce1dd574f6719aa110f4058cfdd"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41a}}, {0x98, &(0x7f0000000880)=@string={0x98, 0x3, "2866e965250e36da67ba8e78a3f47b608e5eba7e7d43bea4360caea1e92b11fd1fb85a1976c4baf996fe30889101543b841b8c9dc1756ea7db260e5c8907e8c8aa8e09dd69882bb2df9ba627c4bda4e45eafac23e3d944638dbee652c96e39b4054fc6b05372689ae7e5d3e68f5c06e5ff756ed732781b72dd6361b824006932979a8705792e6c39d75d5ab31331a84511550dcfa854"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x41d}}]}) (async, rerun: 64) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="200906"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000004c0)={0x0, 0x16, 0xfffffffffffffe6b, "6f21c914713120c3a8fd8c78a159329bc6f24a8fe68ecdf1d829db0652cb8054e69a84bf2ba9c01e8a07e6adafe275df4f03649c4ca40013cfe1f2def3b1402ad7cb57165e33d95e851ed2841ea15615e6b17a155107d082c3206e853c8f81e10b314f37689b7dd52d5fec5e3fc0627a6d41f3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x4f, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x1c}}) 3.960322985s ago: executing program 2 (id=1171): linkat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/file0\x00', 0x1400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000300)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0xfc, "2af0224a920000ffffffffffffff0000004600"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x13) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f00000002c0)=[0xff]) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000240)={0xff84, 0xcc, 0xa58, 0x1ff, 0x7, "db2d416f08000000000001000020cef0d200"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x6f) close_range(r3, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010056, 0x0, 0xfa}]}) 3.959428135s ago: executing program 3 (id=1172): mount(0x0, &(0x7f0000000c00)='./trace\x00', &(0x7f0000000c40)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x1) openat(r0, &(0x7f0000000c80)='./trace\x00', 0x8001b, 0x15a) (async) r1 = openat(r0, &(0x7f0000000c80)='./trace\x00', 0x8001b, 0x15a) renameat2(r1, &(0x7f0000000040)='./trace\x00', r0, &(0x7f0000000080)='./file0\x00', 0x5) (async) renameat2(r1, &(0x7f0000000040)='./trace\x00', r0, &(0x7f0000000080)='./file0\x00', 0x5) lseek(r1, 0xffff, 0x0) 1.969362164s ago: executing program 2 (id=1173): setrlimit(0x9, &(0x7f0000000000)={0x0, 0x4f87}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 1.969025293s ago: executing program 3 (id=1174): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x7d}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600010a000000000c0000000c00008008"], 0x20}}, 0x40816) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x28) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000300)={0xa, "89905c2eb6be97e4e59e8fe99409c389561a0bb288c90a01190ad4eb0458b8b72eb3fcd804edd32d48bab2717c05acbee3610c74916c7896fddb1739fac5bc80"}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x28, 0x67, 0x0, 0xfd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557ded5995abd8c2dd746ed1b8e7"}}, 0x32) setrlimit(0x9, &(0x7f0000000000)={0x2, 0x4f88}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$vsock(r4, 0x28, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x10) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 1.091899ms ago: executing program 0 (id=1175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYBLOB="4a7b39fc4d2d2408664021b23ff7e9c60db5858590d00cb07a3610e49aeeca1bfc34d36f8c7874e6c55b0a2e7092637b524d80814d7f96e7ce40f3900ab57dc9a9365ffb579b365a931d0ec0bf29322908390ff67264365fa2864a50e048e7ccb820aefa49bcc197c7e6d6d6e3c2e25806c6d83b9534d2510e96ff9b2c4194fc74ff950f3d462b6d54", @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x1d9) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='add', 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="89edee2c78dadd", 0x7}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=ANY=[@ANYRESHEX=r4], 0x1c}], 0x1, 0x0, 0x0, 0x4000840}, 0x4000001) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f00000004c0), 0xfffffecc) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x8) shutdown(r6, 0x0) connect$unix(r5, &(0x7f0000000540)=@file={0x1, './sys\x00'}, 0x6e) r8 = open(&(0x7f0000000340)='./bus\x00', 0x4ca7e, 0x10) write$binfmt_script(r8, &(0x7f0000000040)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [{0x20, '+'}, {0x20, '+'}, {0x20, '\x00'}]}, 0x14) sendfile(r8, r8, 0x0, 0x40000000800) socket$inet_udp(0x2, 0x2, 0x0) 325.36µs ago: executing program 2 (id=1176): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') fchdir(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa4}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) 0s ago: executing program 3 (id=1177): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='mqueue\x00', 0x200011, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0xfffc, 0xfffffffd, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000900)={@remote}, 0x14) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000980)={'syz_tun\x00', 0x101}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 81.508475][ T9] usb 1-1: device descriptor read/64, error -71 [ 81.748486][ T9] usb 1-1: device descriptor read/64, error -71 [ 81.988432][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 82.118438][ T9] usb 1-1: device descriptor read/64, error -71 [ 82.288460][ T2022] Bluetooth: hci0: command 0x1003 tx timeout [ 82.288481][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.309940][ T2051] input: syz0 as /devices/virtual/input/input13 [ 82.329775][ T2053] netlink: 84 bytes leftover after parsing attributes in process `syz.3.566'. [ 82.358504][ T9] usb 1-1: device descriptor read/64, error -71 [ 82.448445][ T1500] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 82.448883][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 82.478512][ T9] usb usb1-port1: attempt power cycle [ 82.708453][ T469] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 82.818442][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 82.839400][ T9] usb 1-1: device descriptor read/8, error -71 [ 82.859465][ T469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.870603][ T469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.880424][ T469] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 82.889617][ T469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.898087][ T469] usb 5-1: config 0 descriptor?? [ 82.969365][ T9] usb 1-1: device descriptor read/8, error -71 [ 83.045603][ T2065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.054563][ T2065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.208414][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 83.229352][ T9] usb 1-1: device descriptor read/8, error -71 [ 83.278419][ T917] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 83.359390][ T9] usb 1-1: device descriptor read/8, error -71 [ 83.379848][ T469] usbhid 5-1:0.0: can't add hid device: -71 [ 83.385852][ T469] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 83.394523][ T469] usb 5-1: USB disconnect, device number 19 [ 83.428433][ T917] usb 4-1: Using ep0 maxpacket: 32 [ 83.435871][ T917] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 83.445155][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.453230][ T917] usb 4-1: Product: syz [ 83.457498][ T917] usb 4-1: Manufacturer: syz [ 83.462152][ T917] usb 4-1: SerialNumber: syz [ 83.468559][ T9] usb usb1-port1: unable to enumerate USB device [ 83.671112][ T917] usb 4-1: MIDIStreaming interface descriptor not found [ 83.680529][ T917] usb 4-1: USB disconnect, device number 31 [ 83.913933][ T2072] kvm: pic: single mode not supported [ 83.914487][ T2072] kvm: pic: single mode not supported [ 83.919945][ T2072] kvm: pic: level sensitive irq not supported [ 83.925569][ T2072] kvm: pic: single mode not supported [ 84.076294][ T36] audit: type=1400 audit(1793826326.139:1442): avc: denied { write } for pid=2079 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.116835][ T36] audit: type=1400 audit(1793826326.179:1443): avc: denied { remount } for pid=2083 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.157612][ T36] audit: type=1400 audit(1793826326.219:1444): avc: denied { read } for pid=2089 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.201591][ T36] audit: type=1400 audit(1793826326.269:1445): avc: denied { write } for pid=2087 comm="syz.4.579" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 84.303553][ T2103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.453259][ T2115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 84.528638][ T917] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 84.688893][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 84.695397][ T917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 84.709975][ T2123] sit0: entered promiscuous mode [ 84.715637][ T917] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 84.728197][ T2123] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 84.736055][ T2123] netlink: 1 bytes leftover after parsing attributes in process `syz.2.590'. [ 84.746154][ T917] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 84.755576][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.763743][ T917] usb 1-1: Product: syz [ 84.768061][ T917] usb 1-1: Manufacturer: syz [ 84.773131][ T917] usb 1-1: SerialNumber: syz [ 84.979673][ T917] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 84.988518][ T917] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 85.263440][ T2129] 9pnet_fd: Insufficient options for proto=fd [ 85.269651][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 85.286507][ T2132] ./dev/sda1: Can't lookup blockdev [ 85.292875][ T36] audit: type=1326 audit(1793826327.359:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2131 comm="syz.2.593" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a2919fb19 code=0x0 [ 85.391304][ T917] usb 1-1: 2:1 : can't get Cluster Descriptor [ 85.428450][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 85.434721][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.442965][ T9] usb 5-1: config 0 has no interface number 0 [ 85.449202][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 85.457292][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.469983][ T36] audit: type=1400 audit(1793826327.539:1447): avc: denied { mounton } for pid=2135 comm="syz.3.595" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 85.470109][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.499549][ T9] usb 5-1: Product: syz [ 85.503742][ T9] usb 5-1: Manufacturer: syz [ 85.508477][ T9] usb 5-1: SerialNumber: syz [ 85.513737][ T9] usb 5-1: config 0 descriptor?? [ 85.519494][ T9] smsc75xx v1.0.0 [ 85.568184][ T36] audit: type=1400 audit(1793826327.629:1448): avc: denied { mounton } for pid=2141 comm="syz.3.596" path="/proc/421/cgroup" dev="proc" ino=19474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 85.595099][ T36] audit: type=1400 audit(1793826327.659:1449): avc: denied { lock } for pid=2109 comm="syz.0.586" path="socket:[19477]" dev="sockfs" ino=19477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 85.596034][ T2110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.660338][ T2110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.686058][ T917] usb 1-1: USB disconnect, device number 47 [ 85.718051][ T36] audit: type=1400 audit(1793826327.779:1450): avc: denied { ioctl } for pid=2146 comm="syz.3.598" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 85.920695][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 85.931720][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 85.941480][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 85.951832][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 86.144384][ T2127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.160972][ T2127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.177369][ T9] usb 5-1: USB disconnect, device number 20 [ 86.207384][ T2168] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 86.215200][ T2168] netlink: 17 bytes leftover after parsing attributes in process `syz.2.605'. [ 86.230988][ T36] audit: type=1400 audit(1793826328.299:1451): avc: denied { create } for pid=2170 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.250547][ T36] audit: type=1400 audit(1793826328.299:1452): avc: denied { create } for pid=2170 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 86.278232][ T2177] devtmpfs: Unknown parameter 'rootcontextó nª¥mµÆŸŸ¬–2vòaÌ' [ 86.438432][ T917] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 86.557656][ T2193] can: request_module (can-proto-6) failed. [ 86.565983][ T36] audit: type=1400 audit(1793826328.629:1453): avc: denied { create } for pid=2192 comm="syz.3.615" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.586677][ T36] audit: type=1400 audit(1793826328.629:1454): avc: denied { read append } for pid=2192 comm="syz.3.615" name="file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.594252][ T917] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 86.611256][ T36] audit: type=1400 audit(1793826328.629:1455): avc: denied { open } for pid=2192 comm="syz.3.615" path="/140/file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.621639][ T917] usb 1-1: config 1 interface 0 has no altsetting 0 [ 86.670199][ T917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.679410][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.703433][ T917] usb 1-1: Product: syz [ 86.707645][ T917] usb 1-1: Manufacturer: syz [ 86.712411][ T917] usb 1-1: SerialNumber: syz [ 86.726137][ T2166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.773522][ T2209] input: syz1 as /devices/virtual/input/input14 [ 86.944646][ T917] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8 [ 86.958204][ T917] usb 1-1: USB disconnect, device number 48 [ 86.965355][ T917] usblp0: removed [ 86.978432][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 87.129527][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.140518][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.151943][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.161830][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.175746][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.184871][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.193177][ T9] usb 4-1: Manufacturer: syz [ 87.198251][ T9] usb 4-1: config 0 descriptor?? [ 87.474643][ T2222] netlink: 216 bytes leftover after parsing attributes in process `syz.0.621'. [ 87.486096][ T2222] device-mapper: table: 252:2: cache: unknown target type [ 87.493367][ T2222] device-mapper: ioctl: error adding target to table [ 87.605001][ T9] appleir 0003:05AC:8243.0009: item fetching failed at offset 0/1 [ 87.613239][ T9] appleir 0003:05AC:8243.0009: parse failed [ 87.619231][ T9] appleir 0003:05AC:8243.0009: probe with driver appleir failed with error -22 [ 87.738433][ T469] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 87.806892][ T9] usb 4-1: USB disconnect, device number 32 [ 87.890177][ T469] usb 1-1: too many endpoints for config 1 interface 0 altsetting 17: 65, using maximum allowed: 30 [ 87.901155][ T469] usb 1-1: config 1 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 87.914493][ T469] usb 1-1: config 1 interface 0 has no altsetting 0 [ 87.923009][ T469] usb 1-1: string descriptor 0 read error: -22 [ 87.929371][ T469] usb 1-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.40 [ 87.938460][ T469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.148575][ T2225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.157132][ T2225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.322760][ T2242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2242 comm=syz.3.627 [ 88.419782][ T469] thrustmaster 0003:044F:B300.000A: unknown main item tag 0x2 [ 88.431375][ T469] thrustmaster 0003:044F:B300.000A: unexpected long global item [ 88.448237][ T469] thrustmaster 0003:044F:B300.000A: parse failed [ 88.459620][ T2250] device-mapper: ioctl: Unable to rename non-existent device, to LVM-syze0 [ 88.468478][ T469] thrustmaster 0003:044F:B300.000A: probe with driver thrustmaster failed with error -22 [ 88.497389][ T2254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 88.556103][ T2256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.633'. [ 88.578419][ T9] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 88.629531][ T469] usb 1-1: USB disconnect, device number 49 [ 88.639995][ T2265] ./dev/sda1: Can't lookup blockdev [ 88.799532][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 4 [ 88.810570][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023 [ 88.823012][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 88.832210][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.840305][ T9] usb 4-1: Product: syz [ 88.844770][ T9] usb 4-1: Manufacturer: syz [ 88.849438][ T9] usb 4-1: SerialNumber: syz [ 89.141271][ T2271] FAULT_INJECTION: forcing a failure. [ 89.141271][ T2271] name failslab, interval 1, probability 0, space 0, times 0 [ 89.154145][ T2271] CPU: 0 UID: 0 PID: 2271 Comm: syz.0.638 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 89.154165][ T2271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.154183][ T2271] Call Trace: [ 89.154189][ T2271] [ 89.154194][ T2271] __dump_stack+0x21/0x30 [ 89.154209][ T2271] dump_stack_lvl+0x140/0x1c0 [ 89.154219][ T2271] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.154230][ T2271] ? release_sock+0x171/0x1f0 [ 89.154241][ T2271] dump_stack+0x19/0x20 [ 89.154264][ T2271] should_fail_ex+0x3c2/0x510 [ 89.154280][ T2271] should_failslab+0xac/0x100 [ 89.154291][ T2271] kmem_cache_alloc_node_noprof+0x45/0x420 [ 89.154306][ T2271] ? netlink_data_ready+0x20/0x20 [ 89.154320][ T2271] ? __alloc_skb+0x10c/0x360 [ 89.154343][ T2271] __alloc_skb+0x10c/0x360 [ 89.154355][ T2271] netlink_alloc_large_skb+0xf7/0x1b0 [ 89.154367][ T2271] netlink_sendmsg+0x576/0xad0 [ 89.154381][ T2271] ? __cfi_netlink_sendmsg+0x10/0x10 [ 89.154394][ T2271] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 89.154404][ T2271] ? security_socket_sendmsg+0x3d/0x100 [ 89.154417][ T2271] ____sys_sendmsg+0x99e/0xa00 [ 89.154432][ T2271] ? __import_iovec+0x5b9/0x7d0 [ 89.154444][ T2271] ? __sys_sendmsg_sock+0x50/0x50 [ 89.154457][ T2271] ? import_iovec+0x80/0xb0 [ 89.154469][ T2271] ___sys_sendmsg+0x2a6/0x370 [ 89.154482][ T2271] ? __sys_sendmsg+0x260/0x260 [ 89.154495][ T2271] ? proc_fail_nth_write+0x184/0x220 [ 89.154515][ T2271] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 89.154529][ T2271] ? __fget_files+0x2bc/0x330 [ 89.154541][ T2271] __x64_sys_sendmsg+0x1be/0x2a0 [ 89.154554][ T2271] ? fput+0x1a4/0x230 [ 89.154565][ T2271] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 89.154579][ T2271] ? ksys_write+0x1f3/0x260 [ 89.154588][ T2271] ? __kasan_check_read+0x15/0x20 [ 89.154603][ T2271] x64_sys_call+0x2a4c/0x2ee0 [ 89.154614][ T2271] do_syscall_64+0x57/0xf0 [ 89.154625][ T2271] ? clear_bhb_loop+0x50/0xa0 [ 89.154640][ T2271] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.154653][ T2271] RIP: 0033:0x7fba1739fb19 [ 89.154663][ T2271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.154672][ T2271] RSP: 002b:00007fba182a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.154684][ T2271] RAX: ffffffffffffffda RBX: 00007fba17625fa0 RCX: 00007fba1739fb19 [ 89.154692][ T2271] RDX: 0000000000004080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 89.154699][ T2271] RBP: 00007fba182a0090 R08: 0000000000000000 R09: 0000000000000000 [ 89.154706][ T2271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.154712][ T2271] R13: 00007fba17626038 R14: 00007fba17625fa0 R15: 00007fff1fd14528 [ 89.154720][ T2271] [ 89.520390][ T2244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.528963][ T2244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.768406][ T917] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 89.929379][ T917] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 61, changing to 7 [ 89.940472][ T917] usb 5-1: config 1 interface 2 altsetting 129 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 89.951869][ T917] usb 5-1: config 1 interface 2 has no altsetting 1 [ 89.959863][ T917] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 89.969661][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.977690][ T917] usb 5-1: Product: syz [ 89.982001][ T917] usb 5-1: Manufacturer: syz [ 89.986678][ T917] usb 5-1: SerialNumber: syz [ 90.194958][ T917] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 90.204777][ T917] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 90.215786][ T917] usb 5-1: USB disconnect, device number 21 [ 90.223917][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.848499][ T981] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.851895][ T2310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.652'. [ 90.864958][ T2310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.652'. [ 91.394858][ T9] usb 4-1: Can't get UAC3 power state for id 10 [ 91.405344][ T9] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 91.413950][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.424727][ T9] usb 4-1: USB disconnect, device number 33 [ 91.433808][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.488692][ T917] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 91.640668][ T917] usb 1-1: Using ep0 maxpacket: 32 [ 91.650431][ T917] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 91.665204][ T917] usb 1-1: config 0 has no interface number 0 [ 91.675543][ T917] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.684718][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.692904][ T917] usb 1-1: Product: syz [ 91.697279][ T917] usb 1-1: Manufacturer: syz [ 91.701898][ T917] usb 1-1: SerialNumber: syz [ 91.707066][ T917] usb 1-1: config 0 descriptor?? [ 91.712803][ T917] smsc95xx v2.0.0 [ 91.728667][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 91.879359][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.889635][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.902697][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 91.911946][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.922132][ T9] net1080 4-1:1.0: probe with driver net1080 failed with error -22 [ 92.120806][ T917] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 92.134714][ T9] usb 4-1: USB disconnect, device number 34 [ 92.141052][ T917] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.181968][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 92.181986][ T36] audit: type=1400 audit(1793826334.249:1463): avc: denied { create } for pid=2331 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 92.209108][ T36] audit: type=1400 audit(1793826334.279:1464): avc: denied { execmem } for pid=2338 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.258681][ T2343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15031 sclass=netlink_route_socket pid=2343 comm=syz.2.664 [ 92.318805][ T36] audit: type=1400 audit(1793826334.389:1465): avc: denied { nlmsg_read } for pid=2353 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 92.363213][ T2358] netlink: 'syz.2.671': attribute type 3 has an invalid length. [ 92.706541][ T36] audit: type=1400 audit(1793826334.769:1466): avc: denied { write } for pid=2364 comm="syz.3.674" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 92.706596][ T2365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=2365 comm=syz.3.674 [ 92.774432][ T36] audit: type=1400 audit(1793826334.839:1467): avc: denied { mount } for pid=2364 comm="syz.3.674" name="/" dev="ramfs" ino=20514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.848432][ T1500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.848461][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 92.890043][ T36] audit: type=1400 audit(1793826334.959:1468): avc: denied { create } for pid=2372 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.915048][ T36] audit: type=1400 audit(1793826334.979:1469): avc: denied { write } for pid=2372 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.937007][ T36] audit: type=1400 audit(1793826334.979:1470): avc: denied { nlmsg_write } for pid=2372 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.969953][ T36] audit: type=1400 audit(1793826335.039:1471): avc: denied { mounton } for pid=2385 comm="syz.2.680" path="/323/file0" dev="tmpfs" ino=1824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.970726][ T2386] 9pnet_fd: Insufficient options for proto=fd [ 93.323823][ T2396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2396 comm=syz.3.684 [ 93.988420][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 94.139407][ T9] usb 5-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 94.149736][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 94.160611][ T9] usb 5-1: string descriptor 0 read error: -22 [ 94.170670][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.40 [ 94.185066][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.217869][ T36] audit: type=1400 audit(1793826336.279:1472): avc: denied { map } for pid=2321 comm="syz.0.656" path="/122/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.418430][ T469] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 94.569413][ T469] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.580580][ T469] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 94.591502][ T469] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.605294][ T469] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.615013][ T2416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16401 sclass=netlink_route_socket pid=2416 comm=syz.2.691 [ 94.627831][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.636931][ T469] usb 4-1: SerialNumber: syz [ 94.642475][ T2410] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 94.650123][ T469] hub 4-1:1.0: bad descriptor, ignoring hub [ 94.656129][ T469] hub 4-1:1.0: probe with driver hub failed with error -5 [ 94.850854][ T2410] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 95.192059][ T2430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 95.228634][ T2432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2432 comm=syz.2.697 [ 95.241462][ T2432] overlayfs: missing 'workdir' [ 95.247942][ T2432] overlayfs: failed to clone lowerpath [ 95.262576][ T469] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 95.384479][ T917] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 95.405577][ T917] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 95.439564][ T917] usb 1-1: USB disconnect, device number 50 [ 95.841876][ T2478] netlink: 'syz.0.703': attribute type 4 has an invalid length. [ 95.868437][ T2478] netlink: 17 bytes leftover after parsing attributes in process `syz.0.703'. [ 96.008215][ T2488] overlayfs: disabling nfs_export due to verity=on [ 96.025368][ T2488] overlayfs: failed to clone upperpath [ 96.033407][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.082636][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.123437][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.156842][ T917] usb 4-1: USB disconnect, device number 35 [ 96.163196][ T917] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 96.176688][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.198061][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.278037][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.305751][ T2490] cgroup: fork rejected by pids controller in /syz0 [ 96.324524][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.370655][ T2491] netlink: 972 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.813422][ T2590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2590 comm=syz.0.709 [ 96.833958][ T2593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.842567][ T2593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.851266][ T2593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.860225][ T2594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.868780][ T2593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.876769][ T2594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.885153][ T2593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.893786][ T2593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.938957][ T468] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 97.068423][ T917] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 97.088455][ T468] usb 4-1: Using ep0 maxpacket: 8 [ 97.094552][ T468] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.103339][ T2593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.111841][ T468] usb 4-1: config 179 has no interface number 0 [ 97.118295][ T2593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.126162][ T468] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.142623][ T468] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.154229][ T468] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.165588][ T468] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 97.177268][ T468] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.190694][ T468] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 97.199948][ T468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.208959][ T2588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.218423][ T917] usb 1-1: Using ep0 maxpacket: 32 [ 97.224618][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.235818][ T917] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 97.244977][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.268014][ T917] usb 1-1: config 0 descriptor?? [ 97.291570][ T468] usb 5-1: USB disconnect, device number 22 [ 97.419577][ T469] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 97.475449][ T917] usbhid 1-1:0.0: can't add hid device: -71 [ 97.481785][ T917] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 97.490733][ T917] usb 1-1: USB disconnect, device number 51 [ 97.758436][ T468] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 97.888691][ T468] usb 5-1: device descriptor read/64, error -71 [ 97.999604][ T2619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2619 comm=syz.0.718 [ 98.072042][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 98.072059][ T36] audit: type=1400 audit(1793826340.139:1475): avc: denied { setattr } for pid=2624 comm="syz.0.721" name="" dev="pipefs" ino=21533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.092603][ T2629] device-mapper: table: 252:3: verity: Data device lookup failed (-ENOENT) [ 98.108933][ T2629] device-mapper: ioctl: error adding target to table [ 98.120303][ T469] usb 4-1: USB disconnect, device number 36 [ 98.126253][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 98.126282][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 98.145299][ T468] usb 5-1: device descriptor read/64, error -71 [ 98.172465][ T469] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 98.398405][ T468] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 98.538418][ T468] usb 5-1: device descriptor read/64, error -71 [ 98.778433][ T468] usb 5-1: device descriptor read/64, error -71 [ 98.888471][ T468] usb usb5-port1: attempt power cycle [ 98.943738][ T36] audit: type=1400 audit(1793826341.009:1476): avc: denied { write } for pid=2640 comm="syz.0.725" name="fib_trie" dev="proc" ino=4026532322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 98.985736][ T469] lg-g15 0003:046D:0A07.000B: hidraw0: USB HID vfffff5.00 Device [syz0] on syz0 [ 99.007775][ T2649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2649 comm=syz.2.727 [ 99.028734][ T469] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000B/input/input16 [ 99.228471][ T468] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 99.300253][ T36] audit: type=1400 audit(1793826341.369:1477): avc: denied { ioctl } for pid=2698 comm="syz.2.735" path="socket:[22257]" dev="sockfs" ino=22257 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.319507][ T468] usb 5-1: device descriptor read/8, error -71 [ 99.459403][ T468] usb 5-1: device descriptor read/8, error -71 [ 99.708649][ T468] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 99.739580][ T468] usb 5-1: device descriptor read/8, error -71 [ 99.814836][ T2708] ./dev/sda1: Can't lookup blockdev [ 99.838425][ T469] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 99.869296][ T468] usb 5-1: device descriptor read/8, error -71 [ 99.978537][ T468] usb usb5-port1: unable to enumerate USB device [ 99.999384][ T469] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 100.013008][ T469] usb 1-1: config 0 has no interface number 0 [ 100.029375][ T469] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 100.041689][ T469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.060590][ T469] usb 1-1: Product: syz [ 100.064768][ T469] usb 1-1: Manufacturer: syz [ 100.078409][ T469] usb 1-1: SerialNumber: syz [ 100.089061][ T469] usb 1-1: config 0 descriptor?? [ 100.205151][ T2718] FAULT_INJECTION: forcing a failure. [ 100.205151][ T2718] name failslab, interval 1, probability 0, space 0, times 0 [ 100.238298][ T2718] CPU: 0 UID: 0 PID: 2718 Comm: syz.3.741 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 100.238321][ T2718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.238332][ T2718] Call Trace: [ 100.238336][ T2718] [ 100.238346][ T2718] __dump_stack+0x21/0x30 [ 100.238362][ T2718] dump_stack_lvl+0x140/0x1c0 [ 100.238379][ T2718] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.238396][ T2718] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 100.238419][ T2718] dump_stack+0x19/0x20 [ 100.238435][ T2718] should_fail_ex+0x3c2/0x510 [ 100.238459][ T2718] should_failslab+0xac/0x100 [ 100.238470][ T2718] kmem_cache_alloc_noprof+0x42/0x410 [ 100.238485][ T2718] ? __pte_alloc+0x1ae/0x440 [ 100.238499][ T2718] ? __anon_vma_prepare+0xa5/0x590 [ 100.238514][ T2718] __anon_vma_prepare+0xa5/0x590 [ 100.238527][ T2718] do_pte_missing+0x2bbf/0x4440 [ 100.238539][ T2718] ? __kasan_check_write+0x18/0x20 [ 100.238552][ T2718] ? _raw_spin_lock+0x92/0x120 [ 100.238563][ T2718] ? __cfi__raw_spin_lock+0x10/0x10 [ 100.238573][ T2718] ? pte_marker_clear+0x1b0/0x1b0 [ 100.238584][ T2718] ? __pmd_alloc+0x5a6/0x9a0 [ 100.238593][ T2718] ? irqentry_exit+0x4a/0x60 [ 100.238607][ T2718] ? __cfi___pmd_alloc+0x10/0x10 [ 100.238617][ T2718] ? vms_complete_munmap_vmas+0x2a6/0x820 [ 100.238628][ T2718] handle_mm_fault+0x1189/0x1ba0 [ 100.238639][ T2718] ? __cfi_handle_mm_fault+0x10/0x10 [ 100.238650][ T2718] ? __cfi_find_vma+0x10/0x10 [ 100.238663][ T2718] ? vma_is_secretmem+0x11/0x50 [ 100.238675][ T2718] ? check_vma_flags+0x36d/0x3a0 [ 100.238687][ T2718] __get_user_pages+0x114b/0x22d0 [ 100.238700][ T2718] ? populate_vma_page_range+0x220/0x220 [ 100.238711][ T2718] ? down_read+0x7f/0xe0 [ 100.238723][ T2718] ? __cfi_down_read+0x10/0x10 [ 100.238736][ T2718] ? __cfi_do_mmap+0x10/0x10 [ 100.238748][ T2718] __mm_populate+0x300/0x440 [ 100.238760][ T2718] vm_mmap_pgoff+0x426/0x4b0 [ 100.238773][ T2718] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 100.238787][ T2718] ? xfd_validate_state+0x68/0x140 [ 100.238797][ T2718] ksys_mmap_pgoff+0xfa/0x1e0 [ 100.238810][ T2718] ? __kasan_check_write+0x18/0x20 [ 100.238823][ T2718] __x64_sys_mmap+0x121/0x140 [ 100.238835][ T2718] x64_sys_call+0x13bf/0x2ee0 [ 100.238845][ T2718] do_syscall_64+0x57/0xf0 [ 100.238856][ T2718] ? clear_bhb_loop+0x50/0xa0 [ 100.238869][ T2718] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.238882][ T2718] RIP: 0033:0x7fbbc8f9fb19 [ 100.238892][ T2718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.238901][ T2718] RSP: 002b:00007fbbc9ee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 100.238920][ T2718] RAX: ffffffffffffffda RBX: 00007fbbc9225fa0 RCX: 00007fbbc8f9fb19 [ 100.238929][ T2718] RDX: 0000000000000002 RSI: 0000000000000007 RDI: 00007fffffffb000 [ 100.238936][ T2718] RBP: 00007fbbc9037b70 R08: ffffffffffffffff R09: 0000000008000000 [ 100.238944][ T2718] R10: bd4c341840b03bf2 R11: 0000000000000246 R12: 0000000000000000 [ 100.238951][ T2718] R13: 00007fbbc9226038 R14: 00007fbbc9225fa0 R15: 00007ffd8c716758 [ 100.238960][ T2718] [ 100.561730][ T469] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 100.571908][ T469] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 100.581720][ T469] asix 1-1:0.251: probe with driver asix failed with error -5 [ 100.745192][ T2729] netlink: 'syz.2.745': attribute type 28 has an invalid length. [ 100.791830][ T2735] netlink: 'syz.2.748': attribute type 33 has an invalid length. [ 100.823862][ T36] audit: type=1400 audit(1793826342.889:1478): avc: denied { name_bind } for pid=2740 comm="syz.2.751" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 100.948436][ T468] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 100.980966][ T36] audit: type=1400 audit(1793826343.049:1479): avc: denied { setattr } for pid=2759 comm="syz.2.753" name="file0" dev="tmpfs" ino=2004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.109392][ T468] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 101.124687][ T468] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 101.148229][ T468] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 101.159569][ T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.177763][ T468] usb 5-1: Product: syz [ 101.184158][ T468] usb 5-1: Manufacturer: syz [ 101.194313][ T468] usb 5-1: SerialNumber: syz [ 101.407506][ T468] usb 5-1: Can't get UAC3 power state for id 10 [ 101.414542][ T468] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 101.428395][ T468] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.449880][ T468] usb 5-1: USB disconnect, device number 27 [ 101.457049][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.927099][ T36] audit: type=1400 audit(1793826343.989:1480): avc: denied { map } for pid=2771 comm="syz.4.757" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 102.010883][ T36] audit: type=1400 audit(1793826344.079:1481): avc: denied { execute } for pid=2774 comm="syz.2.758" path="/356/memory.events" dev="tmpfs" ino=2015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.011601][ T2775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2775 comm=syz.2.758 [ 102.098585][ T2784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2784 comm=syz.2.762 [ 102.320110][ T2802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2802 comm=syz.2.768 [ 102.354003][ T2808] ./dev/sda1: Can't lookup blockdev [ 102.373723][ T2810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2810 comm=syz.2.772 [ 102.438477][ T468] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 102.588411][ T468] usb 5-1: Using ep0 maxpacket: 32 [ 102.594886][ T468] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.607627][ T469] usb 1-1: USB disconnect, device number 52 [ 102.617532][ T468] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 102.636153][ T468] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.645443][ T36] audit: type=1400 audit(1793826344.709:1482): avc: denied { bind } for pid=2815 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.648970][ T468] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 102.677071][ T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.685158][ T468] usb 5-1: Product: syz [ 102.689522][ T468] usb 5-1: Manufacturer: syz [ 102.694173][ T468] usb 5-1: SerialNumber: syz [ 102.716595][ T36] audit: type=1400 audit(1793826344.779:1483): avc: denied { bpf } for pid=2818 comm="syz.0.776" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.086700][ T2835] rust_binder: 2834:2835 got transaction to invalid handle 1 [ 103.094462][ T2835] rust_binder: 2834:2835 transaction async to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 103.105953][ T2835] rust_binder: 2834: undelivered TRANSACTION_ERROR: 29201 [ 103.177936][ T36] audit: type=1400 audit(1793826345.239:1484): avc: denied { read write } for pid=2849 comm="syz.3.789" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.201408][ T36] audit: type=1400 audit(1793826345.239:1485): avc: denied { open } for pid=2849 comm="syz.3.789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.224900][ T36] audit: type=1400 audit(1793826345.239:1486): avc: denied { ioctl } for pid=2849 comm="syz.3.789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.428401][ T469] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 103.547404][ T36] audit: type=1400 audit(1793826345.609:1487): avc: denied { write } for pid=2856 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.578419][ T469] usb 4-1: Using ep0 maxpacket: 16 [ 103.590367][ T469] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.603667][ T2865] page size migration: [2865 (syz.2.796)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 103.604686][ T2866] page size migration: [2866 (syz.2.796)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 103.617535][ T469] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.639267][ T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 103.648351][ T469] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.664067][ T469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.681480][ T469] usb 4-1: Product: syz [ 103.689993][ T469] usb 4-1: Manufacturer: syz [ 103.695496][ T469] usb 4-1: SerialNumber: syz [ 103.797187][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 103.821369][ T9] usb 1-1: config 0 has no interface number 0 [ 103.896315][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 103.905492][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.919801][ T469] usb 4-1: 0:2 : does not exist [ 103.927233][ T9] usb 1-1: Product: syz [ 103.934347][ T469] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 103.944916][ T9] usb 1-1: Manufacturer: syz [ 103.953911][ T9] usb 1-1: SerialNumber: syz [ 103.963862][ T469] usb 4-1: USB disconnect, device number 37 [ 103.974702][ T9] usb 1-1: config 0 descriptor?? [ 104.188613][ T2855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.197249][ T2855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.406564][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 104.422548][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 104.442260][ T9] asix 1-1:0.251: probe with driver asix failed with error -5 [ 104.451251][ T2891] ./dev/sda1: Can't lookup blockdev [ 104.618502][ T9] usb 1-1: USB disconnect, device number 53 [ 104.909932][ T2898] page size migration: [2898 (syz.2.805)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 104.941072][ T468] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 104.962665][ T2904] __nla_validate_parse: 58 callbacks suppressed [ 104.962678][ T2904] netlink: 9 bytes leftover after parsing attributes in process `syz.2.808'. [ 104.985039][ T2904] gretap0: entered promiscuous mode [ 104.991011][ T468] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 104.999977][ T2907] netlink: 5 bytes leftover after parsing attributes in process `syz.2.808'. [ 105.009339][ T2907] 0ªî{X¹¦: renamed from gretap0 [ 105.016315][ T468] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 105.024694][ T468] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 105.032241][ T2907] 0ªî{X¹¦: left promiscuous mode [ 105.037381][ T2907] 0ªî{X¹¦: entered allmulticast mode [ 105.043566][ T2907] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 105.061074][ T468] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 105.077442][ T468] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 105.087020][ T468] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 105.099999][ T468] usb 5-1: 3:0: failed to get current value for ch 2 (-71) [ 105.111667][ T2919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2919 comm=syz.2.811 [ 105.124665][ T468] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 105.139343][ T2921] FAULT_INJECTION: forcing a failure. [ 105.139343][ T2921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.157684][ T468] usb 5-1: 3:0: cannot get min/max values for control 12 (id 3) [ 105.171725][ T468] usb 5-1: 3:0: cannot get min/max values for control 12 (id 3) [ 105.182258][ T2921] CPU: 0 UID: 0 PID: 2921 Comm: syz.0.812 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 105.182279][ T2921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.182287][ T2921] Call Trace: [ 105.182290][ T2921] [ 105.182294][ T2921] __dump_stack+0x21/0x30 [ 105.182310][ T2921] dump_stack_lvl+0x140/0x1c0 [ 105.182319][ T2921] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.182329][ T2921] ? check_stack_object+0x138/0x150 [ 105.182345][ T2921] dump_stack+0x19/0x20 [ 105.182354][ T2921] should_fail_ex+0x3c2/0x510 [ 105.182370][ T2921] should_fail+0xf/0x20 [ 105.182379][ T2921] should_fail_usercopy+0x1e/0x30 [ 105.182389][ T2921] _copy_from_user+0x20/0xa0 [ 105.182401][ T2921] __copy_msghdr+0x3d0/0x5c0 [ 105.182425][ T2921] ___sys_sendmsg+0x214/0x370 [ 105.182439][ T2921] ? __sys_sendmsg+0x260/0x260 [ 105.182452][ T2921] ? kstrtouint+0x78/0xf0 [ 105.182467][ T2921] ? __fget_files+0x2bc/0x330 [ 105.182479][ T2921] __sys_sendmmsg+0x292/0x490 [ 105.182493][ T2921] ? __cfi___sys_sendmmsg+0x10/0x10 [ 105.182508][ T2921] ? __cfi_ksys_write+0x10/0x10 [ 105.182518][ T2921] __x64_sys_sendmmsg+0xa4/0xc0 [ 105.182531][ T2921] x64_sys_call+0xfec/0x2ee0 [ 105.182542][ T2921] do_syscall_64+0x57/0xf0 [ 105.182553][ T2921] ? clear_bhb_loop+0x50/0xa0 [ 105.182567][ T2921] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.182586][ T2921] RIP: 0033:0x7fba1739fb19 [ 105.182596][ T2921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.182605][ T2921] RSP: 002b:00007fba182a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.182616][ T2921] RAX: ffffffffffffffda RBX: 00007fba17625fa0 RCX: 00007fba1739fb19 [ 105.182624][ T2921] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000005 [ 105.182631][ T2921] RBP: 00007fba182a0090 R08: 0000000000000000 R09: 0000000000000000 [ 105.182638][ T2921] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 105.182644][ T2921] R13: 00007fba17626038 R14: 00007fba17625fa0 R15: 00007fff1fd14528 [ 105.182653][ T2921] [ 105.402489][ T468] usb 5-1: USB disconnect, device number 28 [ 105.451935][ T2939] /dev/loop0: Can't lookup blockdev [ 105.470600][ T36] audit: type=1326 audit(1793826347.539:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2943 comm="syz.0.815" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba1739fb19 code=0x0 [ 105.572263][ T2945] FAULT_INJECTION: forcing a failure. [ 105.572263][ T2945] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.585106][ T2945] CPU: 0 UID: 0 PID: 2945 Comm: syz.0.815 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 105.585134][ T2945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.585143][ T2945] Call Trace: [ 105.585147][ T2945] [ 105.585151][ T2945] __dump_stack+0x21/0x30 [ 105.585166][ T2945] dump_stack_lvl+0x140/0x1c0 [ 105.585176][ T2945] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.585186][ T2945] dump_stack+0x19/0x20 [ 105.585195][ T2945] should_fail_ex+0x3c2/0x510 [ 105.585212][ T2945] should_fail+0xf/0x20 [ 105.585220][ T2945] get_futex_key+0x22c/0x940 [ 105.585231][ T2945] ? __cfi_futex_setup_timer+0x10/0x10 [ 105.585241][ T2945] ? __cfi_get_futex_key+0x10/0x10 [ 105.585251][ T2945] ? futex_lock_pi+0x843/0xa70 [ 105.585263][ T2945] futex_lock_pi+0x241/0xa70 [ 105.585275][ T2945] ? futex_unqueue+0x136/0x160 [ 105.585286][ T2945] ? __cfi_futex_lock_pi+0x10/0x10 [ 105.585298][ T2945] ? __cfi_futex_wake_mark+0x10/0x10 [ 105.585311][ T2945] ? __cfi_futex_wake_mark+0x10/0x10 [ 105.585325][ T2945] ? vfs_write+0xbd2/0xfd0 [ 105.585340][ T2945] do_futex+0x2fc/0x510 [ 105.585351][ T2945] ? __cfi_do_futex+0x10/0x10 [ 105.585361][ T2945] ? mutex_unlock+0x90/0x240 [ 105.585375][ T2945] __se_sys_futex+0x13c/0x320 [ 105.585386][ T2945] ? fput+0x1a4/0x230 [ 105.585397][ T2945] ? __x64_sys_futex+0x110/0x110 [ 105.585408][ T2945] ? __kasan_check_write+0x18/0x20 [ 105.585423][ T2945] __x64_sys_futex+0xe9/0x110 [ 105.585434][ T2945] x64_sys_call+0x227f/0x2ee0 [ 105.585445][ T2945] do_syscall_64+0x57/0xf0 [ 105.585455][ T2945] ? clear_bhb_loop+0x50/0xa0 [ 105.585469][ T2945] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.585482][ T2945] RIP: 0033:0x7fba1739fb19 [ 105.585494][ T2945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.585502][ T2945] RSP: 002b:00007fba1827f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.585521][ T2945] RAX: ffffffffffffffda RBX: 00007fba17626090 RCX: 00007fba1739fb19 [ 105.585528][ T2945] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 105.585534][ T2945] RBP: 00007fba17437b70 R08: 0000000000000000 R09: 0000000000000000 [ 105.585541][ T2945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.585548][ T2945] R13: 00007fba17626128 R14: 00007fba17626090 R15: 00007fff1fd14528 [ 105.585556][ T2945] [ 105.825919][ T2945] fuse: Bad value for 'fd' [ 105.830466][ T2947] fuse: Bad value for 'fd' [ 105.948444][ T468] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 106.099403][ T468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.110894][ T468] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 106.120070][ T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.133377][ T468] usb 5-1: Product: syz [ 106.141528][ T468] usb 5-1: Manufacturer: syz [ 106.150579][ T468] usb 5-1: SerialNumber: syz [ 106.368037][ T2906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.376762][ T2906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.418424][ T468] usb 5-1: failed to enable PITCH for EP 0x1 [ 106.442211][ T2958] tipc: Enabling of bearer rejected, already enabled [ 106.453983][ T2964] tipc: Enabling of bearer rejected, already enabled [ 106.461752][ T468] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 106.479387][ T468] usb 5-1: USB disconnect, device number 29 [ 106.748413][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 106.888426][ T9] usb 4-1: device descriptor read/64, error -71 [ 107.032592][ T2979] 9pnet_fd: Insufficient options for proto=fd [ 107.039066][ T2979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2979 comm=syz.2.832 [ 107.128446][ T9] usb 4-1: device descriptor read/64, error -71 [ 107.138506][ T468] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 107.290778][ T468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.309557][ T468] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 107.322071][ T468] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 107.331392][ T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.351210][ T468] usb 5-1: Product: syz [ 107.361791][ T468] usb 5-1: Manufacturer: syz [ 107.368454][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 107.377797][ T468] usb 5-1: SerialNumber: syz [ 107.388284][ T2973] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 107.417050][ T3000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3000 comm=syz.0.841 [ 107.456619][ T3007] overlay: filesystem on ./bus not supported as upperdir [ 107.518428][ T9] usb 4-1: device descriptor read/64, error -71 [ 107.587095][ T3013] overlayfs: failed to clone upperpath [ 107.593113][ T3013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.845'. [ 107.606699][ T36] audit: type=1400 audit(1793826349.669:1489): avc: denied { read } for pid=2972 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.631855][ T3015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3015 comm=syz.2.846 [ 107.659447][ T468] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 107.669483][ T468] usb 5-1: USB disconnect, device number 30 [ 107.728615][ T469] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 107.758424][ T9] usb 4-1: device descriptor read/64, error -71 [ 107.868588][ T9] usb usb4-port1: attempt power cycle [ 107.879484][ T469] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.890963][ T469] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.900941][ T469] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.914046][ T469] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.920691][ T469] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 107.929998][ T469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.938686][ T469] usb 1-1: config 0 descriptor?? [ 107.944987][ T469] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 108.187830][ T36] audit: type=1400 audit(1793826350.249:1490): avc: denied { getopt } for pid=3023 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.201561][ T3026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3026 comm=syz.2.851 [ 108.220633][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 108.249430][ T9] usb 4-1: device descriptor read/8, error -71 [ 108.258715][ T3030] netlink: 'syz.2.853': attribute type 4 has an invalid length. [ 108.345758][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.352977][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.360141][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.367394][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.377429][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.391738][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.406712][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.416645][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.416696][ T9] usb 4-1: device descriptor read/8, error -71 [ 108.429974][ T468] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 108.437631][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.444840][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.452125][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.459249][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.466366][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.473485][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.480624][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.487685][ T469] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 108.494830][ T469] samsung 0003:0419:0600.000C: unbalanced collection at end of report description [ 108.504185][ T469] samsung 0003:0419:0600.000C: parse failed [ 108.510382][ T469] samsung 0003:0419:0600.000C: probe with driver samsung failed with error -22 [ 108.588410][ T468] usb 5-1: Using ep0 maxpacket: 16 [ 108.596611][ T468] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 108.605908][ T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.614066][ T468] usb 5-1: Product: 췇ꚾ刣視佡勡摕ꄉꭹê�œï‚ƒê´¸ï»¼æˆ•˅ࢦî�“冢톊ã�Œ [ 108.623758][ T468] usb 5-1: Manufacturer: â°Š [ 108.628468][ T468] usb 5-1: SerialNumber: syz [ 108.678438][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 108.699333][ T9] usb 4-1: device descriptor read/8, error -71 [ 108.749250][ T469] usb 1-1: USB disconnect, device number 54 [ 108.840987][ T9] usb 4-1: device descriptor read/8, error -71 [ 108.874915][ T468] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 108.884720][ T468] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.896979][ T468] usb 5-1: USB disconnect, device number 31 [ 108.917786][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.958553][ T9] usb usb4-port1: unable to enumerate USB device [ 109.169019][ T3045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.857'. [ 109.179087][ T36] audit: type=1400 audit(1793826351.249:1491): avc: denied { setopt } for pid=3044 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.192386][ T3047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=3047 comm=syz.2.858 [ 109.235572][ T36] audit: type=1326 audit(1793826351.299:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3050 comm="syz.2.860" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a2919fb19 code=0x0 [ 109.286146][ T3055] 9pnet_fd: p9_fd_create_unix (3055): problem connecting socket: ./proc: -111 [ 109.297147][ T3058] fuse: Bad value for 'fd' [ 109.321897][ T3063] futex_wake_op: syz.0.864 tries to shift op by -1; fix this program [ 109.330772][ T3063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3063 comm=syz.0.864 [ 109.386209][ T36] audit: type=1400 audit(1793826351.449:1493): avc: denied { create } for pid=3069 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 109.513549][ T36] audit: type=1400 audit(1793826351.579:1494): avc: denied { setopt } for pid=3071 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.514278][ T3072] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 109.543394][ T3072] overlayfs: failed to get uuid (178/file0, err=-13); falling back to uuid=null. [ 109.598414][ T469] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 109.618423][ T468] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 109.749431][ T469] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.760484][ T469] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.773379][ T468] usb 5-1: Using ep0 maxpacket: 16 [ 109.778727][ T469] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.785478][ T469] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 109.794857][ T469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.803672][ T468] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.811548][ T469] usb 1-1: config 0 descriptor?? [ 109.817816][ T468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.828162][ T468] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.839060][ T468] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.850043][ T468] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 109.864358][ T468] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 109.873572][ T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.881630][ T468] usb 5-1: Product: syz [ 109.885911][ T468] usb 5-1: Manufacturer: syz [ 109.890564][ T468] usb 5-1: SerialNumber: syz [ 109.908434][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 110.059378][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 110.068235][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.081991][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.108285][ T9] usb 4-1: config 1 has no interface number 0 [ 110.126062][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 110.156431][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 110.169980][ T36] audit: type=1400 audit(1793826352.239:1495): avc: denied { write } for pid=3069 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 110.172674][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.199303][ T468] usb 5-1: MIDIStreaming interface descriptor not found [ 110.207093][ T3082] futex_wake_op: syz.2.872 tries to shift op by 144; fix this program [ 110.217306][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.227024][ T468] usb 5-1: USB disconnect, device number 32 [ 110.235234][ T9] usb 4-1: Product: syz [ 110.241075][ T469] playstation 0003:054C:09CC.000D: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 110.253649][ T9] usb 4-1: Manufacturer: syz [ 110.258279][ T9] usb 4-1: SerialNumber: syz [ 110.266285][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 110.275713][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.293303][ T9] cdc_ncm 4-1:1.1: bind() failure [ 110.433331][ T469] playstation 0003:054C:09CC.000D: Invalid byte count transferred, expected 16 got 0 [ 110.442983][ T469] playstation 0003:054C:09CC.000D: Failed to retrieve DualShock4 pairing info: -22 [ 110.452348][ T469] playstation 0003:054C:09CC.000D: Failed to get MAC address from DualShock4 [ 110.461226][ T469] playstation 0003:054C:09CC.000D: Failed to create dualshock4. [ 110.472972][ T469] playstation 0003:054C:09CC.000D: probe with driver playstation failed with error -22 [ 110.535950][ T3086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.544976][ T3086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.646508][ T469] usb 1-1: USB disconnect, device number 55 [ 110.830536][ T469] usb 4-1: USB disconnect, device number 42 [ 110.959101][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 111.045439][ T36] audit: type=1400 audit(1810603796.125:1496): avc: denied { create } for pid=3094 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.118406][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 111.124650][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.132787][ T9] usb 5-1: config 0 has no interface number 0 [ 111.139022][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.148885][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.161765][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 111.174274][ T3098] 9pnet_fd: Insufficient options for proto=fd [ 111.181731][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 111.191436][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.199499][ T9] usb 5-1: Product: syz [ 111.203759][ T9] usb 5-1: Manufacturer: syz [ 111.208423][ T9] usb 5-1: SerialNumber: syz [ 111.213604][ T9] usb 5-1: config 0 descriptor?? [ 111.219325][ T3093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.226532][ T3093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.242041][ T3101] futex_wake_op: syz.0.877 tries to shift op by 144; fix this program [ 111.250582][ T3101] futex_wake_op: syz.0.877 tries to shift op by 144; fix this program [ 111.311204][ T3104] futex_wake_op: syz.0.877 tries to shift op by 144; fix this program [ 111.319981][ T3104] futex_wake_op: syz.0.877 tries to shift op by 144; fix this program [ 111.369504][ T3114] SELinux: security_context_str_to_sid (syt|v\{‹) failed with errno=-22 [ 111.369513][ T36] audit: type=1400 audit(1810603796.455:1497): avc: denied { remount } for pid=3113 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.416283][ T36] audit: type=1400 audit(1810603796.495:1498): avc: denied { accept } for pid=3117 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.443934][ T3093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.451424][ T3093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.554236][ T3123] pim6reg1: entered promiscuous mode [ 111.559736][ T3123] pim6reg1: entered allmulticast mode [ 111.657137][ T36] audit: type=1400 audit(1810603796.735:1499): avc: denied { name_bind } for pid=3131 comm="syz.3.887" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 111.739420][ T3134] kvm: Disabled LAPIC found during irq injection [ 111.872186][ T9] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 112.139400][ T9] usb 5-1: USB disconnect, device number 33 [ 112.561804][ T3150] pim6reg1: entered promiscuous mode [ 112.567346][ T3150] pim6reg1: entered allmulticast mode [ 112.641424][ T3161] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 112.712825][ T3170] fuse: Bad value for 'fd' [ 112.968431][ T9] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 112.998414][ T468] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 113.119388][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 113.129910][ T9] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 113.138970][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.148159][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.159489][ T468] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.181956][ T468] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 113.200082][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 113.200099][ T36] audit: type=1400 audit(1810603798.285:1503): avc: denied { remount } for pid=3190 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.201316][ T468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.264525][ T468] usb 4-1: config 0 descriptor?? [ 113.358330][ T3176] sd 0:0:1:0: PR command failed: 1026 [ 113.363907][ T3176] sd 0:0:1:0: Sense Key : 0x5 [current] [ 113.369643][ T3176] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 113.478401][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 113.628405][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 113.634944][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.643425][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 113.655932][ T9] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 113.665168][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.673228][ T9] usb 1-1: Product: syz [ 113.678162][ T36] audit: type=1400 audit(1810603798.765:1504): avc: denied { write } for pid=3179 comm="syz.3.906" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.684914][ T468] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.000E/input/input17 [ 113.707419][ T36] audit: type=1400 audit(1810603798.765:1505): avc: denied { remove_name } for pid=3179 comm="syz.3.906" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.711448][ T9] usb 1-1: Manufacturer: syz [ 113.734249][ T36] audit: type=1400 audit(1810603798.765:1506): avc: denied { unlink } for pid=3179 comm="syz.3.906" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.739336][ T9] usb 1-1: SerialNumber: syz [ 113.766899][ T468] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.000E/input/input18 [ 113.784607][ T468] kye 0003:0458:5005.000E: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 113.825269][ T3214] tipc: Started in network mode [ 113.830365][ T3214] tipc: Node identity 4, cluster identity 4711 [ 113.836612][ T3214] tipc: Node number set to 4 [ 113.877974][ T468] usb 4-1: USB disconnect, device number 43 [ 113.982134][ T9] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 113.990534][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.190721][ T9] usb 1-1: 2:1 : can't get High Capability descriptor [ 114.405268][ T3191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.423097][ T3191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.441246][ T3191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.459905][ T9] usb 1-1: USB disconnect, device number 56 [ 114.728427][ T468] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 114.858425][ T468] usb 4-1: device descriptor read/64, error -71 [ 115.098443][ T468] usb 4-1: device descriptor read/64, error -71 [ 115.174991][ T3233] x_tables: unsorted underflow at hook 2 [ 115.181347][ T36] audit: type=1400 audit(1810603800.265:1507): avc: denied { lock } for pid=3232 comm="syz.2.925" path="socket:[24968]" dev="sockfs" ino=24968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 115.278640][ T917] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 115.288014][ T36] audit: type=1326 audit(1810603800.365:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3240 comm="syz.2.929" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2919fb19 code=0x7ffc0000 [ 115.290852][ T3241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 115.313292][ T36] audit: type=1326 audit(1810603800.365:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3240 comm="syz.2.929" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2919fb19 code=0x7ffc0000 [ 115.313329][ T36] audit: type=1326 audit(1810603800.365:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3240 comm="syz.2.929" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2919fb19 code=0x7ffc0000 [ 115.329714][ T3241] netlink: 37 bytes leftover after parsing attributes in process `syz.2.929'. [ 115.348584][ T36] audit: type=1326 audit(1810603800.365:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3240 comm="syz.2.929" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2919fb19 code=0x7ffc0000 [ 115.372801][ T468] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 115.382401][ T36] audit: type=1326 audit(1810603800.365:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3240 comm="syz.2.929" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a2919fb19 code=0x7ffc0000 [ 115.445247][ T3241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 115.478442][ T917] usb 1-1: Using ep0 maxpacket: 32 [ 115.484515][ T917] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 115.495504][ T917] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.511563][ T917] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 115.524694][ T917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.531534][ T468] usb 4-1: device descriptor read/64, error -71 [ 115.537896][ T917] usb 1-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 115.546973][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.555604][ T917] usb 1-1: config 0 descriptor?? [ 115.740099][ T9] usb 5-1: USB disconnect, device number 34 [ 115.768447][ T468] usb 4-1: device descriptor read/64, error -71 [ 115.829690][ T3257] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz.4.934: No space for directory leaf checksum. Please run e2fsck -D. [ 115.845334][ T3257] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz.4.934: checksumming directory block 0 [ 115.878499][ T468] usb usb4-port1: attempt power cycle [ 115.963700][ T917] input: HID 046d:c087 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C087.000F/input/input20 [ 115.979317][ T917] logitech-hidpp-device 0003:046D:C087.000F: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c087] on usb-dummy_hcd.0-1/input0 [ 116.024859][ T3273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.940'. [ 116.210223][ T9] usb 1-1: USB disconnect, device number 57 [ 116.219742][ T468] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 116.259376][ T468] usb 4-1: device descriptor read/8, error -71 [ 116.291681][ T3291] netlink: 'syz.4.948': attribute type 10 has an invalid length. [ 116.309937][ T3291] futex_wake_op: syz.4.948 tries to shift op by 144; fix this program [ 116.389340][ T468] usb 4-1: device descriptor read/8, error -71 [ 116.403006][ T3293] netlink: 'syz.4.949': attribute type 16 has an invalid length. [ 116.420366][ T3293] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.949'. [ 116.629265][ T468] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 116.658291][ T3308] 9pnet_fd: p9_fd_create_tcp (3308): problem connecting socket to 127.0.0.1 [ 116.668050][ T468] usb 4-1: device descriptor read/8, error -71 [ 116.703279][ T3316] overlayfs: failed to clone upperpath [ 116.710873][ T3316] overlayfs: failed to clone upperpath [ 116.799503][ T468] usb 4-1: device descriptor read/8, error -71 [ 116.918797][ T468] usb usb4-port1: unable to enumerate USB device [ 116.966308][ T3352] netlink: 'syz.2.967': attribute type 33 has an invalid length. [ 116.974604][ T3352] ./dev/sda1: Can't lookup blockdev [ 117.287347][ T3354] veth0_to_team: mtu less than device minimum [ 117.533550][ T3370] x_tables: duplicate underflow at hook 2 [ 117.539397][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 117.699394][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 117.718532][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.889881][ T468] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 119.412258][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 119.412275][ T36] audit: type=1400 audit(1810603804.495:1604): avc: denied { cmd } for pid=3384 comm="iou-wrk-3385" path="socket:[26169]" dev="sockfs" ino=26169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.670871][ T3401] tmpfs: Unknown parameter 'nr' [ 119.678059][ T3401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3401 comm=syz.0.987 [ 119.688426][ T36] audit: type=1400 audit(1810603804.755:1605): avc: denied { mounton } for pid=3400 comm="syz.0.987" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 119.740741][ T468] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.749065][ T468] usb 4-1: not running at top speed; connect to a high speed hub [ 119.757443][ T468] usb 4-1: config 1 has an invalid descriptor of length 210, skipping remainder of the config [ 119.767890][ T468] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.778086][ T468] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 119.787179][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.798194][ T468] usb 4-1: Product: syz [ 119.802676][ T468] usb 4-1: Manufacturer: syz [ 119.807308][ T468] usb 4-1: SerialNumber: syz [ 119.928450][ T469] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 120.017816][ T468] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 120.033023][ T468] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 120.042370][ T468] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.052457][ T468] usb 4-1: USB disconnect, device number 48 [ 120.057440][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.068435][ T469] usb 1-1: device descriptor read/64, error -71 [ 120.199221][ T36] audit: type=1400 audit(1810603805.285:1606): avc: denied { append } for pid=3355 comm="syz.4.969" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.318402][ T469] usb 1-1: device descriptor read/64, error -71 [ 120.558448][ T469] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 120.688440][ T469] usb 1-1: device descriptor read/64, error -71 [ 120.768410][ T468] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 120.903620][ T9] usb 5-1: Cannot set autoneg [ 120.908556][ T9] MOSCHIP usb-ethernet driver 5-1:7.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 120.927911][ T468] usb 4-1: not running at top speed; connect to a high speed hub [ 120.938448][ T9] usb 5-1: USB disconnect, device number 35 [ 120.944424][ T469] usb 1-1: device descriptor read/64, error -71 [ 120.951484][ T468] usb 4-1: config 6 has an invalid interface number: 6 but max is 0 [ 120.968050][ T468] usb 4-1: config 6 has no interface number 0 [ 120.981122][ T468] usb 4-1: config 6 interface 6 has no altsetting 0 [ 120.995802][ T468] usb 4-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 121.007801][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.018486][ T468] usb 4-1: Product: syz [ 121.029337][ T468] usb 4-1: Manufacturer: syz [ 121.034010][ T468] usb 4-1: SerialNumber: syz [ 121.068486][ T469] usb usb1-port1: attempt power cycle [ 121.240312][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 121.328428][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 121.408498][ T469] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 121.422887][ T468] uvcvideo 4-1:6.6: Found Unit with invalid ID 0 [ 121.429827][ T468] usb 4-1: Found UVC 0.00 device syz (174f:8a12) [ 121.436265][ T468] usb 4-1: No valid video chain found. [ 121.442253][ T469] usb 1-1: device descriptor read/8, error -71 [ 121.449312][ T468] usb 4-1: USB disconnect, device number 49 [ 121.478470][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 121.484783][ T9] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 121.493304][ T9] usb 5-1: config 1 has no interface number 0 [ 121.499475][ T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 121.512583][ T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.535494][ T9] usb 5-1: config 1 interface 105 has no altsetting 0 [ 121.549660][ T9] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 121.564731][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.579336][ T469] usb 1-1: device descriptor read/8, error -71 [ 121.586347][ T9] usb 5-1: Product: syz [ 121.595674][ T9] usb 5-1: Manufacturer: syz [ 121.604048][ T9] usb 5-1: SerialNumber: syz [ 121.609064][ T3433] overlayfs: failed to resolve './file0': -40 [ 121.616041][ T3424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.624262][ T3424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.828480][ T469] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 121.840043][ T9] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 121.849383][ T9] usb 5-1: USB disconnect, device number 36 [ 121.859369][ T469] usb 1-1: device descriptor read/8, error -71 [ 121.984378][ T3435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3435 comm=syz.3.1000 [ 121.998115][ T469] usb 1-1: device descriptor read/8, error -71 [ 122.108621][ T469] usb usb1-port1: unable to enumerate USB device [ 122.927511][ T3483] device-mapper: verity: blake2b-256 using shash "blake2b-256-generic" [ 122.937825][ T3483] device-mapper: table: 252:4: adding target device (start sect 0 len 64) caused an alignment inconsistency [ 123.056831][ T3487] netlink: 'syz.4.1019': attribute type 17 has an invalid length. [ 123.065767][ T3487] netlink: 'syz.4.1019': attribute type 17 has an invalid length. [ 123.078426][ T469] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 123.146026][ T36] audit: type=1400 audit(1810603808.225:1607): avc: denied { execute } for pid=3501 comm="syz.4.1024" path="pipe:[26735]" dev="pipefs" ino=26735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 123.188859][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 123.227266][ T36] audit: type=1400 audit(1810603808.305:1608): avc: denied { read write } for pid=3516 comm="syz.4.1028" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 123.229157][ T3517] size and base must be multiples of 4 kiB [ 123.250731][ T36] audit: type=1400 audit(1810603808.305:1609): avc: denied { open } for pid=3516 comm="syz.4.1028" path="/108/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 123.256983][ T469] usb 1-1: Using ep0 maxpacket: 16 [ 123.280582][ T36] audit: type=1400 audit(1810603808.315:1610): avc: denied { ioctl } for pid=3516 comm="syz.4.1028" path="/108/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 123.285435][ T3517] CPU: 0 UID: 0 PID: 3517 Comm: syz.4.1028 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 123.285463][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.285476][ T3517] Call Trace: [ 123.285483][ T3517] [ 123.285490][ T3517] __dump_stack+0x21/0x30 [ 123.285515][ T3517] dump_stack_lvl+0x140/0x1c0 [ 123.285534][ T3517] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.285551][ T3517] ? __cfi_futex_wait+0x10/0x10 [ 123.285576][ T3517] dump_stack+0x19/0x20 [ 123.285592][ T3517] mtrr_del+0xcd/0xf0 [ 123.285616][ T3517] mtrr_ioctl+0xbf8/0x1170 [ 123.285640][ T3517] ? __cfi_mtrr_ioctl+0x10/0x10 [ 123.285665][ T3517] ? __fget_files+0x2bc/0x330 [ 123.285685][ T3517] ? __cfi_mtrr_ioctl+0x10/0x10 [ 123.285708][ T3517] proc_reg_unlocked_ioctl+0x1f3/0x2f0 [ 123.285736][ T3517] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 123.285761][ T3517] __se_sys_ioctl+0x123/0x1b0 [ 123.285782][ T3517] __x64_sys_ioctl+0x7f/0xa0 [ 123.285801][ T3517] x64_sys_call+0x1878/0x2ee0 [ 123.285821][ T3517] do_syscall_64+0x57/0xf0 [ 123.285840][ T3517] ? clear_bhb_loop+0x50/0xa0 [ 123.285864][ T3517] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.285888][ T3517] RIP: 0033:0x7f8052d9fb19 [ 123.285904][ T3517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.285920][ T3517] RSP: 002b:00007f8053c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.285940][ T3517] RAX: ffffffffffffffda RBX: 00007f8053025fa0 RCX: 00007f8052d9fb19 [ 123.285954][ T3517] RDX: 0000200000000140 RSI: 0000000040104d04 RDI: 0000000000000003 [ 123.285968][ T3517] RBP: 00007f8052e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 123.285980][ T3517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.285992][ T3517] R13: 00007f8053026038 R14: 00007f8053025fa0 R15: 00007ffc6dcae938 [ 123.286008][ T3517] [ 123.306406][ T469] usb 1-1: config 76 has an invalid interface number: 125 but max is 3 [ 123.517954][ T3521] ./dev/sda1: Can't lookup blockdev [ 123.650464][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.658274][ T469] usb 1-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 123.668798][ T469] usb 1-1: config 76 has 1 interface, different from the descriptor's value: 4 [ 123.681864][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.718389][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.738435][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 123.756049][ T469] usb 1-1: config 76 has no interface number 0 [ 123.772894][ T469] usb 1-1: config 76 interface 125 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 123.787165][ T10] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 123.813719][ T469] usb 1-1: config 76 interface 125 has no altsetting 0 [ 123.820932][ T10] usb 4-1: config 1 interface 1 has no altsetting 1 [ 123.838841][ T10] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 123.848085][ T469] usb 1-1: New USB device found, idVendor=12d1, idProduct=141e, bcdDevice= 0.00 [ 123.857173][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.868404][ T10] usb 4-1: Product: syz [ 123.872563][ T10] usb 4-1: Manufacturer: syz [ 123.877235][ T469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.885265][ T917] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 123.903058][ T469] usb 1-1: Product: syz [ 123.907356][ T10] usb 4-1: SerialNumber: syz [ 123.914943][ T469] usb 1-1: Manufacturer: syz [ 123.924424][ T469] usb 1-1: SerialNumber: syz [ 123.992769][ T3536] ./dev/sda1: Can't lookup blockdev [ 124.049390][ T917] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 124.068432][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.088440][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.108527][ T917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 124.139153][ T917] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 124.148623][ T469] usb-storage 1-1:76.125: USB Mass Storage device detected [ 124.166020][ T917] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 124.178456][ T917] usb 5-1: Manufacturer: syz [ 124.192923][ T917] usb 5-1: config 0 descriptor?? [ 124.221838][ T469] usb 1-1: USB disconnect, device number 62 [ 124.621979][ T917] appleir 0003:05AC:8243.0010: item fetching failed at offset 0/1 [ 124.630135][ T917] appleir 0003:05AC:8243.0010: parse failed [ 124.636130][ T917] appleir 0003:05AC:8243.0010: probe with driver appleir failed with error -22 [ 124.824561][ T469] usb 5-1: USB disconnect, device number 37 [ 125.038428][ T917] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 125.188411][ T917] usb 1-1: Invalid ep0 maxpacket: 16 [ 125.328413][ T917] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 125.349777][ T3581] x86/PAT: syz.4.1050:3581 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 125.488414][ T917] usb 1-1: Invalid ep0 maxpacket: 16 [ 125.494054][ T917] usb usb1-port1: attempt power cycle [ 125.688395][ T469] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 125.838414][ T469] usb 5-1: Using ep0 maxpacket: 32 [ 125.843590][ T917] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 125.852298][ T469] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 125.860695][ T469] usb 5-1: config 0 has no interface number 0 [ 125.867004][ T469] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 125.877704][ T917] usb 1-1: Invalid ep0 maxpacket: 16 [ 125.884108][ T469] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 125.893798][ T469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.901956][ T469] usb 5-1: Product: syz [ 125.906479][ T469] usb 5-1: Manufacturer: syz [ 125.911191][ T469] usb 5-1: SerialNumber: syz [ 125.916642][ T469] usb 5-1: config 0 descriptor?? [ 125.921978][ T3589] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 125.938339][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.953677][ T10] usb 4-1: USB disconnect, device number 50 [ 125.965344][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.008416][ T917] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 126.028778][ T917] usb 1-1: Invalid ep0 maxpacket: 16 [ 126.034280][ T917] usb usb1-port1: unable to enumerate USB device [ 126.154169][ T469] asix 5-1:0.188: probe with driver asix failed with error -71 [ 126.168257][ T36] audit: type=1400 audit(1810603811.255:1611): avc: denied { lock } for pid=3594 comm="syz.4.1055" path="socket:[27244]" dev="sockfs" ino=27244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 126.172333][ T469] usb 5-1: USB disconnect, device number 38 [ 126.205452][ T36] audit: type=1400 audit(1810603811.285:1612): avc: denied { load_policy } for pid=3596 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.205682][ T3597] SELinux: policydb magic number 0x79732f2e does not match expected magic number 0xf97cff8c [ 126.237515][ T3597] SELinux: failed to load policy [ 126.248111][ T36] audit: type=1400 audit(1810603811.335:1613): avc: denied { read } for pid=3596 comm="syz.4.1056" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.271362][ T36] audit: type=1400 audit(1810603811.335:1614): avc: denied { open } for pid=3596 comm="syz.4.1056" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.295371][ T36] audit: type=1400 audit(1810603811.335:1615): avc: denied { create } for pid=3596 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 126.316291][ T36] audit: type=1400 audit(1810603811.335:1616): avc: denied { ioctl } for pid=3596 comm="syz.4.1056" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.588429][ T469] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 126.718431][ T469] usb 5-1: device descriptor read/64, error -71 [ 126.858904][ T3601] pim6reg1: entered promiscuous mode [ 126.864272][ T3601] pim6reg1: entered allmulticast mode [ 126.942339][ T3605] overlayfs: missing 'lowerdir' [ 126.958566][ T469] usb 5-1: device descriptor read/64, error -71 [ 127.208430][ T469] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 127.338459][ T469] usb 5-1: device descriptor read/64, error -71 [ 127.578411][ T469] usb 5-1: device descriptor read/64, error -71 [ 127.688561][ T469] usb usb5-port1: attempt power cycle [ 128.028425][ T469] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 128.049420][ T469] usb 5-1: device descriptor read/8, error -71 [ 128.078452][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 128.168408][ T917] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 128.179399][ T469] usb 5-1: device descriptor read/8, error -71 [ 128.232373][ T10] usb 4-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 128.244785][ T3627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44098 sclass=netlink_route_socket pid=3627 comm=syz.2.1066 [ 128.257565][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.268056][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 128.318386][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 128.324858][ T917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.333335][ T917] usb 1-1: config 2 has an invalid interface number: 78 but max is 0 [ 128.341532][ T917] usb 1-1: config 2 has no interface number 0 [ 128.347752][ T917] usb 1-1: config 2 interface 78 has no altsetting 0 [ 128.355946][ T917] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=38.d4 [ 128.365364][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.373443][ T917] usb 1-1: Product: syz [ 128.377729][ T917] usb 1-1: Manufacturer: syz [ 128.382417][ T917] usb 1-1: SerialNumber: syz [ 128.418459][ T469] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 128.439362][ T469] usb 5-1: device descriptor read/8, error -71 [ 128.468083][ T10] scsi host1: usb-storage 4-1:1.0 [ 128.569344][ T469] usb 5-1: device descriptor read/8, error -71 [ 128.589670][ T917] ums-cypress 1-1:2.78: USB Mass Storage device detected [ 128.630071][ T917] usb 1-1: USB disconnect, device number 67 [ 128.678484][ T469] usb usb5-port1: unable to enumerate USB device [ 129.235754][ T3654] pim6reg1: entered promiscuous mode [ 129.241166][ T3654] pim6reg1: entered allmulticast mode [ 129.328919][ T469] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 129.370857][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.394322][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.406046][ T36] audit: type=1400 audit(1810603814.495:1617): avc: denied { nlmsg_read } for pid=3663 comm="syz.2.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.468402][ T469] usb 1-1: device descriptor read/64, error -71 [ 129.689925][ T3615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.698586][ T3615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.708431][ T469] usb 1-1: device descriptor read/64, error -71 [ 129.939656][ T3672] netlink: 'syz.2.1082': attribute type 4 has an invalid length. [ 129.947796][ T3672] netlink: 'syz.2.1082': attribute type 6 has an invalid length. [ 129.955691][ T469] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 129.963407][ T3672] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1082'. [ 129.973127][ T3673] netlink: 'syz.2.1082': attribute type 4 has an invalid length. [ 129.981211][ T3673] netlink: 'syz.2.1082': attribute type 6 has an invalid length. [ 129.989256][ T3673] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1082'. [ 130.128549][ T469] usb 1-1: device descriptor read/64, error -71 [ 130.189718][ T36] audit: type=1400 audit(1810603815.275:1618): avc: denied { getopt } for pid=3680 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.369157][ T469] usb 1-1: device descriptor read/64, error -71 [ 130.458421][ T917] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 130.478529][ T469] usb usb1-port1: attempt power cycle [ 130.608432][ T917] usb 5-1: Invalid ep0 maxpacket: 64 [ 130.738415][ T917] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 130.818421][ T469] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 130.839519][ T469] usb 1-1: device descriptor read/8, error -71 [ 130.888489][ T917] usb 5-1: Invalid ep0 maxpacket: 64 [ 130.894215][ T917] usb usb5-port1: attempt power cycle [ 130.970172][ T469] usb 1-1: device descriptor read/8, error -71 [ 131.218433][ T469] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 131.238483][ T917] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 131.247017][ T469] usb 1-1: device descriptor read/8, error -71 [ 131.258739][ T917] usb 5-1: Invalid ep0 maxpacket: 64 [ 131.379389][ T469] usb 1-1: device descriptor read/8, error -71 [ 131.388451][ T917] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 131.409299][ T917] usb 5-1: Invalid ep0 maxpacket: 64 [ 131.414744][ T917] usb usb5-port1: unable to enumerate USB device [ 131.488560][ T469] usb usb1-port1: unable to enumerate USB device [ 131.618779][ T468] usb 4-1: USB disconnect, device number 51 [ 131.763583][ T36] audit: type=1400 audit(1810603816.845:1619): avc: denied { create } for pid=3705 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.088431][ T468] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 132.122520][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.127957][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.136700][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.142298][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.150945][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.156369][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.162078][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.170861][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.176349][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.185066][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.190565][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.196073][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.204848][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.210321][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.215868][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.224961][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.230545][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.241927][ T468] usb 4-1: Using ep0 maxpacket: 8 [ 132.247241][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.257034][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.265264][ T468] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.275711][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.291981][ T468] usb 4-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config [ 132.304591][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.311930][ T468] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 132.321287][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.330112][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.335693][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.341335][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.350165][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.355538][ T468] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 132.367301][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 132.376351][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.381808][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.391992][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.404545][ T468] usb 4-1: Product: syz [ 132.412284][ T468] usb 4-1: Manufacturer: syz [ 132.416904][ T468] usb 4-1: SerialNumber: syz [ 132.425138][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.435259][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.454104][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.460956][ T36] audit: type=1400 audit(1810603817.545:1620): avc: denied { bind } for pid=3724 comm="syz.2.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.462964][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.485874][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.494577][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.503308][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.508811][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.522194][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.527711][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.536438][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.541908][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.547347][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.556066][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.561529][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.566983][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.575670][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.581190][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.589892][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.595309][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.600822][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.609538][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.614999][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.623699][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.629129][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.634603][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.643308][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.648747][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.655755][ T468] usb 4-1: USB disconnect, device number 52 [ 132.662885][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.672231][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.677717][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.686502][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.691987][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.697479][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.706189][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.711807][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.720496][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.725951][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.731491][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.740185][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.745577][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.751243][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.759954][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.765524][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.774225][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.779706][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.785145][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.793999][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.799548][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.808239][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.813721][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.819290][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.827898][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.833638][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.839144][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.847847][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.853380][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.862101][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.867721][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.873351][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.882059][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.887570][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.896248][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.901748][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.907296][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.916238][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.921757][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.927272][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.935950][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.941471][ T3711] new mount options do not match the existing superblock, will be ignored [ 132.950151][ T3710] cgroup: Unknown subsys name 'rdma' [ 132.965906][ T36] audit: type=1326 audit(1810603818.045:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.0.1104" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1739fb19 code=0x0 [ 133.208452][ T468] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 133.250671][ T3741] __vm_enough_memory: pid: 3741, comm: syz.4.1107, bytes: 11727877009408 not enough memory for the allocation [ 133.319741][ T36] audit: type=1400 audit(1810603818.405:1622): avc: denied { setattr } for pid=3746 comm="syz.2.1110" name="PACKET" dev="sockfs" ino=28427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.343673][ T36] audit: type=1400 audit(1810603818.405:1623): avc: denied { setattr } for pid=3746 comm="syz.2.1110" path="socket:[28425]" dev="sockfs" ino=28425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.363592][ T468] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.384944][ T3751] fuse: Unknown parameter 'group [ 133.384944][ T3751] ' [ 133.393106][ T3751] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 133.401281][ T468] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 133.423677][ T3751] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 133.434910][ T468] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.452520][ T36] audit: type=1400 audit(1810603818.535:1624): avc: denied { getattr } for pid=3748 comm="syz.4.1111" path="cgroup:[4026532300]" dev="nsfs" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.452688][ T468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.476737][ T36] audit: type=1326 audit(1810603818.535:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.4.1111" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8052d9fb19 code=0x0 [ 133.483141][ T468] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 133.517609][ T468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.526270][ T468] usb 1-1: config 0 descriptor?? [ 133.531623][ T3735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.688411][ T917] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 133.818409][ T917] usb 4-1: device descriptor read/64, error -71 [ 134.058412][ T917] usb 4-1: device descriptor read/64, error -71 [ 134.304622][ T917] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 134.478399][ T917] usb 4-1: device descriptor read/64, error -71 [ 134.578689][ T3779] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 134.591931][ T3784] overlayfs: failed to clone upperpath [ 134.597871][ T3784] overlayfs: failed to clone upperpath [ 134.604098][ T3784] overlayfs: failed to clone upperpath [ 134.618666][ T3784] overlayfs: failed to clone upperpath [ 134.624567][ T3784] overlayfs: failed to clone upperpath [ 134.631631][ T3784] overlayfs: failed to clone upperpath [ 134.637826][ T3784] overlayfs: failed to clone upperpath [ 134.644131][ T3784] overlayfs: failed to clone upperpath [ 134.650100][ T3784] overlayfs: failed to clone upperpath [ 134.718415][ T917] usb 4-1: device descriptor read/64, error -71 [ 134.766865][ T3796] ./dev/sda1: Can't lookup blockdev [ 134.848532][ T917] usb usb4-port1: attempt power cycle [ 134.966064][ T1295] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 134.998806][ T1295] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 135.097807][ T3831] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1131'. [ 135.109291][ T725] bridge_slave_1: left allmulticast mode [ 135.114956][ T725] bridge_slave_1: left promiscuous mode [ 135.123475][ T725] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.131335][ T725] bridge_slave_0: left allmulticast mode [ 135.137064][ T725] bridge_slave_0: left promiscuous mode [ 135.142890][ T725] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.188410][ T917] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 135.209344][ T917] usb 4-1: device descriptor read/8, error -71 [ 135.281152][ T725] veth1_macvtap: left promiscuous mode [ 135.286700][ T725] veth0_vlan: left promiscuous mode [ 135.341262][ T917] usb 4-1: device descriptor read/8, error -71 [ 135.578407][ T917] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 135.599359][ T917] usb 4-1: device descriptor read/8, error -71 [ 135.729333][ T917] usb 4-1: device descriptor read/8, error -71 [ 135.838485][ T917] usb usb4-port1: unable to enumerate USB device [ 135.972197][ T468] usbhid 1-1:0.0: can't add hid device: -71 [ 135.978736][ T468] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.990144][ T468] usb 1-1: USB disconnect, device number 72 [ 136.746396][ T36] audit: type=1400 audit(1810603821.825:1626): avc: denied { create } for pid=3851 comm="syz.3.1139" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 136.767391][ T36] audit: type=1400 audit(1810603821.835:1627): avc: denied { remount } for pid=3851 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 136.793316][ T36] audit: type=1400 audit(1810603821.855:1628): avc: denied { remove_name } for pid=3851 comm="syz.3.1139" name="hid.usb0" dev="configfs" ino=29098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.817931][ T36] audit: type=1400 audit(1810603821.855:1629): avc: denied { unlink } for pid=3851 comm="syz.3.1139" name="hid.usb0" dev="configfs" ino=29098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 137.449532][ T36] audit: type=1400 audit(1810603822.535:1630): avc: denied { map } for pid=3858 comm="syz.2.1141" path="/548/file0" dev="tmpfs" ino=3086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 137.484718][ T3861] kvm_intel: kvm [3860]: vcpu0, guest rIP: 0x563c0 Unhandled WRMSR(0x1d9) = 0x1001 [ 138.261723][ T3870] fuse: Bad value for 'fd' [ 138.508436][ T469] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 138.659463][ T469] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 138.669480][ T469] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 138.679347][ T469] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.690782][ T469] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 138.701603][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.710530][ T3873] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.717819][ T3873] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.725666][ T469] pl2303 4-1:1.0: pl2303 converter detected [ 138.732545][ T469] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 138.939274][ T469] usb 4-1: USB disconnect, device number 57 [ 138.947038][ T469] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 138.955159][ T469] pl2303 4-1:1.0: device disconnected [ 139.170033][ T36] audit: type=1400 audit(1810603824.255:1631): avc: denied { write } for pid=3879 comm="syz.0.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.528432][ T469] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 141.658407][ T469] usb 4-1: device descriptor read/64, error -71 [ 141.898456][ T469] usb 4-1: device descriptor read/64, error -71 [ 142.138432][ T469] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 142.268445][ T469] usb 4-1: device descriptor read/64, error -71 [ 142.510404][ T469] usb 4-1: device descriptor read/64, error -71 [ 142.618537][ T469] usb usb4-port1: attempt power cycle [ 142.958439][ T469] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 142.979566][ T469] usb 4-1: device descriptor read/8, error -71 [ 143.109483][ T469] usb 4-1: device descriptor read/8, error -71 [ 143.348474][ T469] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 143.369430][ T469] usb 4-1: device descriptor read/8, error -71 [ 143.499401][ T469] usb 4-1: device descriptor read/8, error -71 [ 143.608532][ T469] usb usb4-port1: unable to enumerate USB device [ 145.240858][ T36] audit: type=1400 audit(1810603830.325:1632): avc: denied { lock } for pid=3915 comm="syz.2.1159" path="socket:[29391]" dev="sockfs" ino=29391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.249618][ T3919] FAULT_INJECTION: forcing a failure. [ 145.249618][ T3919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.280216][ T3919] CPU: 0 UID: 0 PID: 3919 Comm: syz.3.1160 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 145.280252][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.280264][ T3919] Call Trace: [ 145.280270][ T3919] [ 145.280275][ T3919] __dump_stack+0x21/0x30 [ 145.280290][ T3919] dump_stack_lvl+0x140/0x1c0 [ 145.280300][ T3919] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.280310][ T3919] ? get_page_from_freelist+0x4aea/0x4ba0 [ 145.280324][ T3919] ? __switch_to+0xc6b/0x1320 [ 145.280336][ T3919] dump_stack+0x19/0x20 [ 145.280345][ T3919] should_fail_ex+0x3c2/0x510 [ 145.280361][ T3919] should_fail_alloc_page+0xec/0x110 [ 145.280373][ T3919] __alloc_pages_noprof+0x1c0/0x7e0 [ 145.280385][ T3919] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 145.280399][ T3919] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 145.280412][ T3919] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 145.280427][ T3919] pte_alloc_one+0x92/0x530 [ 145.280439][ T3919] ? __cfi_pte_alloc_one+0x10/0x10 [ 145.280451][ T3919] ? __alloc_pages_noprof+0x35a/0x7e0 [ 145.280464][ T3919] do_pte_missing+0xfc6/0x4440 [ 145.280477][ T3919] ? pte_marker_clear+0x1b0/0x1b0 [ 145.280488][ T3919] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 145.280500][ T3919] ? preempt_schedule_thunk+0x1a/0x40 [ 145.280513][ T3919] ? __cfi___pmd_alloc+0x10/0x10 [ 145.280531][ T3919] ? try_to_wake_up+0x1052/0x1d10 [ 145.280545][ T3919] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 145.280558][ T3919] handle_mm_fault+0x1189/0x1ba0 [ 145.280571][ T3919] ? __cfi_handle_mm_fault+0x10/0x10 [ 145.280580][ T3919] ? __kasan_check_write+0x18/0x20 [ 145.280596][ T3919] ? vfs_write+0xbd2/0xfd0 [ 145.280611][ T3919] ? lock_mm_and_find_vma+0xb8/0x390 [ 145.280621][ T3919] do_user_addr_fault+0x4ee/0x1230 [ 145.280633][ T3919] exc_page_fault+0x58/0xc0 [ 145.280648][ T3919] asm_exc_page_fault+0x2b/0x30 [ 145.280662][ T3919] RIP: 0010:__put_user_8+0x11/0x30 [ 145.280674][ T3919] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca e9 42 a5 02 00 90 90 90 90 90 90 90 90 90 [ 145.280683][ T3919] RSP: 0018:ffffc9000e6a7ee8 EFLAGS: 00050246 [ 145.280693][ T3919] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000 [ 145.280701][ T3919] RDX: ffffc90001e43000 RSI: 0000000000000007 RDI: 0000000000000008 [ 145.280708][ T3919] RBP: ffffc9000e6a7f10 R08: ffff88811ff293eb R09: 1ffff11023fe527d [ 145.280716][ T3919] R10: dffffc0000000000 R11: ffffed1023fe527e R12: dffffc0000000000 [ 145.280723][ T3919] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fbbc9ee19a0 [ 145.280731][ T3919] ? __x64_sys_get_robust_list+0x9d/0xf0 [ 145.280744][ T3919] x64_sys_call+0x2e84/0x2ee0 [ 145.280754][ T3919] do_syscall_64+0x57/0xf0 [ 145.280764][ T3919] ? clear_bhb_loop+0x50/0xa0 [ 145.280778][ T3919] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.280791][ T3919] RIP: 0033:0x7fbbc8f9fb19 [ 145.280800][ T3919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.280808][ T3919] RSP: 002b:00007fbbc9ee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 145.280818][ T3919] RAX: ffffffffffffffda RBX: 00007fbbc9225fa0 RCX: 00007fbbc8f9fb19 [ 145.280826][ T3919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.280832][ T3919] RBP: 00007fbbc9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 145.280838][ T3919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.280844][ T3919] R13: 00007fbbc9226038 R14: 00007fbbc9225fa0 R15: 00007ffd8c716758 [ 145.280853][ T3919] [ 146.750692][ T36] audit: type=1400 audit(1810603831.835:1633): avc: denied { read write } for pid=3926 comm="syz.3.1163" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.774069][ T36] audit: type=1400 audit(1810603831.835:1634): avc: denied { open } for pid=3926 comm="syz.3.1163" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.797267][ T36] audit: type=1400 audit(1810603831.835:1635): avc: denied { ioctl } for pid=3926 comm="syz.3.1163" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.840376][ T3929] /dev/md_syza0: Can't lookup blockdev [ 147.413623][ T36] audit: type=1400 audit(1810603832.495:1636): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 148.372760][ T3936] fuse: Bad value for 'fd' [ 152.158469][ T917] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 152.309423][ T917] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 152.317604][ T917] usb 1-1: config 0 has no interface number 0 [ 152.325092][ T917] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 152.334228][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.342248][ T917] usb 1-1: Product: syz [ 152.346449][ T917] usb 1-1: Manufacturer: syz [ 152.351055][ T917] usb 1-1: SerialNumber: syz [ 152.356118][ T917] usb 1-1: config 0 descriptor?? [ 152.565561][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.574548][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.582451][ T917] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 152.592889][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.601405][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.609222][ T917] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 152.621492][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.629896][ T917] asix 1-1:0.251: probe with driver asix failed with error -61 [ 152.637614][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.646631][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.655483][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.663577][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.672132][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.836091][ T36] audit: type=1400 audit(1810603838.915:1637): avc: denied { getopt } for pid=3963 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.888895][ T917] usb 1-1: USB disconnect, device number 73 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=5 req=1133 state=1 status=67 (errno 9: Bad file descriptor) [ 155.848388][ T36] audit: type=1400 audit(1810603840.925:1638): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2333]" dev="pipefs" ino=2333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 155.981488][ T978] bridge_slave_1: left allmulticast mode [ 155.987179][ T978] bridge_slave_1: left promiscuous mode [ 156.008793][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.019358][ T978] bridge_slave_0: left allmulticast mode [ 156.025025][ T978] bridge_slave_0: left promiscuous mode [ 156.030690][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.038612][ T978] tipc: Resetting bearer [ 156.063188][ T978] tipc: Disabling bearer [ 156.140770][ T978] tipc: Left network mode [ 156.145812][ T978] veth0_vlan: left promiscuous mode [ 156.321037][ T978] bridge_slave_1: left allmulticast mode [ 156.326725][ T978] bridge_slave_1: left promiscuous mode [ 156.332361][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.339890][ T978] bridge_slave_0: left allmulticast mode [ 156.345522][ T978] bridge_slave_0: left promiscuous mode [ 156.351172][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.441949][ T978] tipc: Left network mode [ 156.446577][ T978] tipc: Disabling bearer [ 156.451866][ T978] tipc: Left network mode [ 156.458133][ T978] veth1_macvtap: left promiscuous mode [ 156.463677][ T978] veth0_vlan: left promiscuous mode [ 156.469225][ T978] veth1_macvtap: left promiscuous mode [ 156.474697][ T978] veth0_vlan: left promiscuous mode