last executing test programs: 30.56951668s ago: executing program 0 (id=348): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x41}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) sendmmsg$unix(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x30, 0x10040000}}], 0x1, 0x44094) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) 29.841522149s ago: executing program 0 (id=350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r1 = syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="086b1d0101400800000001572b1fab6b056d3ce8e718353adf09026f00030107400709040000000101000000000904010101010200000905010900070000000000000001020000090402010101020000082405011401020607240104b2000009058209200001a29b5be6"], &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x5, 0x0, 0x0, 0x20, 0xa6}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) r4 = creat(&(0x7f00000010c0)='./bus\x00', 0x101) (rerun: 32) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc7, 0x0, 0x6}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000002b00)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000007"], 0x18}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="3a1d711e07", 0x5}], 0x1}}], 0x2, 0x44008004) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r6, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @rand_addr, 0x5}, 0x1c) (async, rerun: 64) write$binfmt_misc(r5, &(0x7f0000000300), 0xfdef) (rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES64=r9, @ANYRES16=r11, @ANYBLOB="000328bd7000ffdbdf25010000000000000009410000001c00180000000a69623a76657468315f746f5f626f6e6400000000"], 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x4) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 26.784198349s ago: executing program 0 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x41e04000) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x2000006, 0x10003) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000200)={0xfbfa, [0x0, 0x2], 0x7}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r7, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xe4, 0x7, 0xfffc, r6, 0x0, 0x0, 0x600}]) io_cancel(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f0000000280)="7715f8af7cc3613148702604da7c3e1ea8fba4efa104613937c63aca98e513b46a62b502e57962b17188a211d8db14ba11d50ad13f9fcae67e6d639c35fa7d252e4e601c6ffa4ed0221937a6bc3ddaa75b993270af2ba310fd50ca53eaa8af68dbae560cf04118948a8ebaa2da0668350ccb6414b0201506f0aa2621f5a080d535e9200d065bb69f0de6fde2cea92f4454db364a7cd96c9c239060729a953fba4c2d9b201840ec4a1783071ea2d1b1a49340ed6afbc5a60ad73073a1abd4832e63b1ddd11f10cfbd8ba75ff8fdcf", 0xce, 0x10000, 0x0, 0x2, r6}, &(0x7f0000000400)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 24.494264681s ago: executing program 0 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x80502, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000199000/0x800000)=nil, 0xc00000}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./config/usb_gadget/g1\x00', &(0x7f0000000100), &(0x7f0000000140)={'U-', 0x6}, 0x16, 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) sendto$unix(r2, &(0x7f0000000340)="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", 0x1000, 0x4000800, &(0x7f0000001340)=@file={0x1, './config\x00'}, 0x6e) (async) write(r2, &(0x7f0000000200)="05819d7357f6ee9743d884410f43e543f92af707c87c3307aa3396d18910cb0ab031ac9439f60bfdb0181d4def671ab6e9361f892d605c9bd5bfd2476285ef2c3380e2874ed7b352227ffd9ec648fe4f5c91dd540dad96fc83791e23df17a0f751568a73d7ada04c7dc368393e788b1a6f4901f92b26dd587e03538193636b8d65a35e8f1db6562cbdce59467752a30d12a5a4b87aea2871c71afc86e12dc90d85ab7a8560ff48c57a3471d93fc387c5757fe16b42f1855a1bd632bae6f9c14314c0826b2dc3ff62e646c3b0c8d56fe88ff11f64c46b5f4b52c9c1081553ef422e766a843abf49a22c", 0xe9) 24.418410478s ago: executing program 0 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 24.378360627s ago: executing program 0 (id=380): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x555d80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x73f99000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d3, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@local, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000004000000200001800d0001"], 0x34}}, 0x4040) (async) pidfd_send_signal(0xffffffffffffffff, 0x400, 0x0, 0x3) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x160, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x4b7}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x619}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r8, 0x1, 0x3) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000802, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x6) (async) sendmmsg$sock(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 24.339013885s ago: executing program 32 (id=380): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x555d80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x73f99000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d3, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@local, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000004000000200001800d0001"], 0x34}}, 0x4040) (async) pidfd_send_signal(0xffffffffffffffff, 0x400, 0x0, 0x3) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x160, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x4b7}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x619}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r8, 0x1, 0x3) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000802, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x6) (async) sendmmsg$sock(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 9.968214265s ago: executing program 4 (id=381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/171, 0xab}], 0x5, &(0x7f00000007c0)=""/133, 0x85}, 0xc}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/183, 0xb7}], 0x2, &(0x7f0000000a40)=""/88, 0x58}, 0x9}], 0x2, 0x0, &(0x7f0000000b80)={r4, r5+60000000}) 8.180106776s ago: executing program 4 (id=381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/171, 0xab}], 0x5, &(0x7f00000007c0)=""/133, 0x85}, 0xc}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/183, 0xb7}], 0x2, &(0x7f0000000a40)=""/88, 0x58}, 0x9}], 0x2, 0x0, &(0x7f0000000b80)={r4, r5+60000000}) 6.420130002s ago: executing program 3 (id=431): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\'-\'(]\x00', &(0x7f0000000180)='-\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000006c0)={0x4, 0x380, 0x400, &(0x7f00000002c0)=[0x3, 0x8, 0x6, 0x8, 0x0, 0x6b, 0x8, 0x6, 0x6b, 0x3, 0x7, 0x9c, 0x2, 0x2420, 0x9, 0x2, 0x2, 0x4, 0xe0, 0x6773, 0x2, 0x7, 0xfffffffffffffffe, 0x9, 0xf95a, 0x2, 0x3, 0x7f, 0x8000000000000001, 0x6, 0x6fe64ba9, 0x0, 0x1, 0x34c, 0x6, 0x9, 0x7, 0x3, 0x2, 0x7, 0x2, 0x40000000000000, 0x3, 0x9, 0xd, 0xfffffffffffffff7, 0xe5db, 0x100, 0x0, 0x8, 0x3, 0x800, 0xde64, 0x2, 0xffffffffffff294d, 0x2, 0xf3, 0x0, 0x9, 0x360a, 0x8, 0x6, 0x5, 0x10001, 0x6, 0x1, 0x4, 0xe, 0x8, 0x3ff, 0x4, 0x680e, 0x24, 0x2000000006, 0x4, 0x3, 0x800, 0x1, 0x1, 0x1, 0x7fffffffffffffff, 0x3, 0xffffffff, 0x1, 0x9, 0x1, 0x5, 0xffffffff, 0x9, 0x9, 0x9, 0x4, 0x7, 0xffffffffffffff80, 0x8, 0xfffffffffffff5d5, 0x9, 0x4, 0x6, 0x8001, 0x2, 0x0, 0x1, 0x446, 0x800, 0xffff, 0x4c, 0x7, 0x9, 0xa, 0x0, 0x5, 0x3794aa59, 0x400, 0x0, 0x3, 0x3, 0x100000001, 0x200, 0x2, 0x80, 0x1, 0x95, 0x4, 0x8, 0xb2, 0x19]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYBLOB='+nPt_pcJRpuasct '], 0x21) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x400007bf, 0x1, 0x810003, 0x3, 0x400600cc4, 0x1, 0x462e00000000000, 0x7fffffff, 0x801, 0x0, 0x2, 0x2, 0x9, 0x10091], 0x58000, 0x391181}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0xa16a, 0x4, 0x6, 0x0, 0x3, 0xffffffff}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xa4, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.38556046s ago: executing program 1 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000072, 0x3}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.354188247s ago: executing program 3 (id=433): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev, @in=@empty}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000140)=0xe8) socket(0xa, 0x1, 0x800000) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x16, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) 6.284263372s ago: executing program 3 (id=434): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x7fffffff, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x10001, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0x81, 0xb, 0xf9a2, 0xa9, 0xff, 0x4, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x0, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x14, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0xa, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf5, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffffa, 0x192, 0x1000, 0xfffffffe, 0x5], [0x3, 0xfffffffa, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x6, 0x0, 0x9, 0x3, 0xc7, 0x401, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x3, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x0, 0x100, 0x1, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x200005, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0xa, 0x80008001, 0x7777, 0x101, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100006, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffe, 0x324e, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x7, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x7, 0x8080000, 0x1000, &(0x7f000000e000/0x1000)=nil}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5]) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000340)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10002, 0x2, 0x100000, 0x2000, &(0x7f0000006000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80480, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x3}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2e) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r12, 0x4068aea3, &(0x7f0000000280)={0xa4, 0x0, 0x1}) r13 = dup(r11) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f00000001c0)={'macsec0\x00', 0xfff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.281862793s ago: executing program 1 (id=435): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) getpid() openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x40020000, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x2, 0x6, 0x0, r2}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000000)="120000004300e7ef7f000000000000e100a197", 0x26, 0x408a6, 0x0, 0xfeca) 6.281232393s ago: executing program 4 (id=381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/171, 0xab}], 0x5, &(0x7f00000007c0)=""/133, 0x85}, 0xc}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/183, 0xb7}], 0x2, &(0x7f0000000a40)=""/88, 0x58}, 0x9}], 0x2, 0x0, &(0x7f0000000b80)={r4, r5+60000000}) 4.426120139s ago: executing program 2 (id=436): syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffaa, 0x40880) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206d044fc200000000000109023372e26dc082c94e9b7816492400010000000409040008020300030009210000000122180009058103ff03bd0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) (async) r1 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 4.425772229s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x3000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9800, &(0x7f0000000000)={0x4, 0x2}, 0x20) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000040)) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0xc4b}}], 0x18}}], 0x2, 0x30044080) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x30, r4, 0x71e09000) mount$overlay(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000280)='cgroup2\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x3000, 0x0) (async) getpid() (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r2, 0x0) (async) setns(r3, 0x24020000) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9800, &(0x7f0000000000)={0x4, 0x2}, 0x20) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000040)) (async) socket(0xa, 0x3, 0xff) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4}, 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0xc4b}}], 0x18}}], 0x2, 0x30044080) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x30, r4, 0x71e09000) (async) mount$overlay(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000280)='cgroup2\x00') (async) 4.320100933s ago: executing program 4 (id=381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/171, 0xab}], 0x5, &(0x7f00000007c0)=""/133, 0x85}, 0xc}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/183, 0xb7}], 0x2, &(0x7f0000000a40)=""/88, 0x58}, 0x9}], 0x2, 0x0, &(0x7f0000000b80)={r4, r5+60000000}) 2.363612232s ago: executing program 1 (id=438): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @rthdr={{0x28, 0x29, 0x39, {0x33212f25b1bd33bf, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}]}}}], 0x50}}], 0x1, 0x4040084) mkdir(&(0x7f0000000000)='./file0\x00', 0x111) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x2000000, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d6777506be3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x9, {0x0, 0x200000009, 0x8, 0x3, 0x8, 0xc, {0x1, 0x8010001, 0x4d2, 0x40d, 0x6, 0xfffffffffffffffe, 0xfce, 0x2, 0x5, 0x4000, 0x6fd, r3, r4, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xffffffff80000000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}, @NFQA_CFG_PARAMS={0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5de, 0x8b, 0x1, 0x9, 'syz0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2801, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd70005fd40d410c0000001800058008000100756470000c000280080004"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x1004c8d0) close_range(r9, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r3, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x64961, 0xb3836f6d7a15f2d) 2.316422832s ago: executing program 2 (id=439): openat2(0xffffffffffffffff, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x174, 0x11}, 0x18) 2.316063232s ago: executing program 3 (id=440): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, r0, 0xc4bfc000) signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x104]}, 0x1) listen(r0, 0x2) r1 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='environ\x00') syz_open_procfs(r1, &(0x7f00000001c0)='projid_map\x00') r2 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x80800) 2.315838862s ago: executing program 2 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x3}}, 0x2e) r4 = dup3(r2, r3, 0x80000) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x100000001, 0x2, 0x100000000, 0x80000000, 0x1, 0x2, 0x3, 0xd7c, 0x6, 0xff, 0x3ff, 0x5, 0x0, 0x2, 0x406, 0x8], 0x6000, 0x1000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000002e40)='asymmetric\x00', &(0x7f00000001c0)=@secondary) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) read(r7, &(0x7f0000000240)=""/2, 0x2) close(r6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x80047441, 0x0) r9 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x818, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) accept4$unix(r10, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.291094038s ago: executing program 2 (id=442): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="04010000100081020000000000000000fc0200000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000003c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000a000000260000000000000014000e3737faf9c1625f63674889a58ba5e3203e12c5124f2d5982fdab6360bb"], 0x104}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x3c2, 0x14) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x3c2, 0x14) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000400109f2dd0f4800000001221a0009058103ff00000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00223e00000005011f2025ff02c0"], 0x0}, 0x0) write(r2, &(0x7f0000000080)='4', 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket(0x2, 0x3, 0xff) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00001e1000/0x400000)=nil) (async) r6 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00001e1000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d07, 0x0, 0xd311}]}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d07, 0x0, 0xd311}]}) syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x1000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 2.289642928s ago: executing program 1 (id=443): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0xffffffffffffffff, 0x2, 0x3, 0x9, 0x2ca, 0x38, 0x425c, 0x20000007, 0xfffb, 0x20, 0x1, 0xfff8, 0x41e, 0xfff4}, [{0x6474e551, 0x4, 0xfffffffa, 0x3, 0x9, 0xfffffe01, 0x101}]}, 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="65486d36a05f8c", 0x7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="e533a30c5df1ad12"}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setresuid(0x0, 0xee00, 0x0) r3 = inotify_init1(0x800) cachestat(r3, &(0x7f0000000040)={0x5, 0x4}, 0x0, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.230061801s ago: executing program 4 (id=381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/171, 0xab}], 0x5, &(0x7f00000007c0)=""/133, 0x85}, 0xc}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/183, 0xb7}], 0x2, &(0x7f0000000a40)=""/88, 0x58}, 0x9}], 0x2, 0x0, &(0x7f0000000b80)={r4, r5+60000000}) 128.681791ms ago: executing program 1 (id=444): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r1 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRES8=r2]) 128.223711ms ago: executing program 2 (id=445): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3f7, 0x100, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4150) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0xd8, 0x1, 0x1, 0x301, 0x0, 0x0, {0x9, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x500}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 127.821692ms ago: executing program 3 (id=446): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0xffffffff, 0x26d}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r6) (async) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0xffffffff, 0x26d}}], 0x1, 0x0, 0x0) (async) 36.399902ms ago: executing program 2 (id=447): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x0) r4 = eventfd2(0x42000006, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r4, 0x1, 0x2, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4, 0x1, 0x3, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r5}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='selinuxfs\x00', 0x2, &(0x7f00000003c0)='\x00') sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f00000000c0)={0x1d, r5}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 35.230842ms ago: executing program 1 (id=448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffe4) 0s ago: executing program 4 (id=381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/171, 0xab}], 0x5, &(0x7f00000007c0)=""/133, 0x85}, 0xc}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/183, 0xb7}], 0x2, &(0x7f0000000a40)=""/88, 0x58}, 0x9}], 0x2, 0x0, &(0x7f0000000b80)={r4, r5+60000000}) kernel console output (not intermixed with test programs): to 7 [ 36.369708][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 36.382285][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.398322][ T9] usb 2-1: config 0 descriptor?? [ 36.427704][ T36] audit: type=1400 audit(1790610003.060:239): avc: denied { ioctl } for pid=766 comm="syz.2.76" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.687522][ T65] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.809147][ T9] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 36.817787][ T439] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.826653][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input4 [ 36.839249][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.849562][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.858487][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 36.867675][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.877906][ T65] usb 4-1: Found UVC 1.00 device (046d:0825) [ 36.906327][ T9] keytouch 0003:0926:3333.0003: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 36.919409][ T772] udevd[772]: open /dev/null failed: No such file or directory [ 36.968462][ T439] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 36.979452][ T439] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 36.992579][ T439] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.001351][ T439] usb 3-1: string descriptor 0 read error: -22 [ 37.007826][ T439] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 37.016886][ T439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.077018][ T711] pimreg: tun_chr_ioctl cmd 2147767506 [ 37.084266][ T36] audit: type=1400 audit(1790610003.710:240): avc: denied { bind } for pid=710 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.149373][ T65] usb 4-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 37.160125][ T65] usb 4-1: No streaming interface found for terminal 2. [ 37.168791][ T65] usb 4-1: USB disconnect, device number 3 [ 37.327337][ T9] usb 2-1: USB disconnect, device number 4 [ 37.457526][ T439] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0004/input/input5 [ 37.472652][ T439] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0004/input/input6 [ 37.489124][ T439] kye 0003:0458:5013.0004: input,hiddev96,hidraw1: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 37.496153][ T773] udevd[773]: open /dev/null failed: No such file or directory [ 37.858398][ T788] netlink: 64 bytes leftover after parsing attributes in process `syz.1.81'. [ 37.859055][ T36] audit: type=1400 audit(1790610004.490:241): avc: denied { ioctl } for pid=786 comm="syz.1.81" path="socket:[9089]" dev="sockfs" ino=9089 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.892013][ T36] audit: type=1400 audit(1790610004.490:242): avc: denied { create } for pid=786 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.949445][ T36] audit: type=1400 audit(1790610004.580:243): avc: denied { write } for pid=797 comm="syz.1.84" path="socket:[9132]" dev="sockfs" ino=9132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.950363][ T798] erofs: dax options not supported [ 38.000183][ T36] audit: type=1400 audit(1790610004.630:244): avc: denied { read write } for pid=799 comm="syz.0.85" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.377277][ T439] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.517278][ T439] usb 2-1: device descriptor read/64, error -71 [ 38.548100][ T822] kvm_intel: kvm [821]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x4921 [ 38.560452][ T822] kvm: kvm [821]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2f1c [ 38.574209][ T822] kvm: kvm [821]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x29be [ 38.589841][ T824] fuse: Bad value for 'rootmode' [ 38.597432][ T822] kvm: MONITOR instruction emulated as NOP! [ 38.757315][ T439] usb 2-1: device descriptor read/64, error -71 [ 38.987330][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.997351][ T439] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.127261][ T439] usb 2-1: device descriptor read/64, error -71 [ 39.158885][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.167294][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 39.174922][ T9] usb 4-1: can't read configurations, error -71 [ 39.367293][ T439] usb 2-1: device descriptor read/64, error -71 [ 39.446151][ T353] usb 3-1: USB disconnect, device number 8 [ 39.477477][ T439] usb usb2-port1: attempt power cycle [ 39.494712][ T847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=847 comm=syz.2.95 [ 39.799486][ T876] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.827334][ T439] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.853270][ T439] usb 2-1: device descriptor read/8, error -71 [ 39.864603][ T878] FAULT_INJECTION: forcing a failure. [ 39.864603][ T878] name failslab, interval 1, probability 0, space 0, times 0 [ 39.877691][ T878] CPU: 0 UID: 0 PID: 878 Comm: syz.3.105 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 39.877734][ T878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.877748][ T878] Call Trace: [ 39.877755][ T878] [ 39.877764][ T878] __dump_stack+0x21/0x30 [ 39.877802][ T878] dump_stack_lvl+0x140/0x1c0 [ 39.877820][ T878] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.877838][ T878] ? handle_mm_fault+0x16fe/0x1ba0 [ 39.877855][ T878] dump_stack+0x19/0x20 [ 39.877872][ T878] should_fail_ex+0x3c2/0x510 [ 39.877888][ T878] should_failslab+0xac/0x100 [ 39.877905][ T878] kmem_cache_alloc_noprof+0x42/0x410 [ 39.877917][ T878] ? __cfi_handle_mm_fault+0x10/0x10 [ 39.877931][ T878] ? lock_vma_under_rcu+0x4cf/0x590 [ 39.877946][ T878] ? getname_flags+0xcc/0x6b0 [ 39.877960][ T878] getname_flags+0xcc/0x6b0 [ 39.877974][ T878] getname+0x1b/0x30 [ 39.877987][ T878] do_sys_openat2+0xda/0x1d0 [ 39.878004][ T878] ? do_sys_open+0x100/0x100 [ 39.878021][ T878] ? __kasan_check_write+0x18/0x20 [ 39.878035][ T878] ? do_user_addr_fault+0xbf5/0x1230 [ 39.878047][ T878] __x64_sys_openat+0x13a/0x170 [ 39.878065][ T878] x64_sys_call+0xe69/0x2ee0 [ 39.878077][ T878] do_syscall_64+0x57/0xf0 [ 39.878089][ T878] ? clear_bhb_loop+0x50/0xa0 [ 39.878105][ T878] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.878120][ T878] RIP: 0033:0x7fa30335e98e [ 39.878132][ T878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 39.878142][ T878] RSP: 002b:00007fa304193ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.878158][ T878] RAX: ffffffffffffffda RBX: 00007fa3041966c0 RCX: 00007fa30335e98e [ 39.878168][ T878] RDX: 0000000000000002 RSI: 00007fa30343440a RDI: ffffffffffffff9c [ 39.878177][ T878] RBP: 00007fa30343506b R08: 0000000000000000 R09: 0000000000000000 [ 39.878185][ T878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003a [ 39.878193][ T878] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffd313fb5b8 [ 39.878203][ T878] [ 39.881301][ T878] syzkaller1: entered promiscuous mode [ 40.108719][ T878] syzkaller1: entered allmulticast mode [ 40.118308][ T439] usb 2-1: device descriptor read/8, error -71 [ 40.357318][ T439] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.378471][ T439] usb 2-1: device descriptor read/8, error -71 [ 40.511294][ T439] usb 2-1: device descriptor read/8, error -71 [ 40.576567][ T888] overlayfs: failed to resolve './file2': -2 [ 40.627334][ T439] usb usb2-port1: unable to enumerate USB device [ 40.767321][ T439] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.918514][ T439] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.929599][ T439] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.942696][ T439] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.949436][ T439] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 40.958581][ T439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.967184][ T439] usb 1-1: config 0 descriptor?? [ 41.375374][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.383879][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.390891][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.398127][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.405104][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.412411][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.419627][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.426686][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.433811][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.440949][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.448040][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.455187][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.462348][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.470182][ T439] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 41.477309][ T439] saitek 0003:06A3:0CD0.0005: unbalanced collection at end of report description [ 41.487266][ T439] saitek 0003:06A3:0CD0.0005: parse failed [ 41.493292][ T439] saitek 0003:06A3:0CD0.0005: probe with driver saitek failed with error -22 [ 41.586046][ T439] usb 1-1: USB disconnect, device number 3 [ 50.205461][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 50.205482][ T36] audit: type=1400 audit(1790610016.830:269): avc: denied { search } for pid=896 comm="syz.0.111" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.233471][ T36] audit: type=1400 audit(1790610016.830:270): avc: denied { append } for pid=896 comm="syz.0.111" name="uprobe_events" dev="tracefs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.297791][ T36] audit: type=1400 audit(1790610016.930:271): avc: denied { ioctl } for pid=917 comm="syz.3.117" path="socket:[10410]" dev="sockfs" ino=10410 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.298796][ T916] rust_binder: Write failure EFAULT in pid:100 [ 50.327658][ T36] audit: type=1400 audit(1790610016.960:272): avc: denied { write } for pid=917 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.362155][ T921] FAULT_INJECTION: forcing a failure. [ 50.362155][ T921] name failslab, interval 1, probability 0, space 0, times 0 [ 50.380977][ T921] CPU: 0 UID: 0 PID: 921 Comm: syz.3.118 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 50.381002][ T921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.381009][ T921] Call Trace: [ 50.381014][ T921] [ 50.381018][ T921] __dump_stack+0x21/0x30 [ 50.381041][ T921] dump_stack_lvl+0x140/0x1c0 [ 50.381057][ T921] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.381085][ T921] dump_stack+0x19/0x20 [ 50.381101][ T921] should_fail_ex+0x3c2/0x510 [ 50.381116][ T921] ? anon_vma_name_alloc+0x5e/0x1a0 [ 50.381128][ T921] should_failslab+0xac/0x100 [ 50.381143][ T921] __kmalloc_noprof+0x69/0x510 [ 50.381157][ T921] ? anon_vma_name_alloc+0x5e/0x1a0 [ 50.381169][ T921] ? __kasan_check_write+0x18/0x20 [ 50.381182][ T921] ? _copy_from_user+0x87/0xa0 [ 50.381199][ T921] anon_vma_name_alloc+0x5e/0x1a0 [ 50.381211][ T921] prctl_set_vma+0x24d/0x590 [ 50.381224][ T921] ? prctl_get_mdwe+0x120/0x120 [ 50.381237][ T921] ? __kasan_check_read+0x15/0x20 [ 50.381249][ T921] ? static_key_count+0x45/0x70 [ 50.381264][ T921] ? security_task_prctl+0x2b4/0x2e0 [ 50.381280][ T921] __se_sys_prctl+0x4a9/0x1480 [ 50.381293][ T921] ? __x64_sys_prctl+0xf0/0xf0 [ 50.381305][ T921] ? __kasan_check_write+0x18/0x20 [ 50.381317][ T921] ? fpregs_restore_userregs+0x11c/0x260 [ 50.381332][ T921] __x64_sys_prctl+0xc3/0xf0 [ 50.381348][ T921] x64_sys_call+0x2614/0x2ee0 [ 50.381360][ T921] do_syscall_64+0x57/0xf0 [ 50.381373][ T921] ? clear_bhb_loop+0x50/0xa0 [ 50.381388][ T921] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.381403][ T921] RIP: 0033:0x7fa30339e159 [ 50.381414][ T921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.381424][ T921] RSP: 002b:00007fa304196028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.381440][ T921] RAX: ffffffffffffffda RBX: 00007fa303625fa0 RCX: 00007fa30339e159 [ 50.381450][ T921] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 50.381458][ T921] RBP: 00007fa30343506b R08: 0000200000000b40 R09: 0000000000000000 [ 50.381467][ T921] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 50.381475][ T921] R13: 00007fa303626038 R14: 00007fa303625fa0 R15: 00007ffd313fb5b8 [ 50.381486][ T921] [ 50.620151][ T439] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 50.666978][ T36] audit: type=1400 audit(1790610017.290:273): avc: denied { create } for pid=934 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.686875][ T36] audit: type=1400 audit(1790610017.300:274): avc: denied { setopt } for pid=934 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.787311][ T439] usb 3-1: device descriptor read/64, error -71 [ 50.887335][ T353] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.027317][ T439] usb 3-1: device descriptor read/64, error -71 [ 51.037284][ T353] usb 2-1: Using ep0 maxpacket: 32 [ 51.043793][ T353] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 51.051463][ T353] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.062721][ T353] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.075757][ T353] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.082435][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 51.092113][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.100998][ T353] usb 2-1: config 0 descriptor?? [ 51.107396][ T353] usbhid 2-1:0.0: can't add hid device: -22 [ 51.113514][ T353] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 51.186951][ T36] audit: type=1400 audit(1790610017.810:275): avc: denied { map } for pid=936 comm="syz.0.121" path="socket:[10587]" dev="sockfs" ino=10587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.209914][ T36] audit: type=1400 audit(1790610017.810:276): avc: denied { accept } for pid=936 comm="syz.0.121" path="socket:[10587]" dev="sockfs" ino=10587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.267329][ T439] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 51.309280][ T353] usb 2-1: USB disconnect, device number 9 [ 51.407259][ T439] usb 3-1: device descriptor read/64, error -71 [ 51.588819][ T945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.598082][ T36] audit: type=1400 audit(1790610018.230:277): avc: denied { read } for pid=944 comm="syz.3.123" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.622277][ T36] audit: type=1400 audit(1790610018.230:278): avc: denied { open } for pid=944 comm="syz.3.123" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.647337][ T439] usb 3-1: device descriptor read/64, error -71 [ 51.662424][ T949] capability: warning: `syz.3.124' uses deprecated v2 capabilities in a way that may be insecure [ 51.767413][ T439] usb usb3-port1: attempt power cycle [ 52.107255][ T439] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 52.138198][ T439] usb 3-1: device descriptor read/8, error -71 [ 52.278191][ T439] usb 3-1: device descriptor read/8, error -71 [ 52.527504][ T439] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 52.568521][ T439] usb 3-1: device descriptor read/8, error -71 [ 52.708157][ T439] usb 3-1: device descriptor read/8, error -71 [ 52.757005][ T971] netlink: 'syz.1.130': attribute type 27 has an invalid length. [ 52.827405][ T439] usb usb3-port1: unable to enumerate USB device [ 53.217266][ T939] Bluetooth: hci0: command 0x1003 tx timeout [ 53.217304][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.487270][ T439] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.647331][ T439] usb 1-1: Using ep0 maxpacket: 16 [ 53.664972][ T439] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 53.684355][ T439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.694431][ T439] usb 1-1: Product: syz [ 53.702534][ T439] usb 1-1: Manufacturer: syz [ 53.712630][ T439] usb 1-1: SerialNumber: syz [ 53.929890][ T439] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.950009][ T439] usb 1-1: USB disconnect, device number 4 [ 53.974616][ T905] udevd[905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.554741][ T987] netlink: 'syz.0.136': attribute type 13 has an invalid length. [ 54.567555][ T987] virtio_net virtio1 eth0: refused to change device tx_queue_len [ 54.600374][ T990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'. [ 54.658443][ T994] netlink: 'syz.0.139': attribute type 16 has an invalid length. [ 55.447227][ T439] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 55.610019][ T439] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 55.618721][ T439] usb 1-1: config 0 has no interface number 0 [ 55.633103][ T439] usb 1-1: config 0 interface 41 has no altsetting 0 [ 55.643746][ T439] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 55.653271][ T439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.662591][ T439] usb 1-1: Product: syz [ 55.669231][ T439] usb 1-1: Manufacturer: syz [ 55.674066][ T439] usb 1-1: SerialNumber: syz [ 55.684387][ T439] usb 1-1: config 0 descriptor?? [ 55.695545][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.718359][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 55.718378][ T36] audit: type=1400 audit(1790610022.350:285): avc: denied { create } for pid=1016 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 55.726681][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.753998][ T36] audit: type=1400 audit(1790610022.380:286): avc: denied { connect } for pid=1016 comm="syz.3.144" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.759917][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.796605][ T36] audit: type=1400 audit(1790610022.420:287): avc: denied { mount } for pid=1019 comm="syz.1.145" name="/" dev="configfs" ino=2565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.801885][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.832290][ T36] audit: type=1400 audit(1790610022.420:288): avc: denied { search } for pid=1019 comm="syz.1.145" name="/" dev="configfs" ino=2565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.854847][ T36] audit: type=1400 audit(1790610022.430:289): avc: denied { write } for pid=1019 comm="syz.1.145" name="usb_gadget" dev="configfs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.878010][ T36] audit: type=1400 audit(1790610022.430:290): avc: denied { add_name } for pid=1019 comm="syz.1.145" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.902141][ T36] audit: type=1400 audit(1790610022.430:291): avc: denied { create } for pid=1019 comm="syz.1.145" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 55.922800][ T36] audit: type=1400 audit(1790610022.430:292): avc: denied { create } for pid=1019 comm="syz.1.145" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 55.935231][ T439] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 55.943347][ T36] audit: type=1400 audit(1790610022.460:293): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.975265][ T353] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 56.037326][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 56.117326][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 56.125079][ T353] usb 3-1: device descriptor read/64, error -71 [ 56.187299][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 56.193871][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.205075][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.215988][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.227060][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.238214][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.248845][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 56.258025][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.267046][ T9] usb 4-1: config 0 descriptor?? [ 56.273929][ T9] hub 4-1:0.0: Invalid hub with more than one config or interface [ 56.282054][ T9] hub 4-1:0.0: probe with driver hub failed with error -22 [ 56.290837][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 56.299119][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 56.308207][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.319039][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.328053][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 56.340340][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 56.349627][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 56.357728][ T10] usb 2-1: Product: ࠒ [ 56.362075][ T10] usb 2-1: Manufacturer: 怣婍뜱칍榱⃥贜꯫౱焉䏾ᦍ㷇거鈪ㄑ₝쌧樧奡⽠쇸锳앬篷唾祇ಙ즦Ų [ 56.376241][ T1027] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 56.383697][ T353] usb 3-1: device descriptor read/64, error -71 [ 56.390937][ T10] usb 2-1: Found UVC 1.00 device ࠒ (8086:0ad2) [ 56.397543][ T10] usb 2-1: No streaming interface found for terminal 2. [ 56.474777][ T10] usb 4-1: USB disconnect, device number 6 [ 56.593407][ T9] usb 2-1: USB disconnect, device number 10 [ 56.627303][ T353] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 56.757394][ T353] usb 3-1: device descriptor read/64, error -71 [ 56.997315][ T353] usb 3-1: device descriptor read/64, error -71 [ 57.043429][ T36] audit: type=1400 audit(1790610023.670:294): avc: denied { connect } for pid=1041 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.107446][ T353] usb usb3-port1: attempt power cycle [ 57.148567][ T1052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 57.182337][ T1058] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 57.193105][ T1058] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 57.457314][ T353] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 57.478386][ T353] usb 3-1: device descriptor read/8, error -71 [ 57.608549][ T353] usb 3-1: device descriptor read/8, error -71 [ 57.847279][ T353] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 57.868583][ T353] usb 3-1: device descriptor read/8, error -71 [ 57.998221][ T353] usb 3-1: device descriptor read/8, error -71 [ 58.079475][ T1067] ======================================================= [ 58.079475][ T1067] WARNING: The mand mount option has been deprecated and [ 58.079475][ T1067] and is ignored by this kernel. Remove the mand [ 58.079475][ T1067] option from the mount to silence this warning. [ 58.079475][ T1067] ======================================================= [ 58.118245][ T353] usb usb3-port1: unable to enumerate USB device [ 58.225350][ T9] usb 1-1: USB disconnect, device number 5 [ 58.367296][ T353] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 58.518704][ T353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.527692][ T353] usb 2-1: not running at top speed; connect to a high speed hub [ 58.536563][ T353] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.548029][ T353] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 58.557718][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 58.566291][ T353] usb 2-1: Product: syz [ 58.570876][ T353] usb 2-1: Manufacturer: syz [ 58.577603][ T353] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 59.005977][ T353] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 59.035172][ T353] uvcvideo 2-1:1.1: No frame descriptor found for the default format. [ 59.043942][ T353] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 59.096941][ T1081] netlink: 124 bytes leftover after parsing attributes in process `syz.2.165'. [ 59.245649][ T353] usb 2-1: USB disconnect, device number 11 [ 59.631907][ T1083] process 'syz.2.166' launched './file0' with NULL argv: empty string added [ 59.641334][ T1083] Invalid argument reading file caps for ./file0 [ 59.762879][ T1090] x_tables: unsorted underflow at hook 4 [ 59.938048][ T1100] udevd[1100]: open /dev/null failed: No such file or directory [ 59.957711][ T353] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 59.965866][ T905] udevd[905]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 59.987922][ T905] udevd[905]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 60.081393][ T1106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1106 comm=syz.3.173 [ 60.097913][ T1104] SELinux: failed to load policy [ 60.108502][ T1106] netlink: 'syz.3.173': attribute type 27 has an invalid length. [ 60.127272][ T353] usb 3-1: Using ep0 maxpacket: 8 [ 60.139869][ T353] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 60.157130][ T353] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.176531][ T353] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.184552][ T353] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 60.193896][ T353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.202642][ T353] usb 3-1: config 0 descriptor?? [ 60.357326][ T439] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 60.508651][ T439] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 60.538471][ T439] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 60.569455][ T439] usb 2-1: config 1 interface 0 has no altsetting 0 [ 60.590127][ T439] usb 2-1: string descriptor 0 read error: -22 [ 60.596448][ T439] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 60.614504][ T439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.680910][ T353] usbhid 3-1:0.0: can't add hid device: -71 [ 60.687585][ T353] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 60.696626][ T353] usb 3-1: USB disconnect, device number 17 [ 61.037349][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 61.037369][ T36] audit: type=1400 audit(1790610027.660:308): avc: denied { ioctl } for pid=1108 comm="syz.1.174" path="socket:[16103]" dev="sockfs" ino=16103 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.039184][ T439] usbhid 2-1:1.0: can't add hid device: -32 [ 61.076701][ T439] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 61.108102][ T439] usb 2-1: USB disconnect, device number 12 [ 61.200578][ T36] audit: type=1400 audit(1790610027.830:309): avc: denied { getopt } for pid=1131 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.321273][ T1135] kvm: kvm [1131]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 61.330863][ T1135] kvm: kvm [1131]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 61.516909][ T36] audit: type=1400 audit(1790610028.140:310): avc: denied { setopt } for pid=1154 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.599160][ T36] audit: type=1400 audit(1790610028.230:311): avc: denied { map } for pid=1159 comm="syz.1.187" path="socket:[16591]" dev="sockfs" ino=16591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.601191][ T1162] netlink: 220 bytes leftover after parsing attributes in process `syz.0.188'. [ 61.636240][ T36] audit: type=1400 audit(1790610028.260:312): avc: denied { relabelfrom } for pid=1160 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.655973][ T36] audit: type=1400 audit(1790610028.260:313): avc: denied { relabelto } for pid=1160 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.687314][ T439] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 61.697910][ T36] audit: type=1400 audit(1790610028.330:314): avc: denied { attach_queue } for pid=1160 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.827396][ T439] usb 4-1: device descriptor read/64, error -71 [ 61.839031][ T1168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.189'. [ 61.848921][ T1168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 61.858571][ T1168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.189'. [ 62.067942][ T36] audit: type=1400 audit(1790610028.700:315): avc: denied { append } for pid=1178 comm="syz.2.192" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.091571][ T36] audit: type=1400 audit(1790610028.700:316): avc: denied { cmd } for pid=1178 comm="syz.2.192" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 62.092725][ T439] usb 4-1: device descriptor read/64, error -71 [ 62.253824][ T1186] tipc: Started in network mode [ 62.259598][ T1186] tipc: Node identity 3264a40667a1, cluster identity 4711 [ 62.266854][ T1186] tipc: Enabled bearer , priority 0 [ 62.275116][ T1186] syzkaller0: MTU too low for tipc bearer [ 62.281142][ T1186] tipc: Disabling bearer [ 62.299613][ T36] audit: type=1400 audit(1790610028.930:317): avc: denied { read } for pid=1188 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.359116][ T439] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 62.497284][ T439] usb 4-1: device descriptor read/64, error -71 [ 62.697291][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 62.747373][ T439] usb 4-1: device descriptor read/64, error -71 [ 62.837399][ T9] usb 3-1: device descriptor read/64, error -71 [ 62.867440][ T439] usb usb4-port1: attempt power cycle [ 63.077303][ T9] usb 3-1: device descriptor read/64, error -71 [ 63.087281][ T353] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 63.207358][ T439] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 63.217335][ T353] usb 2-1: device descriptor read/64, error -71 [ 63.228409][ T439] usb 4-1: device descriptor read/8, error -71 [ 63.317351][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 63.358652][ T439] usb 4-1: device descriptor read/8, error -71 [ 63.447334][ T9] usb 3-1: device descriptor read/64, error -71 [ 63.457285][ T353] usb 2-1: device descriptor read/64, error -71 [ 63.597347][ T439] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 63.618477][ T439] usb 4-1: device descriptor read/8, error -71 [ 63.687271][ T9] usb 3-1: device descriptor read/64, error -71 [ 63.697339][ T353] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 63.748543][ T439] usb 4-1: device descriptor read/8, error -71 [ 63.797412][ T9] usb usb3-port1: attempt power cycle [ 63.827374][ T353] usb 2-1: device descriptor read/64, error -71 [ 63.857450][ T439] usb usb4-port1: unable to enumerate USB device [ 64.067275][ T353] usb 2-1: device descriptor read/64, error -71 [ 64.137363][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 64.158475][ T9] usb 3-1: device descriptor read/8, error -71 [ 64.177538][ T353] usb usb2-port1: attempt power cycle [ 64.288571][ T9] usb 3-1: device descriptor read/8, error -71 [ 64.527352][ T353] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 64.535186][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 64.558568][ T353] usb 2-1: device descriptor read/8, error -71 [ 64.564934][ T9] usb 3-1: device descriptor read/8, error -71 [ 64.698548][ T9] usb 3-1: device descriptor read/8, error -71 [ 64.704844][ T353] usb 2-1: device descriptor read/8, error -71 [ 64.817503][ T9] usb usb3-port1: unable to enumerate USB device [ 64.947257][ T353] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 64.968386][ T353] usb 2-1: device descriptor read/8, error -71 [ 65.112553][ T353] usb 2-1: device descriptor read/8, error -71 [ 65.125066][ T1274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.135361][ T1274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.227431][ T353] usb usb2-port1: unable to enumerate USB device [ 65.357334][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 65.487340][ T9] usb 1-1: device descriptor read/64, error -71 [ 65.517431][ T353] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 65.668363][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.679533][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.689867][ T353] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 65.699067][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.707855][ T353] usb 4-1: config 0 descriptor?? [ 65.727519][ T9] usb 1-1: device descriptor read/64, error -71 [ 65.940214][ T1291] netlink: 160 bytes leftover after parsing attributes in process `syz.1.212'. [ 65.950864][ T1292] Zero length message leads to an empty skb [ 65.967649][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 66.107307][ T9] usb 1-1: device descriptor read/64, error -71 [ 66.115888][ T353] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 66.128087][ T353] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 66.142212][ T353] playstation 0003:054C:0DF2.0006: unknown main item tag 0x4 [ 66.149817][ T353] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 66.162521][ T353] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 66.170645][ T353] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 66.174306][ T1295] udevd[1295]: open /dev/null failed: No such file or directory [ 66.314473][ T353] playstation 0003:054C:0DF2.0006: Invalid byte count transferred, expected 20 got 0 [ 66.324468][ T353] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 66.334871][ T353] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 66.362352][ T9] usb 1-1: device descriptor read/64, error -71 [ 66.370987][ T353] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 66.379589][ T353] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 66.477398][ T9] usb usb1-port1: attempt power cycle [ 66.517065][ T1276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.526146][ T1276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.537726][ T1276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.556920][ T1276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.569938][ T353] usb 4-1: USB disconnect, device number 11 [ 66.847379][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 66.864839][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 66.864856][ T36] audit: type=1400 audit(1790610033.490:335): avc: denied { shutdown } for pid=1313 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.892605][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.048460][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.183186][ T36] audit: type=1400 audit(1790610033.810:336): avc: denied { ioctl } for pid=1323 comm="syz.3.218" path="socket:[22066]" dev="sockfs" ino=22066 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.209879][ T36] audit: type=1400 audit(1790610033.840:337): avc: denied { read } for pid=1323 comm="syz.3.218" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.297376][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 67.305160][ T771] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 67.328794][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.460630][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.467742][ T771] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.478387][ T771] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.489405][ T771] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 67.499002][ T771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.509697][ T771] usb 3-1: Product: syz [ 67.514067][ T771] usb 3-1: Manufacturer: syz [ 67.519041][ T771] usb 3-1: SerialNumber: syz [ 67.587593][ T9] usb usb1-port1: unable to enumerate USB device [ 67.737637][ T771] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 67.755246][ T771] usb 3-1: USB disconnect, device number 22 [ 67.765101][ T905] udevd[905]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.384500][ T36] audit: type=1400 audit(1790610035.010:338): avc: denied { sqpoll } for pid=1357 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.627312][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 68.634955][ T771] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 68.767367][ T9] usb 3-1: device descriptor read/64, error -71 [ 68.797248][ T771] usb 2-1: Using ep0 maxpacket: 32 [ 68.806835][ T771] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 68.822855][ T771] usb 2-1: config 0 has no interface number 0 [ 68.835601][ T771] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 68.855644][ T771] usb 2-1: config 0 interface 196 has no altsetting 0 [ 68.871404][ T771] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 68.884234][ T771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.901328][ T771] usb 2-1: Product: syz [ 68.910982][ T771] usb 2-1: Manufacturer: syz [ 68.921462][ T771] usb 2-1: SerialNumber: syz [ 68.931423][ T771] usb 2-1: config 0 descriptor?? [ 68.943318][ T1361] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.027249][ T9] usb 3-1: device descriptor read/64, error -71 [ 69.267293][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 69.407245][ T9] usb 3-1: device descriptor read/64, error -71 [ 69.447381][ T1381] SELinux: Context is not valid (left unmapped). [ 69.461986][ T36] audit: type=1400 audit(1790610036.090:339): avc: denied { relabelto } for pid=1380 comm="syz.0.233" name="blkio.bfq.io_serviced" dev="sda1" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 69.529133][ T1384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 69.548549][ T1384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 69.571065][ T36] audit: type=1400 audit(1790610036.200:340): avc: denied { lock } for pid=1383 comm="syz.0.234" path="socket:[23010]" dev="sockfs" ino=23010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.574383][ T1384] MTRR 1 not used [ 69.595822][ T36] audit: type=1400 audit(1790610036.200:341): avc: denied { read write } for pid=1383 comm="syz.0.234" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 69.625094][ T36] audit: type=1400 audit(1790610036.200:342): avc: denied { open } for pid=1383 comm="syz.0.234" path="/52/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 69.649667][ T36] audit: type=1400 audit(1790610036.200:343): avc: denied { ioctl } for pid=1383 comm="syz.0.234" path="/52/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 69.657286][ T9] usb 3-1: device descriptor read/64, error -71 [ 69.683586][ T771] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 69.704096][ T771] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 69.827949][ T9] usb usb3-port1: attempt power cycle [ 69.913486][ T36] audit: type=1400 audit(1790610036.540:344): avc: denied { map } for pid=1407 comm="syz.3.239" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.957291][ T1296] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 70.107263][ T1296] usb 1-1: Using ep0 maxpacket: 16 [ 70.113368][ T1296] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.122277][ T1296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.134250][ T1296] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 70.143619][ T1296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.151951][ T1296] usb 1-1: Product: syz [ 70.156460][ T1296] usb 1-1: Manufacturer: syz [ 70.161229][ T1296] usb 1-1: SerialNumber: syz [ 70.177274][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 70.198388][ T9] usb 3-1: device descriptor read/8, error -71 [ 70.328336][ T9] usb 3-1: device descriptor read/8, error -71 [ 70.368946][ T1296] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 70.377548][ T1296] usb 1-1: USB disconnect, device number 10 [ 70.567339][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 70.588427][ T9] usb 3-1: device descriptor read/8, error -71 [ 70.718382][ T9] usb 3-1: device descriptor read/8, error -71 [ 70.827831][ T9] usb usb3-port1: unable to enumerate USB device [ 70.909483][ T1418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 71.137473][ T310] ipheth 2-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 71.277271][ T771] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 71.393370][ T1296] usb 2-1: USB disconnect, device number 17 [ 71.428575][ T771] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.447376][ T1296] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 71.472186][ T771] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 71.495740][ T771] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 71.510266][ T771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.536444][ T771] usb 1-1: Product: syz [ 71.543646][ T1456] cgroup: release_agent respecified [ 71.552222][ T771] usb 1-1: Manufacturer: syz [ 71.559319][ T1456] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd13 [ 71.574323][ T771] usb 1-1: SerialNumber: syz [ 71.581803][ T1427] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 71.589423][ T1455] netlink: 96 bytes leftover after parsing attributes in process `syz.2.248'. [ 71.810674][ T1427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.827123][ T1427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.877314][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 71.981193][ T771] usb 1-1: invalid MIDI out EP 0 [ 72.000414][ T771] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.032045][ T771] usb 1-1: USB disconnect, device number 11 [ 72.044890][ T1022] udevd[1022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.048363][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 72.090554][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.101493][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 72.133842][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 72.153190][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.179351][ T9] usb 3-1: Product: syz [ 72.192511][ T9] usb 3-1: Manufacturer: syz [ 72.207437][ T9] usb 3-1: SerialNumber: syz [ 72.425660][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 72.448619][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.832016][ T9] usb 3-1: 2:1 : can't get Cluster Descriptor [ 73.068643][ T771] usb 3-1: USB disconnect, device number 27 [ 73.109233][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 73.257243][ T9] usb 2-1: device descriptor read/64, error -71 [ 73.407235][ T1296] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 73.507292][ T9] usb 2-1: device descriptor read/64, error -71 [ 73.567248][ T1296] usb 1-1: Using ep0 maxpacket: 32 [ 73.587047][ T1296] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 73.601061][ T1495] futex_wake_op: syz.2.259 tries to shift op by 144; fix this program [ 73.611617][ T1296] usb 1-1: config 0 has no interface number 0 [ 73.624439][ T1296] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 73.656953][ T1296] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.688380][ T1296] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 73.717256][ T1296] usb 1-1: config 0 interface 196 has no altsetting 0 [ 73.740534][ T1296] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 73.765118][ T1296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.773320][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 73.795471][ T1296] usb 1-1: Product: syz [ 73.811419][ T1296] usb 1-1: Manufacturer: syz [ 73.822846][ T1497] FAULT_INJECTION: forcing a failure. [ 73.822846][ T1497] name failslab, interval 1, probability 0, space 0, times 0 [ 73.838291][ T1296] usb 1-1: SerialNumber: syz [ 73.850571][ T1296] usb 1-1: config 0 descriptor?? [ 73.857311][ T1493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.867832][ T1497] CPU: 0 UID: 0 PID: 1497 Comm: syz.2.260 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 73.867857][ T1497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.867866][ T1497] Call Trace: [ 73.867871][ T1497] [ 73.867876][ T1497] __dump_stack+0x21/0x30 [ 73.867900][ T1497] dump_stack_lvl+0x140/0x1c0 [ 73.867918][ T1497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.867941][ T1497] dump_stack+0x19/0x20 [ 73.867957][ T1497] should_fail_ex+0x3c2/0x510 [ 73.867974][ T1497] should_failslab+0xac/0x100 [ 73.867991][ T1497] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 73.868006][ T1497] ? vfs_parse_monolithic_sep+0x243/0x360 [ 73.868024][ T1497] kmemdup_nul+0x5a/0x1a0 [ 73.868036][ T1497] vfs_parse_monolithic_sep+0x243/0x360 [ 73.868053][ T1497] ? __cfi_vfs_parse_comma_sep+0x10/0x10 [ 73.868069][ T1497] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 73.868086][ T1497] ? fuse_init_fs_context+0x62/0x2a0 [ 73.868099][ T1497] ? fuse_init_fs_context+0x100/0x2a0 [ 73.868110][ T1497] ? alloc_fs_context+0x5dd/0x800 [ 73.868127][ T1497] generic_parse_monolithic+0x28/0x40 [ 73.868143][ T1497] parse_monolithic_mount_data+0x7f/0x90 [ 73.868160][ T1497] do_new_mount+0x222/0xb40 [ 73.868174][ T1497] ? security_capable+0x44/0x130 [ 73.868189][ T1497] path_mount+0x66a/0xff0 [ 73.868202][ T1497] ? putname+0x113/0x150 [ 73.868216][ T1497] __se_sys_mount+0x2bf/0x480 [ 73.868238][ T1497] ? __x64_sys_mount+0xf0/0xf0 [ 73.868251][ T1497] ? __kasan_check_write+0x18/0x20 [ 73.868264][ T1497] ? fpregs_restore_userregs+0x11c/0x260 [ 73.868280][ T1497] __x64_sys_mount+0xc3/0xf0 [ 73.868294][ T1497] x64_sys_call+0x2021/0x2ee0 [ 73.868306][ T1497] do_syscall_64+0x57/0xf0 [ 73.868319][ T1497] ? clear_bhb_loop+0x50/0xa0 [ 73.868336][ T1497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.868351][ T1497] RIP: 0033:0x7fcf1e59e159 [ 73.868364][ T1497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.868375][ T1497] RSP: 002b:00007fcf1f391028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.868391][ T1497] RAX: ffffffffffffffda RBX: 00007fcf1e825fa0 RCX: 00007fcf1e59e159 [ 73.868401][ T1497] RDX: 0000200000000800 RSI: 00002000000020c0 RDI: 0000000000000000 [ 73.868410][ T1497] RBP: 00007fcf1e63506b R08: 00002000000003c0 R09: 0000000000000000 [ 73.868419][ T1497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.868427][ T1497] R13: 00007fcf1e826038 R14: 00007fcf1e825fa0 R15: 00007ffdf4271e88 [ 73.868438][ T1497] [ 74.137084][ T9] usb 2-1: device descriptor read/64, error -71 [ 74.167153][ T1296] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 74.174860][ T1296] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 74.184160][ T1296] usb 1-1: USB disconnect, device number 12 [ 74.257238][ T771] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 74.377278][ T9] usb 2-1: device descriptor read/64, error -71 [ 74.407240][ T771] usb 3-1: Using ep0 maxpacket: 16 [ 74.419223][ T771] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 74.437936][ T771] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 74.450340][ T771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.466691][ T771] usb 3-1: Product: syz [ 74.475444][ T771] usb 3-1: Manufacturer: syz [ 74.485536][ T771] usb 3-1: SerialNumber: syz [ 74.491386][ T9] usb usb2-port1: attempt power cycle [ 74.683871][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 74.683894][ T36] audit: type=1400 audit(1790610041.310:353): avc: denied { read } for pid=1498 comm="syz.0.261" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.685283][ T1499] FAULT_INJECTION: forcing a failure. [ 74.685283][ T1499] name failslab, interval 1, probability 0, space 0, times 0 [ 74.690237][ T36] audit: type=1400 audit(1790610041.310:354): avc: denied { open } for pid=1498 comm="syz.0.261" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.734763][ T771] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 74.772862][ T36] audit: type=1400 audit(1790610041.400:355): avc: denied { ioctl } for pid=1498 comm="syz.0.261" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.773445][ T1499] CPU: 0 UID: 0 PID: 1499 Comm: syz.0.261 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 74.773477][ T1499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.773490][ T1499] Call Trace: [ 74.773496][ T1499] [ 74.773504][ T1499] __dump_stack+0x21/0x30 [ 74.773539][ T1499] dump_stack_lvl+0x140/0x1c0 [ 74.773565][ T1499] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.773603][ T1499] dump_stack+0x19/0x20 [ 74.773628][ T1499] should_fail_ex+0x3c2/0x510 [ 74.773652][ T1499] should_failslab+0xac/0x100 [ 74.773678][ T1499] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 74.773702][ T1499] ? __x64_sys_mkdirat+0x8b/0xa0 [ 74.773745][ T1499] ? do_syscall_64+0x57/0xf0 [ 74.773769][ T1499] ? sidtab_sid2str_get+0x135/0x360 [ 74.773790][ T1499] kmemdup_noprof+0x31/0x80 [ 74.773808][ T1499] sidtab_sid2str_get+0x135/0x360 [ 74.773828][ T1499] security_sid_to_context_core+0x30d/0x5d0 [ 74.773856][ T1499] security_sid_to_context_force+0x31/0x40 [ 74.773883][ T1499] selinux_inode_init_security+0x659/0x950 [ 74.773914][ T1499] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 74.773942][ T1499] ? security_inode_init_security+0x11c/0x600 [ 74.773970][ T1499] ? __cfi_shmem_initxattrs+0x10/0x10 [ 74.774000][ T1499] ? __cfi_shmem_initxattrs+0x10/0x10 [ 74.774029][ T1499] security_inode_init_security+0x1a8/0x600 [ 74.774057][ T1499] ? __cfi_security_inode_init_security+0x10/0x10 [ 74.774084][ T1499] ? set_cached_acl+0xe1/0x1a0 [ 74.774104][ T1499] ? simple_acl_create+0x190/0x1c0 [ 74.774124][ T1499] shmem_mknod+0xd5/0x200 [ 74.774150][ T1499] shmem_mkdir+0x3b/0x80 [ 74.774176][ T1499] vfs_mkdir+0x591/0x810 [ 74.774202][ T1499] do_mkdirat+0x240/0x530 [ 74.774229][ T1499] ? __cfi_do_mkdirat+0x10/0x10 [ 74.774255][ T1499] ? __kasan_check_write+0x18/0x20 [ 74.774275][ T1499] ? getname_flags+0x203/0x6b0 [ 74.774298][ T1499] __x64_sys_mkdirat+0x8b/0xa0 [ 74.774325][ T1499] x64_sys_call+0x2ba8/0x2ee0 [ 74.774344][ T1499] do_syscall_64+0x57/0xf0 [ 74.774363][ T1499] ? clear_bhb_loop+0x50/0xa0 [ 74.774388][ T1499] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.774411][ T1499] RIP: 0033:0x7f292e39e159 [ 74.774428][ T1499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.774445][ T1499] RSP: 002b:00007f292f213028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 74.774468][ T1499] RAX: ffffffffffffffda RBX: 00007f292e625fa0 RCX: 00007f292e39e159 [ 74.774483][ T1499] RDX: 0000000000000000 RSI: 0000200000002000 RDI: ffffffffffffff9c [ 74.774498][ T1499] RBP: 00007f292e43506b R08: 0000000000000000 R09: 0000000000000000 [ 74.774511][ T1499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.774523][ T1499] R13: 00007f292e626038 R14: 00007f292e625fa0 R15: 00007ffd8a9944f8 [ 74.774539][ T1499] [ 74.780577][ T771] usb 3-1: unit 6: unexpected type 0x03 [ 75.095880][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 75.097643][ T1022] udevd[1022]: inotify_add_watch(7, /dev/loop32, 10) failed: No such file or directory [ 75.122121][ T1502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.262'. [ 75.131886][ T1502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 75.143509][ T771] usb 3-1: unit 12 not found! [ 75.149058][ T9] usb 2-1: device descriptor read/8, error -71 [ 75.155804][ T771] usb 3-1: unit 4 not found! [ 75.164332][ T771] usb 3-1: unit 8 not found! [ 75.172149][ T771] usb 3-1: unit 1 not found! [ 75.177057][ T771] usb 3-1: unit 9 not found! [ 75.182649][ T1504] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.191756][ T1504] overlayfs: conflicting options: userxattr,metacopy=on [ 75.211464][ T771] usb 3-1: USB disconnect, device number 28 [ 75.218544][ T1504] netlink: 'syz.3.263': attribute type 4 has an invalid length. [ 75.219719][ T36] audit: type=1400 audit(1790610041.850:356): avc: denied { remount } for pid=1503 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.310989][ T1516] FAULT_INJECTION: forcing a failure. [ 75.310989][ T1516] name failslab, interval 1, probability 0, space 0, times 0 [ 75.324076][ T1516] CPU: 0 UID: 0 PID: 1516 Comm: syz.3.266 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 75.324105][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.324114][ T1516] Call Trace: [ 75.324118][ T1516] [ 75.324123][ T1516] __dump_stack+0x21/0x30 [ 75.324151][ T1516] dump_stack_lvl+0x140/0x1c0 [ 75.324168][ T1516] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.324186][ T1516] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 75.324200][ T1516] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 75.324214][ T1516] dump_stack+0x19/0x20 [ 75.324230][ T1516] should_fail_ex+0x3c2/0x510 [ 75.324246][ T1516] should_failslab+0xac/0x100 [ 75.324262][ T1516] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 75.324277][ T1516] ? __sock_create+0x3a2/0x810 [ 75.324293][ T1516] ? __sys_socket+0xe1/0x1c0 [ 75.324306][ T1516] ? __d_alloc+0x42/0x8c0 [ 75.324319][ T1516] ? expand_files+0xda/0x6f0 [ 75.324335][ T1516] __d_alloc+0x42/0x8c0 [ 75.324347][ T1516] d_alloc_pseudo+0x23/0xc0 [ 75.324360][ T1516] alloc_file_pseudo+0xde/0x1f0 [ 75.324378][ T1516] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 75.324395][ T1516] ? _raw_spin_unlock+0x45/0x60 [ 75.324408][ T1516] sock_alloc_file+0xbe/0x2b0 [ 75.324422][ T1516] __sys_socket+0x14c/0x1c0 [ 75.324436][ T1516] __x64_sys_socket+0x7e/0x90 [ 75.324452][ T1516] x64_sys_call+0x2608/0x2ee0 [ 75.324464][ T1516] do_syscall_64+0x57/0xf0 [ 75.324476][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 75.324492][ T1516] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.324507][ T1516] RIP: 0033:0x7fa30339e159 [ 75.324520][ T1516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.324532][ T1516] RSP: 002b:00007fa304196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.324548][ T1516] RAX: ffffffffffffffda RBX: 00007fa303625fa0 RCX: 00007fa30339e159 [ 75.324558][ T1516] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 75.324566][ T1516] RBP: 00007fa30343506b R08: 0000000000000000 R09: 0000000000000000 [ 75.324575][ T1516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.324595][ T1516] R13: 00007fa303626038 R14: 00007fa303625fa0 R15: 00007ffd313fb5b8 [ 75.324606][ T1516] [ 75.325392][ T9] usb 2-1: device descriptor read/8, error -71 [ 75.559589][ T1296] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 75.580289][ T1520] overlay: filesystem on ./file0 not supported as upperdir [ 75.679595][ T36] audit: type=1400 audit(1790610042.310:357): avc: denied { append } for pid=1533 comm="syz.2.271" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.713259][ T1545] netlink: 'syz.3.273': attribute type 5 has an invalid length. [ 75.720994][ T1296] usb 1-1: Using ep0 maxpacket: 32 [ 75.726626][ T1545] netlink: 'syz.3.273': attribute type 32 has an invalid length. [ 75.736585][ T1296] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 75.753599][ T1296] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.782037][ T1296] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.794534][ T1296] usb 1-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 75.807282][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 75.830634][ T1296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.840712][ T1296] usb 1-1: config 0 descriptor?? [ 75.848366][ T9] usb 2-1: device descriptor read/8, error -71 [ 75.885657][ T1557] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 75.895222][ T1558] netlink: 'syz.1.277': attribute type 27 has an invalid length. [ 75.948384][ T1564] kvm: emulating exchange as write [ 75.988277][ T9] usb 2-1: device descriptor read/8, error -71 [ 76.037148][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.050137][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.066294][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.090867][ T1580] SELinux: security_context_str_to_sid (syt|v\{) failed with errno=-22 [ 76.090871][ T36] audit: type=1400 audit(1790610042.720:358): avc: denied { remount } for pid=1579 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.092792][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.136569][ T9] usb usb2-port1: unable to enumerate USB device [ 76.149940][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.162644][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.175291][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.191691][ T1577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=1577 comm=syz.1.285 [ 76.248417][ T36] audit: type=1400 audit(1790610042.880:359): avc: denied { ioctl } for pid=1585 comm="syz.1.287" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.267968][ T1296] wacom 0003:056A:0302.0007: unknown main item tag 0x2 [ 76.298812][ T1296] wacom 0003:056A:0302.0007: unknown main item tag 0x0 [ 76.307118][ T1594] ./dev/sda1: Can't lookup blockdev [ 76.324133][ T1296] wacom 0003:056A:0302.0007: unknown main item tag 0x0 [ 76.324329][ T36] audit: type=1400 audit(1790610042.950:360): avc: denied { setopt } for pid=1593 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.351337][ T1296] wacom 0003:056A:0302.0007: Unknown device_type for 'HID 056a:0302'. Assuming pen. [ 76.354324][ T36] audit: type=1400 audit(1790610042.960:361): avc: denied { append } for pid=1596 comm="syz.1.291" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.388831][ T1296] wacom 0003:056A:0302.0007: hidraw0: USB HID v0.00 Keyboard [HID 056a:0302] on usb-dummy_hcd.0-1/input0 [ 76.396740][ T1603] udevd[1603]: open /dev/null failed: No such file or directory [ 76.438907][ T1296] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0302.0007/input/input10 [ 76.487123][ T1296] usb 1-1: USB disconnect, device number 13 [ 76.707249][ T353] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 76.868351][ T353] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.888242][ T353] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 76.904812][ T353] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.916019][ T353] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.925865][ T353] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 76.935189][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.944340][ T1613] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.953385][ T1613] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.962824][ T353] pl2303 2-1:1.0: pl2303 converter detected [ 77.077575][ T353] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 77.095912][ T353] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 77.112777][ T353] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 77.120792][ T1654] input: syz0 as /devices/virtual/input/input13 [ 77.129358][ T353] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 77.141547][ T353] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 77.150390][ T353] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 77.159078][ T353] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 77.174579][ T1656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.184586][ T353] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 77.196407][ T353] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 77.213554][ T353] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 77.224654][ T1656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.233066][ T353] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0002]: -32 [ 77.249584][ T353] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 77.328329][ T36] audit: type=1400 audit(1790610043.960:362): avc: denied { write } for pid=1668 comm="syz.3.310" name="id" dev="configfs" ino=25555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 77.607310][ T353] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 77.757747][ T353] usb 4-1: too many configurations: 34, using maximum allowed: 8 [ 77.766345][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 77.774938][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 77.785378][ T353] usb 4-1: config 1 has no interface number 0 [ 77.798672][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 77.817369][ T65] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 77.830578][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 77.862708][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 77.870676][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 77.887770][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 77.899055][ T353] usb 4-1: config 1 has no interface number 0 [ 77.905346][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 77.917098][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 77.939849][ T1692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.950305][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 77.953805][ T1022] udevd[1022]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 77.957642][ T1692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.976076][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 77.985134][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 77.995405][ T65] usb 3-1: device descriptor read/64, error -71 [ 78.020773][ T353] usb 4-1: config 1 has no interface number 0 [ 78.044442][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 78.076353][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 78.114948][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 78.131069][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 78.143508][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 78.165159][ T353] usb 4-1: config 1 has no interface number 0 [ 78.177655][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 78.201106][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 78.231577][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 78.238842][ T65] usb 3-1: device descriptor read/64, error -71 [ 78.254008][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 78.264793][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 78.286023][ T353] usb 4-1: config 1 has no interface number 0 [ 78.299437][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 78.325358][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 78.353223][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 78.367494][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 78.377291][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 78.397758][ T353] usb 4-1: config 1 has no interface number 0 [ 78.410484][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 78.432927][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 78.460615][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 78.475976][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 78.484506][ T65] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 78.492277][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 78.514136][ T353] usb 4-1: config 1 has no interface number 0 [ 78.526977][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 78.550464][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 78.578544][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 78.593755][ T353] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 78.604252][ T353] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 78.625981][ T353] usb 4-1: config 1 has no interface number 0 [ 78.637249][ T65] usb 3-1: device descriptor read/64, error -71 [ 78.645448][ T353] usb 4-1: too many endpoints for config 1 interface 224 altsetting 205: 78, using maximum allowed: 30 [ 78.669250][ T353] usb 4-1: config 1 interface 224 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 78.708677][ T353] usb 4-1: config 1 interface 224 has no altsetting 0 [ 78.732082][ T353] usb 4-1: string descriptor 0 read error: -22 [ 78.742600][ T353] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 78.772197][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.897306][ T65] usb 3-1: device descriptor read/64, error -71 [ 79.008952][ T65] usb usb3-port1: attempt power cycle [ 79.057760][ T1714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.066571][ T1714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.167331][ T353] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 79.318900][ T353] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.327408][ T353] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 7 [ 79.339823][ T353] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.349022][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.357025][ T353] usb 1-1: Product: 뮀霩錒饹㧨굣곢쎟玲暮೼㞐鼴㳿遅蘱զ⠀昭㎒槤ᅹ鄵淿鲤劒匤蛦뛼✧ﾆ䴫ꄖ膇퀆똤㴚㊖냴撙Ɪ蟉巤緦覎踛㘀欨䳶긦朗駏銰ḹ挬걡諎㫍닇⾥鮔흵☸뷺查ꢿ呻LJ쫩츚䧧즅㜎닒䞍諧ᱣ䱅洧撢룔ꂞ苑ᴏ뻐ဴỗ [ 79.388384][ T65] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 79.397967][ T1715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.406702][ T353] usb 1-1: Manufacturer: Џ [ 79.411262][ T353] usb 1-1: SerialNumber: syz [ 79.416382][ T1715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.426404][ T1715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.435148][ T1715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.443936][ T65] usb 3-1: device descriptor read/8, error -71 [ 79.578356][ T65] usb 3-1: device descriptor read/8, error -71 [ 79.627782][ T353] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 79.635093][ T353] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 79.647364][ T353] usb 1-1: USB disconnect, device number 14 [ 79.672615][ T1717] device-mapper: ioctl: Unable to rename non-existent device, to .2\.jDH [ 79.817343][ T65] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 79.838518][ T65] usb 3-1: device descriptor read/8, error -71 [ 79.968434][ T65] usb 3-1: device descriptor read/8, error -71 [ 80.077407][ T65] usb usb3-port1: unable to enumerate USB device [ 80.478559][ T65] usb 4-1: USB disconnect, device number 12 [ 80.490580][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 80.490600][ T36] audit: type=1400 audit(1790610047.120:372): avc: denied { create } for pid=1733 comm="syz.3.332" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.517317][ T353] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 80.517814][ T36] audit: type=1400 audit(1790610047.120:373): avc: denied { write } for pid=1733 comm="syz.3.332" name="file2" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.548645][ T36] audit: type=1400 audit(1790610047.120:374): avc: denied { open } for pid=1733 comm="syz.3.332" path="/97/file2" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.552481][ T1745] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.573864][ T36] audit: type=1400 audit(1790610047.120:375): avc: denied { cmd } for pid=1733 comm="syz.3.332" path="/97/file2" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 80.592898][ T1745] rust_binder: Read failure Err(EFAULT) in pid:285 [ 80.608562][ T36] audit: type=1400 audit(1790610047.210:376): avc: denied { unlink } for pid=295 comm="syz-executor" name="file2" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.615767][ T1747] 9pnet_fd: Insufficient options for proto=fd [ 80.650680][ T1745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.650856][ T36] audit: type=1400 audit(1790610047.280:377): avc: denied { setattr } for pid=1744 comm="syz.1.333" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.650889][ T1745] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.682176][ T353] usb 1-1: device descriptor read/64, error -71 [ 80.726717][ T1752] rust_binder: 1744:1752 got transaction to invalid handle 1 [ 80.749987][ T1745] rust_binder: Read failure Err(EFAULT) in pid:285 [ 80.750030][ T1752] rust_binder: 1744:1752 transaction call to 0:0 failed ENOENT, code 0 size 112-24 [ 80.808362][ T65] rust_binder: 1744: undelivered TRANSACTION_ERROR: 29201 [ 80.830583][ T36] audit: type=1400 audit(1790610047.460:378): avc: denied { bind } for pid=1754 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.832962][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.874881][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.883911][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.893763][ T1762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.902554][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.910648][ T1762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.927261][ T353] usb 1-1: device descriptor read/64, error -71 [ 80.935261][ T1757] tipc: Enabling of bearer rejected, failed to enable media [ 81.067288][ T771] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 81.167255][ T353] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 81.197305][ T771] usb 3-1: device descriptor read/64, error -71 [ 81.207320][ T65] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 81.297297][ T353] usb 1-1: device descriptor read/64, error -71 [ 81.358516][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.375421][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 81.391660][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.400041][ T65] usb 4-1: Product: syz [ 81.404290][ T65] usb 4-1: Manufacturer: syz [ 81.409219][ T65] usb 4-1: SerialNumber: syz [ 81.417045][ T65] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 81.423175][ T65] cdc_wdm 4-1:1.0: Unknown control protocol [ 81.447246][ T771] usb 3-1: device descriptor read/64, error -71 [ 81.466726][ T1775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.476528][ T1775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.520524][ T1775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.532447][ T1775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.541039][ T353] usb 1-1: device descriptor read/64, error -71 [ 81.619402][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.657388][ T353] usb usb1-port1: attempt power cycle [ 81.687317][ T771] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 81.817253][ T771] usb 3-1: device descriptor read/64, error -71 [ 81.824373][ T1766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 81.833848][ T65] usb 4-1: USB disconnect, device number 13 [ 81.997314][ T353] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 82.019294][ T353] usb 1-1: device descriptor read/8, error -71 [ 82.057273][ T771] usb 3-1: device descriptor read/64, error -71 [ 82.137522][ T36] audit: type=1400 audit(1790610048.770:379): avc: denied { mounton } for pid=1789 comm="syz.1.345" path="/syzcgroup/unified/syz1/cgroup.procs" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 82.148342][ T353] usb 1-1: device descriptor read/8, error -71 [ 82.170120][ T771] usb usb3-port1: attempt power cycle [ 82.207560][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.216370][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.229815][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.238757][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.407259][ T353] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 82.438273][ T353] usb 1-1: device descriptor read/8, error -71 [ 82.507271][ T771] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 82.538253][ T771] usb 3-1: device descriptor read/8, error -71 [ 82.568266][ T353] usb 1-1: device descriptor read/8, error -71 [ 82.668240][ T771] usb 3-1: device descriptor read/8, error -71 [ 82.677971][ T353] usb usb1-port1: unable to enumerate USB device [ 82.907254][ T771] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 82.938256][ T771] usb 3-1: device descriptor read/8, error -71 [ 83.068239][ T771] usb 3-1: device descriptor read/8, error -71 [ 83.177362][ T771] usb usb3-port1: unable to enumerate USB device [ 83.697284][ T939] Bluetooth: hci0: command 0x1003 tx timeout [ 83.703352][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.231079][ T1810] loop5: detected capacity change from 0 to 7 [ 84.239589][ T353] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 84.254253][ T905] udevd[905]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 84.257250][ T1296] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 84.275337][ T905] udevd[905]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 84.286602][ T905] udevd[905]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 84.299095][ T65] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 84.307015][ T36] audit: type=1400 audit(1790610050.930:380): avc: denied { ioctl } for pid=1811 comm="syz.3.352" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x6f03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.334282][ T65] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.338893][ T1813] udevd[1813]: open /dev/null failed: No such file or directory [ 84.398295][ T353] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 84.409544][ T353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.429057][ T353] usb 3-1: config 0 descriptor?? [ 84.437304][ T1296] usb 1-1: device descriptor read/64, error -71 [ 84.697242][ T1296] usb 1-1: device descriptor read/64, error -71 [ 84.858319][ T353] usbhid 3-1:0.0: can't add hid device: -71 [ 84.864327][ T353] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 84.880621][ T353] usb 3-1: USB disconnect, device number 37 [ 84.907259][ T65] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 84.937267][ T1296] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 85.058356][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.075265][ T65] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.084996][ T1296] usb 1-1: device descriptor read/64, error -71 [ 85.101193][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.118668][ T65] usb 4-1: config 0 descriptor?? [ 85.327338][ T1296] usb 1-1: device descriptor read/64, error -71 [ 85.340823][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.350081][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.376982][ T1825] syz.1.355(1825): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 85.404081][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.414323][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.457370][ T1296] usb usb1-port1: attempt power cycle [ 85.491771][ T36] audit: type=1400 audit(1790610052.120:381): avc: denied { create } for pid=1839 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 85.507077][ T1843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.521519][ T1843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.530252][ T36] audit: type=1400 audit(1790610052.160:382): avc: denied { connect } for pid=1841 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.537132][ T1819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.559377][ T1819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.737457][ T771] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 85.797281][ T1296] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 85.818257][ T1296] usb 1-1: device descriptor read/8, error -71 [ 85.888312][ T771] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 85.900329][ T771] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 85.915015][ T771] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 85.924851][ T771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.944135][ T771] usb 3-1: config 0 descriptor?? [ 85.951494][ T1296] usb 1-1: device descriptor read/8, error -71 [ 86.152193][ T771] usbhid 3-1:0.0: can't add hid device: -71 [ 86.167442][ T771] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.186788][ T771] usb 3-1: USB disconnect, device number 38 [ 86.197303][ T1296] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 86.228252][ T1296] usb 1-1: device descriptor read/8, error -71 [ 86.358160][ T1296] usb 1-1: device descriptor read/8, error -71 [ 86.467364][ T1296] usb usb1-port1: unable to enumerate USB device [ 86.907303][ T1296] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 87.064783][ T1849] mmap: syz.0.364 (1849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.086960][ T1296] usb 3-1: Using ep0 maxpacket: 32 [ 87.093606][ T1296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.108259][ T1849] overlayfs: failed to resolve './bus': -2 [ 87.119440][ T1296] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.141981][ T1296] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 87.165374][ T1296] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 87.193701][ T1296] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.215865][ T1296] usb 3-1: config 1 interface 1 has no altsetting 0 [ 87.232679][ T1296] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 87.242195][ T1296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.255922][ T1296] usb 3-1: Product: syz [ 87.265777][ T1296] usb 3-1: Manufacturer: syz [ 87.275806][ T1296] usb 3-1: SerialNumber: syz [ 87.487772][ T1847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.500184][ T1847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.517618][ T1296] usb 3-1: selecting invalid altsetting 0 [ 87.559807][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 87.566897][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 87.590641][ T65] usb 4-1: USB disconnect, device number 14 [ 87.907318][ T65] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 87.925049][ T1847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.952656][ T1872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.974663][ T1847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.996711][ T1872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.087241][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 88.102403][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.126502][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.151842][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.175766][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.196972][ T65] usb 4-1: config 0 descriptor?? [ 88.202956][ T771] usb 3-1: USB disconnect, device number 39 [ 88.220307][ T65] hub 4-1:0.0: USB hub found [ 88.420645][ T65] hub 4-1:0.0: 1 port detected [ 88.741589][ T1883] rust_binder: 1882:1883 no such ref 0 [ 88.751681][ T1883] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.751700][ T1883] rust_binder: Read failure Err(EFAULT) in pid:339 [ 88.793263][ T1889] rust_binder: Failure in copy_transaction_data: EINVAL [ 88.799942][ T1889] rust_binder: 1888:1889 transaction call to 1888:0 failed EINVAL, code 0 size 0-18446744073709551587 [ 88.852035][ T771] rust_binder: 1888: undelivered TRANSACTION_ERROR: 29201 [ 88.873889][ T1893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.887417][ T1893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.956050][ T1897] serial 00:03: in use; can't configure [ 89.017102][ T36] audit: type=1400 audit(1790610055.640:383): avc: denied { mounton } for pid=1900 comm="syz.2.376" path="/100/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 89.023541][ T771] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 89.094415][ T65] rust_binder: 1900: undelivered TRANSACTION_ERROR: 29189 [ 89.137887][ T1904] rust_binder: 1903:1904 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 89.146515][ T1904] rust_binder: Write failure EINVAL in pid:368 [ 89.217601][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.218570][ T939] Bluetooth: hci0: command 0x1003 tx timeout [ 89.347383][ T65] usb 4-1: USB disconnect, device number 15 [ 89.369630][ T36] audit: type=1400 audit(1790610056.000:384): avc: denied { setattr } for pid=1905 comm="syz.0.378" name="g1" dev="configfs" ino=11262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.392917][ T36] audit: type=1400 audit(1790610056.010:385): avc: denied { unlink } for pid=293 comm="syz-executor" name="ttyUSB0" dev="devtmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.416124][ T36] audit: type=1400 audit(1790610056.010:386): avc: denied { unlink } for pid=293 comm="syz-executor" name="loop32" dev="devtmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.515584][ T703] bridge_slave_1: left allmulticast mode [ 89.521521][ T703] bridge_slave_1: left promiscuous mode [ 89.527436][ T703] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.535532][ T703] bridge_slave_0: left allmulticast mode [ 89.541346][ T703] bridge_slave_0: left promiscuous mode [ 89.547022][ T703] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.650662][ T703] veth1_macvtap: left promiscuous mode [ 89.656699][ T703] veth0_vlan: left promiscuous mode [ 90.087322][ T771] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 90.257269][ T771] usb 4-1: Using ep0 maxpacket: 8 [ 90.264817][ T771] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 90.274128][ T771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.282303][ T771] usb 4-1: Product: syz [ 90.286603][ T771] usb 4-1: Manufacturer: syz [ 90.291275][ T771] usb 4-1: SerialNumber: syz [ 90.507724][ T771] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.526937][ T771] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 90.539212][ T771] usb 4-1: USB disconnect, device number 16 [ 90.562656][ T905] udevd[905]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.123549][ T36] audit: type=1400 audit(1790610057.750:387): avc: denied { accept } for pid=1935 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.184351][ T1939] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 91.194482][ T36] audit: type=1400 audit(1790610057.810:388): avc: denied { relabelfrom } for pid=1938 comm="syz.3.387" name="NETLINK" dev="sockfs" ino=32126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 91.234988][ T1942] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd13 [ 91.243092][ T36] audit: type=1400 audit(1790610057.850:389): avc: denied { relabelto } for pid=1938 comm="syz.3.387" name="NETLINK" dev="sockfs" ino=32126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_socket permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 91.477267][ T771] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 91.628597][ T771] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 91.638577][ T771] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 91.650170][ T771] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 91.661598][ T771] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 91.670760][ T771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.678912][ T771] usb 4-1: Product: syz [ 91.683133][ T771] usb 4-1: Manufacturer: syz [ 91.687977][ T771] usb 4-1: SerialNumber: syz [ 91.693487][ T1942] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 91.700852][ T1942] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 91.709086][ T771] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 91.720659][ T771] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 91.731667][ T771] usbserial_generic 4-1:1.0: generic converter detected [ 91.739628][ T771] usb 4-1: generic converter now attached to ttyUSB1 [ 91.893794][ T1948] Bluetooth: ISO socket layer initialized [ 91.912071][ T1942] SELinux: policydb version 1819243025 does not match my version range 15-33 [ 91.921343][ T1942] SELinux: failed to load policy [ 91.928098][ T36] audit: type=1326 audit(1790610058.560:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1941 comm="syz.3.388" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa30339e159 code=0x0 [ 92.127332][ T771] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 92.277296][ T771] usb 3-1: Using ep0 maxpacket: 8 [ 92.283704][ T771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.295054][ T771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.304993][ T771] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.317937][ T771] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 92.327040][ T771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.335998][ T771] usb 3-1: config 0 descriptor?? [ 92.944050][ T771] sony 0003:054C:042F.0009: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 92.955328][ T771] sony 0003:054C:042F.0009: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 92.959337][ T1954] udevd[1954]: open /dev/null failed: No such file or directory [ 92.966939][ T771] sony 0003:054C:042F.0009: failed to claim input [ 92.983910][ T771] usb 3-1: USB disconnect, device number 40 [ 93.977305][ T771] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 94.128611][ T771] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.136706][ T771] usb 3-1: not running at top speed; connect to a high speed hub [ 94.145476][ T771] usb 3-1: config 5 has an invalid interface number: 196 but max is 0 [ 94.153819][ T771] usb 3-1: config 5 has no interface number 0 [ 94.161798][ T771] usb 3-1: New USB device found, idVendor=0502, idProduct=3394, bcdDevice=62.21 [ 94.171026][ T771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.179482][ T771] usb 3-1: Product: syz [ 94.183739][ T771] usb 3-1: Manufacturer: syz [ 94.188396][ T771] usb 3-1: SerialNumber: syz [ 94.238601][ T65] usb 4-1: USB disconnect, device number 17 [ 94.248543][ T65] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 94.257005][ T65] usbserial_generic 4-1:1.0: device disconnected [ 94.398378][ T771] usb 3-1: USB disconnect, device number 41 [ 96.097364][ T65] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 96.247336][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 96.276057][ T1975] kvm: pic: non byte write [ 96.329046][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.337099][ T65] usb 4-1: too many configurations: 159, using maximum allowed: 8 [ 96.345559][ T65] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 96.353362][ T65] usb 4-1: can't read configurations, error -71 [ 97.146771][ T36] audit: type=1400 audit(1790610063.770:391): avc: denied { watch watch_reads } for pid=1993 comm="syz.3.404" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 97.178963][ T1998] rust_binder: Failure in copy_transaction_data: EFAULT [ 97.178995][ T1998] rust_binder: 1991:1998 transaction call to 1991:0 failed EFAULT, code 0 size 768-0 [ 97.204640][ T2001] overlay: Unknown parameter 'fsname' [ 97.214569][ T2001] overlay: Unknown parameter 'fsname' [ 97.220440][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.227690][ T2006] IPv6: NLM_F_CREATE should be set when creating new route [ 97.234894][ T2006] IPv6: NLM_F_CREATE should be set when creating new route [ 97.242761][ T2001] overlay: Unknown parameter 'fsname' [ 97.249206][ T2001] overlay: Unknown parameter 'fsname' [ 97.256428][ T353] rust_binder: 1991: undelivered TRANSACTION_ERROR: 29201 [ 97.265014][ T2001] overlay: Unknown parameter 'fsname' [ 97.270788][ T2001] overlay: Unknown parameter 'fsname' [ 97.279992][ T36] audit: type=1400 audit(1790610063.910:392): avc: denied { read } for pid=2002 comm="syz.2.405" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.281087][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.308002][ T2001] overlay: Unknown parameter 'fsname' [ 97.313591][ T2001] overlay: Unknown parameter 'fsname' [ 97.326855][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.338989][ T2001] overlay: Unknown parameter 'fsname' [ 97.346397][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.364506][ T2001] overlay: Unknown parameter 'fsname' [ 97.370173][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.380881][ T2001] overlay: Unknown parameter 'fsname' [ 97.397843][ T2001] overlay: Unknown parameter 'fsname' [ 97.403703][ T2001] overlay: Unknown parameter 'fsname' [ 97.410357][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.421941][ T2001] overlay: Unknown parameter 'fsname' [ 97.429747][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.447678][ T2001] overlay: Unknown parameter 'fsname' [ 97.453233][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.460856][ T2001] overlay: Unknown parameter 'fsname' [ 97.472060][ T2001] overlay: Unknown parameter 'fsname' [ 97.478733][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.491550][ T2001] overlay: Unknown parameter 'fsname' [ 97.500377][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.511156][ T2001] overlay: Unknown parameter 'fsname' [ 97.518606][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.527455][ T2001] overlay: Unknown parameter 'fsname' [ 97.536768][ T2001] overlay: Unknown parameter 'fsname' [ 97.546470][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.564126][ T2001] overlay: Unknown parameter 'fsname' [ 97.569736][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.578245][ T2001] overlay: Unknown parameter 'fsname' [ 97.585097][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.594386][ T2001] overlay: Unknown parameter 'fsname' [ 97.601393][ T2001] overlay: Unknown parameter 'fsname' [ 97.606894][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.614463][ T2001] overlay: Unknown parameter 'fsname' [ 97.620773][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.628273][ T2001] overlay: Unknown parameter 'fsname' [ 97.633940][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.641771][ T2001] overlay: Unknown parameter 'fsname' [ 97.647491][ T2001] overlay: Unknown parameter 'fsname' [ 97.653094][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.660714][ T2001] overlay: Unknown parameter 'fsname' [ 97.666204][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.673814][ T2001] overlay: Unknown parameter 'fsname' [ 97.679410][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.687014][ T2001] overlay: Unknown parameter 'fsname' [ 97.692581][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.700275][ T2001] overlay: Unknown parameter 'fsname' [ 97.706005][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.721120][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.728585][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.735972][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.743596][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.751042][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.758450][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.765784][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.773246][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.780986][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.793760][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.801160][ T2006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.611307][ T2020] tipc: Started in network mode [ 98.616337][ T2020] tipc: Node identity , cluster identity 4711 [ 98.636239][ T2020] tipc: Failed to obtain node identity [ 98.642244][ T2020] tipc: Enabling of bearer rejected, failed to enable media [ 98.663230][ T36] audit: type=1400 audit(1790610065.290:393): avc: denied { listen } for pid=2021 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.664130][ T2026] FAULT_INJECTION: forcing a failure. [ 98.664130][ T2026] name failslab, interval 1, probability 0, space 0, times 0 [ 98.696999][ T2026] CPU: 0 UID: 0 PID: 2026 Comm: syz.2.408 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 98.697033][ T2026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.697046][ T2026] Call Trace: [ 98.697053][ T2026] [ 98.697060][ T2026] __dump_stack+0x21/0x30 [ 98.697093][ T2026] dump_stack_lvl+0x140/0x1c0 [ 98.697120][ T2026] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.697150][ T2026] dump_stack+0x19/0x20 [ 98.697179][ T2026] should_fail_ex+0x3c2/0x510 [ 98.697205][ T2026] should_failslab+0xac/0x100 [ 98.697231][ T2026] kmem_cache_alloc_noprof+0x42/0x410 [ 98.697253][ T2026] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 98.697279][ T2026] ? alloc_empty_file+0xbf/0x270 [ 98.697307][ T2026] ? arch_stack_walk+0x10a/0x170 [ 98.697329][ T2026] alloc_empty_file+0xbf/0x270 [ 98.697356][ T2026] path_openat+0xf4/0x35a0 [ 98.697383][ T2026] ? stack_depot_save_flags+0x38/0x800 [ 98.697408][ T2026] ? schedule+0xc5/0x240 [ 98.697432][ T2026] ? kasan_save_track+0x4f/0x80 [ 98.697455][ T2026] ? kasan_save_track+0x3e/0x80 [ 98.697478][ T2026] ? kasan_save_alloc_info+0x3a/0x50 [ 98.697497][ T2026] ? __kasan_slab_alloc+0x73/0x90 [ 98.697523][ T2026] ? getname+0x1b/0x30 [ 98.697545][ T2026] ? do_sys_openat2+0xda/0x1d0 [ 98.697572][ T2026] ? __x64_sys_openat+0x13a/0x170 [ 98.697601][ T2026] ? x64_sys_call+0xe69/0x2ee0 [ 98.697619][ T2026] ? do_syscall_64+0x57/0xf0 [ 98.697642][ T2026] ? do_filp_open+0x440/0x440 [ 98.697682][ T2026] do_filp_open+0x1f2/0x440 [ 98.697710][ T2026] ? __cfi_do_filp_open+0x10/0x10 [ 98.697741][ T2026] ? alloc_fd+0x4c1/0x570 [ 98.697766][ T2026] do_sys_openat2+0x134/0x1d0 [ 98.697795][ T2026] ? do_sys_open+0x100/0x100 [ 98.697824][ T2026] __x64_sys_openat+0x13a/0x170 [ 98.697853][ T2026] x64_sys_call+0xe69/0x2ee0 [ 98.697874][ T2026] do_syscall_64+0x57/0xf0 [ 98.697893][ T2026] ? clear_bhb_loop+0x50/0xa0 [ 98.697920][ T2026] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.697943][ T2026] RIP: 0033:0x7fcf1e59e159 [ 98.697962][ T2026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.697980][ T2026] RSP: 002b:00007fcf1cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.698004][ T2026] RAX: ffffffffffffffda RBX: 00007fcf1e826090 RCX: 00007fcf1e59e159 [ 98.698019][ T2026] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 98.698035][ T2026] RBP: 00007fcf1e63506b R08: 0000000000000000 R09: 0000000000000000 [ 98.698049][ T2026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.698062][ T2026] R13: 00007fcf1e826128 R14: 00007fcf1e826090 R15: 00007ffdf4271e88 [ 98.698079][ T2026] [ 98.970713][ T2025] 9pnet: Could not find request transport: unix@Є0ضe# (0000:0000) [ 100.990278][ T771] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.003410][ T353] usb 4-1: No valid video chain found. [ 101.010461][ T771] usb 3-1: config index 4 descriptor too short (expected 64575, got 68) [ 101.019143][ T771] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 101.029459][ T771] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.043425][ T771] usb 3-1: config index 5 descriptor too short (expected 64575, got 68) [ 101.051984][ T771] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 101.062224][ T771] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.076101][ T771] usb 3-1: config index 6 descriptor too short (expected 64575, got 68) [ 101.086133][ T771] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 101.097975][ T771] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.112495][ T771] usb 3-1: config index 7 descriptor too short (expected 64575, got 68) [ 101.120987][ T771] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 101.134140][ T771] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.148416][ T771] usb 3-1: string descriptor 0 read error: -71 [ 101.154679][ T771] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.165301][ T771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.174692][ T771] usb 3-1: can't set config #1, error -71 [ 101.181801][ T771] usb 3-1: USB disconnect, device number 42 [ 101.188367][ T2043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.198262][ T2043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.207237][ T2043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.216009][ T2043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.224174][ T2043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.233403][ T2043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.241665][ T2043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.250857][ T2043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.259420][ T2043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.267979][ T2043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.279147][ T353] usb 4-1: USB disconnect, device number 21 [ 101.899549][ T2054] fuse: Unknown parameter 'P{>80D~Gʡ ' [ 101.949607][ T2063] FAULT_INJECTION: forcing a failure. [ 101.949607][ T2063] name fail_futex, interval 1, probability 0, space 0, times 1 [ 101.962683][ T2063] CPU: 0 UID: 0 PID: 2063 Comm: syz.2.419 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 101.962718][ T2063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.962731][ T2063] Call Trace: [ 101.962737][ T2063] [ 101.962746][ T2063] __dump_stack+0x21/0x30 [ 101.962781][ T2063] dump_stack_lvl+0x140/0x1c0 [ 101.962809][ T2063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.962838][ T2063] dump_stack+0x19/0x20 [ 101.962865][ T2063] should_fail_ex+0x3c2/0x510 [ 101.962892][ T2063] should_fail+0xf/0x20 [ 101.962914][ T2063] get_futex_key+0x178/0x940 [ 101.962940][ T2063] ? __cfi_get_futex_key+0x10/0x10 [ 101.962965][ T2063] ? assoc_array_delete+0x36f/0x10a0 [ 101.962993][ T2063] futex_wake+0x150/0x950 [ 101.963012][ T2063] ? __cfi_assoc_array_delete+0x10/0x10 [ 101.963038][ T2063] ? down_write+0xee/0x2b0 [ 101.963065][ T2063] ? __cfi_futex_wake+0x10/0x10 [ 101.963083][ T2063] ? __cfi_keyring_search_iterator+0x10/0x10 [ 101.963106][ T2063] ? __kasan_check_write+0x18/0x20 [ 101.963128][ T2063] ? key_put+0xc8/0x280 [ 101.963156][ T2063] ? key_put+0xc8/0x280 [ 101.963184][ T2063] ? keyctl_keyring_unlink+0x145/0x160 [ 101.963211][ T2063] do_futex+0x37d/0x510 [ 101.963248][ T2063] ? __cfi_do_futex+0x10/0x10 [ 101.963274][ T2063] ? mutex_unlock+0x90/0x240 [ 101.963300][ T2063] __se_sys_futex+0x13c/0x320 [ 101.963327][ T2063] ? fput+0x1a4/0x230 [ 101.963355][ T2063] ? __x64_sys_futex+0x110/0x110 [ 101.963385][ T2063] __x64_sys_futex+0xe9/0x110 [ 101.963412][ T2063] x64_sys_call+0x227f/0x2ee0 [ 101.963431][ T2063] do_syscall_64+0x57/0xf0 [ 101.963452][ T2063] ? clear_bhb_loop+0x50/0xa0 [ 101.963478][ T2063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.963503][ T2063] RIP: 0033:0x7fcf1e59e159 [ 101.963521][ T2063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.963540][ T2063] RSP: 002b:00007fcf1f3910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.963564][ T2063] RAX: ffffffffffffffda RBX: 00007fcf1e825fa8 RCX: 00007fcf1e59e159 [ 101.963580][ T2063] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcf1e825fac [ 101.963595][ T2063] RBP: 00007fcf1e825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 101.963610][ T2063] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 101.963625][ T2063] R13: 00007fcf1e826038 R14: 00007ffdf4271da0 R15: 00007ffdf4271e88 [ 101.963643][ T2063] [ 102.229567][ T2068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.238517][ T2068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.248237][ T2068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.257184][ T2068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.897663][ T701] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.027251][ T353] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 104.187986][ T353] usb 3-1: not running at top speed; connect to a high speed hub [ 104.196469][ T353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.207907][ T353] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 104.217289][ T353] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 104.226024][ T353] usb 3-1: Product: syz [ 104.230298][ T353] usb 3-1: Manufacturer: syz [ 104.236737][ T353] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 104.437110][ T353] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 104.446765][ T353] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 104.455618][ T353] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 104.464752][ T353] usb 3-1: USB disconnect, device number 43 [ 105.653271][ T36] audit: type=1400 audit(1790610072.280:396): avc: denied { bind } for pid=2095 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.937308][ T939] Bluetooth: hci0: command 0x1003 tx timeout [ 105.937321][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.950507][ T2082] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 107.512274][ T36] audit: type=1400 audit(1790610074.140:397): avc: denied { getopt } for pid=2112 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.577782][ T36] audit: type=1400 audit(1790610074.200:398): avc: denied { mounton } for pid=2118 comm="syz.1.435" path="/116/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.633224][ T2119] GUP no longer grows the stack in syz.1.435 (2119): 200000ffd000-200001000000 (200000ffa000) [ 107.643710][ T2119] CPU: 0 UID: 0 PID: 2119 Comm: syz.1.435 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 107.643746][ T2119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.643760][ T2119] Call Trace: [ 107.643768][ T2119] [ 107.643777][ T2119] __dump_stack+0x21/0x30 [ 107.643816][ T2119] dump_stack_lvl+0x140/0x1c0 [ 107.643846][ T2119] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.643878][ T2119] ? find_vma+0xd3/0x120 [ 107.643900][ T2119] ? vma_is_secretmem+0x11/0x50 [ 107.643934][ T2119] dump_stack+0x19/0x20 [ 107.643961][ T2119] __get_user_pages+0x1e20/0x22d0 [ 107.643996][ T2119] ? populate_vma_page_range+0x220/0x220 [ 107.644025][ T2119] get_user_pages_remote+0x377/0xb80 [ 107.644053][ T2119] ? __cfi_get_user_pages_remote+0x10/0x10 [ 107.644084][ T2119] __access_remote_vm+0x1de/0x630 [ 107.644110][ T2119] ? irqentry_exit+0x4a/0x60 [ 107.644137][ T2119] ? exc_page_fault+0x65/0xc0 [ 107.644165][ T2119] ? access_remote_vm+0x60/0x60 [ 107.644190][ T2119] ? _copy_from_user+0x31/0xa0 [ 107.644222][ T2119] access_remote_vm+0x39/0x60 [ 107.644248][ T2119] environ_read+0x270/0x460 [ 107.644278][ T2119] vfs_readv+0x5e4/0xa00 [ 107.644306][ T2119] ? __cfi_environ_read+0x10/0x10 [ 107.644334][ T2119] ? do_readv+0x2e0/0x2e0 [ 107.644367][ T2119] __x64_sys_preadv+0x19f/0x2c0 [ 107.644392][ T2119] ? __cfi___x64_sys_preadv+0x10/0x10 [ 107.644419][ T2119] ? switch_fpu_return+0x12/0x20 [ 107.644446][ T2119] x64_sys_call+0x1ee9/0x2ee0 [ 107.644467][ T2119] do_syscall_64+0x57/0xf0 [ 107.644487][ T2119] ? clear_bhb_loop+0x50/0xa0 [ 107.644515][ T2119] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.644541][ T2119] RIP: 0033:0x7fec7c19e159 [ 107.644561][ T2119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.644581][ T2119] RSP: 002b:00007fec7cff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 107.644607][ T2119] RAX: ffffffffffffffda RBX: 00007fec7c425fa0 RCX: 00007fec7c19e159 [ 107.644623][ T2119] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000006 [ 107.644637][ T2119] RBP: 00007fec7c23506b R08: 0000000000000000 R09: 0000000000000000 [ 107.644651][ T2119] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000000 [ 107.644665][ T2119] R13: 00007fec7c426038 R14: 00007fec7c425fa0 R15: 00007fffb9228598 [ 107.644693][ T2119] [ 109.445726][ T36] audit: type=1326 audit(1790610076.070:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.3.437" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa30339e159 code=0x0 [ 109.528487][ T2131] overlayfs: failed to resolve './file0': -2 [ 109.552097][ T36] audit: type=1326 audit(1790610076.180:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.3.437" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa30339e159 code=0x0 [ 109.580596][ T2137] overlayfs: failed to resolve '/