last executing test programs: 4.318549867s ago: executing program 1 (id=172): syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0xfbd9, 0x400, 0x3, 0xc4}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/swaps\x00', 0x0, 0x2) pread64(r0, &(0x7f00000003c0)=""/4110, 0x100e, 0x8) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r1) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0xe000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x7, 0x9, 0x3, 0x8}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x7, 0x3, 0x10, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0x1, 0x5, 0x5, 0xc3, 0x6, 0xb, 0x6, 0x3, 0x3}, {0xeeee0000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x9, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0xdddd1000, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x4, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x80a0000, 0xffff, 0x4, 0x4, 0xff, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xadd8}, {0xfffff000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) 4.245974578s ago: executing program 1 (id=173): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f00030100000009"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x40502, 0x0) write$binfmt_format(r2, &(0x7f00000002c0)='1\x00', 0x2) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x26000000, 0xd000000}) add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc2}, &(0x7f0000002300)={0x0, "2a4cea898139e0e0c019a74d3ea26dd02e4c241b97774cc682857eed746418339edb88181d7a65049884e401847aef386af7be95cb8e40e633ea34c59d08c962", 0x27}, 0x48, 0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@noprefix}]}) syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x8, 0xd0, 0x63, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x40, 0x1, 0x1, 0x28, 0x8}, 0x26, &(0x7f0000000340)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "ef0dc393a2bdb87ba13beb8b81a068d1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x0, 0xb80}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, "cc"}}, {0x72, &(0x7f0000000400)=@string={0x72, 0x3, "9c2dce4a72ec17c7fb9241259a0a751d85e821fa9ebd91ed0dd292994d76059b11fea6eeab42438434db098edd9e8f1034da900d5139598a9b0f9fec01c4c43badf8a633049e49358e0529166fb62b6bb889af89a526afeee7ed51e2fc38b35ecc1f8e3cf5502093594a9f9741241bcf"}}, {0x60, &(0x7f0000000480)=@string={0x60, 0x3, "f402109ce10d9f29b82c6b367d4d838ab137cd72f0a1d7af60d244101ddb21581b3c2d8af8ee9620f699ae4f2f17b1b2168f785da9115f8a38668c0e329e416bdf95366a3f9261597bc22c58e274f24e2d5375151491b4123481c0fc2aac"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1404}}, {0xa3, &(0x7f0000000600)=@string={0xa3, 0x3, "96ff919d56fd2930751c4ae48fecccefd499e830aafc928d148fcb51fafd81ba7ba2390a871fd3baa860c5be40db3e525c6da96c04cf0fa8b950c405d096d2cc37e5e360f7c5946f0f689dbfeca21d9e55e9385f41bbb4575bb1646ae1a9ba4c632902a5029ca139b346ee30fd82e7a47e83fbfd5b5eaf5ea91bcd69f33cee2e24263cfa72b22c6f6555a654f5c3051789f8e21c23b7234c446f282d9c3fd700ec"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42f}}]}) 3.931487053s ago: executing program 3 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x1, 0x944, 0xffffffff, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x2f, 0x3, 0x0, 0x0, "f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}]}}) syz_io_uring_setup(0x1b3f, &(0x7f0000000000)={0x0, 0x7420, 0x200, 0x5, 0x199}, &(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r6 = syz_io_uring_setup(0x347e, &(0x7f0000000340)={0x0, 0xa837, 0x13100, 0x2003, 0x15f}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x58, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x984, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x11c}}}, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000480)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x418, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x41}}}, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) syz_ublk_setup_io_uring(0x427b, &(0x7f0000000180)={0x0, 0xb0e2, 0x80000, 0x2, 0x213}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r4, r5, r8, r11, &(0x7f0000002200)={0x2e, 0x64, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000021c0)=@any_dev={0x4, 0xe00, 0x0, 0x0, 0x1000, 0xfffffffe, 0x0, 0x0, 0x100}}}, &(0x7f0000002280)) 3.901940314s ago: executing program 3 (id=182): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r2 = userfaultfd(0x801) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee01) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) setreuid(0x0, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003"], 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mlockall(0x1) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xf, 0xfffffff0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) exit(0xfffffffffffffffd) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/228, 0xe4}], 0x1) 3.211491816s ago: executing program 2 (id=185): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000080)={@private1, 0x0}, &(0x7f0000000100)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x200880, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0xfffffd1d) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@empty, @multicast1, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@allocspi={0x134, 0x16, 0x20, 0x70bd25, 0x25dfdbfe, {{{@in=@empty, @in=@loopback, 0x4e20, 0x0, 0x4e24, 0x9, 0xa, 0x0, 0x0, 0x3c, r2, 0xffffffffffffffff}, {@in6=@private1, 0x4d2, 0x6c}, @in=@private=0xa010100, {0x4b1, 0x7fffffffffffffff, 0x5, 0x6, 0x5, 0x195, 0x10001}, {0x8, 0xbd18, 0xfffffffffffffff9, 0xc}, {0x0, 0x5, 0xfffffffa}, 0x70bd2a, 0x34ff, 0x2, 0x1, 0x4, 0x1}, 0x4, 0x6}, [@offload={0xc}, @tfcpad={0x8, 0x16, 0x77c}, @offload={0xc, 0x1c, {r7, 0x2}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e20, @in=@remote}}]}, 0x134}}, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="b9"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) r9 = openat$incfs(r8, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0)) 3.188819606s ago: executing program 2 (id=186): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x26, 0x5, 0x0, {0x0, 0x3, 0x9, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$inet(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fchdir(r1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, r2) keyctl$invalidate(0x15, r3) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r5, 0x5393, &(0x7f0000000100)=0x3) 3.172270116s ago: executing program 2 (id=187): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) bind$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) write(r0, &(0x7f0000000900)="3fea7efa4033d6e61954acc993b60e5d71a6fbc5247a3b2796b1c2fcaebbf5bfbd0c8857f16e2896518b6ec3f9d4c597fcb16b17a4d58b2c60bc7e83cef3b821c0be87618f479a791e5cd7eba61de7b364e8e7e1e89921c64b0bdeb0b9e3c00f92799061e133a9ec323d8e1e4056df44e48dca3c0f18d9b6bd2240a7b2c9cdd3e76944bac437ab1091c6f34db9", 0x8d) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x20502, 0x8) pwritev2(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x17) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000100)) 2.896064221s ago: executing program 1 (id=188): syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a77738209111513c3f2a83309fa02030109022400010000000009042200029f53950009050a"], 0x0) 2.608950246s ago: executing program 2 (id=189): memfd_secret(0x0) (async) r0 = memfd_secret(0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x8, 0xcc}, {0x5, 0x6}, {0x0, 0x7}, {0x300}]}) syslog(0x2, &(0x7f0000000080)=""/105, 0x69) syslog(0x0, &(0x7f0000000100)=""/137, 0x89) syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0xb9, 0xc0, 0x37, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "90633458"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x6dd4, 0x1b}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf2}, @acm={0x4, 0x24, 0x2, 0x5}, @acm={0x4, 0x24, 0x2, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffb, 0x1, 0xd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0xfb, 0x31}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3e, 0xd, 0xb0}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x1, 0x1, 0xa, 0x8, 0x7}, 0xf7, &(0x7f0000000280)={0x5, 0xf, 0xf7, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x3, 0x77cc42213f4fd5e3, 0x117, [0xffc000, 0x3f9f, 0x3ff0]}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x9, 0xf00, 0x4, [0x3f00]}, @generic={0xaf, 0x10, 0x1, "55fbc76f44e3cb7feef6c5d240edf777aa9183ca4fff630ebd7b28b7016521eacc1358fd52b47f675d1a538084d0b589954172746aaa9a6622d0af9ad6d1c6f3efa783e3a40e10ffa320cb6cce7018074a497446590be48830706e1b07ca9cf2c8ed32a7a3825101fe9eecc830f52c4449e66447b84a67493f9f5ca8cbe3b236f840314b744c837649158282aac6440bc73cee77d4af576ccc8f61953a8a43a89a00e91cc3c69aa05ff11f9d"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x7fffff8, 0x0, 0xd, [0x0, 0xff00c0, 0xf]}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2409}}]}) (async) r1 = syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0xb9, 0xc0, 0x37, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "90633458"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x6dd4, 0x1b}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf2}, @acm={0x4, 0x24, 0x2, 0x5}, @acm={0x4, 0x24, 0x2, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffb, 0x1, 0xd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0xfb, 0x31}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3e, 0xd, 0xb0}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x1, 0x1, 0xa, 0x8, 0x7}, 0xf7, &(0x7f0000000280)={0x5, 0xf, 0xf7, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x3, 0x77cc42213f4fd5e3, 0x117, [0xffc000, 0x3f9f, 0x3ff0]}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x9, 0xf00, 0x4, [0x3f00]}, @generic={0xaf, 0x10, 0x1, "55fbc76f44e3cb7feef6c5d240edf777aa9183ca4fff630ebd7b28b7016521eacc1358fd52b47f675d1a538084d0b589954172746aaa9a6622d0af9ad6d1c6f3efa783e3a40e10ffa320cb6cce7018074a497446590be48830706e1b07ca9cf2c8ed32a7a3825101fe9eecc830f52c4449e66447b84a67493f9f5ca8cbe3b236f840314b744c837649158282aac6440bc73cee77d4af576ccc8f61953a8a43a89a00e91cc3c69aa05ff11f9d"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x7fffff8, 0x0, 0xd, [0x0, 0xff00c0, 0xf]}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2409}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x40, 0x10, 0xb8, {0xb8, 0x22, "10719841ff317ca82bd6c03fd46332976f0cfbe4e4baf3be3c29e91c95af03c6cbc7a62c3db8747a3e3bea724397fb8d5851115e64a58ae965efcdd497197cf4d3d1d810efe4a3597ff5feec4514f11afb12d28c151f57a9f7572b0249e71fb07b6859d6e67a0852437897a41bd66eee4557c14c316ed2531f2e3f9bb0453db0cc985367ac624a5e4808a6a0f09b8da8846b3bc04a35bd26a7f27a351a565c7d31be9d73e6fc309277ff7e66641656c432f04bcbf686"}}, &(0x7f0000000500)={0x0, 0x3, 0x76, @string={0x76, 0x3, "f2be8c3a4af0fa6ac3dbd59a5ef88f2489fc207a8ea949c81e4e11fb27ffe6cd3401abc1556be6e1dd5b8539b352b192e944269cdc2a3814982fdb52715f827b30fe6ddf3cbd2f193c50d194c998f7ee0208fbf7b3527f2cefeaca5381767720299ccfecaf431900ec27ee1ad81c0ccf99dc84b8"}}, &(0x7f0000000580)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0x69, 0x6, 0xd, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2e, 0xc8, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0xfe, 0x2, 0xe, 0x0, 0x2, [0xff0000, 0xff00f0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xff, 0x5, 0xe05}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x4, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x9c, 0x7, 0x9}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x8, 0x8, "972f69f7", "aa9232f1"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x7, 0x1, 0x8, 0x6, 0xf}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x0, 0x7, 0xab, "62304d8ca5e86d4249e4d2fa53c3d83edcdafff503ebf17d158eeb9d3afb6fba94616aeca49dcac22f02f2ce461b7aa4fda1d9bba49b0fbda5b3f372e91bb6774e4deaa16ad2252fb14181cfa77f3073a99c90085797bfc492670e128f685504a6c2cd8c5dd6aeb8cc0c11efa0a48bcaf84b9b5fdd4eba29c03a204121cdc78dc96b2ee4a3b1ceeea51f8f4b772370901f94ffb5dda0f406961eacded59a120eb37a62232d0455eb749f80"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xdb}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x2, 0x1, [0xf0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x445}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0xb, 0x2, '5/'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x13, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "8db1"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xc0c}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000c00)=0x9) syslog(0x0, &(0x7f0000000c40)=""/249, 0xf9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1d4, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "ccf8f9191eed65d27c1c437290c4fa1a94436d26dc79a97eff5cfd0cfebb82576e403440b9d7c779badb8565b8cc8deaad3e67d77e0fc82381770c5a8289758c1929739a2527332f4ce786d9e3"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3821}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000800) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1d4, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "ccf8f9191eed65d27c1c437290c4fa1a94436d26dc79a97eff5cfd0cfebb82576e403440b9d7c779badb8565b8cc8deaad3e67d77e0fc82381770c5a8289758c1929739a2527332f4ce786d9e3"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3821}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000800) ftruncate(r0, 0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001040)={0x5e4, 0xfff, 0x2, 0x9, 0xb, "eee2d07e945c5ba41c5b98c8d0b6a25da220a1"}) ioctl$KVM_RUN(r0, 0xae80, 0x0) getresuid(&(0x7f0000001080), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000001200)='./file0\x00', 0x800, 0x1, &(0x7f0000001240)) (async) statx(r0, &(0x7f0000001200)='./file0\x00', 0x800, 0x1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r5, r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x8) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x8) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000001380)=@loop={'/dev/loop', 0x0}, r4, &(0x7f00000013c0)={0x6, 0x86, 0x2, 0x4, 0x1452, 0x2, 0x64, 0x49b1, 0x3}) syz_usb_ep_write(r1, 0x4, 0xb, &(0x7f0000001440)="17ecdad39f64d2f09494d6") (async) syz_usb_ep_write(r1, 0x4, 0xb, &(0x7f0000001440)="17ecdad39f64d2f09494d6") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001480)=0x14) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001480)=0x14) cachestat(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x9}, &(0x7f0000001500), 0x0) r8 = syz_usb_connect$cdc_ncm(0x0, 0x9a, &(0x7f0000001540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x62, 0x20, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x400, 0x3, 0x10}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0xad27}, @country_functional={0x8, 0x24, 0x7, 0x5, 0x81, [0x0]}, @obex={0x5, 0x24, 0x15, 0xf6}, @obex={0x5, 0x24, 0x15, 0x18}, @obex={0x5, 0x24, 0x15, 0x64a7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x2fb, 0x8, 0x7, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0xfd, 0x6}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x250, 0x1, 0x1, 0x40, 0x20, 0x1}, 0x6b, &(0x7f0000001640)={0x5, 0xf, 0x6b, 0x2, [@generic={0x5b, 0x10, 0x4, "3a7234b8b6f783cdcb5efe2cbb9102e9cbca3739a8bd9659c3498da4398d7e8b807b7488fd020516294bffc77be18b933710db7b73bf8c08d386c5410aa4c21be62225a91195fe4dd1bceaf0e110c522524c29ec3b699c91"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0x6, 0x5, 0x3}]}, 0x3, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x446}}, {0x16, &(0x7f0000001740)=@string={0x16, 0x3, "33f40aad7216a0a09dd0108f110e99d2a29e6e45"}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f00000018c0)={0x14, &(0x7f00000017c0)={0x40, 0x2, 0x8d, {0x8d, 0xf, "ec752cafff83d487fc2c12430af448de910922b99ff95272274983da2bdf0c30bd90b2882964a8930ad159cdfe02d4485ee36e8dcd788215cab226c4f594da347f93bee84218e4a5aaffd433b3e9fcca1f46b8523ba31ee9a74c9607d03103384647aa2868a935920f112e497b04dad797e85c108bffe7c5a8eec39e699c0c98512b308f9e1b342bf45cc6"}}, &(0x7f0000001880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x44, &(0x7f0000001900)={0x40, 0x30, 0xf6, "9abc69c2641f333b19d08753ac6451c8fdba27c939e48da0c360c110aa1df0bf830fdb0c07ae7b48c0d3122c96fbba94f62a982406e6080307ca09c7f214029828798c53d54ad9f07fd552a78a1d48f650cf7b4b35ec987f94fc4176f883e6aa39638fa5276ae971736102ad83b426ece5a8a744e17bc45701b505843f5aebae7806f54e432e6e013cff80dfe9646abffcab92fe244a0782af536086d127532d9efa77e8b906e29a29b0762c77d147a66a721234c4d4fbafc60f9d6dbb9d7f62c86431ca36eeefdc54aeee65af16237db7a7b30efa281c3d90f044f024d7452bac7e241ffe8ed77d9d06b7e2a2aee2389759ad3b2c82"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001a80)={0x20, 0x80, 0x1c, {0xcc, 0x7, 0xffffff01, 0xc, 0x2, 0x2, 0x8, 0x683e, 0x4, 0x5, 0x1ff, 0xf676}}, &(0x7f0000001ac0)={0x20, 0x85, 0x4, 0x9af}, &(0x7f0000001b00)={0x20, 0x83, 0x2}, &(0x7f0000001b40)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000001b80)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r8, &(0x7f00000018c0)={0x14, &(0x7f00000017c0)={0x40, 0x2, 0x8d, {0x8d, 0xf, "ec752cafff83d487fc2c12430af448de910922b99ff95272274983da2bdf0c30bd90b2882964a8930ad159cdfe02d4485ee36e8dcd788215cab226c4f594da347f93bee84218e4a5aaffd433b3e9fcca1f46b8523ba31ee9a74c9607d03103384647aa2868a935920f112e497b04dad797e85c108bffe7c5a8eec39e699c0c98512b308f9e1b342bf45cc6"}}, &(0x7f0000001880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x44, &(0x7f0000001900)={0x40, 0x30, 0xf6, "9abc69c2641f333b19d08753ac6451c8fdba27c939e48da0c360c110aa1df0bf830fdb0c07ae7b48c0d3122c96fbba94f62a982406e6080307ca09c7f214029828798c53d54ad9f07fd552a78a1d48f650cf7b4b35ec987f94fc4176f883e6aa39638fa5276ae971736102ad83b426ece5a8a744e17bc45701b505843f5aebae7806f54e432e6e013cff80dfe9646abffcab92fe244a0782af536086d127532d9efa77e8b906e29a29b0762c77d147a66a721234c4d4fbafc60f9d6dbb9d7f62c86431ca36eeefdc54aeee65af16237db7a7b30efa281c3d90f044f024d7452bac7e241ffe8ed77d9d06b7e2a2aee2389759ad3b2c82"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001a80)={0x20, 0x80, 0x1c, {0xcc, 0x7, 0xffffff01, 0xc, 0x2, 0x2, 0x8, 0x683e, 0x4, 0x5, 0x1ff, 0xf676}}, &(0x7f0000001ac0)={0x20, 0x85, 0x4, 0x9af}, &(0x7f0000001b00)={0x20, 0x83, 0x2}, &(0x7f0000001b40)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000001b80)={0x20, 0x89, 0x2}}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r9, 0x7704, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000001c80)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000001c80)) mount(&(0x7f0000001cc0)=@filename='./file0\x00', &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)='nfsd\x00', 0x18000, &(0x7f0000001d80)='-^}\'!&\xeb\x00') syslog(0x9, &(0x7f0000001dc0)=""/18, 0x12) (async) syslog(0x9, &(0x7f0000001dc0)=""/18, 0x12) 2.415954339s ago: executing program 0 (id=191): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x2, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af25, &(0x7f0000000000)={@host}) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x28f, 0x0, 0x0, 0x1000, 0x8000, 0x0, 0x0, 0xa8}}}, &(0x7f0000000040)=0x0) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19c) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r7, 0x0, 0x0) syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x2000, 0x1, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x800, 0x2, 0x214c}}], 0x1, 0x0, 0x0) open_tree(r4, &(0x7f0000000080)='./file0\x00', 0x108000) 2.413899569s ago: executing program 0 (id=192): getresuid(&(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff}, {}, {0xe, 0x4000000, 0x1}, 0x70bd27, 0x0, 0x2, 0x4, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) setsockopt(r1, 0x4765, 0x80, &(0x7f00000000c0)="91c884ced32c6470b017b3d4bb8adaf15eda87f4c137646db402f0773b329642741bd1ebaffa937c1bd8950b883adbf4c64895dcba86c78712f64c5a00c8c76d691af70693dd880f6fc8277a7c8d6facc5c85188be35eff542d8a9724e917f0006c925c5e69744d80f87c0a0805f886c61936b87", 0x74) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r7, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x535b992b, 0x2, 0x0, 0x5, 0x8, 0x11, "8a9fbcb7cab44b8cc56f5d067ee4c578475d81cd8c0131b0649af0d7173bde1bff643dc4ce9cd7587779ed27bf5ea847cd6fa1fa629288a7c7fc047e62a5df6c", "36ce7d84ee0df75ee8f676fc1e16a07f8457905879f43f794741f3f23b4f38777c7b64ce441af1934aca5aca0988ecffd59050fad493e1a75e67d04efb4a832e", "a2226928176e0419737a4117dc15de84dfc178b1748da831fc46bdd25c082e98", [0x3, 0x200]}) 2.413581849s ago: executing program 1 (id=193): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x200005, 0x6, 0x0, 0x2, {0x1, 0x17a, 0x40000000103, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0xa000, 0x4, 0xee00, 0x0, 0x403, 0x3}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f02) 2.34543514s ago: executing program 0 (id=194): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x83, 0x4}}}}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) fsync(r2) (async) fsync(r2) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9c) (async) sendfile(r3, r3, 0x0, 0x9c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4031280000002821f17d3816e9bc787a4dccdbb3871b0127a523da3539382b1cb20f9dba43b507000000bd3dff23d89ee42a88dbabd19bd9eb94b753d123bf87194f6bcf8504252f9512af84caa49323abd74707aa3c3afa38d86df5bbc2c1a2b73c8e90e4b8588ed6ea5199197de979b17ecda9ef070e957fc0fcecdd8234ef3bccd94b3c1f2881b439cf1da0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.843923849s ago: executing program 1 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 1.739574111s ago: executing program 1 (id=196): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x282, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) syz_usb_connect$uac2(0x0, 0x97, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010000002063075001400001020301090285000301032009080b00050107202e0904000000010120000924010e00021500bb0c240303000700060705"], 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async, rerun: 32) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) (rerun: 32) fcntl$setlease(r1, 0x400, 0x0) (async) mkdirat(r1, &(0x7f0000000200)='./file7\x00', 0x4) (async) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x1000, 0x6, 0x1, 0x1000, 0x4, 0x2}, 0x30, 0x3) landlock_restrict_self(r2, 0xe) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x270240, 0x0) cachestat(r0, &(0x7f0000000180)={0x5, 0xff}, &(0x7f00000001c0), 0x0) (async) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0x1, 0x1, 0xf}) 1.283773448s ago: executing program 2 (id=197): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822f01) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x326, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800a, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x326, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800a, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4}}}}}]}}]}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d00"], 0x28}], 0x1}, 0x14008010) (async) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d00"], 0x28}], 0x1}, 0x14008010) close_range(r4, r1, 0x2) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7ff, 0x7, 0x140, 0xae, 0x0, 0x8001}, {0x41e9dfad, 0x2, 0x8000000000000000, 0x0, 0x8, 0x4}], ['\x00']}) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0", @ANYRES8=0x0], 0x0}, 0x0) 797.935727ms ago: executing program 3 (id=198): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffec6, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x1c}], 0x1}, 0x5) clock_gettime(0x766293fdc5a3d1b3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'pim6reg\x00', 0x100}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'ipvlan1\x00', 0x2}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x18500}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000880}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000840)={&(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x40002) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000880}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:apt_exec_t:s0\x00', 0x20, 0x1) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x268, 0x1, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x1, 0x4}, 0x9, 0x1, 0x9, 0xfff, 0x24, 'syz0\x00', "899f949f69caeb8232e67b31fb6773b2148257b0738193de7021e0c4fd0e52eb", "0900a13de8bdcf396766065279cf58e6a70b4d25e1d04d9e0a8aa016bde16ebd", [{0x9, 0x0, {0x0, 0xcb28}}, {0x6, 0x4, {0x1, 0xef2}}, {0x5, 0x4, {0x1, 0xfffffff8}}, {0x1ff, 0x101, {0x2, 0x7}}, {0x8db, 0x6, {0x3, 0x7}}, {0x7ff, 0x1, {0x3, 0x9}}, {0x3, 0x7fff, {0x1, 0x1000}}, {0xb4, 0x8b, {0x0, 0x2}}, {0x3, 0x738f, {0x1, 0xc4}}, {0x1, 0x0, {0x0, 0xb8}}, {0xb, 0x1, {0x0, 0x4}}, {0x1ff, 0x4, {0x1, 0x7}}, {0xb0e, 0x4, {0x1, 0x8}}, {0xf, 0x8, {0x3}}, {0x2, 0xff, {0x2, 0x40}}, {0xff, 0xff, {0x0, 0x4}}, {0x6, 0x81, {0x1, 0x9}}, {0x7, 0x100, {0x3, 0xffff}}, {0x8, 0x5, {0x2, 0x8}}, {0x1, 0x2, {0x0, 0xe27}}, {0x7, 0xa, {0x2, 0x4000000}}, {0x3, 0x1, {0x2, 0x1}}, {0x2d9, 0x2, {0x2, 0x8}}, {0x2, 0x0, {0x1, 0x5}}, {0x2, 0x9, {0x2}}, {0x1, 0x5, {0x3, 0x4}}, {0x0, 0x3, {0x0, 0x7}}, {0x7, 0x7, {0x1}}, {0x2, 0x401, {0x0, 0x400}}, {0xfff9, 0x401, {0x1, 0x3f80000}}, {0x4, 0x0, {0x0, 0x7f}}, {0x3, 0x2c00, {0x1, 0x7}}, {0x4, 0x8, {0x2, 0x5}}, {0x9, 0x6, {0x1, 0x7cd}}, {0x5, 0x1000, {0x0, 0x8}}, {0xff, 0x3, {0x0, 0xffff163f}}, {0x2, 0x4, {0x1, 0x4ff}}, {0x2, 0x4, {0x3, 0xa}}, {0x400, 0x2, {0x2, 0x7}}, {0x93a5, 0x4000, {0x1, 0xffff}}]}}}]}, 0x268}}, 0x4000000) 764.309337ms ago: executing program 0 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x62ab42, 0x131) write(r1, &(0x7f0000000000)='3', 0x4e) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3233f2677d65d4f4, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x8, 0xd, 0x83, '\x00', 0x80000000}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$incfs(r1, &(0x7f0000000200)='.log\x00', 0x28000, 0x59) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x57001, 0xd, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x3}, {0x53, 0x18, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x2, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x15, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x7, 0x54, '\x00', 0xff}, {0x8, 0xd5, 0xf1, '\x00', 0x7b}, {0x0, 0x82, 0xb}, {0x7f, 0xd, 0xd, '\x00', 0xb}, {0xd3, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0x1, '\x00', 0x1}, {0xfe, 0x2, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x2}, {0xf, 0x4, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0xf, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xf}, {0x7, 0xe1, 0x7, '\x00', 0x86}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x6}]}}) socket$tipc(0x1e, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r8, &(0x7f0000000c40)='p:s/p ./file0:0\f$a', 0x12) (async) wait4(r7, 0x0, 0xa, &(0x7f00000000c0)) 707.946878ms ago: executing program 3 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl(r2, 0x1, &(0x7f0000000380)="35738b86") (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="b9800000c00f3235000100000f302eaf3ef3460f0936360f01c9b8010000000f01c166400fd1900000000065470f06660f094d0fc7681d48b806000000000000000f23c00f21f835000000000f23f8", 0x4f}], 0x1, 0x74, &(0x7f0000000040)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) 706.402208ms ago: executing program 3 (id=201): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r2, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x8923, 0x0) (async) recvmmsg(r1, &(0x7f0000008900)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) (async) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 692.720329ms ago: executing program 3 (id=202): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x10000, 0xf, 0xdddd1000, 0x1000, &(0x7f0000ff7000/0x1000)=nil}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x11, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6}}) sendmsg$key(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="020307061900000028bd7000ffdbdf2505001a00ac1414bb000000000000000000000000e00000020000000000009500000000000021009d100400040009000000ff0300000061507efd2585cb732aea2c4e2d09c9000000400000000000000002000000000000000100140009000000030017003c80000002004e22ac1414aa000000000000000005001700ffa00000000000ffffac1414aaff0f000000000000050005003c0000000a004e220000000dfe8000000000000000000000000000bb00040000000000"], 0xc8}}, 0x24000044) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000003, 0x4018831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r12) sendmsg$IEEE802154_LLSEC_LIST_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r13, 0x705, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000810) r14 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r14, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r12) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="000225bd7000fcdbdf250600000008000400ac1e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20) 101.643268ms ago: executing program 2 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200008101e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000022c0)={0x60, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd7e}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000003880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003840)={&(0x7f0000002340)={0x14d0, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TESTDATA={0xcf, 0x45, "6668decb0eda1a5d44336ff5df73be293a5fbfff45d82d1cb9c1ba9919e51821e40971700a530d5da79989a7c6809499bff72441c1b1299f62746fe0a8a8b55147909e92d4dcb0b7ab6095d8b6731ec99838b2417ecb528d768942333eed77d3eb765ff2ac3e6ca7d6104e2356e65fd185930582cbf8f90e9f12d648644b41ca57154b91c6efd183fc66eeaad0137977be987955304fa7a294c74b270c61852ba0d40c6d91bc762803b91c3de7e4e089ad337508700e33c92ff77df4f52587ec27d8df0f2f0fb211381f15"}, @NL80211_ATTR_TESTDATA={0x89, 0x45, "571053ad82a5ba1b70b1c63b39532255bb924cb491039834c5a41cea36adea42c19bbe1046ac9214804cb478daf15cd8fdba2447e47a8c5c70d67b3f2014d32368d83eebb831f59ceb63af5be4aef942fbc619d88786fd179324f157a75efd8cd5b86a5e07d9988fd083669efd6981db76e7293673c3444bda9d1bd7407dda9857e7414fa4"}, @NL80211_ATTR_TESTDATA={0xe7, 0x45, "d2f71f46d7714d198ad60ae8e7a97670dc2a38dc845b884ac6301322c03eddbc15c4950bd95aa4785ce49801445997a9f9ff1d2c0069a5406130ac834475649a1226d29ef982a7ca0f1121b830559779b2152e30f6fb9ab553f052a6c1e90050eed7f2d5083a95f2152aefb1c36a12551d3576846d0dd2d633c78b637dcb6a17ac1f957c5f030e85aaec18adbba6337109f0d08fe0a9db4f1ba39bb691f91cc512af3ba4f566e61d43c070a0fc9d38f5452ef83d9b1457626169687b419775ee72177f7c6aeb3844020b4c7e6004d3d526ddd4332a0f8a0ea2298911505985e3e63139"}, @NL80211_ATTR_TESTDATA={0xca, 0x45, "ae3c3068ef6a11d94bc3b5e9e53fc9c3c904ab88afa7c253d40be4427722f51c6a01c7ec5a26b956902059a6967092f2b7f2c4a9a2438f55f54c1ce5f5cc929dd38ebbbc49e6a33caa5d5402fd9c652a8683fa75b43a3f51af5064bc9efc791d11e758e4d94e1a0e31f06ad7abc42595619e98417289d56729e81aa655ee47f3bf9829b6100c57364da978690ebd60ea0e388fc499b276a05effce99b99f98c5054a87ca6b763b2b26975415d9593ed5528ead7507cd3fd38e1b7064ed176d0c91cc9e70ae36"}, @NL80211_ATTR_TESTDATA={0xdb, 0x45, "6b6f562c7689a0977a912d1bcc1b20157b248772137ba19b562a1b6933ae04d37b3ee5c6a8c668ee11cb0e0f79ff2aefbc5c3e9fa5c2bdd6f4756f19941c7b80cc276816724150b1b5a3e3eccaa79cb3a30986ae3d55611b5f2be6e367a82f4c1bb60eae4d5f9eb25009819e048962546daf481a78b50957ce949a36b4f3d9f29e602b9a776c1e8c3fb084a1a62b39cbe926d2d9edcacfd413d0127fcf89e9bca4e04c1ea0cad289bebc20112d78c7db24c54efba04a8641b8e366009f066d762e9fb57807e2586793cc221ccb5882d20d861a4582107d"}, @NL80211_ATTR_TESTDATA={0xc1, 0x45, "8b00383ff900c972898ffd2f068961fdc491d6bca36850f70abf020c817f5401bf126cfea26a5e5e378e8870fe24dc9cc941236d5d84811b284d0aa9cfaf639151882de851584efd77f96c056ed73bfeb00e08e101e9d2de56810e2282d4fedf09e0d3cb0b77e23b5c53b7f3ba871e553811e267ea6a2986123eeeeaaae811e40843b10b066bf016b996f8914d9efe63e4131b845fb819facbc0a285252f5f7338b472de7b5172a38a0563ddb27acc707323424a6d27dad6a8d40df651"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x14d0}, 0x1, 0x0, 0x0, 0x800}, 0x6000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x80000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x6f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x3c5, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x140}}}, &(0x7f0000000200)=0x0) r8 = syz_ublk_setup_io_uring(0x2262, &(0x7f0000000280)={0x0, 0x586, 0x80, 0x3, 0x2db}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x5090c2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') read$FUSE(r10, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') pread64(r11, &(0x7f0000000140)=""/18, 0x12, 0x4) r12 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) syz_ublk_setup_queues(r1, r7, &(0x7f0000000440)={0x0, 0x202, 0x10000, 0x0, 0x120, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6de4, 0x10, 0x0, 0x317, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa0c, 0x800, 0x2, 0x3d8, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff0a, 0x80, 0x2, 0x1d6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbbc, 0x1, 0x2, 0x36, 0x0, r11}}], 0x4, &(0x7f0000002040)={0x2e, 0x44, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x2, 0x9ed, 0x0, &(0x7f0000001040)=@buf_512="976f84aff06fda48bc1493a9e534240184b44f139ff513c0a575702eb3f1fe973d71f6c0ce4efff6f2a9e63aa077fc6e08bee213608a81871a863ed9048afe93c95ab086ca0a0e9ecbfe94ef2a7be84e4ebc781bc4644920fa5565745541784cbefec08a212ba758b833f55f7356ba23dd4514b1e0f3abcbd915e7331bbf4642ad05656a46b9c7617f4f471dac59259abe680f6383b962812cfb0a8ffcb22c185347c4cc144373748ae1b28efb943bae45f86689a38095942db39cd1af4034b9b07b40bc1ba4f4b9cb12340f705d7184915caa14a3cfd4ece25d42714dd40f40a007e22a1d697748c911aac7f8351f5ebbdaaba0d7af452a56ae6efbe78a4a178d0c86bf2443255062bf6287d11873e2b80e753b801d0154b1e1c36335d52bda4957ce27224a45032594d419ba54eabe7993f077d8b90adfc76a3b6107165b433e72a45d5b08ed8b91ddc8aeaf1bbb2da7fa5a4924ba00dad2d66ce7d9e648b190b45501194b42a3620dd105f2bfde6fbbe7f5ae2dd7621a74475145fedcb7172abd7a3af5d5add628898531520af19636250f24160b6885e1389546d2fe98128c0e0c112a57c8c7eaadf0a0b6fd2826f4debe52aadaa688edee76409e376fe2f7a948340ea53e38ec2b32576c322b379775626da8a7e6298954a9692de9216aa4586872f3f3322cd596aa485d7618b09a9f365a7a948977eb1445076ccdd335"}}, &(0x7f00000020c0)) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x8000000000000000, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) r14 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) syz_usb_control_io$hid(r14, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0xc, "de5e7434"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @global=@item_012={0x2, 0x1, 0xb, "bb8c"}, @main=@item_4={0x3, 0x0, 0xc, "fa63db37"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x2, 0x1, 0x8, "fb40"}]}}, 0x0}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 100.499559ms ago: executing program 0 (id=211): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000880)=0x5, 0x4) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = open(0x0, 0x60840, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x41, 0x2d191, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) (rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000058e000/0x4000)=nil, 0x4000, &(0x7f0000000100)='([!{/\x00') (async) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) (async, rerun: 64) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) chmod(&(0x7f0000000880)='./file1\x00', 0x50) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800, 0x9, 0x2}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 0 (id=204): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0xd, 0xc, 0xfc, 0x4}, {0xf586, 0xb, 0xb, 0x1010}, {0x40, 0x6, 0x62, 0xffffffc0}]}) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x3, &(0x7f0000000180)=[{0x10, 0x8, 0x2}, {0x2, 0x4, 0xc, 0x8}, {0x101, 0xf8, 0x1}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0xd, 0xc, 0xfc, 0x4}, {0xf586, 0xb, 0xb, 0x1010}, {0x40, 0x6, 0x62, 0xffffffc0}]}) (async) socket$inet6(0xa, 0x2, 0x0) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000140)) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x3, &(0x7f0000000180)=[{0x10, 0x8, 0x2}, {0x2, 0x4, 0xc, 0x8}, {0x101, 0xf8, 0x1}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000100)) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 20.784847][ T36] audit: type=1400 audit(1790251828.430:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.785925][ T286] cgroup: Unknown subsys name 'net' [ 20.807641][ T36] audit: type=1400 audit(1790251828.430:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.835087][ T36] audit: type=1400 audit(1790251828.470:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.835317][ T286] cgroup: Unknown subsys name 'devices' [ 20.963091][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.968914][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.060862][ T36] audit: type=1400 audit(1790251828.710:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.084879][ T36] audit: type=1400 audit(1790251828.710:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.109413][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.110354][ T36] audit: type=1400 audit(1790251828.710:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.132290][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.142446][ T36] audit: type=1400 audit(1790251828.770:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.176957][ T36] audit: type=1400 audit(1790251828.770:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.202752][ T36] audit: type=1400 audit(1790251828.770:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.228443][ T36] audit: type=1400 audit(1790251828.770:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.457935][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.465169][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.472795][ T294] bridge_slave_0: entered allmulticast mode [ 22.479039][ T294] bridge_slave_0: entered promiscuous mode [ 22.491207][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.498350][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.505728][ T294] bridge_slave_1: entered allmulticast mode [ 22.512209][ T294] bridge_slave_1: entered promiscuous mode [ 22.545079][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.552186][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.559428][ T295] bridge_slave_0: entered allmulticast mode [ 22.565814][ T295] bridge_slave_0: entered promiscuous mode [ 22.572514][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.579724][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.587083][ T295] bridge_slave_1: entered allmulticast mode [ 22.593655][ T295] bridge_slave_1: entered promiscuous mode [ 22.619957][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.627247][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.634772][ T296] bridge_slave_0: entered allmulticast mode [ 22.641223][ T296] bridge_slave_0: entered promiscuous mode [ 22.655769][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.662855][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.669919][ T296] bridge_slave_1: entered allmulticast mode [ 22.676276][ T296] bridge_slave_1: entered promiscuous mode [ 22.712075][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.719210][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.726676][ T293] bridge_slave_0: entered allmulticast mode [ 22.733228][ T293] bridge_slave_0: entered promiscuous mode [ 22.742724][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.750280][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.757468][ T293] bridge_slave_1: entered allmulticast mode [ 22.763915][ T293] bridge_slave_1: entered promiscuous mode [ 22.874957][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.882483][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.889872][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.896944][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.923564][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.931004][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.938329][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.945413][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.954568][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.961654][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.968960][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.976007][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.019524][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.026748][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.034811][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.042246][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.071604][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.079274][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.086916][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.095056][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.102558][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.110378][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.118101][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.126025][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.137172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.144581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.153349][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.160514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.172181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.179247][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.202330][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.209474][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.217518][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.224650][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.232945][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.240159][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.274280][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.281807][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.292605][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.300093][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.326487][ T296] veth0_vlan: entered promiscuous mode [ 23.340239][ T295] veth0_vlan: entered promiscuous mode [ 23.359670][ T294] veth0_vlan: entered promiscuous mode [ 23.384382][ T296] veth1_macvtap: entered promiscuous mode [ 23.393210][ T294] veth1_macvtap: entered promiscuous mode [ 23.402788][ T293] veth0_vlan: entered promiscuous mode [ 23.409096][ T295] veth1_macvtap: entered promiscuous mode [ 23.434024][ T293] veth1_macvtap: entered promiscuous mode [ 23.476728][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.522482][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.568683][ T323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.618664][ T331] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 23.706931][ T335] overlay: filesystem on ./file0 is read-only [ 23.748356][ T339] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7'. [ 23.810816][ T62] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.942490][ T353] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 23.950160][ T353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 23.959382][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.967011][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.001978][ T62] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.010430][ T62] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.022922][ T62] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.033568][ T62] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 24.042773][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.051300][ T62] usb 4-1: Product: syz [ 24.055565][ T62] usb 4-1: Manufacturer: syz [ 24.060159][ T62] usb 4-1: SerialNumber: syz [ 24.067212][ T62] usb 4-1: selecting invalid altsetting 1 [ 24.073158][ T62] usb 4-1: unit 6 not found! [ 24.110691][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.270039][ T62] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 24.280381][ T10] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 24.290536][ T62] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 24.301704][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 24.310003][ T10] usb 2-1: Product: syz [ 24.314832][ T10] usb 2-1: Manufacturer: syz [ 24.322006][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.341213][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.480215][ T62] usb 4-1: USB disconnect, device number 2 [ 24.490701][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 24.496300][ T45] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 24.514313][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 24.523618][ T45] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 24.532654][ T45] usb 3-1: Product: syz [ 24.536843][ T45] usb 3-1: Manufacturer: syz [ 24.544579][ T45] r8152-cfgselector 3-1: Unknown version 0x0000 [ 24.551136][ T45] r8152-cfgselector 3-1: config 0 descriptor?? [ 24.558211][ T45] cdc_acm 3-1:0.0: Zero length descriptor references [ 24.565010][ T45] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 24.630660][ T365] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.758954][ T45] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 24.780599][ T365] usb 1-1: device descriptor read/64, error -71 [ 25.020555][ T365] usb 1-1: device descriptor read/64, error -71 [ 25.068589][ T377] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 25.092497][ T380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=380 comm=syz.3.19 [ 25.274524][ T365] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 25.350561][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.410713][ T365] usb 1-1: device descriptor read/64, error -71 [ 25.500605][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 25.507199][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.515695][ T45] usb 4-1: config 10 has an invalid interface number: 188 but max is 0 [ 25.524143][ T45] usb 4-1: config 10 has no interface number 0 [ 25.530728][ T45] usb 4-1: config 10 interface 188 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 25.542829][ T45] usb 4-1: config 10 interface 188 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 25.554493][ T45] usb 4-1: config 10 interface 188 has no altsetting 0 [ 25.563062][ T45] usb 4-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be [ 25.572178][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.580186][ T45] usb 4-1: Product: ࠊ [ 25.584877][ T45] usb 4-1: SerialNumber: syz [ 25.590741][ T386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 25.670548][ T365] usb 1-1: device descriptor read/64, error -71 [ 25.781949][ T365] usb usb1-port1: attempt power cycle [ 25.805954][ T45] usb 4-1: USB disconnect, device number 3 [ 25.819784][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:10.188/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.130551][ T365] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 26.151609][ T365] usb 1-1: device descriptor read/8, error -71 [ 26.281585][ T365] usb 1-1: device descriptor read/8, error -71 [ 26.520556][ T365] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 26.541681][ T365] usb 1-1: device descriptor read/8, error -71 [ 26.560540][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 26.671676][ T365] usb 1-1: device descriptor read/8, error -71 [ 26.710930][ T45] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 26.720013][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 26.727829][ T45] usb 4-1: can't read configurations, error -61 [ 26.780656][ T365] usb usb1-port1: unable to enumerate USB device [ 26.860583][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 26.863274][ T10] usb 2-1: USB disconnect, device number 2 [ 26.891567][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 26.891585][ T36] audit: type=1400 audit(1790251834.540:160): avc: denied { write } for pid=397 comm="syz.1.24" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.021101][ T45] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 27.031278][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 27.042349][ T36] audit: type=1400 audit(1790251834.690:161): avc: denied { read write } for pid=406 comm="syz.1.25" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.045291][ T407] netlink: 'syz.1.25': attribute type 4 has an invalid length. [ 27.065623][ T45] usb 4-1: can't read configurations, error -61 [ 27.076555][ T407] netlink: 17 bytes leftover after parsing attributes in process `syz.1.25'. [ 27.079866][ T45] usb usb4-port1: attempt power cycle [ 27.088707][ T36] audit: type=1400 audit(1790251834.690:162): avc: denied { open } for pid=406 comm="syz.1.25" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.278962][ T36] audit: type=1400 audit(1790251834.920:163): avc: denied { ioctl } for pid=408 comm="syz.0.26" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4424 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.360553][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.430687][ T45] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 27.451384][ T45] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 27.460427][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 27.468378][ T45] usb 4-1: can't read configurations, error -61 [ 27.510653][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 27.518508][ T311] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 27.527828][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.535963][ T311] usb 2-1: Product: syz [ 27.540303][ T311] usb 2-1: Manufacturer: syz [ 27.545075][ T311] usb 2-1: SerialNumber: syz [ 27.600595][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 27.621616][ T45] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 27.631084][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 27.638808][ T45] usb 4-1: can't read configurations, error -61 [ 27.645514][ T45] usb usb4-port1: unable to enumerate USB device [ 27.660558][ T365] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 27.753645][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.760974][ T311] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 27.776125][ T311] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 27.785860][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.796711][ T311] usb 2-1: USB disconnect, device number 3 [ 27.807480][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.824671][ T365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.834974][ T365] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.845514][ T365] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 27.856323][ T365] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 27.865659][ T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.873969][ T365] usb 1-1: Product: syz [ 27.878344][ T365] usb 1-1: Manufacturer: syz [ 27.883089][ T365] usb 1-1: SerialNumber: syz [ 28.092850][ T312] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.158343][ T409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.166933][ T409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.176753][ T36] audit: type=1400 audit(1790251835.820:164): avc: denied { open } for pid=408 comm="syz.0.26" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.261179][ T36] audit: type=1400 audit(1790251835.910:165): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.288208][ T36] audit: type=1400 audit(1790251835.930:166): avc: denied { create } for pid=417 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.550569][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.590545][ T62] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.702924][ T311] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 28.712042][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 28.720102][ T311] usb 2-1: Product: syz [ 28.724332][ T311] usb 2-1: Manufacturer: syz [ 28.742364][ T62] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.751417][ T62] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.761850][ T62] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.772454][ T62] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 28.781781][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.789907][ T62] usb 3-1: Product: syz [ 28.794157][ T62] usb 3-1: Manufacturer: syz [ 28.798824][ T62] usb 3-1: SerialNumber: syz [ 29.006617][ T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.016929][ T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.027612][ T62] usb 3-1: selecting invalid altsetting 1 [ 29.033780][ T62] usb 3-1: unit 3 not found! [ 29.038956][ T36] audit: type=1400 audit(1790251836.690:167): avc: denied { connect } for pid=417 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.058772][ T62] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 29.066473][ T62] usb 3-1: invalid MIXER UNIT descriptor 6 [ 29.074612][ T62] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 29.086167][ T62] usb 3-1: USB disconnect, device number 3 [ 29.107028][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.780857][ T366] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.843432][ T426] batadv_slave_1: entered promiscuous mode [ 29.852018][ T425] batadv_slave_1: left promiscuous mode [ 29.871955][ T36] audit: type=1400 audit(1790251837.520:168): avc: denied { mounton } for pid=427 comm="syz.3.31" path="/9/file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.943360][ T366] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 29.952806][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.961227][ T366] usb 3-1: Product: syz [ 29.965713][ T366] usb 3-1: Manufacturer: syz [ 29.970722][ T366] usb 3-1: SerialNumber: syz [ 30.002043][ T36] audit: type=1400 audit(1790251837.650:169): avc: denied { mount } for pid=427 comm="syz.3.31" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.020964][ T430] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 30.100547][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.100588][ T412] Bluetooth: hci0: command 0x1003 tx timeout [ 30.119007][ T365] usb 1-1: USB disconnect, device number 6 [ 30.180193][ T366] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:b0:a4:f7:c2:10 [ 30.192508][ T366] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 31.298343][ T311] usb 2-1: USB disconnect, device number 4 [ 31.352815][ T460] overlayfs: failed to resolve './file1/file0': -2 [ 32.001310][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 32.001329][ T36] audit: type=1400 audit(1790251839.650:190): avc: denied { connect } for pid=507 comm="syz.3.46" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.280672][ T366] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.440561][ T366] usb 4-1: Using ep0 maxpacket: 16 [ 32.452103][ T366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.476230][ T366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.497336][ T366] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.540583][ T366] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 32.562019][ C0] usb 3-1: eth1: intr status -71 [ 32.565467][ T311] usb 3-1: USB disconnect, device number 4 [ 32.589665][ T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.640910][ T366] usb 4-1: config 0 descriptor?? [ 32.680525][ T36] audit: type=1400 audit(1790251840.320:191): avc: denied { read } for pid=516 comm="syz.1.48" dev="nsfs" ino=4026532311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.739741][ T36] audit: type=1400 audit(1790251840.320:192): avc: denied { open } for pid=516 comm="syz.1.48" path="net:[4026532311]" dev="nsfs" ino=4026532311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.780045][ T530] Zero length message leads to an empty skb [ 32.796636][ T36] audit: type=1400 audit(1790251840.330:193): avc: denied { ioctl } for pid=516 comm="syz.1.48" path="socket:[4875]" dev="sockfs" ino=4875 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.868919][ T36] audit: type=1400 audit(1790251840.330:194): avc: denied { read } for pid=516 comm="syz.1.48" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.901802][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.908417][ T36] audit: type=1400 audit(1790251840.330:195): avc: denied { open } for pid=516 comm="syz.1.48" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.912544][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.953629][ T36] audit: type=1400 audit(1790251840.330:196): avc: denied { ioctl } for pid=516 comm="syz.1.48" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.986391][ T36] audit: type=1400 audit(1790251840.330:197): avc: denied { set_context_mgr } for pid=516 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.007522][ T36] audit: type=1400 audit(1790251840.330:198): avc: denied { map } for pid=516 comm="syz.1.48" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.046046][ T36] audit: type=1400 audit(1790251840.360:199): avc: denied { search } for pid=526 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.074450][ T366] usbhid 4-1:0.0: can't add hid device: -71 [ 33.092979][ T366] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.110576][ T545] veth1_to_bond: entered allmulticast mode [ 33.115548][ T366] usb 4-1: USB disconnect, device number 8 [ 33.124611][ T543] netlink: 148 bytes leftover after parsing attributes in process `syz.2.51'. [ 33.157218][ T543] veth1_to_bond (unregistering): left allmulticast mode [ 33.324271][ T554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.334408][ T554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.560635][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 33.633147][ T558] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 33.641191][ T558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.54'. [ 33.700609][ T10] usb 3-1: device descriptor read/64, error -71 [ 33.760233][ T577] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.774427][ T577] SELinux: Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped). [ 33.940772][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.070572][ T365] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 34.190799][ T10] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 34.220581][ T365] usb 4-1: Using ep0 maxpacket: 32 [ 34.227127][ T365] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 34.235731][ T365] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 34.246065][ T365] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.256267][ T365] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 34.265757][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.275767][ T365] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 34.288781][ T365] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 34.298309][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.307372][ T365] usb 4-1: config 0 descriptor?? [ 34.330597][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.491375][ T590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 34.491460][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 34.509674][ T590] MTRR 1 not used [ 34.517358][ T586] FAULT_INJECTION: forcing a failure. [ 34.517358][ T586] name failslab, interval 1, probability 0, space 0, times 1 [ 34.530749][ T586] CPU: 1 UID: 60929 PID: 586 Comm: syz.3.63 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 34.530788][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.530801][ T586] Call Trace: [ 34.530809][ T586] [ 34.530817][ T586] __dump_stack+0x21/0x30 [ 34.530840][ T586] dump_stack_lvl+0x140/0x1c0 [ 34.530857][ T586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.530874][ T586] dump_stack+0x19/0x20 [ 34.530890][ T586] should_fail_ex+0x3c2/0x510 [ 34.530905][ T586] should_failslab+0xac/0x100 [ 34.530921][ T586] kmem_cache_alloc_noprof+0x42/0x410 [ 34.530935][ T586] ? key_alloc+0x2ee/0x1060 [ 34.530952][ T586] ? key_user_lookup+0x3fc/0x4f0 [ 34.530969][ T586] key_alloc+0x2ee/0x1060 [ 34.530986][ T586] keyring_alloc+0x4b/0xc0 [ 34.530997][ T586] install_thread_keyring_to_cred+0xa0/0x130 [ 34.531013][ T586] __se_sys_keyctl+0xc69/0xe40 [ 34.531027][ T586] ? __x64_sys_keyctl+0xf0/0xf0 [ 34.531041][ T586] ? __cfi_do_futex+0x10/0x10 [ 34.531056][ T586] ? mutex_unlock+0x90/0x240 [ 34.531071][ T586] ? __se_sys_futex+0x13c/0x320 [ 34.531086][ T586] ? xfd_validate_state+0x68/0x140 [ 34.531117][ T586] ? __kasan_check_write+0x18/0x20 [ 34.531130][ T586] ? fpregs_restore_userregs+0x11c/0x260 [ 34.531144][ T586] __x64_sys_keyctl+0xc3/0xf0 [ 34.531159][ T586] x64_sys_call+0x996/0x2ee0 [ 34.531171][ T586] do_syscall_64+0x57/0xf0 [ 34.531182][ T586] ? clear_bhb_loop+0x50/0xa0 [ 34.531197][ T586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.531211][ T586] RIP: 0033:0x7f0aaab9e159 [ 34.531223][ T586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.531233][ T586] RSP: 002b:00007f0aaba75028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 34.531248][ T586] RAX: ffffffffffffffda RBX: 00007f0aaae25fa0 RCX: 00007f0aaab9e159 [ 34.531258][ T586] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 34.531265][ T586] RBP: 00007f0aaac3506b R08: 0000000000000000 R09: 0000000000000000 [ 34.531273][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.531281][ T586] R13: 00007f0aaae26038 R14: 00007f0aaae25fa0 R15: 00007ffc1e771178 [ 34.531291][ T586] [ 34.534216][ T31] usb 4-1: USB disconnect, device number 9 [ 34.580528][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.880635][ T10] usb usb3-port1: attempt power cycle [ 35.240735][ T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 35.271575][ T10] usb 3-1: device descriptor read/8, error -71 [ 35.300557][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 35.350530][ T365] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 35.405605][ T10] usb 3-1: device descriptor read/8, error -71 [ 35.451643][ T9] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.481161][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.488206][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 35.500167][ T365] usb 2-1: device descriptor read/64, error -71 [ 35.510599][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.520042][ T9] usb 4-1: config 0 descriptor?? [ 35.650577][ T10] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 35.671704][ T10] usb 3-1: device descriptor read/8, error -71 [ 35.760545][ T365] usb 2-1: device descriptor read/64, error -71 [ 35.821865][ T10] usb 3-1: device descriptor read/8, error -71 [ 35.932440][ T9] input: HID 1e7d:3264 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1E7D:3264.0001/input/input5 [ 35.945718][ T10] usb usb3-port1: unable to enumerate USB device [ 35.962232][ T9] isku 0003:1E7D:3264.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 36.010526][ T365] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 36.150537][ T365] usb 2-1: device descriptor read/64, error -71 [ 36.287404][ T627] FAULT_INJECTION: forcing a failure. [ 36.287404][ T627] name failslab, interval 1, probability 0, space 0, times 0 [ 36.300304][ T627] CPU: 0 UID: 0 PID: 627 Comm: syz.0.73 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 36.300338][ T627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.300350][ T627] Call Trace: [ 36.300356][ T627] [ 36.300364][ T627] __dump_stack+0x21/0x30 [ 36.300396][ T627] dump_stack_lvl+0x140/0x1c0 [ 36.300421][ T627] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.300446][ T627] ? avc_has_perm+0x155/0x240 [ 36.300474][ T627] dump_stack+0x19/0x20 [ 36.300498][ T627] should_fail_ex+0x3c2/0x510 [ 36.300521][ T627] should_failslab+0xac/0x100 [ 36.300545][ T627] __kmalloc_cache_noprof+0x41/0x470 [ 36.300567][ T627] ? kernfs_fop_open+0x357/0xd50 [ 36.300590][ T627] ? __kasan_check_write+0x18/0x20 [ 36.300602][ T627] kernfs_fop_open+0x357/0xd50 [ 36.300618][ T627] ? __cfi_kernfs_fop_open+0x10/0x10 [ 36.300633][ T627] do_dentry_open+0x97c/0x1510 [ 36.300657][ T627] vfs_open+0x86/0x240 [ 36.300680][ T627] ? __cfi_vfs_open+0x10/0x10 [ 36.300705][ T627] ? may_open+0x352/0x430 [ 36.300730][ T627] path_openat+0x2c49/0x35a0 [ 36.300745][ T627] ? schedule+0xc5/0x240 [ 36.300757][ T627] ? kasan_save_alloc_info+0x3a/0x50 [ 36.300768][ T627] ? getname+0x1b/0x30 [ 36.300780][ T627] ? x64_sys_call+0xe69/0x2ee0 [ 36.300791][ T627] ? do_syscall_64+0x57/0xf0 [ 36.300810][ T627] ? do_filp_open+0x440/0x440 [ 36.300836][ T627] do_filp_open+0x1f2/0x440 [ 36.300861][ T627] ? __cfi_do_filp_open+0x10/0x10 [ 36.300885][ T627] ? alloc_fd+0x4c1/0x570 [ 36.300898][ T627] do_sys_openat2+0x134/0x1d0 [ 36.300913][ T627] ? fput+0x1a4/0x230 [ 36.300927][ T627] ? do_sys_open+0x100/0x100 [ 36.300945][ T627] ? __cfi_ksys_write+0x10/0x10 [ 36.300966][ T627] __x64_sys_openat+0x13a/0x170 [ 36.300993][ T627] x64_sys_call+0xe69/0x2ee0 [ 36.301011][ T627] do_syscall_64+0x57/0xf0 [ 36.301028][ T627] ? clear_bhb_loop+0x50/0xa0 [ 36.301050][ T627] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.301063][ T627] RIP: 0033:0x7f4d6579e159 [ 36.301075][ T627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.301085][ T627] RSP: 002b:00007f4d66747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 36.301107][ T627] RAX: ffffffffffffffda RBX: 00007f4d65a25fa0 RCX: 00007f4d6579e159 [ 36.301122][ T627] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 36.301135][ T627] RBP: 00007f4d6583506b R08: 0000000000000000 R09: 0000000000000000 [ 36.301147][ T627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.301160][ T627] R13: 00007f4d65a26038 R14: 00007f4d65a25fa0 R15: 00007fff9e196f68 [ 36.301176][ T627] [ 36.392052][ T633] rust_binder: 632:633 got transaction to invalid handle 1 [ 36.460538][ T365] usb 2-1: device descriptor read/64, error -71 [ 36.464844][ T633] rust_binder: 632:633 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 36.488135][ T636] 9pnet_fd: Insufficient options for proto=fd [ 36.513474][ T31] rust_binder: 632: undelivered TRANSACTION_ERROR: 29201 [ 36.573441][ T640] netlink: 'syz.2.76': attribute type 2 has an invalid length. [ 36.622796][ T365] usb usb2-port1: attempt power cycle [ 36.632264][ T642] tmpfs: Unknown parameter 'noinode32' [ 36.960539][ T365] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 36.982583][ T365] usb 2-1: device descriptor read/8, error -71 [ 36.990556][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.111706][ T365] usb 2-1: device descriptor read/8, error -71 [ 37.141835][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.153484][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.163452][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.177151][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.188203][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.197593][ T31] usb 3-1: config 0 descriptor?? [ 37.350653][ T365] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 37.376006][ T365] usb 2-1: device descriptor read/8, error -71 [ 37.395308][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 37.395347][ T36] audit: type=1400 audit(1790251845.040:233): avc: denied { getopt } for pid=650 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.417686][ T653] netlink: 68 bytes leftover after parsing attributes in process `syz.0.81'. [ 37.421730][ T36] audit: type=1400 audit(1790251845.060:234): avc: denied { nlmsg_write } for pid=652 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.453365][ T36] audit: type=1400 audit(1790251845.090:235): avc: denied { getopt } for pid=654 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.473309][ T36] audit: type=1400 audit(1790251845.110:236): avc: denied { read write } for pid=656 comm="syz.0.83" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.498760][ T36] audit: type=1400 audit(1790251845.110:237): avc: denied { open } for pid=656 comm="syz.0.83" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.521781][ T36] audit: type=1400 audit(1790251845.110:238): avc: denied { ioctl } for pid=656 comm="syz.0.83" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.522534][ T365] usb 2-1: device descriptor read/8, error -71 [ 37.639717][ T31] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 37.656466][ T31] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 37.677514][ T36] audit: type=1400 audit(1790251845.310:239): avc: denied { create } for pid=666 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.680645][ T365] usb usb2-port1: unable to enumerate USB device [ 37.710854][ T36] audit: type=1400 audit(1790251845.310:240): avc: denied { connect } for pid=666 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.950545][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.063893][ T366] usb 4-1: USB disconnect, device number 10 [ 38.100868][ T36] audit: type=1400 audit(1790251845.750:241): avc: denied { map } for pid=675 comm="syz.3.88" path="socket:[6483]" dev="sockfs" ino=6483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.124686][ T36] audit: type=1400 audit(1790251845.750:242): avc: denied { read accept } for pid=675 comm="syz.3.88" path="socket:[6483]" dev="sockfs" ino=6483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.150513][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 38.164367][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.180335][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.184850][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.205870][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 38.208919][ T689] virtio-fs: tag not found [ 38.224392][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.226251][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 38.234052][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.243206][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 38.252736][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.272186][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.277527][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 38.281989][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.300172][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.307020][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.317866][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.318246][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.332839][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.335625][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.354044][ T366] usb 3-1: USB disconnect, device number 9 [ 38.355713][ T9] usb 1-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ [ 38.388370][ T9] usb 1-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ犅ꀏ뻟鴚䙧ⅼ촣偈﹁랂ൽʼn杧즜颵죋殟쿿쾇﮹㈛ꟃꊔÆ⌀茛䧙罌쨩Ÿ [ 38.404163][ T9] usb 1-1: SerialNumber: syz [ 38.600600][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 38.613908][ T9] cdc_ncm 1-1:1.0: bind() failure [ 38.619826][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 38.626864][ T9] cdc_ncm 1-1:1.1: bind() failure [ 38.630536][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.634916][ T9] usb 1-1: USB disconnect, device number 7 [ 38.730624][ T366] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 38.740689][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.790576][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 38.796915][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 38.805878][ T31] usb 4-1: config 179 has no interface number 0 [ 38.812297][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 38.823756][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 38.835363][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 38.847129][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 38.859177][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 38.872692][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 38.882278][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.892450][ T697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.902238][ T366] usb 3-1: not running at top speed; connect to a high speed hub [ 38.911857][ T366] usb 3-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 38.922830][ T366] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 38.932025][ T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.945224][ T366] usb 3-1: Found UVC 1.00 device (046d:0825) [ 38.952858][ T366] usb 3-1: No streaming interface found for terminal 2. [ 38.980542][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.105591][ T366] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 39.147299][ T366] usb 3-1: USB disconnect, device number 10 [ 39.184642][ T704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 39.196273][ T704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 39.220549][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 39.306286][ T697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.315348][ T697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.360519][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.600549][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.710766][ T10] usb usb2-port1: attempt power cycle [ 39.738731][ T365] usb 4-1: USB disconnect, device number 11 [ 39.738761][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 39.753661][ T365] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 39.753763][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 39.770581][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.910567][ T9] usb 1-1: device descriptor read/64, error -71 [ 40.020557][ T62] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.050591][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 40.071762][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.150620][ T9] usb 1-1: device descriptor read/64, error -71 [ 40.170608][ T62] usb 3-1: Using ep0 maxpacket: 32 [ 40.177082][ T62] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 40.185430][ T62] usb 3-1: config 0 has no interface number 0 [ 40.192000][ T62] usb 3-1: config 0 interface 184 has no altsetting 0 [ 40.200638][ T62] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 40.209791][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.218091][ T62] usb 3-1: Product: syz [ 40.222474][ T62] usb 3-1: Manufacturer: syz [ 40.227216][ T62] usb 3-1: SerialNumber: syz [ 40.232553][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.238985][ T62] usb 3-1: config 0 descriptor?? [ 40.244912][ T62] smsc75xx v1.0.0 [ 40.385061][ T741] netlink: 'syz.3.102': attribute type 11 has an invalid length. [ 40.400604][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.470544][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 40.491521][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.540586][ T9] usb 1-1: device descriptor read/64, error -71 [ 40.621509][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.730639][ T10] usb usb2-port1: unable to enumerate USB device [ 40.780564][ T9] usb 1-1: device descriptor read/64, error -71 [ 40.890649][ T9] usb usb1-port1: attempt power cycle [ 40.961928][ T752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 40.971502][ T752] incfs_lookup_dentry err:-13 [ 40.976512][ T752] incfs: Can't find or create .index dir in ./file0 [ 40.983616][ T752] incfs: mount failed -13 [ 40.999328][ T754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 41.230632][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.261715][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.391615][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.580562][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 41.630605][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.648278][ T735] tc_dump_action: action bad kind [ 41.654591][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.731634][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 41.743143][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.754237][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 41.767505][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.774296][ T10] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 41.783748][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.793265][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.799791][ T10] usb 2-1: config 0 descriptor?? [ 41.900684][ T9] usb usb1-port1: unable to enumerate USB device [ 42.053030][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.211220][ T10] input: HID 0738:1709 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0738:1709.0003/input/input9 [ 42.237241][ T10] saitek 0003:0738:1709.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.1-1/input0 [ 42.465436][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 42.465468][ T36] audit: type=1400 audit(1790251850.110:253): avc: denied { ioctl } for pid=758 comm="syz.1.110" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.670898][ T775] mmap: syz.0.115 (775) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.672489][ T10] usb 2-1: USB disconnect, device number 13 [ 42.694935][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 42.711493][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 42.723982][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 42.735731][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 42.745510][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 42.755977][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 42.765573][ T62] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 42.776346][ T62] usb 3-1: USB disconnect, device number 11 [ 42.824457][ T36] audit: type=1400 audit(1790251850.470:254): avc: denied { mounton } for pid=776 comm="syz.2.116" path="/21/sys_mount/devices/virtual/block/loop0/queue/rotational" dev="sysfs" ino=7659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 42.824546][ T778] overlay: Unknown parameter 'uid' [ 43.104057][ T36] audit: type=1400 audit(1790251850.750:255): avc: denied { setopt } for pid=780 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.111589][ T781] netlink: 168 bytes leftover after parsing attributes in process `syz.3.117'. [ 43.124553][ T36] audit: type=1400 audit(1790251850.750:256): avc: denied { write } for pid=780 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.460781][ T36] audit: type=1400 audit(1790251851.110:257): avc: denied { mount } for pid=802 comm="syz.0.123" name="/" dev="ramfs" ino=7634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 43.483102][ T36] audit: type=1400 audit(1790251851.120:258): avc: denied { execute } for pid=802 comm="syz.0.123" path="/memory.swap.current" dev="ramfs" ino=6807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 43.532306][ T36] audit: type=1400 audit(1790251851.180:259): avc: denied { setopt } for pid=809 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.562182][ T813] netlink: 'syz.0.126': attribute type 6 has an invalid length. [ 43.570559][ T311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 43.584304][ T813] 9pnet_fd: Insufficient options for proto=fd [ 43.720519][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 43.727803][ T311] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 43.736553][ T311] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 43.746135][ T311] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 43.755391][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.766023][ T311] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.777646][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.791584][ T311] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.800962][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.809893][ T311] usb 2-1: config 0 descriptor?? [ 43.830519][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.981776][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.993030][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.003244][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.020628][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.020739][ T311] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.027558][ T10] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 44.027587][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.056468][ T311] usb 2-1: USB disconnect, device number 14 [ 44.059338][ T10] usb 1-1: config 0 descriptor?? [ 44.075725][ T311] usblp0: removed [ 44.475733][ T10] hkems 0003:2006:0118.0004: collection stack underflow [ 44.482931][ T10] hkems 0003:2006:0118.0004: item 0 4 0 12 parsing failed [ 44.491613][ T10] hkems 0003:2006:0118.0004: parse failed [ 44.497662][ T10] hkems 0003:2006:0118.0004: probe with driver hkems failed with error -22 [ 44.530617][ T311] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 44.680176][ T10] usb 1-1: USB disconnect, device number 12 [ 44.690699][ T311] usb 2-1: device descriptor read/64, error -71 [ 44.930629][ T311] usb 2-1: device descriptor read/64, error -71 [ 45.170659][ T311] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 45.231307][ T839] fuse: Bad value for 'user_id' [ 45.236572][ T839] fuse: Bad value for 'user_id' [ 45.269971][ T847] SELinux: Context system_u: is not valid (left unmapped). [ 45.277521][ T36] audit: type=1400 audit(1790251852.910:260): avc: denied { create } for pid=845 comm="syz.0.136" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.299138][ T36] audit: type=1400 audit(1790251852.950:261): avc: denied { relabelto } for pid=845 comm="syz.0.136" name="33" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 45.330617][ T311] usb 2-1: device descriptor read/64, error -71 [ 45.335254][ T36] audit: type=1400 audit(1790251852.950:262): avc: denied { associate } for pid=845 comm="syz.0.136" name="33" dev="tmpfs" ino=188 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 45.580634][ T311] usb 2-1: device descriptor read/64, error -71 [ 45.690706][ T311] usb usb2-port1: attempt power cycle [ 45.842299][ T863] KVM: debugfs: duplicate directory 863-4 [ 45.870544][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.902642][ T868] ./dev/sda1: Can't lookup blockdev [ 45.956113][ T877] ======================================================= [ 45.956113][ T877] WARNING: The mand mount option has been deprecated and [ 45.956113][ T877] and is ignored by this kernel. Remove the mand [ 45.956113][ T877] option from the mount to silence this warning. [ 45.956113][ T877] ======================================================= [ 45.992427][ T877] overlayfs: conflicting options: nfs_export=on,index=off [ 46.020523][ T31] usb 1-1: device descriptor read/64, error -71 [ 46.030582][ T311] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 46.051632][ T311] usb 2-1: device descriptor read/8, error -71 [ 46.089729][ T886] rust_binder: Write failure EFAULT in pid:89 [ 46.191867][ T311] usb 2-1: device descriptor read/8, error -71 [ 46.260605][ T31] usb 1-1: device descriptor read/64, error -71 [ 46.390739][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.510588][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 46.550593][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 46.557740][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.569018][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.579684][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.589842][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.599089][ T9] usb 3-1: config 0 descriptor?? [ 46.605191][ T9] hub 3-1:0.0: USB hub found [ 46.650554][ T31] usb 1-1: device descriptor read/64, error -71 [ 46.741701][ T907] veth1: entered allmulticast mode [ 46.747180][ T907] veth1: left allmulticast mode [ 46.890541][ T31] usb 1-1: device descriptor read/64, error -71 [ 47.000706][ T31] usb usb1-port1: attempt power cycle [ 47.302728][ T919] overlayfs: missing 'lowerdir' [ 47.340553][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.354731][ T923] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.371705][ T31] usb 1-1: device descriptor read/8, error -71 [ 47.399225][ T926] rust_binder: 925:926 no such ref 0 [ 47.501814][ T31] usb 1-1: device descriptor read/8, error -71 [ 47.569488][ T947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=947 comm=syz.3.165 [ 47.750552][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 47.781612][ T31] usb 1-1: device descriptor read/8, error -71 [ 47.911599][ T31] usb 1-1: device descriptor read/8, error -71 [ 48.022745][ T31] usb usb1-port1: unable to enumerate USB device [ 48.032152][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 48.032172][ T36] audit: type=1400 audit(1790251855.680:283): avc: denied { read append } for pid=960 comm="syz.1.170" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.062876][ T36] audit: type=1400 audit(1790251855.680:284): avc: denied { open } for pid=960 comm="syz.1.170" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.086403][ T36] audit: type=1400 audit(1790251855.680:285): avc: denied { map } for pid=960 comm="syz.1.170" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.500576][ T62] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 48.535148][ T36] audit: type=1400 audit(1790252112.181:286): avc: denied { connect } for pid=988 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.670498][ T62] usb 2-1: Using ep0 maxpacket: 16 [ 48.676749][ T62] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.687007][ T62] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 48.696757][ T62] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 48.705997][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.714442][ T62] usb 2-1: SerialNumber: syz [ 48.840758][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 48.923292][ T971] SELinux: syz.1.173 (971) set checkreqprot to 1. This is no longer supported. [ 48.923304][ T36] audit: type=1400 audit(1790252112.571:287): avc: denied { setcheckreqprot } for pid=970 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.953947][ T971] binder: Unknown parameter 'defcontext01777777777777777777777' [ 48.953951][ T36] audit: type=1400 audit(1790252112.601:288): avc: denied { remount } for pid=970 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.982539][ T971] syz.1.173: attempt to access beyond end of device [ 48.982539][ T971] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 48.991651][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.995780][ T971] EXT4-fs (loop1): unable to read superblock [ 49.007162][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.022695][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 49.031912][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.032489][ T62] usb 2-1: USB disconnect, device number 19 [ 49.048889][ T31] usb 1-1: config 0 descriptor?? [ 49.181783][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 49.200279][ T996] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 49.203923][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 49.214531][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 49.216839][ T996] 9pnet_fd: p9_fd_create_tcp (996): problem connecting socket to 127.0.0.1 [ 49.240944][ T9] usb 3-1: USB disconnect, device number 12 [ 49.258391][ T36] audit: type=1400 audit(1790252112.901:289): avc: denied { write } for pid=986 comm="syz.0.180" path="socket:[10085]" dev="sockfs" ino=10085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.484473][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.493432][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.504724][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 49.512787][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 49.524797][ T31] usb 1-1: USB disconnect, device number 17 [ 49.946440][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.955683][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.965827][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.974628][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.983066][ T36] audit: type=1400 audit(1790252113.632:290): avc: denied { ioctl } for pid=1009 comm="syz.2.189" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.008605][ T36] audit: type=1400 audit(1790252113.632:291): avc: denied { ioctl } for pid=1009 comm="syz.2.189" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.190343][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 50.351808][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 50.360954][ T10] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.373086][ T10] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 50.384108][ T10] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.397633][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 50.400283][ T31] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 50.406489][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.422016][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.430261][ T10] usb 3-1: Product: syz [ 50.434620][ T10] usb 3-1: Manufacturer: ␉ [ 50.439545][ T10] usb 3-1: SerialNumber: syz [ 50.445161][ T1011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.452708][ T1011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.561501][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 50.572785][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 50.586089][ T31] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 50.595248][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.604430][ T31] usb 1-1: config 0 descriptor?? [ 50.664583][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 50.678582][ T10] usb 3-1: USB disconnect, device number 13 [ 51.000204][ T859] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 51.016306][ T31] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x2 [ 51.023586][ T31] cypress 0003:04B4:BCA1.0005: ignoring exceeding usage max [ 51.031732][ T31] cypress 0003:04B4:BCA1.0005: item fetching failed at offset 39/40 [ 51.039993][ T31] cypress 0003:04B4:BCA1.0005: parse failed [ 51.046069][ T31] cypress 0003:04B4:BCA1.0005: probe with driver cypress failed with error -22 [ 51.130236][ T859] usb 2-1: device descriptor read/64, error -71 [ 51.175924][ T36] audit: type=1400 audit(1790252114.822:292): avc: denied { append } for pid=1034 comm="syz.2.197" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.201497][ T1036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.210419][ T1036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.220594][ T31] usb 1-1: USB disconnect, device number 18 [ 51.370175][ T859] usb 2-1: device descriptor read/64, error -71 [ 51.450196][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.610140][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 51.610147][ T859] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 51.630716][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.642238][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.655405][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.662360][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 51.671674][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.681422][ T10] usb 3-1: config 0 descriptor?? [ 51.708538][ T1039] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 51.718692][ T1039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=1039 comm=syz.3.198 [ 51.750140][ T859] usb 2-1: device descriptor read/64, error -71 [ 51.768028][ T1052] netlink: 'syz.3.201': attribute type 4 has an invalid length. [ 51.776319][ T1052] netlink: 'syz.3.201': attribute type 6 has an invalid length. [ 51.784564][ T1052] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.201'. [ 51.890707][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 51.897223][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 51.910504][ T10] usb 3-1: USB disconnect, device number 14 [ 51.990131][ T859] usb 2-1: device descriptor read/64, error -71 [ 52.100878][ T859] usb usb2-port1: attempt power cycle [ 52.404698][ T1058] netlink: 'syz.2.203': attribute type 6 has an invalid length. [ 52.427863][ T1058] 9pnet_fd: Insufficient options for proto=fd [ 52.440160][ T859] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 52.460507][ T293] ------------[ cut here ]------------ [ 52.461114][ T859] usb 2-1: device descriptor read/8, error -71 [ 52.466555][ T293] WARNING: CPU: 0 PID: 293 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 52.466603][ T293] Modules linked in: [ 52.485526][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 52.497514][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 52.507633][ T293] RIP: 0010:drop_nlink+0xce/0x110 [ 52.512794][ T293] Code: 04 00 00 be 08 00 00 00 e8 0f 0d ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 5d b5 03 cc e8 72 26 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 52.532908][ T293] RSP: 0018:ffffc9000160fc88 EFLAGS: 00010293 [ 52.539293][ T293] RAX: ffffffff81f2541e RBX: ffff888119a71a78 RCX: ffff888103ff2600 [ 52.548214][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.556656][ T293] RBP: ffffc9000160fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 52.564781][ T293] R10: dffffc0000000000 R11: fffff520002c1f80 R12: dffffc0000000000 [ 52.572844][ T293] R13: 1ffff1102334e358 R14: ffff888119a71ac0 R15: 0000000000000000 [ 52.580935][ T293] FS: 0000555576ffc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 52.590272][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.597275][ T293] CR2: 00007f4a6a350300 CR3: 0000000122cc8000 CR4: 00000000003526b0 [ 52.605526][ T293] Call Trace: [ 52.608828][ T293] [ 52.611124][ T859] usb 2-1: device descriptor read/8, error -71 [ 52.611792][ T293] shmem_rmdir+0x5f/0x90 [ 52.622857][ T293] vfs_rmdir+0x3de/0x560 [ 52.627129][ T293] incfs_kill_sb+0x102/0x220 [ 52.631933][ T293] deactivate_locked_super+0xd5/0x270 [ 52.637777][ T293] deactivate_super+0xb8/0xe0 [ 52.642527][ T293] cleanup_mnt+0x438/0x4d0 [ 52.646989][ T293] __cleanup_mnt+0x1d/0x40 [ 52.651528][ T293] task_work_run+0x1e8/0x260 [ 52.656162][ T293] ? __cfi_task_work_run+0x10/0x10 [ 52.661338][ T293] ? __x64_sys_umount+0x12e/0x180 [ 52.666403][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 52.671829][ T293] resume_user_mode_work+0x35/0x50 [ 52.677142][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 52.682904][ T293] do_syscall_64+0x63/0xf0 [ 52.687444][ T293] ? clear_bhb_loop+0x50/0xa0 [ 52.692360][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.698291][ T293] RIP: 0033:0x7f4d6579f397 [ 52.703045][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 52.722820][ T293] RSP: 002b:00007fff9e1961d8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 52.731395][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4d6579f397 [ 52.739580][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e196290 [ 52.748139][ T293] RBP: 00007fff9e196290 R08: 00007fff9e197290 R09: 00000000ffffffff [ 52.756803][ T293] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff9e197320 [ 52.765258][ T293] R13: 00007f4d658344bb R14: 000000000000cccc R15: 00007fff9e197360 [ 52.773626][ T293] [ 52.776668][ T293] ---[ end trace 0000000000000000 ]--- [ 52.782294][ T293] ================================================================== [ 52.790837][ T293] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 52.797317][ T293] Write of size 4 at addr 0000000000000168 by task syz-executor/293 [ 52.805903][ T293] [ 52.808242][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 52.808265][ T293] Tainted: [W]=WARN [ 52.808269][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 52.808283][ T293] Call Trace: [ 52.808289][ T293] [ 52.808295][ T293] __dump_stack+0x21/0x30 [ 52.808316][ T293] dump_stack_lvl+0x140/0x1c0 [ 52.808331][ T293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.808348][ T293] print_report+0x3d/0x70 [ 52.808363][ T293] kasan_report+0x162/0x1a0 [ 52.808379][ T293] ? ihold+0x24/0x70 [ 52.808393][ T293] ? ihold+0x24/0x70 [ 52.808407][ T293] kasan_check_range+0x25a/0x2b0 [ 52.808422][ T293] __kasan_check_write+0x18/0x20 [ 52.808472][ T293] ihold+0x24/0x70 [ 52.808486][ T293] vfs_rmdir+0x25c/0x560 [ 52.808502][ T293] incfs_kill_sb+0x102/0x220 [ 52.808515][ T293] deactivate_locked_super+0xd5/0x270 [ 52.808532][ T293] deactivate_super+0xb8/0xe0 [ 52.808547][ T293] cleanup_mnt+0x438/0x4d0 [ 52.808562][ T293] __cleanup_mnt+0x1d/0x40 [ 52.808575][ T293] task_work_run+0x1e8/0x260 [ 52.808590][ T293] ? __cfi_task_work_run+0x10/0x10 [ 52.808604][ T293] ? __x64_sys_umount+0x12e/0x180 [ 52.808615][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 52.808627][ T293] resume_user_mode_work+0x35/0x50 [ 52.808639][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 52.808655][ T293] do_syscall_64+0x63/0xf0 [ 52.808665][ T293] ? clear_bhb_loop+0x50/0xa0 [ 52.808680][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.808693][ T293] RIP: 0033:0x7f4d6579f397 [ 52.808705][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 52.808716][ T293] RSP: 002b:00007fff9e1961d8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 52.808731][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4d6579f397 [ 52.808740][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e196290 [ 52.808748][ T293] RBP: 00007fff9e196290 R08: 00007fff9e197290 R09: 00000000ffffffff [ 52.808757][ T293] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff9e197320 [ 52.808766][ T293] R13: 00007f4d658344bb R14: 000000000000cccc R15: 00007fff9e197360 [ 52.808776][ T293] [ 52.808781][ T293] ================================================================== [ 53.056374][ T293] Disabling lock debugging due to kernel taint [ 53.062905][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 53.071003][ T293] #PF: supervisor write access in kernel mode [ 53.077513][ T293] #PF: error_code(0x0002) - not-present page [ 53.083665][ T293] PGD 800000010ff75067 P4D 800000010ff75067 PUD 0 [ 53.090446][ T293] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 53.096882][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G B W syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 53.110107][ T293] Tainted: [B]=BAD_PAGE, [W]=WARN [ 53.115220][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.125628][ T293] RIP: 0010:ihold+0x2a/0x70 [ 53.130276][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 53.150765][ T293] RSP: 0018:ffffc9000160fcc8 EFLAGS: 00010246 [ 53.156940][ T293] RAX: ffff888103ff2600 RBX: 0000000000000000 RCX: ffff888103ff2600 [ 53.165004][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.173165][ T293] RBP: ffffc9000160fcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 53.181158][ T293] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 53.189528][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 53.197868][ T293] FS: 0000555576ffc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.206829][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.213689][ T293] CR2: 0000000000000168 CR3: 0000000122cc8000 CR4: 00000000003526b0 [ 53.222751][ T293] Call Trace: [ 53.226325][ T293] [ 53.229450][ T293] vfs_rmdir+0x25c/0x560 [ 53.233821][ T293] incfs_kill_sb+0x102/0x220 [ 53.238424][ T293] deactivate_locked_super+0xd5/0x270 [ 53.244086][ T293] deactivate_super+0xb8/0xe0 [ 53.248960][ T293] cleanup_mnt+0x438/0x4d0 [ 53.253726][ T293] __cleanup_mnt+0x1d/0x40 [ 53.258683][ T293] task_work_run+0x1e8/0x260 [ 53.263394][ T293] ? __cfi_task_work_run+0x10/0x10 [ 53.268604][ T293] ? __x64_sys_umount+0x12e/0x180 [ 53.273647][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 53.279118][ T293] resume_user_mode_work+0x35/0x50 [ 53.284420][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 53.289898][ T293] do_syscall_64+0x63/0xf0 [ 53.295295][ T293] ? clear_bhb_loop+0x50/0xa0 [ 53.300005][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.305994][ T293] RIP: 0033:0x7f4d6579f397 [ 53.310431][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 53.331182][ T293] RSP: 002b:00007fff9e1961d8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 53.339793][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4d6579f397 [ 53.348406][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e196290 [ 53.356385][ T293] RBP: 00007fff9e196290 R08: 00007fff9e197290 R09: 00000000ffffffff [ 53.364634][ T293] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff9e197320 [ 53.372616][ T293] R13: 00007f4d658344bb R14: 000000000000cccc R15: 00007fff9e197360 [ 53.380883][ T293] [ 53.384002][ T293] Modules linked in: [ 53.387985][ T293] CR2: 0000000000000168 [ 53.392314][ T293] ---[ end trace 0000000000000000 ]--- [ 53.398032][ T293] RIP: 0010:ihold+0x2a/0x70 [ 53.402558][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 53.422370][ T293] RSP: 0018:ffffc9000160fcc8 EFLAGS: 00010246 [ 53.429084][ T293] RAX: ffff888103ff2600 RBX: 0000000000000000 RCX: ffff888103ff2600 [ 53.439366][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.447790][ T293] RBP: ffffc9000160fcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 53.455768][ T293] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 53.463925][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 53.472250][ T293] FS: 0000555576ffc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.481368][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.488234][ T293] CR2: 0000000000000168 CR3: 0000000122cc8000 CR4: 00000000003526b0 [ 53.499040][ T293] Kernel panic - not syncing: Fatal exception [ 53.508650][ T293] Kernel Offset: disabled [ 53.515407][ T293] Rebooting in 86400 seconds..