last executing test programs: 2m22.816782617s ago: executing program 3 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001080006040001"], 0x32) (fail_nth: 1) 2m22.360421269s ago: executing program 3 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000440)) mlock(&(0x7f00007cc000/0x7000)=nil, 0x7000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 2m22.360199579s ago: executing program 3 (id=149): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$packet(r0, &(0x7f0000000280)="f4f36d68d7490b15bd44b4411f75b27fb9617159e153b00d92edaaa0e2cfbf5e7217c6dd663a4f0f0117bb1f0fc21be63edfebe842a987d192b1858ee84c53ec5234a39e8b88dbbc4b7845e6bb51940d7a1190b1cbce522075ca2da6c069f5edd39bcbacb4b20c4bc8aacb0188b8c6a3a9c0a886cee3d286ba4886f6d9bc31eb02af45968bc646f944a5193938e9e860150d66154418fdaa6dd341368ef8d1fcdeab0250f010d2c49adfcbaa0f", 0xad, 0x20008010, &(0x7f0000000380)={0x11, 0x9, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x8, 0x200, 0xcd, 0x2, 0x5, 0x5, 0xf6, 0x6, 0x5, 0x6, 0xfa, 0x1, 0x40}, {0x6, 0x5, 0x8, 0x7, 0x2, 0x1, 0x8, 0x1, 0x1, 0x9, 0x9, 0x7b, 0x40}, {0x2, 0x6, 0x4, 0x81, 0x1, 0xa0, 0x5, 0x80, 0x2, 0x47, 0x6, 0x3, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x6, 0x30000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x404c851) 2m22.070204584s ago: executing program 3 (id=151): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000e40)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x44800) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc862107fcd1bbe2b}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x63}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) fallocate(r3, 0x3, 0x9, 0x81) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000e40)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x44800) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc862107fcd1bbe2b}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x63}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) fallocate(r3, 0x3, 0x9, 0x81) (async) 2m21.754861974s ago: executing program 3 (id=152): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80800) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc008aeba, &(0x7f0000000100)) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000140)) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000180)) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000240)={'bridge_slave_0\x00', {0x2, 0x4e22, @broadcast}}) mount(&(0x7f0000000280)=@sg0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='vfat\x00', 0x0, &(0x7f0000000340)='bridge_slave_0\x00') connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x7, @any, 0xf6d3}, 0xe) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f00000003c0)={0xffffffffffffff6d, 0x3, 0x0, 0x9, 0x3ff}) setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000400)="b5e74ca17076606beb94658bcb2ecdab6e1d357eadbea324ac982374bb80d2011e7e973a41e7cfe22abe99c61ccd10ba50411c6c865e35d7d8687c4729cbb0df97aef355e9c2dc7cf748a4bd317fdb9268b71170f3f877d98f3b28ce9cb3ba87165f896c77556ad44c311b339f6c7265f5395227cd60ed805dc7303198125a3bcfab7bc2de09b2cddb5ef63a4bdda32b3f98a5bd7b0ce3b39afb2b7808f575df1c36b4f5f4a409b5b20f1d5b33", 0xad) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000500)='ns/net\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000680)) ioctl(r3, 0xfffffff7, &(0x7f00000006c0)="b3057c464bdcd7ce01b3f6e0f616ea27b81f5a6b0b10af6a06a09be1fc9527b3abd20a8d952e34b97eafa641335c1bccba3823cdf83cb9de0b8001dc4dd9ad1cfd7eb3132ef1191e5d5318c6425c3d10d2d5e3e3c3f1f4d8a967d7e4b8a8d2a81a3593220583c1ed3984a5317552b537959448425fb4") ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000740)={[{0x6, 0x882, 0x2, 0xd, 0xcf, 0x4, 0xf8, 0xf6, 0x6, 0x47, 0x4, 0x6, 0x7}, {0x7, 0x8, 0x1, 0x9, 0x32, 0x8, 0x7, 0x0, 0x62, 0x2, 0xa, 0x5, 0x8be}, {0x6, 0x1, 0x79, 0x8, 0x0, 0x40, 0x9e, 0x78, 0x8, 0x10, 0x6, 0xe, 0xff03000000000000}], 0xc}) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000007c0)=0x1, 0x4) recvfrom$inet_nvme(r1, &(0x7f0000000800)=""/25, 0x19, 0x101, &(0x7f0000000840)=@in6={0xa, 0x4e23, 0xe4e1, @mcast2, 0x1}, 0x80) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000008c0)={[0x9, 0x3, 0x7ee, 0x7, 0x2, 0xba38, 0x4036, 0xecf, 0x8001, 0x8, 0xffffffff, 0x5, 0x1, 0x7, 0x5, 0x905c, 0x3, 0x0, 0x0, 0x80000001, 0x9, 0x101, 0xff, 0x101, 0x2, 0x4, 0x80, 0xc0000000, 0x7fffffff, 0x2, 0xfffff588, 0x5, 0x3d61, 0x9, 0x1, 0xfffffffd, 0x4, 0x0, 0x10001, 0x6, 0x1, 0x7, 0x1000, 0x200, 0x0, 0x100, 0x0, 0xcd40, 0xb, 0x0, 0x7, 0x1, 0x200, 0x9, 0x7fffffff, 0x4, 0x1, 0x8, 0x1c7, 0x947d, 0x9, 0x35a6, 0x355, 0x4, 0x8000, 0x10000, 0x40, 0x6, 0x3, 0x2f53fd23, 0x7, 0x3, 0x800, 0x5, 0x4, 0x0, 0x4, 0x6, 0x4, 0x10001, 0x1, 0x4, 0x8, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x29, 0x4, 0x5, 0xa677, 0x4, 0x3, 0x80000000, 0x510, 0xaa4, 0x8, 0x7, 0x0, 0x6f, 0xb6e, 0x6, 0x3f, 0x7, 0x11, 0x0, 0x1ff, 0x7fffffff, 0xfffffff8, 0x1, 0x1, 0x6, 0x25, 0x8, 0x800, 0xff, 0x683f5c96, 0x6, 0xfe5a, 0x8001, 0x3, 0x6, 0x4, 0x9ef9, 0x1, 0xfff, 0xfffff000, 0x6, 0x3, 0x7fffffff, 0x6, 0x41, 0x3, 0x8, 0x401, 0xf5, 0x5b0, 0x2, 0xfffffffd, 0x5, 0x97, 0x5, 0x55, 0xfffffff0, 0x6cf9, 0x2, 0x9, 0x0, 0x5, 0x7, 0x7ff, 0x6, 0x92ba, 0xfffffff6, 0x6, 0xe, 0x3ff, 0x4, 0x7, 0x5, 0x9, 0x40, 0x4, 0x547d000, 0x8ee, 0xf6, 0x7f, 0x8, 0x9, 0x8, 0x9, 0xffff, 0x1010, 0xc1, 0x142, 0x74, 0x0, 0x9, 0x650d, 0xfffffffe, 0xffff, 0x7, 0x0, 0x800, 0x0, 0x0, 0x6d0, 0x9, 0x2, 0xc, 0x0, 0x91e9, 0x1a17, 0x7, 0x7, 0xb, 0x1ea77790, 0x2, 0x3, 0x4, 0x7, 0x3, 0xf, 0x8, 0x9, 0x0, 0x7c8, 0x82, 0x6, 0x5, 0x4, 0x7, 0x7, 0x4, 0x6cbe, 0x6, 0x0, 0xa2, 0x5, 0x0, 0xfffffff5, 0x7ff, 0xffff7fff, 0x7f, 0x1, 0xc55, 0xb5e6, 0x1, 0xffffffff, 0x1, 0xa406, 0xd628, 0xa, 0x0, 0xb809, 0x3, 0x9, 0x5, 0x9, 0x9, 0x9, 0x8, 0xffffffff, 0x6, 0xc, 0x8, 0xfff, 0x5, 0x3, 0x2, 0xff, 0x1, 0x0, 0x9, 0x7ff, 0x81, 0x6, 0x2, 0x10000, 0x63e3f635, 0xffff, 0xcd79, 0x9, 0x9, 0x1, 0xd3, 0x7, 0x0, 0x4, 0x9000, 0xff, 0xf, 0x4, 0x7f, 0x0, 0x5, 0x0, 0x7, 0x5, 0x9, 0x8000000, 0x5, 0x4e, 0x3, 0x1930, 0x9, 0x400, 0x7fff, 0x8, 0x8, 0xd, 0x1, 0x2, 0x200, 0x100, 0x6, 0x7, 0x5, 0x9, 0xe1, 0x200, 0x3f11, 0x3ff, 0x1, 0xccbc, 0x9, 0x6bd, 0x2, 0xcf44, 0x1, 0x400, 0x0, 0x9, 0x6, 0x8, 0x9, 0x5, 0x7ff, 0x864, 0x8, 0xa011, 0x6, 0x81, 0xffffffff, 0xffffff01, 0xf02, 0x99, 0x1, 0x7, 0x2, 0x6, 0x7, 0x800, 0x1, 0x80000001, 0x7fff, 0x0, 0x7fffffff, 0x3, 0x98e6, 0x2, 0x86a, 0x8, 0x4, 0xff, 0x7, 0x5, 0x401, 0xf, 0x5, 0x10, 0x2, 0x5, 0x3d1, 0x4, 0x4, 0x0, 0x5, 0x80, 0xfff, 0x7, 0x7, 0x0, 0xad, 0xc, 0x4, 0x5, 0x5, 0x7fff, 0x0, 0xe, 0x8, 0x2, 0x6, 0x1, 0x1, 0x8, 0x8, 0xf, 0xff, 0x7, 0x6, 0xff, 0x2, 0x8001, 0x10, 0x4, 0x8000, 0xf1, 0x4, 0x0, 0x0, 0x7ff, 0x5, 0x1, 0x0, 0x2, 0x265, 0xfffff001, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x100, 0x7fffffff, 0xf7b, 0xfff, 0x4, 0x2, 0x1, 0xffff, 0x1f3dc423, 0x1, 0x2, 0xffff387d, 0x3, 0xac3, 0xfffffffe, 0x0, 0x6, 0x9, 0xfffffd33, 0x8000, 0x4, 0xc8, 0x9, 0xfa9, 0x5, 0x1, 0x0, 0x5, 0x1, 0x1, 0x4, 0x10001, 0x6, 0xffff7fff, 0x100, 0x4, 0x7f, 0x10000, 0x81, 0x8, 0x5c, 0x3ff, 0x8, 0xffffff1b, 0xb, 0x5, 0x1, 0x6, 0x0, 0x7, 0x1, 0x4e3d, 0x2, 0xfffff790, 0x0, 0x3, 0xff, 0x1, 0x5, 0xab, 0x8, 0x2, 0x102, 0x188, 0x0, 0xabd0, 0x7ff, 0x4, 0xa8, 0x5, 0x8, 0x2, 0x2, 0xe6, 0xad5c, 0x10001, 0x80, 0x9, 0xffff, 0x7, 0xffff, 0x0, 0x112, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x101, 0x3, 0x0, 0x10, 0x4, 0xfffffff9, 0x3, 0x5, 0x5, 0x81, 0x7f, 0x1c0a0, 0x108, 0x9, 0x1, 0x9, 0x8001, 0x3, 0x8001, 0x5, 0x7, 0x8, 0x1, 0x3, 0xfab, 0x6, 0x3, 0x0, 0x4, 0x200, 0x9, 0x1, 0x3907, 0x800, 0x85, 0x6, 0x9, 0x3, 0x81, 0x381, 0x1, 0x2, 0x9, 0x6, 0xffffff01, 0xe, 0x8000, 0x4, 0x8, 0x0, 0x7, 0x10000, 0x31fb, 0x4, 0x9ff, 0x7b7, 0x7, 0x7f, 0x7, 0x7, 0x4, 0xfffffc01, 0x9, 0x3, 0x5, 0xb28b, 0xc, 0x7, 0xe9, 0x7, 0x80, 0x5, 0x5, 0x0, 0xa2, 0xd39, 0x4, 0x7f, 0x1, 0x7, 0x200, 0x754, 0x400, 0x8, 0x1, 0xd07, 0x2, 0x2, 0x2, 0x3, 0x8001, 0x58, 0x2, 0x1ff, 0xc, 0x8000, 0x1, 0xfffffffc, 0x7f, 0x400, 0xc, 0x101, 0x3, 0x6, 0x8, 0xd0, 0x8, 0x7fff, 0xfffffff8, 0xffffff88, 0xe6, 0x4b8, 0x3, 0xb75f, 0x3, 0x80000000, 0x5, 0x9, 0x5, 0x3ff, 0xb5, 0x200, 0x3, 0xd2, 0x1000, 0x6, 0x6, 0x39, 0xc01, 0x1ff, 0x401, 0x9, 0x0, 0xfffff075, 0x0, 0x0, 0x0, 0x4, 0x6, 0x1e9, 0x8, 0x1, 0xfffffff9, 0x7, 0x3, 0x101000, 0x9, 0x3ff, 0x8001, 0x80f8, 0x5, 0xb4e, 0x8, 0x7f, 0x6, 0x16, 0x0, 0x3, 0x200, 0xb7, 0x7fff, 0xffffffff, 0x5, 0x6bdc, 0x992, 0x1, 0x80000000, 0x3, 0xbe5, 0x9, 0x80000000, 0x9, 0x0, 0x7f, 0x10001, 0x2, 0x5, 0x7, 0xf9c, 0x4, 0x2, 0x6aa0, 0x256, 0x3, 0x1, 0x10000, 0x1, 0xd4, 0x9, 0x24, 0x7fff, 0x9, 0x10000, 0x80000000, 0x6, 0x8, 0x6, 0x8, 0x81, 0x2, 0x6, 0x26, 0x8, 0x6f, 0x6, 0x8000, 0x8, 0x8, 0xff, 0x5, 0x7, 0x18, 0x32, 0x7ff, 0x9, 0xf34e, 0x0, 0x5, 0x7f, 0x2, 0x9, 0x8001, 0x9, 0x80, 0x8, 0x3, 0x4, 0xf, 0x1, 0x6, 0x4, 0x6, 0x2a5, 0x9, 0x4291e007, 0xad, 0x4, 0xffff, 0x3, 0x7, 0xf, 0x7, 0xe, 0x3, 0x8, 0x9, 0x3, 0x1, 0x7, 0x5, 0xa5, 0xfffffffc, 0xe, 0x400, 0x22, 0xffff, 0x9, 0x0, 0x551, 0xfffffffb, 0x4, 0xc9, 0x434, 0x3, 0x3, 0xc41, 0x3, 0x8, 0xf91, 0x0, 0x8000, 0xc9, 0x6, 0x1ff, 0xa, 0x6, 0x4, 0x4, 0x2, 0x4, 0xdc51, 0x0, 0xf2e, 0xcd0, 0x0, 0x4, 0x5, 0x7, 0x1, 0x8, 0x2, 0x5, 0xc210, 0x0, 0x1, 0x6, 0x9, 0x6, 0x6, 0x1, 0xbf, 0x7, 0x9, 0x100, 0x1, 0x3, 0xffff, 0x4, 0x8000, 0x5c, 0x9ce3, 0x0, 0x6be, 0x332, 0xff, 0x2, 0x3, 0xffffebc5, 0x7fffffff, 0x8, 0xc, 0xffffffff, 0xe83e, 0x10001, 0x7, 0x2, 0x6, 0xfffffff8, 0xfffffff8, 0x4, 0x2, 0x4, 0xfffffffd, 0x0, 0x5, 0xf4c, 0xd71, 0x3, 0xfffffffa, 0x1, 0x1, 0x3ff, 0x5, 0x4, 0x2, 0x80000001, 0xfffffffd, 0x80000000, 0x8, 0x8, 0x400, 0x4, 0x3ff, 0x4, 0x8f, 0x7ff, 0x3, 0xa9, 0x38a, 0x3ff, 0x7, 0x9, 0x6, 0x4, 0x0, 0x1c000000, 0x5, 0x0, 0xfffffff8, 0x4359, 0x9, 0xfd, 0xffffffff, 0x0, 0xffffffff, 0x6d3, 0x1, 0x0, 0xffffffff, 0x5, 0x80000001, 0xf, 0x101, 0x8, 0x7, 0x0, 0x8, 0x5, 0x0, 0xffff, 0x9, 0x1, 0x100, 0xe00, 0x2, 0x800, 0x4, 0xfffffffe, 0x3, 0x5, 0x5, 0x8000, 0xff, 0x8, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x200, 0x3, 0x823, 0x4, 0x5, 0x200, 0xfffffffa, 0x0, 0x0, 0x1, 0x10, 0x7, 0xc553, 0x81, 0x9, 0x757d, 0x2, 0xae, 0x1ff, 0x40, 0x0, 0xffff, 0x7, 0x81, 0x0, 0x0, 0x0, 0xa, 0xb, 0x7, 0x7, 0xad73, 0x8000, 0x7, 0x8, 0x3, 0x96, 0x4, 0xffff6c5f, 0x0, 0x3, 0x8, 0x4, 0x5, 0x1, 0x0, 0xffff, 0x8, 0x1, 0xfffffff7, 0xf8, 0x8, 0x6, 0x6052, 0x1, 0x3, 0xfd55, 0xfffffffa, 0x5, 0xc7, 0x8, 0x4, 0x28474502, 0x87, 0x6, 0x8, 0x1ff, 0x5, 0x1, 0x1, 0x1, 0x9, 0x40, 0xa, 0xdd62, 0x2, 0x4f03, 0x3, 0x2d, 0x55, 0xc, 0x101, 0x6, 0x0, 0x100, 0x4, 0xfffffffe, 0x5, 0x8, 0x3, 0x756, 0x80010, 0x800, 0x2, 0x0, 0x3, 0x2, 0x36a9, 0x40, 0x4, 0x7f, 0x3, 0x8, 0x80000001, 0x40, 0x110, 0x634ae008, 0x4, 0x8, 0x9, 0x8, 0x9, 0x7, 0x5c57, 0x8000, 0xa9c, 0x100, 0x2, 0x7, 0x9]}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000018c0)) fsetxattr$security_capability(r2, &(0x7f0000001900), &(0x7f0000001940)=@v3={0x3000000, [{0x8000, 0x2}, {0x9, 0x5}], r5}, 0x18, 0x2) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001980)=0x2002, 0x4) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f00000019c0)=0x5dd) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x81}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000001b00)=0x3, 0x4) 2m21.558255308s ago: executing program 3 (id=154): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000032000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0xfffff000) fsopen(&(0x7f0000000000)='proc\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) syz_ublk_setup_io_uring(0x2887, &(0x7f0000000340)={0x0, 0xd40c, 0x200, 0x2040081, 0x2c0}, &(0x7f0000000000)=0x0, &(0x7f0000000200), 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000280)={0x0, 0x3521, 0x4, 0x2, 0x298}, &(0x7f0000001b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1dcf, 0x1000, 0x0, 0x2cb, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1e9, 0x20, 0xfffffffe, 0x28e, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe916, 0x800, 0x2, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4a74, 0x1, 0x0, 0x80002f0}}], 0x4, &(0x7f0000001940)={0x2e, 0x0, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x3, 0x5d5, 0x0, &(0x7f0000001d80)=@buf_512="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"}}, &(0x7f00000019c0)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7) r9 = mmap$IORING_OFF_SQES(0x0, 0x9, 0x5, 0x11, r3, 0x10000000) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_ublk_add_dev(r3, r4, r7, r9, &(0x7f0000001a40)={0x2e, 0x12, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001a00)=@any_dev={0x4, 0x257, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}}}, &(0x7f0000001ac0)) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x2, &(0x7f00000000c0)=0x6, 0x4) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xc3) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f32f08028fe0f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x75, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x4, 0x1ffe, 0x1000, &(0x7f0000030000/0x1000)=nil, 0x4000, r2}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x7}) 2m21.500014921s ago: executing program 32 (id=154): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000032000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0xfffff000) fsopen(&(0x7f0000000000)='proc\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) syz_ublk_setup_io_uring(0x2887, &(0x7f0000000340)={0x0, 0xd40c, 0x200, 0x2040081, 0x2c0}, &(0x7f0000000000)=0x0, &(0x7f0000000200), 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000280)={0x0, 0x3521, 0x4, 0x2, 0x298}, &(0x7f0000001b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1dcf, 0x1000, 0x0, 0x2cb, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1e9, 0x20, 0xfffffffe, 0x28e, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe916, 0x800, 0x2, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4a74, 0x1, 0x0, 0x80002f0}}], 0x4, &(0x7f0000001940)={0x2e, 0x0, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x3, 0x5d5, 0x0, &(0x7f0000001d80)=@buf_512="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"}}, &(0x7f00000019c0)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7) r9 = mmap$IORING_OFF_SQES(0x0, 0x9, 0x5, 0x11, r3, 0x10000000) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_ublk_add_dev(r3, r4, r7, r9, &(0x7f0000001a40)={0x2e, 0x12, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001a00)=@any_dev={0x4, 0x257, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}}}, &(0x7f0000001ac0)) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x2, &(0x7f00000000c0)=0x6, 0x4) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xc3) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f32f08028fe0f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x75, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x4, 0x1ffe, 0x1000, &(0x7f0000030000/0x1000)=nil, 0x4000, r2}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x7}) 1m54.562212126s ago: executing program 0 (id=388): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_appraise}, {@hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@audit}, {@subj_user={'subj_user', 0x3d, '%\x06%}\x00'}}, {@subj_type={'subj_type', 0x3d, 'fd'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}}) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000980), 0x1000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r3, &(0x7f0000000440)='\f', 0x1, 0x4040, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) lseek(r4, 0x7fffdfff, 0x2) recvmmsg(r3, &(0x7f0000001800), 0x1, 0x40012021, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8010, 0xffffffffffffffff, 0x3000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000480)=""/135, 0x87}], 0x1) write$binfmt_misc(r7, &(0x7f0000000000)="dceb72be5f7c449329aaba597619e4319b9a6662c51adeded517127560e6502c1ce2475535cdb2a6e975d8ef72fc509c9f54345650e8d476c0", 0x39) writev(r5, &(0x7f0000001540)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000025000000560000002500000019000a0044000800040000000004000000", 0x31}, {&(0x7f0000000540)="99894001ae677fce", 0x8}], 0x2) 1m54.434232065s ago: executing program 0 (id=389): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/155) (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) 1m54.361133311s ago: executing program 0 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x90, 0x1, 0x200, 0xfff, 0x3, 0x8, "b89c17e1a29cf6d181142a7e931e1ac245d6b7b6fa7f7f81971106e614397aeb2ca484658732465f14d537a63fdb359ac1d449548286ad15aba14230c5ca4af45398512435c97409370836465c624075080e0d38e63afd9d8b863cd280829fed2dc020ffc943d2cb95f7be99ba879c8681d3bb71723f9861bdd3b0898298f16b447f1e72e11a446e425f44cd34f44233"}}, 0x1a8) (async) write$UHID_CREATE2(r0, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x90, 0x1, 0x200, 0xfff, 0x3, 0x8, "b89c17e1a29cf6d181142a7e931e1ac245d6b7b6fa7f7f81971106e614397aeb2ca484658732465f14d537a63fdb359ac1d449548286ad15aba14230c5ca4af45398512435c97409370836465c624075080e0d38e63afd9d8b863cd280829fed2dc020ffc943d2cb95f7be99ba879c8681d3bb71723f9861bdd3b0898298f16b447f1e72e11a446e425f44cd34f44233"}}, 0x1a8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x400, 0x40242) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000def71200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000100020000000800000000faffffff00", "e7460000102000000000e44400000020e40000008bd02800", [0xde, 0x2]}}) 1m54.325098079s ago: executing program 0 (id=391): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffe, 0xffffffffc068dc81, 0x81, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) fstatfs(r0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1m54.258779984s ago: executing program 0 (id=392): syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001a662ca40fd07040034860000000109021200000000007f0904000000ff"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @any, 0x9}, 0xfffffffffffffe8c) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @any, 0x2, 0x2}, 0xe) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000600)={[{@none}]}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4992}, 0x14) io_setup(0x0, &(0x7f0000000000)=0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = eventfd2(0x0, 0x1) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xa, r4, &(0x7f00000000c0)="9dc7f05e1c89e4efc834ad2e6d9c48ab5c5774b70edb78f4bfc4d6813bcf478af64a36f5c2941d10a0250d600c9f43f357d6846837d2626d333ac2bfc36c84454fe15b6cecb2", 0x46, 0xf6, 0x0, 0x4, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f00000001c0)="dbb8bdd85d18251f24beb0d749a573ab6592e7216c3491b8491e7a1f23eb0d70fe52702e6cccfcf52af63cfcf3b8e2e78b2270b7121bf09ec03b36f9c087de1bb757cceb1559f0b62785a9416a7ef9239dcedb5d9ae811381545e0272f0bdd1b7ebb026241f56ae71a4f09bd0db9f507f1de0624e6a72999b4b23a02be3e5efedfa668a547a1760d9a1ba2f8f7bbbf2bce62cdcb0c12e6e02976ab21462ec23ad239417337d88311030c0adbef6568b7c4c15c670550c06b138d602ba5ad3622dda1213b7886a22a33f512ee4a08b0", 0xcf, 0x2, 0x0, 0x2, r5}]) syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001a662ca40fd07040034860000000109021200000000007f0904000000ff"], 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) (async) bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @any, 0x9}, 0xfffffffffffffe8c) (async) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @any, 0x2, 0x2}, 0xe) (async) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000600)={[{@none}]}) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4992}, 0x14) (async) io_setup(0x0, &(0x7f0000000000)) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) eventfd2(0x0, 0x1) (async) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xa, r4, &(0x7f00000000c0)="9dc7f05e1c89e4efc834ad2e6d9c48ab5c5774b70edb78f4bfc4d6813bcf478af64a36f5c2941d10a0250d600c9f43f357d6846837d2626d333ac2bfc36c84454fe15b6cecb2", 0x46, 0xf6, 0x0, 0x4, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f00000001c0)="dbb8bdd85d18251f24beb0d749a573ab6592e7216c3491b8491e7a1f23eb0d70fe52702e6cccfcf52af63cfcf3b8e2e78b2270b7121bf09ec03b36f9c087de1bb757cceb1559f0b62785a9416a7ef9239dcedb5d9ae811381545e0272f0bdd1b7ebb026241f56ae71a4f09bd0db9f507f1de0624e6a72999b4b23a02be3e5efedfa668a547a1760d9a1ba2f8f7bbbf2bce62cdcb0c12e6e02976ab21462ec23ad239417337d88311030c0adbef6568b7c4c15c670550c06b138d602ba5ad3622dda1213b7886a22a33f512ee4a08b0", 0xcf, 0x2, 0x0, 0x2, r5}]) (async) 1m53.896440795s ago: executing program 0 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x32) 1m53.820299132s ago: executing program 33 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x32) 1m15.516369115s ago: executing program 5 (id=690): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000006d00)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1s]\xaba\xf93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\x19\x8d\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdcU\x00\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-ox\xdb;\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\x13$\t\xa8\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\vf\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf66\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6\x02\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xed\x16\xbcL\x10\x8d\x10\x9c<\x0e\x94\x13}\xbe\xd0\x89\xee\x90p%\x1bV\x89\an\x11Lc\xf8\xe6\'\x84\xfd\x01K/\x15\xce\x8dh}\x00q\xe7\x7f\x19r\xc4z>\xfcX\x98\xccd13S#\'y\xab\xe4\x1fW\xd3\xa1g\x1d\x8eGa\xa2\xab&\xf1\x96\xb5\x1b\xdb\xb0\x8a\x0fVM,\xf5\xcd5\xaaKt8\'\x046\x15\x94\xfa\xc4\x9e\xfc\xa2C\x1e\xd3%,1\x80.\x91h\xeeIb\x82\xd7\xa99\x86O\x9c\x14b\xbeA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xacC\x95\xf0\x9d\xe8\x80G\xc2\xc1zL\xd0\x1f\x8c0\xf5\xec\v\xed\xad\x1d#\xde\x98\xf9\v\x02Y\x89\xb2\'\xeaH\xbc{o\xbc\b?\xd9\x81\'\x0f7Xl\xcc\x93I3 \x0e\xc190`\xd9\xe46w\x1d\xdeV\xbf\xc9\x9e\xb4\xde\xe6\xa3\x97%D]\xd1Vd]\x03\x89J\xa8 \x99\xef\x9b\x00'/2064) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1m15.40030865s ago: executing program 5 (id=691): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "14ca97325fb7e94a6b114910feecc0d0aa880107b1fae20100d02367ae1046808242120e4815cfa9425fd95037c539bb7f6f546e8a2177da4dffcfd3ea538c99e4ebb217b68007ce9493880a4206b87771b357a76790df41b49ab04b53f5950f89dc4e9bb05cf4dc7b08e5a4d8b130a6aecdba4ad9e151a0e07e3924a2530ea882d5071014992a0649aa405b5048bc6065defd46809bcffc0b3eb7a8e7b973f7c7a24294fa2b177e4973bb9479f143dd8278a6a78552c942f4cc2e86ec4ad0925bfb499af4bd55d418caddd6787dd5537a7a3ea24b929cbf38c8cc2571613d9f56077f71aa3c598b34fa86a41b39265cb117be72a1c60f676c0d4f"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "e3a1aab3ec4f20b89bacf892280348de1ccb3ed9ab23e68fcd8a75698d6c1c7a9a5f07f61792dfd5c63c61c65f15abfc42547e1fcda33a0f49b8b354df15be94e464276ebd69fc270c7d8aaded60c06ea4a15357904f5383aea8684d76b64598ca8cc41999f871826bd4381c49c0274c0f3a504204c84e33714ab83a4ab77b75bcda16cf91e84a914f637940d38322271c6a1d2bc848abb563504cfaa289beb12a89e85edded3a3b5d7c801166fc427f155c4f542cafdf4eb6fb5c1e4bbfc3548e75395932727aef4cbf93e4b29d0aa9f0b351e8c0492823181457b312d80c1fcf585c49bd48d00ec6a81db42d87ded10dcb5afe226daed6733457f374092f83d5465e501431e7b781c35249165189a035a1df732c99e4846b8144c98ab2569c903a3d3b0b85b94845e3b86aa7269086ee6054ee93ca5a1ed7f9a497ed2ae64f87f2d574c28c58ea8f545ab4af0000000000000000"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="011fda72e500fddbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48010) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) syz_open_dev$evdev(0x0, 0x0, 0x882) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a80)={0x8, 0x6, {0x0, @usage=0x3, 0x0, 0x8, 0x2, 0x6, 0x7fff, 0xff, 0x40, @usage=0x8001, 0x6, 0x1000, [0x2, 0x80000000, 0x5, 0x7, 0x3454, 0x7]}, {0x6, @struct={0x2, 0x1000}, 0x0, 0x5, 0x100000000, 0xffffffffffff0000, 0x8, 0x6, 0x401, @usage=0xffff, 0x490, 0x2, [0x10001, 0x9, 0xd, 0xd9, 0x5, 0x100000001]}, {0x3, @struct={0x2, 0x5}, 0x0, 0x1, 0x7fffffffffffffff, 0x1, 0x9, 0xffffffffffffff95, 0x420, @usage=0x8, 0x5, 0x6, [0xfadf, 0x1, 0xfffffffffffffff7, 0x11e, 0x4, 0x9]}, {0x7fffffffffffffff, 0x9, 0x40}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000e80)={r5, 0x52, 0x9}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m15.40008985s ago: executing program 5 (id=692): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="e3786ec8e5d3012c00a0a9b928be4ae1ff6736b2a78f6f10d0d1a93d9101f85c6aaf69d078233020639647c0e1c19c7793379b9156361addca3380da9d05cd8d272596e0458a66f1f8e881526f8926841f2783a80009351061a9eda33c43ed2a06ee6ed4b69c81935d55d481a28a63d71d1232797614097ccf138509b437a6670be46fc5a4454267cfc5f2116b6bd8c8e9c7311f1c81d7f534a0db12e8fb7514905789fe4ee14b6fd820372af501fd6c21464797ae969417c507000000000000009fcc628ccab3a9edc674780cd83ef0d78208f9015148755e7a908a98fa41b5b922be10ef90d50ded4acc87682ad31dd1b8b86381902721f3603b9ad9fe6f47a97a66a53a37a0ba5d810633c9c5b4e95b18be45d4761cd4bfcd1ffdb0bd4e90eebe64fd30763434eb85b9690db79b034f59ba2b538f2d132217b49f702f901b5585"]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/crypto\x00', 0x0, 0x0) lseek(r2, 0x10001, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(0x0, 0x1, &(0x7f0000003bc0)={0x5, 0x1000000000000b}, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000101"], 0x80}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0x12, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x807, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m15.376313906s ago: executing program 5 (id=693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181842, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000000000000070000000100000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000400000014000000d8090080000000000000000000000000000000000000000001000002000000004400050064010100000000000000000000000000000000026c00000002000000000000000000000000000000000000000000000002000000000000000000000000002000"], 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r11, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 1m14.510054379s ago: executing program 5 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000200)=0x6, 0x4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @empty, 0x8}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x5, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m14.374321079s ago: executing program 5 (id=695): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x2172, 0xffffffffffffffff, 0xffffe000) munmap(&(0x7f0000004000/0x1000)=nil, 0x1000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='nicvf0\x00'}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=', @ANYRESHEX=r1]) 58.51936903s ago: executing program 34 (id=695): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x2172, 0xffffffffffffffff, 0xffffe000) munmap(&(0x7f0000004000/0x1000)=nil, 0x1000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='nicvf0\x00'}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=', @ANYRESHEX=r1]) 51.456359035s ago: executing program 4 (id=855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9", 0xe, 0x40080, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @random="6b3d103c42d3"}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x70, 0x0, &(0x7f0000000640)="8d096c9bf6cc38f10f96118e854d552c4c1a5102804e2aaed6221aedd162aa7562f67eb4677a46a6d0c1bd443f7575b8fd0be8cf416c8d7639df31067e2c3c7a119c792bf7f8c6361ccd00000000000049884fa5707ed62f2943a8a5f7a0cdd84afc1cbd97bb4f4ac5aca7d90a1620f5"}) 51.375634952s ago: executing program 4 (id=857): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="e72e", 0x2, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) listen(r4, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r5, &(0x7f0000000000)='27', 0x2) mkdirat(r5, 0x0, 0x80) write$evdev(r5, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x3, 0x0, 0x2}, {{0x77359400}, 0x14, 0x200, 0x6}, {{}, 0x0, 0x1, 0x8}], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001080006040001"], 0x32) 51.277395552s ago: executing program 4 (id=860): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000200), 0x0, 0x2d, 0x2) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_int(r1, &(0x7f0000000040)=0xfffffffffffffff7, 0x12) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file1\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)=ANY=[@ANYBLOB='tran\x00\x00fd,rfeno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x5a) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}}) sendmmsg$inet(r5, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000480)="3e5b6e6665c5764509f3ec31c8c00a4265152ab69935f3b3cfa80f07571cb8900c6a2ca9b70a6e5ac926d5ab4dbbe41b94ea0f2fdaa46e3889cd702856a7de568d449c03368d837498b472248c76c8cf066392195a964af518686b45b04d9df1c2bad25eee7912", 0x67}, {&(0x7f0000000500)="f61b301c2d81ee42e7d692800d5637220c7cbbd53301e2eda482d69d0ca368d3ba164058c949948d1c2517e00824c9820ba48877aee36f15ea979805bf7b3ea0fe0e282ae8c076556cab2e856a750490fe002ed6df3bf5938cd69ee5a68a3a0061fca089ebc4e00834778bb125948dab8b81d4c20017992d068d3a03cd14c8d91dc87456f80e64748983252e42dc60b70d711dd074bddc454cee09c98823a23691ac6a346b67b2afab032c9cb2019d4fbecff80cf2464867becf8882e4851178bbe442cacbb1ef78df8fe3fcef612f1c28b199b840b02c58003f1293b1f77b206be9137b706e70a91f9b7dd22ddbe28b68e0a7bdf78429c668afec844c210b2f4e7e7024f658dd61f287f545ca7cf2424a6d5d7acdbe251a5fc050bcc511b158685329d3513cc6603aa29aa14160dad3409ef249f31e5a7c3d6324f14218a9b9efd909f9fe16b10a6a3373139273d272f6aac4eba3e064a0f517afe343bc58e310ad91dae714e42ba068b039c8ebbcf90bc2eda79a3bfa5cc6667347b9cb72e5eba9dd5de83aca7ce1fb99348485831e06bf9612b00718ba2a36aba3893bafb481f1f983c4deec8577ef3ecf03ade15eec2bf424f05345f0071870350d32b525db00cc44ea97ca02b151be05b30d7b18475106bcc29d884eccaebb6044b92d86ff3041a5385bd66f3ef969e326b64c0976419eaee3afcade108461f31737cecfbd31a0b2ff5c9a537d01e4e0381cca1b36a59b28b503c2090baa9264a093a3c8ed9728429561a835493964bff44fdf2281befb082ade816264702f1d16da154df8cd14bb19fa81ed9697fa6ee75b8115fe9f26a6ebc1d1846858ad86609cf7c98e26c6f26c92234b778898bd397ade6560cb82c5dcc90188ae7605bcdd31bf76104c1bb6f12ec91681de477b6b834e7e8a74218b415850b514790058afc326812d2fe97fd2275d846659bb16198ecbadb4afc8d8beb971795c16d5e45a3dae435b8cb4dfe8d15b7a6893ca95ca9ade40a7afc2cc5c83c5d090eb548b1a7ce699e0bca8ffca271112d1f2ddfd3da4713bf81c00b66314a1235d48c3f107c9ecdeb6e0750916955e75e23c2014f4b5868c9fb63e92f948c359230584c966499485ff797067daa57ca299efa781c6d0afcc7a875068f3c1baa9755bcc16b66f6f4a0b943a6b779a88a0fee1435cf8f8667d2d9f8a0b3f42c0e99d831c4690f38acf946fc41dffc822c30c5e9e770352df4137eba194b092ac820cc8445dceebd347b8899fd301a32a3c2a4818471db705001402950fd54cab067aa5cf8994153c3d57936e1fa2f362bae8878d93cb82361c2bf11a8d5f37c8529c163dfed27271db5a458aafeda2e511e10d4f9ed01737ba0548334f1be32d21e0dbdb83613d80caea840dab0726ffa6cb291fd9119d9aed5877ce5907e2e23c487d956739ec58f32df29fc594509a18129c18c79fe827d909aa04665c5b86668e52722e47aadb628c6bfa282ac34a74aae10a37d6e162dcd70636320562f348505450eb3bf457affcbb2d89c4c930f9a2de3ff3cd0379e68ba9421d1b4178982460d55b94c6c824afcd528967d9953deb826354625a0fc1742f977a20c2d22e6e9ec23e0ba61bccd95f2d37f559c8f5bb718839adae0d5406b492cab282068ead5a652e223204fdcd29bdaf095739419e7414b7e5152b3bdd7e3a59e07377ca13960eed2fc34bc443f2e4871f838340db34d47779b1d7d1a7dc0a6779ef2a9387e6c92ccf908d470721ff247de5faafff27574707afbb0a3e0b104e0358dc131fcc82cf9c371fc81c42f6a180646749960393aff5059a0da3f5ca5e7f05c9f72fe88072054e2b8365be8aed37b7d5eefa58e83cc925eb83114f3856abef94db60ff6d24b3bd7b43987f06005a1774c53a2e528d90ad2f4fcbfd72919d65ec8e4166cf46bcbae130c601b358b37ab75ad54575ca101a5367daed604bd22b32b8426f4bc99ef7e00e3be597721f9c646b1d1620890ebb72965429c820f9b0023d5188883ea91df819e8402009643a220470f0b75e2788b0329d5734fdf1c941d7c4babba4aa70e5bfaaa29b3a2203378328b10d11400f0482afe486941acb0590091f92a2634cf88f5b47b00c0aa32b55dc9f2ee7e4d490a24a9d30d57029ec7454cfb1ec5d43ed139eac2ab3416512c59bad5f4d51d2544bba37cf56d849b7035fd301662167e1f4522da4b8006517aa047f86518a3c0831cb990da6d065d9b5cad6dc4a7a49efd6071efa3f7dab9560057fd87ec24eaad4ba66d80de33c53bd42d0968b79e9a05c416bc306e1387eff2b592d6e2ee493ebdacb670fb439e046ad4774bc74ec7ce0d3d5158a0e1da0dd9a4da721ab01d3b81571179cd513e5b5c06e015c7d656a6f5281b38cea2aa9a41b907c5542230383c32b5e3b4bddd24765454b4b24efad5fffefe19cd687072c59280f1effb9315aee421cbcfcf431a621ebf019b85cdbdde2dd1c7cede2c1c1019159405070a0ff43ed12628f1032d8af41ce5019e9d25ecb084c392caa6a8ae969869602887fca91d8060a26b830265ba99a8f119d97983d9ebfefd95c8a9238334b7a17f83989d15d941da72bf99f91ceac56e217840f52cbbe8b8ccb14d9dc221ee3f935532ee1186dfd985abeb52c874e75b6e117c716b00759714b86eac0d67f8c9113f643520cca420caa2fade8abcc32bc5a67f9aa65b99ec78928db9e96843de1606f8e2f0c2cc17aa3f800dc07725bde26446b371b7272b34ad820e312fb9209acb5366cc41250f2d7b8ea0bebd739102453c984768311b50238a78dda0f5c667857874c603bb4c70940499ca4f1ad15e0c86d3f86b53c58605f4fbc4274ffd42af23007aafe152cf01f134989d0025d498a884064f6779cb115a3c8679ff5d9ca1b70b600053d036d812f44a40d3106e7472a6c2d12280d5e3c58d869badb9f151f467dc433d9badfec93b2cad6aec7108894d1826a9fc1d280d53fbfb5902b72bacfad82a12fb4783f69a88e0e7c27e748f1da0ccbae63aa1f59628cd5a0480b2dd1ffe606dfa3294fe5bec23ca1f372084971f6c5caa72355342d6efd566fc58b3393b70c8a04a03ff3b17be0fe86d13677ad2a4baa6c0f03fe7fb48635aa89fbfed2102956af07071bf0799e747caa09f7a12fcaf38971d7e344385a061da30f2e95ec85384b9648e6ef01978448e2582b5d62eb49d168e6da9743c69dafe998dddf57238a4f3e1520bdbd9ef1643e9a44b1ba37e83fd6953ba3c6df122560cd4db49e9f41546ff97be814b2c4e586291b60989cdcc40a9adb5753c20dea3842366d89ea0f1d3f045d43c88272377af30224994121bc7ca0ed240b0b271f670fcc81e3e4f9b0f4ab30170d10cf7afdd186d7f9bbcdda1f0328d32f241004a7b1dacae117f26794d17a03fc1ce63ddfa36b70bed5e03c2dbb8719093d53992cfbdaa706146cf5a0c2e602d9c4df6ef3d5ddff5243985519791c15d05ed933daff178f1a28e3042ac43085ce2a3d16c15011afd9699ba135f1c7f270052f8873ee5b046b72d69eb81ebf8f116a1760859db9934e8b4dc27471e77c733e78e4b87188378a2365edca68c3e20a9fa5c4f355cff951c9d6d4285ef932b850a89e1a740608c40b2ac0f8c1a0277bffef36792a51c337b054448d178655f870193d3d0e757c9b4c64e60454367f4901d8edb2a581bc22c543707d8fc0a0b8c7569d29abfbac22ae6e11db8fea77f50e6870a9f04f30785a80aac5977498b703e999966d8886dd36bf3b5c4e47cde0602af84cd11e08dd0a2550a3eca9e3bed7bbfc5d26202fa49890bf28c06e52f0b8046421c1cc5c11a5d63f767601a6b869f05229c3825fa081f711958322aa244c86c17ccbda245bc98b8e238426bd5a6f724844934ff7b5b90cc4f01baf8a2e11f9a191bc5f52c9361afaf3ec4b2e8d68d9dcebb93171a0d88fed016723625c71c54a1a301eb283348f75f0c8e778693f492ebff227df22a879dedc444e73d02dcc52a7111636d3b8949b97dc05d882811d9346a7c03e4970fceb8c730688ec7db9fb96686bd768e51dcccddfec7a46e6b0c2869085d9e0ac1581869d4c7e3ea92c95376d5db6e40bee44a61733b0570734c93ef7a4edcfbaaff0a44180884a7ce970c2b1cd2023bafbcad537a59b90ee4b633a833ea7f2ec27655401307166300e36f05f4ab970c5540c5f16e57a5d18d76c73ed42b0400a55caeaa78d0fb787e4ed24af9a7b1b6e5c1714be5651cf34512d725796bc3c4d30205f9e8723da41ac51ecaf040ecd95f539807835b9c782aa269d6c636566352cbbbcdaef24f36cd6cdb2c8b983b4392da8671e7df3c136a49f4a32bf39da6738ba3a204db6a2a7560b7fd1a10049bd4aaecfa436bf79ffb64040021582a9aa564dba576c174299e1a231003b0ec99732705c73ef79c76562726d1ea0f5fbced2e73490c2f61aebaba417568ad7a3b6813ddf7fcf05cee647460a3e7621c20ecce705463faeaf473dadf490badc9e24fe3d072a9679f963b9277e382e696c87a0001e0cb6ee9c68dbfd08bb40606d355ca4f414a1e839bcce38e2ec0b6d68dfd6309b4a8dda88c589815cc21ebb0bc1b51b615e3f4412a1207a5bac3578b2dba9b8655c8b37b2f92c9dfe915f74c6619dd40d088246fb963e09780cdea8a65d551dfaeeca2571cbe7cce76ac9750b3c74a331be81a78ee3bf009034285905ac4ac22c8ac9a14047f7216b25571b0266f55b3f61dea82514ef9a9fcfc857b956823ac97f2e65d073a148fca054deb9c3a44a3a0685f97f1c76cd5c6271dbe7588534d780d64ceb8cb07da28bd1232a8a43c2af1c082b35641a6b963e36ac7f1c945d822ef3a0339b38ef5820754ad956a963c30b1fc12fccdb8454b4ce044c9a0f8ab10eb383f7b35f4f8fea10964e8a546ee00b87fdd54d2a628e8e95200d82b6e2414192e092655106a53fa2f07957237d47cefae5e2bc8fc77801b0ee75bab2595ce2e78ac0fc11e32b29cc5932aea57ef00bf71b25fd5c67203d395260edc6f1d63d7ae8770acd2e68c3c64f6efb69b433e068283d49375aba2a1a0a7f60075f4abfcd382e72d0e3af2ab044c761c35f8182dc98d691746a7802e19368338655fac785b8ead266dc49a4dd95edaf9002b3fe39f5e87b993eb46005bb14e57f6124292b786656e9289515e626141501ec52557397828f2cfbb062c4ab8a62447ee3fdd3aad28b709a3c383e7f6ac9cb6401b9ed6da0e9db79f16ea31ff430a463ba2f23625a116f0c8490c3979b7e0a6cfea0887ae95925cc6e2fe00b64207189fea201a1e881f142b8186538d68ec09562104661c6daac5c451c6065fe453e29c4877daa2c1f6a835733de4e1273f8b984f35be0ee7a238f1b5a9239e0d3aec48ba7fa948401fb6523609ea687bd91bb067826b3a54542af1a74302f2f452b04ffc1baf1eec6ca941dd8e525cb347b69be8a03e0d94fec2c8fe5a3631f711a29bb0cb98e92032e73fbd876a7f50508935e7c0d804e28dbdfe8284c84f342cd8af17e24aac1d04880a87dd510f88989b120a5d1b95b2556795dbe6febd25fd82d771cf6b3df79b19720077dc71280be84dfc1a6f9bfc2260f69058ff8d5ed0495e42f1fbee04131d819464c5ce3997ade6a4029a27ed0decb6ff56caaf020b2e2ecd5ed73069ad6c8583f530a95a8e221a606cd370503ec8880eec5e4556beb42c356b179fdffc9057cba663abca8a80135e348ad7607a4bf3825372ae922fea9c8377652934dcab37a2bf0", 0x1000}, {&(0x7f0000001500)="418fcf12a4cfe2af6389f4b880ab283ea0d2fc9958b919f74ce8eebd64a98653c273d3f9a79cae7d8d4296cdc65ae07e8dd74ba514", 0x35}, {&(0x7f0000001540)="3218565c3ed511c4f00a34b328de8bef6a4fb1352ad794bbf7ded1d965848a1b5744a2af78ba7f5cf7016a5aa661f3f92a03aac3875571ffe8d370eedeff2c2c0906a40e02374d96bf59b053b4cc4554e3299a019ae6fb99d6b84b647a91cb269e6fb4479b7ca865f0b8931d25073a7980e6391f02614262fb9f0895b890f867f974e1551b80bff10d0537606c6f033295862a1debde6dda26c61f7ab1a0c3759d28c0bf6d30ae20d0edfbb1c35163d979ba7320d95b6b600c63315845a2bee613284ffbbcd3a9f48ffd4a50b160acb91a38e35b37550134bf4031d0b38c51d3f11ba259f05739e8d403", 0xea}], 0x4}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001a00)="e5", 0x1}], 0x1}}], 0x2, 0x240040c0) close_range(r4, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000001680)='v7\x00', 0x32e101e, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r7, &(0x7f0000000380)='6', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) fcntl$lock(r7, 0x7, &(0x7f00000002c0)={0x1, 0x3, 0xcee2, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) pread64(0xffffffffffffffff, 0x0, 0x64, 0x2) 51.158284887s ago: executing program 4 (id=863): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) syz_clone(0x80142000, &(0x7f0000000140)="c16290b3faa863a15aad082b242f60f13f1146e08a908d22d542cc50cb0fee977cfc43b49766893439484e45b5d1cee0b26bb57fb4d69e4591bbe9a21875bf6f55a120e96b484425e76b447efd2ddf434384dc7c3140785905f08554", 0x5c, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f00000003c0)="1abb822c36eb4da73cc7a5b26e8d8932a8ff4cc4b44c4ef00fbc1be46f13f60414cbb8dce77f9cf6d886d0504c338cfb9f9432e6684b35a51ede7081670c7839d9227b1f89bdd55eba0d8e2a16") (async) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000380)="f234868c", 0x4}, {0x0}], 0x2) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) munmap(&(0x7f00007ff000/0x800000)=nil, 0x800000) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000cfb000/0x4000)=nil, 0x4000}, 0x1}) ioperm(0x9, 0x7ff, 0x100000000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff04) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x2b9, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffe}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0xfffffffe, 0xff}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) (async) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000004c0)="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") socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 50.972294736s ago: executing program 4 (id=865): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0xa00, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffc}}, 0x120) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1b6) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r8 = socket(0x2d, 0x2, 0x0) setsockopt(r8, 0x11d, 0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r9, 0x29, 0x6, &(0x7f0000000380)='\a', 0x1) readv(r7, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/191, 0xbf}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/21, 0x15}], 0x3) sendmsg(r8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x54, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) 50.548444415s ago: executing program 4 (id=868): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="e72e", 0x2, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) listen(r4, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r5, &(0x7f0000000000)='27', 0x2) mkdirat(r5, 0x0, 0x80) write$evdev(r5, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x3, 0x0, 0x2}, {{0x77359400}, 0x14, 0x200, 0x6}, {{}, 0x0, 0x1, 0x8}], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001080006040001"], 0x32) 50.545283025s ago: executing program 35 (id=868): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="e72e", 0x2, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) listen(r4, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r5, &(0x7f0000000000)='27', 0x2) mkdirat(r5, 0x0, 0x80) write$evdev(r5, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x3, 0x0, 0x2}, {{0x77359400}, 0x14, 0x200, 0x6}, {{}, 0x0, 0x1, 0x8}], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001080006040001"], 0x32) 3.983646551s ago: executing program 6 (id=1125): socket$netlink(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x9c72, 0x2, 0x7, 0x367}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0xffffffff80000000) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xd82, 0x0) 3.889732771s ago: executing program 6 (id=1127): prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x5, 0x0, 0x200) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004890}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) epoll_pwait2(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000180), &(0x7f0000000280)={[0xff]}, 0x8) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) 3.085135388s ago: executing program 2 (id=1131): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x20002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) inotify_init() syz_usb_control_io$printer(r1, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086203, &(0x7f0000000080)=0x1) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x0, 0xc, 0x11, "e569904a7a8bfc256b8a9dc01da89106bb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1912c50000003989daf67e"], 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, &(0x7f00000001c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000000c0)=0xfffff000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='0x0', 0x3) 2.944390017s ago: executing program 1 (id=1132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x1000, &(0x7f0000009000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x8, 0xc, 0x4, 0x0, 0x58, 0x9, 0x0, 0x81, 0xbc, 0x6, 0x18, 0x0, 0x0, 0x896, 0x0, 0x8, 0x7, 0x1, 0x6, '\x00', 0x96, 0xfc5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.942586288s ago: executing program 6 (id=1133): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) eventfd2(0x50, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000546000/0x3000)=nil, 0x3000}, 0x2}) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) (rerun: 64) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000004c0)={0x10002, 0x200, 0x2c0, &(0x7f00000000c0)=[0x4, 0x2, 0x7ff, 0x2ae, 0xdd9, 0x80000000, 0xcad, 0x3dbf, 0xa1, 0x4c9, 0x0, 0x400, 0x41cb0659, 0x80000000, 0x2000000000, 0x3, 0x8, 0x5, 0x43, 0x1, 0x7, 0xc, 0x4, 0x0, 0x9, 0x7fff, 0x3, 0x7, 0x8000000000000000, 0x1, 0xffffffffffffffff, 0x2, 0x8, 0x7fffffff, 0x1, 0x9, 0x1, 0x101, 0xffffffffffffffed, 0x7, 0x400, 0xeaa4, 0x4, 0x1, 0x9, 0x3, 0x7, 0x3, 0x401, 0xf20f, 0x401, 0x6, 0x75fe, 0x0, 0x7, 0xffffffff7fffffff, 0x7, 0x3, 0x6, 0x2ff, 0x2c7, 0x100, 0x3, 0x7, 0x3, 0x88, 0x48f, 0x81, 0x9, 0x8, 0x8000, 0x8, 0x1, 0x9, 0x7, 0x1cf, 0x8, 0xeae1, 0x5, 0x8, 0x7, 0x7, 0xffffffffffffff7f, 0x7c2, 0x9, 0x8, 0x1, 0xfffffffffffffffb, 0x6, 0x5, 0x5, 0x3, 0x7, 0x9569, 0x7, 0x9, 0xe9, 0x5fcef990, 0x4, 0x8000000000000001, 0x7, 0xfffffffffffffe00, 0x2, 0x8, 0xb, 0x1000, 0x0, 0x1, 0xf, 0xd, 0x3, 0x4, 0x0, 0x40, 0x6, 0x0, 0x7, 0x1, 0x4, 0x8, 0x612, 0x8, 0xfffffffffffffffa, 0xf16, 0x60, 0x200000000, 0x200, 0x36]}) 2.941979408s ago: executing program 1 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4040400) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gretap0\x00', r2, 0x7800, 0x7800, 0x81, 0x8, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x67, 0x0, 0x6, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x4, 0x5, "112f5a"}, @generic={0x86, 0x4, '-L'}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0xd, [{@broadcast, 0x52}, {@rand_addr=0x64010101, 0x9}, {@empty, 0x7}, {@multicast2}, {@private=0xa010100, 0x6}, {@multicast2}]}]}}}}}) ftruncate(r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x80, 0x80, 0x6a, 0xd8f, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x66, 0x0, 0xa, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102, {[@lsrr={0x83, 0x6, 0xca, [@loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) 2.898832287s ago: executing program 1 (id=1135): socket$netlink(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x9c72, 0x2, 0x7, 0x367}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0xffffffff80000000) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xd82, 0x0) 2.844974758s ago: executing program 1 (id=1136): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_open_dev$loop(0x0, 0x10000000008, 0xd18135cf55169abc) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x30000010}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000040)={r2, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x2080, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc0386723, 0x0) 2.792435069s ago: executing program 6 (id=1137): syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x800091, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x6) 2.778182392s ago: executing program 6 (id=1138): mkdir(&(0x7f0000000140)='./file0\x00', 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) socket(0x77bec5732f430508, 0x3, 0x2) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 2.73924682s ago: executing program 1 (id=1139): mmap$IORING_OFF_SQ_RING(0x0, 0x81, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write$tun(r0, 0x0, 0xba) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x414200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2.676206053s ago: executing program 6 (id=1140): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x2b, 0x9, 0xffffffffd0065de0, 0x1, 0x6, 0x5, 0x9, 0x0, 0x0, 0x35, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1fa2686a4f86dfe9cb1fb0349360bf8f5db2dae158990b10dc621239da799549651efc9b4d3ca52fcfc0cef45b86a937e1e7e77546919d6b2544ed633ed9c75b0624c6de3fa8bfd5960cd49b80042685ab73f9f5b1edabf6919fc972f957275c3c32d30b61e872bee6d76165d2a4e497774a27d013cef5fc87644a8f972b21a16c9d3fe9032874edbfc7e28f54c5500709062c69bc8c233fec9c88c8500b328166c3d47521c2047ee422bd5a96d2704c15d0d4d9fd0979bdd4150dc4928f"]) read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffffff, &(0x7f0000002240)='./file0\x00', 0x2000, 0x10, 0x0) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x800007fffffff, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x2, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x1, 0x0, r8, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r9}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setuid(r4) 2.675960853s ago: executing program 1 (id=1141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) (async) r3 = syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) syz_usb_disconnect(r3) (async, rerun: 64) syz_usb_control_io$uac3(r3, &(0x7f00000003c0)={0x14, &(0x7f0000000180)={0x0, 0x2, 0x14, {0x14, 0x1, "b2b7d7cd0314ea1c65cb86d9f50c87619b9b"}}, &(0x7f00000002c0)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "0d09376a6beaa238fdeec3aa6f0af10867ebc544ee6121801626151d0a5207511dda227eb956b8cdcc402240e83430ab3e10c2344cd94f6130800855bc8219e579279fdda6841731d37f93ea1c52c1faeba769f5c4454b6187389a279b0955191f0d151dc5c7cadf7e161dcd54ca787918a9095609a55b68804d7f7b3de2c0ac2f8d8dbdadb57ee8b983b1e008e79b7b38ec973c77e1a4de762167f4875d65e0acbaf3e063103128fb6c54d74e0a70de6400fda4daf3cd859ca80719e214d6e5627b"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000400)={0x40, 0x8, 0xcf, "a9d1efb655fc3ab2b99dac2141cf41c1071736e8dd35858529465a45d7546f08f04dbdfdc9f180046c3d3bf4b4c739ecf8b2113fc282f8860041c91b7a6c8d4be17c59b093bbfe5f0273e6e2e62e4f229934e266db8b6d00e1c9cecd41f8940c381a9db0908c1640ce49b23c324cf63af953abd542e235bb699a460392cf00725092f0b8d1282262c24227812f481060917b74762241f4d117870e8447ae2b5272e19c5c88ae1f71e76923e90f45a6578e37b78b0d6ffe633bd98488cb6435cbe51147f281088be1dc003177ee18f9"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x81, 0x2, "c39f"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "321c93"}, &(0x7f0000000600)={0x20, 0x83, 0x2, 'U\x00'}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "0816c3fc"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "8394f2"}}) (rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="48b803000000000000000f23c80f21f8350400e0000f23f8b90f080000b80e000000ba000000000f3066b822000f00d8f4b9920000400f320fc7bf74ea0000470f01df66bad10466ed3ef0440fba2ba0b9aa0b0000b800500000ba000000000f30", 0x61}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.334290143s ago: executing program 7 (id=1143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="65ed", 0x2, 0x24000000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) 1.24827605s ago: executing program 7 (id=1144): socket$netlink(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x9c72, 0x2, 0x7, 0x367}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0xffffffff80000000) memfd_secret(0x80000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xd82, 0x0) 1.247920021s ago: executing program 7 (id=1145): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x26f, 0x0, 0x8000000008100000}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x8000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x200005, 0x6, 0x0, 0x2, {0x1, 0x17a, 0x40000000103, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0xa000, 0x4, 0xee00, 0x0, 0x403, 0x3}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f02) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 599.217476ms ago: executing program 7 (id=1146): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b86, 0x0, {0x9, 0x21, 0x1, 0xc0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 436.41821ms ago: executing program 2 (id=1147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x240042, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'tunl0\x00', 0x6bf1c2d5adba8c32}) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xc0d8, 0x0, 0x0, 0x0, 0xf}, 0x30, 0xf482b87792e75d7c) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x10a20, 0xd, 0x1, 0x141ba, 0x4}, 0x30, 0x1) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x2) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x204031, r0, 0xec772000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x168010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @local}) writev(r2, &(0x7f0000003480)=[{&(0x7f0000000280)="2e1221b21ab601c494d3ffff0000963d86dd9d90491c00300600d7fb34391b6809c7f978ccc9055704dbb8a13d6d2183499c3a0a9070ec124555", 0x3a}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60d0981edf3b6733fc75059ac8f1efa749", 0x22}, {&(0x7f0000002480)="f562db316d5519de70f9c26127595079084f", 0x12}], 0x3) 356.357936ms ago: executing program 2 (id=1148): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc1) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040), 0x4) (async) 355.980087ms ago: executing program 2 (id=1149): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/kmsg\x00', 0x8000, 0x24) lseek(r0, 0x0, 0x1) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents']) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r3, &(0x7f0000000000)='3', 0x4e) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1ffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {0x0}], 0x2}, 0x9a}], 0x4, 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000180)=[{{}, 0x3, 0x2}, {{0x77359400}, 0x2, 0x6, 0x2}, {{r5, r6/1000+10000}, 0x2, 0x18, 0x7}, {{0x0, 0x2710}, 0x11, 0x7, 0xfffffff8}, {{0x0, 0x2710}, 0x2, 0x6, 0x7f}], 0x78) (async) statx(r2, &(0x7f0000000000)='./dev\x00', 0x2000, 0x200, &(0x7f0000000500)) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) (async) setns(0xffffffffffffffff, 0x20000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 323.361973ms ago: executing program 2 (id=1150): r0 = inotify_init1(0x800) close(r0) 286.642841ms ago: executing program 2 (id=1151): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x48040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000440)={0xc00000000000, 0x6, 0x33f8, 0xdce, 0x2}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, &(0x7f0000000180)) r6 = dup(r4) syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d13, 0x2, 0x0, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x50033fff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb, 0x40, 0x1, 0x233}}], 0x1, 0x0, 0x0) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r7, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r7], 0x0) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000000b80)={0x2c, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$uac3(r8, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0xa, 0x50, {0x50, 0x30, "b6ff804636633553b54f5798eb0a09184ef0c15d8b4423273ee0bc99d9bc50c5127553c219355b750f4ce6a7cee3de5c13d109672545045c543e1007ec243de31e49499452d1724fdcafa0c51143"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc22}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0x16, 0xb9, "24690d960a2c111edd0d42635318976a7ae5703b6ef659e98db1c70c1eae956a92eecb6e2e320857fa363fc6222f36a873e88aa8606bc26d38962e2afc6a9b3fca496281130d9cc0dbb339cd80d865e391fe5ba6a74d62faf349092d81bd19f823f11372a67d7ff7725a115b688f616b988834409e450ee622e89608b8e8077617c2324eaa112831c8af52971d5cf7ca38415adbdafc91c444c381460d87abc612005ee8758e8665d29ffc8b1004dc6ba3c5628b2c7485e0a1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x81, 0x2, "865e"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "64bb"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "260df7"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "5809951b"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "2fec6d"}}) 422.58碌s ago: executing program 7 (id=1152): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5825040, &(0x7f0000000100)={[{}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) gettid() r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ipv6_route\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 0s ago: executing program 7 (id=1153): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) mkdir(&(0x7f0000000140)='./control\x00', 0x191) rmdir(&(0x7f0000000100)='./control\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000340)={0x0, 0xaa11, 0x400, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x4000002, 0x30c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x40, 0x3, 0x322, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0xc5, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7a, 0x44, 0x0, 0x20a, 0x0, r3}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x10, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r8, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000040)) ioctl$FS_IOC_GETFSSYSFSPATH(r11, 0x80811501, &(0x7f00000003c0)={0x80}) kernel console output (not intermixed with test programs): t: fail, usb_gadget_register_driver returned -16 [ 103.268988][ T31] usb 6-1: 0:1 : does not exist [ 103.273889][ T31] usb 6-1: 0:2 : does not exist [ 103.278935][ T31] usb 6-1: unit 0 not found! [ 103.285245][ T631] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 103.295784][ T631] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 103.310129][ T631] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 103.323504][ T631] usb 3-1: USB disconnect, device number 35 [ 103.336830][ T1927] udevd[1927]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 103.542500][ T36] audit: type=1400 audit(1790456043.771:438): avc: denied { setattr } for pid=2555 comm="syz.5.629" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 103.606618][ T36] audit: type=1400 audit(1790456043.831:439): avc: denied { write } for pid=2563 comm="syz.5.633" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 103.608065][ T2564] [ 103.646170][ T2566] netlink: 'syz.5.634': attribute type 16 has an invalid length. [ 103.656829][ T2566] netlink: 'syz.5.634': attribute type 3 has an invalid length. [ 103.664944][ T2566] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.634'. [ 103.685991][ T2566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.698596][ T2566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.753036][ T36] audit: type=1400 audit(1790456043.981:440): avc: denied { mounton } for pid=2571 comm="syz.4.636" path="/64/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 103.777131][ T475] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 103.823628][ T2575] FAULT_INJECTION: forcing a failure. [ 103.823628][ T2575] name failslab, interval 1, probability 0, space 0, times 0 [ 103.836596][ T2575] CPU: 1 UID: 0 PID: 2575 Comm: syz.2.637 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 103.836619][ T2575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.836626][ T2575] Call Trace: [ 103.836632][ T2575] [ 103.836637][ T2575] __dump_stack+0x21/0x30 [ 103.836657][ T2575] dump_stack_lvl+0x140/0x1c0 [ 103.836671][ T2575] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.836686][ T2575] dump_stack+0x19/0x20 [ 103.836699][ T2575] should_fail_ex+0x3c2/0x510 [ 103.836711][ T2575] ? io_alloc_async_data+0x93/0x1b0 [ 103.836724][ T2575] should_failslab+0xac/0x100 [ 103.836736][ T2575] __kmalloc_noprof+0x69/0x510 [ 103.836748][ T2575] ? io_alloc_async_data+0x93/0x1b0 [ 103.836761][ T2575] io_alloc_async_data+0x93/0x1b0 [ 103.836774][ T2575] ? io_prep_rw+0x56a/0x9c0 [ 103.836786][ T2575] io_prep_rw+0x57d/0x9c0 [ 103.836797][ T2575] io_read_mshot_prep+0x76/0x150 [ 103.836809][ T2575] io_submit_sqes+0x9d7/0x1b70 [ 103.836824][ T2575] __se_sys_io_uring_enter+0x302/0x25c0 [ 103.836838][ T2575] ? _raw_spin_unlock+0x45/0x60 [ 103.836849][ T2575] ? __schedule+0x149e/0x20b0 [ 103.836859][ T2575] ? __x64_sys_io_uring_enter+0x110/0x110 [ 103.836874][ T2575] ? __sched_text_start+0x10/0x10 [ 103.836884][ T2575] ? arch_do_signal_or_restart+0x2de/0x700 [ 103.836894][ T2575] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 103.836904][ T2575] ? xfd_validate_state+0x68/0x140 [ 103.836918][ T2575] __x64_sys_io_uring_enter+0xe9/0x110 [ 103.836932][ T2575] x64_sys_call+0x2d28/0x2ee0 [ 103.836941][ T2575] do_syscall_64+0x57/0xf0 [ 103.836953][ T2575] ? clear_bhb_loop+0x50/0xa0 [ 103.836966][ T2575] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.836977][ T2575] RIP: 0033:0x7fecb4f9e159 [ 103.836987][ T2575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.836996][ T2575] RSP: 002b:00007fecb5ee6f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 103.837009][ T2575] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fecb4f9e159 [ 103.837017][ T2575] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 103.837023][ T2575] RBP: 00000000000002c1 R08: 0000000000000000 R09: 0000000000000008 [ 103.837029][ T2575] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000a0 [ 103.837036][ T2575] R13: 00000000000000a8 R14: 0000000000000f39 R15: 0000000000000001 [ 103.837043][ T2575] [ 104.081330][ T475] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 104.091782][ T475] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 104.103878][ T475] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 104.113201][ T475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.121401][ T475] usb 2-1: Product: syz [ 104.125799][ T475] usb 2-1: Manufacturer: syz [ 104.130566][ T475] usb 2-1: SerialNumber: syz [ 104.140083][ T475] usb 2-1: config 0 descriptor?? [ 104.145398][ T2554] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 104.152965][ T2554] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 104.229839][ T2588] mmap: syz.5.639 (2588) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.367702][ T2554] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 104.375197][ T2554] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 105.299909][ T475] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 105.310625][ T475] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, ae:c0:5b:ae:b4:63 [ 105.323864][ T475] usb 2-1: USB disconnect, device number 37 [ 105.330629][ T475] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 105.761102][ T2658] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 105.768717][ T2658] SELinux: failed to load policy [ 105.812438][ T2662] netlink: 372 bytes leftover after parsing attributes in process `syz.1.649'. [ 106.064042][ T2669] FAULT_INJECTION: forcing a failure. [ 106.064042][ T2669] name failslab, interval 1, probability 0, space 0, times 0 [ 106.076754][ T2669] CPU: 1 UID: 0 PID: 2669 Comm: syz.1.651 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 106.076781][ T2669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.076792][ T2669] Call Trace: [ 106.076797][ T2669] [ 106.076803][ T2669] __dump_stack+0x21/0x30 [ 106.076829][ T2669] dump_stack_lvl+0x140/0x1c0 [ 106.076848][ T2669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.076869][ T2669] ? __cfi_futex_wake_mark+0x10/0x10 [ 106.076886][ T2669] dump_stack+0x19/0x20 [ 106.076904][ T2669] should_fail_ex+0x3c2/0x510 [ 106.076923][ T2669] should_failslab+0xac/0x100 [ 106.076943][ T2669] __kmalloc_cache_noprof+0x41/0x470 [ 106.076961][ T2669] ? file_f_owner_allocate+0x92/0x220 [ 106.076980][ T2669] file_f_owner_allocate+0x92/0x220 [ 106.076998][ T2669] do_fcntl+0xe2e/0x1580 [ 106.077015][ T2669] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 106.077033][ T2669] ? check_fcntl_cmd+0xb0/0xb0 [ 106.077050][ T2669] ? mutex_unlock+0x90/0x240 [ 106.077073][ T2669] ? bpf_lsm_file_fcntl+0xd/0x20 [ 106.077098][ T2669] ? security_file_fcntl+0x3e/0x110 [ 106.077115][ T2669] __se_sys_fcntl+0xe4/0x180 [ 106.077133][ T2669] __x64_sys_fcntl+0x7f/0xa0 [ 106.077150][ T2669] x64_sys_call+0x1cb3/0x2ee0 [ 106.077166][ T2669] do_syscall_64+0x57/0xf0 [ 106.077181][ T2669] ? clear_bhb_loop+0x50/0xa0 [ 106.077201][ T2669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.077222][ T2669] RIP: 0033:0x7ff6f119e159 [ 106.077237][ T2669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.077251][ T2669] RSP: 002b:00007ff6f20a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 106.077270][ T2669] RAX: ffffffffffffffda RBX: 00007ff6f1425fa0 RCX: 00007ff6f119e159 [ 106.077283][ T2669] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 106.077294][ T2669] RBP: 00007ff6f123506b R08: 0000000000000000 R09: 0000000000000000 [ 106.077304][ T2669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.077313][ T2669] R13: 00007ff6f1426038 R14: 00007ff6f1425fa0 R15: 00007fffef3b6f18 [ 106.077376][ T2669] [ 106.357169][ T475] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 106.467343][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 106.467357][ T36] audit: type=1400 audit(1790456046.701:443): avc: denied { read } for pid=2673 comm="syz.2.653" path="socket:[23319]" dev="sockfs" ino=23319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.497495][ T36] audit: type=1400 audit(1790456046.701:444): avc: denied { setopt } for pid=2673 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.533811][ T2678] ip6_tunnel: non-ECT from 0000:0000:0a00:0000:0000:ffff:ac14:1411 with DS=0x31 [ 106.538247][ T475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.553846][ T475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.563740][ T475] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.576716][ T475] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.585909][ T475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.597216][ T475] usb 2-1: config 0 descriptor?? [ 106.737184][ T31] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 106.771809][ T2685] FAULT_INJECTION: forcing a failure. [ 106.771809][ T2685] name failslab, interval 1, probability 0, space 0, times 0 [ 106.784982][ T2685] CPU: 1 UID: 0 PID: 2685 Comm: syz.5.658 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 106.785012][ T2685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.785019][ T2685] Call Trace: [ 106.785029][ T2685] [ 106.785035][ T2685] __dump_stack+0x21/0x30 [ 106.785056][ T2685] dump_stack_lvl+0x140/0x1c0 [ 106.785074][ T2685] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.785101][ T2685] dump_stack+0x19/0x20 [ 106.785123][ T2685] should_fail_ex+0x3c2/0x510 [ 106.785145][ T2685] should_failslab+0xac/0x100 [ 106.785162][ T2685] kmem_cache_alloc_noprof+0x42/0x410 [ 106.785173][ T2685] ? getname_flags+0xcc/0x6b0 [ 106.785184][ T2685] ? __kasan_check_read+0x15/0x20 [ 106.785194][ T2685] ? futex_wake+0x627/0x950 [ 106.785203][ T2685] getname_flags+0xcc/0x6b0 [ 106.785214][ T2685] vfs_fstatat+0xcb/0x1d0 [ 106.785235][ T2685] __se_sys_newfstatat+0x127/0x3c0 [ 106.785258][ T2685] ? __x64_sys_newfstatat+0xc0/0xc0 [ 106.785315][ T2685] ? vfs_write+0xbcf/0xfd0 [ 106.785327][ T2685] ? do_futex+0x32a/0x510 [ 106.785341][ T2685] ? __cfi_do_futex+0x10/0x10 [ 106.785354][ T2685] ? mutex_unlock+0x90/0x240 [ 106.785377][ T2685] ? xfd_validate_state+0x68/0x140 [ 106.785402][ T2685] ? __kasan_check_write+0x18/0x20 [ 106.785420][ T2685] ? fpregs_restore_userregs+0x11c/0x260 [ 106.785441][ T2685] __x64_sys_newfstatat+0x9f/0xc0 [ 106.785453][ T2685] x64_sys_call+0x1821/0x2ee0 [ 106.785463][ T2685] do_syscall_64+0x57/0xf0 [ 106.785472][ T2685] ? clear_bhb_loop+0x50/0xa0 [ 106.785484][ T2685] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.785496][ T2685] RIP: 0033:0x7fdf0839e159 [ 106.785509][ T2685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.785524][ T2685] RSP: 002b:00007fdf09207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 106.785544][ T2685] RAX: ffffffffffffffda RBX: 00007fdf08625fa0 RCX: 00007fdf0839e159 [ 106.785558][ T2685] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 106.785572][ T2685] RBP: 00007fdf0843506b R08: 0000000000000000 R09: 0000000000000000 [ 106.785583][ T2685] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 106.785590][ T2685] R13: 00007fdf08626038 R14: 00007fdf08625fa0 R15: 00007fff8a5dec98 [ 106.785598][ T2685] [ 107.043469][ T2688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.052442][ T2688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.061648][ T2688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.070312][ T2688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.078694][ T2688] netlink: 72 bytes leftover after parsing attributes in process `syz.5.659'. [ 107.098305][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.108724][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.123201][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 107.132528][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.140561][ T31] usb 3-1: Product: syz [ 107.144732][ T31] usb 3-1: Manufacturer: syz [ 107.149401][ T31] usb 3-1: SerialNumber: syz [ 107.155441][ T31] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 107.219731][ T475] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 107.228961][ T475] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 107.235954][ T2690] udevd[2690]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 107.367131][ T475] usb 3-1: USB disconnect, device number 36 [ 107.678472][ T2692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.687188][ T2692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.205245][ T36] audit: type=1400 audit(1790456048.431:445): avc: denied { append } for pid=2702 comm="syz.5.663" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.657160][ T31] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 108.862014][ T2715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'. [ 108.924360][ T2721] cgroup: fork rejected by pids controller in /syz2 [ 109.024821][ T36] audit: type=1400 audit(1790456049.251:446): avc: denied { relabelfrom } for pid=2826 comm="syz.5.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.045936][ T36] audit: type=1400 audit(1790456049.251:447): avc: denied { relabelto } for pid=2826 comm="syz.5.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.127716][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.133750][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.139970][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.150043][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.159178][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.167347][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.174066][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.184664][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.185231][ T2837] loop8: detected capacity change from 0 to 16384 [ 109.197599][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.216398][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.224683][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.241503][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.249212][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.256631][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.263675][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.277419][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.296132][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.307467][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.324097][ T423] bridge_slave_1: left allmulticast mode [ 109.327249][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.338108][ T423] bridge_slave_1: left promiscuous mode [ 109.344144][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.352144][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.358862][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.365098][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.365943][ T423] bridge_slave_0: left allmulticast mode [ 109.377347][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.377872][ T423] bridge_slave_0: left promiscuous mode [ 109.389709][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.397341][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.401526][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.410774][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.427015][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.433427][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.443254][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.454418][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.461222][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.467551][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.478835][ T423] bridge0 (unregistering): left allmulticast mode [ 109.485558][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.498215][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.526506][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.553717][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.573602][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.586501][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.593004][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.598984][ T423] tipc: Disabling bearer [ 109.604485][ T423] tipc: Disabling bearer [ 109.610453][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.616354][ T423] tipc: Left network mode [ 109.630246][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.630856][ T2845] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.643479][ T2845] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.643796][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.650748][ T2845] bridge_slave_0: entered allmulticast mode [ 109.662869][ T2845] bridge_slave_0: entered promiscuous mode [ 109.669503][ T2845] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.669742][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.676534][ T2845] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.689629][ T2845] bridge_slave_1: entered allmulticast mode [ 109.695916][ T2845] bridge_slave_1: entered promiscuous mode [ 109.701934][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.708576][ T423] veth1_macvtap: left promiscuous mode [ 109.714128][ T423] veth0_vlan: left promiscuous mode [ 109.719967][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.726003][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.738415][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.756649][ T2850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.766551][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.777325][ T2850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.802155][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.811758][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.818061][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.824204][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.830232][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.836396][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.846467][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.856625][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.870184][ T2845] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.877276][ T2845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.877507][ T631] usb 2-1: USB disconnect, device number 38 [ 109.884603][ T2845] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.897459][ T2845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.905596][ T2834] overlayfs: failed to resolve 'upper': -2 [ 109.921848][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.932356][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.949968][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.957075][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.966706][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.973979][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.018853][ T2845] veth0_vlan: entered promiscuous mode [ 110.031459][ T2845] veth1_macvtap: entered promiscuous mode [ 110.113552][ T2864] kvm: kvm [2863]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 110.117689][ T2865] batadv_slave_0: entered promiscuous mode [ 110.314573][ T2870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.323276][ T2870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.332458][ T36] audit: type=1400 audit(1790456050.561:448): avc: denied { map } for pid=2869 comm="syz.5.680" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.357151][ T631] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 110.529348][ T36] audit: type=1400 audit(1790456050.761:449): avc: denied { bind } for pid=2871 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.583598][ T2872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 110.594457][ T36] audit: type=1400 audit(1790456050.821:450): avc: denied { name_bind } for pid=2871 comm="syz.2.681" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 110.887645][ T2859] batadv_slave_0: left promiscuous mode [ 110.911321][ T31] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 111.057143][ T31] usb 3-1: device descriptor read/64, error -71 [ 111.207209][ T631] usb 2-1: device descriptor read/64, error -71 [ 111.297147][ T31] usb 3-1: device descriptor read/64, error -71 [ 111.447177][ T631] usb 2-1: device descriptor read/64, error -71 [ 111.537145][ T31] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 111.687188][ T631] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 111.694839][ T31] usb 3-1: device descriptor read/64, error -71 [ 111.837208][ T631] usb 2-1: device descriptor read/64, error -71 [ 111.947211][ T31] usb 3-1: device descriptor read/64, error -71 [ 111.955109][ T36] audit: type=1400 audit(1790456052.181:451): avc: denied { read } for pid=2899 comm="syz.5.689" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.978074][ T36] audit: type=1400 audit(1790456052.181:452): avc: denied { open } for pid=2899 comm="syz.5.689" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.006353][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 112.015168][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 112.030262][ T2901] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 112.057329][ T31] usb usb3-port1: attempt power cycle [ 112.077310][ T631] usb 2-1: device descriptor read/64, error -71 [ 112.107521][ T36] audit: type=1400 audit(1790456052.341:453): avc: denied { execute } for pid=2903 comm="syz.5.690" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.177876][ T2906] netlink: 40 bytes leftover after parsing attributes in process `syz.5.691'. [ 112.187376][ T631] usb usb2-port1: attempt power cycle [ 112.203763][ T2908] 9pnet_fd: Insufficient options for proto=fd [ 112.407206][ T31] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 112.438143][ T31] usb 3-1: device descriptor read/8, error -71 [ 112.527151][ T631] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 112.548218][ T631] usb 2-1: device descriptor read/8, error -71 [ 112.568153][ T31] usb 3-1: device descriptor read/8, error -71 [ 112.678133][ T631] usb 2-1: device descriptor read/8, error -71 [ 112.807141][ T31] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 112.828201][ T31] usb 3-1: device descriptor read/8, error -71 [ 112.917168][ T631] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 112.938155][ T631] usb 2-1: device descriptor read/8, error -71 [ 112.958207][ T31] usb 3-1: device descriptor read/8, error -71 [ 113.067266][ T31] usb usb3-port1: unable to enumerate USB device [ 113.074748][ T631] usb 2-1: device descriptor read/8, error -71 [ 113.187403][ T631] usb usb2-port1: unable to enumerate USB device [ 113.203769][ T2918] GUP no longer grows the stack in syz.5.695 (2918): 200000005000-200000008000 (200000004000) [ 113.214279][ T2918] CPU: 1 UID: 0 PID: 2918 Comm: syz.5.695 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 113.214311][ T2918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.214322][ T2918] Call Trace: [ 113.214328][ T2918] [ 113.214335][ T2918] __dump_stack+0x21/0x30 [ 113.214365][ T2918] dump_stack_lvl+0x140/0x1c0 [ 113.214385][ T2918] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.214407][ T2918] ? find_vma+0xd3/0x120 [ 113.214427][ T2918] dump_stack+0x19/0x20 [ 113.214444][ T2918] fixup_user_fault+0x616/0x6a0 [ 113.214459][ T2918] fault_in_user_writeable+0x75/0xe0 [ 113.214474][ T2918] futex_lock_pi+0x2ed/0xa70 [ 113.214488][ T2918] ? futex_unqueue+0x136/0x160 [ 113.214501][ T2918] ? __cfi_futex_lock_pi+0x10/0x10 [ 113.214514][ T2918] ? __cfi_futex_wake_mark+0x10/0x10 [ 113.214524][ T2918] ? __cfi_futex_wake_mark+0x10/0x10 [ 113.214535][ T2918] do_futex+0x270/0x510 [ 113.214547][ T2918] ? __cfi_do_futex+0x10/0x10 [ 113.214559][ T2918] ? __vm_munmap+0x30d/0x3d0 [ 113.214570][ T2918] __se_sys_futex+0x13c/0x320 [ 113.214582][ T2918] ? __x64_sys_futex+0x110/0x110 [ 113.214595][ T2918] ? __kasan_check_write+0x18/0x20 [ 113.214606][ T2918] __x64_sys_futex+0xe9/0x110 [ 113.214618][ T2918] x64_sys_call+0x227f/0x2ee0 [ 113.214627][ T2918] do_syscall_64+0x57/0xf0 [ 113.214637][ T2918] ? clear_bhb_loop+0x50/0xa0 [ 113.214649][ T2918] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.214663][ T2918] RIP: 0033:0x7fdf0839e159 [ 113.214673][ T2918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.214682][ T2918] RSP: 002b:00007fdf09207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.214695][ T2918] RAX: ffffffffffffffda RBX: 00007fdf08625fa0 RCX: 00007fdf0839e159 [ 113.214703][ T2918] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 113.214711][ T2918] RBP: 00007fdf0843506b R08: 0000000000000000 R09: 0000000000000001 [ 113.214718][ T2918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.214725][ T2918] R13: 00007fdf08626038 R14: 00007fdf08625fa0 R15: 00007fff8a5dec98 [ 113.214733][ T2918] [ 113.215652][ T2918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.438903][ T2918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.970639][ T36] audit: type=1400 audit(1790456054.201:454): avc: denied { write } for pid=2922 comm="syz.4.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.060169][ T2927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.697'. [ 114.069847][ T36] audit: type=1400 audit(1790456054.301:455): avc: denied { create } for pid=2926 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.142538][ T2939] create_pit_timer: 4 callbacks suppressed [ 114.142551][ T2939] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 114.168127][ T2939] kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 114.176693][ T2939] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 114.193675][ T2939] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 114.202014][ T2939] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 114.210501][ T2939] kvm: requested 126552 ns i8254 timer period limited to 200000 ns [ 114.219009][ T2939] kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 114.227861][ T2939] kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 114.237830][ T2939] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 114.246442][ T2939] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 114.347229][ T31] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 114.477172][ T31] usb 2-1: device descriptor read/64, error -71 [ 114.717185][ T31] usb 2-1: device descriptor read/64, error -71 [ 114.967191][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 115.005978][ T2948] ip6_tunnel: non-ECT from 0000:0000:0a00:0000:0000:ffff:ac14:1411 with DS=0x31 [ 115.107157][ T31] usb 2-1: device descriptor read/64, error -71 [ 115.347179][ T31] usb 2-1: device descriptor read/64, error -71 [ 115.457239][ T31] usb usb2-port1: attempt power cycle [ 115.487182][ T631] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 115.617163][ T631] usb 3-1: device descriptor read/64, error -71 [ 115.797176][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 115.818158][ T31] usb 2-1: device descriptor read/8, error -71 [ 115.857229][ T631] usb 3-1: device descriptor read/64, error -71 [ 115.958137][ T31] usb 2-1: device descriptor read/8, error -71 [ 116.097159][ T631] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 116.197170][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 116.218259][ T31] usb 2-1: device descriptor read/8, error -71 [ 116.227208][ T631] usb 3-1: device descriptor read/64, error -71 [ 116.348131][ T31] usb 2-1: device descriptor read/8, error -71 [ 116.457299][ T31] usb usb2-port1: unable to enumerate USB device [ 116.467203][ T631] usb 3-1: device descriptor read/64, error -71 [ 116.577327][ T631] usb usb3-port1: attempt power cycle [ 116.917209][ T631] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 116.938157][ T631] usb 3-1: device descriptor read/8, error -71 [ 117.068301][ T631] usb 3-1: device descriptor read/8, error -71 [ 117.308116][ T631] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 117.328223][ T631] usb 3-1: device descriptor read/8, error -71 [ 117.356969][ T36] audit: type=1400 audit(1790456057.581:456): avc: denied { read write } for pid=2963 comm="syz.4.711" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 117.380264][ T36] audit: type=1400 audit(1790456057.581:457): avc: denied { open } for pid=2963 comm="syz.4.711" path="/72/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 117.458265][ T631] usb 3-1: device descriptor read/8, error -71 [ 117.527156][ T65] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 117.567258][ T631] usb usb3-port1: unable to enumerate USB device [ 117.677163][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 117.683456][ T65] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 117.691630][ T65] usb 2-1: config 0 has no interface number 0 [ 117.697788][ T65] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 117.708061][ T65] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 155 [ 117.719495][ T65] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=8e.2d [ 117.728941][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.736934][ T65] usb 2-1: Product: syz [ 117.741145][ T65] usb 2-1: Manufacturer: syz [ 117.745739][ T65] usb 2-1: SerialNumber: syz [ 117.751181][ T65] usb 2-1: config 0 descriptor?? [ 117.756391][ T2962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.763635][ T2962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.999661][ T9] usb 2-1: USB disconnect, device number 47 [ 118.185206][ T2968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.347144][ T2978] incfs: Backing dir is not set, filesystem can't be mounted. [ 118.354687][ T2978] incfs: mount failed -2 [ 118.359531][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.368784][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.378198][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.387051][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.396265][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.405483][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.414643][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.423883][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.433060][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.442237][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.507709][ T2982] netlink: 'syz.1.716': attribute type 16 has an invalid length. [ 118.563293][ T2989] tipc: Started in network mode [ 118.568251][ T2989] tipc: Node identity ac14140f, cluster identity 4711 [ 118.575121][ T2989] tipc: New replicast peer: 255.255.255.255 [ 118.582368][ T2989] tipc: Enabled bearer , priority 10 [ 118.637681][ T3002] rust_binder: 3001:3002 got transaction to invalid handle 2 [ 118.645085][ T3002] rust_binder: 3001:3002 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 118.655291][ T9] rust_binder: 3001: undelivered TRANSACTION_ERROR: 29201 [ 118.715878][ T36] audit: type=1400 audit(1790456058.941:458): avc: denied { bind } for pid=3009 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.800364][ T36] audit: type=1400 audit(1790456059.031:459): avc: denied { map } for pid=3020 comm="syz.2.727" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.917224][ T9] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 119.057241][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.129415][ T3040] ./dev/sda1: Can't lookup blockdev [ 119.136219][ T3043] ./dev/sda1: Can't lookup blockdev [ 119.167140][ T65] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 119.297154][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.338224][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.349308][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.359403][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.372597][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.381808][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.397164][ T65] usb 3-1: config 0 descriptor?? [ 119.537142][ T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 119.667133][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.707175][ T631] tipc: Node number set to 2886997007 [ 119.805300][ T65] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 119.814130][ T65] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 119.820546][ T3052] udevd[3052]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 119.907401][ T9] usb 2-1: device descriptor read/64, error -71 [ 120.017251][ T9] usb usb2-port1: attempt power cycle [ 120.357140][ T9] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 120.378168][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.508149][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.747148][ T9] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 120.768128][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.898130][ T9] usb 2-1: device descriptor read/8, error -71 [ 121.007229][ T9] usb usb2-port1: unable to enumerate USB device [ 121.097221][ C1] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 122.137158][ T631] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 122.287528][ T631] usb 3-1: device firmware changed [ 122.292832][ T65] usb 3-1: USB disconnect, device number 45 [ 122.427146][ T65] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 122.562827][ T36] audit: type=1400 audit(1790456062.791:460): avc: denied { create } for pid=3073 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 122.582574][ T36] audit: type=1400 audit(1790456062.791:461): avc: denied { sys_admin } for pid=3073 comm="syz.1.742" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 122.589402][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.615389][ T65] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.624472][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.636758][ T65] usb 3-1: config 0 descriptor?? [ 122.657118][ T36] audit: type=1400 audit(1790456062.881:462): avc: denied { associate } for pid=3079 comm="syz.1.743" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 122.848726][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 122.857277][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 122.871222][ T65] usb 3-1: USB disconnect, device number 46 [ 123.093462][ T403] tipc: Subscription rejected, illegal request [ 123.287214][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 123.438129][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.449088][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 123.458166][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.466831][ T10] usb 3-1: config 0 descriptor?? [ 123.724268][ T36] audit: type=1400 audit(1790456063.951:463): avc: denied { sys_module } for pid=3102 comm="syz.1.751" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.765868][ T36] audit: type=1400 audit(1790456063.991:464): avc: denied { bind } for pid=3107 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.785097][ T36] audit: type=1400 audit(1790456063.991:465): avc: denied { name_bind } for pid=3107 comm="syz.1.753" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.805753][ T36] audit: type=1400 audit(1790456063.991:466): avc: denied { node_bind } for pid=3107 comm="syz.1.753" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 124.277555][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 124.284962][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 124.577058][ T9] usb 3-1: USB disconnect, device number 47 [ 124.577111][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 125.397153][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 125.548201][ T9] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 125.559484][ T9] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.572375][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.579012][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 125.588088][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.596591][ T9] usb 3-1: config 0 descriptor?? [ 126.012427][ T9] wacom 0003:056A:00B5.000C: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 126.022894][ T9] wacom 0003:056A:00B5.000C: hidraw0: USB HID v10.01 Device [HID 056a:00b5] on usb-dummy_hcd.2-1/input0 [ 126.027255][ T3119] udevd[3119]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 126.035592][ T9] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B5.000C/input/input18 [ 126.215373][ T9] usb 3-1: USB disconnect, device number 48 [ 126.750939][ T3126] netlink: 'syz.2.759': attribute type 13 has an invalid length. [ 126.828443][ T36] audit: type=1326 audit(1790456067.061:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3138 comm="syz.1.765" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6f119e159 code=0x0 [ 127.037143][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 127.188177][ T9] usb 3-1: config 0 has an invalid interface descriptor of length 7, skipping [ 127.197140][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.207359][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.216484][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 127.225562][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.234089][ T9] usb 3-1: config 0 descriptor?? [ 127.941235][ T3163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3163 comm=syz.1.772 [ 127.954792][ T3163] __nla_validate_parse: 55 callbacks suppressed [ 127.954807][ T3163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.772'. [ 127.985605][ T3167] /dev/nbd1: Can't lookup blockdev [ 128.027672][ T36] audit: type=1400 audit(1790456068.261:468): avc: denied { mount } for pid=3166 comm="syz.1.774" name="/" dev="ramfs" ino=25935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 129.112018][ T9] usb 6-1: USB disconnect, device number 11 [ 129.203849][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.211017][ T3180] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.218383][ T3180] bridge_slave_0: entered allmulticast mode [ 129.224793][ T3180] bridge_slave_0: entered promiscuous mode [ 129.239429][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.246554][ T3180] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.253703][ T3180] bridge_slave_1: entered allmulticast mode [ 129.260127][ T3180] bridge_slave_1: entered promiscuous mode [ 129.296544][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.303638][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.310974][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.318168][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.343076][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.350590][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.352585][ T3188] rust_binder: 3186:3188 got transaction with invalid offset [ 129.367644][ T3188] rust_binder: Failure in copy_transaction_data: EINVAL [ 129.367673][ T3188] rust_binder: 3186:3188 transaction call to 3186:0 failed EINVAL, code 0 size 0-768 [ 129.386909][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.394052][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.396258][ T9] rust_binder: 3186: undelivered TRANSACTION_ERROR: 29201 [ 129.401750][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.415443][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.438308][ T3180] veth0_vlan: entered promiscuous mode [ 129.449171][ T3180] veth1_macvtap: entered promiscuous mode [ 129.548059][ T3201] tipc: Started in network mode [ 129.552952][ T3201] tipc: Node identity 2000004, cluster identity 4711 [ 129.566033][ T3201] tipc: Node number set to 33554436 [ 129.621289][ T36] audit: type=1400 audit(1790456069.851:469): avc: denied { ioctl } for pid=3205 comm="syz.6.786" path="socket:[26176]" dev="sockfs" ino=26176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.646727][ T36] audit: type=1400 audit(1790456069.871:470): avc: denied { remount } for pid=3205 comm="syz.6.786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.680332][ T3210] overlayfs: failed to clone upperpath [ 129.792645][ T31] usb 3-1: USB disconnect, device number 49 [ 129.859677][ T36] audit: type=1400 audit(1790456070.091:471): avc: denied { read append } for pid=3214 comm="syz.2.789" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.907191][ T36] audit: type=1400 audit(1790456070.091:472): avc: denied { open } for pid=3214 comm="syz.2.789" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.955620][ T36] audit: type=1400 audit(1790456070.091:473): avc: denied { map } for pid=3214 comm="syz.2.789" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.003342][ T36] audit: type=1400 audit(1790456070.091:474): avc: denied { execute } for pid=3214 comm="syz.2.789" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.244126][ T3229] ip6gre0: mtu less than device minimum [ 130.252123][ T3229] netlink: 'syz.1.793': attribute type 12 has an invalid length. [ 130.439137][ T36] audit: type=1400 audit(1790456070.671:475): avc: denied { map } for pid=3248 comm="syz.6.800" path="/6/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.464974][ T36] audit: type=1400 audit(1790456070.671:476): avc: denied { execute } for pid=3248 comm="syz.6.800" path="/6/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.551535][ T36] audit: type=1400 audit(1790456070.781:477): avc: denied { accept } for pid=3252 comm="syz.6.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 130.706898][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.803'. [ 130.716797][ T3260] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 130.727029][ T3260] overlayfs: missing 'lowerdir' [ 130.732447][ T3260] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 131.252360][ T3272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.261268][ T3271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.497514][ T3283] netlink: 104 bytes leftover after parsing attributes in process `syz.6.810'. [ 131.810548][ T3297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.813'. [ 132.037149][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 132.187166][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 132.197786][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 132.206247][ T31] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 68, using maximum allowed: 30 [ 132.217011][ T31] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 132.229907][ T31] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.242145][ T31] usb 7-1: New USB device found, idVendor=0499, idProduct=103c, bcdDevice= 0.40 [ 132.251242][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.259304][ T31] usb 7-1: Product: syz [ 132.263472][ T31] usb 7-1: Manufacturer: 袣 [ 132.268012][ T31] usb 7-1: SerialNumber: syz [ 132.419568][ T3309] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 132.477779][ T31] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 132.497186][ T31] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 132.515242][ T31] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 132.525664][ T3317] netlink: 'syz.4.819': attribute type 4 has an invalid length. [ 132.528129][ T31] usb 7-1: USB disconnect, device number 2 [ 132.533699][ T3317] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.819'. [ 132.551489][ T1927] udevd[1927]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.663160][ T3322] netlink: 184 bytes leftover after parsing attributes in process `syz.4.820'. [ 133.010687][ T3332] syz.6.823 uses obsolete (PF_INET,SOCK_PACKET) [ 133.277615][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 133.304650][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 133.304664][ T36] audit: type=1326 audit(1790456073.531:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.2.826" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c9d99e159 code=0x0 [ 133.437133][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 133.443390][ T10] usb 7-1: config index 0 descriptor too short (expected 1060, got 36) [ 133.452149][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.463377][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.473548][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.486765][ T10] usb 7-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 133.496035][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.505051][ T10] usb 7-1: config 0 descriptor?? [ 133.713036][ T10] sony 0003:1345:3008.000D: unknown main item tag 0x0 [ 133.719977][ T10] sony 0003:1345:3008.000D: item fetching failed at offset 5/24 [ 133.728030][ T10] sony 0003:1345:3008.000D: parse failed [ 133.733890][ T10] sony 0003:1345:3008.000D: probe with driver sony failed with error -22 [ 133.736108][ T3345] FAULT_INJECTION: forcing a failure. [ 133.736108][ T3345] name failslab, interval 1, probability 0, space 0, times 0 [ 133.755494][ T3345] CPU: 1 UID: 0 PID: 3345 Comm: syz.2.828 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 133.755529][ T3345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.755542][ T3345] Call Trace: [ 133.755548][ T3345] [ 133.755556][ T3345] __dump_stack+0x21/0x30 [ 133.755588][ T3345] dump_stack_lvl+0x140/0x1c0 [ 133.755612][ T3345] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.755635][ T3345] ? ref_tracker_alloc+0x356/0x5b0 [ 133.755658][ T3345] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 133.755680][ T3345] ? __netlink_kernel_create+0x173/0x8a0 [ 133.755703][ T3345] ? fib_net_init+0x194/0x3a0 [ 133.755728][ T3345] dump_stack+0x19/0x20 [ 133.755750][ T3345] should_fail_ex+0x3c2/0x510 [ 133.755769][ T3345] ? __netlink_kernel_create+0x2bb/0x8a0 [ 133.755791][ T3345] should_failslab+0xac/0x100 [ 133.755814][ T3345] __kmalloc_noprof+0x69/0x510 [ 133.755833][ T3345] ? sock_init_data_uid+0x5da/0x870 [ 133.755852][ T3345] ? __netlink_kernel_create+0x2bb/0x8a0 [ 133.755887][ T3345] __netlink_kernel_create+0x2bb/0x8a0 [ 133.755911][ T3345] ? fib_default_rule_add+0x5c/0x430 [ 133.755933][ T3345] ? __cfi___netlink_kernel_create+0x10/0x10 [ 133.755956][ T3345] ? fib_default_rule_add+0x1f9/0x430 [ 133.755975][ T3345] ? __asan_memcpy+0x5a/0x80 [ 133.755994][ T3345] fib_net_init+0x194/0x3a0 [ 133.756017][ T3345] ? __cfi_fib_net_init+0x10/0x10 [ 133.756050][ T3345] ? __cfi_nl_fib_input+0x10/0x10 [ 133.756076][ T3345] ? devinet_init_net+0x34e/0x740 [ 133.756091][ T3345] ops_init+0x2ff/0x5d0 [ 133.756109][ T3345] ? __kasan_check_write+0x18/0x20 [ 133.756125][ T3345] ? rwsem_read_trylock+0x275/0x5a0 [ 133.756149][ T3345] setup_net+0x227/0x9b0 [ 133.756164][ T3345] ? copy_net_ns+0xa20/0xa20 [ 133.756179][ T3345] ? down_read_killable+0x7f/0x100 [ 133.756199][ T3345] ? __cfi_down_read_killable+0x10/0x10 [ 133.756221][ T3345] copy_net_ns+0x4fc/0xa20 [ 133.756235][ T3345] create_new_namespaces+0x390/0x6f0 [ 133.756271][ T3345] unshare_nsproxy_namespaces+0x124/0x180 [ 133.756299][ T3345] ksys_unshare+0x4f9/0x920 [ 133.756325][ T3345] ? __cfi_ksys_unshare+0x10/0x10 [ 133.756347][ T3345] ? __kasan_check_write+0x18/0x20 [ 133.756364][ T3345] __x64_sys_unshare+0x3c/0x50 [ 133.756385][ T3345] x64_sys_call+0x2998/0x2ee0 [ 133.756402][ T3345] do_syscall_64+0x57/0xf0 [ 133.756418][ T3345] ? clear_bhb_loop+0x50/0xa0 [ 133.756439][ T3345] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.756459][ T3345] RIP: 0033:0x7f1c9d99e159 [ 133.756475][ T3345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.756491][ T3345] RSP: 002b:00007f1c9c3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 133.756512][ T3345] RAX: ffffffffffffffda RBX: 00007f1c9dc25fa0 RCX: 00007f1c9d99e159 [ 133.756526][ T3345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 133.756539][ T3345] RBP: 00007f1c9da3506b R08: 0000000000000000 R09: 0000000000000000 [ 133.756551][ T3345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.756564][ T3345] R13: 00007f1c9dc26038 R14: 00007f1c9dc25fa0 R15: 00007ffef15b5fb8 [ 133.756586][ T3345] [ 134.068074][ T3334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.076897][ T3334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.080612][ T3348] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 134.094782][ T10] usb 7-1: USB disconnect, device number 3 [ 134.103725][ T36] audit: type=1400 audit(1790456074.321:486): avc: denied { relabelto } for pid=3347 comm="syz.1.829" name="cgroup" dev="tmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_exec_t:s0" [ 134.130560][ T36] audit: type=1400 audit(1790456074.321:487): avc: denied { associate } for pid=3347 comm="syz.1.829" name="cgroup" dev="tmpfs" ino=1284 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_exec_t:s0" [ 134.877172][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 135.050149][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 135.056880][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 135.059784][ T3374] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 135.066207][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.085109][ T10] usb 3-1: config 0 descriptor?? [ 135.094518][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 135.167799][ T36] audit: type=1400 audit(1790456075.401:488): avc: denied { audit_write } for pid=3379 comm="syz.1.838" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 135.174786][ T3383] fuse: Bad value for 'fd' [ 135.237724][ T36] audit: type=1400 audit(1790456075.471:489): avc: granted { setsecparam } for pid=3385 comm="syz.6.840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 135.290404][ T36] audit: type=1400 audit(1790456075.521:490): avc: denied { append } for pid=3387 comm="syz.6.841" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 135.302606][ T10] usb 3-1: Detected FT232A [ 135.322985][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.566022][ T36] audit: type=1400 audit(1790456075.791:491): avc: denied { read write } for pid=3180 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.590566][ T36] audit: type=1400 audit(1790456075.791:492): avc: denied { open } for pid=3180 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.616793][ T36] audit: type=1400 audit(1790456075.791:493): avc: denied { ioctl } for pid=3180 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.628073][ T3400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3400 comm=syz.6.844 [ 135.669220][ T36] audit: type=1400 audit(1790456075.901:494): avc: denied { create } for pid=3401 comm="syz.6.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.740428][ T3412] fuse: Bad value for 'fd' [ 135.784456][ T3414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 135.957814][ T3426] fuseblk: Bad value for 'user_id' [ 135.963108][ T3426] fuseblk: Bad value for 'user_id' [ 136.207135][ T3442] rust_binder: 3439:3442 got reply transaction with no transaction stack [ 136.219743][ T3442] rust_binder: 3439:3442 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 136.270299][ T3444] netlink: 'syz.1.856': attribute type 13 has an invalid length. [ 136.361832][ T3450] fuse: Bad value for 'fd' [ 136.519170][ T3466] netlink: 'syz.1.864': attribute type 4 has an invalid length. [ 136.537315][ T3466] netlink: 'syz.1.864': attribute type 5 has an invalid length. [ 136.566020][ T3466] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.864'. [ 136.611279][ T3466] tipc: Enabling of bearer rejected, already enabled [ 136.640007][ T3466] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 136.657412][ T3466] tipc: Enabled bearer , priority 10 [ 136.767508][ T3472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3472 comm=syz.1.866 [ 136.792760][ T3472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.866'. [ 136.992382][ T418] bridge_slave_1: left allmulticast mode [ 136.998163][ T418] bridge_slave_1: left promiscuous mode [ 137.003853][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.012951][ T418] bridge_slave_0: left allmulticast mode [ 137.018756][ T418] bridge_slave_0: left promiscuous mode [ 137.024453][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.130008][ T418] veth1_macvtap: left promiscuous mode [ 137.135619][ T418] veth0_vlan: left promiscuous mode [ 137.216537][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.223679][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.230929][ T3476] bridge_slave_0: entered allmulticast mode [ 137.237519][ T3476] bridge_slave_0: entered promiscuous mode [ 137.244885][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.251951][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.259089][ T3476] bridge_slave_1: entered allmulticast mode [ 137.265225][ T3476] bridge_slave_1: entered promiscuous mode [ 137.341711][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.348829][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.356104][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.363172][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.363820][ T3481] binder: Unknown parameter '瑈4-鸎t①蛥 1}0蜔SPH蚔n囬亏枟棚F 璲O' [ 137.470942][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.479260][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.508653][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.515772][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.560988][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.568081][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.637659][ T9] usb 3-1: USB disconnect, device number 50 [ 137.656015][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.677376][ T9] ftdi_sio 3-1:0.0: device disconnected [ 137.760795][ T3476] veth0_vlan: entered promiscuous mode [ 137.775170][ T3499] netlink: 'syz.2.877': attribute type 32 has an invalid length. [ 137.825347][ T3476] veth1_macvtap: entered promiscuous mode [ 137.922970][ T3505] bridge0: entered allmulticast mode [ 137.957996][ T3505] bridge0: left allmulticast mode [ 138.157212][ T475] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 138.237240][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 138.307833][ T36] kauditd_printk_skb: 1169 callbacks suppressed [ 138.307849][ T36] audit: type=1400 audit(1790456078.541:1664): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.309543][ T475] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.314120][ T36] audit: type=1400 audit(1790456078.541:1665): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.339406][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 138.351089][ T36] audit: type=1400 audit(1790456078.541:1666): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.374598][ T475] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.382350][ T36] audit: type=1400 audit(1790456078.541:1667): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.422567][ T475] usb 7-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 138.444449][ T31] usb 3-1: device descriptor read/64, error -71 [ 138.454410][ T475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.460559][ T36] audit: type=1400 audit(1790456078.541:1668): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.469731][ T475] usb 7-1: Product: syz [ 138.492881][ T36] audit: type=1400 audit(1790456078.571:1669): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.497638][ T475] usb 7-1: Manufacturer: syz [ 138.521747][ T36] audit: type=1400 audit(1790456078.581:1670): avc: denied { ioctl } for pid=3504 comm="syz.2.881" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.526812][ T475] usb 7-1: SerialNumber: syz [ 138.550639][ T36] audit: type=1400 audit(1790456078.651:1671): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.570252][ T475] usb 7-1: unsupported MDLM descriptors [ 138.592044][ T36] audit: type=1400 audit(1790456078.651:1672): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.629862][ T36] audit: type=1400 audit(1790456078.651:1673): avc: denied { ioctl } for pid=3501 comm="syz.6.880" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.656258][ T9] usb 8-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.42 [ 138.677142][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.685204][ T9] usb 8-1: Product: syz [ 138.697236][ T9] usb 8-1: Manufacturer: syz [ 138.704953][ T9] usb-storage 8-1:1.0: USB Mass Storage device detected [ 138.717131][ T31] usb 3-1: device descriptor read/64, error -71 [ 138.778613][ T3520] cgroup: fork rejected by pids controller in /syz1 [ 138.796200][ T3506] netlink: 124 bytes leftover after parsing attributes in process `syz.6.880'. [ 138.852648][ T3554] netlink: 124 bytes leftover after parsing attributes in process `syz.6.880'. [ 138.862238][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.877750][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.941706][ T2509] usb 7-1: USB disconnect, device number 4 [ 138.957137][ T31] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 139.097145][ T31] usb 3-1: device descriptor read/64, error -71 [ 139.347313][ T31] usb 3-1: device descriptor read/64, error -71 [ 139.386619][ T3598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 139.399444][ T3598] overlayfs: failed to clone upperpath [ 139.457640][ T31] usb usb3-port1: attempt power cycle [ 139.797168][ T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 139.839480][ T31] usb 3-1: device descriptor read/8, error -71 [ 139.969610][ T31] usb 3-1: device descriptor read/8, error -71 [ 140.162268][ T3597] 9pnet_fd: p9_fd_create_tcp (3597): problem connecting socket to 127.0.0.1 [ 140.217169][ T31] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 140.249523][ T31] usb 3-1: device descriptor read/8, error -71 [ 140.278120][ T3612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.891'. [ 140.287240][ T3612] netlink: 35 bytes leftover after parsing attributes in process `syz.1.891'. [ 140.296206][ T3612] netlink: 'syz.1.891': attribute type 6 has an invalid length. [ 140.304535][ T3612] netlink: 'syz.1.891': attribute type 4 has an invalid length. [ 140.326775][ T3612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.891'. [ 140.341746][ T3612] netlink: 35 bytes leftover after parsing attributes in process `syz.1.891'. [ 140.351869][ T3612] netlink: 'syz.1.891': attribute type 6 has an invalid length. [ 140.360328][ T3612] netlink: 'syz.1.891': attribute type 4 has an invalid length. [ 140.388614][ T31] usb 3-1: device descriptor read/8, error -71 [ 140.505028][ T31] usb usb3-port1: unable to enumerate USB device [ 140.631271][ T3632] ./dev/sda1: Can't lookup blockdev [ 140.887142][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 141.040292][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.073026][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.087108][ T31] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 141.087451][ T9] usb 8-1: USB disconnect, device number 2 [ 141.096229][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.140714][ T31] usb 7-1: config 0 descriptor?? [ 141.357516][ T3651] syz.7.902 (3651): attempted to duplicate a private mapping with mremap. This is not supported. [ 141.551665][ T3657] futex_wake_op: syz.7.905 tries to shift op by 144; fix this program [ 141.570999][ T3657] futex_wake_op: syz.7.905 tries to shift op by 144; fix this program [ 141.580168][ T3657] futex_wake_op: syz.7.905 tries to shift op by 144; fix this program [ 141.589379][ T3657] futex_wake_op: syz.7.905 tries to shift op by 144; fix this program [ 141.597886][ T3657] futex_wake_op: syz.7.905 tries to shift op by 144; fix this program [ 141.617611][ T3657] futex_wake_op: syz.7.905 tries to shift op by 144; fix this program [ 141.637117][ T631] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 141.777122][ T631] usb 3-1: device descriptor read/64, error -71 [ 141.871933][ T3675] ./dev/sda1: Can't lookup blockdev [ 141.943890][ T3678] netlink: 'syz.7.912': attribute type 4 has an invalid length. [ 142.024000][ T3680] fuse: Unknown parameter '??駖浐򄼪?薅]#鞢8纬 摡&昪]趗#仔3呉燊#k汁攽窉焜+榏po<1盙!鏉徔' [ 142.034871][ T631] usb 3-1: device descriptor read/64, error -71 [ 142.049784][ T3680] device-mapper: ioctl: name not supplied when creating device [ 142.277134][ T631] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 142.407147][ T631] usb 3-1: device descriptor read/64, error -71 [ 142.647130][ T631] usb 3-1: device descriptor read/64, error -71 [ 142.757229][ T631] usb usb3-port1: attempt power cycle [ 143.097117][ T631] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 143.151242][ T631] usb 3-1: device descriptor read/8, error -71 [ 143.299683][ T631] usb 3-1: device descriptor read/8, error -71 [ 143.368756][ T36] kauditd_printk_skb: 1028 callbacks suppressed [ 143.368770][ T36] audit: type=1400 audit(1790456083.601:2702): avc: denied { create } for pid=3712 comm="syz.7.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.394695][ T36] audit: type=1400 audit(1790456083.601:2703): avc: denied { setopt } for pid=3712 comm="syz.7.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.414559][ T36] audit: type=1400 audit(1790456083.601:2704): avc: denied { setopt } for pid=3712 comm="syz.7.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.437132][ T36] audit: type=1400 audit(1790456083.651:2705): avc: denied { read write } for pid=3476 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.468777][ T36] audit: type=1400 audit(1790456083.651:2706): avc: denied { read write open } for pid=3476 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.494534][ T36] audit: type=1400 audit(1790456083.651:2707): avc: denied { ioctl } for pid=3476 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.526903][ T36] audit: type=1400 audit(1790456083.671:2708): avc: denied { ioctl } for pid=3652 comm="syz.2.903" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.553116][ T36] audit: type=1400 audit(1790456083.671:2709): avc: denied { ioctl } for pid=3652 comm="syz.2.903" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.578128][ T631] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 143.590744][ T36] audit: type=1400 audit(1790456083.701:2710): avc: denied { create } for pid=3718 comm="syz.7.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.617726][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 143.625209][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 143.638042][ T631] usb 3-1: device descriptor read/8, error -71 [ 143.646617][ T31] usb 7-1: USB disconnect, device number 5 [ 143.652492][ T36] audit: type=1400 audit(1790456083.721:2711): avc: denied { setopt } for pid=3718 comm="syz.7.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.768945][ T631] usb 3-1: device descriptor read/8, error -71 [ 143.877339][ T631] usb usb3-port1: unable to enumerate USB device [ 144.007135][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 144.159628][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 144.168668][ T31] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 144.182773][ T31] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 144.192338][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.200781][ T31] usb 7-1: Product: syz [ 144.204988][ T31] usb 7-1: Manufacturer: syz [ 144.209663][ T31] usb 7-1: SerialNumber: syz [ 144.567197][ T475] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 144.612702][ T3737] fuse: Bad value for 'fd' [ 144.719393][ T475] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.737962][ T475] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.772182][ T475] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.785137][ T475] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.794398][ T475] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.804117][ T475] usb 8-1: config 0 descriptor?? [ 145.137345][ T371] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.220589][ T475] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 145.254527][ T475] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 145.315804][ T3756] udevd[3756]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 146.686937][ T31] usb 7-1: unit 1 not found! [ 146.705313][ T31] usb 7-1: unit 7 not found! [ 146.717216][ T31] usb 7-1: USB disconnect, device number 6 [ 146.763404][ T3765] FAULT_INJECTION: forcing a failure. [ 146.763404][ T3765] name failslab, interval 1, probability 0, space 0, times 0 [ 146.790899][ T3765] CPU: 0 UID: 0 PID: 3765 Comm: syz.7.936 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 146.790931][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.790944][ T3765] Call Trace: [ 146.790950][ T3765] [ 146.790958][ T3765] __dump_stack+0x21/0x30 [ 146.790989][ T3765] dump_stack_lvl+0x140/0x1c0 [ 146.791014][ T3765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.791038][ T3765] ? cred_has_capability+0x296/0x3a0 [ 146.791060][ T3765] dump_stack+0x19/0x20 [ 146.791091][ T3765] should_fail_ex+0x3c2/0x510 [ 146.791115][ T3765] ? sock_kmalloc+0xde/0x1e0 [ 146.791139][ T3765] should_failslab+0xac/0x100 [ 146.791163][ T3765] __kmalloc_noprof+0x69/0x510 [ 146.791181][ T3765] ? sock_kmalloc+0xde/0x1e0 [ 146.791206][ T3765] sock_kmalloc+0xde/0x1e0 [ 146.791226][ T3765] ? ipv6_chk_addr_and_flags+0x42/0x70 [ 146.791250][ T3765] ipv6_sock_ac_join+0x25b/0x610 [ 146.791268][ T3765] ? __kasan_check_write+0x18/0x20 [ 146.791287][ T3765] do_ipv6_setsockopt+0x20e9/0x3350 [ 146.791312][ T3765] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 146.791336][ T3765] ? __cfi_try_to_wake_up+0x10/0x10 [ 146.791358][ T3765] ? avc_has_perm_noaudit+0x21f/0x360 [ 146.791382][ T3765] ? avc_has_perm+0x155/0x240 [ 146.791403][ T3765] ? __cfi_avc_has_perm+0x10/0x10 [ 146.791424][ T3765] ? futex_wake+0x666/0x950 [ 146.791442][ T3765] ? selinux_socket_setsockopt+0x324/0x3d0 [ 146.791467][ T3765] ? security_file_alloc+0x49/0x220 [ 146.791487][ T3765] ipv6_setsockopt+0x5d/0x170 [ 146.791511][ T3765] udpv6_setsockopt+0xa3/0xc0 [ 146.791529][ T3765] sock_common_setsockopt+0xb8/0xd0 [ 146.791548][ T3765] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 146.791567][ T3765] do_sock_setsockopt+0x27c/0x410 [ 146.791592][ T3765] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 146.791616][ T3765] ? __fget_files+0x2bc/0x330 [ 146.791637][ T3765] __x64_sys_setsockopt+0x18c/0x220 [ 146.791660][ T3765] x64_sys_call+0x2adc/0x2ee0 [ 146.791677][ T3765] do_syscall_64+0x57/0xf0 [ 146.791695][ T3765] ? clear_bhb_loop+0x50/0xa0 [ 146.791718][ T3765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.791741][ T3765] RIP: 0033:0x7facc479e159 [ 146.791757][ T3765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.791774][ T3765] RSP: 002b:00007facc563e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.791795][ T3765] RAX: ffffffffffffffda RBX: 00007facc4a25fa0 RCX: 00007facc479e159 [ 146.791809][ T3765] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000007 [ 146.791821][ T3765] RBP: 00007facc483506b R08: 0000000000000014 R09: 0000000000000000 [ 146.791833][ T3765] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 146.791845][ T3765] R13: 00007facc4a26038 R14: 00007facc4a25fa0 R15: 00007fff92e6d448 [ 146.791861][ T3765] [ 146.864187][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.915642][ T3770] fuse: Bad value for 'fd' [ 147.157127][ T475] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 147.187119][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.728978][ T3795] loop7: detected capacity change from 0 to 7 [ 147.748547][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.757773][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.765812][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.775013][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.786378][ T3795] loop7: unable to read partition table [ 147.801436][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.945'. [ 147.808614][ T3795] loop_reread_partitions: partition scan of loop7 (濉檳鼚綜頹號恽P=媒?銄X嫼 滊%醌`4FLQk輮5) failed (rc=-5) [ 147.826268][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.835478][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.844337][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.853531][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.862344][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.871547][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.880319][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.890020][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.898712][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.907887][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.980219][ T3803] fuse: Bad value for 'fd' [ 148.276559][ T3810] 9pnet_fd: Insufficient options for proto=fd [ 148.396463][ T36] kauditd_printk_skb: 469 callbacks suppressed [ 148.396480][ T36] audit: type=1400 audit(1790456088.621:3181): avc: denied { read write } for pid=2845 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.437217][ T36] audit: type=1400 audit(1790456088.621:3182): avc: denied { read write open } for pid=2845 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.497142][ T36] audit: type=1400 audit(1790456088.621:3183): avc: denied { ioctl } for pid=2845 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.540736][ T36] audit: type=1400 audit(1790456088.681:3184): avc: denied { create } for pid=3817 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.577131][ T36] audit: type=1400 audit(1790456088.681:3185): avc: denied { setopt } for pid=3817 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.607146][ T36] audit: type=1400 audit(1790456088.681:3186): avc: denied { write } for pid=3817 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.657257][ T36] audit: type=1400 audit(1790456088.681:3187): avc: denied { read } for pid=3817 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.687130][ T36] audit: type=1400 audit(1790456088.681:3188): avc: denied { read } for pid=3817 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.747173][ T36] audit: type=1400 audit(1790456088.711:3189): avc: denied { read write } for pid=2845 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.811098][ T36] audit: type=1400 audit(1790456088.711:3190): avc: denied { read write open } for pid=2845 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.978756][ T3848] netlink: 180 bytes leftover after parsing attributes in process `syz.1.958'. [ 148.987951][ T2509] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 149.007359][ T3848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.958'. [ 149.137172][ T31] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 149.147223][ T2509] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.158609][ T2509] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.171427][ T2509] usb 7-1: config 0 interface 0 has no altsetting 0 [ 149.178512][ T2509] usb 7-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 149.187602][ T2509] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.199091][ T2509] usb 7-1: config 0 descriptor?? [ 149.289401][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.299836][ T31] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 149.308920][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 149.318518][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.327680][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.335692][ T31] usb 3-1: Product: syz [ 149.339943][ T31] usb 3-1: Manufacturer: syz [ 149.344550][ T31] usb 3-1: SerialNumber: syz [ 149.563854][ T31] usb 3-1: USB disconnect, device number 59 [ 149.618190][ T2509] playstation 0003:054C:09CC.000F: hidraw1: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.6-1/input0 [ 149.649122][ T3853] udevd[3853]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 149.813725][ T2509] playstation 0003:054C:09CC.000F: Invalid reportID received, expected 18 got 130 [ 149.823088][ T2509] playstation 0003:054C:09CC.000F: Failed to retrieve DualShock4 pairing info: -22 [ 149.838985][ T2509] playstation 0003:054C:09CC.000F: Failed to get MAC address from DualShock4 [ 149.850900][ T2509] playstation 0003:054C:09CC.000F: Failed to create dualshock4. [ 149.860327][ T2509] playstation 0003:054C:09CC.000F: probe with driver playstation failed with error -22 [ 150.014659][ T3832] : renamed from xfrm0 (while UP) [ 150.027165][ T3832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.035823][ T3832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.044659][ T480] usb 7-1: USB disconnect, device number 7 [ 152.357201][ T475] usb 8-1: device descriptor read/64, error -110 [ 152.597207][ T475] usb 8-1: device descriptor read/64, error -32 [ 152.837202][ T475] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 152.967255][ T475] usb 8-1: device descriptor read/64, error -32 [ 153.207205][ T475] usb 8-1: device descriptor read/64, error -32 [ 153.387217][ T475] raw-gadget.2 gadget.7: failed to queue resume event [ 153.447227][ T475] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 153.467336][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.474578][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.481862][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.488970][ T475] usb 8-1: device descriptor read/8, error -32 [ 153.617837][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.625086][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.632348][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.639586][ T475] usb 8-1: device descriptor read/8, error -32 [ 153.747262][ T475] raw-gadget.2 gadget.7: failed to queue suspend event [ 153.754188][ T475] raw-gadget.2 gadget.7: failed to queue reset event [ 153.827331][ T475] raw-gadget.2 gadget.7: failed to queue resume event [ 153.887175][ T475] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 153.907896][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.915168][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.922441][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 153.929558][ T475] usb 8-1: device descriptor read/8, error -32 [ 154.057330][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.064568][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.071840][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.078949][ T475] usb 8-1: device descriptor read/8, error -32 [ 154.187216][ T475] raw-gadget.2 gadget.7: failed to queue suspend event [ 154.194227][ T294] usb 8-1: USB disconnect, device number 3 [ 154.203841][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 154.277218][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 154.337231][ T294] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 154.344909][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.352223][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.359505][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.366557][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 154.437243][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 154.497206][ T294] usb 8-1: device descriptor read/64, error -32 [ 154.607400][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.614652][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.621906][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 154.629025][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 154.697229][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 154.757200][ T294] usb 8-1: device descriptor read/64, error -32 [ 154.867209][ T294] raw-gadget.2 gadget.7: failed to queue suspend event [ 154.874198][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 154.947910][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 155.007238][ T294] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 155.014881][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.022148][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.029440][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.036502][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 155.117245][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 155.177219][ T294] usb 8-1: device descriptor read/64, error -32 [ 155.287370][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.294618][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.301884][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.309006][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 155.377254][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 155.447194][ T294] usb 8-1: device descriptor read/64, error -32 [ 155.557230][ T294] raw-gadget.2 gadget.7: failed to queue suspend event [ 155.564173][ T294] usb usb8-port1: attempt power cycle [ 155.569589][ T294] raw-gadget.2 gadget.7: failed to queue disconnect event [ 155.576823][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 155.647195][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 155.654089][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 155.867201][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 155.927248][ T294] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 155.947348][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.954610][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.961853][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 155.968956][ T294] usb 8-1: device descriptor read/8, error -32 [ 156.097324][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.104559][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.111842][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.118940][ T294] usb 8-1: device descriptor read/8, error -32 [ 156.227222][ T294] raw-gadget.2 gadget.7: failed to queue suspend event [ 156.234293][ T294] raw-gadget.2 gadget.7: failed to queue reset event [ 156.307352][ T294] raw-gadget.2 gadget.7: failed to queue resume event [ 156.367219][ T294] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 156.387510][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.394772][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.402023][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.409132][ T294] usb 8-1: device descriptor read/8, error -32 [ 156.537352][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.544623][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.551935][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 156.559064][ T294] usb 8-1: device descriptor read/8, error -32 [ 156.667192][ T294] raw-gadget.2 gadget.7: failed to queue suspend event [ 156.674140][ T294] usb usb8-port1: unable to enumerate USB device [ 170.127103][ T36] kauditd_printk_skb: 288 callbacks suppressed [ 170.127120][ T36] audit: type=1400 audit(1790456110.351:3479): avc: denied { create } for pid=3870 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.127564][ T3874] netlink: 'syz.6.965': attribute type 27 has an invalid length. [ 170.143510][ T36] audit: type=1400 audit(1790456110.351:3480): avc: denied { create } for pid=3871 comm="syz.6.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.184348][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.199780][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.206661][ T3874] netlink: 'syz.6.965': attribute type 13 has an invalid length. [ 170.247533][ T36] audit: type=1400 audit(1790456110.351:3481): avc: denied { mounton } for pid=3869 comm="syz.2.967" path="/61/file0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 170.270560][ T36] audit: type=1400 audit(1790456110.351:3482): avc: denied { mount } for pid=3869 comm="syz.2.967" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 170.314613][ T3884] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.324420][ T3884] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 170.337564][ T36] audit: type=1400 audit(1790456110.351:3483): avc: denied { mounton } for pid=3869 comm="syz.2.967" path="/61/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 170.344299][ T3886] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.364508][ T3884] audit: backlog limit exceeded [ 170.377484][ T3887] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.411027][ T3891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.971'. [ 170.421603][ T3894] netlink: 'syz.1.972': attribute type 16 has an invalid length. [ 170.436935][ T3891] 8021q: VLANs not supported on sit0 [ 170.438859][ T3894] netlink: 'syz.1.972': attribute type 3 has an invalid length. [ 170.450276][ T3894] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.972'. [ 171.117794][ T480] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 171.268695][ T3932] overlayfs: failed to clone upperpath [ 171.284171][ T3932] fuse: Bad value for 'fd' [ 171.292268][ T480] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 171.304831][ T480] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.318351][ T480] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.325052][ T480] usb 3-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 171.335114][ T480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.346083][ T480] usb 3-1: config 0 descriptor?? [ 171.772231][ T480] logitech-hidpp-device 0003:046D:C094.0010: ignoring exceeding usage max [ 171.793780][ T480] logitech-hidpp-device 0003:046D:C094.0010: No inputs registered, leaving [ 171.819450][ T480] logitech-hidpp-device 0003:046D:C094.0010: hidraw0: USB HID v0.10 Joystick [HID 046d:c094] on usb-dummy_hcd.2-1/input0 [ 171.894515][ T3950] udevd[3950]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 171.907277][ T294] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 171.935852][ T3952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.949014][ T3952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.962077][ T3952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.995320][ T3952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.036161][ T2509] usb 3-1: USB disconnect, device number 60 [ 172.097173][ T294] usb 7-1: Using ep0 maxpacket: 16 [ 172.104406][ T294] usb 7-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30 [ 172.115281][ T294] usb 7-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.126340][ T294] usb 7-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 172.139369][ T294] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.146265][ T294] usb 7-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 172.155449][ T294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.164825][ T294] usb 7-1: config 0 descriptor?? [ 172.585257][ T294] usbhid 7-1:0.0: can't add hid device: -71 [ 172.591641][ T294] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 172.608243][ T294] usb 7-1: USB disconnect, device number 8 [ 172.680358][ T3964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.711611][ T3964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.778970][ T3972] netlink: 128 bytes leftover after parsing attributes in process `syz.1.998'. [ 172.802869][ T3972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.998'. [ 172.850900][ T3975] input: syz0 as /devices/virtual/input/input23 [ 173.381811][ T3999] overlayfs: failed to resolve './file1/file0': -2 [ 173.388527][ T631] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 173.474151][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1010'. [ 173.548277][ T4006] kernel profiling enabled (shift: 9) [ 173.556224][ T631] usb 7-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 173.570044][ T631] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.589692][ T631] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 173.607097][ T631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.615106][ T631] usb 7-1: Product: syz [ 173.627102][ T631] usb 7-1: Manufacturer: syz [ 173.631749][ T631] usb 7-1: SerialNumber: syz [ 173.858913][ T631] usb 7-1: USB disconnect, device number 9 [ 173.900207][ T3882] udevd[3882]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.927127][ T294] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 174.078909][ T294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.089079][ T294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.098892][ T294] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 174.108743][ T294] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.124588][ T294] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 174.133671][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.141692][ T294] usb 3-1: Product: syz [ 174.145861][ T294] usb 3-1: Manufacturer: syz [ 174.150557][ T294] usb 3-1: SerialNumber: syz [ 174.159126][ T294] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 174.361904][ T4009] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 174.370342][ T4009] overlayfs: missing 'lowerdir' [ 174.379801][ T4009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1011'. [ 174.406583][ T294] usb 3-1: USB disconnect, device number 61 [ 175.017561][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 175.132723][ T371] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.140619][ T54] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 175.201998][ T36] kauditd_printk_skb: 939 callbacks suppressed [ 175.202018][ T36] audit: type=1400 audit(1790456115.421:4392): avc: denied { read write } for pid=3180 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.261013][ T36] audit: type=1400 audit(1790456115.441:4393): avc: denied { read write } for pid=2845 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.306211][ T36] audit: type=1400 audit(1790456115.441:4394): avc: denied { read write open } for pid=2845 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.333531][ T36] audit: type=1400 audit(1790456115.441:4395): avc: denied { ioctl } for pid=2845 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.360022][ T36] audit: type=1400 audit(1790456115.461:4396): avc: denied { read write open } for pid=3180 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.385559][ T36] audit: type=1400 audit(1790456115.461:4397): avc: denied { ioctl } for pid=3180 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.411174][ T36] audit: type=1400 audit(1790456115.491:4398): avc: denied { read write } for pid=4054 comm="syz.2.1027" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 175.434991][ T36] audit: type=1400 audit(1790456115.491:4399): avc: denied { read open } for pid=4054 comm="syz.2.1027" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 175.486707][ T36] audit: type=1400 audit(1790456115.711:4400): avc: denied { read write } for pid=4054 comm="syz.2.1027" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.510282][ T36] audit: type=1400 audit(1790456115.711:4401): avc: denied { read write open } for pid=4054 comm="syz.2.1027" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.693823][ T4057] SELinux: policydb table sizes (8,4) do not match mine (8,7) [ 175.719796][ T4057] SELinux: failed to load policy [ 175.852292][ T4074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.861595][ T4074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.987191][ T294] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 176.138972][ T294] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.147024][ T294] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.157370][ T294] usb 7-1: config 0 has no interface number 0 [ 176.163448][ T294] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.174445][ T294] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.184223][ T294] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.197116][ T294] usb 7-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 176.206241][ T294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.215633][ T294] usb 7-1: config 0 descriptor?? [ 176.284211][ T4077] futex_wake_op: syz.2.1035 tries to shift op by 144; fix this program [ 176.629814][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.640272][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.648501][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.667599][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.677877][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.685463][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.693705][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.702360][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.710372][ T294] holtek_mouse 0003:04D9:A04A.0011: unknown main item tag 0x0 [ 176.722711][ T294] holtek_mouse 0003:04D9:A04A.0011: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.6-1/input1 [ 176.742868][ T4096] udevd[4096]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 176.794896][ T4098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.807250][ T4098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.847173][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 176.999545][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 177.011012][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.022975][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.033421][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 177.048627][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 177.058746][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 177.066839][ T9] usb 3-1: Manufacturer: syz [ 177.073140][ T9] usb 3-1: config 0 descriptor?? [ 177.187146][ T3753] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.187164][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 177.367188][ T294] usb 7-1: USB disconnect, device number 10 [ 177.393205][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.403185][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.488750][ T9] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 177.496807][ T9] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 177.520663][ T9] appleir 0003:05AC:8243.0012: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 177.581070][ T4109] udevd[4109]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 177.688675][ T4093] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1040'. [ 177.701101][ T4105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.716277][ T4093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.724786][ T4105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.731457][ T4093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.753978][ T631] usb 3-1: USB disconnect, device number 62 [ 177.767108][ T294] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 177.927149][ T294] usb 7-1: Using ep0 maxpacket: 16 [ 177.934604][ T294] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 177.942782][ T294] usb 7-1: config 0 has no interface number 0 [ 177.948888][ T294] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 177.959675][ T294] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 177.972487][ T294] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 177.981917][ T294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.990013][ T294] usb 7-1: Product: syz [ 177.994277][ T294] usb 7-1: Manufacturer: syz [ 178.003471][ T294] usb 7-1: SerialNumber: syz [ 178.008970][ T4112] overlay: ./file0 is not a directory [ 178.015502][ T294] usb 7-1: config 0 descriptor?? [ 178.021737][ T4104] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.029351][ T4104] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.155916][ T4121] overlayfs: missing 'lowerdir' [ 178.230694][ T4125] Invalid ELF header type: 2 != 1 [ 178.238224][ T4104] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.247122][ T4104] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.247370][ T4126] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1044'. [ 178.471562][ T294] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 178.497144][ T294] asix 7-1:0.34: probe with driver asix failed with error -71 [ 178.517215][ T294] usb 7-1: USB disconnect, device number 11 [ 178.884112][ T4154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.909898][ T4154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.940981][ T4154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.957270][ T4154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.553482][ T4199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.565098][ T4199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.627124][ T631] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 179.787739][ T631] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.799323][ T631] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.810480][ T631] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.821132][ T631] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 179.834099][ T631] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 179.843590][ T631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.853638][ T631] usb 7-1: config 0 descriptor?? [ 180.063171][ T631] usbhid 7-1:0.0: can't add hid device: -71 [ 180.074293][ T631] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 180.087226][ T631] usb 7-1: USB disconnect, device number 12 [ 180.167148][ T294] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 180.207299][ T36] kauditd_printk_skb: 774 callbacks suppressed [ 180.207315][ T36] audit: type=1400 audit(1790456380.493:5176): avc: denied { mounton } for pid=4211 comm="syz.7.1080" path="/64/mnt" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.237278][ T36] audit: type=1400 audit(1790456380.493:5177): avc: denied { mount } for pid=4211 comm="syz.7.1080" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 180.260841][ T36] audit: type=1400 audit(1790456380.493:5178): avc: denied { search } for pid=4211 comm="syz.7.1080" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 180.295033][ T36] audit: type=1400 audit(1790456380.493:5179): avc: denied { read } for pid=4211 comm="syz.7.1080" name="trace_pipe" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 180.318032][ T36] audit: type=1400 audit(1790456380.493:5180): avc: denied { read open } for pid=4211 comm="syz.7.1080" path="/64/mnt/trace_pipe" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 180.332627][ T4217] ./dev/sda1: Can't lookup blockdev [ 180.342042][ T36] audit: type=1400 audit(1790456380.533:5181): avc: denied { create } for pid=4213 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.367721][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 180.372909][ T36] audit: type=1400 audit(1790456380.533:5182): avc: denied { getopt } for pid=4213 comm="syz.1.1081" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.395757][ T36] audit: type=1400 audit(1790456380.533:5183): avc: denied { name_bind } for pid=4213 comm="syz.1.1081" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 180.417784][ T36] audit: type=1400 audit(1790456380.533:5184): avc: denied { node_bind } for pid=4213 comm="syz.1.1081" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 180.418428][ T294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.438746][ T36] audit: type=1400 audit(1790456380.543:5185): avc: denied { ioctl } for pid=4207 comm="syz.2.1078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.449411][ T294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.480517][ T4217] tipc: Started in network mode [ 180.481428][ T294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.486144][ T4217] tipc: Node identity 4, cluster identity 4711 [ 180.498335][ T294] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 180.502323][ T4217] tipc: Node number set to 4 [ 180.510754][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.522922][ T294] usb 3-1: Product: syz [ 180.527124][ T294] usb 3-1: Manufacturer: syz [ 180.531930][ T294] usb 3-1: SerialNumber: syz [ 180.537708][ T631] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 180.707135][ T631] usb 7-1: Using ep0 maxpacket: 32 [ 180.720398][ T631] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.731166][ T631] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.742893][ T631] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.752685][ T631] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 180.757270][ T294] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 180.771204][ T631] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 180.779560][ T294] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 180.791119][ T294] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 180.793084][ T631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.804395][ T294] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 180.813277][ T631] usb 7-1: config 0 descriptor?? [ 180.827422][ T294] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 180.842424][ T294] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 180.854361][ T294] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 180.882548][ T294] usb 3-1: USB disconnect, device number 63 [ 180.936230][ T3882] udevd[3882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.145666][ T4246] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 181.145687][ T4246] rust_binder: Read failure Err(EFAULT) in pid:199 [ 181.159485][ T4246] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 181.166561][ T4246] rust_binder: Read failure Err(EFAULT) in pid:199 [ 181.176380][ T4246] rust_binder: 4243:4246 error while translating object: EINVAL [ 181.190845][ T4246] rust_binder: Failure in copy_transaction_data: EINVAL [ 181.190876][ T4246] rust_binder: 4243:4246 transaction call to 4243:0 failed EINVAL, code 0 size 96-24 [ 181.218091][ T9] rust_binder: 4243: undelivered TRANSACTION_ERROR: 29201 [ 181.244650][ T631] usbhid 7-1:0.0: can't add hid device: -71 [ 181.258149][ T631] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 181.277236][ T631] usb 7-1: USB disconnect, device number 13 [ 181.406024][ T4256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.414553][ T4256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.712204][ T4261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4261 comm=syz.1.1099 [ 181.812739][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1101'. [ 181.986959][ T4270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.003102][ T4270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.094556][ T4272] pipefs: Unknown parameter '-'' [ 182.219204][ T4279] tipc: Enabling of bearer rejected, failed to enable media [ 182.246659][ T4279] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 182.256630][ T4279] tipc: Enabled bearer , priority 10 [ 182.418782][ T4294] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 182.464528][ T4288] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 182.464549][ T4288] rust_binder: Read failure Err(EFAULT) in pid:264 [ 182.639195][ T4308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.674500][ T4308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.759639][ T4311] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.878422][ T4321] overlayfs: conflicting lowerdir path [ 182.915755][ T4321] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=22910 (366560 ns) > initial count (1920 ns). Using initial count to start timer. [ 182.933800][ T4321] kvm: kvm [4320]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 182.942674][ T4321] kvm: kvm [4320]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 183.317128][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 183.442702][ T4336] kvm: kvm [4335]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 183.472561][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.498578][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 183.512184][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.525125][ T9] usb 3-1: Product: syz [ 183.531532][ T9] usb 3-1: Manufacturer: syz [ 183.538669][ T9] usb 3-1: SerialNumber: syz [ 183.561524][ T9] rtl8150 3-1:1.0: couldn't find required endpoints [ 183.568436][ T9] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 183.772108][ T9] usb 3-1: USB disconnect, device number 64 [ 184.682061][ T4375] netlink: 'syz.6.1133': attribute type 13 has an invalid length. [ 184.692750][ T4375] erspan0: refused to change device tx_queue_len [ 185.047144][ T31] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 185.177153][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 185.217116][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 185.222893][ T36] kauditd_printk_skb: 921 callbacks suppressed [ 185.222908][ T36] audit: type=1400 audit(1790456385.503:6107): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.224633][ T31] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 185.229629][ T36] audit: type=1400 audit(1790456385.503:6108): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.254475][ T31] usb 3-1: config 0 has no interface number 0 [ 185.264027][ T36] audit: type=1400 audit(1790456385.503:6109): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.287560][ T31] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 185.294425][ T36] audit: type=1400 audit(1790456385.503:6110): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.318114][ T31] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 185.328126][ T9] usb 7-1: device descriptor read/64, error -71 [ 185.354286][ T36] audit: type=1400 audit(1790456385.503:6111): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.394314][ T36] audit: type=1400 audit(1790456385.543:6112): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.419659][ T36] audit: type=1400 audit(1790456385.573:6113): avc: denied { ioctl } for pid=4393 comm="syz.6.1140" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.445566][ T36] audit: type=1400 audit(1790456385.653:6114): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.470486][ T36] audit: type=1400 audit(1790456385.653:6115): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.495418][ T31] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 185.497137][ T36] audit: type=1400 audit(1790456385.703:6116): avc: denied { ioctl } for pid=4368 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.504478][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.538327][ T31] usb 3-1: Product: syz [ 185.542562][ T31] usb 3-1: Manufacturer: syz [ 185.547948][ T31] usb 3-1: SerialNumber: syz [ 185.556680][ T31] usb 3-1: config 0 descriptor?? [ 185.563812][ T4369] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.571391][ T4369] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.607113][ T9] usb 7-1: device descriptor read/64, error -71 [ 185.698632][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.707291][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.784822][ T4369] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.792339][ T4369] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.847127][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 185.977118][ T9] usb 7-1: device descriptor read/64, error -71 [ 186.003890][ T31] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 186.217171][ T9] usb 7-1: device descriptor read/64, error -71 [ 186.329661][ T9] usb usb7-port1: attempt power cycle [ 186.384250][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.392960][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.641756][ T31] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 186.652172][ T31] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 186.677140][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 186.677160][ T31] asix 3-1:0.34: probe with driver asix failed with error -71 [ 186.679677][ T31] usb 3-1: USB disconnect, device number 65 [ 186.710278][ T9] usb 7-1: device descriptor read/8, error -71 [ 186.839517][ T9] usb 7-1: device descriptor read/8, error -71 [ 187.047114][ T4418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.055728][ T4418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.077144][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 187.099004][ T9] usb 7-1: device descriptor read/8, error -71 [ 187.229865][ T9] usb 7-1: device descriptor read/8, error -71 [ 187.339420][ T9] usb usb7-port1: unable to enumerate USB device [ 187.675035][ T12] ------------[ cut here ]------------ [ 187.680665][ T12] WARNING: CPU: 1 PID: 12 at drivers/block/ublk_drv.c:1583 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 187.691131][ T12] Modules linked in: [ 187.695034][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 187.706634][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.717263][ T12] Workqueue: iou_exit io_ring_exit_work [ 187.723003][ T12] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 187.729756][ T12] Code: 5d e9 93 55 53 02 cc e8 5d 0d 33 fe 0f 0b eb e3 e8 54 0d 33 fe 0f 0b eb da e8 4b 0d 33 fe 0f 0b e9 4d fe ff ff e8 3f 0d 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 187.749691][ T12] RSP: 0018:ffffc900000c7990 EFLAGS: 00010293 [ 187.756034][ T12] RAX: ffffffff83546c31 RBX: 1ffff11025f67a7d RCX: ffff888102655f00 [ 187.764183][ T12] RDX: 0000000000000000 RSI: 0000000000000076 RDI: 0000000000000104 [ 187.772202][ T12] RBP: ffffc900000c79e0 R08: 0000000000000003 R09: 0000000000000004 [ 187.780320][ T12] R10: 0000000000000000 R11: ffffffff83545c10 R12: ffff88811b503900 [ 187.788509][ T12] R13: ffff88812fb3d3c0 R14: ffff888130778000 R15: ffff888130778010 [ 187.796601][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 187.805641][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.812291][ T12] CR2: 0000200000001dc0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 187.820294][ T12] Call Trace: [ 187.823607][ T12] [ 187.826537][ T12] ublk_ch_uring_cmd+0x6f/0xa0 [ 187.831327][ T12] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 187.837341][ T12] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 187.843253][ T12] ? io_uring_cancel_generic+0x6eb/0x6eb [ 187.848927][ T12] io_ring_exit_work+0x23d/0x83b [ 187.853881][ T12] ? finish_task_switch+0x139/0x770 [ 187.859121][ T12] ? __cfi_io_ring_exit_work+0x10/0x10 [ 187.864674][ T12] ? wake_up_process+0x14/0x20 [ 187.869493][ T12] ? kick_pool+0x3b7/0x540 [ 187.874006][ T12] process_scheduled_works+0x7f4/0x1060 [ 187.879698][ T12] worker_thread+0xc99/0x13f0 [ 187.884485][ T12] kthread+0x2c4/0x360 [ 187.888617][ T12] ? __cfi_worker_thread+0x10/0x10 [ 187.893878][ T12] ? __cfi_kthread+0x10/0x10 [ 187.898522][ T12] ret_from_fork+0x67/0xa0 [ 187.902954][ T12] ? __cfi_kthread+0x10/0x10 [ 187.907722][ T12] ret_from_fork_asm+0x1a/0x30 [ 187.912716][ T12] [ 187.915756][ T12] ---[ end trace 0000000000000000 ]---