last executing test programs: 10.455416871s ago: executing program 1 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000440)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.396185307s ago: executing program 1 (id=280): r0 = socket$inet_icmp(0x2, 0x2, 0x1) vmsplice(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)="34a456e96a6bbe25a2202ceab4f1aac701794bf286057c6d88b54f6ad336e1068ff7e7ef3cfe0e425f0bb4f0dff4a0c1396084c66fcf4a1f5e8599087c5431e7a38bdda1f837ff606380b09bf66fb46c764560919b684a40c345884333900190bed4332c10611e2499d949", 0x6b}, {&(0x7f0000000080)="f2e7185b103edbfcbe1711d48176df804eb854c5567a7790c96460d9373444cc7b1e26be8ceefce4b0d272f69850651baedc322201c67198ef6c062adfe91cf262be031057b7c5d6382d2c929a9598598900a3baed96ff167db82a5118113bb51d199c45aedc14b0b7e1b25c1fc32e1e1c790511ea81bf66909c471b64c52e106a169327305929a0ddd2e95799f1b925ba812901544b772111fb31b45dc1d81d1d0e5efb808b8a6037ccf0a7c04d46ab01483c94fa677d85a16fddffdbd5cec7d26f0daf34cda3610706ad23cc5a8eb30d8b0cbf2130", 0xd6}, {&(0x7f0000000180)="7de7fd8c21ec200cacaeff7c2797597377c831bd44fdbd25f9cf37bf38baeb43313c3e398683cd0c66017572317570", 0x2f}, {&(0x7f00000001c0)="2c5154f747c25cd5c4ab1f564e2710e0c61c3f2c81323625aae4c94b322dee01abfb7dc4789d5b52153985eba24dbb39006c75138cc77f9722e5fbc39b5ac0057a076659f443754bf5ca4a865fc9b4c01c124327d2c37426d6120b80740eb29b978aa6e11fd973f0add3ec338a29d65199214cd14c3e171930ae45ae4d174c2475fd258f3b44317c4f9593c8afa8133d61746bdb87e0370059b77de9ab61923380557ced86ac68bd4b34ac0c101a3c21ea6ac1a7d33100ee34253522aa7a0fa9d90b532bf92047f421654a97e864dc1589e591995294020d4b3d25b8ef124498d63e830e0c8b415004e8e693557f1698f51c7236a78427731b29453e3759cce78ba90cbd65d39c5de864ae3083b3b6c7bc1c30499708fcbd5a8a1befa16d859679ce99945e68d6c2034cdd014b92906eb247f1ed79e514a0b3a6d5ee36e31101c2439f06151d8553cb4ff55ce2c0f39a4f39813d4bdc5bd15c33a6474576da884292f2c4768a18397d50899c4ad86e8bd3cccf735d3d00317c9cd0d1e35d9ccdeaea8767802971391bf720dd9dba1d77035e1918f1f94742d3075a6a01ddd5a6d8f60dc5658884f2eeefb69467648ce44b9190310a9f48ad6c27495cc3f1cc9941ae98e0c34c3612d8b6e59bb247c12a0e9e39639610b46e257a8eeb75bb4e34af7a9fb754d3be046196b546c9eb43f8f69816a12c1be93cd0907346ca2270bd5943621e38f0c1bb6d82a7cae0a636cbc26078d48fd4e04b92b60810378960d99417abe4562215bbde8b6ca61f1f5582239bbbb9a00b16d53e2be43775c35bc22cf744af1373b54b60eb61c131681f4f3a48c76d127b1ffac5fcc466b39fc920eba430c9ffa8b2207d7b8af46e5557a0a581bf73f6adb0c21e479cbbc938da1a8751914810b890156b0288731f9f979d3960fd132effc0941f16babc385ebf977e69b70e5c67443d0d1e8db933b59df1b81b1edf89daae5a05f9702aa219ff236ef273b00b7e90f681595bd3869a4266bb8d80e51edb6667c11e6432b2ff6b3728332e74a8c78d0303b8433e9389f9b0a81a5626988bd317bbdf7f61a85c1ec44d72859d4d94d835717d9d836007435b281aea354f38dff6e1a3a55245ef5010d6158b71f5d7c902b0dc4df074139fe9bf26b1fd79593060f903435cb963b82cc0a6aac745e15b1bbe24be3ab68b5b51de9e2dec343ae6d175a52a991afe50aaf846062c41aed9075f732c48196a67863d1bedc8d1fb650caa986b2c62f3ebd16f3e151edbcc6fb30ffc48e84e5aa68d61783e0a2d245943bc40f0bf5630a159e0d9661331b3528ce315739d7c2cf80ed100a603ebb739a071b365d2300d3edf83abdf956aa1132bab8e96ba0311a5d3f03d65d1ee0baf0c93522a3e3022672d5042f5000e9014825ee1fb02edd0766e96424c206ef00a600b5e22441b682fd1a6b5dfbcae1c7ec2077174e7c534416956dea3903c9642445dbbd960742da08509c0faad82854ab7acc63f5799071a5eaf10792182a946ee7c3fc7c3acc2474e645edd05d0375d92f6ae4a0d47fd5caec5d748d7e32f1e2cac316b895c2649b49441bc66dcf5f654531c700b3f51c9120b701b960121fa6cbe678364d27944fb9de80044eae7b74398173f8b4cb8760e6c2bf8b629f2a2addef433beaba91cd385a627527de370b92f1e0222287680dba2a847798f50ae1789a77b263c454ce3b202c9a6ab9dd8b61cfca8d42888aee460431ed6431a643273484a5ff2de2b2c248186768a7f211b0f1bc549dec8c0a18d4e5623ffcf243498199d3460ac68f5d84e51a887b22d177f991856f9b859e8ecc59569965d7783bb779c1600c557af5bca8faf0ecc8dc49eb88e60fbb7935c1289a61989e8ec0bd510f9f257053e4392dd8522e90fad49a6bf7d5b4ca572f069bb857591a44f1872760ff26a65c2a9204a74966bbb6590a949b4cb90a08171cf7e760b9ebbecd7f8f96fb6fb8f61a02897e2106dcb23aa480b58f878726304224fe6799d1a47b047db73f9ee04e437b517f33e98850e60d29d2ee94a06fafb72b3925c8c64b4e55f5ab71c2078207922a8d5882869580d8bb5f09491a4cb89ffa0ca9ba210aa824e88280ac814591e237662f9a2b2ce732ebc3098ba996c8da5628bb39be3c3dd5cffdb1c797f21a07af36187d7515b07490cb61a6058bb39f67f513c60c1539fcae56c49643897dd93cc5b000aaa8923125132a027a69847edc09b7dbabed92016c8f7bf8362e4e49e0789b4a99d6a4aedd112e7c2ce74d585defdf312f470b8a8c90398c37c7619a64977339210665689e65dd526abce1888c4dbb12cae00c24b83aa29f931258a32ca2cf991e973989e375008bd16ee10b0a2b965b9b3b9a0ea10cf05bbc0c0c862ff55b7b1faad3e5f92e9bbf64bb2aa0ffeeed66db6b2ba923d268a0f94bb8e3d2e196e5283b90802d065f66de98b2cea3e3ed7aa22d516750f1ac20ed59f6972ffe4b5825a53429a8e1374c33e23c6491b2d8cec4460ad67617adb41d76df133ccb409960b9df3fc5e220393fa5bc349c26cf1d88569e4afc532f35fad3c6e3cc026fcd93877709b73b994d1121cf821b1a29e1b6edcfc6b5cb1247e53d2bcc8733725fddcd9e93bdc11d68743037133f42b8984ced203638a0573942ac44d23d68785a6400bef51c01ffd501d6463df3bb20d910a9422ce26fc5e9a7e5b2ae31773e97eb9729e7bd9e3a5e08d8d3814d8e3b5e17df549a89829a80efc5980ee35c4a37566fd605f676b1baa2eb02a83e875e65c00121fb56e845320b8f5d3f483945a92d2465c034709b62b90058a0db43ab72a3e5bb10171866186cf89b4c3cc4eaba2cecd1d22ce08923472d9c2b8597981d0ca0b9b1e0d870279a875d9de3d59c511faa5324a964bc5e23cd3dfa4c529416e4bf0fd4eb37b427bb4737e6b1e4a945a3093f59a9f59c4972b363c0e075bc90c84bbc6f8c47e81a92b313f6e83ab4551e9e20bb89cf56cbeeae0771f5427d209c0ba35e817f98b55a9e47e65957c02dbdfd51c0f1aa466cc4f64bacc7412e746f9dfd6d5bd098335e8faf72f3b3cbcb71a2ea67400c6240533c648eb7e952ea758d9896772996707c5722c409d8d8d534cc8e21abb7feb7682d1de5fec29d697e51ea52963002e9721485773fa1c08f7c3579c051343abfeefd17d97cf35c008929591e0ad7003e8511b38543aadcca19dd6f9e8527a447775e03a567c32075f5b6eb72df1d3c452f53a3cc20d102a7c7d086a2d08c87d4d2b5284d7cc13c77bc4b4377070215a599dcb100ebd347bc42753f3cdb3aae92b07e05dbca9f6f5b72f460805b46268993795a93cf2bcde2360c655540c3941c0cdf27b5b9b10978ab1964a6c337737432bdb1344d45ebedda7b4b6940a1a8c85b16c2d40d286548745c484e1420e041308bda17bf370ec20be6a7a498e52db9651e01ca9d2da572a9316990326254477d8f08fbc22a4920a80411565794821aa0a36a5216b27115c26502c6d202e13163bcff4b5e672cf17a2d570664960514cfc8428932507ad138be526c20272de2a5919b4950bb9b47a7b31106bc452519075892f1038f08f4997e77e9212fa8840d0f5cf701a1fa76e5cbbce1f990d7ef2031fbd2437f46c2b8f9cbed8b25be93642ff47086b26a59ac221b77e7a274ceb5f28d8c449755eb91fd95464541431b8b5bba3290b5598c3844d69d70e4797da72f94d02b5748ca82efbe563db0eb2e936a6d0b8b56121912fe4e1e0b7f85a73160b80d96d16cc09cea402690f4d9640f830d74c8b67e0841a3a5e243b06a6304945cba8d6bc7d70db84633fc810fb06c8914fa054182c400c9ece35f892e42f574f10e3e4f4ad53c4b62a2c5f049eca8e899c3a9d6e02f1314260471286fb637bf59c69c8ceb9c9f679aa2d6fcd963947f4b464cfe1bfc74131592689267711f0a205332a3a600c54059883052b591602a2cacd9ec644db1279013a12fe710b12af55bb99f1b68d8d02e5311fc8a59f3b5a93b84140eb2f822ca2d11c5d5ad907bf97173e2c2f382f540164ef7d0f9d07977d13711517fc8f19c1a6de988ca699f0121f5c13b4f4323c7a5aabd29a8c15afbb5b12dff00ab19828ed2c595bde3bbb7d9dcc7cdde645675551011251f83e27193e0de9daf45dc171b613f9799e2055ed8142801e10cb23401386a3a0dec5f381be64b5e0dd3730d96f7809d1c8f944ecebb0eca2ded7560b01ad30d5100b6b94e441a3d255087b4b3447eb8a5036bbca6ec1f2f547b5b623a255179904211c7190d9b4ee773371c339804b64e819639d873e260c53dddb35804ccd9e4f01805f27d7bd45e04d6a6a11cb27d5644da8c336f5af236a2b3ee722692614acda07643c2e69085963fd682f927114a12463edb8c0ee547615a8efa443fa88b4f3bc54a2d0f2a6ab6a3fc0c5b7400d852736a7b603005faee30eacd3a167d95c9c68612d3f038111b0005b146829c49eacd3d4f3507f0a80a76f71db4915909ddd82c4e9c371169f07fde6cf784efeb02017eb62b36ca2facdb126c5cb44b12e59c47ff8d6db44a35d35fb4e5b1e7e13d713f53632f15e0ed91d94b57d2af3076fc9fca14cd27dd2c3b837c3f908a3ec1b8b4402fa0eada0f90ae45b82dd2c83800e0855d5a276108214db5ea9fb47e349ecc4484c5725c9fc97b08b4a7b512c796803f29f6b6718f2ac112e1230fdf59f1163431b85110a977796c9166af164eee9e360a4f7a054ac8b85f9a8648a90a277702d0ae732ffd30e2bd8fc28aa5b95d8c7bd9a7fb596a86fcf78cbba0c7956f8ef7fdd30fffbb003c2c5f111571027f104467d47dc7127e548bfd11272eb0bf123fb1ef6910e1496317bdc0dc9fff93f8b15343bae8dac49408e38a3ef985d74990316f3aa45f40962d54d88ec05479e2b5d78ca6932148e58055e57eb4a1f6be4dc0b8bcf76dfd78fa620f5ab94c2936f081623fb0fa7020bc00ed8092ec2ed66c91e29b8c339180a38d64b00e21335c952ebd5020a626bc0f854fb7b4cd86e8f4ad6f4b24234c22862024ad90dd6caaa29fd2c355dfad50629941b444b706653b4de41493f6ffdaebe5ee841086134f6a5e7eeda1985e2acdeb5a1ba281fb858a4529a3f560bd02edb114168abac13074ae2f85f66709647ab236011c3bf335f06e3a6d39371deef1c4669090ef9b51fc73c22114d651b148eecc676a4b8ea27f9f5a0b208b00f07b2e5e6bf4df3702e5164274ff40c7cc5c4ecf0aeed63e6f84c0389b2c3369cee8488c157e254b21769f5bd9f1485b4ce19165a0d133cef542e5dd7784c40c062f96d37b387b2809823df8d9d7f763becf7d0e59457679787bf8721a3a27f18dd54d69f76e7b187d62a3a34c8c0c120e88387d4fb21fafe977dbf8ecfcfbb88318b3d052ad511586666251a970f772f118380815db120cc01dd1a5b3b0e7a8f8a83548822b4146d08a0865c130cf8a6c1a7c702d45c94a636f1b3948ed4236a3d2fbce1243b37280e2e46c9abc16ae62ed8d75825b297715b54a107c25bfd21219127758d8a2cc225ff714bbfc53f820c014c435fa9205df93b4d4e2da8c5fce52bf9de2a648e9b4accf196f45e943609af166f7661c5639d3839972622023755c2ed974c43c62ba392cbb91f5b320614b93e953aaeda4431f59af5b850174879bf2a6d6b34054035d1763a49a032897f340bdf23bf79d67bb719719cb115a8b6c80599e58d97f3acbcfb35af50ecc0a716f8c537d45c4b8aec1ee47abcc923f6350b73d943c0255c", 0x1000}, {&(0x7f00000011c0)="c0e45e138e8fe228504941f53472f2f59077e707d631792b15204590d41700166be2108550995c5d", 0x28}, {&(0x7f0000001200)="7b3626c93f204d2502df97f3c7e5e8915ef922c6b59ef13fe462912a382efda9c773e422f80cdf8493493122b066fb7c429a5981d665bd31044ab6ad6cc0fef180770440ba8a2fc3ed416ae98e4cc0dd1602e0292767b28b72da9accb4074a1ce6409d6630ec002fc3111af17f1a2275cdae7f3198fe97b94ae37923fe5a0b77263187389f4d903921225b2348a33464fa0c6e17ab421d6b2cd76686a012231e2d", 0xa1}], 0x6, 0xe) 10.334477763s ago: executing program 1 (id=282): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) finit_module(r0, 0x0, 0x2) 10.315213415s ago: executing program 1 (id=285): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) pwritev(r0, &(0x7f00000008c0)=[{&(0x7f00000005c0)="91b0547987cdc7ebc91679d2d2048e9866fa10770ba03642910d6d4895cac9f2403ed8ebb059ac78b77d621b8b36498fdd02a0c7e4c019fa3bf2a58a3f396c180a9f7145aa4fa60cd021d86e2721cc539333d035020e627ee86d4929efe6894428bbb842155f3a0e9ec13cfc4ba9067f616c13ddfcd8f81a93", 0x79}, {&(0x7f0000000640)="9ad7faddd9856f3cdc8fcb6f6b162547944862a5561a562413cfb89a5bc81dd82b2c014081a6280935d1984ce018d9c484b606346b7ff8e9621ca9d94b5e8b", 0x3f}, {&(0x7f0000000680)="f17792912dff2738c2e13ad73df7846501c2cd545b58d44508548893dc3d5bd9bbce3be1ca678c4257b4d0b6f9dae3a5487d7441ad16d59f4ff913d69477644ebd9abbb1dc6c840a01a1abc45217c52235bb6526bbd2bbb6642c7fb0547848d2b08e94edc704a891aa0ae6a5051a6d7ecbc0c74fececc0f0dacb9c106c800004a9590bf74542dd5864e1ad1851b7d93a04cbabecec529a7147580bee930e12b79bec13eaa2a19377b418ffb7c600307f", 0xb0}, {&(0x7f0000000740)="e3c4d87b1839c6b8436d23ea9b61c5f029519c026625e4fd2c181fc5a560719f4993d750060af2d4c4565ced8fe36ea0f189490ebd9bdb84e3cc90ebdb9fc5e36824c6587e95ad390c7cac6054bb40630da55064ce263c75683bfbeb42261b6625e767ded6147f299a84e7907186defeb030c5668dae3342e3ebe1135d9b863d2a4cabb14e278e42a4ccfe64ef0e3170a113125a9745f4c5535fead2433d630bf12ece2f06130d2347163907d12921c682eb65d30c3fa6d53c4347a719d61e6d9a4f854867a1651816d1f1691405e9d47d85c6a60a888bee07e17d262dcad39490295e21e799e69fd049", 0xea}, {&(0x7f0000000840)="b3967c0065731f615c106f84c06612a04f02e72362ad41cab946266c005ccbfa72f4fdc3cf75322891f1431b5ef859332a3ec891f1355d1b6161d6a3b6585832bd6a10108e3d26f712da14ad327d7dbae277a270278b58703c8348ce0cbb77741fc7819bab3926938d346e7508c75667d41cad76", 0x74}], 0x5, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x18, 0xb, 0xe, "04000004", "05002000"}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001900)='./sys\x00', &(0x7f0000001940)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', 0x0) mount$bind(&(0x7f00000019c0)='.\x00', &(0x7f0000001a00)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000001a40)='./file0\x00', 0xc) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0xfffffffffffffe8f, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) capset(&(0x7f0000000e80)={0x20080522}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) write(r2, &(0x7f00000011c0)="b1", 0x1) syz_usb_control_io(r1, &(0x7f0000000bc0)={0x2c, &(0x7f0000000940)={0x40, 0x11, 0x60, {0x60, 0x22, "247ab1688a752f03709053516ecb9bc4bbd0f538f15507f2e74ee4613e9a9e0894f77522dabfabdc61c839b2799e2063e712ff3802dbc89f1c721b11f1b496b1927a2a81945a66f6039b62837e45cbe4c7868571fcad69228845abf2e70e"}}, &(0x7f00000009c0)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "37d3202a838ddcc1c3fd0838c32fe4efae280a3fecd4a0eb2b866ddb96ba3a43e9b08f650cf42d01b09b5ffd038c36360dd3ce8dc2fd0e79285b90935cfe6956fd6328af6d4f1dc8a7bb453519a6f6614412ba030d893b3b0fcf3c3b2a330aaa457427525f594577dc99f262b72dc446fe13ed084f40e6e7a8056e7b3257bf4933acb2ca009d1a43edacd0a81361b8cf829ee20130fbabecc8f0a7f2adda8086512c8c0012f6d31322c8caa570ab888757b9ef445640e6f98f4c5a0ec1df21f5dc9fd02c1b7210e96948cf0c25e792a7a6e7404c590fa3ab25938dfbbcea243d4c"}}, &(0x7f0000000ac0)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0x5, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "b37c9ba89da600"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x6, 0x9, 0x0, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "d721c75f6cf5b527a99cdfc27a290547"}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x39, 0x0, 0x8, 0x2, "53afa73b", "ae1e30ce"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xd0, 0x4, 0x3, 0x2, 0x2864}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c00)={0x20, 0x12, 0xe9, "0ef6533eb3447af984671c12745b1c318b531f8d4665481ce91e31798d58fe73f9e34b2d10cfcca2651e402ec27ff657a1967a719b0860cb8278c22402e0e67bea7c6073620b03673ca1a398d9168a71cd61fcc3f7d47a8038c5c0c81f946ba6b3c4f2633c3e1a5d8d081544d93d0b6909471f9bca150ccb5ccaf773959a18756748838e32641493a22b080922e1d6811afc118e536dfea970b3a1155caa104c23164e9d89f966b328f9a7534e5c93c40dd5183e6c558ec7d0ef2d3460afb13cdc9a0618e93f839f91479116690c3c43cd3140595d3edb2ea94831f1e8621a7f0a20b24412524dfd36"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x140, 0x2, [0xff0]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001280)={0x40, 0xb, 0x2, "d457"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000f80)={0x40, 0x19, 0x2, '\nk'}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0xdf85}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x44}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0xd2}, &(0x7f0000001080)={0x40, 0x21, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000440)={'pim6reg0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000480)=0x1) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_connect$uac1(0x5, 0x10d, &(0x7f00000013c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x3, 0x1, 0x7, 0x70, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0x4e}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, 0x4, [0x9, 0x2, 0x4, 0x2]}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x6, 0x5, [0xc, 0x9, 0x9, 0x6, 0x5], 0x4}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x4, 0x9, "b58b2dbeb89d"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x4, 0x6, 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x2, 0x7, "e325"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xce, 0x4, 0x11, 0x0, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x0, 0x8b, "7d1628", 'E'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x16, 0xd5, 0x3, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x8000, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x7, 0x4, {0x7, 0x25, 0x1, 0x4, 0x40, 0xc8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x10, 0x2, '<'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0x92, "15", "9b6b"}, @as_header={0x7, 0x24, 0x1, 0x17, 0x2, 0x1002}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x10, 0x9, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x53, 0x48, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xff, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0x0, 0x200}}}}}}}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x250, 0xf8, 0x4, 0x3, 0x10, 0xe}, 0x15, &(0x7f0000001540)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x40, 0xba, 0x6}]}, 0x8, [{0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x3802}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x380a}}, {0xd0, &(0x7f0000001680)=@string={0xd0, 0x3, "2864a260a80ffe61ff1078553dae3a3b405c967fe44f49ead56e368e9336b51a2b9676ed1e1942ca817105576c76b76d94be7e63d64091606d0033c7def63e6542488a33131b8ce0f18d8498be2888c6dcce3695113cfb9e93f8e8966ac8913ea670747566e0428a2ab327da16d5b5abd0ae51d61cc47bb4c7ec859efd4b7dd7fd9392c1ad620ab2966d07062f29a3a7e6e3521f12d7b8f2159a2dc693767c4d76e46e4a958831f24f40e473a96e8c93eec8418b11e19dca8582385b1b85b36379ec23487d7d16eb0eb2c2cef07e"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x140c}}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x8000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448dd, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000280)={0x0, &(0x7f0000000340)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4822, 0x200000, 0x80}}], 0x68}) 7.178552636s ago: executing program 1 (id=293): r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e000fff04fcff", 0x58}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000540)={@val={0xa, 0x10}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "0400", 0x0, 0x4, 0x0, @empty, @mcast2}}}}}, 0x3a) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) close_range(r5, r1, 0x2) mount(&(0x7f0000000600)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) keyctl$update(0x2, 0x0, &(0x7f0000000940)="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", 0x1000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="b800000019007f000000000000000000e00000020000000000000000000000000000000000000000000000000000008141000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e"], 0xb8}}, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff000000070581020002"], 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000340)={0x40030000000000, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2f, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in6=@local}}]}, 0x50}}, 0x840) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="3c01000010000104000000000000000000000000000000000000000000000001000000000000000000000000000000014e210007000000080a008080110000006ee43b63e1ce375ddc65c5886c80e20783cb8ef1fe22dbad8fdb46e8a3841c6d2ab36a9fa671586142095ffeba809c385514513c9c3feee11309b8e81397753baf42da06ea6fa813b34d20b42f9685ab18a42ec33a640ea7fe7d25feb499b3d691aa6fcfb18bc85a3bb1fb65e1f17743a5ba2a336a09f6b1f7c77048257be5edb78e146ca425e0dae58614aed3823abe9c9f59db7d4a686e59a82429ff98d0d0a81f1eaec5822a823fd4771e86c157ef094f5789c5943a62effda735193445d0b3f392087c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r3], 0x13c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r11 = dup2(r10, r9) pread64(0xffffffffffffffff, &(0x7f0000000740)=""/216, 0xd8, 0x7) fcntl$setown(r6, 0x8, r0) tkill(r0, 0x13) ioctl$TCSETSF(r11, 0x5404, &(0x7f0000000440)={0x5, 0x59f, 0x1d1f, 0x2, 0x7, "5e25df72a93ba6045ccaf3edf875343ce92700"}) 7.153978179s ago: executing program 1 (id=294): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x80045440, &(0x7f0000000040)=0x15) finit_module(r0, 0x0, 0x2) 7.108177464s ago: executing program 32 (id=294): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x80045440, &(0x7f0000000040)=0x15) finit_module(r0, 0x0, 0x2) 5.689967168s ago: executing program 0 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='sys_mnt\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x16) syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x2, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x40, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, [@midi_out_jack={0x7}], [{{0x9, 0x5, 0x6, 0x3, 0x200, 0xe, 0xc, 0x98, {0x4}}}]}}}}}]}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) write(r1, &(0x7f0000000540)='algo=zstd d', 0xb) 4.265522064s ago: executing program 0 (id=316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mlockall(0x11ebf303bc655224) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/15, 0xf}], 0x1}, 0x40}], 0x2, 0x10140, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0xd2f, 0x1, 0x0, 0x0, @irqchip={0x9, 0x9615}}]}) 4.219862809s ago: executing program 0 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000002ec0)={&(0x7f0000000880), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/127, 0x7f}, {&(0x7f0000001980)=""/89, 0x59}, {&(0x7f0000001a00)=""/178, 0xb2}, {&(0x7f0000001ac0)=""/196, 0xc4}, {&(0x7f0000001bc0)=""/206, 0xce}, {&(0x7f0000001cc0)=""/86, 0x56}, {&(0x7f0000001d40)=""/55, 0x37}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/53, 0x35}], 0xa, &(0x7f0000002e80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) (async) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x18, 0x209, 0x100, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) (async) dup(r1) stat(&(0x7f0000000640)='./file0/file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000580)='./sys/bus/serio/devices/serio0/bind_mode/file0\x00', &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600), 0x800, &(0x7f0000002f00)=ANY=[@ANYBLOB="7472616e733d756e69782c6e6f2f84174da96c746f69641d136efe551d39822c3700000000", @ANYRESHEX=r2, @ANYBLOB=',posixacl,fscache,cache=mmap,ignoreqv,noxattr,directio,dont_appraise,\x00']) (async) write(r0, &(0x7f0000000540)="86435a", 0x3) (async) symlink(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000180)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/sda\x00', 0x103140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) unlinkat(r4, &(0x7f0000000200)='./file0/file1\x00', 0x200) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async) r5 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f0000000840)={@multicast2, @local}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e1d, @empty=0xe0009eff}}, {{0x2, 0x4e24, @loopback}}}, 0x108) (async) close(r6) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x4, 0x0) 4.135451297s ago: executing program 0 (id=318): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000180)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000200)='./file0\x00') mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0xf3) symlink(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x1004000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='3', 0x4e) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000480), 0x0) pipe2(&(0x7f0000000280), 0x0) 3.824653719s ago: executing program 0 (id=319): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x2, 0x9a1, 0x0, 0x0, 0x1000, 0xb1, 0xffffffffffffffff, 0x0, 0x28}}}, &(0x7f00000000c0)) r1 = syz_clone(0x40000, &(0x7f0000000100)="693544b29505361005066fa3c78b855071223f78112caab72d896a34c036c5ca104d864c0e68508da24eccb0f2bbdb508e9c48f9e49297c88ed7857988fdd7e894322d1d2fd2fa1ff5cb88e55523be4d19be6bcb6af2ff70ed26fee5534d6cf6f6003d77b028eaa1d6c10b79dcbc1c338132abaedb1ebc52c2186464ca4aed31b929f3eeb5d388c84e16a2253fc8b32f5d62403bfccbf94d0cae06f8e12af124ae7c33cebbd5906c6ee8b1ba93f099ab9d325fd2a843f4eed53a75fa147da3e8068728eb384b536053f312a9a3c26cdc", 0xd0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="935b7d68b32f8dacce4887e760673e8535978a113b4f61a00ec68aade606be156221d8d7a2083fef48b16e0c1b8a0a39fbf1a05d7d3863925f71f8fd3bb8eda5672a98164cc7dfa82cb6b40bb672b1dccffb76f82da42e95bfc153e2596389baef7843f374bea1be12e0cbe551cf742eb7a4b97faa7126a2923d7772c30b0d22019a6b637a9c68fc8ce72062c3a5c1d57af8bd96111992699ee0b6ea9c7db3f000e5b1b345773c0ec6c22505320b5f12b3f5c47d4d13249384c6a6bf2824121dbf31ca2cb5de5b4aadf83c8782a4ed58e833a08cfbc687beeb86a48d4c4e") ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000003c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x1, 0x36, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000580)={[0x8]}) rt_sigtimedwait(&(0x7f00000005c0)={[0x8]}, &(0x7f0000000600), &(0x7f0000000680)={0x77359400}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x10, 0x8, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000040) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000840)=0x4a, 0x4) pwrite64(r0, &(0x7f0000000880)="85fdb214c897030ed588d806fe8614bcfc3451717530e88dfdc3af55ed393e0701dec433e681fab6ea294bdc8f908869394744fbf6c1280210ee95aa399920c3fd206372b2f7c5ee3a96a50b62702e92aa7f09b42909a40105ac782712c5abb23e6f", 0x62, 0x8) r6 = epoll_create1(0x80000) r7 = syz_open_procfs$namespace(r1, &(0x7f0000000900)='ns/time\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x52}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000a40)) pselect6(0x40, &(0x7f0000000a80)={0x0, 0x5, 0x70c, 0xfffffffffffff92e, 0x9, 0x2, 0x4, 0x2}, &(0x7f0000000ac0)={0x61, 0xba, 0x800, 0x4, 0x1, 0x83, 0x6, 0xfffffffffffffffa}, &(0x7f0000000b00)={0x9, 0xc, 0x1, 0x8001, 0x7, 0x1, 0x6, 0x8}, &(0x7f0000000b40), &(0x7f0000000bc0)={&(0x7f0000000b80), 0x8}) ppoll(&(0x7f0000000c00)=[{r7, 0x580}, {0xffffffffffffffff, 0x400}], 0x2, &(0x7f0000000c40)={0x0, 0x989680}, &(0x7f0000000c80), 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x78, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x66}, @void, @val={0xc, 0x99, {0xfffffffa, 0x3a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cf33d847479bf2fd5d3a544148184633a7e04d7bc16dfd86"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008080) ioctl$FICLONE(r2, 0x40049409, r6) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f0000000e00)={r8, 0x0, 0x9, 0x5, 0x4, 0x8, [0x7, 0x9, 0x101, 0xfdd, 0x5, 0x8]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r2) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r10, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c1}, 0x2404004c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000001280)={{r6, &(0x7f0000000fc0)='nl80211\x00', 0x0, &(0x7f0000001000)={@align=0x7fffffff, {0x8, 0x8, 0xced1, 0x8000000000000000}}, 0xffffffff, &(0x7f0000001040)={@_ha_fsid}, &(0x7f0000001080)}, 0x2, &(0x7f0000001240)=[{0x2, 0x3, &(0x7f00000010c0)='^$\x00', &(0x7f0000001100)="a57f1f4560851011c8e02d038cbe20803f36fd5d86315413e6aff026cb69c2b221d49afcebf8857b3085e694204b63397f051b3ee7a78cabdc1be421520eb6183aa2bb573e7784602849e5da71cfdbc8a24e0933627b2d3762165a3e4dfd6185c50c5263d92813a5e31b13a35b7c620a61cf2db8f7fbcf7f1061b0a156f20da0325304e4b1546f98c72fe21ff679ffa26195965d643ab630a0586b24b50aec3af4c04a5a0880a6fb7d15", 0xaa, 0x10}, {0x2, 0x401, &(0x7f00000011c0)='\'\'\x00', &(0x7f0000001200)="b2ebc6ca2a5c9a9dc09a14489f089e62900dc56de4e2bfcd9b0636c3acf1f80f8bb621b78521bb80991f3d7004c4e0e74882c5411d2a0a4983dd", 0x3a, 0x2}]}) ioctl$PPPIOCBRIDGECHAN(r11, 0x40047435, &(0x7f0000001300)=0xfffffffb) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001d40)=[{{&(0x7f0000001340)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/52, 0x34}, {0xfffffffffffffffe}, {&(0x7f0000001400)=""/105, 0x69}], 0x3, &(0x7f00000014c0)=""/238, 0xee}, 0x2}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000015c0)=""/183, 0xb7}, {&(0x7f0000001680)=""/216, 0xd8}, {&(0x7f0000001780)=""/29, 0x1d}, {&(0x7f00000017c0)=""/167, 0xa7}, {&(0x7f0000001880)=""/121, 0x79}, {&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/9, 0x9}, {&(0x7f00000019c0)=""/73, 0x49}, {&(0x7f0000001a40)=""/178, 0xb2}, {&(0x7f0000001b00)=""/119, 0x77}], 0xa, &(0x7f0000001c40)=""/232, 0xe8}, 0x5}], 0x2, 0x40000120, &(0x7f0000001dc0)={0x0, 0x3938700}) 3.687967013s ago: executing program 0 (id=323): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$key(0xf, 0x3, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='madvise', 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 3.661438896s ago: executing program 33 (id=323): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$key(0xf, 0x3, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='madvise', 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 3.570611805s ago: executing program 3 (id=326): unshare(0x12000200) unshare(0x50000100) unshare(0x800) r0 = socket$vsock_seqpacket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000000)=0x8, r1, &(0x7f0000000080)=0xff, 0xba4, 0x8) unshare(0x8000000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000140)={0xf71, 0xdc2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000017400)={0xffffffff, 0x5}) close_range(r3, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000017580)={'ip_vti0\x00', &(0x7f0000017480)={'gretap0\x00', 0x0, 0x80, 0x700, 0x9, 0x0, {{0x2e, 0x4, 0x0, 0x5, 0xb8, 0x66, 0x0, 0x7, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x14, 0x74, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0xc}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x82, [@empty, @empty, @empty, @remote, @local, @multicast1, @private=0xa010101]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x18, 0x1, 0xb, [{@remote, 0xf}, {@rand_addr=0x64010102, 0x263e5896}]}, @rr={0x7, 0xb, 0x19, [@empty, @multicast1]}, @end, @ssrr={0x89, 0x2b, 0xcd, [@private=0xa010102, @multicast2, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ssrr={0x89, 0x1b, 0x63, [@rand_addr=0x64010101, @local, @multicast1, @multicast2, @multicast2, @private=0xa010102]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000176c0)={'tunl0\x00', &(0x7f00000175c0)={'gretap0\x00', 0x0, 0x10, 0x20, 0x203, 0xa, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x65, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x1c, 0xe2, 0x0, 0x1, [0x9, 0x4, 0x9, 0x3, 0x6, 0x4cf]}, @end, @generic={0x7, 0x3, 'm'}, @lsrr={0x83, 0x1f, 0xca, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @broadcast, @broadcast, @remote, @rand_addr=0x64010102, @empty]}, @end, @ssrr={0x89, 0x27, 0x82, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast]}, @lsrr={0x83, 0x2b, 0xcc, [@broadcast, @private=0xa010102, @private=0xa010100, @private=0xa010102, @local, @multicast1, @local, @loopback, @multicast1, @private=0xa010102]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000017700)={@loopback, @multicast1, 0x0}, &(0x7f0000017740)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000017780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000177c0)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000017900)={&(0x7f0000017440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000178c0)={&(0x7f0000017800)={0xa8, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9b}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffff82e6}, @ETHTOOL_A_RINGS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000017980), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000017ac0)={&(0x7f0000017940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000017a80)={&(0x7f00000179c0)={0xa0, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x49c0}, 0x80) socket$netlink(0x10, 0x3, 0x10) unshare(0x70200) r10 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r10, &(0x7f0000017b00)=""/202, 0xca, 0x12146, &(0x7f0000017c00)={0x2, 0x4e24, @private=0xa010100}, 0x10) r11 = dup2(r10, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000017c80)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000017c40)=@any_dev={0x4, 0x515, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x20}}}, &(0x7f0000017d00)=0x0) r13 = syz_ublk_setup_io_uring(0x22c9, &(0x7f0000017d40)={0x0, 0xf6, 0x8000, 0x0, 0xe3}, &(0x7f0000017dc0), &(0x7f0000017e00), &(0x7f0000017e40)) r14 = syz_io_uring_setup(0x5973, &(0x7f0000017f00)={0x0, 0x7d1c, 0x80, 0x0, 0x383}, &(0x7f0000017f80), &(0x7f0000017fc0), &(0x7f0000018000)) r15 = syz_ublk_setup_io_uring(0x2f7c, &(0x7f0000018040)={0x0, 0x8fe9, 0x8000, 0x0, 0x75}, &(0x7f00000180c0), &(0x7f0000018100), &(0x7f0000018140)) syz_ublk_setup_queues(r11, r12, &(0x7f0000017e80)={0x0, 0x1def, 0x200, 0x0, 0x316, 0x0, r13}, &(0x7f0000018180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbccc, 0x2000, 0x0, 0x48}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4788, 0x40, 0x0, 0x36c, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe186, 0x4, 0x1, 0x7b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf8c2, 0x20, 0x1, 0x2f0, 0x0, r15}}], 0x4, &(0x7f0000019440)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x82e, 0x0, &(0x7f0000018440)=@buf_4k="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"}}, &(0x7f00000194c0)) 3.529736279s ago: executing program 3 (id=327): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800, 0x20, 0x4}, 0x18) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x3d, 0x1, 0x1, 0xfffffffc}, {0x4, 0x2}, {0x6, 0xfc, 0x0, 0x6}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000100)=""/27) 3.194343083s ago: executing program 5 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000300)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) 3.140130729s ago: executing program 5 (id=329): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400041, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) getpeername$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r3, 0x5, &(0x7f0000000240)=0xd) r4 = syz_usb_connect(0x2, 0x666, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0xf3, 0x70, 0xf1, 0x40, 0x403, 0x7150, 0x91cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x654, 0x2, 0x8, 0xf, 0xf0, 0x0, "", [{{0x9, 0x4, 0xbb, 0x0, 0x8, 0xfd, 0x41, 0xe0, 0x73, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0xf9, 0x2, 0x2, [@generic={0xf2, 0xc07092c062d30e22, "e4b1e9aeec4adfdc760a9cb34bc389416dcf837583bbda80df9a9d2e7989471e8266abb87f40167360be6a3d08326aa12942d9f33b9519b610580d1532cb2bbdf8919bd17a2d489decde0b49f12304d2056276165f7480a3c24d827b05e53d4700993c7f5916b7bf362bc278d46b11bb32b7229679b9672be96cd7a6e6763066bf413327393c328e212428c26920cf93bfeb8c1af8eae81e6367a01a6f7e175769ae5924a6adc3a60786a6d8f6ccfbb5b5096e6e981f6d2e27eb9457aacbb00ddcfdd9a1caf0e3026d2ea70de70745b08d779b55255e9baf813005dced9223d32414f5f2b988759dc528987821dbf386"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x6}, @generic={0xd, 0x0, "0426a660d12a33ec5ffcda"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x2, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0x9f, 0x4, 0xd}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x59, 0xbd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x7}, @generic={0x9f, 0x21, "7a079013b250c53cbc17e1cd2b783409660534fe2fecbc1bf9205640797c387e066c95d22a8c7e9d2d5a7f7ee6c002762671cea4382d09be3a04990164bfaa6af2c40c454026939809f21dbbe293813b6f550398023a01a8bada0c1e2e4a3f0ef5b10810872c2989e492b42d2f37576b9e75a5aca97d87ddc65020b27e08e60c07cd52695407a1fc157268617ac5fdefb9c8da09ec82772daeba88652b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xc9, 0xc9, 0x7f, [@generic={0xe0, 0x20, "41238326ed34a0744b489a478591c365a5d58baa24c9eacf784f3502f96757122e4fbcd7943e0ae52d582d75df5ca15671a0c8a9f92b6f64e4c3bb7b26e433dd4629593c80657fc30bf7f3dfae5a8692a41e753dac1b755f527b5d2c48907dac0a5aa32f2efff3fa203d88ba747869cfde65dec68c3e234f85736d93283faf2865b2f1989c03123bdc49a17861b6da4fc1a82603acae63b247dda6947cd70e114cac3c9cbff017cddcb60180e8da8ccae6d89ba452933ecd50abf2bb43da3af3a5ac349f457344478dd5b4ce1490df7f4cf0f75a5b03e74046aecac5fce6"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x8, 0x9, 0x9, [@generic={0x52, 0x8, "d3253a18d659adb4cee3ec9e8d0b2eac07a0c1cdfac949c0b08f112fc013b05f8ea58914d3d69d8b4572ac1aa83747e38ecd168b525555b0c3acad67a17bfa97ef6f1be57ba4a8a3f74c6e7cdcb2f5a3"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x2, 0x2, 0x40, [@generic={0xdd, 0xb, "150f5947c41f0685e74a45464a06e30350b3dbe672c41af8b04ec7a356dfb982ac4e53d777986083458c2e0f5828ae5b02dc9a20ce41fefdd4f65347905218d26fe97c966b0a1080ffcf9b8e410c4a6a498ac1478c8bb08bbda89ae45e987041e48699d8e097c8d289f62361babb45faf25d3de9e90089d7e42a302ca86c54561b7bdf050fb49b7e70f32d7742a28a437a77485bc917ad3751be774a8ccea177a46cdefaaac9414b4d1852081d65d07bcbb97d41776e6a17765b22798d86b436242dd9f135f9fc44107c37e2aebf8afdbc019bae0e4adc74b1153d"}]}}]}}, {{0x9, 0x4, 0x62, 0x2, 0x5, 0x69, 0xac, 0x7, 0x8, [@hid_hid={0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x29}}], [{{0x9, 0x5, 0x7, 0x43cb7f4efc83d331, 0x10, 0x2a, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}, @generic={0xc7, 0x23, "1c39e72b125fcf6b780eddcb1fd22dce665a76773bed9c2c6d478d52a25da1348147d162e49dd3f4c484f8689f79f41fd3d6a86cda47bbf91ed9cb6dd0ff9650310d45f6c17621820f29886446e509e1bff2a9561084c7909405aff33c7dd9e50813473248bbbc10358458fdbe1350de47dcd7b8459806bbd3f0128bb21df6c16de6eae9b46cd05f9855dc2d989ef914bf2b7eb3fac3f0413466fd63f6991cdb91a8e901b3a9f9ff3cc03a31533bf74c8d59c890edec0a25e91ce4159405ee58ac24434157"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x2, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3026}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x0, 0x81, 0x6e}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x9, 0xd, 0x3, [@generic={0x19, 0x9, "cf28921127df50d3dd5b99ce390f820554b6b7749f0db8"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x6, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x2000}, @generic={0xf6, 0x1b, "4cff8e535a3f0fb289bb9ce4c4791918912e909f057032ac23c806c35d947dadb467a996dd828f07d110ebb603b75d3ada5c5f21d38fcf5090213c01c24c94816b6eb508bbcb35b4b13fc50c2e748e3c4cf1680e4532fb002cfe9d1aa591d1f7537dcba3c669fb193b263184ee26c05112c478b7aab1c3173e9d10cd036c853d79c783f2f73a6ef012c350b1e29a68915667153737feadb20acb9c5f7863dc28707cfe6373e27e51b84ab3499a52bf5c3571f497fb30b452e4a244fc7a4c15d0b354a0ded7fb8aba086ef89da58791e320d589a16e7312b2390a31130a330d1bbb9e60dc0151398adae1619ca88a51899ef26d80"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0x6, 0x5, 0xf0, 0x20, 0xfb}, 0x49, &(0x7f0000000940)={0x5, 0xf, 0x49, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x7e, 0xf00, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "8e0c605ba270ae030dae1d7af6b367ac"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x5, 0xa43}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x6, 0x0, 0xfff6, [0x2040, 0xc0ff]}]}}) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r2, &(0x7f0000000a00)={0xffffffffffffffff, r1, 0x9}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000a40)=[@timestamp], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4880) r9 = syz_open_procfs(r5, &(0x7f0000000d00)='cpuset\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x280000a, 0x4000010, r9, 0x0) ioctl$UI_BEGIN_FF_ERASE(r9, 0xc00c55ca, &(0x7f0000000d40)={0x5, 0x2, 0xa9e4}) fsopen(&(0x7f0000000d80)='mqueue\x00', 0x1) syz_usb_control_io(r4, &(0x7f0000001080)={0x2c, &(0x7f0000000dc0)={0x20, 0xe, 0xaf, {0xaf, 0xc, "ee6788e1efcd3ed9b40e91f600894dfb9da0666323140a2f92823a361f7f192c229ccd94c760629e44c8d4e1ef675f38b7918f05afb308df7db4103acb66aac83e0116302ddc123addf1a7674d058055d58b801fe63519b0670621ae31873b669a679e7a95646932cb7998456e3978efccb3baa4e61daa7e8751ec9c76d9ab7a1caade6c99dfabb6a1f8b40b1a68301c4d8a524196fb9073f00113aa41861ab36dcf439fde160b789324ff15cb"}}, &(0x7f0000000e80)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "9f0820938142435cb666faf208d59a7fab21b79a993f54319728193fe817632cfc1f24737c945bab25f6966e3b27b26d07997d5a3001ccc9227652bace67a6b20e94aa4cd0c966615fc07d39233c57d202e319bc4afab4402142daf05232f774754b30a0a0d9abab6a9e8f0ac108989aea9d2123915407e503319cea6de4c145c1b7247de3edbdbbea0a02b7b43b260ed4a700240396cb0e7322f37176"}}, &(0x7f0000000f40)={0x0, 0xf, 0xb9, {0x5, 0xf, 0xb9, 0x3, [@generic={0xa7, 0x10, 0xa, "430e10e0be00b34925fc5b1fe4b591b69009e429fdced6e1f5a524fbd20c897c5bdf61b13870ea8b6071706ae5df924c310a54dd92104aa9d98f714fd8da8649478a31f98aa587833ab87fc105ff213b20698f17fcb7fd4362ebc89c8c1faf7dbfbc8e1b3f5271ede579fc9cf52860583862c984fbb9d072905e5288df2f3198bddb505528dd55efad0e900394ae30452a610bcebe56219377671bc34e563b1e8f897802"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0xfc, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x18, 0x3, 0x7, "56170a57", "31fc3345"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x8, 0x6, 0x4, 0x81, 0xffc0}}}, &(0x7f0000001580)={0x84, &(0x7f00000010c0)={0x20, 0x969568b6bf7257f0, 0xc1, "26a83fe8a889d6390e9a2eba9e53af881f6f29134813f0c728634229f173af8a6c845e715151503ccec81171277c1a66202372c45c475c6bd6ba885b4e4bc00abc4d6113b878f1afd7377ae07a1203599eb5dab566275cce9a1653625165e1dd812c05beeb2816042ac8942e1e24a88960194674b0b244d4d9a22f75d67a51fcf7323496d1294cc8f6b885442be041eea48c94079e3158d5a391e872c4f0d7164532cfc6ea601da454f8364936d252f52f8b6e1c97de5df1b1de2a5e06133dc53b"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x20, 0x41, [0xf0]}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001340)={0x40, 0xb, 0x2, "1728"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x32a0}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000001400)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001440)={0x40, 0x19, 0x2, '4f'}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001500)={0x40, 0x1e, 0x1}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xf}}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x54, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xb953, 0x76}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x59}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x45}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x39}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(r2, &(0x7f0000002bc0)=[{&(0x7f00000017c0)="6ef05a0ff71c54f1af4b370e64c70b8291418b49e9696c6eac5f4c775a438d33867e242c54026f955e44c4bce4c69149251c6dbfafd0185d5efea6d0d3f9175fdc52bc67032279a99520be665ffe95648e5da9434ab3ea652e34949bbd50d580d928", 0x62}, {&(0x7f0000001840)="95b37f5dbf59a43bc1d69df3d2778a37c68ae18c83d640c7d460fcd3e5b53c670a55201d4d94543ac801c5e0bac710ace3c532d1c88bb53c62d81fcbbf36778a5ff2dd9f8d35ff40029a4a96045eccb8913da759ae477455c168cddea5ac68d79a6481b9a41bc9a4226d75239269c181b1e0dbe7ce6afb203ebee31cd3b0689a2934ff74fed518c5d2e04f236b4b515fd782abe8c115a9f3a23312ed3db0b42a866f8a", 0xa3}, {&(0x7f0000001900)="3b3a571640a0332c398ff965ece3f51decbc50ff09ce94ce72e6bf673debbb0012b512212c365340663bff8ea7cf18ac2a24cb20037af5acf1e8791e29cf4d6e4969a5c484750486e4559bb40b6addb0b1a093ac6f7bb705708c62483e5aa3feadf7f5a30ebf27d171d021b0e1977f236c7662ad0cd25a8261f2", 0x7a}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="3c2a127cdb79a187819f6448e96d679eeae937b389f9fc504720631ecfda6dccb664d7672420723a338ca564390c418f02e27dcb496037c54e23bfd538236c2b3d9a4233c7f426ebaeeebac9ea3d6fb8205b4844824ffd0d67d3a067f69d67ca732dc7bd7abbdde51eee9c867f7ccf30abdc45a13293ebdbace0944735a687d5da10bf65c80089", 0x87}, {&(0x7f0000002a40)="0e06584c638c3f", 0x7}, {&(0x7f0000002a80)="c4398ac960a99bfd8b1df0c46c42b64777bff3aa932e7f016b2266684b9a101f31cb3fdbabd9a1058da8cd818fe3ca8069c000414d4fa5fa617a2f37b00ce047202b9c45cdf2b2ecc85b9f959a7c030e059fc03d8cb341ca3c01adf1b52843", 0x5f}, {&(0x7f0000002b00)="ddc583d29f8e9ab291cc6f87b645121242af750f798d3dc000d20724504e6508c1f4cc279353599faea0eaa380b16a6fbd16c7365add1ad91a87b4efb99975b17a2a699a2db82c42572204ae42a0331b880207fb21ca7bc98cb3e8f8b2c946fa83f8a9249bb0d4cc275093ad708f81e3d5ddb529704140284814fa03c5b2cd37edd1aaa5cb58457b42fa4a6b3518cb2493d0b90836db453be0f7", 0x9a}], 0x8) ioctl$BLKRRPART(r9, 0x125f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002c40)) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000002e40)) r11 = add_key$keyring(&(0x7f0000002fc0), &(0x7f0000003000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000002e80)='asymmetric\x00', &(0x7f0000002ec0)={'syz', 0x0}, &(0x7f0000002f00)="435d5b2abc8c99d4ba290e76d7735580491225b61c2141893c9fcc4792e8f8bc2860f0907c37e2576a55ff547b9dbcad605b6a4d2b5d55b042a2fc85cf4f98663bd06fe97897a4be7400110d8bf1883ac33636ab03ee0f3c43c555deaf4cc290dbf7c1a264223f5bc783a70ba470a93555ffd9046d88aeefde0d26b5bc452d1a3a44e071349a51c8defa748e", 0x8c, r11) 2.676460047s ago: executing program 3 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) 2.593851505s ago: executing program 3 (id=333): r0 = syz_io_uring_setup(0x3110, &(0x7f0000000800)={0x0, 0x91d9, 0x3010, 0x2, 0x1b7}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x60000000004, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdffdffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0xfffffffffffffffd], 0x3332d000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x8000}) r4 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000940)={0xe000200f}) 2.391621425s ago: executing program 2 (id=335): mkdir(&(0x7f00000008c0)='./file0/../file0\x00', 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0xfffffffffffffffd, 0x401}) socket(0x28, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80000, 0xffefffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000440)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x19f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(0xffffffffffffffff, r2, 0x0, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec3a, 0x80, 0xffffffff, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5385, 0x1, 0x1, 0x268, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4449, 0x4000, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x891f, 0x1000, 0x0, 0x230}}], 0x1, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x10, 0x5, 0x3, 0x5, 0x7, 0x0, 0x8}, 0xc) syz_usb_connect$midi(0x2, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010204000040ca15010140000102030109022e000101026002090400000101032009072403031400030724030102000709050e02400093030805250101c8"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x2a1d404, 0x0) pipe2$9p(&(0x7f0000000100), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$binfmt_format(r5, 0x0, 0x0) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\x00', 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000880)={0x100}, 0x30, 0x0) 2.269608978s ago: executing program 4 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/wake_unlock', 0x82042, 0x102) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r1], 0xd0060) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x3, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd634936f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000140)) 2.269285448s ago: executing program 4 (id=337): r0 = memfd_secret(0x80000) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x4, @loopback, 0xf2ad}, {0xa, 0x4e22, 0xfffffffd, @remote, 0x1}, 0x0, {[0x300, 0x4, 0xb, 0x1, 0x0, 0x3, 0x9, 0x4]}}, 0x5c) r1 = socket$inet(0x2, 0xa, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) getpeername(r1, 0x0, 0x0) 2.260641139s ago: executing program 4 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x200, 0x4) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @private0, 0x4}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x200003}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{0x1, 0x2000, 0xb, 0xad, 0x4, 0xff, 0x7f, 0x5, 0x0, 0x2b, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x1, 0x3, 0xf0, 0x9, 0x5}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe3, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd}, {0x4, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xd000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) (rerun: 64) 1.907262315s ago: executing program 4 (id=339): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010006c00000000000000ff03000000000000000000000000e200000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8008, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000a80)=0x400032, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff7, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x82, 0x1000, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x3, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x9], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x5, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x7f, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x80, 0x7, 0x4, 0x2, 0x0, 0x4ccf, 0x7, 0x53cf697b, 0x7, 0x6, 0x3, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x80000009, 0x0, 0x3], [0x9, 0xbb2b, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0xce7, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1fffffd, 0x1c3880, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x6, 0x5, 0xb1c, 0x1, 0x1, 0xffff3441, 0xfff]}, 0x45c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001c0021000000000000000000070000001600000002000f000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x101, 0x3, 0x0, 0xd, 0xfff, 0xffffffffffffffff}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000280), {0x41}, &(0x7f00000002c0)=""/153, 0x99, &(0x7f0000000380)=""/4, &(0x7f0000000440)=[r3, r4], 0x2, {r5}}, 0x58) landlock_create_ruleset(&(0x7f0000000bc0)={0x2401, 0x3}, 0x7, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010006c00000000000000ff03000000000000000000000000e200000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000}) (async) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8008, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000a80)=0x400032, 0x4) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff7, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x82, 0x1000, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x3, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x9], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x5, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x7f, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x80, 0x7, 0x4, 0x2, 0x0, 0x4ccf, 0x7, 0x53cf697b, 0x7, 0x6, 0x3, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x80000009, 0x0, 0x3], [0x9, 0xbb2b, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0xce7, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1fffffd, 0x1c3880, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x6, 0x5, 0xb1c, 0x1, 0x1, 0xffff3441, 0xfff]}, 0x45c) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001c0021000000000000000000070000001600000002000f000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) fcntl$getown(0xffffffffffffffff, 0x9) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x101, 0x3, 0x0, 0xd, 0xfff, 0xffffffffffffffff}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f00000004c0)={0x2000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000280), {0x41}, &(0x7f00000002c0)=""/153, 0x99, &(0x7f0000000380)=""/4, &(0x7f0000000440)=[r3, r4], 0x2, {r5}}, 0x58) (async) landlock_create_ruleset(&(0x7f0000000bc0)={0x2401, 0x3}, 0x7, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) 1.795085727s ago: executing program 4 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x4, 0x0, &(0x7f0000006780)) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = open(&(0x7f0000000280)='./bus\x00', 0x1c527e, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000780)={0xffffffff85489db9, [{r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}], 0xc, "ebe7ef5e8b8cc5"}) r10 = open(&(0x7f0000000500)='./bus\x00', 0x1c527e, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000004780)={0xffffffff85489db9, [{r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r11, r13}, {r12}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}], 0xc, "ebe7ef5e8b8cc5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000005780)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x4, "f33fd7df2e67eb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001780)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x4, "f33fd7df2e67eb"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002780)={{0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x2, 0x30000, 0x2, 0x7fffffff, 0x8, 0xd, 0x8, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003780)={r5, r16, "0b21f4fd36ac8e45a1132dffbfec97bf747ac2d3a1d29e6d3683f28b4c7080c73c99e962b8cc14fbd186a22a85d3d7d60a36653c924a35e4a07fc26e9f11de6aecd701d4ff157736ce8fcecb4a409587c25db038fdbe03642fe6cec81b1198c6299d9a889b9723217a76c1fa17e28f56a923a7778d5a2506a93904fcfe69be10c020c86b68e8b5ee050f725f923d92205b6b71a103228ad37d862a17516c88ee248f2ab2006c44954b17f03a3ee5ba41abe15948463ca469a9d8912764699f341b45599a8aad0d82f97ffe8eaebae5a158b26a4a78cd67c852de36fa33e47f2edae3f6c91b277588f4f3ea420d1a1523b4ad56977200396da5ba6b55f771ed14", "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"}) r17 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x0, 0x21) ioctl$EXT4_IOC_SETFSUUID(r17, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "cd6354aaf48bd635ea1ffc70164cafa0"}) openat(r17, &(0x7f0000000200)='./file0\x00', 0x4c040, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000740)='./config\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') 1.794413417s ago: executing program 4 (id=341): readahead(0xffffffffffffffff, 0xf, 0x3) r0 = syz_usb_connect$uac3(0x0, 0xce, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x0, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x1a, 0x145}, [@power_domain={0x10, 0x24, 0x10, 0xd, 0x3, 0x9, 0x66, "21aa5ab642af8d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x10, 0x9, "852da4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x74, 0x8, 0x0, {0xa, 0x25, 0x25, 0x0, 0x4, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x10, 0x9, 0x6}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xe, 0x2, 0x3, 0x2, "9901"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x10, 0x5, 0x6, 0x9}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1c, 0x3f, 0x7f}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0xa5, 0x3, "d9a8bae0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x6, 0x6, {0xa, 0x25, 0x25, 0x9005, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x88, 0x3, 0xc, 0x6, 0x20, 0x2}, 0x53, &(0x7f0000000a80)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0x7fff, 0x0, 0x9, [0xff, 0x30, 0xff9f0f]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x7651afdc4d7516c2, 0x81, 0x4, 0x81, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf, 0x8, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "50348653bef678a81787ef9e35494849"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x55e13ae25d86e692, 0xa, 0x0, 0x3}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x9c, &(0x7f0000000280)=@string={0x9c, 0x3, "e4f724dc7a7813eb3074efc99028532d9e2e46e955f6905c5c3847e714bd4f4680532c24f719af498baccdc1eb12a3d2ab6dbfb5b9c4fa529c7f588af49cde2e71bdd8fb2e9bbb1fd5d858b458d95a6833b1fd014aede31cb4c98311bfb16da9b303bc26ff76aac38742f0e6292c574214743faf6d3b66ffd963008570568d2649c37f0d7d0a0d79a4a5c60d9149d78577c6bfd5954bc4249e6a"}}, {0xe8, &(0x7f0000000340)=@string={0xe8, 0x3, "b43cd60d5fde2cc13a638af9dedf03232ee20c917904d6ea71e03d3514507829624ba40e6f781c6bf51a24cdaad2d7a25ded85be4d347731c0b1f158b8dadf21656e20da2f2aee2036d39f60289f95582e9bfb3406ef6e7bdfcca4a8628ecee996b79e46a7cb7b021e55081f4521921aef99f3214aa9c35ce4b1db264a9f920618f4b9fe3c85609c288864a26a56121bfa2fd0700b1120514ab0f4a20acb376ad0db20a85f172e1f16e4336a215c124d883055708a4bcfc934820d52b1006e3818d971015c2ac549de71cff8b052e91be8193036e71ee125c66dadf5ee636d6976ba3ffa6ebd"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e80)="e7", 0x1}], 0x1, 0xfffffffffffffffd, 0x0, 0x804}, 0x8800) sendmsg$unix(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)='a', 0x1}], 0x1, 0x0, 0x0, 0x20004004}, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, 0x0) pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r8, &(0x7f0000001040)={0xb, 0x75, 0x2}, 0xb) io_setup(0x3, &(0x7f0000001080)=0x0) io_submit(r9, 0x2, &(0x7f00000010c0)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000001140)={0x0, 0x0, 0x9, 0x1, 0x0, r8, &(0x7f0000001180)='m', 0xfffffdfc}]) recvmsg$unix(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x10002) close(r3) syz_usb_control_io$uac3(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x20, 0x23, 0xf3, {0xf3, 0xc, "440a0cdfce43d4984cec5b4745fc04b1de3832537be96a72391e68228ba264abfb6803c53838efcf51ab223539f28e05c117030c612ad5d3fb928065b21d675c11b599f31b6a96be730d9d4854e9d7e49b65280063f13ebcf4222d72987c06337c70aa484bc19c46bafd40611ff9340dff3f523cfb27e3a170f1343c2f7cb1e07bc234d18ccc6a9bddc0d9469bee5d837b2cec16fc6fa7bfb9ab67b13a6b1f0bd244948ee05b4b6456c3ca0799fa6238e34140147fb3a6a8e364132fc6881f27bbfa244738706d27794d04c3e3b564f7fc1b4229c166b607b8ebb22055a53aa917dfc4103862696d5d5bdf38906e511a7b"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0x17, 0xa2, "5695c6a8ef2f363256bee287e9f963e53a377685954d37482a62b1cd34eff7e4c0259c6e2e601edecd4f29a79be191301c7b4d630e00185d9c38ccf105478859998873985308108b732cc20c231e47e2cba1e25d7d49a2e80d7987417c5fc3feb59fc74b1cd24fefadfc07ff115b73cd762dce2dbfbfd32ad3003669214fb87c9f47ccf210e90da03149a17f8a4e9ad72e7a5229e911380a074de0b53b550b0d7c6b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e8103000000bc7b569bad4841b61fb4433d4b4e49de0add146df1e00a6832da786e7b31824162f42446ee4447eb5cca8816dd4798b9b1be520900000086ea37323afe0066d8cb3438ea689bfd13a878e2bf1380279b32a97e87d855d2554d4144a43afd1e96ff4efaa7d7bb47d2cbdb44164ec7b685f3bfefae839fa7a0eaa3b09822bd06172ffe16259f392e49d890e8"], &(0x7f0000000840)={0x20, 0x82, 0x3, "45e666"}, &(0x7f0000000880)={0x20, 0x83, 0x3, "0f29ab"}, &(0x7f00000008c0)={0x20, 0x84, 0x1, "af"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "903f6d"}}) syz_usb_connect(0x0, 0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="120101027f615a08041c1500ec670102030109026200010205100909042205000206"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000cc0)={0x14, &(0x7f0000000b00)={0x40, 0x3, 0x8c, {0x8c, 0xa, "ed4087efdeba25ae58c2117daba8523f1a739e4aeeae0b508ed8c3dd85eb0f93fefb0c02a1ae190ba16d414f4c6aab4f05170bb72eb2aab7e975d860abef85b968e9dc22a8fbd13b55cc889e4275152be4794635645b6ef8ed94402e9c45a3cfb8e16db9778bc04780ae638437fee1b6cbcfc8507a132a02b41b616394e0682662454989439811753647"}}, &(0x7f0000000bc0)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "b2f65579d570755f35c9ffbaf6fa4cb0c26b7faf2c0e7e1684752c8fd6d71cf96e7ba9a7ff7a15384d9c25cf7c8021bb4b96df5f5571937464848e41618862c22abbba43e3f9453d2753c90b20f03f9245e9530b40097df5a21a0d6dd0951cc2ec7fa5c9d17c060d582321b50fd96e67067b20aedcde620b0ec7064456f40c032f0ced52e363ac31537c8582d051d57c52768494ed026a4e521d81e9aceb251c59347d865a9d78dc935dca5652885671f930ba5361c23c2f15476b64bcfa33d692c5e71e4ffc95b84d92d636cfd0885b7bcaef15b7458e06a44adae4ef0eb292be60f74e4946b6c292ab0e21869497a67646561164fec355"}}}, &(0x7f0000000e40)={0x2c, &(0x7f0000000d00)={0x40, 0x5, 0x25, "15ea79bfc4b4bc4b919388d0d441e56a7429d2f4b4e5919d6fac5ecad4d883d13aafe29167"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000dc0)={0xc0, 0x5, 0x6, "e72e85604eba"}, &(0x7f0000000e00)={0x40, 0x5, 0x4, "cc07fd28"}}) 1.778212758s ago: executing program 3 (id=342): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x4000054) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000800)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000840)=ANY=[@ANYBLOB="ffff00000080000000"]) mknod$loop(&(0x7f0000000a80)='./file0\x00', 0x6000, 0x0) lsetxattr$security_selinux(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), &(0x7f0000000b40)='system_u:object_r:setrans_initrc_exec_t:s0\x00', 0x2b, 0x2) write(r2, &(0x7f0000000140)='27', 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000900)=0x2000ff, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'erspan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000980)={&(0x7f00000009c0)={0x1d, r4}, 0x10, &(0x7f0000000a00)={&(0x7f0000000a40)=@can={{}, 0x80, 0x1, 0x4, 0x2}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) move_mount(r2, &(0x7f0000000880)='./proc\x00', r2, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x203) read$FUSE(r2, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000803, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x244, 0x1, 0x5, 0xe9d, 0x8000, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000280)="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", 0x559, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x1000}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 1.498938237s ago: executing program 5 (id=343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB='\a'], 0x0) socket$netlink(0x10, 0x3, 0x1) 1.261921611s ago: executing program 3 (id=344): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x6}}) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f00000000c0)={0x8, 0xeb, "d27b2b5d04b633b67e17217c2775a7e2d31f13771a8d66880ae087cced1b9920f70ebf5dfa31837a2eb8d91384ec26c5af74d201bfeef183ab574c18afb8127c320255561dbc62abbbbd7a208d9dfe78c2a0090da58c74475cf12d4b5a579611d6a381435f4c24efb7e7cf5e64713377b8697dfbd4cd3f3cbcf0ed9269a337aef39d073e9ab45aed95a7a58c0228f4366e2dd438212e6656805d0fe34434c26fd12f75acc12a38bf01e88288b32e11e366b1e7fa18cea109784f7b0676f93775c15a4e82c8394328c4b5c82a3463a517959f1cfdc73a7f895595d38c9e562a6e30f0c29a594defeefcac72"}) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x40, 0x7, 0x6, {0x6, 0x2, '\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 32) 990.166609ms ago: executing program 2 (id=345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 989.135979ms ago: executing program 5 (id=346): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='proc\x00', 0x800000, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x504f, &(0x7f0000002b40)={0x0, 0x803936, 0x10, 0x8080, 0x10e}, &(0x7f0000002900), &(0x7f0000002b00), &(0x7f0000002980)=0x0) munmap$IORING_OFF_SQES(r2, 0x10000) fchdir(r1) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_SET_GS(0x1e, r3, &(0x7f0000002180), 0x1001) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002200)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000002240)='dev\x00', &(0x7f0000002280)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f00000022c0)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000002300)='dev/ttyUSB0\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000002840)={0x0}) write$uinput_user_dev(r4, &(0x7f0000002340)={'syz0\x00', {0x2, 0xb, 0x0, 0x1}, 0x47, [0xa, 0x2, 0x393ceec7, 0x78b7, 0x1, 0x1, 0xcd6c, 0x5, 0xf, 0x7000, 0x10000, 0x8, 0xf, 0x8, 0x5, 0x0, 0x5, 0x5, 0x0, 0x8, 0x7fffffff, 0xb1c, 0x5, 0xfffffffc, 0x0, 0x6, 0x91, 0x800, 0x80000001, 0x80, 0x401, 0x80, 0x3, 0x3, 0x2, 0x6, 0xcbbd, 0x5, 0x7ff, 0x3, 0x5, 0x3, 0x3, 0x10001, 0xc, 0x7, 0x10000, 0x5, 0x10003, 0x1000, 0x3, 0x401, 0x1, 0xdec, 0x7, 0x3c0, 0xfffffff6, 0x8, 0x7, 0x7, 0xdec, 0x809, 0x1, 0xfff], [0x9, 0x2, 0x1, 0x3, 0x7, 0x8, 0x1, 0x80, 0x2, 0x299, 0xb6f, 0x8, 0x200, 0xedc8, 0x5, 0xac, 0x5, 0x0, 0x100, 0xffffff01, 0x8, 0x5, 0x4, 0xa, 0x1, 0xff, 0x3, 0x7, 0x2, 0x23b, 0x9, 0x1, 0x200, 0x0, 0x7, 0x0, 0x5, 0xc69d, 0x101, 0x80000000, 0x7, 0xf6, 0x4, 0x64d, 0x1, 0x1, 0xfff, 0x2000009, 0xc2, 0x10001, 0x1032800, 0xff, 0xb, 0x751, 0x3, 0xa, 0x3, 0xe0000000, 0x8, 0x3, 0x6, 0x4, 0x8001, 0x80000001], [0x3, 0xfffffff7, 0x3, 0x53, 0x8, 0x9, 0x3, 0x7, 0x1ff, 0x5, 0x0, 0xfff, 0x9, 0x8, 0x3, 0x0, 0x6, 0x4, 0xfffffffb, 0x7, 0xb, 0x2, 0x3, 0x0, 0x4, 0x8001, 0x80000000, 0x5, 0x1, 0x22bc48d0, 0x3, 0x6, 0xfff, 0x6, 0x1, 0x4, 0x7, 0x3, 0x7, 0x6, 0x2, 0x7, 0x40, 0x9, 0x3, 0xffffff81, 0x63, 0x5, 0x7, 0x1, 0x8, 0x2, 0x75, 0x9, 0xd, 0x8001, 0x7fff, 0x8, 0x7, 0x9, 0x18, 0x20000, 0x400, 0x9], [0x5, 0xff, 0x3, 0x0, 0x8001, 0x7, 0x1, 0x7, 0xe, 0x1, 0x81, 0x3, 0x3, 0x9, 0xffff, 0x2, 0x2b57, 0x6, 0xa5, 0x356d, 0x9, 0xb2a3, 0x8, 0x4, 0x4, 0xfffffffb, 0xfffffff9, 0x7, 0x80000000, 0x7fffffff, 0xffff0000, 0x1000, 0x2, 0x2, 0x7, 0xfffffffd, 0x1, 0xffffffff, 0xb1a3, 0x2, 0x8, 0x1, 0x1, 0x1, 0x6, 0x401, 0x34f, 0x33a, 0xe7d, 0x78b6, 0x80000000, 0xe2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xffff, 0xff, 0x200008, 0x1600, 0x6, 0x0, 0xa]}, 0x45c) syz_pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000002800)={0x8000, 0x18, '\x00', 0x1, &(0x7f00000027c0)=[0x0, 0x0, 0x0]}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000029c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000002a00)={0x24, 0x0, 0x0, &(0x7f0000002a40)=ANY=[@ANYRES8=r5], 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000002a80)={0x24, 0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="0003ff00000000000000"], 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000100)={0x2c, &(0x7f0000002b40)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) getsockopt$inet6_int(r6, 0x29, 0xce, 0x0, &(0x7f00000021c0)=0xffffff78) 968.411191ms ago: executing program 2 (id=347): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r5, r6, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128, 0x0, r4}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e, 0x0, r3}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0xc1, 0x1000, 0xfffffffb, 0x7f, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x21f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x800, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x802b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2, 0xfffffffd, 0x26e, 0x0, r9}}], 0x1, 0x0, 0x0) 857.525942ms ago: executing program 2 (id=348): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00050002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) read$rfkill(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x4c}}, 0x4000000) 44.004846ms ago: executing program 2 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xda0, 0x0, 0x1}]}) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8080) 0s ago: executing program 2 (id=350): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000001400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b"], 0x30}, 0x1, 0x0, 0x0, 0xc09dfb747001dbb1}, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002b40)={0x4, 0x0, 0x0, 0x188, 0x138, 0x1, 0x0, 0x8a08, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0x3000, 0x0, 0x50, 'snapshot\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'p', 0x20, '128'}}]}) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x61, &(0x7f0000000000)=""/30, &(0x7f0000000040)=0x28) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f00000016c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) kernel console output (not intermixed with test programs): 87362621e77e54386714fae73a9 [ 29.897513][ T533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.897524][ T533] Call Trace: [ 29.897529][ T533] [ 29.897537][ T533] __dump_stack+0x21/0x30 [ 29.897560][ T533] dump_stack_lvl+0x140/0x1c0 [ 29.897578][ T533] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.897594][ T533] dump_stack+0x19/0x20 [ 29.897608][ T533] should_fail_ex+0x3c2/0x510 [ 29.897625][ T533] should_failslab+0xac/0x100 [ 29.897639][ T533] __kmalloc_cache_noprof+0x41/0x470 [ 29.897664][ T533] ? init_srcu_struct_fields+0x89/0xac0 [ 29.897679][ T533] ? __vmalloc_noprof+0x104/0x1d0 [ 29.897693][ T533] init_srcu_struct_fields+0x89/0xac0 [ 29.897706][ T533] init_srcu_struct+0xf/0x30 [ 29.897719][ T533] kvm_dev_ioctl+0x428/0x14c0 [ 29.897730][ T533] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 29.897740][ T533] ? bpf_lsm_file_ioctl+0xd/0x20 [ 29.897751][ T533] ? security_file_ioctl+0x3e/0x110 [ 29.897764][ T533] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 29.897774][ T533] __se_sys_ioctl+0x123/0x1b0 [ 29.897785][ T533] __x64_sys_ioctl+0x7f/0xa0 [ 29.897795][ T533] x64_sys_call+0x1878/0x2ee0 [ 29.897806][ T533] do_syscall_64+0x57/0xf0 [ 29.897817][ T533] ? clear_bhb_loop+0x50/0xa0 [ 29.897830][ T533] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.897843][ T533] RIP: 0033:0x7f151219fb19 [ 29.897853][ T533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.897861][ T533] RSP: 002b:00007f1513033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.897874][ T533] RAX: ffffffffffffffda RBX: 00007f1512425fa0 RCX: 00007f151219fb19 [ 29.897882][ T533] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 29.897888][ T533] RBP: 00007f1512237b70 R08: 0000000000000000 R09: 0000000000000000 [ 29.897895][ T533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.897901][ T533] R13: 00007f1512426038 R14: 00007f1512425fa0 R15: 00007ffca153da78 [ 29.897917][ T533] [ 30.041791][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 30.064382][ T311] usb 4-1: USB disconnect, device number 3 [ 30.080401][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.129533][ T411] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.137797][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 30.151120][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 30.160256][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.168816][ T31] usb 2-1: Product: syz [ 30.173420][ T31] usb 2-1: Manufacturer: syz [ 30.178079][ T411] usb 1-1: device descriptor read/8, error -71 [ 30.184398][ T31] usb 2-1: SerialNumber: syz [ 30.215835][ T541] SELinux: Context system_u:object_r:inetd_e is not valid (left unmapped). [ 30.312045][ T411] usb 1-1: device descriptor read/8, error -71 [ 30.403860][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.414180][ T31] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 30.421771][ T31] usb 2-1: 2:1 : sample bitwidth 255 in over sample bytes 3 [ 30.429568][ T31] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 30.442167][ T31] usb 2-1: USB disconnect, device number 3 [ 30.452519][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.551110][ T411] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 30.572502][ T411] usb 1-1: device descriptor read/8, error -71 [ 30.702422][ T411] usb 1-1: device descriptor read/8, error -71 [ 30.811204][ T411] usb usb1-port1: unable to enumerate USB device [ 30.926392][ T600] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 30.999356][ T609] kvm: kvm [608]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 31.025454][ T596] capability: warning: `syz.3.72' uses deprecated v2 capabilities in a way that may be insecure [ 31.301107][ T411] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.451109][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 31.457342][ T411] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.468634][ T411] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.478541][ T411] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 31.491528][ T411] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.498143][ T411] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 31.507386][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.519393][ T411] usb 2-1: config 0 descriptor?? [ 31.781122][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 31.928936][ T615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.937750][ T615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.938765][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.948876][ T615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.959278][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 31.971964][ T31] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 31.972419][ T615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.982669][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.995734][ T660] x_tables: unsorted underflow at hook 3 [ 32.001090][ T31] usb 3-1: Product: syz [ 32.006514][ T31] usb 3-1: Manufacturer: syz [ 32.011256][ T411] hid (null): invalid report_size 606077993 [ 32.018263][ T411] hid (null): unknown global tag 0xe [ 32.023650][ T31] usb 3-1: SerialNumber: syz [ 32.028596][ T411] hid (null): global environment stack underflow [ 32.036898][ T411] hid (null): unknown global tag 0xe [ 32.112019][ T662] virtio-fs: tag not found [ 32.117543][ T662] virtio-fs: tag not found [ 32.200014][ T311] usb 2-1: USB disconnect, device number 4 [ 32.238651][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 32.248714][ T31] usb 3-1: USB disconnect, device number 4 [ 32.261187][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.411151][ T468] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 32.562199][ T468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.573878][ T468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.583813][ T468] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 32.592934][ T468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.601440][ T468] usb 1-1: config 0 descriptor?? [ 32.751265][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.847804][ T672] smpboot: CPU 1 is now offline [ 32.858317][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 32.858328][ T36] audit: type=1400 audit(1793897674.140:237): avc: denied { map } for pid=680 comm="syz.2.96" path="/27/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.903644][ T311] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 32.917104][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.929654][ T311] usb 4-1: Product: syz [ 32.941338][ T36] audit: type=1400 audit(1793897674.220:238): avc: denied { read write } for pid=680 comm="syz.2.96" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.965236][ T311] usb 4-1: Manufacturer: syz [ 32.969936][ T311] usb 4-1: SerialNumber: syz [ 33.010174][ T468] usbhid 1-1:0.0: can't add hid device: -71 [ 33.016218][ T468] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 33.030875][ T468] usb 1-1: USB disconnect, device number 8 [ 33.133086][ T36] audit: type=1400 audit(1793897674.420:239): avc: denied { create } for pid=692 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 33.164666][ T36] audit: type=1400 audit(1793897674.440:240): avc: denied { write } for pid=692 comm="syz.2.99" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.187096][ T36] audit: type=1400 audit(1793897674.440:241): avc: denied { open } for pid=692 comm="syz.2.99" path="/30/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.209801][ T36] audit: type=1400 audit(1793897674.440:242): avc: denied { ioctl } for pid=692 comm="syz.2.99" path="/30/file0" dev="tmpfs" ino=191 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.391110][ T672] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.541079][ T672] usb 3-1: Using ep0 maxpacket: 8 [ 33.549575][ T672] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.564094][ T672] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 33.575575][ T672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.583938][ T672] usb 3-1: Product: syz [ 33.588239][ T672] usb 3-1: Manufacturer: syz [ 33.593046][ T672] usb 3-1: SerialNumber: syz [ 33.662395][ T705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 33.720710][ T709] FAULT_INJECTION: forcing a failure. [ 33.720710][ T709] name failslab, interval 1, probability 0, space 0, times 0 [ 33.733465][ T709] CPU: 0 UID: 0 PID: 709 Comm: syz.1.103 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 33.733483][ T709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.733490][ T709] Call Trace: [ 33.733497][ T709] [ 33.733502][ T709] __dump_stack+0x21/0x30 [ 33.733517][ T709] dump_stack_lvl+0x140/0x1c0 [ 33.733527][ T709] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.733538][ T709] dump_stack+0x19/0x20 [ 33.733547][ T709] should_fail_ex+0x3c2/0x510 [ 33.733558][ T709] should_failslab+0xac/0x100 [ 33.733569][ T709] __kmalloc_node_noprof+0x69/0x500 [ 33.733583][ T709] ? __kvmalloc_node_noprof+0x128/0x300 [ 33.733597][ T709] __kvmalloc_node_noprof+0x128/0x300 [ 33.733611][ T709] ? __kasan_kmalloc+0x96/0xb0 [ 33.733621][ T709] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 33.733634][ T709] ? bpf_int_jit_compile+0x1ed/0x1450 [ 33.733646][ T709] bpf_int_jit_compile+0x377/0x1450 [ 33.733657][ T709] ? sk_filter_release_rcu+0x130/0x130 [ 33.733669][ T709] ? __cfi_bpf_int_jit_compile+0x10/0x10 [ 33.733681][ T709] ? bpf_prog_alloc_jited_linfo+0xbc/0x310 [ 33.733693][ T709] bpf_prog_select_runtime+0x373/0x690 [ 33.733706][ T709] ? kmemdup_array+0x79/0x160 [ 33.733719][ T709] bpf_prepare_filter+0xf42/0x1350 [ 33.733732][ T709] ? bpf_prog_create+0x210/0x210 [ 33.733744][ T709] ? __kasan_check_write+0x18/0x20 [ 33.733758][ T709] bpf_prog_create_from_user+0x1fc/0x2b0 [ 33.733770][ T709] fanout_set_data+0x2b0/0x530 [ 33.733780][ T709] ? __asan_memcpy+0x5a/0x80 [ 33.733793][ T709] ? fanout_add+0x13e0/0x13e0 [ 33.733802][ T709] ? avc_has_perm_noaudit+0x289/0x360 [ 33.733814][ T709] ? avc_has_perm+0x155/0x240 [ 33.733824][ T709] packet_setsockopt+0x8c3/0x1510 [ 33.733838][ T709] ? __cfi_packet_setsockopt+0x10/0x10 [ 33.733853][ T709] ? selinux_socket_setsockopt+0x324/0x3d0 [ 33.733865][ T709] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 33.733878][ T709] ? do_futex+0x37d/0x510 [ 33.733889][ T709] ? errseq_sample+0x48/0x70 [ 33.733900][ T709] ? file_init_path+0x434/0x590 [ 33.733912][ T709] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 33.733921][ T709] ? security_socket_setsockopt+0x3d/0x100 [ 33.733934][ T709] ? __cfi_packet_setsockopt+0x10/0x10 [ 33.733948][ T709] do_sock_setsockopt+0x27f/0x410 [ 33.733961][ T709] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 33.733974][ T709] ? __fget_files+0x2bc/0x330 [ 33.733985][ T709] __x64_sys_setsockopt+0x18c/0x220 [ 33.733997][ T709] x64_sys_call+0x2adc/0x2ee0 [ 33.734016][ T709] do_syscall_64+0x57/0xf0 [ 33.734027][ T709] ? clear_bhb_loop+0x50/0xa0 [ 33.734043][ T709] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.734056][ T709] RIP: 0033:0x7f32c8b9fb19 [ 33.734066][ T709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.734074][ T709] RSP: 002b:00007f32c9b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 33.734086][ T709] RAX: ffffffffffffffda RBX: 00007f32c8e25fa0 RCX: 00007f32c8b9fb19 [ 33.734094][ T709] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000004 [ 33.734101][ T709] RBP: 00007f32c8c37b70 R08: 0000000000000010 R09: 0000000000000000 [ 33.734107][ T709] R10: 0000200000001680 R11: 0000000000000246 R12: 0000000000000000 [ 33.734114][ T709] R13: 00007f32c8e26038 R14: 00007f32c8e25fa0 R15: 00007ffff3e19378 [ 33.734122][ T709] [ 34.081069][ T672] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.088175][ T672] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.109837][ T672] usb 3-1: USB disconnect, device number 5 [ 34.115724][ T311] rtl8150 4-1:1.0: couldn't reset the device [ 34.121739][ T311] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 34.131129][ T468] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 34.281075][ T468] usb 1-1: Using ep0 maxpacket: 16 [ 34.287293][ T468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.298207][ T468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 34.308988][ T468] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 34.321846][ T468] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 34.330956][ T468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.341981][ T468] usb 1-1: config 0 descriptor?? [ 34.567953][ T713] FAULT_INJECTION: forcing a failure. [ 34.567953][ T713] name failslab, interval 1, probability 0, space 0, times 0 [ 34.583852][ T713] CPU: 0 UID: 0 PID: 713 Comm: syz.1.104 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 34.583873][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.583881][ T713] Call Trace: [ 34.583885][ T713] [ 34.583890][ T713] __dump_stack+0x21/0x30 [ 34.583906][ T713] dump_stack_lvl+0x140/0x1c0 [ 34.583919][ T713] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.583930][ T713] dump_stack+0x19/0x20 [ 34.583947][ T713] should_fail_ex+0x3c2/0x510 [ 34.583957][ T713] should_failslab+0xac/0x100 [ 34.583977][ T713] kmem_cache_alloc_noprof+0x42/0x410 [ 34.583997][ T713] ? security_inode_alloc+0x51/0x230 [ 34.584012][ T713] security_inode_alloc+0x51/0x230 [ 34.584024][ T713] inode_init_always_gfp+0x756/0x9e0 [ 34.584036][ T713] ? __cfi_sock_alloc_inode+0x10/0x10 [ 34.584047][ T713] alloc_inode+0xc5/0x270 [ 34.584057][ T713] ? bpf_lsm_socket_create+0xd/0x20 [ 34.584072][ T713] new_inode_pseudo+0x19/0x40 [ 34.584083][ T713] __sock_create+0x130/0x810 [ 34.584094][ T713] __sys_socket+0xe1/0x1c0 [ 34.584106][ T713] __x64_sys_socket+0x7e/0x90 [ 34.584117][ T713] x64_sys_call+0x2608/0x2ee0 [ 34.584129][ T713] do_syscall_64+0x57/0xf0 [ 34.584140][ T713] ? clear_bhb_loop+0x50/0xa0 [ 34.584154][ T713] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.584167][ T713] RIP: 0033:0x7f32c8b9fb19 [ 34.584177][ T713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.584185][ T713] RSP: 002b:00007f32c9b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 34.584197][ T713] RAX: ffffffffffffffda RBX: 00007f32c8e25fa0 RCX: 00007f32c8b9fb19 [ 34.584205][ T713] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 34.584211][ T713] RBP: 00007f32c8c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.584217][ T713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.584223][ T713] R13: 00007f32c8e26038 R14: 00007f32c8e25fa0 R15: 00007ffff3e19378 [ 34.584232][ T713] [ 34.584262][ T713] socket: no more sockets [ 34.799406][ T36] audit: type=1400 audit(1793897676.080:243): avc: denied { getopt } for pid=712 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.934593][ T36] audit: type=1400 audit(1793897676.220:244): avc: denied { create } for pid=702 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.972633][ T36] audit: type=1400 audit(1793897676.240:245): avc: denied { setopt } for pid=702 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.091089][ T672] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.101060][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 35.242546][ T672] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 35.250774][ T672] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 35.259883][ T672] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 35.269264][ T672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.278044][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.288132][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 35.296327][ T672] usb 2-1: config 0 descriptor?? [ 35.301926][ T9] usb 3-1: config 1 has an invalid interface number: 99 but max is 0 [ 35.310533][ T672] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 35.318650][ T9] usb 3-1: config 1 has no interface number 0 [ 35.324958][ T672] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 35.333214][ T9] usb 3-1: config 1 interface 99 has no altsetting 0 [ 35.339982][ T672] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 35.352113][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 35.361292][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.369314][ T9] usb 3-1: Product: syz [ 35.374135][ T9] usb 3-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 35.385455][ T9] usb 3-1: SerialNumber: syz [ 35.512193][ T718] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 35.519829][ T36] audit: type=1400 audit(1793897676.800:246): avc: denied { load_policy } for pid=717 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 35.541275][ T672] usb 4-1: USB disconnect, device number 4 [ 35.548150][ T718] SELinux: failed to load policy [ 35.554988][ T718] SELinux: policydb version 1600434849 does not match my version range 15-33 [ 35.566068][ T718] SELinux: failed to load policy [ 35.580177][ T706] usb 2-1: USB disconnect, device number 5 [ 35.599546][ T9] usb 3-1: NDI device with a latency value of 1 [ 35.608780][ T9] ftdi_sio 3-1:1.99: FTDI USB Serial Device converter detected [ 35.619254][ T9] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 35.629282][ T9] usb 3-1: USB disconnect, device number 6 [ 35.636298][ T9] ftdi_sio 3-1:1.99: device disconnected [ 36.054522][ T722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.065284][ T722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.211835][ T745] FAULT_INJECTION: forcing a failure. [ 36.211835][ T745] name fail_futex, interval 1, probability 0, space 0, times 1 [ 36.224767][ T745] CPU: 0 UID: 0 PID: 745 Comm: syz.1.114 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 36.224787][ T745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.224797][ T745] Call Trace: [ 36.224801][ T745] [ 36.224806][ T745] __dump_stack+0x21/0x30 [ 36.224822][ T745] dump_stack_lvl+0x140/0x1c0 [ 36.224832][ T745] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.224843][ T745] dump_stack+0x19/0x20 [ 36.224852][ T745] should_fail_ex+0x3c2/0x510 [ 36.224863][ T745] should_fail+0xf/0x20 [ 36.224871][ T745] get_futex_key+0x178/0x940 [ 36.224882][ T745] ? __cfi_get_futex_key+0x10/0x10 [ 36.224893][ T745] futex_wake+0x150/0x950 [ 36.224906][ T745] ? __kasan_slab_free+0x6a/0x80 [ 36.224924][ T745] ? __cfi_futex_wake+0x10/0x10 [ 36.224937][ T745] ? probes_write+0x38/0x50 [ 36.224948][ T745] ? vfs_write+0xbd2/0xfd0 [ 36.224964][ T745] do_futex+0x37d/0x510 [ 36.224975][ T745] ? __cfi_do_futex+0x10/0x10 [ 36.224985][ T745] ? mutex_unlock+0x90/0x240 [ 36.224999][ T745] __se_sys_futex+0x13c/0x320 [ 36.225009][ T745] ? fput+0x1a4/0x230 [ 36.225020][ T745] ? __x64_sys_futex+0x110/0x110 [ 36.225030][ T745] ? __cfi_ksys_write+0x10/0x10 [ 36.225040][ T745] __x64_sys_futex+0xe9/0x110 [ 36.225050][ T745] x64_sys_call+0x227f/0x2ee0 [ 36.225062][ T745] do_syscall_64+0x57/0xf0 [ 36.225072][ T745] ? clear_bhb_loop+0x50/0xa0 [ 36.225085][ T745] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.225098][ T745] RIP: 0033:0x7f32c8b9fb19 [ 36.225108][ T745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.225116][ T745] RSP: 002b:00007f32c9b010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.225128][ T745] RAX: ffffffffffffffda RBX: 00007f32c8e25fa8 RCX: 00007f32c8b9fb19 [ 36.225136][ T745] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f32c8e25fac [ 36.225143][ T745] RBP: 00007f32c8e25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 36.225150][ T745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.225156][ T745] R13: 00007f32c8e26038 R14: 00007ffff3e19290 R15: 00007ffff3e19378 [ 36.225164][ T745] [ 36.546087][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 36.587125][ T468] usbhid 1-1:0.0: can't add hid device: -71 [ 36.593094][ T468] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.685038][ T468] usb 1-1: USB disconnect, device number 9 [ 36.708998][ T776] bridge: RTM_NEWNEIGH with invalid ether address [ 36.752423][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.774506][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.789778][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.798727][ T9] usb 4-1: Product: syz [ 36.803027][ T9] usb 4-1: Manufacturer: syz [ 36.807632][ T9] usb 4-1: SerialNumber: syz [ 36.961071][ T706] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.112942][ T706] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 37.122138][ T706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 37.130153][ T706] usb 2-1: Product: syz [ 37.134597][ T706] usb 2-1: Manufacturer: syz [ 37.387738][ T781] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 37.695190][ T706] scsi host1: uas [ 37.792938][ C0] usb 2-1: stat urb: no pending cmd for uas-tag 0 [ 37.815449][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.824439][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.833171][ T9] cdc_ncm 4-1:1.0: bind() failure [ 37.842182][ T9] usb 4-1: USB disconnect, device number 5 [ 37.999837][ C0] usb 2-1: cmd cmplt err -71 [ 38.005324][ T706] usb 2-1: USB disconnect, device number 6 [ 38.016764][ T706] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 38.024599][ T706] scsi 1:0:0:0: tag#16 CDB: opcode=0x12 12 00 00 00 24 00 [ 38.108801][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 38.108814][ T36] audit: type=1400 audit(1793897679.390:269): avc: denied { write } for pid=797 comm="syz.0.132" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.162639][ T801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 38.195040][ T806] kernel read not supported for file /policy (pid: 806 comm: syz.2.134) [ 38.365881][ T36] audit: type=1400 audit(1793897679.650:270): avc: denied { create } for pid=816 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 38.386162][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 38.407817][ T818] fuse: Bad value for 'group_id' [ 38.412957][ T818] fuse: Bad value for 'group_id' [ 38.521108][ T9] usb 1-1: device descriptor read/64, error -71 [ 38.761073][ T9] usb 1-1: device descriptor read/64, error -71 [ 38.841070][ T706] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.925066][ T36] audit: type=1400 audit(1793897680.210:271): avc: denied { create } for pid=829 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.966747][ T36] audit: type=1400 audit(1793897680.230:272): avc: denied { connect } for pid=829 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.006768][ T36] audit: type=1400 audit(1793897680.230:273): avc: denied { write } for pid=829 comm="syz.2.143" path="socket:[8500]" dev="sockfs" ino=8500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.034101][ T706] usb 2-1: Using ep0 maxpacket: 16 [ 39.039274][ T9] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 39.057068][ T706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.068105][ T706] usb 2-1: config 0 has no interfaces? [ 39.076663][ T706] usb 2-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 39.090198][ T706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.107010][ T706] usb 2-1: SerialNumber: syz [ 39.117327][ T706] usb 2-1: config 0 descriptor?? [ 39.149469][ T838] FAULT_INJECTION: forcing a failure. [ 39.149469][ T838] name failslab, interval 1, probability 0, space 0, times 0 [ 39.164878][ T838] CPU: 0 UID: 0 PID: 838 Comm: syz.2.146 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 39.164900][ T838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.164907][ T838] Call Trace: [ 39.164911][ T838] [ 39.164917][ T838] __dump_stack+0x21/0x30 [ 39.164933][ T838] dump_stack_lvl+0x140/0x1c0 [ 39.164943][ T838] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.164953][ T838] dump_stack+0x19/0x20 [ 39.164963][ T838] should_fail_ex+0x3c2/0x510 [ 39.164973][ T838] should_failslab+0xac/0x100 [ 39.164985][ T838] kmem_cache_alloc_noprof+0x42/0x410 [ 39.164999][ T838] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 39.165009][ T838] ? alloc_empty_file+0xbf/0x270 [ 39.165020][ T838] ? arch_stack_walk+0x10a/0x170 [ 39.165032][ T838] alloc_empty_file+0xbf/0x270 [ 39.165043][ T838] path_openat+0xf4/0x35a0 [ 39.165054][ T838] ? stack_depot_save_flags+0x38/0x800 [ 39.165065][ T838] ? kasan_save_track+0x4f/0x80 [ 39.165075][ T838] ? kasan_save_track+0x3e/0x80 [ 39.165084][ T838] ? kasan_save_alloc_info+0x3a/0x50 [ 39.165096][ T838] ? __kasan_slab_alloc+0x73/0x90 [ 39.165106][ T838] ? getname+0x1b/0x30 [ 39.165114][ T838] ? do_sys_openat2+0xda/0x1d0 [ 39.165126][ T838] ? __x64_sys_openat+0x13a/0x170 [ 39.165137][ T838] ? x64_sys_call+0xe69/0x2ee0 [ 39.165148][ T838] ? do_syscall_64+0x57/0xf0 [ 39.165159][ T838] ? do_filp_open+0x440/0x440 [ 39.165171][ T838] do_filp_open+0x1f2/0x440 [ 39.165182][ T838] ? __cfi_do_filp_open+0x10/0x10 [ 39.165195][ T838] ? alloc_fd+0x4c1/0x570 [ 39.165205][ T838] do_sys_openat2+0x134/0x1d0 [ 39.165217][ T838] ? do_sys_open+0x100/0x100 [ 39.165230][ T838] __x64_sys_openat+0x13a/0x170 [ 39.165242][ T838] x64_sys_call+0xe69/0x2ee0 [ 39.165252][ T838] do_syscall_64+0x57/0xf0 [ 39.165262][ T838] ? clear_bhb_loop+0x50/0xa0 [ 39.165276][ T838] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.165289][ T838] RIP: 0033:0x7f151219fb19 [ 39.165299][ T838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.165307][ T838] RSP: 002b:00007f1513033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.165319][ T838] RAX: ffffffffffffffda RBX: 00007f1512425fa0 RCX: 00007f151219fb19 [ 39.165326][ T838] RDX: 0000000000610000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 39.165333][ T838] RBP: 00007f1512237b70 R08: 0000000000000000 R09: 0000000000000000 [ 39.165340][ T838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.165346][ T838] R13: 00007f1512426038 R14: 00007f1512425fa0 R15: 00007ffca153da78 [ 39.165354][ T838] [ 39.435250][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.441583][ T36] audit: type=1400 audit(1793897680.720:274): avc: denied { ioctl } for pid=837 comm="syz.2.146" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.482273][ T841] netlink: 'syz.3.147': attribute type 4 has an invalid length. [ 39.492372][ T706] usb 2-1: USB disconnect, device number 7 [ 39.681140][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.761282][ T311] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 39.791213][ T9] usb usb1-port1: attempt power cycle [ 39.821114][ T672] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.891138][ T311] usb 4-1: device descriptor read/64, error -71 [ 39.971256][ T672] usb 3-1: Using ep0 maxpacket: 16 [ 39.980710][ T672] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.990833][ T672] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 40.001067][ T672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.009058][ T672] usb 3-1: Product: syz [ 40.026118][ T672] usb 3-1: Manufacturer: syz [ 40.030762][ T672] usb 3-1: SerialNumber: syz [ 40.131278][ T9] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 40.141163][ T311] usb 4-1: device descriptor read/64, error -71 [ 40.151965][ T9] usb 1-1: device descriptor read/8, error -71 [ 40.261072][ T468] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.281983][ T9] usb 1-1: device descriptor read/8, error -71 [ 40.381059][ T311] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 40.412032][ T468] usb 2-1: config 1 interface 0 altsetting 81 bulk endpoint 0x82 has invalid maxpacket 128 [ 40.422170][ T468] usb 2-1: config 1 interface 0 has no altsetting 0 [ 40.429997][ T468] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 40.439346][ T468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.447417][ T468] usb 2-1: Product: syz [ 40.452023][ T468] usb 2-1: Manufacturer: syz [ 40.456641][ T468] usb 2-1: SerialNumber: syz [ 40.464734][ T855] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 40.511078][ T311] usb 4-1: device descriptor read/64, error -71 [ 40.521060][ T9] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 40.541960][ T9] usb 1-1: device descriptor read/8, error -71 [ 40.671989][ T9] usb 1-1: device descriptor read/8, error -71 [ 40.679145][ T855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 40.693106][ T468] usblp0: Disabling reads from problematic bidirectional printer [ 40.704614][ T468] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 81 proto 2 vid 0x03F0 pid 0x0004 [ 40.719338][ T468] usb 2-1: USB disconnect, device number 8 [ 40.726942][ T468] usblp0: removed [ 40.751081][ T311] usb 4-1: device descriptor read/64, error -71 [ 40.791204][ T9] usb usb1-port1: unable to enumerate USB device [ 40.861130][ T311] usb usb4-port1: attempt power cycle [ 41.201082][ T311] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 41.242936][ T311] usb 4-1: device descriptor read/8, error -71 [ 41.263693][ T868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.154'. [ 41.309520][ T36] audit: type=1400 audit(1793897682.590:275): avc: denied { mounton } for pid=870 comm="syz.0.155" path="/22/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 41.339908][ T36] audit: type=1400 audit(1793897682.620:276): avc: denied { set_context_mgr } for pid=870 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 41.359691][ T871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.382012][ T311] usb 4-1: device descriptor read/8, error -71 [ 41.406945][ T36] audit: type=1400 audit(1793897682.690:277): avc: denied { search } for pid=876 comm="syz.0.156" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 41.435097][ T36] audit: type=1400 audit(1793897682.710:278): avc: denied { ioctl } for pid=876 comm="syz.0.156" path="socket:[9066]" dev="sockfs" ino=9066 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.631064][ T311] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 41.651961][ T311] usb 4-1: device descriptor read/8, error -71 [ 41.701054][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 41.782007][ T311] usb 4-1: device descriptor read/8, error -71 [ 41.852020][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 41.864561][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 41.873991][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.882142][ T9] usb 1-1: Product: syz [ 41.886410][ T9] usb 1-1: Manufacturer: syz [ 41.891304][ T311] usb usb4-port1: unable to enumerate USB device [ 41.897749][ T9] usb 1-1: SerialNumber: syz [ 42.591978][ T672] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.605498][ T889] FAULT_INJECTION: forcing a failure. [ 42.605498][ T889] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.618786][ T889] CPU: 0 UID: 0 PID: 889 Comm: syz.2.160 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 42.618804][ T889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 42.618811][ T889] Call Trace: [ 42.618814][ T889] [ 42.618819][ T889] __dump_stack+0x21/0x30 [ 42.618834][ T889] dump_stack_lvl+0x140/0x1c0 [ 42.618846][ T889] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.618855][ T889] ? check_stack_object+0x138/0x150 [ 42.618871][ T889] dump_stack+0x19/0x20 [ 42.618880][ T889] should_fail_ex+0x3c2/0x510 [ 42.618890][ T889] should_fail+0xf/0x20 [ 42.618899][ T889] should_fail_usercopy+0x1e/0x30 [ 42.618910][ T889] _copy_to_user+0x24/0xa0 [ 42.618922][ T889] simple_read_from_buffer+0xed/0x160 [ 42.618935][ T889] proc_fail_nth_read+0x1aa/0x220 [ 42.618949][ T889] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 42.618961][ T889] ? bpf_lsm_file_permission+0xd/0x20 [ 42.618973][ T889] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 42.618985][ T889] vfs_read+0x28b/0xc70 [ 42.619000][ T889] ? __cfi_vfs_read+0x10/0x10 [ 42.619013][ T889] ? __kasan_check_write+0x18/0x20 [ 42.619027][ T889] ? mutex_lock+0x97/0x1d0 [ 42.619040][ T889] ? __cfi_mutex_lock+0x10/0x10 [ 42.619053][ T889] ksys_read+0x145/0x260 [ 42.619067][ T889] ? __cfi_ksys_read+0x10/0x10 [ 42.619081][ T889] ? __kasan_check_read+0x15/0x20 [ 42.619095][ T889] __x64_sys_read+0x7f/0x90 [ 42.619103][ T889] x64_sys_call+0x2638/0x2ee0 [ 42.619114][ T889] do_syscall_64+0x57/0xf0 [ 42.619124][ T889] ? clear_bhb_loop+0x50/0xa0 [ 42.619139][ T889] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.619152][ T889] RIP: 0033:0x7f151216034e [ 42.619168][ T889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.619177][ T889] RSP: 002b:00007f1513032fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.619188][ T889] RAX: ffffffffffffffda RBX: 00007f15130336c0 RCX: 00007f151216034e [ 42.619196][ T889] RDX: 000000000000000f RSI: 00007f15130330a0 RDI: 0000000000000004 [ 42.619203][ T889] RBP: 00007f1513033090 R08: 0000000000000000 R09: 0000000000000000 [ 42.619209][ T889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.619216][ T889] R13: 00007f1512426038 R14: 00007f1512425fa0 R15: 00007ffca153da78 [ 42.619224][ T889] [ 42.918174][ T672] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 42.931390][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.951150][ T672] usb 3-1: USB disconnect, device number 7 [ 43.121143][ T311] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 43.171069][ T856] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 43.251062][ T672] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.272047][ T311] usb 2-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 43.283059][ T311] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 43.294312][ T311] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 43.307605][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 43.314427][ T311] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 43.323920][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.332403][ T856] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.346835][ T311] usb 2-1: config 0 descriptor?? [ 43.351909][ T856] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.364784][ T896] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 43.372264][ T856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.380472][ T856] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 43.389936][ T856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.400967][ T856] usb 4-1: config 0 descriptor?? [ 43.405978][ T672] usb 3-1: Using ep0 maxpacket: 8 [ 43.416027][ T672] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 43.425404][ T672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.433549][ T672] usb 3-1: Product: syz [ 43.437785][ T672] usb 3-1: Manufacturer: syz [ 43.442534][ T672] usb 3-1: SerialNumber: syz [ 43.582659][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 43.590239][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 43.605182][ T311] usb 2-1: USB disconnect, device number 9 [ 43.654145][ T898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.663289][ T898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.813231][ T887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 43.825774][ T856] hid-generic 0003:0B05:1807.0005: unknown main item tag 0x0 [ 43.833443][ T856] hid-generic 0003:0B05:1807.0005: ignoring exceeding usage max [ 43.841781][ T856] hid-generic 0003:0B05:1807.0005: ignoring exceeding usage max [ 43.853074][ T856] hid-generic 0003:0B05:1807.0005: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.3-1/input0 [ 43.875751][ T672] usb 3-1: Unsupported UAC3 BADD profile [ 43.888757][ T672] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.907741][ T672] usb 3-1: USB disconnect, device number 8 [ 43.916096][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.028359][ T887] syz.3.159 uses obsolete (PF_INET,SOCK_PACKET) [ 44.037038][ T856] usb 4-1: USB disconnect, device number 10 [ 44.112566][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 44.112577][ T36] audit: type=1400 audit(1793897685.394:283): avc: denied { watch watch_reads } for pid=900 comm="syz.1.165" path="/48/file1" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.142240][ T901] process 'syz.1.165' launched './file1' with NULL argv: empty string added [ 44.151561][ T36] audit: type=1400 audit(1793897685.434:284): avc: denied { execute_no_trans } for pid=900 comm="syz.1.165" path="/48/file1" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.392521][ T36] audit: type=1400 audit(1793897685.674:285): avc: denied { setopt } for pid=907 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.431983][ T36] audit: type=1400 audit(1793897685.694:286): avc: denied { read } for pid=907 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.481639][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 44.501182][ T36] audit: type=1400 audit(1793897685.774:287): avc: denied { mounton } for pid=915 comm="syz.0.168" path="/proc/75/task" dev="proc" ino=9322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.529687][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 44.548199][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 44.577644][ T9] usb 1-1: USB disconnect, device number 14 [ 44.587921][ T36] audit: type=1400 audit(1793897685.864:288): avc: denied { sqpoll } for pid=923 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.891212][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 45.042234][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.052546][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.064913][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.074240][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.082382][ T9] usb 1-1: Product: syz [ 45.086615][ T9] usb 1-1: Manufacturer: syz [ 45.096745][ T9] usb 1-1: SerialNumber: syz [ 45.108599][ T9] cdc_mbim 1-1:1.0: skipping garbage [ 45.120607][ T9] cdc_mbim 1-1:1.0: skipping garbage [ 45.128152][ T9] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 45.135427][ T9] cdc_mbim 1-1:1.0: bind() failure [ 45.261128][ T856] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 45.307606][ T311] usb 1-1: USB disconnect, device number 15 [ 45.411303][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.423824][ T856] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 45.437407][ T856] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 45.446776][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.454993][ T856] usb 2-1: Product: syz [ 45.459229][ T856] usb 2-1: Manufacturer: syz [ 45.463972][ T856] usb 2-1: SerialNumber: syz [ 45.581989][ T9] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 45.589257][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.603138][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.612722][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.620710][ T9] usb 3-1: SerialNumber: syz [ 45.628815][ T9] usb 3-1: bad CDC descriptors [ 45.671088][ T468] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.681261][ T856] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 45.693700][ T856] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 45.704208][ T856] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 45.715674][ T856] usb 2-1: USB disconnect, device number 10 [ 45.821124][ T468] usb 4-1: Using ep0 maxpacket: 32 [ 45.830324][ T468] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 45.848319][ T468] usb 4-1: config 0 has no interface number 0 [ 45.854579][ T311] usb 3-1: USB disconnect, device number 9 [ 45.863573][ T468] usb 4-1: config 0 interface 184 has no altsetting 0 [ 45.871813][ T468] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 45.880927][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.889297][ T468] usb 4-1: Product: syz [ 45.893671][ T468] usb 4-1: Manufacturer: syz [ 45.898245][ T468] usb 4-1: SerialNumber: syz [ 45.905775][ T468] usb 4-1: config 0 descriptor?? [ 45.912306][ T468] smsc75xx v1.0.0 [ 46.101051][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 46.112700][ T468] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 46.123591][ T468] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 46.133347][ T468] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 46.143760][ T468] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 46.201738][ T36] audit: type=1400 audit(1793897687.484:289): avc: denied { remount } for pid=944 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.252251][ T9] usb 1-1: config 1 has an invalid interface number: 5 but max is 2 [ 46.260401][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.270711][ T9] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 46.279781][ T9] usb 1-1: config 1 has no interface number 3 [ 46.286041][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 46.294047][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 46.303299][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.311400][ T9] usb 1-1: Product: syz [ 46.315653][ T9] usb 1-1: Manufacturer: syz [ 46.320252][ T9] usb 1-1: SerialNumber: syz [ 46.464366][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.473353][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.482616][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.491675][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.500321][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.509946][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.518623][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.529156][ T9] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 46.536776][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.545170][ T9] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 46.551612][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.560641][ T9] usb 1-1: selecting invalid altsetting 0 [ 46.566600][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 46.575742][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.588112][ T9] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 46.595685][ T9] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 46.601879][ T9] usb 1-1: selecting invalid altsetting 0 [ 46.607710][ T9] snd-usb-audio 1-1:1.5: probe with driver snd-usb-audio failed with error -2 [ 46.618312][ T9] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 46.625827][ T9] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 46.632079][ T9] usb 1-1: selecting invalid altsetting 0 [ 46.637909][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 46.648655][ T9] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 46.656225][ T9] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 46.662495][ T9] usb 1-1: selecting invalid altsetting 0 [ 46.671850][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 46.681598][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.698095][ T9] usb 1-1: USB disconnect, device number 16 [ 47.051402][ T36] audit: type=1400 audit(1793897688.324:290): avc: denied { append } for pid=967 comm="syz.1.180" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.102616][ T36] audit: type=1400 audit(1793897688.374:291): avc: denied { write } for pid=972 comm="syz.0.182" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.141261][ T978] FAULT_INJECTION: forcing a failure. [ 47.141261][ T978] name fail_futex, interval 1, probability 0, space 0, times 0 [ 47.160486][ T978] CPU: 0 UID: 0 PID: 978 Comm: syz.0.182 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 47.160506][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.160513][ T978] Call Trace: [ 47.160516][ T978] [ 47.160520][ T978] __dump_stack+0x21/0x30 [ 47.160535][ T978] dump_stack_lvl+0x140/0x1c0 [ 47.160545][ T978] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.160555][ T978] ? unwind_get_return_address+0x51/0x90 [ 47.160570][ T978] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 47.160580][ T978] dump_stack+0x19/0x20 [ 47.160589][ T978] should_fail_ex+0x3c2/0x510 [ 47.160600][ T978] should_fail+0xf/0x20 [ 47.160608][ T978] get_futex_key+0x22c/0x940 [ 47.160619][ T978] ? __cfi_get_futex_key+0x10/0x10 [ 47.160629][ T978] ? kasan_save_track+0x4f/0x80 [ 47.160640][ T978] futex_wake+0x150/0x950 [ 47.160652][ T978] ? __cfi_futex_wake+0x10/0x10 [ 47.160665][ T978] ? perf_lock_task_context+0x398/0x450 [ 47.160675][ T978] ? __perf_event_period+0x490/0x490 [ 47.160684][ T978] ? mutex_unlock+0x90/0x240 [ 47.160698][ T978] do_futex+0x37d/0x510 [ 47.160708][ T978] ? __kasan_check_read+0x15/0x20 [ 47.160723][ T978] ? __cfi_do_futex+0x10/0x10 [ 47.160733][ T978] ? __kasan_check_write+0x18/0x20 [ 47.160747][ T978] mm_release+0x15f/0x300 [ 47.160761][ T978] ? exit_mm_release+0x50/0x50 [ 47.160773][ T978] ? futex_exit_release+0x11d/0x1f0 [ 47.160784][ T978] exit_mm_release+0x29/0x50 [ 47.160797][ T978] do_exit+0x832/0x2850 [ 47.160811][ T978] ? futex_wake+0x666/0x950 [ 47.160824][ T978] ? __cfi_do_exit+0x10/0x10 [ 47.160837][ T978] ? futex_wait+0x2b8/0x7c0 [ 47.160849][ T978] ? __cfi_futex_wait+0x10/0x10 [ 47.160862][ T978] ? __kasan_check_write+0x18/0x20 [ 47.160875][ T978] ? _raw_spin_lock_irq+0x93/0x120 [ 47.160886][ T978] do_group_exit+0x21f/0x2f0 [ 47.160900][ T978] ? __kasan_check_write+0x18/0x20 [ 47.160913][ T978] ? recalc_sigpending+0x16c/0x1d0 [ 47.160926][ T978] get_signal+0x134c/0x1490 [ 47.160937][ T978] arch_do_signal_or_restart+0xbc/0x700 [ 47.160949][ T978] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 47.160961][ T978] ? __kasan_check_write+0x18/0x20 [ 47.160975][ T978] syscall_exit_to_user_mode+0x57/0xb0 [ 47.160989][ T978] do_syscall_64+0x63/0xf0 [ 47.160999][ T978] ? clear_bhb_loop+0x50/0xa0 [ 47.161016][ T978] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.161029][ T978] RIP: 0033:0x7fc02ab9fb19 [ 47.161039][ T978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.161048][ T978] RSP: 002b:00007fc0295b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 47.161060][ T978] RAX: fffffffffffffe00 RBX: 00007fc02ae26458 RCX: 00007fc02ab9fb19 [ 47.161068][ T978] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc02ae26458 [ 47.161075][ T978] RBP: 00007fc02ae26450 R08: 0000000000000000 R09: 0000000000000000 [ 47.161081][ T978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.161088][ T978] R13: 00007fc02ae264e8 R14: 00007fff024ba5a0 R15: 00007fff024ba688 [ 47.161096][ T978] [ 47.468148][ T36] audit: type=1400 audit(1793897688.374:292): avc: denied { mounton } for pid=972 comm="syz.0.182" path="/28/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 47.506232][ T986] tmpfs: Unknown parameter 'sIze' [ 47.517575][ T996] tmpfs: Unknown parameter 'sIze' [ 47.617031][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 47.941175][ T468] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 48.091108][ T468] usb 1-1: Using ep0 maxpacket: 16 [ 48.097324][ T468] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 48.108392][ T468] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 48.121535][ T468] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 48.130542][ T468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.141239][ T468] usb 1-1: config 0 descriptor?? [ 48.349310][ T1017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 48.476963][ T1032] FAULT_INJECTION: forcing a failure. [ 48.476963][ T1032] name failslab, interval 1, probability 0, space 0, times 0 [ 48.489747][ T1032] CPU: 0 UID: 0 PID: 1032 Comm: syz.2.194 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 48.489770][ T1032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.489777][ T1032] Call Trace: [ 48.489782][ T1032] [ 48.489787][ T1032] __dump_stack+0x21/0x30 [ 48.489803][ T1032] dump_stack_lvl+0x140/0x1c0 [ 48.489813][ T1032] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.489824][ T1032] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 48.489836][ T1032] ? mutex_unlock+0x90/0x240 [ 48.489850][ T1032] ? pcpu_alloc_noprof+0x1440/0x1440 [ 48.489860][ T1032] dump_stack+0x19/0x20 [ 48.489869][ T1032] should_fail_ex+0x3c2/0x510 [ 48.489880][ T1032] should_failslab+0xac/0x100 [ 48.489892][ T1032] kmem_cache_alloc_noprof+0x42/0x410 [ 48.489907][ T1032] ? __kasan_check_write+0x18/0x20 [ 48.489921][ T1032] ? alloc_vfsmnt+0x31/0x610 [ 48.489934][ T1032] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.489945][ T1032] alloc_vfsmnt+0x31/0x610 [ 48.489958][ T1032] clone_mnt+0x6e/0xbe0 [ 48.489971][ T1032] copy_tree+0x43d/0xcb0 [ 48.489985][ T1032] copy_mnt_ns+0x186/0x8f0 [ 48.489999][ T1032] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 48.490012][ T1032] ? create_new_namespaces+0x48/0x6f0 [ 48.490024][ T1032] create_new_namespaces+0xd9/0x6f0 [ 48.490034][ T1032] unshare_nsproxy_namespaces+0x124/0x180 [ 48.490044][ T1032] ksys_unshare+0x4f9/0x920 [ 48.490054][ T1032] ? __cfi_down_write+0x10/0x10 [ 48.490067][ T1032] ? __cfi_ksys_unshare+0x10/0x10 [ 48.490077][ T1032] ? __kasan_check_write+0x18/0x20 [ 48.490099][ T1032] __x64_sys_unshare+0x3c/0x50 [ 48.490109][ T1032] x64_sys_call+0x2998/0x2ee0 [ 48.490121][ T1032] do_syscall_64+0x57/0xf0 [ 48.490132][ T1032] ? clear_bhb_loop+0x50/0xa0 [ 48.490148][ T1032] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.490162][ T1032] RIP: 0033:0x7f151219fb19 [ 48.490174][ T1032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.490183][ T1032] RSP: 002b:00007f1513033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 48.490195][ T1032] RAX: ffffffffffffffda RBX: 00007f1512425fa0 RCX: 00007f151219fb19 [ 48.490203][ T1032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 48.490210][ T1032] RBP: 00007f1512237b70 R08: 0000000000000000 R09: 0000000000000000 [ 48.490217][ T1032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.490223][ T1032] R13: 00007f1512426038 R14: 00007f1512425fa0 R15: 00007ffca153da78 [ 48.490232][ T1032] [ 48.741232][ T468] apple 0003:05AC:027C.0006: unknown main item tag 0x4 [ 48.748121][ T468] apple 0003:05AC:027C.0006: item fetching failed at offset 39/40 [ 48.756035][ T468] apple 0003:05AC:027C.0006: parse failed [ 48.761776][ T468] apple 0003:05AC:027C.0006: probe with driver apple failed with error -22 [ 48.858206][ T468] usb 4-1: USB disconnect, device number 11 [ 48.944299][ T311] usb 1-1: USB disconnect, device number 17 [ 49.211091][ T468] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.362069][ T468] usb 4-1: too many endpoints for config 1 interface 0 altsetting 17: 65, using maximum allowed: 30 [ 49.373107][ T468] usb 4-1: config 1 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 49.386326][ T468] usb 4-1: config 1 interface 0 has no altsetting 0 [ 49.394895][ T468] usb 4-1: string descriptor 0 read error: -22 [ 49.401362][ T468] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.40 [ 49.410437][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.825457][ T468] thrustmaster 0003:044F:B300.0007: unknown main item tag 0x2 [ 49.833128][ T468] thrustmaster 0003:044F:B300.0007: unexpected long global item [ 49.840930][ T468] thrustmaster 0003:044F:B300.0007: parse failed [ 49.847531][ T468] thrustmaster 0003:044F:B300.0007: probe with driver thrustmaster failed with error -22 [ 49.911085][ T311] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 50.021090][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.033403][ T468] usb 4-1: USB disconnect, device number 12 [ 50.061071][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 50.067264][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 50.080924][ T311] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 50.093210][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.101546][ T311] usb 2-1: Product: syz [ 50.105722][ T311] usb 2-1: Manufacturer: syz [ 50.110318][ T311] usb 2-1: SerialNumber: syz [ 50.171980][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.183461][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 50.192727][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.201325][ T9] usb 3-1: Product: syz [ 50.205621][ T9] usb 3-1: Manufacturer: syz [ 50.210273][ T9] usb 3-1: SerialNumber: syz [ 50.319289][ T311] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 50.326831][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 50.341287][ T311] usb 2-1: USB disconnect, device number 11 [ 50.350334][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.422540][ T1074] kvm: user requested TSC rate below hardware speed [ 50.474385][ T9] usb 3-1: USB disconnect, device number 10 [ 50.609738][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 50.609750][ T36] audit: type=1400 audit(1793897691.884:298): avc: denied { cmd } for pid=1086 comm="syz.3.204" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 50.656305][ T1093] input: syz0 as /devices/virtual/input/input5 [ 50.664233][ T36] audit: type=1400 audit(1793897691.944:299): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.704404][ T36] audit: type=1400 audit(1793897691.944:300): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.738808][ T36] audit: type=1400 audit(1793897691.944:301): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=531 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.813257][ T36] audit: type=1400 audit(1793897692.094:302): avc: denied { mount } for pid=1112 comm="syz.3.212" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.835392][ T1113] fuse: Bad value for 'fd' [ 50.842714][ T1115] fuse: Bad value for 'fd' [ 50.877196][ T36] audit: type=1400 audit(1793897692.154:303): avc: denied { bind } for pid=1117 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.897320][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 50.907692][ T1119] netlink: 'syz.1.213': attribute type 27 has an invalid length. [ 50.915600][ T1119] lo: entered promiscuous mode [ 50.920578][ T36] audit: type=1400 audit(1793897692.194:304): avc: denied { ioctl } for pid=1117 comm="syz.1.213" path="socket:[10596]" dev="sockfs" ino=10596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.945843][ T1119] lo: entered allmulticast mode [ 50.951834][ T1119] tunl0: entered promiscuous mode [ 50.957164][ T1119] tunl0: entered allmulticast mode [ 50.963187][ T1119] gre0: entered promiscuous mode [ 50.968204][ T1119] gre0: entered allmulticast mode [ 50.973634][ T1119] gretap0: entered promiscuous mode [ 50.978912][ T1119] gretap0: entered allmulticast mode [ 50.984676][ T1119] erspan0: entered promiscuous mode [ 50.989953][ T1119] erspan0: entered allmulticast mode [ 50.995721][ T1119] ip_vti0: entered promiscuous mode [ 51.000998][ T1119] ip_vti0: entered allmulticast mode [ 51.006645][ T1119] ip6_vti0: entered promiscuous mode [ 51.020503][ T36] audit: type=1400 audit(1793897692.294:305): avc: denied { create } for pid=1124 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.044412][ T1119] ip6_vti0: entered allmulticast mode [ 51.053924][ T1119] sit0: entered promiscuous mode [ 51.060937][ T1119] sit0: entered allmulticast mode [ 51.066427][ T1119] ip6tnl0: entered promiscuous mode [ 51.071857][ T1119] ip6tnl0: entered allmulticast mode [ 51.077373][ T1119] ip6gre0: entered promiscuous mode [ 51.082854][ T1119] ip6gre0: entered allmulticast mode [ 51.088377][ T1119] syz_tun: entered promiscuous mode [ 51.093821][ T1119] syz_tun: entered allmulticast mode [ 51.099481][ T1119] ip6gretap0: entered promiscuous mode [ 51.105313][ T1119] ip6gretap0: entered allmulticast mode [ 51.111549][ T1119] bridge0: entered promiscuous mode [ 51.116894][ T1119] bridge0: entered allmulticast mode [ 51.122841][ T1119] vcan0: entered promiscuous mode [ 51.128039][ T1119] vcan0: entered allmulticast mode [ 51.141475][ T1119] dummy0: entered promiscuous mode [ 51.150945][ T36] audit: type=1400 audit(1793897692.424:306): avc: denied { mounton } for pid=1130 comm="syz.0.216" path="/syzcgroup/cpu/syz0/cpuset.cpus" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 51.177423][ T1119] dummy0: entered allmulticast mode [ 51.186449][ T1119] veth0: entered promiscuous mode [ 51.204140][ T1119] veth0: entered allmulticast mode [ 51.215806][ T1119] veth1: entered promiscuous mode [ 51.225867][ T1119] veth1: entered allmulticast mode [ 51.233326][ T36] audit: type=1400 audit(1793897692.514:307): avc: denied { connect } for pid=1137 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.259053][ T1119] wg0: entered promiscuous mode [ 51.269089][ T1119] wg0: entered allmulticast mode [ 51.278706][ T1119] wg1: entered promiscuous mode [ 51.283925][ T1119] wg1: entered allmulticast mode [ 51.289108][ T1119] wg2: entered promiscuous mode [ 51.295096][ T1119] wg2: entered allmulticast mode [ 51.300293][ T1119] veth0_to_bridge: entered promiscuous mode [ 51.306425][ T1119] veth0_to_bridge: entered allmulticast mode [ 51.313139][ T1119] veth1_to_bridge: entered promiscuous mode [ 51.319132][ T1119] veth1_to_bridge: entered allmulticast mode [ 51.325848][ T1119] veth0_to_bond: entered promiscuous mode [ 51.332228][ T1119] veth0_to_bond: entered allmulticast mode [ 51.338524][ T1119] bond_slave_0: entered promiscuous mode [ 51.344777][ T1119] bond_slave_0: entered allmulticast mode [ 51.350894][ T1119] veth1_to_bond: entered promiscuous mode [ 51.357163][ T1119] veth1_to_bond: entered allmulticast mode [ 51.363534][ T1119] bond_slave_1: entered promiscuous mode [ 51.369286][ T1119] bond_slave_1: entered allmulticast mode [ 51.375972][ T1119] veth0_to_team: entered promiscuous mode [ 51.381972][ T1119] veth0_to_team: entered allmulticast mode [ 51.388221][ T1119] team_slave_0: entered promiscuous mode [ 51.394111][ T1119] team_slave_0: entered allmulticast mode [ 51.400159][ T1119] veth1_to_team: entered promiscuous mode [ 51.406095][ T1119] veth1_to_team: entered allmulticast mode [ 51.412367][ T1119] team_slave_1: entered promiscuous mode [ 51.418069][ T1119] team_slave_1: entered allmulticast mode [ 51.424216][ T1119] veth0_to_batadv: entered promiscuous mode [ 51.430185][ T1119] veth0_to_batadv: entered allmulticast mode [ 51.436698][ T1119] batadv_slave_0: entered promiscuous mode [ 51.442852][ T1119] batadv_slave_0: entered allmulticast mode [ 51.449150][ T1119] veth1_to_batadv: entered promiscuous mode [ 51.455441][ T1119] veth1_to_batadv: entered allmulticast mode [ 51.462142][ T1119] batadv_slave_1: entered promiscuous mode [ 51.468041][ T1119] batadv_slave_1: entered allmulticast mode [ 51.474666][ T1119] xfrm0: entered promiscuous mode [ 51.479781][ T1119] xfrm0: entered allmulticast mode [ 51.485394][ T1119] veth0_to_hsr: entered promiscuous mode [ 51.491353][ T1119] veth0_to_hsr: entered allmulticast mode [ 51.497470][ T1119] hsr_slave_0: entered promiscuous mode [ 51.503417][ T1119] hsr_slave_0: entered allmulticast mode [ 51.509492][ T1119] veth1_to_hsr: entered promiscuous mode [ 51.515424][ T1119] veth1_to_hsr: entered allmulticast mode [ 51.521789][ T1119] hsr_slave_1: entered promiscuous mode [ 51.527415][ T1119] hsr_slave_1: entered allmulticast mode [ 51.533768][ T1119] veth1_virt_wifi: entered promiscuous mode [ 51.539755][ T1119] veth1_virt_wifi: entered allmulticast mode [ 51.546342][ T1119] veth0_virt_wifi: entered promiscuous mode [ 51.552637][ T1119] veth0_virt_wifi: entered allmulticast mode [ 51.559047][ T1119] veth1_vlan: entered promiscuous mode [ 51.564910][ T1119] veth1_vlan: entered allmulticast mode [ 51.570873][ T1119] veth0_vlan: entered allmulticast mode [ 51.577371][ T1119] vlan0: entered promiscuous mode [ 51.582891][ T1119] vlan0: entered allmulticast mode [ 51.588406][ T1119] vlan1: entered promiscuous mode [ 51.594228][ T1119] vlan1: entered allmulticast mode [ 51.599730][ T1119] veth1_macvtap: entered allmulticast mode [ 51.606318][ T1119] veth0_macvtap: entered promiscuous mode [ 51.612954][ T1119] veth0_macvtap: entered allmulticast mode [ 51.619164][ T1119] macsec0: entered promiscuous mode [ 51.624784][ T1119] macsec0: entered allmulticast mode [ 51.630839][ T1127] netlink: 'syz.2.215': attribute type 33 has an invalid length. [ 51.665776][ T1145] FAULT_INJECTION: forcing a failure. [ 51.665776][ T1145] name fail_futex, interval 1, probability 0, space 0, times 0 [ 51.718402][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: syz.3.222 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 51.718423][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.718431][ T1145] Call Trace: [ 51.718435][ T1145] [ 51.718440][ T1145] __dump_stack+0x21/0x30 [ 51.718455][ T1145] dump_stack_lvl+0x140/0x1c0 [ 51.718465][ T1145] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.718476][ T1145] dump_stack+0x19/0x20 [ 51.718486][ T1145] should_fail_ex+0x3c2/0x510 [ 51.718496][ T1145] should_fail+0xf/0x20 [ 51.718505][ T1145] get_futex_key+0x178/0x940 [ 51.718517][ T1145] ? __cfi_get_futex_key+0x10/0x10 [ 51.718528][ T1145] futex_wake+0x150/0x950 [ 51.718539][ T1145] ? __kasan_slab_free+0x6a/0x80 [ 51.718550][ T1145] ? __cfi_futex_wake+0x10/0x10 [ 51.718563][ T1145] ? probes_write+0x38/0x50 [ 51.718573][ T1145] ? vfs_write+0xbd2/0xfd0 [ 51.718587][ T1145] do_futex+0x37d/0x510 [ 51.718598][ T1145] ? __cfi_do_futex+0x10/0x10 [ 51.718608][ T1145] ? mutex_unlock+0x90/0x240 [ 51.718621][ T1145] __se_sys_futex+0x13c/0x320 [ 51.718632][ T1145] ? fput+0x1a4/0x230 [ 51.718643][ T1145] ? __x64_sys_futex+0x110/0x110 [ 51.718653][ T1145] ? __cfi_ksys_write+0x10/0x10 [ 51.718663][ T1145] __x64_sys_futex+0xe9/0x110 [ 51.718674][ T1145] x64_sys_call+0x227f/0x2ee0 [ 51.718684][ T1145] do_syscall_64+0x57/0xf0 [ 51.718694][ T1145] ? clear_bhb_loop+0x50/0xa0 [ 51.718708][ T1145] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.718721][ T1145] RIP: 0033:0x7f38b559fb19 [ 51.718731][ T1145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.718739][ T1145] RSP: 002b:00007f38b64ed0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.718752][ T1145] RAX: ffffffffffffffda RBX: 00007f38b5825fa8 RCX: 00007f38b559fb19 [ 51.718760][ T1145] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f38b5825fac [ 51.718767][ T1145] RBP: 00007f38b5825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 51.718774][ T1145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.718780][ T1145] R13: 00007f38b5826038 R14: 00007ffdb05b22a0 R15: 00007ffdb05b2388 [ 51.718789][ T1145] [ 51.963534][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.004098][ T1167] ptp ptp0: only physical clock in use now [ 52.221105][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 52.261254][ T468] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.271401][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.351128][ T9] usb 3-1: device descriptor read/64, error -71 [ 52.411375][ T468] usb 4-1: Using ep0 maxpacket: 16 [ 52.417663][ T468] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.428111][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 52.434657][ T468] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 52.444112][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.452234][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 52.463573][ T468] usb 4-1: Product: syz [ 52.467829][ T468] usb 4-1: Manufacturer: syz [ 52.472746][ T468] usb 4-1: SerialNumber: syz [ 52.478116][ T311] usb 2-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice= 0.40 [ 52.487356][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.496045][ T468] usb 4-1: config 0 descriptor?? [ 52.502274][ T311] usb 2-1: Product: Ⰹ [ 52.506925][ T468] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22 [ 52.515028][ T311] usb 2-1: Manufacturer: ᳟ㅓ⹄顢⁷鑺霐㟮⃫繖㬣쨜폖槇뷾묄鸢ᩇ쮻껜뾾 [ 52.530457][ T311] usb 2-1: SerialNumber: ရ [ 52.601070][ T9] usb 3-1: device descriptor read/64, error -71 [ 52.708970][ T468] usb 4-1: USB disconnect, device number 13 [ 52.808325][ T1181] netlink: 'syz.0.233': attribute type 28 has an invalid length. [ 52.841106][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.991063][ T9] usb 3-1: device descriptor read/64, error -71 [ 53.231238][ T9] usb 3-1: device descriptor read/64, error -71 [ 53.248372][ T1193] incfs: Error accessing: ./file0. [ 53.253787][ T1193] incfs: mount failed -20 [ 53.342178][ T1196] overlay: ./bus is not a directory [ 53.351177][ T9] usb usb3-port1: attempt power cycle [ 53.701054][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.721981][ T9] usb 3-1: device descriptor read/8, error -71 [ 53.851981][ T9] usb 3-1: device descriptor read/8, error -71 [ 53.861173][ T468] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.013889][ T468] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 54.023133][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.031534][ T468] usb 4-1: Product: syz [ 54.035799][ T468] usb 4-1: Manufacturer: syz [ 54.040417][ T468] usb 4-1: SerialNumber: syz [ 54.091090][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 54.111968][ T9] usb 3-1: device descriptor read/8, error -71 [ 54.241960][ T9] usb 3-1: device descriptor read/8, error -71 [ 54.266677][ T468] rtl8150 4-1:1.0: couldn't reset the device [ 54.272861][ T468] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 54.282939][ T468] usb 4-1: USB disconnect, device number 14 [ 54.351130][ T9] usb usb3-port1: unable to enumerate USB device [ 54.561071][ T672] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 54.711036][ T672] usb 1-1: Using ep0 maxpacket: 16 [ 54.717186][ T672] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 54.728515][ T672] usb 1-1: config 0 interface 0 has no altsetting 0 [ 54.735420][ T672] usb 1-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 54.744712][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.753491][ T672] usb 1-1: config 0 descriptor?? [ 54.970507][ T1254] netlink: 104 bytes leftover after parsing attributes in process `syz.2.246'. [ 54.995681][ T311] usb 2-1: USB disconnect, device number 12 [ 55.014347][ T1256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.247'. [ 55.043114][ T468] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 55.162849][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.170403][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.178105][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.185817][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.193695][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.201326][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.208897][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.217836][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.226275][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.233790][ T468] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 55.243005][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.250484][ T468] usb 4-1: config 1 has no interface number 0 [ 55.256673][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.264331][ T468] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 55.273568][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.281164][ T468] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 55.292543][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.300120][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.307934][ T672] smartjoyplus 0003:0925:0005.0008: unknown main item tag 0x0 [ 55.316634][ T468] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 55.326167][ T672] smartjoyplus 0003:0925:0005.0008: hidraw0: USB HID v0.06 Device [HID 0925:0005] on usb-dummy_hcd.0-1/input0 [ 55.338986][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.353213][ T468] usb 4-1: Product: syz [ 55.359572][ T672] smartjoyplus 0003:0925:0005.0008: no output reports found [ 55.371214][ T468] usb 4-1: Manufacturer: syz [ 55.378230][ T468] usb 4-1: SerialNumber: syz [ 55.387611][ T672] usb 1-1: USB disconnect, device number 18 [ 55.597366][ T468] usb 4-1: unknown sample rate [ 55.606555][ T468] usb 4-1: unknown sample rate [ 55.615027][ T468] usb 4-1: USB disconnect, device number 15 [ 55.626030][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.652889][ T672] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 55.671002][ T672] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.747003][ T36] kauditd_printk_skb: 117 callbacks suppressed [ 55.747014][ T36] audit: type=1400 audit(1793897697.024:425): avc: denied { setopt } for pid=1276 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.780213][ T36] audit: type=1400 audit(1793897697.054:426): avc: denied { bind } for pid=1276 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.803441][ T1277] Line length is too long: Should be less than 4094 [ 55.812707][ T36] audit: type=1400 audit(1793897697.054:427): avc: denied { name_bind } for pid=1276 comm="syz.2.252" src=24099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 55.833613][ T36] audit: type=1400 audit(1793897697.054:428): avc: denied { node_bind } for pid=1276 comm="syz.2.252" saddr=172.20.20.170 src=24099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 55.910005][ T1287] rust_binder: 1286:1287 BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 55.919544][ T1287] rust_binder: Write failure EINVAL in pid:165 [ 56.041077][ T672] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 56.141633][ T36] audit: type=1400 audit(1793897697.424:429): avc: denied { create } for pid=1288 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 56.165652][ T311] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 56.173597][ T672] usb 3-1: device descriptor read/64, error -71 [ 56.186731][ T1292] device-mapper: core: Start sector is beyond the geometry limits. [ 56.195871][ T1291] device-mapper: table: 252:3: crypt: Error decoding and setting key (-EINVAL) [ 56.205093][ T1291] device-mapper: ioctl: error adding target to table [ 56.321054][ T311] usb 1-1: device descriptor read/64, error -71 [ 56.341649][ T1302] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 56.431079][ T672] usb 3-1: device descriptor read/64, error -71 [ 56.561070][ T311] usb 1-1: device descriptor read/64, error -71 [ 56.611083][ T468] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 56.631096][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 56.671099][ T672] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 56.761063][ T468] usb 4-1: Using ep0 maxpacket: 16 [ 56.767354][ T468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.778523][ T468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.788511][ T468] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.801353][ T311] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 56.809166][ T672] usb 3-1: device descriptor read/64, error -71 [ 56.815784][ T468] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.825023][ T9] usb 2-1: config 0 has an invalid descriptor of length 104, skipping remainder of the config [ 56.835684][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 56.846572][ T468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.855121][ T468] usb 4-1: config 0 descriptor?? [ 56.861285][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 56.876627][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 56.887446][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.898061][ T9] usb 2-1: config 0 descriptor?? [ 56.904945][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 56.961067][ T311] usb 1-1: device descriptor read/64, error -71 [ 57.051132][ T672] usb 3-1: device descriptor read/64, error -71 [ 57.161124][ T672] usb usb3-port1: attempt power cycle [ 57.201052][ T311] usb 1-1: device descriptor read/64, error -71 [ 57.297097][ T468] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input6 [ 57.311723][ T311] usb usb1-port1: attempt power cycle [ 57.317942][ T468] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 57.501067][ T672] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 57.512896][ T468] usb 4-1: USB disconnect, device number 16 [ 57.532067][ T672] usb 3-1: device descriptor read/8, error -71 [ 57.662020][ T672] usb 3-1: device descriptor read/8, error -71 [ 57.681120][ T311] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 57.702011][ T311] usb 1-1: device descriptor read/8, error -71 [ 57.832286][ T311] usb 1-1: device descriptor read/8, error -71 [ 57.901078][ T672] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 57.922040][ T672] usb 3-1: device descriptor read/8, error -71 [ 58.052124][ T672] usb 3-1: device descriptor read/8, error -71 [ 58.071080][ T311] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 58.092071][ T311] usb 1-1: device descriptor read/8, error -71 [ 58.161143][ T672] usb usb3-port1: unable to enumerate USB device [ 58.222127][ T311] usb 1-1: device descriptor read/8, error -71 [ 58.271063][ T468] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 58.331161][ T311] usb usb1-port1: unable to enumerate USB device [ 58.421063][ T468] usb 4-1: Using ep0 maxpacket: 8 [ 58.427540][ T468] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.436047][ T468] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.446272][ T468] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.456697][ T468] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 58.465938][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.474169][ T468] usb 4-1: Product: syz [ 58.478374][ T468] usb 4-1: Manufacturer: syz [ 58.483208][ T468] usb 4-1: SerialNumber: syz [ 58.690306][ T36] audit: type=1400 audit(1793897699.964:430): avc: denied { connect } for pid=1315 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.710609][ T1316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 58.723631][ T468] usb 4-1: invalid UAC_HEADER (v1) [ 58.730118][ T468] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.741140][ T468] usb 4-1: USB disconnect, device number 17 [ 58.752274][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.828917][ T36] audit: type=1400 audit(1793897700.104:431): avc: denied { getopt } for pid=1319 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.929970][ T1323] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 59.027004][ T36] audit: type=1326 audit(1793897700.304:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1330 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc02ab9fb19 code=0x7ff70000 [ 59.403291][ T468] usb 2-1: USB disconnect, device number 13 [ 59.457490][ T36] audit: type=1400 audit(1793897700.734:433): avc: denied { bind } for pid=1339 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.477385][ T1340] loop2: detected capacity change from 0 to 7 [ 59.544363][ T36] audit: type=1400 audit(1793897700.764:434): avc: denied { name_bind } for pid=1339 comm="syz.1.274" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 59.606877][ T1347] netlink: 'syz.1.277': attribute type 16 has an invalid length. [ 59.630855][ T1347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 59.711759][ T1349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.818843][ T1359] kernel read not supported for file /policy (pid: 1359 comm: syz.1.282) [ 59.936710][ T1372] loop7: detected capacity change from 0 to 16384 [ 60.055488][ T1372] loop7: detected capacity change from 16384 to 0 [ 60.068579][ T1373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.286'. [ 60.086937][ T1372] geneve1: tun_chr_ioctl cmd 1074025675 [ 60.092754][ T1372] geneve1: persist disabled [ 60.097553][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 60.106432][ T468] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 60.121059][ T311] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 60.247337][ T1377] netlink: 'syz.0.288': attribute type 2 has an invalid length. [ 60.271050][ T468] usb 2-1: Using ep0 maxpacket: 16 [ 60.277180][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.297423][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.311526][ T468] usb 2-1: unable to get BOS descriptor or descriptor too short [ 60.319927][ T468] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 60.331189][ T672] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 60.344252][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.361205][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.371990][ T468] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 60.388593][ T311] usb 3-1: Product: syz [ 60.392858][ T468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.400818][ T468] usb 2-1: Product: syz [ 60.405205][ T311] usb 3-1: Manufacturer: syz [ 60.409781][ T311] usb 3-1: SerialNumber: syz [ 60.427115][ T468] usb 2-1: Manufacturer: syz [ 60.438415][ T468] usb 2-1: SerialNumber: syz [ 60.511043][ T672] usb 4-1: Using ep0 maxpacket: 8 [ 60.517412][ T672] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.525956][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 60.537068][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.546862][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 60.558262][ T672] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 60.568371][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 60.578149][ T672] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 200 [ 60.589434][ T672] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 60.598707][ T672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.606794][ T672] usb 4-1: Product: syz [ 60.611139][ T672] usb 4-1: Manufacturer: syz [ 60.615740][ T672] usb 4-1: SerialNumber: syz [ 60.623596][ T672] usb 4-1: config 0 descriptor?? [ 60.628802][ T1375] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 60.636656][ T1375] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 60.681041][ T856] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 60.831043][ T856] usb 1-1: Using ep0 maxpacket: 16 [ 60.837201][ T856] usb 1-1: config 0 has no interfaces? [ 60.843868][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 60.843878][ T36] audit: type=1326 audit(1793897702.124:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1379 comm="syz.0.289" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc02ab9fb19 code=0x0 [ 61.228276][ T1382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.237547][ T1382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.823928][ T311] usb 3-1: 0:2 : does not exist [ 62.829117][ T311] usb 3-1: unit 9 not found! [ 62.838342][ T311] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 62.856670][ T311] usb 3-1: USB disconnect, device number 19 [ 62.867574][ T1387] /dev/syzrnull2: Can't lookup blockdev [ 62.873435][ T36] audit: type=1400 audit(1793897704.144:438): avc: denied { mounton } for pid=1386 comm="syz.2.291" path="/92/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 62.911458][ T672] usb 4-1: USB disconnect, device number 18 [ 62.927443][ T468] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 62.955903][ T468] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.992965][ T468] usb 2-1: USB disconnect, device number 14 [ 63.002478][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.030028][ T573] bridge_slave_0: left allmulticast mode [ 63.043625][ T573] bridge_slave_0: left promiscuous mode [ 63.061513][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.126695][ T311] logitech-hidpp-device 0005:046D:B012.000B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 63.168353][ T1394] fido_id[1394]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.223512][ T36] audit: type=1400 audit(1793897704.494:439): avc: denied { create } for pid=1395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.262118][ T672] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 63.295536][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.303340][ T1395] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.310475][ T1395] bridge_slave_0: entered allmulticast mode [ 63.317017][ T1395] bridge_slave_0: entered promiscuous mode [ 63.323791][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.330918][ T1395] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.338446][ T1395] bridge_slave_1: entered allmulticast mode [ 63.344838][ T1395] bridge_slave_1: entered promiscuous mode [ 63.386723][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.393809][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.401070][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.408070][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.427956][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.435397][ T672] usb 4-1: Using ep0 maxpacket: 16 [ 63.445796][ T856] usb 1-1: string descriptor 0 read error: -71 [ 63.457928][ T672] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 63.468613][ T856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.478035][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.485960][ T856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 63.495288][ T672] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 63.504488][ T672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.522692][ T856] usb 1-1: config 0 descriptor?? [ 63.527675][ T672] usb 4-1: Product: syz [ 63.541177][ T468] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 63.550529][ T672] usb 4-1: Manufacturer: syz [ 63.555378][ T856] usb 1-1: can't set config #0, error -71 [ 63.563650][ T672] usb 4-1: SerialNumber: syz [ 63.568350][ T856] usb 1-1: USB disconnect, device number 23 [ 63.578988][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.586060][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.598714][ T672] usb 4-1: config 0 descriptor?? [ 63.614926][ T672] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 63.628215][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.635305][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.643726][ T672] usb 4-1: Detected FT232R [ 63.666787][ T1395] veth0_vlan: entered promiscuous mode [ 63.679615][ T1395] veth1_macvtap: entered promiscuous mode [ 63.721712][ T468] usb 3-1: too many configurations: 231, using maximum allowed: 8 [ 63.730321][ T468] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 63.739225][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.751942][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.769713][ T468] usb 3-1: config index 1 descriptor too short (expected 4257, got 161) [ 63.784463][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.797993][ T1416] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.806507][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.818901][ T672] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 63.829605][ T468] usb 3-1: config index 2 descriptor too short (expected 4257, got 161) [ 63.838493][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.849048][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.859015][ T468] usb 3-1: config index 3 descriptor too short (expected 4257, got 161) [ 63.867659][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.878192][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.887917][ T468] usb 3-1: config index 4 descriptor too short (expected 4257, got 161) [ 63.896511][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.906971][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.916830][ T468] usb 3-1: config index 5 descriptor too short (expected 4257, got 161) [ 63.925422][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.936079][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.946018][ T468] usb 3-1: config index 6 descriptor too short (expected 4257, got 161) [ 63.954910][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.965396][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.975356][ T468] usb 3-1: config index 7 descriptor too short (expected 4257, got 161) [ 63.984029][ T468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.994608][ T468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.003965][ T468] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 64.013443][ T468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.030070][ T672] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 64.039031][ T672] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 64.054442][ T672] usb 4-1: USB disconnect, device number 19 [ 64.062747][ T311] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 64.075538][ T672] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 64.086455][ T672] ftdi_sio 4-1:0.0: device disconnected [ 64.231043][ T311] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.361045][ T311] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 64.426835][ T468] usb 3-1: Found UVC 0.00 device (046d:0825) [ 64.436090][ T468] usb 3-1: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 64.445132][ T468] usb 3-1: No streaming interface found for terminal 2. [ 64.457883][ T468] usb 3-1: USB disconnect, device number 20 [ 64.511132][ T311] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.516666][ T311] usb usb5-port1: attempt power cycle [ 64.567364][ T36] audit: type=1400 audit(1793897705.844:440): avc: denied { search } for pid=1421 comm="syz.3.303" name="/" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.616674][ T36] audit: type=1400 audit(1793897705.874:441): avc: denied { write } for pid=1421 comm="syz.3.303" name="usb_gadget" dev="configfs" ino=2498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.648462][ T36] audit: type=1400 audit(1793897705.874:442): avc: denied { add_name } for pid=1421 comm="syz.3.303" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.670542][ T36] audit: type=1400 audit(1793897705.874:443): avc: denied { create } for pid=1421 comm="syz.3.303" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 64.690708][ T36] audit: type=1400 audit(1793897705.884:444): avc: denied { create } for pid=1421 comm="syz.3.303" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 64.721057][ T672] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 64.747582][ T1431] ./dev/sda1: Can't lookup blockdev [ 64.758695][ T1431] sda1: Can't mount, would change RO state [ 64.764848][ T1431] sda1: Can't mount, would change RO state [ 64.770828][ T1431] sda1: Can't mount, would change RO state [ 64.776862][ T1431] sda1: Can't mount, would change RO state [ 64.782856][ T1431] sda1: Can't mount, would change RO state [ 64.788985][ T1431] sda1: Can't mount, would change RO state [ 64.795332][ T1431] sda1: Can't mount, would change RO state [ 64.801499][ T1431] sda1: Can't mount, would change RO state [ 64.807400][ T1431] sda1: Can't mount, would change RO state [ 64.814257][ T1431] sda1: Can't mount, would change RO state [ 64.820158][ T1431] sda1: Can't mount, would change RO state [ 64.826766][ T1431] sda1: Can't mount, would change RO state [ 64.832796][ T1431] sda1: Can't mount, would change RO state [ 64.838737][ T1431] sda1: Can't mount, would change RO state [ 64.844855][ T1431] sda1: Can't mount, would change RO state [ 64.850815][ T1431] sda1: Can't mount, would change RO state [ 64.856919][ T1431] sda1: Can't mount, would change RO state [ 64.862881][ T311] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 64.870543][ T1431] sda1: Can't mount, would change RO state [ 64.876393][ T672] usb 1-1: Using ep0 maxpacket: 32 [ 64.881926][ T1431] sda1: Can't mount, would change RO state [ 64.887917][ T1431] sda1: Can't mount, would change RO state [ 64.894888][ T1431] sda1: Can't mount, would change RO state [ 64.900839][ T1431] sda1: Can't mount, would change RO state [ 64.907166][ T311] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.913158][ T1431] sda1: Can't mount, would change RO state [ 64.919017][ T672] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 64.928287][ T672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.936664][ T1431] sda1: Can't mount, would change RO state [ 64.942720][ T672] usb 1-1: Product: syz [ 64.949824][ T1431] sda1: Can't mount, would change RO state [ 64.959967][ T672] usb 1-1: Manufacturer: syz [ 64.968932][ T1431] sda1: Can't mount, would change RO state [ 64.978951][ T672] usb 1-1: SerialNumber: syz [ 64.986065][ T1431] sda1: Can't mount, would change RO state [ 64.991984][ T856] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 65.013373][ T1431] sda1: Can't mount, would change RO state [ 65.019284][ T1431] sda1: Can't mount, would change RO state [ 65.037151][ T1431] sda1: Can't mount, would change RO state [ 65.043166][ T311] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 65.058019][ T1431] sda1: Can't mount, would change RO state [ 65.071504][ T1431] sda1: Can't mount, would change RO state [ 65.085324][ T311] usb 5-1: Invalid ep0 maxpacket: 64 [ 65.094174][ T311] usb usb5-port1: unable to enumerate USB device [ 65.131901][ T36] audit: type=1400 audit(1793897706.414:445): avc: denied { setopt } for pid=1440 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.166574][ T1445] FAULT_INJECTION: forcing a failure. [ 65.166574][ T1445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.179796][ T1445] CPU: 0 UID: 0 PID: 1445 Comm: syz.2.312 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 65.179823][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.179831][ T1445] Call Trace: [ 65.179835][ T1445] [ 65.179839][ T1445] __dump_stack+0x21/0x30 [ 65.179856][ T1445] dump_stack_lvl+0x140/0x1c0 [ 65.179867][ T1445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.179878][ T1445] ? check_stack_object+0x81/0x150 [ 65.179896][ T1445] dump_stack+0x19/0x20 [ 65.179905][ T1445] should_fail_ex+0x3c2/0x510 [ 65.179916][ T1445] should_fail+0xf/0x20 [ 65.179924][ T1445] should_fail_usercopy+0x1e/0x30 [ 65.179934][ T1445] _copy_from_user+0x20/0xa0 [ 65.179946][ T1445] memdup_user+0x81/0x170 [ 65.179959][ T1445] ? strndup_user+0x40/0xd0 [ 65.179972][ T1445] strndup_user+0x6c/0xd0 [ 65.179984][ T1445] __se_sys_mount+0xe2/0x480 [ 65.180002][ T1445] ? __x64_sys_mount+0xf0/0xf0 [ 65.180012][ T1445] ? __kasan_check_write+0x18/0x20 [ 65.180027][ T1445] ? fpregs_restore_userregs+0x11c/0x260 [ 65.180043][ T1445] __x64_sys_mount+0xc3/0xf0 [ 65.180053][ T1445] x64_sys_call+0x2021/0x2ee0 [ 65.180065][ T1445] do_syscall_64+0x57/0xf0 [ 65.180076][ T1445] ? clear_bhb_loop+0x50/0xa0 [ 65.180089][ T1445] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.180103][ T1445] RIP: 0033:0x7f151219fb19 [ 65.180113][ T1445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.180123][ T1445] RSP: 002b:00007f1513033028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.180136][ T1445] RAX: ffffffffffffffda RBX: 00007f1512425fa0 RCX: 00007f151219fb19 [ 65.180144][ T1445] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 65.180152][ T1445] RBP: 00007f1512237b70 R08: 0000200000000ac0 R09: 0000000000000000 [ 65.180160][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.180166][ T1445] R13: 00007f1512426038 R14: 00007f1512425fa0 R15: 00007ffca153da78 [ 65.180174][ T1445] [ 65.389098][ T856] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.399223][ T856] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.413535][ T672] usb 1-1: USB disconnect, device number 24 [ 65.419800][ T856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 65.428869][ T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.436902][ T856] usb 4-1: Product: syz [ 65.441051][ T856] usb 4-1: Manufacturer: syz [ 65.445614][ T856] usb 4-1: SerialNumber: syz [ 65.452810][ T856] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 65.478982][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.526245][ T36] audit: type=1326 audit(1793897706.804:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1455 comm="syz.2.315" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f151219fb19 code=0x0 [ 65.652938][ T672] usb 4-1: USB disconnect, device number 20 [ 65.949981][ T1466] netlink: 5 bytes leftover after parsing attributes in process `syz.0.317'. [ 65.959717][ T36] audit: type=1400 audit(1793897707.244:447): avc: denied { ioctl } for pid=1465 comm="syz.0.317" path="socket:[13708]" dev="sockfs" ino=13708 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.050761][ T1473] FAULT_INJECTION: forcing a failure. [ 66.050761][ T1473] name failslab, interval 1, probability 0, space 0, times 0 [ 66.063531][ T1473] CPU: 0 UID: 0 PID: 1473 Comm: syz.0.318 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 66.063552][ T1473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.063560][ T1473] Call Trace: [ 66.063564][ T1473] [ 66.063570][ T1473] __dump_stack+0x21/0x30 [ 66.063585][ T1473] dump_stack_lvl+0x140/0x1c0 [ 66.063596][ T1473] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.063605][ T1473] ? __futex_queue+0x19f/0x350 [ 66.063618][ T1473] ? __cfi___futex_queue+0x10/0x10 [ 66.063630][ T1473] dump_stack+0x19/0x20 [ 66.063639][ T1473] should_fail_ex+0x3c2/0x510 [ 66.063650][ T1473] should_failslab+0xac/0x100 [ 66.063661][ T1473] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 66.063678][ T1473] ? sidtab_sid2str_get+0x135/0x360 [ 66.063693][ T1473] ? __cfi___futex_wait+0x10/0x10 [ 66.063705][ T1473] kmemdup_noprof+0x31/0x80 [ 66.063718][ T1473] sidtab_sid2str_get+0x135/0x360 [ 66.063731][ T1473] security_sid_to_context_core+0x30d/0x5d0 [ 66.063744][ T1473] security_sid_to_context+0x2e/0x50 [ 66.063756][ T1473] selinux_lsm_getattr+0x268/0x380 [ 66.063766][ T1473] ? selinux_kernel_module_from_file+0x3f0/0x3f0 [ 66.063776][ T1473] ? vfs_write+0xbd2/0xfd0 [ 66.063790][ T1473] selinux_getselfattr+0x9e/0x140 [ 66.063801][ T1473] ? __cfi_selinux_getselfattr+0x10/0x10 [ 66.063812][ T1473] ? __cfi_do_futex+0x10/0x10 [ 66.063822][ T1473] ? mutex_unlock+0x90/0x240 [ 66.063835][ T1473] security_getselfattr+0x2f5/0xb10 [ 66.063847][ T1473] ? __se_sys_futex+0x13c/0x320 [ 66.063858][ T1473] ? __cfi_security_getselfattr+0x10/0x10 [ 66.063869][ T1473] ? __kasan_check_write+0x18/0x20 [ 66.063883][ T1473] ? fpregs_restore_userregs+0x11c/0x260 [ 66.063904][ T1473] __x64_sys_lsm_get_self_attr+0x9e/0xb0 [ 66.063914][ T1473] x64_sys_call+0x2d4c/0x2ee0 [ 66.063926][ T1473] do_syscall_64+0x57/0xf0 [ 66.063937][ T1473] ? clear_bhb_loop+0x50/0xa0 [ 66.063953][ T1473] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.063966][ T1473] RIP: 0033:0x7fc02ab9fb19 [ 66.063977][ T1473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.063985][ T1473] RSP: 002b:00007fc02b9c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 66.063997][ T1473] RAX: ffffffffffffffda RBX: 00007fc02ae25fa0 RCX: 00007fc02ab9fb19 [ 66.064005][ T1473] RDX: 0000200000000480 RSI: 0000000000000000 RDI: 0000000000000064 [ 66.064013][ T1473] RBP: 00007fc02ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 66.064019][ T1473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.064025][ T1473] R13: 00007fc02ae26038 R14: 00007fc02ae25fa0 R15: 00007fff024ba688 [ 66.064033][ T1473] [ 66.406623][ T573] bridge_slave_1: left allmulticast mode [ 66.412511][ T573] bridge_slave_1: left promiscuous mode [ 66.418276][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.426002][ T573] bridge_slave_0: left allmulticast mode [ 66.431691][ T573] bridge_slave_0: left promiscuous mode [ 66.437293][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.455996][ T1482] overlay: Unknown parameter 'dont_measure' [ 66.603888][ T36] audit: type=1400 audit(1793897707.874:448): avc: denied { ioctl } for pid=1492 comm="syz.3.326" path="socket:[13938]" dev="sockfs" ino=13938 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.643619][ T1488] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.650779][ T36] audit: type=1326 audit(1793897707.914:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.3.327" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38b559fb19 code=0x0 [ 66.675434][ T1488] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.683714][ T1488] bridge_slave_0: entered allmulticast mode [ 66.690148][ T1488] bridge_slave_0: entered promiscuous mode [ 66.696938][ T573] veth1_macvtap: left promiscuous mode [ 66.702597][ T573] veth0_vlan: left promiscuous mode [ 66.739590][ T1488] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.748536][ T1488] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.758142][ T1488] bridge_slave_1: entered allmulticast mode [ 66.768170][ T1488] bridge_slave_1: entered promiscuous mode [ 66.817225][ T1488] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.824314][ T1488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.831583][ T1488] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.838613][ T1488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.858515][ T578] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.873178][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.880974][ T1500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 66.901001][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.908096][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.916229][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.923312][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.938355][ T1488] veth0_vlan: entered promiscuous mode [ 66.948553][ T1488] veth1_macvtap: entered promiscuous mode [ 67.261062][ T468] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 67.412399][ T468] usb 6-1: not running at top speed; connect to a high speed hub [ 67.420995][ T468] usb 6-1: config 8 has an invalid interface number: 187 but max is 1 [ 67.429681][ T468] usb 6-1: config 8 has an invalid interface number: 98 but max is 1 [ 67.438236][ T468] usb 6-1: config 8 has no interface number 0 [ 67.444515][ T468] usb 6-1: config 8 has no interface number 1 [ 67.450823][ T468] usb 6-1: config 8 interface 187 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.462200][ T468] usb 6-1: config 8 interface 187 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 67.475404][ T468] usb 6-1: config 8 interface 98 altsetting 2 endpoint 0x7 has an invalid bInterval 42, changing to 4 [ 67.501056][ T468] usb 6-1: config 8 interface 98 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 67.514317][ T468] usb 6-1: config 8 interface 98 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 67.529007][ T468] usb 6-1: config 8 interface 98 has no altsetting 0 [ 67.539053][ T36] audit: type=1326 audit(1793897708.824:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1515 comm="syz.3.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38b559fb19 code=0x0 [ 67.565078][ T468] usb 6-1: Dual-Role OTG device on HNP port [ 67.571286][ T468] usb 6-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=91.cc [ 67.580842][ T468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.595568][ T468] usb 6-1: Product: syz [ 67.599782][ T468] usb 6-1: Manufacturer: syz [ 67.604741][ T468] usb 6-1: SerialNumber: syz [ 67.695393][ T1520] netlink: 25 bytes leftover after parsing attributes in process `syz.4.334'. [ 67.705338][ T1520] ifb1: entered promiscuous mode [ 67.713005][ T1520] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.334'. [ 67.728867][ T36] audit: type=1400 audit(1793897709.004:451): avc: denied { search } for pid=1521 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.752309][ T1520] 0ªX¹¦Dö»: renamed from ifb1 [ 67.761557][ T1520] 0ªX¹¦Dö»: left promiscuous mode [ 67.779267][ T1520] 0ªX¹¦Dö»: entered allmulticast mode [ 67.796001][ T36] audit: type=1400 audit(1793897709.034:452): avc: denied { read } for pid=1522 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.836761][ T1530] can: request_module (can-proto-6) failed. [ 67.871047][ T36] audit: type=1400 audit(1793897709.034:453): avc: denied { open } for pid=1522 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.920563][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.954537][ T36] audit: type=1400 audit(1793897709.034:454): avc: denied { getattr } for pid=1522 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.985420][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.996577][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.006716][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.030902][ T468] usb 6-1: USB disconnect, device number 2 [ 68.036852][ T856] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 68.050435][ T36] audit: type=1400 audit(1793897709.034:455): avc: denied { getattr } for pid=1522 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.079527][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.098407][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.114335][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.130828][ T36] audit: type=1400 audit(1793897709.074:456): avc: denied { read } for pid=1524 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.154965][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.167981][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.182574][ T1538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.195951][ T856] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.204387][ T856] usb 3-1: not running at top speed; connect to a high speed hub [ 68.222183][ T856] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 68.236802][ T856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.260805][ T1559] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 68.273487][ T856] usb 3-1: Product: syz [ 68.277663][ T856] usb 3-1: Manufacturer: syz [ 68.285614][ T1559] overlay: filesystem on ./file0 not supported as upperdir [ 68.301207][ T856] usb 3-1: SerialNumber: syz [ 68.394752][ T1585] binder: Unknown parameter 'ÿÿ' [ 68.409934][ T1585] SELinux: Context system_u:object_r:setrans_initrc_exec_t:s0 is not valid (left unmapped). [ 68.432903][ T1585] FAULT_INJECTION: forcing a failure. [ 68.432903][ T1585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.461261][ T1585] CPU: 0 UID: 0 PID: 1585 Comm: syz.3.342 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 68.461287][ T1585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.461300][ T1585] Call Trace: [ 68.461303][ T1585] [ 68.461311][ T1585] __dump_stack+0x21/0x30 [ 68.461345][ T1585] dump_stack_lvl+0x140/0x1c0 [ 68.461363][ T1585] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.461374][ T1585] dump_stack+0x19/0x20 [ 68.461384][ T1585] should_fail_ex+0x3c2/0x510 [ 68.461394][ T1585] should_fail+0xf/0x20 [ 68.461403][ T1585] should_fail_usercopy+0x1e/0x30 [ 68.461413][ T1585] strncpy_from_user+0x29/0x280 [ 68.461422][ T1585] getname_flags+0x106/0x6b0 [ 68.461433][ T1585] getname+0x1b/0x30 [ 68.461442][ T1585] do_sys_openat2+0xda/0x1d0 [ 68.461455][ T1585] ? do_sys_open+0x100/0x100 [ 68.461468][ T1585] __x64_sys_openat+0x13a/0x170 [ 68.461480][ T1585] x64_sys_call+0xe69/0x2ee0 [ 68.461491][ T1585] do_syscall_64+0x57/0xf0 [ 68.461501][ T1585] ? clear_bhb_loop+0x50/0xa0 [ 68.461515][ T1585] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.461528][ T1585] RIP: 0033:0x7f38b559fb19 [ 68.461538][ T1585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.461547][ T1585] RSP: 002b:00007f38b64ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.461564][ T1585] RAX: ffffffffffffffda RBX: 00007f38b5825fa0 RCX: 00007f38b559fb19 [ 68.461574][ T1585] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 68.461582][ T1585] RBP: 00007f38b5637b70 R08: 0000000000000000 R09: 0000000000000000 [ 68.461589][ T1585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.461595][ T1585] R13: 00007f38b5826038 R14: 00007f38b5825fa0 R15: 00007ffdb05b2388 [ 68.461609][ T1585] [ 68.689780][ T856] usb 3-1: MIDIStreaming interface descriptor not found [ 68.699531][ T856] usb 3-1: USB disconnect, device number 21 [ 68.709843][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.725574][ T672] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.881109][ T672] usb 5-1: Using ep0 maxpacket: 16 [ 68.892567][ T672] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 116, changing to 7 [ 68.907030][ T672] usb 5-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 68.921145][ T672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.941069][ T672] usb 5-1: Product: 硺琰짯⢐ⵓ⺞岐㡜봔䙏厀␬᧷䦯겋쇍ያ튣涫떿쒹勺羜詘鳴⻞뵱ﯘ鬮Ά둘桚넳ǽ᳣즴ᆃ놿ꥭγ⚼盿쎪䊇Ⱙ䉗琔꼿㭭ヲ揙蔀噰⚍썉ൿ੽礍ꖤෆ䦑藗왷햿䮕Ⓞ檞 [ 68.984742][ T672] usb 5-1: Manufacturer:  [ 68.994880][ T672] usb 5-1: SerialNumber: 㲴ූ섬挺力⌃鄌ѹ㔽倔⥸䭢຤硯欜᫵촤튪ꋗ뺅㑍ㅷ뇀壱⇟湥⨯⃮팶悟鼨墕鬮㓻筮쳟ꢤ蹢랖䚞쮧ɻ唞Ἀⅅ᪒駯⇳ꥊ峃뇤⛛齊ڒﺹ蔼鱠蠨ꉤ噪ᬒ⿺烐ᄋ儠끊ꋴ쬊樷ꠠ᝟Ἦ樳尡䴒よ灕䮊짏舴刍±㡮ű⩜䧅燞劰ᯩ᧨㘰ủ◡淆揮業멶憎뵮 [ 69.050224][ T672] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 69.074612][ T672] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 69.091071][ T857] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 69.121468][ T672] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 69.151565][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.251968][ T857] usb 4-1: Using ep0 maxpacket: 32 [ 69.270099][ T857] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 69.284075][ T1654] netlink: 'syz.2.348': attribute type 5 has an invalid length. [ 69.295126][ T857] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.312882][ T1654] netlink: 45 bytes leftover after parsing attributes in process `syz.2.348'. [ 69.331824][ T857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.351055][ T857] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 69.367785][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.393599][ T857] usb 4-1: config 0 descriptor?? [ 69.398754][ T1660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1660 comm=syz.2.348 [ 69.441090][ T672] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.581052][ T672] usb 6-1: device descriptor read/64, error -71 [ 69.674368][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.685851][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.821074][ T672] usb 6-1: device descriptor read/64, error -71 [ 69.828029][ T857] kye 0003:0458:5010.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 69.839926][ T857] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 69.853194][ T857] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 69.863246][ T857] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 69.884960][ T857] kye 0003:0458:5010.000C: hidraw0: USB HID v10.01 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 69.913679][ T857] kye 0003:0458:5010.000C: tablet-enabling feature report not found [ 69.929348][ T857] kye 0003:0458:5010.000C: tablet enabling failed [ 70.071089][ T672] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.131530][ T1759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 70.170179][ T1764] ================================================================== [ 70.178282][ T1764] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 70.185817][ T1764] Read of size 8 at addr ffff88810e33f518 by task syz.2.350/1764 [ 70.193515][ T1764] [ 70.195821][ T1764] CPU: 0 UID: 0 PID: 1764 Comm: syz.2.350 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 70.195836][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.195844][ T1764] Call Trace: [ 70.195849][ T1764] [ 70.195854][ T1764] __dump_stack+0x21/0x30 [ 70.195869][ T1764] dump_stack_lvl+0x140/0x1c0 [ 70.195879][ T1764] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.195889][ T1764] ? __cfi__printk+0x10/0x10 [ 70.195904][ T1764] print_address_description+0x71/0x210 [ 70.195915][ T1764] print_report+0x4a/0x70 [ 70.195925][ T1764] kasan_report+0x162/0x1a0 [ 70.195937][ T1764] ? snapshot_ctr+0x586/0x1350 [ 70.195948][ T1764] ? snapshot_ctr+0x586/0x1350 [ 70.195959][ T1764] __asan_report_load8_noabort+0x18/0x20 [ 70.195973][ T1764] snapshot_ctr+0x586/0x1350 [ 70.195984][ T1764] ? dm_split_args+0xa1/0x740 [ 70.195994][ T1764] ? __cfi_snapshot_ctr+0x10/0x10 [ 70.196005][ T1764] ? dm_split_args+0x5d0/0x740 [ 70.196015][ T1764] dm_table_add_target+0x59f/0xcb0 [ 70.196025][ T1764] table_load+0x2eb/0x7d0 [ 70.196038][ T1764] ? __check_object_size+0x99/0x870 [ 70.196053][ T1764] ? __cfi_table_load+0x10/0x10 [ 70.196066][ T1764] ? __kasan_check_write+0x18/0x20 [ 70.196079][ T1764] ? __cfi_table_load+0x10/0x10 [ 70.196092][ T1764] dm_ctl_ioctl+0x8f0/0xde0 [ 70.196105][ T1764] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 70.196120][ T1764] ? __fget_files+0x2bc/0x330 [ 70.196131][ T1764] ? bpf_lsm_file_ioctl+0xd/0x20 [ 70.196143][ T1764] ? security_file_ioctl+0x3e/0x110 [ 70.196157][ T1764] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 70.196169][ T1764] __se_sys_ioctl+0x123/0x1b0 [ 70.196181][ T1764] __x64_sys_ioctl+0x7f/0xa0 [ 70.196192][ T1764] x64_sys_call+0x1878/0x2ee0 [ 70.196205][ T1764] do_syscall_64+0x57/0xf0 [ 70.196216][ T1764] ? clear_bhb_loop+0x50/0xa0 [ 70.196230][ T1764] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.196243][ T1764] RIP: 0033:0x7f151219fb19 [ 70.196254][ T1764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.196263][ T1764] RSP: 002b:00007f1513033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.196275][ T1764] RAX: ffffffffffffffda RBX: 00007f1512425fa0 RCX: 00007f151219fb19 [ 70.196283][ T1764] RDX: 0000200000002b40 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 70.196291][ T1764] RBP: 00007f1512237b70 R08: 0000000000000000 R09: 0000000000000000 [ 70.196297][ T1764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.196304][ T1764] R13: 00007f1512426038 R14: 00007f1512425fa0 R15: 00007ffca153da78 [ 70.196313][ T1764] [ 70.196316][ T1764] [ 70.455642][ T1764] Allocated by task 1764: [ 70.459948][ T1764] kasan_save_track+0x3e/0x80 [ 70.464608][ T1764] kasan_save_alloc_info+0x3a/0x50 [ 70.469700][ T1764] __kasan_kmalloc+0x96/0xb0 [ 70.474269][ T1764] __kmalloc_cache_node_noprof+0x225/0x430 [ 70.480069][ T1764] dm_get_table_device+0x1e3/0x6c0 [ 70.485163][ T1764] dm_get_device+0x32b/0x7f0 [ 70.489729][ T1764] snapshot_ctr+0x292/0x1350 [ 70.494312][ T1764] dm_table_add_target+0x59f/0xcb0 [ 70.499398][ T1764] table_load+0x2eb/0x7d0 [ 70.503714][ T1764] dm_ctl_ioctl+0x8f0/0xde0 [ 70.508200][ T1764] __se_sys_ioctl+0x123/0x1b0 [ 70.512875][ T1764] __x64_sys_ioctl+0x7f/0xa0 [ 70.517444][ T1764] x64_sys_call+0x1878/0x2ee0 [ 70.522099][ T1764] do_syscall_64+0x57/0xf0 [ 70.526494][ T1764] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.532371][ T1764] [ 70.534671][ T1764] Freed by task 1764: [ 70.538623][ T1764] kasan_save_track+0x3e/0x80 [ 70.543287][ T1764] kasan_save_free_info+0x44/0x50 [ 70.548310][ T1764] __kasan_slab_free+0x5f/0x80 [ 70.553063][ T1764] kfree+0x158/0x440 [ 70.556943][ T1764] dm_put_table_device+0x298/0x2e0 [ 70.562034][ T1764] dm_get_device+0x571/0x7f0 [ 70.566600][ T1764] snapshot_ctr+0x435/0x1350 [ 70.571168][ T1764] dm_table_add_target+0x59f/0xcb0 [ 70.576252][ T1764] table_load+0x2eb/0x7d0 [ 70.580560][ T1764] dm_ctl_ioctl+0x8f0/0xde0 [ 70.585045][ T1764] __se_sys_ioctl+0x123/0x1b0 [ 70.589700][ T1764] __x64_sys_ioctl+0x7f/0xa0 [ 70.594265][ T1764] x64_sys_call+0x1878/0x2ee0 [ 70.598922][ T1764] do_syscall_64+0x57/0xf0 [ 70.603314][ T1764] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.609197][ T1764] [ 70.611500][ T1764] The buggy address belongs to the object at ffff88810e33f500 [ 70.611500][ T1764] which belongs to the cache kmalloc-96 of size 96 [ 70.625379][ T1764] The buggy address is located 24 bytes inside of [ 70.625379][ T1764] freed 96-byte region [ffff88810e33f500, ffff88810e33f560) [ 70.638986][ T1764] [ 70.641327][ T1764] The buggy address belongs to the physical page: [ 70.647745][ T1764] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e33f [ 70.656587][ T1764] flags: 0x4000000000000000(zone=1) [ 70.661766][ T1764] page_type: f5(slab) [ 70.665729][ T1764] raw: 4000000000000000 ffff888100041280 dead000000000100 dead000000000122 [ 70.674289][ T1764] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 70.682880][ T1764] page dumped because: kasan: bad access detected [ 70.689283][ T1764] page_owner tracks the page as allocated [ 70.694977][ T1764] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 110, tgid 110 (udevd), ts 4563935423, free_ts 4531212539 [ 70.713272][ T1764] post_alloc_hook+0x37d/0x3b0 [ 70.718032][ T1764] prep_new_page+0x2d/0x180 [ 70.722516][ T1764] get_page_from_freelist+0x4aea/0x4ba0 [ 70.728039][ T1764] __alloc_pages_noprof+0x35a/0x7e0 [ 70.733239][ T1764] alloc_slab_page+0x6b/0x1e0 [ 70.737903][ T1764] allocate_slab+0x69/0x430 [ 70.742406][ T1764] ___slab_alloc+0x591/0x8c0 [ 70.746990][ T1764] __kmalloc_cache_node_noprof+0x2ae/0x430 [ 70.752806][ T1764] __get_vm_area_node+0x150/0x390 [ 70.757814][ T1764] __vmalloc_node_range_noprof+0x340/0x1300 [ 70.763691][ T1764] dup_task_struct+0x5d6/0xd80 [ 70.768438][ T1764] copy_process+0x579/0x33a0 [ 70.773006][ T1764] kernel_clone+0x233/0x810 [ 70.777496][ T1764] __x64_sys_clone+0x1b7/0x230 [ 70.782259][ T1764] x64_sys_call+0x2b3c/0x2ee0 [ 70.786916][ T1764] do_syscall_64+0x57/0xf0 [ 70.791323][ T1764] page last free pid 20 tgid 20 stack trace: [ 70.797303][ T1764] free_unref_page+0xb99/0xf50 [ 70.802053][ T1764] __free_pages+0x6b/0x3b0 [ 70.806450][ T1764] free_pages+0x86/0x90 [ 70.810595][ T1764] tlb_remove_table_rcu+0x366/0x3d0 [ 70.815860][ T1764] rcu_do_batch+0x56a/0xcb0 [ 70.820353][ T1764] rcu_nocb_cb_kthread+0x533/0xb60 [ 70.825447][ T1764] kthread+0x2c7/0x360 [ 70.829498][ T1764] ret_from_fork+0x64/0xa0 [ 70.833916][ T1764] ret_from_fork_asm+0x1a/0x30 [ 70.838673][ T1764] [ 70.840993][ T1764] Memory state around the buggy address: [ 70.846607][ T1764] ffff88810e33f400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 70.854648][ T1764] ffff88810e33f480: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 70.862700][ T1764] >ffff88810e33f500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 70.870749][ T1764] ^ [ 70.875586][ T1764] ffff88810e33f580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 70.883647][ T1764] ffff88810e33f600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 70.891690][ T1764] ================================================================== [ 70.903820][ T672] usb 6-1: device descriptor read/64, error -71 [ 70.947475][ T1764] Disabling lock debugging due to kernel taint [ 70.965208][ T1764] device-mapper: table: 252:4: device 1:4 not in table devices list [ 70.987716][ T1764] device-mapper: table: 252:4: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 71.007471][ T1764] device-mapper: ioctl: error adding target to table [ 71.022053][ T1764] device-mapper: table: 252:4: dm_table_destroy: dm_put_device call missing for 1:4 [ 71.141080][ T672] usb 6-1: device descriptor read/64, error -71 [ 71.261138][ T672] usb usb6-port1: attempt power cycle [ 71.405447][ T857] usb 5-1: USB disconnect, device number 6 [ 71.601839][ T672] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.631959][ T672] usb 6-1: device descriptor read/8, error -71 [ 71.761974][ T672] usb 6-1: device descriptor read/8, error -71 [ 71.914845][ T857] usb 4-1: USB disconnect, device number 21 [ 72.001140][ T672] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 72.032380][ T672] usb 6-1: device descriptor read/8, error -71 [ 72.161965][ T672] usb 6-1: device descriptor read/8, error -71 [ 72.271131][ T672] usb usb6-port1: unable to enumerate USB device