last executing test programs: 2m36.237011743s ago: executing program 2 (id=132): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0xfff, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x7f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xb, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x801, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0xffffffff, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10002, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x208, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r3], 0x24, 0x1) epoll_pwait(r4, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x7726, 0x800, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r12 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r12, r11, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3, 0x0, r4}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x1, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x5, 0xb6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r10, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) r13 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 2m35.271079416s ago: executing program 2 (id=137): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x237}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = syz_ublk_setup_io_uring(0x1e, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r11, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r14, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r13, &(0x7f00000009c0)='1', 0x1, 0x8800000}]) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r9, &(0x7f0000000580)={0x0, 0xe871, 0x80, 0x2, 0x22d, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad67, 0x200, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x250f, 0x800, 0x403, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2b, 0x10, 0xfffffffc, 0x88}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1708, 0x1, 0x1, 0x21}}], 0x4, &(0x7f0000002080)={0x2e, 0x10, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x94}, 0x0, 0x0, '\x00', {0x2, 0x44, 0x0, 0x0}}, 0x0) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r18, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010025bd7000fcffffff8900000008000300", @ANYRES32, @ANYBLOB="18009d"], 0x34}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r16, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r17, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x11) (async) dup(r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) 2m32.07919428s ago: executing program 2 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x3}) (async, rerun: 32) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000100)=0x4, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000006c0)=0x40) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x840, @mcast1, 0x1000008}, 0x1c) (async) r5 = socket$netlink(0x10, 0x3, 0xf) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000040)=[{0x200}]}, 0x10) recvmmsg(r7, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) (async) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000140)={'veth0_to_bond\x00', {0x2, 0x0, @multicast2}}) 2m31.191253151s ago: executing program 2 (id=176): r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 2m31.190067991s ago: executing program 2 (id=177): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x7ff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) setpriority(0x2, 0x0, 0xd2f4) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x440, 0x1, 0x0, 0x3812, 0xe, 0x3}, 0x30, 0x1) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) 2m31.024321894s ago: executing program 2 (id=179): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x204, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e22, 0x1, 0xfffd, 0x3, 0x2, 0x0, 0x20, 0x3a, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010101, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0xfffffffffffffffd, 0x3}, {0x0, 0x0, 0x4000000000002, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x3501, 0x2, 0x4, 0x0, 0x28}, [@algo_aead={0x10b, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x5f8, 0x80, "b241404bc1f7a4db17422381638621e40acd580f77c5bca39ddcc20772a51c60ee3015a73394e67b81a4209f3b4116325dadc6f117dc996843db7f1e8541af39b985f5f7c44b99f07107619a44b90f91bd24be067d02ce286154b2e0d8cdc77f7050a36c019f277e6c255cefa89f5a0ba4b4126fa3e52635c2003d9e9342b8aa1178ec5dc272f94970703bf2508ea8f4b5b3faba3682d204401005d1996804d2b550dfb321affbfcbf7e833169e5ea64447d9303bd707e6bdd995e47bb4ea2"}}, @tfcpad={0x8, 0x16, 0x1}]}, 0x204}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m31.002468105s ago: executing program 32 (id=179): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x204, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e22, 0x1, 0xfffd, 0x3, 0x2, 0x0, 0x20, 0x3a, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010101, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0xfffffffffffffffd, 0x3}, {0x0, 0x0, 0x4000000000002, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x3501, 0x2, 0x4, 0x0, 0x28}, [@algo_aead={0x10b, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x5f8, 0x80, "b241404bc1f7a4db17422381638621e40acd580f77c5bca39ddcc20772a51c60ee3015a73394e67b81a4209f3b4116325dadc6f117dc996843db7f1e8541af39b985f5f7c44b99f07107619a44b90f91bd24be067d02ce286154b2e0d8cdc77f7050a36c019f277e6c255cefa89f5a0ba4b4126fa3e52635c2003d9e9342b8aa1178ec5dc272f94970703bf2508ea8f4b5b3faba3682d204401005d1996804d2b550dfb321affbfcbf7e833169e5ea64447d9303bd707e6bdd995e47bb4ea2"}}, @tfcpad={0x8, 0x16, 0x1}]}, 0x204}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m18.958109935s ago: executing program 3 (id=288): r0 = getpgid(0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_pidfd_open(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400440, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x400, 0x40242) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x10006, 0x4, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000def71200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000100020000000800000000faffffff00", "e7460000102000000000e44400000020e40000008bd02800", [0xde, 0x2]}}) syz_io_uring_setup(0x457f, 0x0, 0xfffffffffffffffc, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) landlock_restrict_self(r3, 0x19) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x40000, 0x2002) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc) pidfd_send_signal(r8, 0x1e, 0x0, 0x4) r9 = syz_clone(0x6004011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9], 0x0) 2m18.827272878s ago: executing program 3 (id=297): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000000)='27', 0x2) open(0x0, 0x80000, 0x100) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1f0}}, 0x8800) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) 2m18.653685083s ago: executing program 3 (id=300): setuid(0xee01) r0 = socket$inet(0x2, 0x1, 0x9) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="13a57d705420d3c13c3c5fde0276b6cc567e08fed0cb332b3343919865f734d2594181c51d577216f35fe122b44f", 0x2e, 0x240408c0, &(0x7f0000000040)=@l2={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0x80) futex(&(0x7f00000000c0)=0x1, 0xb, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140), 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)={0x3, 'vlan0\x00', {0x2}, 0x4}) 2m18.483214846s ago: executing program 3 (id=301): r0 = syz_usb_connect$uac1(0x4, 0xc3, &(0x7f00000000c0)={{0x12, 0x1, 0x241, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x7, 0x10, 0x3d, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfc00, 0x31}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x7, 0xc, "28f4"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x405, 0x2, 0x1, 0xf001, 0x3, 0x3}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x2, "aca3"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x6d, "521c6fa95e64"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xffff, 0x7, 0x0, "90b2844d313c"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x2, 0x6, "ce32ad"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x5, 0x5, {0x7, 0x25, 0x1, 0xc, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0x61, "8e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3d7, 0x0, 0x3, 0x3, {0x7, 0x25, 0x1, 0xc, 0x0, 0xc4}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x9e, 0x7, 0x40, 0x10, 0x6c}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0xe, 0xfd, 0x47, 0xff, 0x9}]}, 0x4, [{0xc3, &(0x7f0000000240)=@string={0xc3, 0x3, "d530f54f0b4af865d1ca5ef8d3083e4bb84a74ee1ffd24fda55a698643ce90b47cd99c9fa797f0cf00b7dae0be17b017febfbba0c9f7acb3954be511ff38d07815c78893aea72373f52a00627dcd800f948c46c69b4105e630c3884c08f293e0fe10136019388201acd96365f833188d77ad3c114c5c8a5a5350b962d3cac9aef8266fa073d6ab29037c78ec17dc370855db16c78785f8de1a26f97f832426ecadb70564b3a7695092192dd926e06d8ddc60746b2d067819868df185f5780bfa6f"}}, {0x15, &(0x7f0000000340)=@string={0x15, 0x3, "e903e1e38a08267c28d339509bedb54ef384b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x20, 0xe, 0xd5, {0xd5, 0x8, "2a5041a9161827c6db53e123833170b2665201719f592833358c328800dbcd15b46f76741902d0f6b96f40c2613815142555a553ac825deba7f77b34e11aefa7f8ce2fc4d3658c709b03c1ebba9f12d810735511b1bd280d89c8cb41f68f108f9ca272dfb5addfe4ca32440c31bab38a574ec552176cd36c780bd21875adb11f72235a0ff49a0dbfb9636d46bf38a2d51a3c78e0ddd78d83097a4b98e0a6a9976900cd99c0e0304742b1219b7fcc3918e8c47750140bf10dd4b115add026fedf000702ffd520377d4c5463ffef7d28a3920c5e"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f00000005c0)={0x0, 0xf, 0x113, {0x5, 0xf, 0x113, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x9, 0xf, 0x2, [0xcf, 0x3f, 0x0, 0xc0c0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5f1df199013eec526a656ac2bcb7e863"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0xe, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfe, 0x80, 0x1}, @generic={0xc3, 0x10, 0x1, "a5a9d2887b4b6aad81f3173a09c04ef1114c59b663f25bc7ce7bcbd76a7a6b067bd86ccdc7f00e2cc3e98dbcdaf3615f6939573f8c74c3c4c142ad14c2c1b527c593d559edaba8149c57f900689113bde48618178209afd939852fb165e1daac2b8e75ff1d67b2ddfa98db2a2198baba94023a1334763394e0123ec29ff0fea0149f9cba7008f54707e3a636cc4943336bc818a832bb6d6acfd7d027a162ef2e05ad5bd2da328990bbf18823a471455b80bcae3c66a82c112c7ecc6e33574235"}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x10, 0x2, "342eacdb", "b700de3e"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0xed, 0x4, 0x81, 0x0, 0xfff9}}}, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)={0x0, 0xc, 0xa7, "cef7ed0b6d9b0eb63da169e1b84527e627c5c1533f17cf9955340a1854e8df22d8a2cc54d07255871beaf06ff8d6fab26b2a70a3a60ce059cef270db50ea231f40c214e808d005d38007c16e03f93b7292fe4ae6f83f931eaba1124f01a9b178fd458a6b7da25675b97960632b6c3be1cd3713c52755f0e33a6fcada2c876132c11c003814b7574b791a69314bc920ab32918da24c24248aa0516c57a84067316772bf981b4973"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xa6}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0xa8, 0x8}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "11e7"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "936c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x17}}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0) 2m17.374972622s ago: executing program 3 (id=306): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x142) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x400c4d00, 0x0) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x9436, 0x10000, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8b5, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x4, 0x3, 0x59}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x2b01, &(0x7f0000000280)={0x0, 0x349c, 0x0, 0x3, 0x1ce, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000000), &(0x7f0000000080)) r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r5, 0x9) syz_io_uring_complete(r4, r5) init_module(&(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xa3, 0x4, 0x9, 0x6, 0x2, 0x2, 0x3e, 0x10001, 0x29e, 0x40, 0x27b, 0x3, 0xf, 0x38, 0x1, 0xa, 0x40, 0xfffc}, [{0x1, 0xd, 0x0, 0x4, 0x3, 0xb7f, 0x1, 0x8}]}, 0x78, 0x0) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m17.280941604s ago: executing program 3 (id=308): syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302"], 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') read$ptp(r1, &(0x7f00000026c0)=""/231, 0xe7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000e, 0x810, 0xffffffffffffffff, 0xa452a000) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) getsockopt$bt_hci(r5, 0x11a, 0x3, 0x0, &(0x7f00000004c0)) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) (async) r6 = fsmount(r3, 0x0, 0x1) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x10) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005200ec0000000000000000001c0000000e0001005c2c24212ac92f3063f402ce"], 0x24}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "8713b7d49571a8b7", "b19f97e15581ae48c0ef9a24372d89ac", "9d802909", "02db12ef97cc9342"}, 0x28) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000007440)={'vcan0\x00', 0xd}) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000140)) (async) fcntl$setlease(r0, 0x400, 0x1) 2m1.883500973s ago: executing program 33 (id=308): syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302"], 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') read$ptp(r1, &(0x7f00000026c0)=""/231, 0xe7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000e, 0x810, 0xffffffffffffffff, 0xa452a000) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) getsockopt$bt_hci(r5, 0x11a, 0x3, 0x0, &(0x7f00000004c0)) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) (async) r6 = fsmount(r3, 0x0, 0x1) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x10) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005200ec0000000000000000001c0000000e0001005c2c24212ac92f3063f402ce"], 0x24}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "8713b7d49571a8b7", "b19f97e15581ae48c0ef9a24372d89ac", "9d802909", "02db12ef97cc9342"}, 0x28) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000007440)={'vcan0\x00', 0xd}) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000140)) (async) fcntl$setlease(r0, 0x400, 0x1) 1m36.921853754s ago: executing program 1 (id=624): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x7, 0x2387, 0x3, 0x11, "2f3009ac8114f2b6"}) fremovexattr(r0, &(0x7f0000000080)=@known='user.incfs.id\x00') ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000000c0)=""/29) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'veth1_vlan\x00', 0x4}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe, 0x8}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000000200)={{0xcc, 0xf8, 0x29, 0x15f, 0x2b4, 0x7, 0x1c2, 0x7}, "f83cc071ab78861a3beb687fdd1801160783ba2defd4a6dddf3fd3b5dd0716a435089a34526cdccdf6594ee0b740601575f81c3d6096dabf426bc1d11b9e4e102181354f90b93825e4afde8e38ac05872fbb567eb456b11f2c29924ce689409cfb5c25c24aef841b829a7e3dd6e29f1577b5af173162fa4bf5aa8f85854492a06c9e4902b041aac32fe5b66765896786145e2454da131a169320e3abb9"}, 0xbd) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f00000002c0)=[0x9, 0xfcae]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0x9a, "365a82371a3db3c2cba1ff7e74d4b57422b7518cc78e4a8557a84e91ab1626b34de91c6bcd76f72dc811203f22d5bc1bc0165cc888fb5f0dfbc9eebdf72418f77133de46068490587f553c7ce332030047af40fff6ada6a9e91a91b4517838ec81710c30dd1e3514908f9479bb2aca6a37f53a6c7d23c19f5aeffb6ba6f5248f20ef1e0e2e4ad8feaa533d989109b303b8547ba76ea4c80ab652"}, &(0x7f0000000440)=0xbe) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000480)={0xf6a0, 0x6, 0xdff5}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000600)=0x80000000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r5) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x40) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000780)={@initdev, @private}, &(0x7f00000007c0)=0x8) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x18c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast1, 0xeb46}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x951}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3b0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbb9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff7}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x42048810}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004010) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1m36.860384825s ago: executing program 1 (id=626): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$security_selinux(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:inetd_exec_t:s0\x00', 0x7d, 0x2) 1m36.844476955s ago: executing program 1 (id=628): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x1a88460, 0x0) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x660200, 0xdd) write(r1, 0x0, 0x3) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x1, 0x13, 0x404, 0x800000a, 0x2000000, 0x101, 0x5, 0x13d, 0x1}) (async, rerun: 32) socket(0x5, 0x5, 0x0) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0xee00, r2, r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r3 = getpgid(0x0) ptrace$setregs(0xd, r3, 0x7, &(0x7f0000000000)="cbef26613af245760a658b9b4a32563135ca7453") (async, rerun: 64) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x9, 0x3, 0x0, 0x6, 0x2}, 0x30, 0x0) (rerun: 32) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x409, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) (async, rerun: 32) landlock_restrict_self(r5, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000401, 0x0) (async, rerun: 64) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) (async, rerun: 64) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) landlock_restrict_self(r5, 0x0) (rerun: 64) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0xf8) (rerun: 32) 1m36.738920428s ago: executing program 1 (id=631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x10, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1, 0x2, 0xa9, 0x2}, {0x2, 0x5, 0x6, 0x9}]}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f00000000c0)=[@nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest32=0x482c, 0x4, 0x4, 0x10}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x5000, 0xc698}}, @nested_load_syzos={0x136, 0xb8, {0x0, 0x4, [@rdmsr={0x66, 0x18, {0xacc}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x40, 0x3, 0x100000000000}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x9cc}}]}}, @nested_vmresume={0x130, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x4d12, 0x3}}, @rdmsr={0x66, 0x18, {0x851}}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0x1e29}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x158, {0x3, 0x8, [@nested_amd_set_intercept={0x181, 0x30, {0x3, 0x8, 0x9, 0x1}}, @in_dx={0x69, 0x20, {0x8d0d, 0x2}}, @wrmsr={0x65, 0x20, {0x382, 0xffff}}, @wr_drn={0x68, 0x20, {0x6, 0x10001}}, @out_dx={0x6a, 0x28, {0x5499, 0x0, 0x3}}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xa48a, 0x5, 0xd}}, @wr_drn={0x68, 0x20, {0x5, 0x9}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0x5134}}]}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa7, 0xd0e, 0x9, 0x3}}, @set_irq_handler={0xc8, 0x20, {0x1f, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x50000, 0xcce9}}, @nested_load_code={0x12e, 0x74, {0x1, "0f01cb66baa00066edb96d020000b87f380000ba000000000f300f35c4620ddd408dc7442400c2060000c74424028000c0fec7442406000000000f011c2466410f72f29b3e642ef247af66b820000f00d80f20e035000400000f22e0"}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_code={0x12e, 0x6c, {0x2, "c42289968d7b00000067490fc7abc5ecdb38440f01ca400f73f110c4c27d0ee045d1f248b8af040000000000000f23c00f21f83503000e000f23f8b8010000000f01d92e653e660f2d830400000066f3440f23d7"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0x200000000000}, @nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xba0, 0x4}}, @nested_vmresume={0x130, 0x18, 0x2}], 0x578}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000007c0)={'nat\x00', 0x0, 0x3, 0xb8, [0x6, 0x0, 0x1, 0x100000000, 0x4d, 0xff], 0x7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000700)=""/184}, &(0x7f0000000840)=0x78) socket$inet(0x2, 0xa, 0x100) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000900)=@ready={0x0, 0x0, 0x8, "c5a55be7", {0x1, 0x4, 0x800, 0x3, 0x9}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x3, 0x61, [0x3, 0x1, 0x80, 0xffff, 0x6, 0x1], 0x5, &(0x7f0000000940)=[{}, {}, {}, {}, {}], &(0x7f00000009c0)=""/97}, &(0x7f0000000ac0)=0x78) r6 = dup(r3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, r7, 0x400, 0x5, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_SSID={0xf, 0x34, @random="3e2723e76331be7cbe1a0d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "b1da78abf9d0b5f0396ac99eadbe99cc"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="3f7593ec7b8a"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000c80)={{0x2, 0x4e23, @broadcast}, {0x306}, 0x4e, {0x2, 0x4e24, @private=0xa010102}, 'vxcan1\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000d00)={0x0, 0x7, 0x0, [0x3, 0x6c, 0x3, 0xffffffffffffffff, 0x8], [0x7, 0x3, 0x6, 0x7, 0x3ff, 0xee, 0x8000, 0xa, 0x9, 0x7, 0x0, 0x100000000, 0x10, 0x400, 0x1000, 0x1, 0x1, 0x40, 0x401, 0xabb4, 0x5, 0x7fff, 0x6, 0x401, 0x4, 0xc6, 0x5a, 0x10001, 0x9e, 0x6a72a3c8, 0x8, 0xffffffffffffa8f6, 0x7, 0x7, 0x13, 0xb787, 0x100, 0xf622, 0x9, 0x9, 0x2, 0x8, 0x1, 0x7fff, 0x149, 0x7, 0xf392, 0x80000000, 0x683a, 0x1, 0xfff, 0x0, 0x7, 0x0, 0x400, 0x0, 0x0, 0x7, 0x9db, 0x8, 0x100, 0x0, 0x7, 0x7, 0x4, 0x2, 0x8000000000000001, 0x5, 0x0, 0xded00000, 0x40, 0xc, 0x5, 0x1, 0x5, 0x7fff, 0x1, 0xe, 0x9, 0x81a, 0x6, 0x10, 0x2, 0x8, 0x10000, 0xf, 0x7ff, 0x4, 0x200, 0x100, 0x401, 0xcc, 0x8, 0x2, 0x9, 0x5, 0x567, 0x37, 0x9, 0xf, 0x5, 0x4, 0x7, 0x8000000000000000, 0x2, 0x3, 0x100, 0x8, 0x2, 0x7, 0x5, 0x8000, 0x7, 0xd, 0x2, 0x8, 0x5, 0x7, 0x6, 0x7, 0x7]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001140)={r8, 0x400, 0x2, 0x1}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x3c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x4) syz_ublk_setup_io_uring(0x6360, &(0x7f0000001700)={0x0, 0x6371, 0x4000, 0x3, 0x371, 0x0, r6}, &(0x7f0000001780)=0x0, &(0x7f00000017c0), &(0x7f0000001800)) r13 = mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x1, 0x11, r6, 0x8000000) syz_io_uring_complete(r12, r13) add_key(&(0x7f0000001840)='pkcs7_test\x00', &(0x7f0000001880)={'syz', 0x2}, &(0x7f00000018c0)="287b59424d53928ca845bddc3cc1225d56f64e8d7fa3d109192048014f9dbe2861a5cebb63a0b23eaa353f93bad3b94b229c5cf657db94f798f8e734aa338049d26d26b28f3e0f0e4aa8e9f717f7f8cb2f34b0", 0x53, 0xfffffffffffffffa) socket$nl_audit(0x10, 0x3, 0x9) fchmod(r5, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) 1m33.730868258s ago: executing program 1 (id=656): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r3], 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 64) write(r4, &(0x7f0000000000)='3', 0x4e) (async, rerun: 64) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write$binfmt_misc(r7, &(0x7f00000010c0)="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", 0xfff) syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000086307311040000102030109029200030109200c080b0001040030f70904000000010130"], 0x0) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r8) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='.\x00', &(0x7f00000001c0)='fusectl\x00', 0x0, 0x0) r9 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async, rerun: 64) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000280)={&(0x7f0000000200)=""/128, 0x80}) (async, rerun: 64) fcntl$setownex(r1, 0xf, &(0x7f00000002c0)={0x1, r9}) 1m33.143283681s ago: executing program 1 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) 1m18.083302962s ago: executing program 34 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) 16.959272155s ago: executing program 6 (id=1477): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000000c0)=""/207, 0xcf) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x400, 0x20) connect$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x1}}, 0x10) ptrace(0x4208, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x4004000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x891}, 0x42) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1e8, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8000}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x11}, 0x4000002) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000780)=0x0) ptrace$getenv(0x4201, r6, 0x40, &(0x7f00000007c0)) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000c40)={0x2000, 0x2}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getresgid(&(0x7f0000000c80)=0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000e40)=0xe8) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) getresuid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) getresuid(&(0x7f0000000f40)=0x0, &(0x7f0000000f80), &(0x7f0000000fc0)) fstat(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001140)=[{{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000880)="da8d29d533cb2cab63a81769bb9623ed2568aafed0fbeca8c8118847e4a1d552380cdafd1bf6625efc575c44420e445fc604339519e1a0ed2528287def27bed7b249b0c3d60733fa760089a671a70375ea7b2030cc500a738a6249de7de1111660e39f16dca18ef673c8cc6eff5145181cc93c2d5205245b38f6297235760244e1e231404c3c84e3f33780800f0985297cf3eb4fa5f81932468caeea7336dca1600cd1872dc9a5d2028e3338cd5598b044f47a3f593984d72aa1faa75c724af49435", 0xc2}, {&(0x7f0000000980)="5674f108d0228ae899496b677f03934c3ef117f1dafec948f5a64e4866d06d5241287535cdbcd73c11b85d7a1b4187e86759d2406c87a6829ec6c94739834b12f3b5bf547399c5bd55ac6360731fb13e35c02cf58b75c341fba418d29ac00b14007dc14cb08f646a6116fdea7c227cbca1e2c291d47caeed8325a805f46f748829167cf6805da84a2effbec4e6f03b33fadcddc3524d3740086bd20aa21e78b602e888de7551a1ab13426aaa3e6a8f629e4a4ea633765ec407fdbb3f2379fec030210269e66feb5e7481e61b22008e8b3fbf6017cba2489f223ef461aca5001237ae62a8ab047424bfc81c0329c83ee52dbd9e7577e895", 0xf7}, {&(0x7f0000000a80)="a9f756c2d2baa1ddfb6c68b3440a620dd3107c06da879e79e90fedd43bdbdba66e48f85ece472b1a447d568af9366f97f4e063540e5ab3684b1dc31482145dad5c9149d01362d2b08d49b30193dbeeb1d93b2c4cb06b203b3e93aa42b78c35", 0x5f}, {&(0x7f0000000b00)="89b8866366ca0b1c6e58a101a226f1eecb903d97480837a2f6ceab7ecc48111e141f701216a6ace2c047526fd39028d4dd257b", 0x33}, {&(0x7f0000000b40)="0abaf758b29eadf1d94ceebb23065fa54086dabb08ce64f5913ab5a0ef74a2abb09a66bd364281657a77853c8586c4fd46a50277b96c0866c3bf73b993df601e472b92645e121c4c332fcce6d695be3a3660a07114f0a397296f81dd72511caa39", 0x61}], 0x5, &(0x7f0000001080)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10}}}, @rights={{0x20, 0x1, 0x1, [r11, r5, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r12, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r14}}}], 0xc0, 0x4000041}}], 0x1, 0x880) recvmmsg(r5, &(0x7f0000008080)=[{{&(0x7f0000001180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, &(0x7f0000002240)=""/159, 0x9f}, 0x4}, {{&(0x7f0000002300)=@nl=@unspec, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002380)=""/60, 0x3c}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2}, 0x1}, {{&(0x7f0000003400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003480)=""/85, 0x55}], 0x1, &(0x7f0000003540)=""/52, 0x34}, 0x2}, {{&(0x7f0000003580)=@nfc, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/47, 0x2f}, {&(0x7f0000003640)=""/201, 0xc9}], 0x2, &(0x7f0000003780)=""/149, 0x95}, 0x7}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003840)=""/5, 0x5}], 0x1}, 0x7ff}, {{&(0x7f00000038c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003940)=""/194, 0xc2}, {&(0x7f0000003a40)=""/66, 0x42}, {&(0x7f0000003ac0)=""/201, 0xc9}, {&(0x7f0000003bc0)=""/227, 0xe3}, {&(0x7f0000003cc0)=""/6, 0x6}, {&(0x7f0000003d00)=""/232, 0xe8}], 0x6, &(0x7f0000003e80)=""/100, 0x64}, 0x6}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000003f00)=""/210, 0xd2}, {&(0x7f0000004000)=""/205, 0xcd}, {&(0x7f0000004100)=""/230, 0xe6}, {&(0x7f0000004200)}, {&(0x7f0000004240)=""/226, 0xe2}, {&(0x7f0000004340)=""/147, 0x93}, {&(0x7f0000004400)=""/253, 0xfd}, {&(0x7f0000004500)=""/218, 0xda}, {&(0x7f0000004600)=""/50, 0x32}, {&(0x7f0000004640)=""/254, 0xfe}], 0xa}, 0x9}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004800)=""/170, 0xaa}, {&(0x7f00000048c0)=""/96, 0x60}, {&(0x7f0000004940)=""/73, 0x49}, {&(0x7f00000049c0)=""/146, 0x92}, {&(0x7f0000004a80)=""/5, 0x5}, {&(0x7f0000004ac0)=""/96, 0x60}, {&(0x7f0000004b40)=""/169, 0xa9}], 0x7, &(0x7f0000004c80)=""/159, 0x9f}, 0x5021}, {{&(0x7f0000004d40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000007000)=[{&(0x7f0000004dc0)=""/244, 0xf4}, {&(0x7f0000004ec0)}, {&(0x7f0000004f00)=""/10, 0xa}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/78, 0x4e}, {&(0x7f0000005fc0)=""/31, 0x1f}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x7, &(0x7f0000007080)=""/4096, 0x1000}, 0x8}], 0x9, 0x40010020, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) write(r7, &(0x7f00000082c0)="67ccdc960cb355a84ccc588011a464410df960c09456aa6f2290f88d6607cd0dce3aaad7c8b19fadc5e7ad7a8577e5af89f89657f69b94212fb7606ed045d4c6053ec8abcd58fcb1ca39cb29b623c941d4ad1dcb42706802b0357e690e4f63eeeab2a0c836710a1aa61c4228ccc68f406b", 0x71) syz_io_uring_setup(0x1e04, &(0x7f0000008340)={0x0, 0xc3b, 0x200, 0x2, 0xa8, 0x0, r2}, &(0x7f00000083c0), &(0x7f0000008400)=0x0, &(0x7f0000008440)) syz_ublk_add_dev(r2, 0x0, r15, 0x0, &(0x7f0000008600)={0x2e, 0x18, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000085c0)=@any_dev={0x3, 0x5e6, 0x0, 0x0, 0x1000, 0x1, r6, 0x0, 0x80}}}, &(0x7f0000008680)) 16.121307954s ago: executing program 6 (id=1483): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = fsopen(0x0, 0x1) unshare(0x66000080) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x8}) mprotect(&(0x7f000086d000/0x3000)=nil, 0x3000, 0x0) 15.648198485s ago: executing program 0 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000340)={0x6, 0x1, 0xfffffffd, 0x10000010, 0x91, "c46500"}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r9}, 0x10) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8005800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x134, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x8001) 14.819984334s ago: executing program 6 (id=1496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.819385784s ago: executing program 0 (id=1497): bind$unix(0xffffffffffffffff, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x303001, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002500)={0x0, 0xc690, 0x80, 0x3, 0x20d}, &(0x7f0000002580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x552d, 0x1, 0x3, 0x14b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f05, 0x0, 0x0, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3348, 0x80, 0x0, 0x9d}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed4, 0x20000, 0x2, 0xc0}}], 0x4, &(0x7f0000003800)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf87b}, 0x0, 0x0, '\x00', {0x1, 0x73b, 0x0, &(0x7f0000002800)=@buf_512="749affe8072fb11b5945cd27dac8f9bce84977631745d79c2d46a7ee4dd6d9b069078d981f07afb44628590fa61c5de9b8a5dc5d85b9a9038c94a5fb5baf9449a39a483ce8a78d7dc0d53de3420b91cebecca0abb80dfba5bf01b63d6294d5c24a38346b79886d227e34abe3e89be08554ab51fe2c348e8481225001c2c4d3ad4bc436d582ca557d96ed05b897a133ad49b747c7f72f1c4b4c6c87c813ea4dfd9f5b51ef0d915d7a6a6f21b79fa7a10eda79826cbd2e618003686167233d8e7b275a71d408c9234c404353fd82ec3030d6457285428585e7ae0f33fb2d674c0df50f075a211bd53ecb0f38dd75db394acf11e5ffadefe82bfb1539804016a8efcf88c52b85f73e9a2e937a26147a8745560968e2f3ac0fbf93e3a83817c58c6f2f316e89e6a8e1d65734c29e9d12aca071d98e589904464b719a9be2d2a2cff249c98a5eb22554858083bc652fab6963a2ffa0802f8688e88144a8bbfcf008dff858e78206331ce3e417d8bce485f8d1fd16db67fca3caf2f981c22539b080df7d430c1c2d9e85cc4dd908ba46268f51751e3a6b030e11045cb0c6501649494414dfc28b7302c76296e7da57ed3c731dbcd6d71744716642bacc72972026792916d4c6f23ad5d79629a1ff9134b4e105d787ad4ffc06b1794b66701f6785e86bbd7657bbf244feae639a3479d9a98a79f4e79cb33fac907d7dc5bb3af0ba8fb0"}}, &(0x7f0000003880)) read$FUSE(0xffffffffffffffff, &(0x7f00000038c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000005900)='./file0\x00', &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = eventfd2(0x1, 0x80000) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r6, r6, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) (async) r7 = openat$incfs(r0, &(0x7f00000059c0)='.pending_reads\x00', 0x280081, 0x22) (async) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) (async) landlock_restrict_self(r9, 0x0) (async) r10 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x3}, 0x18, 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) (async) fcntl$notify(r1, 0x402, 0x26) r12 = socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$unix(r12, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r10, 0x0) (async) connect$unix(r11, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r14 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180100"/16, @ANYRES32=r0, @ANYRES32], 0x18, 0x20044004}}, {{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000024c0)=[{&(0x7f00000001c0)="901e2e1b7c3c6d196caaa7f4f3bedf34f7c1cf2074fa183791f7f17884be0b483d6877528bfd9ac8f3c576a08f03bc6adc939b5b73ecf498648a4ddd68a334d4286c61276c1341c59a276eb298d388328a6080dccc369ae44aba1f8a6ab0632ee89f1829fae703753f87e828dc6056f49182ee10c8dd401e9a76a3bd735cb3f846337cdf4420bbe6a49d3bb51fc69fc34088085ce9103e7639d22035aa71980f0dc87a218c0262990bd7854fd7335bc7592bd6b3f235e286d2ec5e13d3b013", 0xbf}, {&(0x7f0000000280)="899f0c348f79a5d9b570052141b18d7ef428127db8e9fcb5b1bea58902d318ff03a1c01e82a7079838d5b5769bdcf4", 0x2f}, {&(0x7f00000002c0)="3f865dbb13f37f54c729bbfb568d58a7ee7c57d78fc8f888c711e230ec55dd97d77461e833da28fcbe947be229fdabf02b16d23598ea7618adf08af78d4cdff39e14f243fadf148fd14ceaa366862deef0ee02459f", 0x55}, {&(0x7f00000014c0)="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", 0x1000}], 0x4, &(0x7f0000005a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r4}}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7, 0xffffffffffffffff, r0, r13]}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x20040004}}], 0x2, 0x24040890) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000001480)={0x60, 0x0, &(0x7f0000000340)=[@freeze_done={0x40086315, 0x2}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14.752216026s ago: executing program 6 (id=1498): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) rename(&(0x7f0000000140)='./file7/file0\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='au', 0x2) socket$inet(0x2, 0x6, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4d) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async) rename(&(0x7f0000000140)='./file7/file0\x00', &(0x7f0000000180)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000300)='au', 0x2) (async) socket$inet(0x2, 0x6, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4d) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) (async) 14.631035559s ago: executing program 6 (id=1500): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) (async) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) (async) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async, rerun: 64) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) (async, rerun: 64) close(0x3) (async) ioctl(r1, 0x3, 0x0) (async, rerun: 64) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001c80), 0x40000) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) 14.254711608s ago: executing program 6 (id=1505): r0 = socket$inet(0x2, 0x3, 0x7ff0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x2, 0xeff2, 0x1, 0x7, 0x8}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4001) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000240)={{r3}, r4, 0x1c, @unused=[0x8000000000000001, 0x7, 0x5, 0xffffffffffffffff], @name="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001240)={0x73622a85, 0xb, 0x0, 0x2}) clock_gettime(0x0, &(0x7f00000012c0)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000001280)=[{}, {}], 0x2, &(0x7f0000001300)={r5, r6+10000000}, &(0x7f0000001340)={[0xb]}, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000013c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e22, @remote}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001380)='veth1\x00', 0x4, 0xcc, 0x8}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, 0x3, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40091) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000016c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r10 = syz_open_procfs(r9, &(0x7f0000001740)='net\x00') getsockname$packet(r1, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000017c0)=0x14) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000001800), &(0x7f0000001840)={'L-', 0x38000000000}, 0x16, 0x3) r11 = epoll_create(0x0) epoll_pwait2(r11, &(0x7f0000001880), 0x0, &(0x7f00000018c0)={0x77359400}, &(0x7f0000001900)={[0x3]}, 0x8) write$binfmt_misc(r3, &(0x7f0000001940)="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", 0x1000) fcntl$setpipe(r3, 0x407, 0xd4) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002940)={r11, 0x6, 0x41, 0x7}) 14.239699728s ago: executing program 35 (id=1505): r0 = socket$inet(0x2, 0x3, 0x7ff0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x2, 0xeff2, 0x1, 0x7, 0x8}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4001) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000240)={{r3}, r4, 0x1c, @unused=[0x8000000000000001, 0x7, 0x5, 0xffffffffffffffff], @name="d61704fa47ef3d43ecec090090d4c9f755c02837106907796e916f4fcd4ba2b152f005d3b0c54b11f76f93f44f9bd3ee8ee04e07692bf0f11d5334968d6a1a1a047c011b64b52f444a8d94db568a05a66671802e1473fc1c5a4713533592274a4e16b9a55340dbeeccc5f80b7391d30732a30a07943a53ffa5440631974c45c1ff5ccda02b70afaab1483f404b0ae0c1da50dd79448e2826b1d67290c637b22475d6754cfd378170615e2bdaf8b1de2481ac4ab4b4d4441b3d557bf49ee385572de2fa4441b258cdb97275b80c0cdd23410c760c2a3035354c1f7d67c46e51b5bc690c10cc3f2871743dd6eccf895aa237ec46e66e1a0460b22cee5e0194a45ba084dd72fcf5bd8cd7074b32b589361e3a7d1c91d63a28108a11b705b06f439ed4c7781547a6bcd8167d63ce08a932d71e0e646473fed7786f3e09a85119374371c937779627339998d77ce831b68855b8a0d97e6e4a472fb02edece90beb121a58f4109cfff666042fef22fe859a977f5a69610ce4f8ff79968f432c98e5da867e93bc75ff1e24e2b2254f3e83e2ca4af381776ce60b59f44100fe43efdff1eb39f2a668d55cafb472c026785038db6749b85d10e294ea70bddaae85c0f4ae131e4afa73c837e27cf73296a0ff1a58b64d5a8be4d2dc06412d486cf3cf410f6e15f14ccfe585f0520e42a24f2f956fd6a2bb23a804d4f01991043bc28719794cb0daaadd093bcaf6581408988ab08ab3021b3376f1043be4b606e9ddf75a5d5244e386e52a1181f845c1ce304bbe543153864845304b8efbac9f6ebceabd6674b30e7c38c41507828d8d5531c8c044841944df31fe21b9e4ed52d641de6cb5e6cbc9a216dac8e331bba2f6fa25ab506e2cec75172d779d4f2b24ebf7b8a0bfc67fa7a46d5196086672d5d44ce9d7deb88b6f1a4f250e300a25fb8e25d02593020b0547b2bfea5002cd8eb666e43a3659033cd3fd9897225435b8037f9ac4ddccc2d41d912ea181b6d04e81e7930167c853ceb44e19082236bd5a4c0b755b3a4e83276d32efdd772ad5215d1da1cb6ea47bed9595b267e10dc9274f15ca41ecbd4e077b07102beb060c4ea3c6e0695194116c15f8115aff904e076de6c0e02368d2a65f5eac8defc31c1187baabd98e6e19b5a639f87d6653e02c3e1525670a2ac224831c37b762c2c91b5c674284e0d54921756dd91a103a51736d6e8c0e8a4cc1f074ae9dd6ef3a59907e2ee530406dc894d715b96bc1845d2c0dfdee6f98acd5ae40ff72faf8f5156805669ad62290bcc5fed45ad92cfc571d5ae5d05e0eeb5c02e87cb26e97bd71e48ea98e55812d0fa2fc2c6722d552f0aa77c24206449f5d13c9d3e3feab424358b6891a3244382623d0f28a1e2b2836136b2acd6d87e65c0034b35c3dfad46c0c98dffe3f962ddffa84534e49c1c83bd3753cfd93b6989722467ae2622c63ddef9faf4ea5b926759b186dac0aac98d0bac474cb8e7c7fef1bdfee2ff3c7e6d2d4b86d0129a670b36e8b322ab2df0d1b790556fbab37a46f66858bbff8cf7496927b5daa853dbcd5f5cc97e127d0f3d704ddd380cbd1a1afe3fe8e999410685e5a0bf81f16c18c68057765b2c9bba531437e7589328285414f7a01273b6417462b6c49ac3290fc332df3713b01e695848414f023f15ad5af38fec2e9526baa89ac5f23a614e228303b44d6ae7c53751048365d06444c4cf6b1b9d6f54a648105e7a4ad7da274618bc22af74b814dd6672f506f39da08c3efca91329892849dfe0a5044f29c261345665f69c19c4810dfea2279059141913317bd343d9e4c8f46e23a696723fcc9c57b1fef1214c6521bd16f3a742c627bfa832c370f3db17ce7629267863356c03ea359f8e6423a85412ee02db83b68299820a17b0fa1eda43e6896b7225a4fb39204fc47f3a106889be5b835af87427bb440fcecb3cc3ddd328acbbe3cd26ff30db5dc0fd989345e7fbc40dce8427f9432b75423f3929cd7b6c8fe1a4f17a0ac3ae789727e9d8f5443743091a0b65d6310c63a2b28adc4afb0d0fb678504c694071496c7dcf98cbd2df70adb223061b418a4d9d2ad9da6ad159e771b8d56a214d1ddc76332c6ceb1bd03e5830d164f4a1fccc1ade23476633e7c95eb455c6ab589deaeec0bb59edbab58e020a3018772262de311c85949ba055e83a0de86be51442f44146702f13d39ceb48c6fbbb349dd9f4f03edcd5709bac26a797cb854889fdb75b6552a55f780428d6fd51e19b2d07366b636d1269681d9feee6d4e5948242c73efb4d16a1977b3a5845ad8f2d6d5e87feeaa1004d4783b8506db58bdb816ccbea8e750650e8806ff874cb9525f0eeda3fc03a1700723282941f68ec33302cdf98ed6c2afa840cc1ff9b576bc0012b063396b4e0215f6bed1db16ee633368dd6e2b52f991aba48eb47c3356a6768805a3206bfd61eb1739ef29e1e3ccc9b9901a8cac6942d7f08403f05e1fdbe3645bdefeaea6ee14dd294d91c5ae128278033e0cafc8d9fae7536cb9dca03219fe7891883e77601877fa7c96458529b7ad6b04918e1bde6a024bab99f52ad3a502fe06395ecb93f724de6c322ed42d3f1c08869a852b93ce390b319443758c3453311e0e58d9c853f1e0977ffbfb315f192fdd28427ef1f670a453047faeef9c5fd150b18e0160b0fba21d0ca84792c841e5c781f3607220b5d77609233dd4a83b4303cdd6a8dd5c712a7e85baa38980f268d68a4e3e26b1361355e17d6ea86b53a4490920b466de10d7833253f53a5e051ef866ea61c6ae0baee47162696a277465ba21f780d6d426704cf15ea359a43c54157cb9904bd1975806d77c6187ff811db40e1f39310990fe9e4317fecc16caedce4d8c2dfb21890dbafe4813012348b23e66aa74788adbe2cae1bea334493e85307e81cb249e0f82d5aed6a749425c773db23f24c8f408796738e0973fb572da6149002d7d410b0a6169587e2e4d0bedb678defb8ed24acee676f0be3b0612f21d29c3e7a573bce2113a71737d578d0c31a5819c2907450455219b2df023bba3e5b7b48f3eaa7fb02e8cc86b91705790f9b54f5a7a2cf31040e2c187c67483b0f958e83c905d9efe8a4393d4565a04592f0d6b74c4b89b24f1c32fd6a6cc87d7940dda8acdee81b65bde1b46dc003684fda276ef463ee990a5cfda101180f4330ea1826c8f6eeb260799aaa0f25881d050192e29a77f09c09a0d563fa48acd7a9c8ad0bee181d5b0f853c9d40eded73e27398b9e43e1d05ae8d1dcbb466a00b6ed81603c102d19805efe486519cc4ed1b59c6be3a64bc7feacc782937102d27703da1b720cc9781c79b558cc8a940151c90fefee325a6a589c27176af0a65039ea5631a8f67625a788c32732c8297ea48a5b9134002d7e298856cfab3b1ab281adbfc160063b42f0ae5a4c6ed30321c1dd448348866378ebf25d50e5aabd78ee2b7ed0e318a33824b494684dcc29a591cf4222b090824e367e764ec5237f89e181718c6d7b455cee3961721f63069de889220f3b4bc980aec30425be0f2df60e06f112f91ffc165f99d90daec85cc3f7f0d54a5fb8f08969abb23d3431f4b1686aae4744eadd926fa2177bfeab083f0673bd4f479cf25958e34c58f42213edcfa501ab523c4f90c4dc5b3b46d2cacfcad8d5023710469d6671bd9192095610544e6f3cb7c54d93cec619291a92f210868513135c7b9dc8166f91b414d35581dfaf553deb0fcb682546e44a188e49588ea084daaa33d258e09937665b7bf6bebf130c16b5c20fa043c85f0e18ed9791f033dce49a541ea4aa399ef17c1455dd930aed71f099816dea554acb8f22a69b3f56fa7a6fb563722eabb552a343df2bb2bb8339d8244d645f70fff9bc1cb07bcb97030da564c049b21fc49f62432eaa83a04da14dd5cb89bf2b8b6fc72e66beefb3565b9d26031c67425b60d4134c0dcd40e911dabd57ff03ad3f86839e364dd075d6231c0d86028422d1ee12cb22dfc3044e481d262eb8b5370e9335046898eb721be0f19115d03684b67b5cc7c70dde6c5b3191a60b6c94f02c5e93fa9b26706d6c98d426cf0e3ddc1c58dd95507cbd1155d1f4de415eb06a3965c2f3aa93a9193ae371cce01650f7239f90829ef0360000c0fac75d62b7eee1ac8017bac8645b8effccf18a0e4d1b5ae27f1bc00e95da5f4ee163cc2b2e5f825b7c1025a7a692eacba45b03da0a016ca5cc2572e0858598a370d5db1afae1c2e81adcc273a60e4cc739f59276fcb6409b34d6df42197b586313d0a7b0f80c5c33627574e087d8239627a15ea77c0c8c711a84a744ea6e943974305e37c0fbbaa92cfdb8dddd1f7399a25cfb8e6d89fc04b9f31817df41f2339e515a744bf594e14129691b68e5138993e6b6cd7bb95cbc9252fa66afec851500edb7757a1f925533b98bcefeb3b6aafa922f6508572d508088ac03912eb4b183b1b93eb045481b03d5d466e06a60ad7ef737aa31fcc33d97d6d17a38aab48d2fc15da4f2ac326a726b5269d91b1247e13164b3e4657083a5d6381f16c39836b50a9558c466346575712c5693b8edabca8f2be28ac013a72ed19205470bd0c5db6fc32920ee5b7534058e01810a6032e7533ecba432582e54118b8196b22502894995d63f4bc45988cc68df75f66ff2c7228541fa86fdd857c85307eb654a242fb91f38fcb6c80ba3b12fd6abe4e8f3fed7b28ce3764e5decfc297b9960494bbdefc15b0f5d83b8217a7ed3aee25fa7a85e9b1c84009507247fc3ecbba696516f5f6065f9072923eb0911ea2a0638123b13fa1eb7c57066788fc7491fe7c581584281331247ddb0eec6d68c796741c0bf09c44d5182336ad626b5a77b3eb27dd39dafecd1309ff831f07fccec549ba62e35a19439a9279f32396920c6245ca3edec9df9b400c4147e410cb88c836c7c6d7418d324e0cf120ad5fdd967f98ae28a1bdddc5cb425d6aad9653b1e71ef4292bb861420448dfc07d305c41181db5b0a34b5f6aa95ded8461ed9efdd15a1e2041347e2e19a2e436548cb0eb9d5454156934db3a18cd279e88d6ff9aad630ee8f3393194a596c84311691a56c348859d9c9e2ad7eb65e693abf6fcf89d62773415066be114fe8b88f00bc985f07557388401f9318d044078c99504bb4ef4cce02bdf6ec72757843a8824e0c48ce4fbc52994bcb0a727e9d64316d9468837177ee53d0fecd0e4c97b406eea5de6baad012197e0032f66384843f421e9c8ec856648a6b1ba62dfd225b3c672fa971699c93d5bb1bb3cc0e5b48cdf867d48ccf47461d41a640e161449d2a54add73134e02e26a2c9286cfbc2e7df3cde43d896f9d9b1b61fd91fe1bdad7c439dd5c30f0f13f06088c062bef0575a3cdedf23d9bc8c6ef89a5c2b1984be8e2df0b3655c56fca96c1c5925ffa3b4819f5eb7a7810fc07275d873b524014b8a82b7057b9c0c5e426cb407a5dea099bf2822afcc677fad189596efc6e4b27ab6310681aee8a0cce7369609d5997174f7d0329ebefa1c960d920a1a16a8abcfdfa13bb0ff037c7711f6e3a34a811bf4c868e9e121b23e8415163f3158d06b898dacf6f4a1df3f67bfaed04c40b67e1232da9d883e13433ebd360200c80d97f4482bfdc522e027a5d4f05412df41d82b6d168125e19394a08de462e1343286eb0017184faa1e2799c74053ee2e92501b63b6ce151901f3f9e26"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001240)={0x73622a85, 0xb, 0x0, 0x2}) clock_gettime(0x0, &(0x7f00000012c0)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000001280)=[{}, {}], 0x2, &(0x7f0000001300)={r5, r6+10000000}, &(0x7f0000001340)={[0xb]}, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000013c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e22, @remote}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001380)='veth1\x00', 0x4, 0xcc, 0x8}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, 0x3, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40091) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000016c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r10 = syz_open_procfs(r9, &(0x7f0000001740)='net\x00') getsockname$packet(r1, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000017c0)=0x14) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000001800), &(0x7f0000001840)={'L-', 0x38000000000}, 0x16, 0x3) r11 = epoll_create(0x0) epoll_pwait2(r11, &(0x7f0000001880), 0x0, &(0x7f00000018c0)={0x77359400}, &(0x7f0000001900)={[0x3]}, 0x8) write$binfmt_misc(r3, &(0x7f0000001940)="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", 0x1000) fcntl$setpipe(r3, 0x407, 0xd4) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002940)={r11, 0x6, 0x41, 0x7}) 14.007358884s ago: executing program 0 (id=1511): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4008000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4008000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) close(r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d8, 0x2, 0x33}, [@mark={0xc, 0x15, {0x4}}]}, 0x34}}, 0x4048840) ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x9, 0xff, 0x2}, {0x6c81, 0x7, 0x1}, {0x4}, {0x8, 0xffffffff, 0x1}, {0x0, 0x2}, {0x5, 0x2, 0x2}], 0x6, 0x10, 0xe94, 0x8001}) (async) ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x9, 0xff, 0x2}, {0x6c81, 0x7, 0x1}, {0x4}, {0x8, 0xffffffff, 0x1}, {0x0, 0x2}, {0x5, 0x2, 0x2}], 0x6, 0x10, 0xe94, 0x8001}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r5, 0x0, 0x607a9e0a432a4785) (async) getdents64(r5, 0x0, 0x607a9e0a432a4785) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r6, @ANYRES16=r7, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040) write(r2, &(0x7f0000000300)="af8757b36befefea2d27618deb9c9b384a4198c9d5c8f44dcb498bd7b7844d6867ceb36630da0de842adad01108bf373c0a99511109374b7168cc99eb7f7502ded57c0f97ba59f177dbfedbb9de1699fe6cde4fd2f8726ecb4f3838e4c4a5cf1bd96658cf88413fd6d30547562ba234d4d3bb18125c22ca6303c2e582a3ca8d512e36bc6ecf2456fcc5c52553355200ded5d50951fbb8ea4d01838469fe1858b21c79200596385cbbfb482ab254d8f569442e0c9d469f166183fdfc16f02c857ba01ba6097197eec9050c96345c258c3980f24a3c67978b9518cb9e328bfbb3801ee93266838cae2a93f320d18ae4bbb7d09318c7831f1", 0xf7) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\r\x00\x00', @ANYRES16=r7, @ANYBLOB="859225bd7000fcdbdf2512000000170009800800020004000000080002000500000008000200060000000000010002000000080001000800000008000200010000000800020099c30000"], 0x50}, 0x1, 0x0, 0x0, 0x404c4cc}, 0x8004) (async) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\r\x00\x00', @ANYRES16=r7, @ANYBLOB="859225bd7000fcdbdf2512000000170009800800020004000000080002000500000008000200060000000000010002000000080001000800000008000200010000000800020099c30000"], 0x50}, 0x1, 0x0, 0x0, 0x404c4cc}, 0x8004) 13.807233218s ago: executing program 0 (id=1513): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42843, 0x1) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0xe, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r5) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d4518dd642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) 13.528094905s ago: executing program 0 (id=1515): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x40002022) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.952926378s ago: executing program 0 (id=1518): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) lseek(r0, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000180)={0x3a, 0x4000001d, 0xfffffffb}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000000400)={0x0, 0x1, 0x340000}, 0x20) 12.952740328s ago: executing program 36 (id=1518): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) lseek(r0, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000180)={0x3a, 0x4000001d, 0xfffffffb}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000000400)={0x0, 0x1, 0x340000}, 0x20) 8.919111012s ago: executing program 8 (id=1559): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20182, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f00000008c0)=[{&(0x7f00000001c0)="2e8b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000000)='\n\x00Y`}f\"', 0x7}], 0x4e) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @multicast1}, 0x107, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x2000000000, 0x500}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_usb_control_io$uac2(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x60, 0x21, 0xdb, {0xdb, 0xe, "de21afa0ff5ba37d76189b12f2ee138e3e07f15858afff59d090c32315bd831cecc8b5b5c5ad0bd9998c322a5cfb6c3448384507b02871565ebab435b3d5c6c5d5be8dc70fba9b729c24825d3cf2a20ff15371df8edc00ca0ad33cf4726544f7ae47f50a3f3eeaf81d4438558c9b116f51666d7ca2eed4a599dc2325b6d40035a7b5c339eea79a227425a41b5c8d5fa45c59c05fa897216bd4a0ef274a0a011f19e734e23bff0064376bf9782d7cf70a866a2e854978768da81279040ca55fa59e08441ff1d582f9ea704be323ae82ce04604de252ef0d7468"}}, &(0x7f0000000200)={0x0, 0x3, 0x18, @string={0x18, 0x3, "bf8a4b7790783eae0a7856df28ea38709cdac011959d"}}}, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x30, 0xd9, "acb350b635b914a342eeed441aa3991ac4bf05d7edc770914930258f2d4e088f2eb412c9600f6843d6ce7c21729778204c7db745130852ef7e6c2a4a77d4b22a72b045ce303b45f27d26eed4650a5bbf7c357242be6ccc7e249eb3ca322539ae0ef09ea50f56edd4ae74f2dda00666adb4a3366a6943099382d837af7d3f675765e30e3178c48faf4d82e0528dbf5fab7a5d9af20507a625f3ceeee1377a2490db594c7a0247b39a51debc7c285abac43cf36d8bc46adc9a5597562aa5ff63fface49587296ff6de9f97a4d2fa04da47cf5ca07bec49b757bd"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xa4}, &(0x7f0000000500)={0x20, 0x81, 0x3, "1f628b"}, &(0x7f0000000540)={0x20, 0x82, 0x3, "ab7af1"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "6711"}, &(0x7f0000000600)={0x20, 0x84, 0x4, "6c32b230"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "974fdc"}}) sendto$inet(r4, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000040)=""/113, &(0x7f00000000c0)=0x71) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 5.943446551s ago: executing program 8 (id=1587): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') exit(0x3) read$FUSE(r0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 5.028258652s ago: executing program 8 (id=1597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace/file0\x00', &(0x7f0000000040)='ocfs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='bRequestType= ', 0xe) 5.024436773s ago: executing program 8 (id=1598): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002240)=""/4112, 0x1010}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000100)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f00000010c0)=""/237, 0xed}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f0000000080)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) syz_usb_connect(0x2, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0xc6, 0x50, 0xa5, 0x20, 0xdf6, 0x4a, 0x3671, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x57, 0x2, 0xa0, 0xe0, "", [{{0x9, 0x4, 0x98, 0x36, 0x0, 0x2, 0x6, 0x0, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xce}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd, 0x9, 0x8}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x5, 0xb1}, {0x6, 0x24, 0x1a, 0x7, 0x4a}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) 3.803495371s ago: executing program 8 (id=1613): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xa0, &(0x7f00000003c0)="c260601247866777e20655e5a655219b86b3c36f3543a7b1f9e26753a82a1da883f3fc7654f70d189495c78ac78025f2fda02af2d03fc530c4802abd47a88aeb6b7d04c9dbde40d06334abe91d8682c520200fd5f5635f84092418132542e6996be5e9800a1e9a347d99480e96db0edc99df0360e146df614bb5f0515e1adce023618b386212ec1cabe898f0b974fabcbc41bcbfcc41e26054dad9c4a25f4a90") r1 = syz_usb_connect$midi(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000886301000000feff14"], 0x76) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00035c0000005c03"]}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x40, 0x31, 0xc1, {0xc1, 0x7, "04b78e2c0c436972b1b57d9510fbbe03d6f13b2e978bc1e5b4f716209d01ee1a866b81b3ba5f224c73b6730226745977d87712e2572338f82e5e938d46e8d964a9ed9e62bf9ade9bab570238c44464cc824df0b83635f173b431b58babe7cf9e79f88c90b10c9c2fc919fc8b94cba0ab9d24f241109f227071790518f18751256c2d8cdb63d936fbd77c79d6d50474833cb691947ea3eb8dda7d591b4492c4ab591bbb3b556b0f1f82777c72afa5cda326d8193de882b74c3890d00631d984"}}, &(0x7f0000000340)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "35012a89ec1f1eae7e8a0d6ebfac2506980d2b4101275c5a69"}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000940)=ANY=[@ANYBLOB="00008b000000da2b31c88948957ebdf1013e1fe35be312afd4baccbb55e1e451a6c516fb5091f6fad9d961a58ec9d88738c38456fea922c935450924a13b38175bbb6844678c3986d080b445b55f06b9b77d7d765388d70acffb14d39c9f3e954f2aaa3000000000000000010fcfa78345bbaa9d7109b57ea3331e9aa3909eeabfc8222148d9d5dd6436e632e7a0eed226b8b2eaabaad2efcd574b0ee635af5b1c41030af1a89323f5747766200ecdabd8fa"], &(0x7f0000000480)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000008c0)={0x21, 0x0, 0x3, "b7d032"}}) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3.059250388s ago: executing program 4 (id=1620): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x325, 0xfffffffe}, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ac0)={0x34, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@typed={0x4}, @nested={0x14, 0x6, 0x0, 0x1, [@nested={0x10, 0x147, 0x0, 0x1, [@typed={0x4, 0x109}, @typed={0x8, 0x7a, 0x0, 0x0, @binary="7e8359e8"}]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="bf74a7df"]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) socket(0x15, 0x5, 0xf9c) 3.00122417s ago: executing program 4 (id=1621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) (async) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 3.00108323s ago: executing program 4 (id=1622): syz_usb_connect$midi(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x0, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x28, [], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x5, 0x1, 0x0, {0x5, 0x25, 0x1, 0x1, "cf"}}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x8, 0x0, 0x0, {0x4}}}]}}}}}]}}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x23e, 0x0) 2.56820693s ago: executing program 4 (id=1624): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x2, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1}) read$eventfd(r1, &(0x7f0000000400), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc/1/root/var/run\x00', &(0x7f0000000140)={0x101000, 0x0, 0xa}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x7e9001, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) 2.55679309s ago: executing program 4 (id=1625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xd0803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.499231651s ago: executing program 4 (id=1626): r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f000000a980)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x94, 0x1, 0x7}]}}}], 0x18}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="b2a62833d61bde0dc35399336dd91a4649e54af4150ed5ee151aefc90603cc33e33a142ba76493a2922e1cc84d77e4499002123e8d7ffecadf7b5c93214ba91a1560ca24598af4ec5d43eaaf794b07582b1b78c2fdc90c75eb0dbc8bfc69f96089a2fbc0f86d0762bfb65375e3977fe39fa6ea43cf8edcd6ed740a4ce1f2ce7657146314991c8afb85cbaad9d94d5c6d024b54ec03baa27ea19b7495a7e30e684eef81b726e32f23b30daf27af9f98ba", 0xb0}, {&(0x7f0000002880)="5e3a95164f2d5cc6bd4099978f231b7e76bd1267888ed44c1b341a860fa46680efd83c4b7eaf4d1a8abbe50b9eb028141addf2ab7a2de232014e91be7f33ca9b020f1076ce4239d0484f387a1622eaf1a91bf48d34c60872e8c092fee3b809836d3239e022e163b5532b7e24be653147de3fd2b80fa5b7087f2493de161018c7ed7fc5f708a7b8356e5faf6de903e120783b97852400cb03e88153104673d8c2150dd5ca428965bd7e7f208d25eee67c31489d2ef32eab6560f7ae02c99ac68627aae634e30d23fc98566beefe419445a66dc5dbd69d72cdbe2219e7a1f484c7371006165923f332153af6810f41c37c0f5a8d04e523495de32d0d441a0cd810fcd0655ffd60e9d801a84b8c21eba2bc29066a5cc629795d413d46ca1a22c4341b59ae43a6c1f73ad08ee9c4eb53f26d0ca430454bff2d3d70459844a7277d01d1", 0x141}], 0x2}}], 0x2, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8669}, {{0x0, 0x0, 0x0}, 0x83c3}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1}, 0x2c}], 0x5, 0x40012020, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004200)=""/233, 0xe9}], 0x3}, 0xf}, {{0x0, 0x0, 0x0}, 0x24b5}], 0x2, 0x40000000, 0x0) mmap$xdp(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r2, 0x0) syz_usb_connect(0x2, 0x48, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc2, 0x44, 0x8b, 0x8, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x2b, 0x11, 0x3, 0x39, 0xee, 0xa0, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x0, 0x9, 0x37, 0x6c, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 1.968740854s ago: executing program 8 (id=1627): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000002140)="487d5be11f16f3305344affe5555b61d1ace1ab74206000b60e914e16e22ad69b58747915158cf12de875b71172ee3f95689fb03c80e9a832464baf041e8a832a29e000000008000", 0x0, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902120001000000000904000000f7045c"], 0x0) 1.650912651s ago: executing program 5 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0xffffffff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8094}, 0x0) 1.650067791s ago: executing program 5 (id=1630): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write$binfmt_format(r1, &(0x7f0000000140)='1\x00', 0x2) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0xc, 0x4}, {0x7fff, 0xa}, 0x85, 0x8}) 1.647140611s ago: executing program 5 (id=1631): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x31, 0x0, &(0x7f00000000c0)) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r4) fadvise64(0xffffffffffffffff, 0xfffffffffffffffd, 0xffff, 0x2) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_macvtap\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/546], 0x222) tkill(r4, 0x2f) ptrace(0x10, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x20, 0xfe, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0xfc, 0x1}]}, 0x10) sendmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2b106b47", 0x4}], 0x1}}], 0x1, 0x4040840) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) ptrace$getregset(0x4205, r4, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=""/131, 0x83}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000140)) 1.469208926s ago: executing program 7 (id=1632): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x3, 0x0, 0x1}, 'syz1\x00', 0x27}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f00000001c0)={{0x77359400}, 0x1, 0x5, 0x84000003}, 0x18) 1.425500306s ago: executing program 7 (id=1633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) eventfd2(0xe5c, 0x80000) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2}) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f00000000c0)=0xffffffff, 0x4) (async, rerun: 32) write(r3, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080008000d000000", 0x24) (rerun: 32) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0xa, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x73, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x8, 0x7fffffffffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r2, @ANYBLOB="3bd25f9a2e3035bbdc5183c9f3c46bcdddf0bc08396a66ad919878c8fe62b1922dd7666b01595b7fe183065bda35a6f2d70706aa8c96359cf6f6adf6bb68b5"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40002010) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.291154239s ago: executing program 7 (id=1634): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) iopl(0x3) ioperm(0x0, 0x1, 0x1) ioperm(0x0, 0x40, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000140)='./debug\x00', 0x2000020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='+ 2 0 0', 0x7) 1.29077981s ago: executing program 7 (id=1635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x96f}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r6 = syz_open_pts(r5, 0x141601) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000240)={0x9, 0x9, 0x8, 0x7ec, 0xd, "52c4fdd9f570ef13"}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000100)=0x3) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x6000000d}) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) lseek(r10, 0x100000001, 0x1) renameat2(r8, &(0x7f0000000140)='./file0\x00', r10, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000640)={"fea121591fca4ebd54f99c54566518e57912459ab098e4d875f8876c1c7c159530e2592e462bf03191db7bc5ea866cd9f79c640b5815630364346cb124bf5369a2bb0bb184ae4a28ad99f84b65ee1c2173c40d3817bb04ab752a924d070ebe0af7b5dc55cf4befbc73b79d862688f64c3c321f89bb9eb654872640e33969f6d7e4e56634dc5ec65f18c365655664e215949b5248577bfaaa7cc8f49b828c0e3b6c4879e52df331d61aadaf638b3942fb6f45394f93815a37d036aec69cd5e7d1ba26852eada48e622396857262c0e9fd0bc73381b22fbb511f843ec5825462b1ba6c9a5df8a6539e3e5efcc21a6aad41762fb6a64c2ac94e5cb27753a0db5275e6b76d8793db5f094d8abb32ff262086897a70ba479a9711d61081c761d0bf0151ac903aafa634bc538212f7c1fe873765c0dd0ded7de96e319ea91f7a055b3477e16ff97b4f1aae17b3ac1f21dff1cf2e01415de67d309b222c2390ce9d769953ee4e2d6848e6f1723d09f7c873f74838e61c71ec54bece8a8c9f7994d5ea9c5697b4a2208307fbe1c15fc19f3e57f931f1a499f23c7c89b998a9a1bf76238d635c6cbeb54b46d1e699abde6853fc055e532084ab3b7d23c95374a2eb73c26cf544bf0a892c1a800573ef4a487028935e2a2390469471ee07aaf59dfa5a575533e3c2b10a7b066b0421b09d0c00b9287b50fb5e0ced047d90efdff3d57e5e788f9f8e089f444093d47cbd4a5e97c8dfff2934babece91891a808b38504e7fa89d2f9fbdb2c55ee89b3e6e2c1a1c8f83a3483cd063e9f5c21cdb25d93bbb84a5c951bdbd83d8c2286349b8c9935d75c4ef94bc0de73111764efda76f5abb63f0714f5b6028343b8595bf817af5e783f0ab9989ffc54c215ce9faa92574de09272b9214629ddd864faa06528a0001aee239bba20cb783866c2f4d738380f3a8fab43ca228473c642922b1e30f90db97975170958479baf6bbfc79e7b3ec265df4ba3ba8efd09bf8f0db66d99b2be1bffe9e15cd7ba93f80a1a6455628b33f480d78c45f00ef0df489b16c0f4b02dc6fecf1852c1a2c04258233f9bc33291b3c2671f43529523ec31f2b40526b2c1779cdbec8ee2189f97b10c983425a1f456883058558e25e4c31b520a0f3eef8394b8b6fd1b152ed6e177e6dd903f0817cce49f03da53576b7873421199e4044e8fcfad47ff70ae74d271edbdb9c59a5e6d25c7c5c1c50e8463a5e000a2fa6957b42ec6ae10aa2fbc04611951686e24ab5e9d49c3cd438a5fa0874defcf26b24fb156fe808a002e0864bb7ee5425cc905c3526c3a8b51e5bd1329e20dc6d946272c2d6fbf69a88a678d787564542b2ac0774ea85a09efdcd60ab69f90571af26e46f96dad7ad95448f69837c7ae06e70167e169653b7edfeb13b62630507f6670b3879fe1d5e513c6b96ae225b0ecfc22569d2"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000200)) write(r4, &(0x7f0000000280)="f3e651e976ea7ec0be5f058307b95c1ae0e93a8660f8ebb926e9e5be7ce85338621594828e4ef615d177e567339b27269960b1abb8f49a89b0070f4078a2b0629bee6ca98e8855c273f568edc84dcc52fc3f7515aabb4b5256fadbce04a9a97585463690ba9cddc03e0ad77c2bf6e1451fdb2307f035c6de7413a9576dba3c7d1fc6a1d7147fc311c652f86183732e81836a56f03ec9c345b4c77df10df180e4709dc2092347b957b9b17992fe3988fbca48a413564570cc02c263027746b898261b4b874a84d3677ee092fa08fad2e88512540f6b157579a8e4821062b39ea47615be49", 0xe4) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) close(r11) ioctl$KVM_RUN(r7, 0xae80, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x22c0, 0x0) copy_file_range(r0, 0x0, r12, &(0x7f00000000c0)=0x3, 0x4, 0x0) 900.647308ms ago: executing program 7 (id=1636): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x4080}, 0x30, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x3, 0x0, 0x9df7, 0x2, "ef1f00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x11) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x4, 0x80000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4020aeb2, &(0x7f0000000000)={0x1, r6, 0x400}) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(0x0, 0x60840, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x98, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000140)) syz_ublk_setup_io_uring(0x3, &(0x7f0000000180)={0x0, 0x4, 0x1, 0xffffffff}, &(0x7f0000000300), &(0x7f0000000540), &(0x7f00000003c0)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x10}) 432.908879ms ago: executing program 5 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x1499c0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mknodat$null(r0, 0x0, 0x800, 0x103) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) sendmmsg$sock(r1, &(0x7f0000000e00)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x0, {0xa, 0x4e20, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="45b9b51e673f228c795fada7afd62dabeede659bf5395b1a6e1ff54514ddf483b1207e2415acb2e5a18e03178d931a1859bb93fe32d3c47e32694c43a27370af57085f0f7c6ba81ec50d3bd7805f9a429d179537107645b524c940f8292fb0fa9231055681a3d96b3897d111fea8754c6c83b1355316094181f4865b0afe677c080e666cd19c55496d73e032b47bc90a7c32131843819bacec4e7329c80a0270f5f8d94a29400ed7e48031ef14", 0xad}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}], 0xa8}}, {{&(0x7f0000000440)=@in6={0xa, 0x4e21, 0x98, @private0, 0x7c71}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x4, 0x4, {0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)="560f4dbbe4", 0x5}, {&(0x7f0000000600)="8468ec70f6e646a451e52abb3469e02d496a010a12ded4529af01e641448b77b6f4bc828e8da63e9ffd7ed71c0812f377f9022e0d89094c57592c002496c6ac1da24b33e6b126e2d1ae452a2c9c9e48e45c5b05dd6fbe66824291023867fdc998e7a95a941640ceefe274b8bc6ae54ce", 0x70}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="107e7e33f0932fddf37955529276c73a75deea651e38aa9f34e4ffe18ae69b5156217c49770c70ac03b58746ca5f340c242b8e17a1b792a651cd635d88a0647ea815535dbc20df9728d07df7887bd8f12792ad1d88", 0x55}, {&(0x7f0000000740)="2f12b60bea8ca35335e538901d82e26c47c37e08685faf80029156ace3393e00f9312067848fd7f645fa3c0363a7457758ee9daaf16c87fc16a98ae8f27e342fdd75a42415322aac04aee47471a31be2118f037716f0e97879c98bf60a8c84098ecc5864cf794967ff7996b2bc8f00c498bdcb9aa87b9b6c8fc7993910f26c95b00c354bd30b46cb22ea99c20218b004a164ede0074e746b33f7de69df34ecc77706c83f7427da46ba8d92d892842398bf5277665fe795618a649487757287b538fe77bccf9a842ea7467a3fae8cab8bd1e95fc9ec0719ae6a9aa317f6645ae3d5", 0xe1}], 0x5, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x5e17cf04}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @mark={{0x14, 0x1, 0x24, 0xc}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000980)="cab4395ef9dd6629f8aa11797887cd901ae227ed0066640cc883e2c224c718aa17b6171ad54dbf8a53c0f035383724ab746e72ff9ada393230e15b7a8941a5f792736481ec5fd8c7d71e0e152e08a9d72f06a59fe376dc29718e8ff8b63e4a2d985a51f2b38004e54f557a47f96be2ed6af338ea0145de71e5d6e6f5f42e1c06357521bbcaf28d7074cfc37e37829031ebcfefea1a2d49becde7fdcef37da442e75290685d023e30ba657f4a530553d03fe399473878292600f6548abedef17713232bfa3aadf35bc12acde27756901a17ae1026c303ff168ec3b33a7ce3377d64465533f72464fc5574b728b5348c92867956", 0xf3}, {&(0x7f0000000a80)="372dd8c472030783cd7120bfd7d8728f99eb0d593f13a6a86446f2ab3f20f94a3387a542221dea248b821760ac87210d", 0x30}, {&(0x7f0000000ac0)="e0249954ca18e60d753fb77e54f6d4deb07d1114d060f5286cf7edd78b02cce04e69a8486b71b7ad9d5df1243f94bdff683b91f79b4f6c56386e044f64786d7f1e71c937b7377c4e00dfe1c9a9c6ff2152b8218c70c3d18b15e4a472fe5c87fccec9652a230c92aa598b54e676f73b54e840669919931f3562e6dfd392a61349c4f18a52fd0c709b4b210ab1c401b7c76c220e4a179d109bd98c", 0x9a}, {&(0x7f0000000b80)="07f1bf390647f6548ffeac5ef6374105cfddf4842de5927cf7f507f7b55f9b2e36f7f5f8a3e827435a3e45a3bb7c0e3edff28e2e063b4c4ef4df0aedd93e7a1dbb9bc16039e48bbdbbcbe9dc8e715da137df664c08cbbe327a4da6bb984639a7b5cd2abc398678cef95642a2176ce02f64d8fc37cfaad218607ec0e0821ade2dae87554e8823ea0d9bcd3a8a174c11e5aef6ecbb4a72d8aa5e3b6be7fc56ce8a688d6811", 0xa4}], 0x4, &(0x7f0000000c80)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xc}}], 0x30}}, {{&(0x7f0000000cc0)=@generic={0xf2b085052a7c520, "1ab42e883419bf1288f058b11b3840fd147e7fac318d69574852a6cf1b9e050fdb77b3be3dcf5a63fd6f6f42f1c326da02c956afbc18a2d9bca8c89d2aa4cbec3ed58bb6a9510c41b41b792d050804d3c48d5bc116edc8a62efb76135bc474ce1ac02ace7643adb702646822aee2c5f7e2cf8ce5ec04def3c69666cc8642"}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=[@txtime={{0x18, 0x1, 0x3d, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x60}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}], 0x5, 0x24000010) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) 371.19644ms ago: executing program 5 (id=1638): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x3, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe4, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffc, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x5, 0x4, 0x4007f, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x20006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x186, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0xe6, 0x1e, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x807, 0x44, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0x53, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x9, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x1009, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x8, 0x6, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0xb, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x7f, 0xd447, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x2, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5395, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x72d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x40013fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x2) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="5de597be73d52c"], 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000880)=@svm={0x10c, 0x1, 0x1080, {0x3000}, {"c5fb9caaff22757f524de3c00035f58eb4f30937cc7f4f21cf0ea039c722df64c16cdc02e7e386ac7ce71fec54918bb63fabe62686d016e6724baf7984cf77a7ab5685d414ba86961d768dbc5bc00c73f361a031582f4d6b2d4efc19a5cfee8443809f69c2b36190d80852d3857ee4b5dc8d058df8d328b07d784a5c6f8d374b15163d549194936f00f59d99c4a23909c15470bcbde33247c3a07a3b089a72c27c22212ee8f634cc86a91052de24431ec9f025939baacfae4b242c43399a390ee641c49ecc014a6f70afb54b02af0f5a3d1760f7fa010dbd79e12aea293161b0fac1088eb3724885eb2058bec8e4eb5c30461b85625a2d6e5415c5d1dfecfabc0262c9cb37e111bed8c01eb3b65c5bd16a0cf1035a6c064952cac96fc3e01c976caaa3def4ab9db42c585e82dc439c384e0e2822a84314650dd03c8eaacf36763a182cdcdde51d2d50384d898e68e36ca017f0d5ddfeb8368cd915deb2abac7292dfe879b315b3399a58b7bd9f1a9a29a6322aa2994a9255d406b0f6e34f90c2688c8236658f6d5b8bdf8845017ddd4d8fbbc1ebf846a43d674df1c9513ddb202e8d2ad92dd41991ce5e54bd5d9d5621d9c7ac9a12933a3322b25d1a449dfb5b1d0701990175567ebf24e11b1fbf76398cdd6f0bb0822377bb7d8f6a6ab570de2725f61fed086744d8d183ca382cf8c5b573af511e18dc193c341216c98d8595fb2d227229c4e34cfc7cbad8ff6c9eb369cff652bed4b3db66ae996756a26bbebe9c1b61d2fb0e0202a7badfb252dc714e05e5c93adccd13a5c0b0ae05635db13078eeba823112506f20b87cd1101c99a9d05834624c0841b4622f8ac12ba2a8683cc1eff7527e0a836f991513a73a60669b17b5f8023783473a927fe07e7e5c958234118520f70f3df4f205876f06d06e4eb209077c76e0a63a590c14792589a41490d6a57fddc2b4f50a4c895db1cf81cfbe83087b3f47dfcb77fa8c4c229aa178316e4d7423133b7486e2992952d8e92295f96d2a26d3f6098051a9560b8c50ca3100a043f1236c5817540ca4bf323397e1b302204f2ae5520d8b65aaef75e7d7a2984753e563c24d87f13a0dac4f8620c1be1cf9722f7129bff373387a85f52d6dc2540843238b1bfa9c1765fda8d61f931662dfb988e42c91e3111403d7325793993b8261b834fd7e7993f0bf8ef74bfd5114afa0666635f29769cccc1efb739b8f16740be102d316e5e71cfc0db5593f1c5cfe9bd0d44dde5df5303fa70b0a7a0b6196b764dca6bd6fc37cb6cc6abea5dd559a8504df79839cd5bde640e89a2a90ee25aac619f3c3e775f8e5c5a094ea6dd55eb6699bc9d3bdf835cf43ae6a487199bcb4daa0978816142775c9cccb1bcbb9e0c9f819ec6b69322aebba646c59fb89da85b1b27e4f82cf86a49a4812b62a47458159715d226892e7c4eebf5d700f881cb11e8939106b29bbccc83c9371b42b828607152068cc8e3569ca5788bac233727732535244dfb3ea72066264391d45777ffea11b866551884424cecc3e811eca23915a67f6ca100ad9b94be2a8b2b1189c9eec461447071986babc1abd2715f8fc9de3200df104077f36eef2c55a63c95071909b3a6c8852dbbba9d1bb11186b009d778f2d91afd2a18eacf0d3b5e82ea95c248d55c2d2212de6455878280f67eaf52598f554acf1578f1040ce8dddf7675e29487e851318a14d016284e2bf53683ad835dfe765329636dfc6204174d040fc143216689592830a4c01dda0ebb0ef06ec0bf2f2d838fa5a091675617700bb2cec0b8b63fbf41049afd8e85baa2407364e7baaabc543b746bd7de1798bc76391e900339cb74c566d416e02bf284f95c17c9b0301f5e00d52ecec8227ed5a466e3cd3a4ed36bf76c2d09465da61369bec57b86f920911ba77bcaf7f41a16ef508e467f35b74007fc090ed7af005977b5feb74374e55b3680ddb7dd8d92088276dc6a31481297e8d74645cb51a62a6eddb8c8a3851d286fbb1da3ce81ef1d2f3e5ca09733ea6b3a9d4e540890e374ae7de5aa206e8b392af253243a98dd8afce512b17305f2179105302abcfe501e8d96a31402e65a1102557a7417fe0e05b243d87b792d517a4d9a2405ad282d72c351ca2d2a1dae44c5eedc8f1de333b71b4cf806fa8c7b0be78e2f434a6648622c7d420aff3015ce0b9b0dd9945bdba608da3002238a3e1958666b106ef7a363fa20328711748c42c1523395c39bc9ff147aeaee705352be19b72bf46e70c02730bf8ec8b567374db5abed486bfac1fe3900c4a7920017aceff79d52cbf085d538c7e42f4d31d1740c8bc5401a1a6728c9e907f5340c684be7dc095963f0c4c98ba7ac00a82c86b9c85efd99e7afa91e2a58ef613ef89d916aac97e19be07e814644e4dc1d38348806cf5b68ef23b26d3e8d3246fea0d01394d6b3fef6abf85d44cb27139093466a0b0fe45c80533ae515969066cadb7b87dcbce286253974ce1f99cccb44842a8b9328693130fbab181885aa9f79474fb1233a4464119ee9a2567da6775c455b8074e8923c3c1835cee80f11d9f350719fd2ebb12627b0511239a66d8e00a9dd678cb662cd247644a763bb6353fdaadda4737622517fd256d8ef733baa0dade6d253ba58834a75f0cbd9ff70478ef516884240997bde269d1271ade87f525e6453215bcf7b6a64acfc1e4757e76918a696eae0a2a57c0caf5074d1b2c825436a792116aac17bd2c669206f74e65f8b987e15e55843f78dc312ccffc4766a6f99a948e6679fe5a5f75dd1d48b5401d4883c841fde2317ef8d2a132d3485cbd3fc16a4629e818c98b47ac42125585ba33b3f415145afae268d99c2de6f43ebe7f3db32fa60b118144693fc6c4a53ff3eef5528d18c61c224604985fe3fdb0e04806aa3765e7f0cff19d697692f198d4e5cfc85b5135f3a8c36c3558b2314b05d7173f54d5fc92425c613560211d6ab62142b01b0cc0fe551f908093de88d71abff93935ff53034a3996215e78a263678a9de60830d92f992e81d391c0a7f87a4b32223502a3dc7a9dc95fcb1b01c098077bcc98c7c3e730dc8a71c40de796be56b77e91e867641360bc3cb6fc0231b780174204d0b19424bf9f718bf382a4d96c94e2a033dc43ec98bfc1381976686821c89a0d64933806b8b2015b5f3d895d34894c8495fe84d8f1847132b227882241fd3f2adcbf282416230227021dd74d25cf38e4efb2d4f4744b7f2b23f9e4c79896e87cadbfc9186959ce8d138579c33c6e624744a7b858481aed6c8452e7bee1825316775552b054c6e91be8ccfbcc3b857fc7a0193b265715c59f5e1edf03bd54e20d7d3850298e3d5bd12dd665ac5edb7536ae20d0b906a119da3cd61d4b15d12cdd7c416df1e55efefcc6ed67b82092eb6f2cf39ab3f51c02c4ae5fdcff944860dd48641ee18bc063c5a3fb0b5d6e804732c4990a4b7b53c628fa4dc243989deee1b600658980efb470709cdd1025a653e88c0459f4307c3f69906c72f641f1b8eb37f0bfacbdc0da9fc00e9c4ead53dd57051a3983d6799777dad6cf13c7a33857aeedbf4ecdf8d28c5e347cbfc9d40eaad7f47c558aa92af975671590d5072e8d682e2bb025a01b7b728a9fde622c244ff6ab19298d4776174354a2c24704af5f297626b12be94dc1b4e110277f4bc97cff8f1fddf70108fc716e862e7f309b94219afca4fff342ab949cdc5f40718389198eb99493ce031f776dc954a2b0688efccb4216be9f01fdd7edb66552c00891c56c105e8f4fd590ee5ec24c88e9ed3ca51f9b5d1f2b74b4f6fa65b416d39d36dadaa77b43c12085e30eb12ca01f9b53f3c3ef2adbfce6a4b1d167813cd2d3ee34ba4a9e20a24d2c13d40467ad0baf83c1bc9e8775040e001188e6bd286326ba8f146b5c751d8bf5a080a7a3c979eba41aec4b160e483da55f719425cb463520be12001f0a0aafce8f90ecfcd60cd8df5b6b183cf5fc341d7c19408225b7a8626aab1ac370e6d934f2daf2c0a6fd3a89e22fb2d1dc8fa3d654cdb1d74b9488455dae4e17359d1cffe83d045225bf76a53b27b33501fa280a1a48bcacfdb7148a47f68f70f07f1e66a5796475f528ee3148e3a623ee615c17a4f13006c304f8ad35b5238a31ab0b854fbfab97e7a5d77fe7171d6524796bbe5ce92bfed207b08d56e046f372e4cbd3d2d5fd2208f9e11a6e2b0336b89e934e5b48bb100715554973c37cf5cbf5d6237acf1d7d5269b04f30a1ac30fd1e9e131a7a8c24fa997adb765b6f93a478c9bc60ee877a0689416e1fadf6f71cd9e22ef1abde162311abaf3e2438c769d47037f321b42dc3b927ec20249c810ebf7b206a6ca011a22af465e4b45f49b83566c58aee0f8273dda3e0522958d8834b869a438e299f1383543fa41cb2884b74077eac24e0787b84eb37321dfc1c1008297a3464fcce26346a4d9ab87d3ddf2bf49e7230d992b42c457cb872a7b4110bfa91f04457c7a11a77e4dd620c346a6479a06b47b3780a736322245b674f747e6cbf6760e62be3b122d60f06f414672c76dc2ce317aa2e6d9cd228538446e6b590606faf353d948c82faa927c09704bcbd0abb259d5dc170a35214b5da3a94ccf2ae1030346f3e5bfb75bc41003c80d2ae8c71ddc6140ee7d61ffb12b98fbe192cc0b7c5a29e4ea3bf1c48c62839b83d5ec53da3d87e35bf649f722d4f14c3507922095ba3f1ff96a75ba76bc2bc235ceb8ef46fd44e1c52adb521823cd54dc735774d70ac38e6999832f4be86cdf50e41271aea32f318fe286e2cef33c1d0881966ef404aacbeb0a4aa49333d0727bfd6b90a2061d3dafe13c6b8b2f4723a144971b8b3b2fe495c8eb028d336189beb40ed6be305fdc4dba35a138f34e9c40e3bcd6d1d1fff0c92b9c1d072739cec907e55fd6bb20cea59565efec23cf60f90379025e98f156242f7e3c8b8c474c5051b35d9d4242a6682becbde504aaef961d462fcec2b6061b91ed90838400be6a052426ebbc81c1515dbe28dd9a624b5eb910b759cdc981cbe752d0041052c748aecfe96b4e7ab9730be2e474bfce1d84b8bb90ef8b3e0948b08d862ef231a099a74f4f126d9f65aafe6d8fd539cbfdac26f05088093cfe8972d23119115e04d17839565d5ebb2c22808b7e0ebb5a2a6d83d32d3f9015504c4ae669364b79d9541c00d88a46e0d65e59cc5cee5b44cc7a2df4126ab3104fdcf63f77a18fcada7a0d9d35fc73526dcec3de1da80abba632285837b95821981181b4776c6177f5dcb8ce8f24e969a83f7c9ebdfcd8f83a4160bb2bafa39d84055a7f0177b001b21032eaac0ff7b4441a8bfb056706dd67fc0960c7a309bc645dd669b2dea84b51372013fa9af6435d4c5db42356f87b48a5360b9a255e6abcd37eceae982ee0e512bc8beee8d470b06b8909e818487ece105ea5caecbf27c381a2b675508e3019e955646dfab55755138de1d8e3c2ab7e6fb498425269617525625a219fd901c92894fe1e2cf95a1b7bfb72936cb21d4fa79d73a5a08743a558244507e09246edf049e7bd5ac78361569642193e2787bed0f63ca682b956da40d41433090a1d8a8b231d3b0fafa4d56aa85857ab7ed4974dd1727440b001cc0751f329f604da1c8a449a06ead889b17a9864737aa87e70777317b293cfa554a28a1131f1cd5b6437bcf15d21bcd14d7531b60a30bee3a2f6b74e65d73fec5a1d058e7848c8808c1bfad02ef802e5fa2e9387a2a61d348c34e406f5dc9af70c88d86abb5a80c734508a85d255561d1052496eaad"}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf1, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000001340)={&(0x7f0000000340)=""/4096, 0x1, 0x1000}, &(0x7f0000001400)={0x0}) 310.138242ms ago: executing program 5 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) (async) syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r3 = gettid() sendmsg$nl_generic(r0, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000000680)={0x1098, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {0x8}, [@generic="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", @nested={0x71, 0xa5, 0x0, 0x1, [@nested={0x4, 0x148}, @nested={0x4}, @typed={0x8, 0x169, 0x0, 0x0, @ipv4=@remote}, @generic="2893a6da8b151dcecda17c1c322db35859cdfbbf4714b0d0fc22b96c76d73ef3d182bb3905b5088f997072a15d60a16c20e28e279122c7da8459d18a923429c505b31c178c59762a7c20dc3609588b60bc676c2cd7d8852b8f", @nested={0x4, 0x93}]}, @typed={0x8, 0x60, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x2}]}, 0x1098}, 0x1, 0x0, 0x0, 0x6048844}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040088) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/243, 0xf3}], 0x1}, 0x20) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async) recvmsg$unix(r6, 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x44091) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4d) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 232.481954ms ago: executing program 37 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) (async) syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r3 = gettid() sendmsg$nl_generic(r0, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000000680)={0x1098, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {0x8}, [@generic="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", @nested={0x71, 0xa5, 0x0, 0x1, [@nested={0x4, 0x148}, @nested={0x4}, @typed={0x8, 0x169, 0x0, 0x0, @ipv4=@remote}, @generic="2893a6da8b151dcecda17c1c322db35859cdfbbf4714b0d0fc22b96c76d73ef3d182bb3905b5088f997072a15d60a16c20e28e279122c7da8459d18a923429c505b31c178c59762a7c20dc3609588b60bc676c2cd7d8852b8f", @nested={0x4, 0x93}]}, @typed={0x8, 0x60, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x2}]}, 0x1098}, 0x1, 0x0, 0x0, 0x6048844}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040088) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/243, 0xf3}], 0x1}, 0x20) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async) recvmsg$unix(r6, 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x44091) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4d) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 0s ago: executing program 7 (id=1641): mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') (async) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@rdmsr={0x66, 0x18, {0x24f}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x30}) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="049fcc3e", @ANYRES16=r1, @ANYBLOB="9b0f2bbd7000ffdbdf25010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="049fcc3e", @ANYRES16=r1, @ANYBLOB="9b0f2bbd7000ffdbdf25010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x400, 0x1422, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000000b01020000000000000000030000000800024000000002080002400048000508000340000000000d0001002f6465762f6b766d00000000080002400000000008000340000000000600010021000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x5, 0x100000000, 0x0, 0x80, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x3, 0x8, 0x4000000000002, 0xfffffdffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x800, 0x1}) unshare(0x60000600) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x19, r6, 0x1000000080000001, 0x6) (async) ptrace$cont(0x19, r6, 0x1000000080000001, 0x6) syz_open_procfs(r6, &(0x7f0000000100)='net/dev_snmp6\x00') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0xd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0xd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) kernel console output (not intermixed with test programs): t_files+0x2bc/0x330 [ 148.270540][ T4793] ? bpf_lsm_file_ioctl+0xd/0x20 [ 148.270565][ T4793] ? security_file_ioctl+0x3e/0x110 [ 148.270586][ T4793] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 148.270605][ T4793] __se_sys_ioctl+0x126/0x1b0 [ 148.270630][ T4793] __x64_sys_ioctl+0x7f/0xa0 [ 148.270654][ T4793] x64_sys_call+0x1878/0x2ee0 [ 148.270674][ T4793] do_syscall_64+0x57/0xf0 [ 148.270694][ T4793] ? clear_bhb_loop+0x50/0xa0 [ 148.270721][ T4793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.270746][ T4793] RIP: 0033:0x7f5eba59e199 [ 148.270764][ T4793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.270782][ T4793] RSP: 002b:00007f5eb8ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.270806][ T4793] RAX: ffffffffffffffda RBX: 00007f5eba825fa0 RCX: 00007f5eba59e199 [ 148.270828][ T4793] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 148.270842][ T4793] RBP: 00007f5eb8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.270856][ T4793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.270870][ T4793] R13: 00007f5eba826038 R14: 00007f5eba825fa0 R15: 00007ffe3b9465b8 [ 148.270888][ T4793] [ 148.431635][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 148.435097][ T4793] syz.6.1166: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 148.743507][ T4793] CPU: 1 UID: 0 PID: 4793 Comm: syz.6.1166 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 148.743536][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.743549][ T4793] Call Trace: [ 148.743557][ T4793] [ 148.743566][ T4793] __dump_stack+0x21/0x30 [ 148.743595][ T4793] dump_stack_lvl+0x140/0x1c0 [ 148.743622][ T4793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.743647][ T4793] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 148.743668][ T4793] dump_stack+0x19/0x20 [ 148.743694][ T4793] warn_alloc+0x1e7/0x2c0 [ 148.743722][ T4793] ? __kasan_kmalloc+0x28/0xb0 [ 148.743747][ T4793] ? __cfi_warn_alloc+0x10/0x10 [ 148.743774][ T4793] ? __get_vm_area_node+0x150/0x390 [ 148.743809][ T4793] ? kasan_save_alloc_info+0x3a/0x50 [ 148.743830][ T4793] ? __get_vm_area_node+0x382/0x390 [ 148.743860][ T4793] __vmalloc_node_range_noprof+0x365/0x1300 [ 148.743884][ T4793] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 148.743903][ T4793] ? kasan_save_alloc_info+0x3a/0x50 [ 148.743921][ T4793] ? __kasan_slab_alloc+0x73/0x90 [ 148.743944][ T4793] ? arch_dup_task_struct+0x5b/0xe0 [ 148.743971][ T4793] ? __asan_memcpy+0x5a/0x80 [ 148.743992][ T4793] dup_task_struct+0x5d6/0xd80 [ 148.744015][ T4793] ? copy_process+0x57c/0x3350 [ 148.744038][ T4793] ? _raw_spin_lock_irq+0x93/0x120 [ 148.744058][ T4793] ? copy_process+0x3350/0x3350 [ 148.744083][ T4793] ? __kasan_check_write+0x18/0x20 [ 148.744105][ T4793] copy_process+0x57c/0x3350 [ 148.744132][ T4793] ? kasan_save_alloc_info+0x3a/0x50 [ 148.744152][ T4793] ? __cfi_copy_process+0x10/0x10 [ 148.744177][ T4793] ? __kmalloc_cache_noprof+0x23c/0x470 [ 148.744200][ T4793] ? __kasan_check_write+0x18/0x20 [ 148.744221][ T4793] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 148.744244][ T4793] vhost_task_create+0x1f7/0x3f0 [ 148.744265][ T4793] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 148.744289][ T4793] ? __cfi_vhost_task_create+0x10/0x10 [ 148.744310][ T4793] ? __cfi_vhost_task_fn+0x10/0x10 [ 148.744331][ T4793] ? __kasan_check_write+0x18/0x20 [ 148.744350][ T4793] ? mutex_lock+0x97/0x1d0 [ 148.744373][ T4793] ? __cfi_mutex_lock+0x10/0x10 [ 148.744396][ T4793] ? kernel_text_address+0xa9/0xe0 [ 148.744423][ T4793] kvm_mmu_post_init_vm+0x161/0x300 [ 148.744451][ T4793] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 148.744477][ T4793] ? _parse_integer_limit+0x195/0x1e0 [ 148.744500][ T4793] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 148.744525][ T4793] ? kstrtoull+0x13b/0x1e0 [ 148.744545][ T4793] ? kstrtouint+0x78/0xf0 [ 148.744566][ T4793] ? ioctl_has_perm+0x1bc/0x500 [ 148.744586][ T4793] ? __asan_memcpy+0x5a/0x80 [ 148.744605][ T4793] ? ioctl_has_perm+0x408/0x500 [ 148.744625][ T4793] ? has_cap_mac_admin+0xd0/0xd0 [ 148.744646][ T4793] ? __kasan_check_write+0x18/0x20 [ 148.744665][ T4793] ? mutex_lock_killable+0x97/0x1d0 [ 148.744690][ T4793] ? __cfi_mutex_lock_killable+0x10/0x10 [ 148.744714][ T4793] ? proc_fail_nth_write+0x184/0x220 [ 148.744743][ T4793] kvm_vcpu_ioctl+0xa43/0x1000 [ 148.744764][ T4793] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 148.744784][ T4793] ? __cfi_vfs_write+0x10/0x10 [ 148.744814][ T4793] ? __kasan_check_write+0x18/0x20 [ 148.744834][ T4793] ? mutex_unlock+0x90/0x240 [ 148.744857][ T4793] ? __cfi_mutex_unlock+0x10/0x10 [ 148.744883][ T4793] ? __fget_files+0x2bc/0x330 [ 148.744908][ T4793] ? bpf_lsm_file_ioctl+0xd/0x20 [ 148.744932][ T4793] ? security_file_ioctl+0x3e/0x110 [ 148.744953][ T4793] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 148.744972][ T4793] __se_sys_ioctl+0x126/0x1b0 [ 148.744996][ T4793] __x64_sys_ioctl+0x7f/0xa0 [ 148.745019][ T4793] x64_sys_call+0x1878/0x2ee0 [ 148.745037][ T4793] do_syscall_64+0x57/0xf0 [ 148.745058][ T4793] ? clear_bhb_loop+0x50/0xa0 [ 148.745084][ T4793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.745110][ T4793] RIP: 0033:0x7f5eba59e199 [ 148.745128][ T4793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.745147][ T4793] RSP: 002b:00007f5eb8ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.745169][ T4793] RAX: ffffffffffffffda RBX: 00007f5eba825fa0 RCX: 00007f5eba59e199 [ 148.745185][ T4793] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 148.745205][ T4793] RBP: 00007f5eb8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.745219][ T4793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.745232][ T4793] R13: 00007f5eba826038 R14: 00007f5eba825fa0 R15: 00007ffe3b9465b8 [ 148.745251][ T4793] [ 148.745307][ T4793] Mem-Info: [ 149.186294][ T4793] active_anon:62200 inactive_anon:39 isolated_anon:0 [ 149.186294][ T4793] active_file:20735 inactive_file:4756 isolated_file:0 [ 149.186294][ T4793] unevictable:0 dirty:1220 writeback:0 [ 149.186294][ T4793] slab_reclaimable:7278 slab_unreclaimable:72158 [ 149.186294][ T4793] mapped:28751 shmem:54393 pagetables:1217 [ 149.186294][ T4793] sec_pagetables:0 bounce:0 [ 149.186294][ T4793] kernel_misc_reclaimable:0 [ 149.186294][ T4793] free:1450558 free_pcp:11617 free_cma:0 [ 149.233572][ T843] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71 [ 149.236455][ T4793] Node 0 active_anon:248724kB inactive_anon:156kB active_file:82996kB inactive_file:19024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114832kB dirty:4884kB writeback:0kB shmem:217608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6700kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no [ 149.246346][ T843] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 149.275124][ T4793] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:68kB free_cma:0kB [ 149.284158][ T843] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 149.324996][ T4793] lowmem_reserve[]: 0 3921 3921 [ 149.330813][ T4793] Normal free:2874700kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:248724kB inactive_anon:156kB active_file:82996kB inactive_file:19024kB unevictable:0kB writepending:4884kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:12104kB local_pcp:10792kB free_cma:0kB [ 149.337649][ T843] usb 6-1: USB disconnect, device number 40 [ 149.363702][ T4793] lowmem_reserve[]: 0 0 0 [ 149.373015][ T4793] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 149.388694][ T4793] Normal: 684*4kB (UME) 71*8kB (UE) 61*16kB (UE) 121*32kB (UME) 418*64kB (UME) 99*128kB (UME) 43*256kB (UME) 24*512kB (UME) 16*1024kB (UME) 13*2048kB (UM) 674*4096kB (UME) = 2874584kB [ 149.408346][ T4793] 79957 total pagecache pages [ 149.413607][ T4793] 54 pages in swap cache [ 149.417942][ T4793] Free swap = 57440kB [ 149.430485][ T4793] Total swap = 124996kB [ 149.434662][ T4793] 2097051 pages RAM [ 149.438459][ T4793] 0 pages HighMem/MovableOnly [ 149.443135][ T4793] 352242 pages reserved [ 149.447276][ T4793] 0 pages cma reserved [ 149.452641][ T4793] Memory allocations: [ 149.456713][ T4793] 0 B 0 init/main.c:1477 func:do_initcalls [ 149.464086][ T4793] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 149.472173][ T4793] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 149.479841][ T4793] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 149.487724][ T4793] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 149.495660][ T4793] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 149.504287][ T4793] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 149.512242][ T4793] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 149.520147][ T4793] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 149.528030][ T4793] 0 B 0 init/initramfs.c:101 func:find_link [ 149.679217][ T843] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 149.752861][ T4838] syzkaller1: entered promiscuous mode [ 149.758395][ T4838] syzkaller1: entered allmulticast mode [ 149.814104][ T4840] syzkaller1: entered allmulticast mode [ 149.839343][ T843] usb 6-1: Using ep0 maxpacket: 16 [ 149.845663][ T843] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 149.856618][ T843] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.869427][ T843] usb 6-1: config 0 interface 0 has no altsetting 0 [ 149.876051][ T843] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 149.885142][ T843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.896006][ T843] usb 6-1: config 0 descriptor?? [ 150.239213][ T66] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 150.268736][ T36] kauditd_printk_skb: 503 callbacks suppressed [ 150.268752][ T36] audit: type=1400 audit(2000000097.146:1237): avc: denied { view } for pid=4886 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 150.339053][ T36] audit: type=1326 audit(2000000097.216:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.4.1204" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b5b9e199 code=0x7ffc0000 [ 150.378410][ T843] usbhid 6-1:0.0: can't add hid device: -71 [ 150.384559][ T843] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 150.394826][ T843] usb 6-1: USB disconnect, device number 41 [ 150.409208][ T66] usb 7-1: Using ep0 maxpacket: 16 [ 150.415499][ T66] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.426615][ T66] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.436695][ T66] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 150.450184][ T4901] syz.4.1205 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.460634][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 150.467241][ T66] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 150.485422][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.495705][ T66] usb 7-1: config 0 descriptor?? [ 150.509215][ T313] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 150.670114][ T313] usb 1-1: No LPM exit latency info found, disabling LPM. [ 150.679926][ T313] usb 1-1: string descriptor 0 read error: -22 [ 150.686142][ T313] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 150.695303][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.705939][ T313] usb 1-1: MIDIStreaming interface descriptor not found [ 150.907412][ T66] hid (null): report_id 34376 is invalid [ 150.911719][ T843] usb 1-1: USB disconnect, device number 73 [ 150.913795][ T66] hid (null): invalid report_size 29285 [ 150.925530][ T66] hid (null): invalid report_size 29285 [ 150.931160][ T66] hid (null): report_id 34376 is invalid [ 150.936828][ T66] hid (null): report_id 0 is invalid [ 150.942141][ T66] hid (null): global environment stack underflow [ 150.948563][ T66] hid (null): unknown global tag 0xc [ 150.954133][ T66] hid (null): unknown global tag 0xe [ 150.959447][ T66] hid (null): unknown global tag 0xc [ 150.964771][ T66] hid (null): unknown global tag 0xc [ 151.120523][ T4852] overlayfs: failed to verify upper (94/file1, ino=542, err=-116) [ 151.128380][ T4852] overlayfs: failed to verify index dir 'upper' xattr [ 151.135187][ T4852] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 151.146708][ T66] usb 7-1: USB disconnect, device number 15 [ 151.659230][ T66] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 151.663655][ T4929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1217'. [ 151.678824][ T4929] syzkaller1: entered allmulticast mode [ 151.810278][ T66] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.821998][ T66] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.833284][ T66] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.844745][ T66] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 151.849214][ T843] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 151.853940][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.870059][ T4925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 152.010207][ T843] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.021105][ T843] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.033888][ T843] usb 6-1: config 0 interface 0 has no altsetting 0 [ 152.040508][ T843] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 152.049560][ T843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.058057][ T843] usb 6-1: config 0 descriptor?? [ 152.282246][ T66] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 152.290093][ T66] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input19 [ 152.301854][ T66] usb 1-1: USB disconnect, device number 74 [ 152.307775][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 152.519238][ T843] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 152.526927][ T843] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 152.609391][ T4951] rust_binder: 4950:4951 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 152.618930][ T4951] rust_binder: Write failure EINVAL in pid:341 [ 152.720223][ T1636] usb 6-1: USB disconnect, device number 42 [ 152.854451][ T4968] syzkaller1: entered allmulticast mode [ 152.901365][ T4976] wireguard: wg1: Could not create IPv4 socket [ 153.232814][ T4989] FAULT_INJECTION: forcing a failure. [ 153.232814][ T4989] name failslab, interval 1, probability 0, space 0, times 0 [ 153.245506][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: syz.5.1238 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 153.245537][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.245551][ T4989] Call Trace: [ 153.245558][ T4989] [ 153.245567][ T4989] __dump_stack+0x21/0x30 [ 153.245588][ T4989] dump_stack_lvl+0x140/0x1c0 [ 153.245603][ T4989] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.245618][ T4989] ? ops_init+0x302/0x5d0 [ 153.245630][ T4989] ? unshare_nsproxy_namespaces+0x124/0x180 [ 153.245647][ T4989] ? __x64_sys_unshare+0x3c/0x50 [ 153.245662][ T4989] ? x64_sys_call+0x2998/0x2ee0 [ 153.245672][ T4989] ? do_syscall_64+0x57/0xf0 [ 153.245684][ T4989] dump_stack+0x19/0x20 [ 153.245699][ T4989] should_fail_ex+0x3c2/0x510 [ 153.245712][ T4989] should_failslab+0xac/0x100 [ 153.245726][ T4989] kmem_cache_alloc_noprof+0x42/0x410 [ 153.245738][ T4989] ? __proc_create+0x535/0xb40 [ 153.245751][ T4989] __proc_create+0x535/0xb40 [ 153.245763][ T4989] ? proc_symlink+0x2d0/0x2d0 [ 153.245773][ T4989] ? make_kgid+0x1d0/0x690 [ 153.245787][ T4989] ? __cfi_make_kgid+0x10/0x10 [ 153.245800][ T4989] _proc_mkdir+0x68/0x150 [ 153.245811][ T4989] proc_net_ns_init+0x259/0x3e0 [ 153.245823][ T4989] ops_init+0x302/0x5d0 [ 153.245833][ T4989] ? __kasan_check_write+0x18/0x20 [ 153.245853][ T4989] ? rwsem_read_trylock+0x275/0x5a0 [ 153.245870][ T4989] setup_net+0x227/0x9b0 [ 153.245881][ T4989] ? copy_net_ns+0xa20/0xa20 [ 153.245892][ T4989] ? down_read_killable+0x7f/0x100 [ 153.245909][ T4989] ? __cfi_down_read_killable+0x10/0x10 [ 153.245924][ T4989] copy_net_ns+0x4fc/0xa20 [ 153.245936][ T4989] create_new_namespaces+0x390/0x6f0 [ 153.245951][ T4989] unshare_nsproxy_namespaces+0x124/0x180 [ 153.245968][ T4989] ksys_unshare+0x4f9/0x920 [ 153.245982][ T4989] ? fput+0x1a4/0x230 [ 153.245996][ T4989] ? __cfi_ksys_unshare+0x10/0x10 [ 153.246010][ T4989] ? __kasan_check_write+0x18/0x20 [ 153.246021][ T4989] __x64_sys_unshare+0x3c/0x50 [ 153.246035][ T4989] x64_sys_call+0x2998/0x2ee0 [ 153.246046][ T4989] do_syscall_64+0x57/0xf0 [ 153.246056][ T4989] ? clear_bhb_loop+0x50/0xa0 [ 153.246070][ T4989] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.246083][ T4989] RIP: 0033:0x7f99df99e199 [ 153.246093][ T4989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.246103][ T4989] RSP: 002b:00007f99e080f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 153.246116][ T4989] RAX: ffffffffffffffda RBX: 00007f99dfc25fa0 RCX: 00007f99df99e199 [ 153.246125][ T4989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 153.246132][ T4989] RBP: 00007f99dfa358e0 R08: 0000000000000000 R09: 0000000000000000 [ 153.246140][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.246147][ T4989] R13: 00007f99dfc26038 R14: 00007f99dfc25fa0 R15: 00007ffc58e18688 [ 153.246156][ T4989] [ 153.309283][ T66] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 153.550898][ T5003] ./dev/sda1: Can't lookup blockdev [ 153.690430][ T66] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.700550][ T66] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.710433][ T66] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.719526][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.727515][ T66] usb 7-1: SerialNumber: syz [ 153.979189][ T313] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 154.040168][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.048711][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.130210][ T313] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 154.141157][ T313] usb 1-1: config 1 interface 0 has no altsetting 0 [ 154.149683][ T313] usb 1-1: string descriptor 0 read error: -22 [ 154.155890][ T313] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 154.164988][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.174235][ T5017] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 154.183798][ T5030] ./dev/sda1: Can't lookup blockdev [ 154.221355][ T36] audit: type=1326 audit(2000000101.106:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.4.1253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69b5b9e199 code=0x0 [ 154.290383][ T5044] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1255'. [ 154.442353][ T5053] syzkaller1: entered allmulticast mode [ 154.498519][ T36] audit: type=1400 audit(2000000101.376:1240): avc: denied { setattr } for pid=5052 comm="syz.5.1257" name="PACKET" dev="sockfs" ino=51400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.584203][ T36] audit: type=1400 audit(2000000101.466:1241): avc: denied { read } for pid=5054 comm="syz.5.1258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.784805][ T313] cypress 0003:04B4:ED81.0015: global environment stack underflow [ 154.792686][ T313] cypress 0003:04B4:ED81.0015: item 0 2 1 11 parsing failed [ 154.800181][ T313] cypress 0003:04B4:ED81.0015: parse failed [ 154.806086][ T313] cypress 0003:04B4:ED81.0015: probe with driver cypress failed with error -22 [ 154.987032][ T313] usb 1-1: USB disconnect, device number 75 [ 155.094622][ T5059] syzkaller1: entered allmulticast mode [ 155.379193][ T1162] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 155.499431][ T5063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=510 sclass=netlink_route_socket pid=5063 comm=syz.0.1262 [ 155.530143][ T1162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.541069][ T1162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.550806][ T1162] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.563740][ T1162] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.572936][ T1162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.581571][ T1162] usb 6-1: config 0 descriptor?? [ 155.759202][ T843] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 155.788282][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.797363][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.806864][ T1162] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x1 [ 155.816353][ T1162] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 155.824148][ T36] audit: type=1400 audit(2000000102.706:1242): avc: denied { bind } for pid=5071 comm="syz.4.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.851844][ T1162] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 155.930247][ T843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.940444][ T843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.951480][ T843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 155.962347][ T843] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.973169][ T843] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.987318][ T843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.996396][ T843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.004399][ T843] usb 1-1: Product: syz [ 156.008559][ T843] usb 1-1: Manufacturer: syz [ 156.008921][ T1162] usb 6-1: USB disconnect, device number 43 [ 156.013184][ T843] usb 1-1: SerialNumber: syz [ 156.027984][ T5065] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 156.067061][ T66] usb 7-1: 0:2 : does not exist [ 156.076654][ T5077] syzkaller1: entered allmulticast mode [ 156.086109][ T66] usb 7-1: USB disconnect, device number 16 [ 156.152740][ T5086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1270'. [ 156.239010][ T5065] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 156.389207][ T66] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 156.446988][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.455601][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.464259][ T843] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 156.470317][ T843] cdc_ncm 1-1:1.0: bind() failure [ 156.475971][ T843] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 156.482776][ T843] cdc_ncm 1-1:1.1: bind() failure [ 156.529097][ T5108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5108 comm=syz.5.1277 [ 156.539201][ T66] usb 7-1: Using ep0 maxpacket: 16 [ 156.547838][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 156.556955][ T66] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 156.569369][ T66] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 156.583183][ T66] usb 7-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 156.592294][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.601093][ T66] usb 7-1: config 0 descriptor?? [ 156.630421][ T5119] syzkaller1: entered allmulticast mode [ 156.680101][ T5121] fuse: Bad value for 'fd' [ 157.010013][ T66] apple 0003:05AC:027C.0017: unknown main item tag 0x3 [ 157.016935][ T66] apple 0003:05AC:027C.0017: item fetching failed at offset 10/40 [ 157.024988][ T66] apple 0003:05AC:027C.0017: parse failed [ 157.030739][ T66] apple 0003:05AC:027C.0017: probe with driver apple failed with error -22 [ 157.212323][ T66] usb 7-1: USB disconnect, device number 17 [ 158.524629][ T1636] usb 1-1: USB disconnect, device number 76 [ 158.610548][ T5153] tipc: Started in network mode [ 158.615481][ T5153] tipc: Node identity ac14140f, cluster identity 4711 [ 158.622335][ T5153] tipc: New replicast peer: 255.255.255.255 [ 158.628388][ T5153] tipc: Enabled bearer , priority 10 [ 158.635139][ T5153] tipc: Enabling of bearer rejected, already enabled [ 158.726201][ T5175] overlayfs: failed to clone lowerpath [ 158.829798][ T5178] syzkaller1: entered allmulticast mode [ 158.859212][ T1636] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 158.877438][ T5181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.884464][ T5180] rust_binder: Error in use_page_slow: ESRCH [ 158.884478][ T5180] rust_binder: use_range failure ESRCH [ 158.890534][ T5180] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 158.896057][ T5180] rust_binder: Failure in copy_transaction_data: ESRCH [ 158.904041][ T5180] rust_binder: 5179:5180 transaction call to 5179:0 failed ESRCH, code 0 size 72-24 [ 158.971638][ T5181] rust_binder: 5179:5181 got reply transaction with no transaction stack [ 158.980076][ T5181] rust_binder: 5179:5181 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 159.010231][ T1636] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 159.018340][ T1636] usb 1-1: config 0 has no interface number 0 [ 159.024451][ T1636] usb 1-1: config 0 interface 41 has no altsetting 0 [ 159.032456][ T1636] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 159.041667][ T1636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.049672][ T1636] usb 1-1: Product: syz [ 159.053826][ T1636] usb 1-1: Manufacturer: syz [ 159.058395][ T1636] usb 1-1: SerialNumber: syz [ 159.063736][ T1636] usb 1-1: config 0 descriptor?? [ 159.711343][ T843] rust_binder: 5179: undelivered TRANSACTION_ERROR: 29201 [ 159.711358][ T313] rust_binder: 5179: undelivered TRANSACTION_ERROR: 29201 [ 159.739212][ T843] tipc: Node number set to 2886997007 [ 159.756696][ T5190] FAULT_INJECTION: forcing a failure. [ 159.756696][ T5190] name failslab, interval 1, probability 0, space 0, times 0 [ 159.770363][ T5190] CPU: 1 UID: 0 PID: 5190 Comm: syz.6.1304 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 159.770395][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.770410][ T5190] Call Trace: [ 159.770417][ T5190] [ 159.770426][ T5190] __dump_stack+0x21/0x30 [ 159.770459][ T5190] dump_stack_lvl+0x140/0x1c0 [ 159.770488][ T5190] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.770515][ T5190] ? urandom_read_iter+0x170/0x170 [ 159.770536][ T5190] dump_stack+0x19/0x20 [ 159.770562][ T5190] should_fail_ex+0x3c2/0x510 [ 159.770587][ T5190] should_failslab+0xac/0x100 [ 159.770611][ T5190] __kmalloc_cache_noprof+0x41/0x470 [ 159.770632][ T5190] ? __kasan_check_write+0x18/0x20 [ 159.770653][ T5190] ? alloc_super+0x67/0x950 [ 159.770691][ T5190] ? __cfi__raw_spin_lock+0x10/0x10 [ 159.770715][ T5190] alloc_super+0x67/0x950 [ 159.770743][ T5190] sget_fc+0x325/0xa70 [ 159.770772][ T5190] ? __cfi_set_anon_super_fc+0x10/0x10 [ 159.770793][ T5190] ? __cfi_fuse_fill_super+0x10/0x10 [ 159.770812][ T5190] get_tree_nodev+0x2e/0x170 [ 159.770830][ T5190] ? fuse_get_tree+0x2bc/0x640 [ 159.770848][ T5190] fuse_get_tree+0x2cb/0x640 [ 159.770867][ T5190] vfs_get_tree+0x9e/0x290 [ 159.770887][ T5190] do_new_mount+0x251/0xb40 [ 159.770907][ T5190] ? security_capable+0x44/0x130 [ 159.770930][ T5190] path_mount+0x66a/0xff0 [ 159.770949][ T5190] ? putname+0x113/0x150 [ 159.770972][ T5190] __se_sys_mount+0x2bf/0x480 [ 159.770993][ T5190] ? __x64_sys_mount+0xf0/0xf0 [ 159.771017][ T5190] __x64_sys_mount+0xc3/0xf0 [ 159.771039][ T5190] x64_sys_call+0x2021/0x2ee0 [ 159.771059][ T5190] do_syscall_64+0x57/0xf0 [ 159.771080][ T5190] ? clear_bhb_loop+0x50/0xa0 [ 159.771108][ T5190] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.771134][ T5190] RIP: 0033:0x7f5eba59e199 [ 159.771152][ T5190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.771170][ T5190] RSP: 002b:00007f5eb8ff7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.771194][ T5190] RAX: ffffffffffffffda RBX: 00007f5eba825fa0 RCX: 00007f5eba59e199 [ 159.771211][ T5190] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 159.771226][ T5190] RBP: 00007f5eba6358e0 R08: 0000200000002140 R09: 0000000000000000 [ 159.771242][ T5190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.771256][ T5190] R13: 00007f5eba826038 R14: 00007f5eba825fa0 R15: 00007ffe3b9465b8 [ 159.771274][ T5190] [ 160.032178][ T1636] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 160.375121][ T5214] netlink: 'syz.5.1312': attribute type 11 has an invalid length. [ 160.629249][ T843] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 160.790298][ T843] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.804160][ T843] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.813266][ T843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 160.821542][ T843] usb 6-1: SerialNumber: syz [ 161.167625][ T5257] fuse: Unknown parameter '0x0000000000000005' [ 161.251106][ T1636] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 161.262364][ T1636] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 161.277014][ T1636] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 161.288627][ T1636] usb 1-1: USB disconnect, device number 77 [ 161.432591][ T843] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 161.634088][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.643049][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.768818][ T36] audit: type=1400 audit(2000000108.646:1243): avc: denied { bind } for pid=5305 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.822014][ T5312] syzkaller1: entered allmulticast mode [ 161.839231][ T1162] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 161.853012][ T338] usb 6-1: USB disconnect, device number 44 [ 161.860765][ T338] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 161.969202][ T1162] usb 7-1: device descriptor read/64, error -71 [ 162.129203][ T1636] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 162.219277][ T1162] usb 7-1: device descriptor read/64, error -71 [ 162.279331][ T1636] usb 1-1: Using ep0 maxpacket: 32 [ 162.285468][ T1636] usb 1-1: config 6 has an invalid interface number: 251 but max is 1 [ 162.293675][ T1636] usb 1-1: config 6 has an invalid interface number: 9 but max is 1 [ 162.301673][ T1636] usb 1-1: config 6 has no interface number 0 [ 162.307743][ T1636] usb 1-1: config 6 has no interface number 1 [ 162.313850][ T1636] usb 1-1: config 6 interface 251 has no altsetting 0 [ 162.320634][ T1636] usb 1-1: config 6 interface 9 has no altsetting 0 [ 162.328691][ T1636] usb 1-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 162.337809][ T1636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.345829][ T1636] usb 1-1: Product: syz [ 162.358125][ T1636] usb 1-1: Manufacturer: syz [ 162.368076][ T1636] usb 1-1: SerialNumber: syz [ 162.459233][ T1162] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 162.501183][ T5354] Invalid argument reading file caps for ./file0 [ 162.531582][ T5359] syzkaller1: entered allmulticast mode [ 162.582935][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.591456][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.599739][ T1162] usb 7-1: device descriptor read/64, error -71 [ 162.600827][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.614497][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.627153][ T1636] asix 1-1:6.251: probe with driver asix failed with error -22 [ 162.635595][ T1636] asix 1-1:6.9: probe with driver asix failed with error -22 [ 162.645598][ T1636] usb 1-1: USB disconnect, device number 78 [ 162.839204][ T1162] usb 7-1: device descriptor read/64, error -71 [ 162.899199][ T66] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 162.949450][ T1162] usb usb7-port1: attempt power cycle [ 163.060230][ T66] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.070358][ T66] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 163.084540][ T66] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 163.093586][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.101568][ T66] usb 6-1: Product: syz [ 163.105717][ T66] usb 6-1: Manufacturer: syz [ 163.110307][ T66] usb 6-1: SerialNumber: syz [ 163.117661][ T66] usb-storage 6-1:1.0: USB Mass Storage device detected [ 163.125249][ T66] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 163.136147][ T66] scsi host1: usb-storage 6-1:1.0 [ 163.157559][ T5384] incfs: Error accessing: ./file1. [ 163.159565][ T5383] 9pnet_fd: p9_fd_create_tcp (5383): problem connecting socket to 127.0.0.1 [ 163.162780][ T5384] incfs: mount failed -2 [ 163.299275][ T1162] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 163.315928][ T5369] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1339'. [ 163.326486][ T1162] usb 7-1: device descriptor read/8, error -71 [ 163.334059][ T313] usb 6-1: USB disconnect, device number 45 [ 163.400473][ T5397] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(230694927.2147483648.3267371535), cmd(8) [ 163.460303][ T1162] usb 7-1: device descriptor read/8, error -71 [ 163.562024][ T5401] tipc: Enabled bearer , priority 10 [ 163.699196][ T1162] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 163.750185][ T1162] usb 7-1: device descriptor read/8, error -71 [ 163.890308][ T1162] usb 7-1: device descriptor read/8, error -71 [ 163.910985][ T5425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.921771][ T5425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.999295][ T1162] usb usb7-port1: unable to enumerate USB device [ 164.149203][ T313] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 164.299209][ T313] usb 6-1: device descriptor read/64, error -71 [ 164.539209][ T313] usb 6-1: device descriptor read/64, error -71 [ 164.607644][ T5435] syzkaller1: entered allmulticast mode [ 164.619392][ T338] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 164.779285][ T313] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 164.789240][ T338] usb 1-1: Using ep0 maxpacket: 16 [ 164.795344][ T338] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 164.804419][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.814780][ T338] usb 1-1: config 0 descriptor?? [ 164.823311][ T338] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 164.909201][ T313] usb 6-1: device descriptor read/64, error -71 [ 165.023491][ T5433] batadv_slave_0: entered promiscuous mode [ 165.032003][ T5432] batadv_slave_0: left promiscuous mode [ 165.038837][ T338] usb 1-1: Detected FT232A [ 165.044092][ T338] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 165.053055][ T338] usb 1-1: USB disconnect, device number 79 [ 165.059736][ T338] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 165.069365][ T338] ftdi_sio 1-1:0.0: device disconnected [ 165.119201][ T1162] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 165.149200][ T313] usb 6-1: device descriptor read/64, error -71 [ 165.259893][ T313] usb usb6-port1: attempt power cycle [ 165.270216][ T1162] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.280332][ T1162] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.290660][ T1162] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 165.299730][ T1162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.307722][ T1162] usb 7-1: Product: syz [ 165.311895][ T1162] usb 7-1: Manufacturer: syz [ 165.316486][ T1162] usb 7-1: SerialNumber: syz [ 165.523428][ T36] audit: type=1400 audit(2000000112.406:1244): avc: denied { append } for pid=5457 comm="syz.6.1362" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.577099][ T5466] rust_binder: 5457:5466 error while translating object: EPERM [ 165.584767][ T5466] rust_binder: Failure in copy_transaction_data: EPERM [ 165.584793][ T5466] rust_binder: 5457:5466 transaction call to 5457:0 failed EPERM, code 0 size 88-24 [ 165.599213][ T313] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 165.614582][ T5468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1365'. [ 165.620164][ T313] usb 6-1: device descriptor read/8, error -71 [ 165.638225][ T5470] sd 0:0:1:0: PR command failed: 1026 [ 165.643653][ T5470] sd 0:0:1:0: Sense Key : 0x5 [current] [ 165.649351][ T5470] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 165.679315][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.688400][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.760135][ T313] usb 6-1: device descriptor read/8, error -71 [ 165.999208][ T313] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 166.020572][ T313] usb 6-1: device descriptor read/8, error -71 [ 166.148110][ T36] audit: type=1400 audit(2000000113.026:1245): avc: denied { create } for pid=5483 comm="syz.4.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 166.169081][ T36] audit: type=1400 audit(2000000113.026:1246): avc: denied { write } for pid=5483 comm="syz.4.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 166.176515][ T313] usb 6-1: device descriptor read/8, error -71 [ 166.299277][ T313] usb usb6-port1: unable to enumerate USB device [ 167.369204][ T338] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 167.519936][ T338] usb 6-1: not running at top speed; connect to a high speed hub [ 167.528401][ T338] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.538563][ T338] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.547447][ T338] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 167.556525][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.729200][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.729200][ T5476] Bluetooth: hci0: command 0x1003 tx timeout [ 167.741455][ T5474] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 167.775761][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.784388][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.793922][ T338] usb 6-1: string descriptor 0 read error: -71 [ 167.801159][ T338] usb 6-1: Found UVC 1.00 device (046d:0825) [ 167.808063][ T338] usb 6-1: No valid video chain found. [ 167.815756][ T338] usb 6-1: USB disconnect, device number 50 [ 167.890154][ T843] rust_binder: 5457: undelivered TRANSACTION_ERROR: 29201 [ 167.898815][ T1162] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 167.910950][ T1162] usb 7-1: USB disconnect, device number 22 [ 167.920744][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 168.269236][ T1162] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 168.329800][ T5515] syzkaller1: entered allmulticast mode [ 168.420234][ T1162] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.430500][ T1162] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.441525][ T1162] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 168.450644][ T1162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.458671][ T1162] usb 7-1: Product: syz [ 168.462904][ T1162] usb 7-1: Manufacturer: syz [ 168.467535][ T1162] usb 7-1: SerialNumber: syz [ 168.473353][ T1162] usb 7-1: config 0 descriptor?? [ 168.659205][ T338] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 168.686933][ T5506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=5506 comm=syz.6.1375 [ 168.700226][ T1636] usb 7-1: USB disconnect, device number 23 [ 168.810203][ T338] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 168.821078][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.832044][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.841714][ T338] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 168.855417][ T338] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.864471][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.872645][ T338] usb 1-1: SerialNumber: syz [ 168.990321][ T5549] FAULT_INJECTION: forcing a failure. [ 168.990321][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 169.003000][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.5.1382 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 169.003030][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.003043][ T5549] Call Trace: [ 169.003051][ T5549] [ 169.003059][ T5549] __dump_stack+0x21/0x30 [ 169.003092][ T5549] dump_stack_lvl+0x140/0x1c0 [ 169.003119][ T5549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.003149][ T5549] ? pcpu_chunk_relocate+0x1ce/0x430 [ 169.003172][ T5549] dump_stack+0x19/0x20 [ 169.003187][ T5549] should_fail_ex+0x3c2/0x510 [ 169.003201][ T5549] should_failslab+0xac/0x100 [ 169.003216][ T5549] __kmalloc_cache_noprof+0x41/0x470 [ 169.003238][ T5549] ? shrinker_alloc+0x68/0xa60 [ 169.003262][ T5549] shrinker_alloc+0x68/0xa60 [ 169.003284][ T5549] ? __asan_memset+0x39/0x50 [ 169.003307][ T5549] alloc_super+0x602/0x950 [ 169.003326][ T5549] ? __cfi_kernfs_test_super+0x10/0x10 [ 169.003339][ T5549] sget_fc+0x325/0xa70 [ 169.003353][ T5549] ? __cfi_kernfs_set_super+0x10/0x10 [ 169.003366][ T5549] kernfs_get_tree+0x1ff/0x9a0 [ 169.003381][ T5549] ? __kasan_check_write+0x18/0x20 [ 169.003402][ T5549] ? __cfi_kernfs_get_tree+0x10/0x10 [ 169.003425][ T5549] ? selinux_capable+0x38/0x50 [ 169.003452][ T5549] ? bpf_lsm_capable+0xd/0x20 [ 169.003469][ T5549] ? security_capable+0x44/0x130 [ 169.003482][ T5549] sysfs_get_tree+0x44/0x110 [ 169.003494][ T5549] vfs_get_tree+0x9e/0x290 [ 169.003505][ T5549] do_new_mount+0x251/0xb40 [ 169.003516][ T5549] ? security_capable+0x44/0x130 [ 169.003539][ T5549] path_mount+0x66a/0xff0 [ 169.003560][ T5549] ? putname+0x113/0x150 [ 169.003582][ T5549] __se_sys_mount+0x2bf/0x480 [ 169.003602][ T5549] ? __x64_sys_mount+0xf0/0xf0 [ 169.003613][ T5549] ? __x64_sys_sendfile64+0x19d/0x200 [ 169.003627][ T5549] ? __kasan_check_write+0x18/0x20 [ 169.003638][ T5549] ? fpregs_restore_userregs+0x11c/0x260 [ 169.003652][ T5549] __x64_sys_mount+0xc3/0xf0 [ 169.003665][ T5549] x64_sys_call+0x2021/0x2ee0 [ 169.003685][ T5549] do_syscall_64+0x57/0xf0 [ 169.003706][ T5549] ? clear_bhb_loop+0x50/0xa0 [ 169.003732][ T5549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.003750][ T5549] RIP: 0033:0x7f99df99e199 [ 169.003760][ T5549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.003770][ T5549] RSP: 002b:00007f99e080f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.003783][ T5549] RAX: ffffffffffffffda RBX: 00007f99dfc25fa0 RCX: 00007f99df99e199 [ 169.003792][ T5549] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 169.003800][ T5549] RBP: 00007f99dfa358e0 R08: 0000000000000000 R09: 0000000000000000 [ 169.003810][ T5549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.003823][ T5549] R13: 00007f99dfc26038 R14: 00007f99dfc25fa0 R15: 00007ffc58e18688 [ 169.003841][ T5549] [ 169.293843][ T338] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 169.304168][ T338] usb 1-1: USB disconnect, device number 80 [ 170.387846][ T5586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1393'. [ 170.396879][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1393'. [ 170.503905][ T36] audit: type=1400 audit(2000000182.392:1247): avc: denied { mounton } for pid=5593 comm="syz.6.1396" path="/130/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.526676][ T36] audit: type=1400 audit(2000000182.392:1248): avc: denied { read } for pid=5593 comm="syz.6.1396" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.547546][ T36] audit: type=1400 audit(2000000182.392:1249): avc: denied { open } for pid=5593 comm="syz.6.1396" path="/130/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 171.039514][ T36] audit: type=1400 audit(2000000182.932:1250): avc: denied { map } for pid=5606 comm="syz.4.1400" path="socket:[54895]" dev="sockfs" ino=54895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 171.119800][ T36] audit: type=1326 audit(2000000183.012:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.5.1399" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df99e199 code=0x7fc00000 [ 171.145158][ T36] audit: type=1326 audit(2000000183.012:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.5.1399" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99df99e199 code=0x7fc00000 [ 171.170457][ T36] audit: type=1326 audit(2000000183.012:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.5.1399" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df99e199 code=0x7fc00000 [ 171.195797][ T36] audit: type=1326 audit(2000000183.012:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.5.1399" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df99e199 code=0x7fc00000 [ 171.221130][ T36] audit: type=1326 audit(2000000183.012:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.5.1399" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99df99e199 code=0x7fc00000 [ 171.246583][ T36] audit: type=1326 audit(2000000183.012:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.5.1399" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df99e199 code=0x7fc00000 [ 171.559288][ T5614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=5614 comm=syz.4.1403 [ 172.085724][ T5631] bridge0: port 3(veth0_to_team) entered blocking state [ 172.092759][ T5631] bridge0: port 3(veth0_to_team) entered disabled state [ 172.100006][ T5631] veth0_to_team: entered allmulticast mode [ 172.106233][ T5631] veth0_to_team: entered promiscuous mode [ 172.127188][ T5637] tipc: Enabling of bearer rejected, failed to enable media [ 172.137298][ T5639] tipc: Enabling of bearer rejected, failed to enable media [ 172.204008][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1414'. [ 172.221899][ T5654] tipc: Failed to remove unknown binding: 66,0,0/0:1152528768/1152528769 [ 172.230568][ T5654] tipc: Failed to remove unknown binding: 66,0,0/0:1152528768/1152528769 [ 172.345546][ T5662] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1418'. [ 172.355325][ T5662] netlink: 'syz.6.1418': attribute type 1 has an invalid length. [ 172.379209][ T5665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.459676][ T5677] FAULT_INJECTION: forcing a failure. [ 172.459676][ T5677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.472935][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.5.1424 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 172.472965][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.472977][ T5677] Call Trace: [ 172.472985][ T5677] [ 172.472993][ T5677] __dump_stack+0x21/0x30 [ 172.473025][ T5677] dump_stack_lvl+0x140/0x1c0 [ 172.473053][ T5677] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.473082][ T5677] dump_stack+0x19/0x20 [ 172.473107][ T5677] should_fail_ex+0x3c2/0x510 [ 172.473131][ T5677] should_fail_alloc_page+0xec/0x110 [ 172.473158][ T5677] __alloc_pages_noprof+0x1c0/0x7e0 [ 172.473188][ T5677] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 172.473219][ T5677] ? __kasan_check_write+0x18/0x20 [ 172.473240][ T5677] __folio_alloc_noprof+0x14/0x80 [ 172.473268][ T5677] folio_prealloc+0x46/0x220 [ 172.473293][ T5677] do_pte_missing+0x16af/0x4440 [ 172.473319][ T5677] ? __kasan_check_write+0x18/0x20 [ 172.473339][ T5677] ? _raw_spin_lock+0x92/0x120 [ 172.473362][ T5677] ? pte_marker_clear+0x1b0/0x1b0 [ 172.473387][ T5677] ? __pmd_alloc+0x5a6/0x9a0 [ 172.473413][ T5677] ? kasan_save_track+0x4f/0x80 [ 172.473436][ T5677] ? kasan_save_track+0x3e/0x80 [ 172.473460][ T5677] ? mas_preallocate+0x79b/0xc90 [ 172.473488][ T5677] ? vma_link+0x12b/0x6c0 [ 172.473511][ T5677] ? insert_vm_struct+0x2d5/0x3b0 [ 172.473535][ T5677] ? do_execveat_common+0x199/0xae0 [ 172.473555][ T5677] ? x64_sys_call+0x906/0x2ee0 [ 172.473575][ T5677] ? mas_destroy+0x2768/0x3050 [ 172.473601][ T5677] handle_mm_fault+0x1189/0x1ba0 [ 172.473628][ T5677] ? __cfi_handle_mm_fault+0x10/0x10 [ 172.473652][ T5677] ? __kernel_text_address+0x11/0x40 [ 172.473681][ T5677] ? __cfi_find_vma+0x10/0x10 [ 172.473703][ T5677] ? vma_is_secretmem+0x11/0x50 [ 172.473731][ T5677] ? check_vma_flags+0x2a5/0x3a0 [ 172.473759][ T5677] __get_user_pages+0x114b/0x22d0 [ 172.473790][ T5677] ? populate_vma_page_range+0x220/0x220 [ 172.473817][ T5677] ? rwsem_read_trylock+0x275/0x5a0 [ 172.473847][ T5677] get_user_pages_remote+0x377/0xb80 [ 172.473875][ T5677] ? down_read+0x7f/0xe0 [ 172.473911][ T5677] ? __cfi_get_user_pages_remote+0x10/0x10 [ 172.473939][ T5677] ? __kasan_check_read+0x15/0x20 [ 172.473960][ T5677] ? __vm_enough_memory+0x11e/0x380 [ 172.473985][ T5677] ? security_vm_enough_memory_mm+0x257/0x270 [ 172.474012][ T5677] get_arg_page+0x24c/0x520 [ 172.474042][ T5677] ? copy_string_kernel+0x2e0/0x2e0 [ 172.474071][ T5677] ? __kasan_check_write+0x18/0x20 [ 172.474091][ T5677] ? up_write+0x66/0x280 [ 172.474119][ T5677] ? copy_string_kernel+0x20/0x2e0 [ 172.474147][ T5677] copy_string_kernel+0x17a/0x2e0 [ 172.474176][ T5677] do_execveat_common+0x7de/0xae0 [ 172.474196][ T5677] ? getname_flags+0x203/0x6b0 [ 172.474220][ T5677] __x64_sys_execveat+0xd2/0xf0 [ 172.474241][ T5677] x64_sys_call+0x906/0x2ee0 [ 172.474260][ T5677] do_syscall_64+0x57/0xf0 [ 172.474281][ T5677] ? clear_bhb_loop+0x50/0xa0 [ 172.474308][ T5677] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.474333][ T5677] RIP: 0033:0x7f99df99e199 [ 172.474352][ T5677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.474371][ T5677] RSP: 002b:00007f99e080f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 172.474394][ T5677] RAX: ffffffffffffffda RBX: 00007f99dfc25fa0 RCX: 00007f99df99e199 [ 172.474411][ T5677] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 172.474426][ T5677] RBP: 00007f99dfa358e0 R08: 0000000000001000 R09: 0000000000000000 [ 172.474441][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.474455][ T5677] R13: 00007f99dfc26038 R14: 00007f99dfc25fa0 R15: 00007ffc58e18688 [ 172.474474][ T5677] [ 172.484812][ T5686] fuse: Unknown parameter '' [ 172.745838][ T5693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1429'. [ 173.089205][ T313] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 173.240863][ T313] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.248974][ T313] usb 6-1: config 0 has no interface number 0 [ 173.255160][ T313] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.271862][ T313] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.284667][ T313] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.301286][ T313] usb 6-1: config 0 interface 1 has no altsetting 0 [ 173.311090][ T313] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 173.320282][ T313] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 173.328358][ T313] usb 6-1: Manufacturer: syz [ 173.333958][ T313] usb 6-1: config 0 descriptor?? [ 173.509211][ T338] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 173.605951][ T5727] netlink: 'syz.6.1437': attribute type 11 has an invalid length. [ 173.623107][ T5730] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=5730 comm=syz.6.1438 [ 173.660522][ T338] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.668907][ T338] usb 1-1: config 1 has an invalid interface number: 66 but max is 2 [ 173.677017][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.687134][ T338] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 173.696117][ T338] usb 1-1: config 1 has no interface number 3 [ 173.702244][ T338] usb 1-1: config 1 interface 2 has no altsetting 0 [ 173.713270][ T338] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 173.716014][ T5736] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1439'. [ 173.722342][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.731522][ T5735] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1439'. [ 173.739580][ T338] usb 1-1: Product: syz [ 173.752721][ T338] usb 1-1: Manufacturer: syz [ 173.757335][ T338] usb 1-1: SerialNumber: syz [ 173.758982][ T313] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:145F:0212.0018/input/input20 [ 173.774435][ T313] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:145F:0212.0018/input/input21 [ 173.786746][ T313] uclogic 0003:145F:0212.0018: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.5-1/input1 [ 173.887409][ T5743] FAULT_INJECTION: forcing a failure. [ 173.887409][ T5743] name failslab, interval 1, probability 0, space 0, times 0 [ 173.900067][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: syz.6.1441 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 173.900096][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.900109][ T5743] Call Trace: [ 173.900116][ T5743] [ 173.900124][ T5743] __dump_stack+0x21/0x30 [ 173.900159][ T5743] dump_stack_lvl+0x140/0x1c0 [ 173.900187][ T5743] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.900203][ T5743] dump_stack+0x19/0x20 [ 173.900217][ T5743] should_fail_ex+0x3c2/0x510 [ 173.900231][ T5743] should_failslab+0xac/0x100 [ 173.900248][ T5743] __kmalloc_cache_noprof+0x41/0x470 [ 173.900261][ T5743] ? alloc_super+0x67/0x950 [ 173.900278][ T5743] ? _raw_spin_lock+0x92/0x120 [ 173.900289][ T5743] alloc_super+0x67/0x950 [ 173.900303][ T5743] ? kernfs_test_super+0xb0/0x100 [ 173.900315][ T5743] ? __cfi_kernfs_test_super+0x10/0x10 [ 173.900328][ T5743] sget_fc+0x325/0xa70 [ 173.900342][ T5743] ? __cfi_kernfs_set_super+0x10/0x10 [ 173.900354][ T5743] kernfs_get_tree+0x1ff/0x9a0 [ 173.900366][ T5743] ? __kasan_check_write+0x18/0x20 [ 173.900377][ T5743] ? __cfi_kernfs_get_tree+0x10/0x10 [ 173.900388][ T5743] ? selinux_capable+0x38/0x50 [ 173.900403][ T5743] ? bpf_lsm_capable+0xd/0x20 [ 173.900418][ T5743] ? security_capable+0x44/0x130 [ 173.900430][ T5743] sysfs_get_tree+0x44/0x110 [ 173.900442][ T5743] vfs_get_tree+0x9e/0x290 [ 173.900453][ T5743] do_new_mount+0x251/0xb40 [ 173.900464][ T5743] ? security_capable+0x44/0x130 [ 173.900477][ T5743] path_mount+0x66a/0xff0 [ 173.900488][ T5743] ? putname+0x113/0x150 [ 173.900500][ T5743] __se_sys_mount+0x2bf/0x480 [ 173.900511][ T5743] ? __x64_sys_mount+0xf0/0xf0 [ 173.900523][ T5743] ? __kasan_check_write+0x18/0x20 [ 173.900534][ T5743] ? fpregs_restore_userregs+0x11c/0x260 [ 173.900548][ T5743] __x64_sys_mount+0xc3/0xf0 [ 173.900559][ T5743] x64_sys_call+0x2021/0x2ee0 [ 173.900569][ T5743] do_syscall_64+0x57/0xf0 [ 173.900580][ T5743] ? clear_bhb_loop+0x50/0xa0 [ 173.900594][ T5743] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.900607][ T5743] RIP: 0033:0x7f5eba59e199 [ 173.900617][ T5743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.900627][ T5743] RSP: 002b:00007f5eb8ff7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.900640][ T5743] RAX: ffffffffffffffda RBX: 00007f5eba825fa0 RCX: 00007f5eba59e199 [ 173.900649][ T5743] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 173.900656][ T5743] RBP: 00007f5eba6358e0 R08: 0000000000000000 R09: 0000000000000000 [ 173.900663][ T5743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.900671][ T5743] R13: 00007f5eba826038 R14: 00007f5eba825fa0 R15: 00007ffe3b9465b8 [ 173.900680][ T5743] [ 174.183788][ T338] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 174.211503][ T313] usb 6-1: USB disconnect, device number 51 [ 174.234934][ T5757] fuse: Unknown parameter 'rooYtmode200000060000' [ 174.390927][ T338] usb 1-1: selecting invalid altsetting 0 [ 174.400382][ T338] usb 1-1: USB disconnect, device number 81 [ 174.410644][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 174.725978][ T5765] fuse: Bad value for 'user_id' [ 174.731034][ T5765] fuse: Bad value for 'user_id' [ 174.737221][ T5765] fuse: Bad value for 'user_id' [ 174.742159][ T5765] fuse: Bad value for 'user_id' [ 174.747376][ T5765] fuse: Bad value for 'user_id' [ 174.752538][ T5765] fuse: Bad value for 'user_id' [ 174.757625][ T5765] fuse: Bad value for 'user_id' [ 174.762710][ T5765] fuse: Bad value for 'user_id' [ 174.767989][ T5765] fuse: Bad value for 'user_id' [ 174.773112][ T5765] fuse: Bad value for 'user_id' [ 174.778116][ T5765] fuse: Bad value for 'user_id' [ 174.782991][ T5765] fuse: Bad value for 'user_id' [ 174.787880][ T5765] fuse: Bad value for 'user_id' [ 174.792758][ T5765] fuse: Bad value for 'user_id' [ 174.797655][ T5765] fuse: Bad value for 'user_id' [ 174.802503][ T5765] fuse: Bad value for 'user_id' [ 174.807397][ T5765] fuse: Bad value for 'user_id' [ 174.812250][ T5765] fuse: Bad value for 'user_id' [ 174.817169][ T5765] fuse: Bad value for 'user_id' [ 174.822020][ T5765] fuse: Bad value for 'user_id' [ 174.826932][ T5765] fuse: Bad value for 'user_id' [ 174.831781][ T5765] fuse: Bad value for 'user_id' [ 174.836674][ T5765] fuse: Bad value for 'user_id' [ 174.841683][ T5765] fuse: Bad value for 'user_id' [ 174.846605][ T5765] fuse: Bad value for 'user_id' [ 174.851517][ T5765] fuse: Bad value for 'user_id' [ 174.856444][ T5765] fuse: Bad value for 'user_id' [ 174.861299][ T5765] fuse: Bad value for 'user_id' [ 174.866193][ T5765] fuse: Bad value for 'user_id' [ 174.871058][ T5765] fuse: Bad value for 'user_id' [ 174.876018][ T5765] fuse: Bad value for 'user_id' [ 174.880908][ T5765] fuse: Bad value for 'user_id' [ 174.885839][ T5765] fuse: Bad value for 'user_id' [ 174.890850][ T5765] fuse: Bad value for 'user_id' [ 174.896117][ T5765] fuse: Bad value for 'user_id' [ 174.906537][ T5765] fuse: Bad value for 'user_id' [ 174.911626][ T5765] fuse: Bad value for 'user_id' [ 174.916579][ T5765] fuse: Bad value for 'user_id' [ 174.922301][ T5765] fuse: Bad value for 'user_id' [ 174.927168][ T5765] fuse: Bad value for 'user_id' [ 174.932147][ T5765] fuse: Bad value for 'user_id' [ 174.937015][ T5765] fuse: Bad value for 'user_id' [ 174.941941][ T5765] fuse: Bad value for 'user_id' [ 174.946785][ T5765] fuse: Bad value for 'user_id' [ 174.951745][ T5765] fuse: Bad value for 'user_id' [ 174.956590][ T5765] fuse: Bad value for 'user_id' [ 174.961526][ T5765] fuse: Bad value for 'user_id' [ 174.966371][ T5765] fuse: Bad value for 'user_id' [ 174.971348][ T5765] fuse: Bad value for 'user_id' [ 174.976237][ T5765] fuse: Bad value for 'user_id' [ 174.981192][ T5765] fuse: Bad value for 'user_id' [ 174.986096][ T5765] fuse: Bad value for 'user_id' [ 174.991060][ T5765] fuse: Bad value for 'user_id' [ 174.995913][ T5765] fuse: Bad value for 'user_id' [ 175.000905][ T5765] fuse: Bad value for 'user_id' [ 175.005760][ T5765] fuse: Bad value for 'user_id' [ 175.010706][ T5765] fuse: Bad value for 'user_id' [ 175.015551][ T5765] fuse: Bad value for 'user_id' [ 175.020480][ T5765] fuse: Bad value for 'user_id' [ 175.025326][ T5765] fuse: Bad value for 'user_id' [ 175.030386][ T5765] fuse: Bad value for 'user_id' [ 175.035374][ T5765] fuse: Bad value for 'user_id' [ 175.040315][ T5765] fuse: Bad value for 'user_id' [ 175.045161][ T5765] fuse: Bad value for 'user_id' [ 175.050079][ T5765] fuse: Bad value for 'user_id' [ 175.054928][ T5765] fuse: Bad value for 'user_id' [ 175.239259][ T338] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 175.390244][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 175.401478][ T338] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 175.410545][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.418528][ T338] usb 1-1: Product: syz [ 175.422713][ T338] usb 1-1: Manufacturer: syz [ 175.427593][ T338] usb 1-1: SerialNumber: syz [ 175.434023][ T338] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 175.634702][ T338] usb 1-1: USB disconnect, device number 82 [ 175.839694][ T5808] syzkaller1: entered allmulticast mode [ 175.948033][ T5816] : renamed from veth0_vlan (while UP) [ 175.964017][ T5818] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1465'. [ 175.997329][ T5822] ./dev/sda1: Can't lookup blockdev [ 176.009330][ T1636] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 176.157547][ T5826] syzkaller1: entered allmulticast mode [ 176.159222][ T1636] usb 6-1: Using ep0 maxpacket: 16 [ 176.169258][ T66] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 176.170028][ T1636] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.187757][ T1636] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.197740][ T1636] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.210723][ T1636] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.217336][ T1636] usb 6-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 176.226440][ T1636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.235686][ T1636] usb 6-1: config 0 descriptor?? [ 176.255895][ T5831] FAULT_INJECTION: forcing a failure. [ 176.255895][ T5831] name failslab, interval 1, probability 0, space 0, times 0 [ 176.268504][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz.0.1471 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 176.268534][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.268548][ T5831] Call Trace: [ 176.268555][ T5831] [ 176.268559][ T5831] __dump_stack+0x21/0x30 [ 176.268579][ T5831] dump_stack_lvl+0x140/0x1c0 [ 176.268594][ T5831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.268609][ T5831] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 176.268625][ T5831] dump_stack+0x19/0x20 [ 176.268639][ T5831] should_fail_ex+0x3c2/0x510 [ 176.268653][ T5831] should_failslab+0xac/0x100 [ 176.268667][ T5831] kmem_cache_alloc_noprof+0x42/0x410 [ 176.268679][ T5831] ? __kernfs_new_node+0xf1/0x740 [ 176.268693][ T5831] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 176.268709][ T5831] __kernfs_new_node+0xf1/0x740 [ 176.268722][ T5831] ? __kasan_check_write+0x18/0x20 [ 176.268734][ T5831] ? kernfs_new_node+0x280/0x280 [ 176.268747][ T5831] ? down_write+0xee/0x2b0 [ 176.268762][ T5831] ? __cfi_down_write+0x10/0x10 [ 176.268776][ T5831] ? __kasan_check_write+0x18/0x20 [ 176.268787][ T5831] ? up_write+0x66/0x280 [ 176.268803][ T5831] ? kernfs_activate+0x1ee/0x200 [ 176.268817][ T5831] kernfs_new_node+0x154/0x280 [ 176.268831][ T5831] __kernfs_create_file+0x52/0x280 [ 176.268848][ T5831] sysfs_add_file_mode_ns+0x1d2/0x280 [ 176.268859][ T5831] internal_create_group+0x66c/0xe70 [ 176.268872][ T5831] ? __kasan_check_write+0x18/0x20 [ 176.268884][ T5831] ? sysfs_create_group+0x40/0x40 [ 176.268896][ T5831] ? kernfs_activate+0x1ee/0x200 [ 176.268910][ T5831] sysfs_create_groups+0x5c/0x130 [ 176.268923][ T5831] device_add_attrs+0x1b2/0x850 [ 176.268934][ T5831] ? device_add_class_symlinks+0x260/0x260 [ 176.268944][ T5831] ? __kasan_check_write+0x18/0x20 [ 176.268955][ T5831] ? kobject_put+0x1cc/0x2a0 [ 176.268966][ T5831] ? device_add_class_symlinks+0x22e/0x260 [ 176.268976][ T5831] device_add+0x4db/0xbf0 [ 176.268986][ T5831] netdev_register_kobject+0x196/0x330 [ 176.269002][ T5831] register_netdevice+0x1042/0x1a80 [ 176.269015][ T5831] ? __kmalloc_cache_noprof+0x23c/0x470 [ 176.269027][ T5831] ? __cfi_register_netdevice+0x10/0x10 [ 176.269040][ T5831] tun_set_iff+0x828/0xec0 [ 176.269053][ T5831] __tun_chr_ioctl+0x852/0x1fb0 [ 176.269065][ T5831] ? tun_flow_create+0x400/0x400 [ 176.269077][ T5831] ? __fget_files+0x2bc/0x330 [ 176.269091][ T5831] tun_chr_ioctl+0x2e/0x40 [ 176.269102][ T5831] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 176.269113][ T5831] __se_sys_ioctl+0x126/0x1b0 [ 176.269127][ T5831] __x64_sys_ioctl+0x7f/0xa0 [ 176.269140][ T5831] x64_sys_call+0x1878/0x2ee0 [ 176.269150][ T5831] do_syscall_64+0x57/0xf0 [ 176.269168][ T5831] ? clear_bhb_loop+0x50/0xa0 [ 176.269193][ T5831] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.269217][ T5831] RIP: 0033:0x7f078719e199 [ 176.269228][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.269238][ T5831] RSP: 002b:00007f0787f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.269251][ T5831] RAX: ffffffffffffffda RBX: 00007f0787425fa0 RCX: 00007f078719e199 [ 176.269260][ T5831] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000005 [ 176.269268][ T5831] RBP: 00007f07872358e0 R08: 0000000000000000 R09: 0000000000000000 [ 176.269275][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.269282][ T5831] R13: 00007f0787426038 R14: 00007f0787425fa0 R15: 00007ffd188f6878 [ 176.269291][ T5831] [ 176.430323][ T66] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.620982][ T66] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 176.631599][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 176.638197][ T66] usb 7-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 176.647244][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.648411][ T1636] hid (null): bogus close delimiter [ 176.658945][ T66] usb 7-1: config 0 descriptor?? [ 176.662067][ T1636] wacom 0003:056A:5200.0019: ignoring exceeding usage max [ 176.665929][ T5814] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 176.674647][ T1636] wacom 0003:056A:5200.0019: unknown main item tag 0x0 [ 176.686434][ T1636] wacom 0003:056A:5200.0019: unknown main item tag 0x0 [ 176.693424][ T1636] wacom 0003:056A:5200.0019: unknown main item tag 0x0 [ 176.700316][ T1636] wacom 0003:056A:5200.0019: unknown main item tag 0x1 [ 176.707171][ T1636] wacom 0003:056A:5200.0019: bogus close delimiter [ 176.713682][ T1636] wacom 0003:056A:5200.0019: item 0 0 2 10 parsing failed [ 176.720932][ T1636] wacom 0003:056A:5200.0019: parse failed [ 176.726696][ T1636] wacom 0003:056A:5200.0019: probe with driver wacom failed with error -22 [ 176.855021][ T313] usb 6-1: USB disconnect, device number 52 [ 177.084513][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.091529][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.098650][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.105993][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.113460][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.120552][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.127507][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.134612][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.141690][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.148715][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.157889][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.166235][ T5837] FAULT_INJECTION: forcing a failure. [ 177.166235][ T5837] name failslab, interval 1, probability 0, space 0, times 0 [ 177.169201][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.178966][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz.0.1472 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 177.178995][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.179007][ T5837] Call Trace: [ 177.179015][ T5837] [ 177.179023][ T5837] __dump_stack+0x21/0x30 [ 177.179054][ T5837] dump_stack_lvl+0x140/0x1c0 [ 177.179081][ T5837] ? __cfi_dump_stack_lvl+0x10/0x10 [ 177.179110][ T5837] dump_stack+0x19/0x20 [ 177.179135][ T5837] should_fail_ex+0x3c2/0x510 [ 177.179163][ T5837] should_failslab+0xac/0x100 [ 177.179186][ T5837] __kmalloc_cache_noprof+0x41/0x470 [ 177.179209][ T5837] ? ns_capable+0x90/0xf0 [ 177.179227][ T5837] ? sysfs_init_fs_context+0xb7/0x420 [ 177.179250][ T5837] sysfs_init_fs_context+0xb7/0x420 [ 177.179271][ T5837] ? __cfi_sysfs_init_fs_context+0x10/0x10 [ 177.179293][ T5837] alloc_fs_context+0x5c4/0x800 [ 177.179319][ T5837] fs_context_for_mount+0x26/0x40 [ 177.179344][ T5837] do_new_mount+0x116/0xb40 [ 177.179363][ T5837] ? security_capable+0x44/0x130 [ 177.179387][ T5837] path_mount+0x66a/0xff0 [ 177.179406][ T5837] ? putname+0x113/0x150 [ 177.179427][ T5837] __se_sys_mount+0x2bf/0x480 [ 177.179448][ T5837] ? __x64_sys_mount+0xf0/0xf0 [ 177.179469][ T5837] ? __kasan_check_write+0x18/0x20 [ 177.179489][ T5837] ? fpregs_restore_userregs+0x11c/0x260 [ 177.179513][ T5837] __x64_sys_mount+0xc3/0xf0 [ 177.179534][ T5837] x64_sys_call+0x2021/0x2ee0 [ 177.179552][ T5837] do_syscall_64+0x57/0xf0 [ 177.179572][ T5837] ? clear_bhb_loop+0x50/0xa0 [ 177.179597][ T5837] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 177.179621][ T5837] RIP: 0033:0x7f078719e199 [ 177.179649][ T5837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.179667][ T5837] RSP: 002b:00007f0787f87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.179689][ T5837] RAX: ffffffffffffffda RBX: 00007f0787425fa0 RCX: 00007f078719e199 [ 177.179705][ T5837] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 177.179719][ T5837] RBP: 00007f07872358e0 R08: 0000000000000000 R09: 0000000000000000 [ 177.179733][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.179746][ T5837] R13: 00007f0787426038 R14: 00007f0787425fa0 R15: 00007ffd188f6878 [ 177.179764][ T5837] [ 177.415338][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.422335][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.429353][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.436280][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.443227][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.450178][ T66] elecom 0003:056E:010C.001A: unknown main item tag 0x0 [ 177.457563][ T66] elecom 0003:056E:010C.001A: hidraw0: USB HID v0.08 Device [HID 056e:010c] on usb-dummy_hcd.6-1/input0 [ 177.471908][ T66] usb 7-1: USB disconnect, device number 24 [ 177.478530][ T340] udevd[340]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 177.488459][ T340] udevd[340]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 177.599199][ T1636] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 177.750208][ T1636] usb 6-1: config 0 has no interfaces? [ 177.755742][ T1636] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.764831][ T1636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.779395][ T1636] usb 6-1: config 0 descriptor?? [ 177.828673][ T36] kauditd_printk_skb: 6885 callbacks suppressed [ 177.828689][ T36] audit: type=1400 audit(2000000189.712:8142): avc: denied { getopt } for pid=5849 comm="syz.6.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.986252][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.994881][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.003403][ T338] usb 6-1: USB disconnect, device number 53 [ 178.036697][ T5854] syzkaller1: entered allmulticast mode [ 178.199744][ T5862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1481'. [ 178.449272][ T338] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 178.600247][ T338] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.611242][ T338] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.624071][ T338] usb 6-1: config 0 interface 0 has no altsetting 0 [ 178.630704][ T338] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 178.639823][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.648845][ T338] usb 6-1: config 0 descriptor?? [ 178.740166][ T5874] fuse: Invalid rootmode [ 178.798296][ T5885] overlayfs: failed to clone upperpath [ 178.798347][ T5884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1490'. [ 178.855973][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.864480][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.959196][ T1636] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 179.074160][ T338] usbhid 6-1:0.0: can't add hid device: -71 [ 179.080654][ T338] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 179.088418][ T36] audit: type=1400 audit(2000000190.972:8143): avc: denied { relabelto } for pid=5897 comm="syz.0.1492" name="cgroup" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 179.115926][ T36] audit: type=1400 audit(2000000190.972:8144): avc: denied { unlink } for pid=297 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 179.118558][ T338] usb 6-1: USB disconnect, device number 54 [ 179.153613][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 179.160247][ T1636] usb 7-1: config 0 has no interfaces? [ 179.169257][ T1636] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 179.178287][ T1636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.186290][ T1636] usb 7-1: Product: syz [ 179.190513][ T1636] usb 7-1: Manufacturer: syz [ 179.195086][ T1636] usb 7-1: SerialNumber: syz [ 179.202264][ T1636] usb 7-1: config 0 descriptor?? [ 179.409949][ T338] usb 7-1: USB disconnect, device number 25 [ 179.692706][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.701690][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.713238][ T5914] overlayfs: missing 'lowerdir' [ 179.718094][ T36] audit: type=1400 audit(2000000191.582:8145): avc: denied { mounton } for pid=5908 comm="syz.4.1495" path="/bus" dev="ramfs" ino=56913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 179.740168][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.749099][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.760656][ T5914] overlayfs: missing 'lowerdir' [ 179.765752][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.774686][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.786229][ T5914] overlayfs: missing 'lowerdir' [ 179.791270][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.800204][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.811759][ T5914] overlayfs: missing 'lowerdir' [ 179.816781][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.825721][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.837275][ T5914] overlayfs: missing 'lowerdir' [ 179.842307][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.851245][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.862791][ T5914] overlayfs: missing 'lowerdir' [ 179.867778][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.876719][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.888272][ T5914] overlayfs: missing 'lowerdir' [ 179.893329][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.902266][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.913801][ T5914] overlayfs: missing 'lowerdir' [ 179.918852][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.927837][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.939408][ T5914] overlayfs: missing 'lowerdir' [ 179.944756][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.953718][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.965462][ T5914] overlayfs: missing 'lowerdir' [ 179.970500][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 179.979523][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 179.991081][ T5914] overlayfs: missing 'lowerdir' [ 179.996178][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.005148][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.016686][ T5914] overlayfs: missing 'lowerdir' [ 180.021773][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.030710][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.042302][ T5914] overlayfs: missing 'lowerdir' [ 180.047546][ T5925] WARNING! power/level is deprecated; use power/control instead [ 180.047606][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.055674][ T5925] overlay: filesystem on ./file0 not supported as upperdir [ 180.064124][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.064138][ T5914] overlayfs: missing 'lowerdir' [ 180.087942][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.089747][ T5927] overlay: filesystem on ./file0 not supported as upperdir [ 180.096911][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.115626][ T5914] overlayfs: missing 'lowerdir' [ 180.120840][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.129787][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.141353][ T5914] overlayfs: missing 'lowerdir' [ 180.142739][ T5930] syzkaller1: entered allmulticast mode [ 180.152005][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.160975][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.172541][ T5914] overlayfs: missing 'lowerdir' [ 180.177639][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.186608][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.198166][ T5914] overlayfs: missing 'lowerdir' [ 180.203460][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.212425][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.223993][ T5914] overlayfs: missing 'lowerdir' [ 180.229129][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.238096][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.249675][ T5914] overlayfs: missing 'lowerdir' [ 180.254717][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.263694][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.270435][ T36] audit: type=1400 audit(2000000192.162:8146): avc: denied { write } for pid=5933 comm="syz.5.1502" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 180.275242][ T5914] overlayfs: missing 'lowerdir' [ 180.306072][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.310992][ T36] audit: type=1400 audit(2000000192.162:8147): avc: denied { read append open } for pid=5933 comm="syz.5.1502" path=2F3233352F6D6E742F2332303630202864656C6574656429 dev="sda1" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.315034][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.352930][ T5914] overlayfs: missing 'lowerdir' [ 180.358302][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.367288][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.378845][ T5914] overlayfs: missing 'lowerdir' [ 180.383985][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.392935][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.404494][ T5914] overlayfs: missing 'lowerdir' [ 180.409624][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.415424][ T5936] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2558430984 (81869791488 ns) > initial count (19335048768 ns). Using initial count to start timer. [ 180.418550][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.418564][ T5914] overlayfs: missing 'lowerdir' [ 180.452740][ T5914] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 180.461707][ T5914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.473260][ T5914] overlayfs: missing 'lowerdir' [ 180.483086][ T5936] kvm: kvm [5935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 180.504507][ T5936] kvm: kvm [5935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 180.557388][ T5945] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1508'. [ 180.566496][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 180.580899][ T430] bridge_slave_1: left allmulticast mode [ 180.586554][ T430] bridge_slave_1: left promiscuous mode [ 180.598062][ T5945] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1508'. [ 180.607992][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.615427][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 180.625443][ T430] bridge_slave_0: left allmulticast mode [ 180.633656][ T36] audit: type=1400 audit(2000000192.522:8148): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 180.635122][ T430] bridge_slave_0: left promiscuous mode [ 180.665149][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.732443][ T5951] syzkaller1: entered allmulticast mode [ 180.738649][ T5950] netlink: 'syz.4.1510': attribute type 27 has an invalid length. [ 180.751812][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.758959][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.787532][ T430] tipc: Disabling bearer [ 180.793057][ T430] tipc: Left network mode [ 180.802112][ T430] veth1_macvtap: left promiscuous mode [ 180.807618][ T430] veth0_vlan: left promiscuous mode [ 180.882796][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.889925][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.896968][ T5948] bridge_slave_0: entered allmulticast mode [ 180.903297][ T5948] bridge_slave_0: entered promiscuous mode [ 180.910215][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.917291][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.924401][ T5948] bridge_slave_1: entered allmulticast mode [ 180.930748][ T5948] bridge_slave_1: entered promiscuous mode [ 180.976843][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.983890][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.991173][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.998195][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.007874][ T5967] 9pnet: Could not find request transport: Ed [ 181.023089][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.030598][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.039297][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.046348][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.054720][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.061760][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.069263][ T1162] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 181.087438][ T5948] veth0_vlan: entered promiscuous mode [ 181.097153][ T5948] veth1_macvtap: entered promiscuous mode [ 181.114073][ T36] audit: type=1400 audit(2000000193.002:8149): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/root/syzkaller.tSYcPX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 181.143360][ T36] audit: type=1400 audit(2000000193.032:8150): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 181.218883][ T5974] FAULT_INJECTION: forcing a failure. [ 181.218883][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 181.220244][ T1162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 181.231570][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.0.1515 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 181.231599][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.231613][ T5974] Call Trace: [ 181.231620][ T5974] [ 181.231629][ T5974] __dump_stack+0x21/0x30 [ 181.231661][ T5974] dump_stack_lvl+0x140/0x1c0 [ 181.231686][ T5974] ? __cfi_dump_stack_lvl+0x10/0x10 [ 181.231713][ T5974] ? pcpu_chunk_relocate+0x1ce/0x430 [ 181.231738][ T5974] dump_stack+0x19/0x20 [ 181.231762][ T5974] should_fail_ex+0x3c2/0x510 [ 181.231786][ T5974] should_failslab+0xac/0x100 [ 181.231809][ T5974] __kmalloc_cache_noprof+0x41/0x470 [ 181.231830][ T5974] ? shrinker_alloc+0x68/0xa60 [ 181.231852][ T5974] shrinker_alloc+0x68/0xa60 [ 181.231872][ T5974] ? __asan_memset+0x39/0x50 [ 181.231892][ T5974] alloc_super+0x602/0x950 [ 181.231918][ T5974] ? __cfi_kernfs_test_super+0x10/0x10 [ 181.231941][ T5974] sget_fc+0x325/0xa70 [ 181.231967][ T5974] ? __cfi_kernfs_set_super+0x10/0x10 [ 181.231996][ T5974] kernfs_get_tree+0x1ff/0x9a0 [ 181.232019][ T5974] ? __kasan_check_write+0x18/0x20 [ 181.232039][ T5974] ? __cfi_kernfs_get_tree+0x10/0x10 [ 181.232063][ T5974] ? selinux_capable+0x38/0x50 [ 181.232089][ T5974] ? bpf_lsm_capable+0xd/0x20 [ 181.232116][ T5974] ? security_capable+0x44/0x130 [ 181.232138][ T5974] sysfs_get_tree+0x44/0x110 [ 181.232160][ T5974] vfs_get_tree+0x9e/0x290 [ 181.232179][ T5974] do_new_mount+0x251/0xb40 [ 181.232198][ T5974] ? security_capable+0x44/0x130 [ 181.232221][ T5974] path_mount+0x66a/0xff0 [ 181.232240][ T5974] ? putname+0x113/0x150 [ 181.232262][ T5974] __se_sys_mount+0x2bf/0x480 [ 181.232284][ T5974] ? __x64_sys_mount+0xf0/0xf0 [ 181.232304][ T5974] ? __kasan_check_write+0x18/0x20 [ 181.232324][ T5974] ? fpregs_restore_userregs+0x11c/0x260 [ 181.232348][ T5974] __x64_sys_mount+0xc3/0xf0 [ 181.232369][ T5974] x64_sys_call+0x2021/0x2ee0 [ 181.232388][ T5974] do_syscall_64+0x57/0xf0 [ 181.232407][ T5974] ? clear_bhb_loop+0x50/0xa0 [ 181.232432][ T5974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 181.232456][ T5974] RIP: 0033:0x7f078719e199 [ 181.232473][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.232490][ T5974] RSP: 002b:00007f0787f87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.232511][ T5974] RAX: ffffffffffffffda RBX: 00007f0787425fa0 RCX: 00007f078719e199 [ 181.232527][ T5974] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 181.232541][ T5974] RBP: 00007f07872358e0 R08: 0000000000000000 R09: 0000000000000000 [ 181.232555][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.232568][ T5974] R13: 00007f0787426038 R14: 00007f0787425fa0 R15: 00007ffd188f6878 [ 181.232585][ T5974] [ 181.519687][ T1162] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 181.530011][ T1162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 181.540135][ T1162] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 181.553873][ T1162] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 181.562964][ T1162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.571551][ T1162] usb 6-1: Product: syz [ 181.575699][ T1162] usb 6-1: Manufacturer: syz [ 181.580326][ T1162] usb 6-1: SerialNumber: syz [ 181.587323][ T1162] usb 6-1: config 0 descriptor?? [ 181.593995][ T1162] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 181.671952][ T430] bridge_slave_1: left allmulticast mode [ 181.677673][ T430] bridge_slave_1: left promiscuous mode [ 181.683309][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.690882][ T430] bridge_slave_0: left allmulticast mode [ 181.696516][ T430] bridge_slave_0: left promiscuous mode [ 181.702229][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.832838][ T430] tipc: Disabling bearer [ 181.838324][ T430] tipc: Disabling bearer [ 181.844177][ T430] tipc: Left network mode [ 181.849627][ T430] veth1_macvtap: left promiscuous mode [ 181.855140][ T430] veth0_vlan: left promiscuous mode [ 181.878787][ T1162] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 181.939121][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.946255][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.953495][ T5986] bridge_slave_0: entered allmulticast mode [ 181.959931][ T5986] bridge_slave_0: entered promiscuous mode [ 181.966286][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.973386][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.980448][ T5986] bridge_slave_1: entered allmulticast mode [ 181.986810][ T5986] bridge_slave_1: entered promiscuous mode [ 182.009546][ T1162] usb 6-1: USB disconnect, device number 55 [ 182.037376][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.044425][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.051701][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.058731][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.073907][ T5992] tmpfs: Unknown parameter 'Wj*efzYuk ݸP亰' [ 182.081552][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.088765][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.098071][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.105125][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.114397][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.121452][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.144638][ T5986] veth0_vlan: entered promiscuous mode [ 182.154762][ T5986] veth1_macvtap: entered promiscuous mode [ 182.180598][ T5995] syzkaller1: entered allmulticast mode [ 182.539210][ T66] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 182.624934][ T6009] FAULT_INJECTION: forcing a failure. [ 182.624934][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 182.637665][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.5.1526 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 182.637695][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.637709][ T6009] Call Trace: [ 182.637716][ T6009] [ 182.637725][ T6009] __dump_stack+0x21/0x30 [ 182.637757][ T6009] dump_stack_lvl+0x140/0x1c0 [ 182.637784][ T6009] ? __cfi_dump_stack_lvl+0x10/0x10 [ 182.637810][ T6009] ? idr_alloc+0x209/0x2f0 [ 182.637839][ T6009] dump_stack+0x19/0x20 [ 182.637856][ T6009] should_fail_ex+0x3c2/0x510 [ 182.637870][ T6009] should_failslab+0xac/0x100 [ 182.637883][ T6009] __kmalloc_cache_noprof+0x41/0x470 [ 182.637897][ T6009] ? __list_lru_init+0xc0/0x480 [ 182.637911][ T6009] __list_lru_init+0xc0/0x480 [ 182.637924][ T6009] alloc_super+0x71e/0x950 [ 182.637939][ T6009] ? __cfi_kernfs_test_super+0x10/0x10 [ 182.637952][ T6009] sget_fc+0x325/0xa70 [ 182.637969][ T6009] ? __cfi_kernfs_set_super+0x10/0x10 [ 182.637982][ T6009] kernfs_get_tree+0x1ff/0x9a0 [ 182.637994][ T6009] ? __kasan_check_write+0x18/0x20 [ 182.638005][ T6009] ? __cfi_kernfs_get_tree+0x10/0x10 [ 182.638018][ T6009] ? selinux_capable+0x38/0x50 [ 182.638034][ T6009] ? bpf_lsm_capable+0xd/0x20 [ 182.638050][ T6009] ? security_capable+0x44/0x130 [ 182.638062][ T6009] sysfs_get_tree+0x44/0x110 [ 182.638075][ T6009] vfs_get_tree+0x9e/0x290 [ 182.638085][ T6009] do_new_mount+0x251/0xb40 [ 182.638096][ T6009] ? security_capable+0x44/0x130 [ 182.638109][ T6009] path_mount+0x66a/0xff0 [ 182.638119][ T6009] ? putname+0x113/0x150 [ 182.638132][ T6009] __se_sys_mount+0x2bf/0x480 [ 182.638143][ T6009] ? __x64_sys_mount+0xf0/0xf0 [ 182.638155][ T6009] ? __kasan_check_write+0x18/0x20 [ 182.638166][ T6009] ? fpregs_restore_userregs+0x11c/0x260 [ 182.638180][ T6009] __x64_sys_mount+0xc3/0xf0 [ 182.638191][ T6009] x64_sys_call+0x2021/0x2ee0 [ 182.638201][ T6009] do_syscall_64+0x57/0xf0 [ 182.638213][ T6009] ? clear_bhb_loop+0x50/0xa0 [ 182.638226][ T6009] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.638240][ T6009] RIP: 0033:0x7f99df99e199 [ 182.638251][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.638261][ T6009] RSP: 002b:00007f99e080f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.638274][ T6009] RAX: ffffffffffffffda RBX: 00007f99dfc25fa0 RCX: 00007f99df99e199 [ 182.638283][ T6009] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 182.638291][ T6009] RBP: 00007f99dfa358e0 R08: 0000000000000000 R09: 0000000000000000 [ 182.638299][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.638306][ T6009] R13: 00007f99dfc26038 R14: 00007f99dfc25fa0 R15: 00007ffc58e18688 [ 182.638315][ T6009] [ 182.699227][ T66] usb 9-1: device descriptor read/64, error -71 [ 183.149208][ T66] usb 9-1: device descriptor read/64, error -71 [ 183.399287][ T66] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 183.529208][ T66] usb 9-1: device descriptor read/64, error -71 [ 183.779219][ T66] usb 9-1: device descriptor read/64, error -71 [ 183.851243][ T6025] syzkaller1: entered allmulticast mode [ 183.889346][ T66] usb usb9-port1: attempt power cycle [ 184.160250][ T6043] FAULT_INJECTION: forcing a failure. [ 184.160250][ T6043] name failslab, interval 1, probability 0, space 0, times 0 [ 184.172928][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.5.1535 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 184.172962][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.172974][ T6043] Call Trace: [ 184.172979][ T6043] [ 184.172984][ T6043] __dump_stack+0x21/0x30 [ 184.173004][ T6043] dump_stack_lvl+0x140/0x1c0 [ 184.173019][ T6043] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.173035][ T6043] dump_stack+0x19/0x20 [ 184.173049][ T6043] should_fail_ex+0x3c2/0x510 [ 184.173063][ T6043] should_failslab+0xac/0x100 [ 184.173076][ T6043] __kmalloc_cache_noprof+0x41/0x470 [ 184.173088][ T6043] ? __list_lru_init+0xc0/0x480 [ 184.173101][ T6043] __list_lru_init+0xc0/0x480 [ 184.173115][ T6043] alloc_super+0x77e/0x950 [ 184.173130][ T6043] ? __cfi_kernfs_test_super+0x10/0x10 [ 184.173143][ T6043] sget_fc+0x325/0xa70 [ 184.173157][ T6043] ? __cfi_kernfs_set_super+0x10/0x10 [ 184.173170][ T6043] kernfs_get_tree+0x1ff/0x9a0 [ 184.173182][ T6043] ? __kasan_check_write+0x18/0x20 [ 184.173199][ T6043] ? __cfi_kernfs_get_tree+0x10/0x10 [ 184.173211][ T6043] ? selinux_capable+0x38/0x50 [ 184.173225][ T6043] ? bpf_lsm_capable+0xd/0x20 [ 184.173241][ T6043] ? security_capable+0x44/0x130 [ 184.173254][ T6043] sysfs_get_tree+0x44/0x110 [ 184.173266][ T6043] vfs_get_tree+0x9e/0x290 [ 184.173277][ T6043] do_new_mount+0x251/0xb40 [ 184.173288][ T6043] ? security_capable+0x44/0x130 [ 184.173301][ T6043] path_mount+0x66a/0xff0 [ 184.173311][ T6043] ? putname+0x113/0x150 [ 184.173324][ T6043] __se_sys_mount+0x2bf/0x480 [ 184.173335][ T6043] ? __x64_sys_mount+0xf0/0xf0 [ 184.173347][ T6043] ? __kasan_check_write+0x18/0x20 [ 184.173358][ T6043] ? fpregs_restore_userregs+0x11c/0x260 [ 184.173371][ T6043] __x64_sys_mount+0xc3/0xf0 [ 184.173383][ T6043] x64_sys_call+0x2021/0x2ee0 [ 184.173393][ T6043] do_syscall_64+0x57/0xf0 [ 184.173404][ T6043] ? clear_bhb_loop+0x50/0xa0 [ 184.173418][ T6043] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.173432][ T6043] RIP: 0033:0x7f99df99e199 [ 184.173443][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.173453][ T6043] RSP: 002b:00007f99e080f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.173466][ T6043] RAX: ffffffffffffffda RBX: 00007f99dfc25fa0 RCX: 00007f99df99e199 [ 184.173475][ T6043] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 184.173483][ T6043] RBP: 00007f99dfa358e0 R08: 0000000000000000 R09: 0000000000000000 [ 184.173491][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.173498][ T6043] R13: 00007f99dfc26038 R14: 00007f99dfc25fa0 R15: 00007ffc58e18688 [ 184.173507][ T6043] [ 184.500002][ T66] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 184.510786][ T36] audit: type=1400 audit(2000000196.402:8151): avc: denied { create } for pid=6050 comm="syz.7.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 184.540213][ T66] usb 9-1: device descriptor read/8, error -71 [ 184.680287][ T66] usb 9-1: device descriptor read/8, error -71 [ 184.919263][ T66] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 184.940211][ T66] usb 9-1: device descriptor read/8, error -71 [ 185.025694][ T6054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.034879][ T6054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.051027][ T6058] syzkaller1: entered allmulticast mode [ 185.081183][ T66] usb 9-1: device descriptor read/8, error -71 [ 185.105994][ T6064] fuse: Unknown parameter 'gvoup' [ 185.112421][ T6064] fuse: Bad value for 'user_id' [ 185.117273][ T6064] fuse: Bad value for 'user_id' [ 185.134923][ T36] audit: type=1400 audit(2000000197.022:8152): avc: denied { read } for pid=6065 comm="syz.7.1543" path="socket:[58765]" dev="sockfs" ino=58765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.189523][ T66] usb usb9-port1: unable to enumerate USB device [ 185.348345][ T6078] FAULT_INJECTION: forcing a failure. [ 185.348345][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 185.361529][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.5.1546 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 185.361560][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.361573][ T6078] Call Trace: [ 185.361581][ T6078] [ 185.361589][ T6078] __dump_stack+0x21/0x30 [ 185.361621][ T6078] dump_stack_lvl+0x140/0x1c0 [ 185.361648][ T6078] ? __cfi_dump_stack_lvl+0x10/0x10 [ 185.361675][ T6078] ? pcpu_chunk_relocate+0x1ce/0x430 [ 185.361700][ T6078] dump_stack+0x19/0x20 [ 185.361726][ T6078] should_fail_ex+0x3c2/0x510 [ 185.361751][ T6078] should_failslab+0xac/0x100 [ 185.361775][ T6078] __kmalloc_cache_noprof+0x41/0x470 [ 185.361797][ T6078] ? shrinker_alloc+0x68/0xa60 [ 185.361818][ T6078] shrinker_alloc+0x68/0xa60 [ 185.361839][ T6078] ? __asan_memset+0x39/0x50 [ 185.361861][ T6078] alloc_super+0x602/0x950 [ 185.361888][ T6078] ? __cfi_kernfs_test_super+0x10/0x10 [ 185.361911][ T6078] sget_fc+0x325/0xa70 [ 185.361937][ T6078] ? __cfi_kernfs_set_super+0x10/0x10 [ 185.361961][ T6078] kernfs_get_tree+0x1ff/0x9a0 [ 185.361982][ T6078] ? __kasan_check_write+0x18/0x20 [ 185.362003][ T6078] ? __cfi_kernfs_get_tree+0x10/0x10 [ 185.362024][ T6078] ? selinux_capable+0x38/0x50 [ 185.362051][ T6078] ? bpf_lsm_capable+0xd/0x20 [ 185.362079][ T6078] ? security_capable+0x44/0x130 [ 185.362110][ T6078] sysfs_get_tree+0x44/0x110 [ 185.362133][ T6078] vfs_get_tree+0x9e/0x290 [ 185.362154][ T6078] do_new_mount+0x251/0xb40 [ 185.362174][ T6078] ? security_capable+0x44/0x130 [ 185.362198][ T6078] path_mount+0x66a/0xff0 [ 185.362216][ T6078] ? putname+0x113/0x150 [ 185.362237][ T6078] __se_sys_mount+0x2bf/0x480 [ 185.362259][ T6078] ? __x64_sys_mount+0xf0/0xf0 [ 185.362280][ T6078] ? __x64_sys_sendfile64+0x19d/0x200 [ 185.362305][ T6078] ? __kasan_check_write+0x18/0x20 [ 185.362326][ T6078] ? fpregs_restore_userregs+0x11c/0x260 [ 185.362350][ T6078] __x64_sys_mount+0xc3/0xf0 [ 185.362372][ T6078] x64_sys_call+0x2021/0x2ee0 [ 185.362391][ T6078] do_syscall_64+0x57/0xf0 [ 185.362412][ T6078] ? clear_bhb_loop+0x50/0xa0 [ 185.362438][ T6078] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 185.362463][ T6078] RIP: 0033:0x7f99df99e199 [ 185.362481][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.362499][ T6078] RSP: 002b:00007f99e080f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.362522][ T6078] RAX: ffffffffffffffda RBX: 00007f99dfc25fa0 RCX: 00007f99df99e199 [ 185.362537][ T6078] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 185.362552][ T6078] RBP: 00007f99dfa358e0 R08: 0000000000000000 R09: 0000000000000000 [ 185.362566][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.362580][ T6078] R13: 00007f99dfc26038 R14: 00007f99dfc25fa0 R15: 00007ffc58e18688 [ 185.362597][ T6078] [ 185.535626][ T36] audit: type=1400 audit(2000000197.372:8153): avc: denied { getopt } for pid=6080 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.597136][ T6086] tmpfs: Bad value for 'nr_blocks' [ 185.711734][ T6096] 9pnet_fd: Insufficient options for proto=fd [ 185.728252][ T6099] netlink: 26148 bytes leftover after parsing attributes in process `syz.4.1554'. [ 185.737578][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 186.049863][ T6118] syzkaller1: entered allmulticast mode [ 186.069209][ T1636] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 186.209322][ T1636] usb 9-1: device descriptor read/64, error -71 [ 186.459240][ T1636] usb 9-1: device descriptor read/64, error -71 [ 186.469207][ T66] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 186.619213][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 186.709320][ T1636] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 186.749207][ T66] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 186.839309][ T1636] usb 9-1: device descriptor read/64, error -71 [ 186.899231][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 186.904607][ T66] usb usb6-port1: attempt power cycle [ 187.079444][ T1636] usb 9-1: device descriptor read/64, error -71 [ 187.189264][ T1636] usb usb9-port1: attempt power cycle [ 187.249265][ T66] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 187.269662][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 187.331516][ T6144] overlayfs: failed to clone upperpath [ 187.419249][ T66] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 187.439631][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 187.445316][ T66] usb usb6-port1: unable to enumerate USB device [ 187.479445][ T6155] ./dev/sda1: Can't lookup blockdev [ 187.539279][ T1636] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 187.560265][ T1636] usb 9-1: device descriptor read/8, error -71 [ 187.606255][ T6168] overlayfs: failed to clone upperpath [ 187.700215][ T1636] usb 9-1: device descriptor read/8, error -71 [ 187.736240][ T6177] fuse: Unknown parameter 'fO' [ 187.939189][ T1636] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 187.970308][ T1636] usb 9-1: device descriptor read/8, error -71 [ 188.100251][ T1636] usb 9-1: device descriptor read/8, error -71 [ 188.209266][ T1636] usb usb9-port1: unable to enumerate USB device [ 189.202356][ T6204] FAULT_INJECTION: forcing a failure. [ 189.202356][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 189.215006][ T6204] CPU: 1 UID: 0 PID: 6204 Comm: syz.7.1590 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 189.215037][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.215050][ T6204] Call Trace: [ 189.215054][ T6204] [ 189.215060][ T6204] __dump_stack+0x21/0x30 [ 189.215080][ T6204] dump_stack_lvl+0x140/0x1c0 [ 189.215096][ T6204] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.215123][ T6204] dump_stack+0x19/0x20 [ 189.215147][ T6204] should_fail_ex+0x3c2/0x510 [ 189.215169][ T6204] should_failslab+0xac/0x100 [ 189.215183][ T6204] __kmalloc_cache_noprof+0x41/0x470 [ 189.215195][ T6204] ? __list_lru_init+0xc0/0x480 [ 189.215214][ T6204] __list_lru_init+0xc0/0x480 [ 189.215227][ T6204] alloc_super+0x77e/0x950 [ 189.215244][ T6204] ? __cfi_kernfs_test_super+0x10/0x10 [ 189.215258][ T6204] sget_fc+0x325/0xa70 [ 189.215272][ T6204] ? __cfi_kernfs_set_super+0x10/0x10 [ 189.215285][ T6204] kernfs_get_tree+0x1ff/0x9a0 [ 189.215298][ T6204] ? __kasan_check_write+0x18/0x20 [ 189.215309][ T6204] ? __cfi_kernfs_get_tree+0x10/0x10 [ 189.215321][ T6204] ? selinux_capable+0x38/0x50 [ 189.215336][ T6204] ? bpf_lsm_capable+0xd/0x20 [ 189.215351][ T6204] ? security_capable+0x44/0x130 [ 189.215364][ T6204] sysfs_get_tree+0x44/0x110 [ 189.215376][ T6204] vfs_get_tree+0x9e/0x290 [ 189.215386][ T6204] do_new_mount+0x251/0xb40 [ 189.215397][ T6204] ? security_capable+0x44/0x130 [ 189.215410][ T6204] path_mount+0x66a/0xff0 [ 189.215421][ T6204] ? putname+0x113/0x150 [ 189.215433][ T6204] __se_sys_mount+0x2bf/0x480 [ 189.215445][ T6204] ? __x64_sys_mount+0xf0/0xf0 [ 189.215457][ T6204] ? __kasan_check_write+0x18/0x20 [ 189.215467][ T6204] ? fpregs_restore_userregs+0x11c/0x260 [ 189.215481][ T6204] __x64_sys_mount+0xc3/0xf0 [ 189.215492][ T6204] x64_sys_call+0x2021/0x2ee0 [ 189.215503][ T6204] do_syscall_64+0x57/0xf0 [ 189.215514][ T6204] ? clear_bhb_loop+0x50/0xa0 [ 189.215536][ T6204] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.215560][ T6204] RIP: 0033:0x7f630df9e199 [ 189.215577][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.215596][ T6204] RSP: 002b:00007f630ef21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.215613][ T6204] RAX: ffffffffffffffda RBX: 00007f630e225fa0 RCX: 00007f630df9e199 [ 189.215622][ T6204] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 189.215631][ T6204] RBP: 00007f630e0358e0 R08: 0000000000000000 R09: 0000000000000000 [ 189.215639][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.215646][ T6204] R13: 00007f630e226038 R14: 00007f630e225fa0 R15: 00007ffed5b96be8 [ 189.215657][ T6204] [ 189.558255][ T6223] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 189.566706][ T36] audit: type=1400 audit(2000000201.442:8154): avc: denied { read } for pid=6222 comm="syz.5.1595" name="file0" dev="tmpfs" ino=1457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.590751][ T36] audit: type=1400 audit(2000000201.482:8155): avc: denied { relabelto } for pid=6222 comm="syz.5.1595" name="file0" dev="tmpfs" ino=1457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 189.618193][ T36] audit: type=1400 audit(2000000201.492:8156): avc: denied { associate } for pid=6222 comm="syz.5.1595" name="file0" dev="tmpfs" ino=1457 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 189.655793][ T36] audit: type=1400 audit(2000000201.542:8157): avc: denied { unlink } for pid=1891 comm="syz-executor" name="file0" dev="tmpfs" ino=1457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 189.669456][ T6233] SELinux: failed to load policy [ 189.683369][ T36] audit: type=1400 audit(2000000201.542:8158): avc: denied { read } for pid=1891 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.711723][ T36] audit: type=1400 audit(2000000201.542:8159): avc: denied { open } for pid=1891 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.736459][ T36] audit: type=1400 audit(2000000201.542:8160): avc: denied { ioctl } for pid=1891 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.911802][ T6242] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1600'. [ 189.919205][ T1636] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 190.009205][ T66] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 190.069192][ T1636] usb 6-1: Using ep0 maxpacket: 32 [ 190.079980][ T1636] usb 6-1: unable to get BOS descriptor or descriptor too short [ 190.093901][ T1636] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 190.106475][ T1636] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 190.123528][ T1636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.131648][ T1636] usb 6-1: Product: syz [ 190.136176][ T1636] usb 6-1: Manufacturer: syz [ 190.140803][ T1636] usb 6-1: SerialNumber: syz [ 190.176473][ T66] usb 9-1: unable to get BOS descriptor or descriptor too short [ 190.185593][ T66] usb 9-1: not running at top speed; connect to a high speed hub [ 190.196411][ T66] usb 9-1: config 87 has an invalid interface number: 152 but max is 0 [ 190.204773][ T66] usb 9-1: config 87 has no interface number 0 [ 190.211026][ T66] usb 9-1: config 87 interface 152 has no altsetting 0 [ 190.223422][ T66] usb 9-1: New USB device found, idVendor=0df6, idProduct=004a, bcdDevice=36.71 [ 190.232511][ T66] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.240529][ T66] usb 9-1: Product: syz [ 190.244809][ T66] usb 9-1: Manufacturer: syz [ 190.249461][ T66] usb 9-1: SerialNumber: syz [ 190.261213][ T6262] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1605'. [ 190.270319][ T6262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6262 comm=syz.7.1605 [ 190.284926][ T6265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6265 comm=syz.7.1605 [ 190.356896][ T1636] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 190.363834][ T1636] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 190.382944][ T1636] usb 6-1: USB disconnect, device number 60 [ 190.937647][ T6291] overlayfs: missing 'lowerdir' [ 190.946255][ T36] audit: type=1326 audit(2000000202.832:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.5.1612" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99df99e199 code=0x0 [ 190.978037][ T66] cdc_ether 9-1:87.152: More than one union descriptor, skipping ... [ 190.987378][ T66] usb 9-1: bad CDC descriptors [ 190.993430][ T66] usb 9-1: USB disconnect, device number 10 [ 191.018539][ T36] audit: type=1400 audit(2000000202.902:8162): avc: denied { getopt } for pid=6301 comm="syz.4.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.289258][ T66] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 191.439200][ T66] usb 9-1: Using ep0 maxpacket: 16 [ 191.446648][ T66] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 191.455819][ T66] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.463885][ T66] usb 9-1: Product: syz [ 191.468058][ T66] usb 9-1: Manufacturer: syz [ 191.472653][ T66] usb 9-1: SerialNumber: syz [ 191.554336][ T6308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6308 comm=syz.4.1617 [ 191.566830][ T6308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6308 comm=syz.4.1617 [ 191.579443][ T6308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6308 comm=syz.4.1617 [ 191.591960][ T6308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6308 comm=syz.4.1617 [ 191.625492][ T6315] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1619'. [ 191.634629][ T6315] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1619'. [ 191.694734][ T36] audit: type=1400 audit(2000000203.582:8163): avc: denied { create } for pid=6324 comm="syz.4.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.099197][ T31] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 192.237987][ T6337] overlayfs: failed to clone upperpath [ 192.250262][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.264574][ T31] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 192.273647][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.281806][ T31] usb 6-1: Product: syz [ 192.285977][ T31] usb 6-1: Manufacturer: syz [ 192.290688][ T31] usb 6-1: SerialNumber: syz [ 192.297850][ T31] rtl8150 6-1:1.0: couldn't find required endpoints [ 192.304518][ T31] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 192.316259][ T66] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 192.325930][ T66] usb 9-1: USB disconnect, device number 11 [ 192.579795][ T66] usb 6-1: USB disconnect, device number 61 [ 193.112829][ T66] smpboot: CPU 1 is now offline [ 193.159210][ T31] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 193.309207][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 193.322440][ T31] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 193.335113][ T6357] input: syz1 as /devices/virtual/input/input22 [ 193.343493][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.358762][ T31] usb 9-1: Product: syz [ 193.368834][ T31] usb 9-1: Manufacturer: syz [ 193.373477][ T66] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 193.386003][ T31] usb 9-1: SerialNumber: syz [ 193.401288][ T31] usb 9-1: config 0 descriptor?? [ 193.408066][ T31] usb-storage 9-1:0.0: USB Mass Storage device detected [ 193.418481][ T31] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 193.426043][ T31] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 193.426043][ T31] Please send a copy of this message to and [ 193.540137][ T66] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.548186][ T66] usb 6-1: config 0 has no interface number 0 [ 193.554403][ T66] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.565636][ T66] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.575713][ T66] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.588782][ T66] usb 6-1: config 0 interface 1 has no altsetting 0 [ 193.596063][ T66] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 193.605239][ T66] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 193.614908][ T66] usb 6-1: Manufacturer: syz [ 193.620862][ T66] usb 6-1: config 0 descriptor?? [ 194.468419][ T430] veth0_to_team: left allmulticast mode [ 194.479919][ T66] usbhid 6-1:0.1: can't add hid device: -71 [ 194.488266][ T430] veth0_to_team: left promiscuous mode [ 194.497286][ T66] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 194.507512][ T430] bridge0: port 3(veth0_to_team) entered disabled state [ 194.522874][ T66] usb 6-1: USB disconnect, device number 62 [ 194.534655][ T430] bridge_slave_1: left allmulticast mode [ 194.550294][ T430] bridge_slave_1: left promiscuous mode [ 194.561337][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.576185][ T430] bridge_slave_0: left allmulticast mode [ 194.587214][ T430] bridge_slave_0: left promiscuous mode [ 194.599310][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.671264][ T430] veth1_macvtap: left promiscuous mode [ 194.676775][ T430] veth0_vlan: left promiscuous mode [ 194.727864][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.740961][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.748549][ T6382] bridge_slave_0: entered allmulticast mode [ 194.755083][ T6382] bridge_slave_0: entered promiscuous mode [ 194.764455][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.771627][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.778696][ T6382] bridge_slave_1: entered allmulticast mode [ 194.791451][ T6382] bridge_slave_1: entered promiscuous mode [ 194.820554][ T430] ------------[ cut here ]------------ [ 194.826019][ T430] WARNING: CPU: 0 PID: 430 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 194.836007][ T430] Modules linked in: [ 194.839943][ T430] CPU: 0 UID: 0 PID: 430 Comm: kworker/u8:37 Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 194.851691][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.861739][ T430] Workqueue: netns cleanup_net [ 194.866489][ T430] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 194.872514][ T430] Code: e8 71 7f d5 fc 4b 83 3c 3e 00 75 19 e8 95 97 7c fc 49 81 ff f8 07 00 00 74 1b e8 87 97 7c fc 49 83 c7 08 eb c9 e8 7c 97 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 194.892118][ T430] RSP: 0018:ffffc9000dc5fb90 EFLAGS: 00010293 [ 194.898163][ T430] RAX: ffffffff850ae124 RBX: ffff88811fcf3540 RCX: ffff888114f79300 [ 194.906131][ T430] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810d35c000 [ 194.914091][ T430] RBP: ffffc9000dc5fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 194.922119][ T430] R10: dffffc0000000000 R11: fffff52001b8bf04 R12: dffffc0000000000 [ 194.930096][ T430] R13: dffffc0000000000 R14: ffff88810d35c000 R15: 0000000000000000 [ 194.938057][ T430] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 194.946972][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.953542][ T430] CR2: 00007f630eedeff8 CR3: 0000000143578000 CR4: 00000000003526b0 [ 194.961525][ T430] Call Trace: [ 194.964781][ T430] [ 194.967689][ T430] cleanup_net+0x6ba/0xc90 [ 194.972093][ T430] ? __cfi_cleanup_net+0x10/0x10 [ 194.977012][ T430] ? kick_pool+0xb9/0x540 [ 194.981331][ T430] process_scheduled_works+0x7f4/0x1060 [ 194.986855][ T430] worker_thread+0xc99/0x13f0 [ 194.991526][ T430] kthread+0x2c4/0x360 [ 194.995573][ T430] ? __cfi_worker_thread+0x10/0x10 [ 195.000739][ T430] ? __cfi_kthread+0x10/0x10 [ 195.005312][ T430] ret_from_fork+0x67/0xa0 [ 195.009758][ T430] ? __cfi_kthread+0x10/0x10 [ 195.014328][ T430] ret_from_fork_asm+0x1a/0x30 [ 195.019066][ T430] [ 195.022074][ T430] ---[ end trace 0000000000000000 ]--- [ 195.055358][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.062393][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 195.069621][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.076619][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.088610][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 195.088621][ T36] audit: type=1400 audit(2000000206.932:8166): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2945]" dev="pipefs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 195.219183][ T36] audit: type=1400 audit(2000000207.012:8167): avc: denied { search } for pid=285 comm="sshd-session" name="/" dev="sda1" ino=2 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 195.279189][ T313] usb 5-1: USB disconnect, device number 17 [ 195.389221][ T1162] usb 9-1: USB disconnect, device number 12 [ 195.465236][ T430] ------------[ cut here ]------------ [ 195.470715][ T430] WARNING: CPU: 0 PID: 430 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 195.480797][ T430] Modules linked in: [ 195.484692][ T430] CPU: 0 UID: 0 PID: 430 Comm: kworker/u8:37 Tainted: G W syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 195.497895][ T430] Tainted: [W]=WARN [ 195.501688][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.511733][ T430] Workqueue: netns cleanup_net [ 195.516480][ T430] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 195.522540][ T430] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 40 97 7c fc 49 81 ff f8 07 00 00 74 1b e8 32 97 7c fc 49 83 c7 08 eb c5 e8 27 97 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 17 97 7c fc 5b 41 5c 41 5e 41 [ 195.542141][ T430] RSP: 0018:ffffc9000dc5fb90 EFLAGS: 00010293 [ 195.548186][ T430] RAX: ffffffff850ae179 RBX: ffff88810d35c800 RCX: ffff888114f79300 [ 195.556149][ T430] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810d35c808 [ 195.564170][ T430] RBP: ffffc9000dc5fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 195.572170][ T430] R10: dffffc0000000000 R11: fffff52001b8bf04 R12: dffffc0000000000 [ 195.580137][ T430] R13: dffffc0000000000 R14: ffff88810d35c000 R15: 0000000000000008 [ 195.588113][ T430] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 195.597036][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.603606][ T430] CR2: 00007ffcc850cffc CR3: 000000010dff6000 CR4: 00000000003526b0 [ 195.611567][ T430] Call Trace: [ 195.614823][ T430] [ 195.617750][ T430] cleanup_net+0x6ba/0xc90 [ 195.622167][ T430] ? __cfi_cleanup_net+0x10/0x10 [ 195.627084][ T430] ? kick_pool+0xb9/0x540 [ 195.631412][ T430] process_scheduled_works+0x7f4/0x1060 [ 195.636942][ T430] worker_thread+0xc99/0x13f0 [ 195.641661][ T430] kthread+0x2c4/0x360 [ 195.645715][ T430] ? __cfi_worker_thread+0x10/0x10 [ 195.650851][ T430] ? __cfi_kthread+0x10/0x10 [ 195.655421][ T430] ret_from_fork+0x67/0xa0 [ 195.659838][ T430] ? __cfi_kthread+0x10/0x10 [ 195.664406][ T430] ret_from_fork_asm+0x1a/0x30 [ 195.669146][ T430] [ 195.672157][ T430] ---[ end trace 0000000000000000 ]--- [ 195.677735][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.685247][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.695734][ T430] ------------[ cut here ]------------ [ 195.701199][ T430] WARNING: CPU: 0 PID: 430 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 195.710655][ T430] Modules linked in: [ 195.714529][ T430] CPU: 0 UID: 0 PID: 430 Comm: kworker/u8:37 Tainted: G W syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 195.727760][ T430] Tainted: [W]=WARN [ 195.731552][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.741600][ T430] Workqueue: netns cleanup_net [ 195.746346][ T430] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 195.751879][ T430] Code: 3c 20 00 74 08 48 89 df e8 bf 42 f0 fc 48 8b 3b e8 f7 32 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 b3 b7 00 cc e8 d2 5a 97 fc <0f> 0b e9 b0 fd ff ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a [ 195.771494][ T430] RSP: 0018:ffffc9000dc5fb70 EFLAGS: 00010293 [ 195.777537][ T430] RAX: ffffffff84f01dce RBX: ffff88811fcf3540 RCX: ffff888114f79300 [ 195.785509][ T430] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888114f79300 [ 195.793471][ T430] RBP: ffffc9000dc5fb98 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 195.801488][ T430] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: 1ffffffff0fa861c [ 195.809450][ T430] R13: dffffc0000000000 R14: ffff88811fcf4140 R15: dffffc0000000000 [ 195.817407][ T430] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 195.826323][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.832892][ T430] CR2: 00007ffcc850cffc CR3: 000000010c7be000 CR4: 00000000003526b0 [ 195.840855][ T430] Call Trace: [ 195.844109][ T430] [ 195.847022][ T430] xfrm_net_exit+0x31/0x80 [ 195.851428][ T430] cleanup_net+0x6ba/0xc90 [ 195.855819][ T430] ? __cfi_cleanup_net+0x10/0x10 [ 195.860740][ T430] ? kick_pool+0xb9/0x540 [ 195.865048][ T430] process_scheduled_works+0x7f4/0x1060 [ 195.870581][ T430] worker_thread+0xc99/0x13f0 [ 195.875233][ T430] kthread+0x2c4/0x360 [ 195.879373][ T430] ? __cfi_worker_thread+0x10/0x10 [ 195.884463][ T430] ? __cfi_kthread+0x10/0x10 [ 195.889031][ T430] ret_from_fork+0x67/0xa0 [ 195.893494][ T430] ? __cfi_kthread+0x10/0x10 [ 195.898065][ T430] ret_from_fork_asm+0x1a/0x30 [ 195.902821][ T430] [ 195.905819][ T430] ---[ end trace 0000000000000000 ]--- [ 195.940273][ T430] bridge_slave_1: left allmulticast mode [ 195.945905][ T430] bridge_slave_1: left promiscuous mode [ 195.951748][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.959050][ T430] bridge_slave_0: left allmulticast mode [ 195.965544][ T430] bridge_slave_0: left promiscuous mode [ 195.971383][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.978801][ T430] bridge_slave_1: left allmulticast mode [ 195.984546][ T430] bridge_slave_1: left promiscuous mode [ 195.990165][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.997706][ T430] bridge_slave_0: left allmulticast mode [ 196.003481][ T430] bridge_slave_0: left promiscuous mode [ 196.009049][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.016576][ T430] bridge_slave_1: left allmulticast mode [ 196.022278][ T430] bridge_slave_1: left promiscuous mode [ 196.028088][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.035452][ T430] bridge_slave_0: left allmulticast mode [ 196.041111][ T430] bridge_slave_0: left promiscuous mode [ 196.046665][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.054143][ T430] bridge_slave_1: left allmulticast mode [ 196.059770][ T430] bridge_slave_1: left promiscuous mode [ 196.065333][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.072672][ T430] bridge_slave_0: left allmulticast mode [ 196.078283][ T430] bridge_slave_0: left promiscuous mode [ 196.083939][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.222143][ T430] tipc: Disabling bearer [ 196.227477][ T430] tipc: Disabling bearer [ 196.232936][ T430] tipc: Left network mode [ 196.238430][ T430] veth1_macvtap: left promiscuous mode [ 196.244039][ T430] veth0_vlan: left promiscuous mode [ 196.249878][ T430] veth1_macvtap: left promiscuous mode [ 196.255339][ T430] veth0_vlan: left promiscuous mode [ 196.545780][ T430] ------------[ cut here ]------------ [ 196.551263][ T430] WARNING: CPU: 0 PID: 430 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 196.560726][ T430] Modules linked in: [ 196.564601][ T430] CPU: 0 UID: 0 PID: 430 Comm: kworker/u8:37 Tainted: G W syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7 [ 196.577789][ T430] Tainted: [W]=WARN [ 196.581576][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.591626][ T430] Workqueue: netns cleanup_net [ 196.596379][ T430] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 196.601936][ T430] Code: 3c 20 00 74 08 48 89 df e8 bf 42 f0 fc 48 8b 3b e8 f7 32 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 b3 b7 00 cc e8 d2 5a 97 fc <0f> 0b e9 b0 fd ff ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a [ 196.621537][ T430] RSP: 0018:ffffc9000dc5fb70 EFLAGS: 00010293 [ 196.627581][ T430] RAX: ffffffff84f01dce RBX: ffff88811fcf6a80 RCX: ffff888114f79300 [ 196.635546][ T430] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888114f79300 [ 196.643507][ T430] RBP: ffffc9000dc5fb98 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 196.651467][ T430] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: 1ffffffff0fa861c [ 196.659432][ T430] R13: dffffc0000000000 R14: ffff88811fcf7680 R15: dffffc0000000000 [ 196.667391][ T430] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 196.676306][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.682899][ T430] CR2: 00007ffcc850cffc CR3: 000000010cfd6000 CR4: 00000000003526b0 [ 196.690866][ T430] Call Trace: [ 196.694125][ T430] [ 196.697037][ T430] xfrm_net_exit+0x31/0x80 [ 196.701453][ T430] cleanup_net+0x6ba/0xc90 [ 196.705851][ T430] ? __cfi_cleanup_net+0x10/0x10 [ 196.710777][ T430] ? kick_pool+0xb9/0x540 [ 196.715086][ T430] process_scheduled_works+0x7f4/0x1060 [ 196.720618][ T430] worker_thread+0xc99/0x13f0 [ 196.725273][ T430] kthread+0x2c4/0x360 [ 196.729325][ T430] ? __cfi_worker_thread+0x10/0x10 [ 196.734413][ T430] ? __cfi_kthread+0x10/0x10 [ 196.738979][ T430] ret_from_fork+0x67/0xa0 [ 196.743388][ T430] ? __cfi_kthread+0x10/0x10 [ 196.747956][ T430] ret_from_fork_asm+0x1a/0x30 [ 196.752709][ T430] [ 196.755705][ T430] ---[ end trace 0000000000000000 ]---