last executing test programs: 3m36.136464176s ago: executing program 2 (id=5): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x8002, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x78, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xb4, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xf314, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x1, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x420e, r7, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m35.95312307s ago: executing program 2 (id=9): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x8020, 0x1, 0x5, {{0x23, 0x4, 0x1, 0x4, 0x8c, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0x22, 0x3, 0xa, [{@local, 0x3}, {@loopback, 0x7fffffff}, {@empty, 0x3}, {@local, 0x7fff}, {@empty, 0x2}, {@loopback, 0x1}, {@remote, 0x4}, {@private=0xa010100, 0x1}, {@remote, 0x6}]}, @rr={0x7, 0x7, 0x18, [@remote]}, @lsrr={0x83, 0x1b, 0x94, [@empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback]}, @ssrr={0x89, 0x7, 0xb4, [@broadcast]}]}}}}}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@updpolicy={0x160, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@private=0xa010100, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x20, 0x0, 0x0, r2}, {0x0, 0x9000, 0x1c00000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x200000000000000, 0x4}}, [@algo_auth_trunc={0x7f, 0x14, {{'sha256-avx2\x00'}, 0x198, 0x0, "13f8c6ff98d487d339e5a068e4406f55baa01f935e64bfff05e26ca7df89399880de58ef146d38ee583d92e7ebface8bd83117"}}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e20, @in6=@local}}, @policy_type={0xa}]}, 0x160}}, 0x2c000010) mmap(&(0x7f0000154000/0x2000)=nil, 0x2000, 0x2000006, 0x8031, r0, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x0, 0xb03}, 0x14}}, 0x0) r4 = socket(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x59) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r6 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000002980)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f3004b8f5801590cf07dc1812413c9000042cf0000000000"]}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000200)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x306, @remote}, 0x0, {0x2, 0x4e22, @loopback}, 'macvtap0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./dev/sda1\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000100)=0x1208) read(r5, 0x0, 0x0) 3m34.967755223s ago: executing program 3 (id=19): r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000543000/0x4000)=nil, 0x4000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) syz_io_uring_setup(0x5876, &(0x7f0000000180)={0x0, 0x129f, 0x8, 0x2, 0x398}, &(0x7f0000000200), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x1, 0x76b, 0x0, 0x0, 0x1000, 0x76, 0xffffffffffffffff, 0x0, 0x7}}}, &(0x7f00000004c0)) syz_io_uring_submit$UBLK(0x0, r1, r2, &(0x7f0000000540)=@ublk_get_dev_info_sqe={0x2e, 0x6, 0x0, r3, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, r4, '\x00', {0x0, 0xffff, 0x40, &(0x7f0000000500)=@ublk_ctrl_dev_info_new=@any_dev}}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @string={0x4, 0x3, '>M'}}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/153, 0x99) 3m33.013384121s ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x6, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r1, 0xffffffffffffffff, 0x1) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x40050) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x80085502, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) write$cgroup_pid(r5, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 3m32.884064474s ago: executing program 3 (id=36): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x9, &(0x7f0000000100)=[{0x0, 0x81, 0x7, 0x800000}, {0xf3, 0x6a, 0x5, 0x1}, {0x7, 0x80, 0x4, 0x6}, {0x1, 0xf7, 0x7, 0x2}, {0x3, 0xd, 0x7, 0x5}, {0x5, 0x1, 0x62, 0x39}, {0x5, 0x8, 0xfa, 0x4}, {0x0, 0xf, 0x7f, 0x218a}, {0xa, 0x8, 0x3, 0x9}]}) (async) r0 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x19, 0x100, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0xd, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic='B']}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0) 3m32.864149024s ago: executing program 2 (id=37): gettid() r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x1000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\x02\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ\x99\xd5\xa7|\x87\xe2\xccrj%\xc4r&K\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xc2?BN\x1d\xb2\'\"F\xc7\xda\xdb\x06H\xfa\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D*\xfa\xbb\xd3\xfc;C\xbfB\xec5\rh\'X\x92\xe7\xfd%tp\x12\xd95zKue\xa564\xf6\xde\x9b\xc6)\x00\x88\xe9\xef\x18\xc4so5^+\x9b\x17\xab\x9f\x89F\x12Dw\'\x85\x06\xb7\x06\xdc\xb9d:\v\xd9+\xca\x05\\U\x99\xb0\x9c\xef5K\xcb\xf1e\xb5\x99^\x8c\xa6\xf8k\xa3Y\xee\xa9\xb9\b\xffl\xf56.cB\x14}\x02\xa9?j\xb7b\xb6\xf2%\xd9|\x02\x1d\xf5\xf0\xc7R\x12\xcf\x95R\x9f|\xca\xe3k3\xc68\t\xc8>\x8d\xf4\x85\x94]\xb2F\xadf\x8d[\xc3\x13\xc8\xad\xd8\xd9') mmap(&(0x7f000038c000/0x4000)=nil, 0x4000, 0xd, 0x10010, r1, 0x9ea7000) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000540)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99f\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\b\x00\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\x7f\x97\x18\xc5\xdd\x8b\xe1\xb7\x1aZ\xbcY\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xb3\x16JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\a\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7z\x18\xa1\xd7U4\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\x83\r\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7U\xe1\xbf\x1a\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\x06\x00#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb5\'_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA\x00\x00\x00\x00\x00\x00\x00\x00\v\xa3\xb2\x1b)E/\xbb\x90\xcct_\x1f\xc5,.\xecv\x04\xe7\x04\v\xe0\x84\x89\xcc\xde\x82^\xc0&\x18\x8c\a\x88\\\xc7H\x97\xeb\x0e\xcdv\x8e\x00z(\f\xc4\xd4!\x95\"\x9ee\xda\xe4\x88\xc7\xac\xa3\xa9\x929Z\x03j_\x83\x05\ai\xc0\nB6\x06mT\xdf\'-$\r,\xe4J8\xac^[\xfd\x10\xa4\xb3\xf2\xfb\xfc\xd9-\b\x0f\x10\xb8\xbf7\'\x97\x98\x16\x81\x99\xa03\x12\xb7p^]LLO\xd4\x1a^\xfb5 \x8fH\xf5\x17N\xadQ\xbd\x1f\x90\xd7') socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xa, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3m32.707425298s ago: executing program 3 (id=39): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\', 0x3a, 'resv_level', 0x3a, './file0'}, 0x32) read(r1, 0x0, 0x0) 3m31.860996389s ago: executing program 3 (id=42): alarm(0x100000001) alarm(0x80000001) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@rdmsr={0x66, 0x18, {0x400000b7}}], 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24004015) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x1005, 0xfffffffffffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000200)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m31.463575648s ago: executing program 3 (id=44): socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2a, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) (async) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="625abac9", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) (async) r8 = dup(r5) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m29.876981856s ago: executing program 2 (id=49): syz_usb_connect$uac2(0x3, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110030000004082054c0040000102030109028e000301053009080b00010107208c0904000000010120000924010040041500070c24030207030004000700810904010000010220000904ad274214022000090501090002030b0408250100004004000904020000"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x103803, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000100)={0x46, "077d1ef3afb910b1a4c1de8350e5589d623f6e9435e2f609ddc4beb26b0a92fb753e6152596bdb85babcee307950760a48a3f8cf7771eeaece9c283d4dd7c17ab4700b63637d"}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m23.375304224s ago: executing program 2 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x5, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init1(0x80800) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000740)=0x277a, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) read$FUSE(r3, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x1) setresuid(0xee01, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x48, 0x0, 0xffffffffffff6b92}]}) r10 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) wait4(r10, 0x0, 0x80000000, &(0x7f0000000500)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 3m23.031930392s ago: executing program 2 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='call_site.fu)ction == vfs_read', 0x1e) 3m16.360348953s ago: executing program 32 (id=44): socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2a, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) (async) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="625abac9", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) (async) r8 = dup(r5) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m7.909085478s ago: executing program 33 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='call_site.fu)ction == vfs_read', 0x1e) 2m48.174927224s ago: executing program 5 (id=405): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='$\x00'], 0x28}}, {{&(0x7f0000001500)={0xa, 0x4e24, 0xa, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=ANY=[], 0xf8}}], 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) close(0x3) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) 2m45.145186098s ago: executing program 5 (id=416): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x1260, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0x8d8}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xc, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x521c6ae9, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x3, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a"], 0x6c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m45.06043154s ago: executing program 5 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)={'L-', 0x81}, 0x16, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 2m44.760650867s ago: executing program 5 (id=424): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='$\x00'], 0x28}}, {{&(0x7f0000001500)={0xa, 0x4e24, 0xa, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=ANY=[], 0xf8}}], 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) close(0x3) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) 2m41.727380111s ago: executing program 5 (id=449): socket$inet6(0xa, 0x4, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0008", @ANYRES16=r3, @ANYBLOB="11030000000000000000130000000800068004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2000000, 0x40080) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000440)=[0xe, 0x1]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x20000815}, 0x0) recvmmsg(r5, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0xe2c3}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000cc0)=""/232, 0xe8}, {&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000001040)=""/52, 0x34}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x8000}], 0x4, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r6, 0x0, 0x119) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000001080)={'syz0\x00', {0x1, 0x1, 0x1, 0x1}, 0x1, [0xfa, 0x21, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0xffffffff, 0x0, 0x9924, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x86e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0) write$input_event(r7, &(0x7f0000000180), 0x18) 2m39.969417173s ago: executing program 5 (id=453): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) dup(0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 2m24.073069967s ago: executing program 34 (id=453): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) dup(0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 1m29.976391025s ago: executing program 6 (id=962): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x148) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) syz_ublk_setup_io_uring(0x5ed, &(0x7f0000000100)={0x0, 0xf980, 0x2, 0x0, 0x145}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x148) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) socket(0x10, 0x3, 0x0) (async) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_ublk_setup_io_uring(0x5ed, &(0x7f0000000100)={0x0, 0xf980, 0x2, 0x0, 0x145}, 0x0, 0x0, 0x0) (async) 1m29.918600626s ago: executing program 6 (id=963): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$char_usb(r1, &(0x7f0000000340)="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", 0xbff) splice(r0, 0x0, r2, 0x0, 0x1001, 0xe) 1m29.831836289s ago: executing program 6 (id=964): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8ff80001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1m29.830975669s ago: executing program 6 (id=966): ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000080)={0x4, {0x8, 0xffff, 0xffffffffffffff88, 0xb, 0x8000000000000001}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x3, 0x155f, 0x10000006, 0x4, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x3a84f91c, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000380)={0x1, 0x4, 0x59000, 0x2000, &(0x7f0000006000/0x2000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_usb_connect$cdc_ecm(0x5, 0x150, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0xd9, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x99, 0x7835, 0xff, 0xf7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x92, "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"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x13, 0x37, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x5b, 0x7}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000001140)={[0x0, 0xdef, 0x2, 0x4, 0xffffffff, 0xade, 0xa, 0x1ff, 0x3ee, 0x1, 0x2, 0x1, 0x9, 0x5, 0x67e5, 0x80000000, 0x40, 0x200, 0x5, 0x4, 0x4, 0x2, 0x5, 0x6, 0x4, 0x28, 0x6, 0x6c, 0x9, 0x8, 0x5, 0xe, 0x5, 0xfffffffd, 0xb, 0x612, 0x9, 0xa32d, 0x6b0, 0x8001, 0x3ff, 0x9839, 0x2, 0x9, 0x1, 0x466, 0x284ae2da, 0x5, 0x3, 0xc00, 0x6, 0x7ff, 0xfffffff9, 0x8, 0x2, 0xfffffffc, 0x7, 0xfffffff8, 0x0, 0xaa, 0x80, 0x101, 0xfffffff0, 0x3, 0x7, 0x4, 0x3, 0x6, 0xcc, 0x8, 0x5, 0x9, 0x2, 0x100, 0x3, 0x6, 0x8, 0x2213, 0x6, 0x5, 0x8, 0x5, 0xa93, 0x6, 0xffffff01, 0x1, 0x8, 0x8, 0x2f80, 0x7, 0xe404, 0x100, 0x6, 0x3, 0x3, 0x6, 0x0, 0xff, 0x8, 0x4, 0x4, 0x1, 0x2, 0x4, 0x0, 0x1, 0x101, 0x10001, 0x3, 0xb9, 0x62b, 0xfffff801, 0x7, 0x50, 0x1, 0x9, 0x3, 0x4, 0x5, 0x80, 0x8001, 0x3, 0x1000, 0x80000001, 0x0, 0x0, 0x5, 0x2, 0x7, 0x8, 0x2, 0xfffffffc, 0x1, 0xff, 0x5, 0x80000001, 0x6, 0x8, 0x7f, 0x36, 0x6, 0x7fffffff, 0x1, 0x9, 0x1000, 0x401, 0x3, 0xa96d, 0xc36, 0x9, 0xea, 0x8364, 0x7, 0x4, 0x439, 0x9, 0xf, 0x5, 0x7ff, 0x12000000, 0x71c0000, 0x7, 0x8, 0xffffffc0, 0x8, 0x4, 0xeb66, 0x3, 0x8d7, 0xc4, 0x7ff, 0xac0, 0x1, 0x2, 0x7, 0x4, 0x8, 0x5, 0x2, 0xf, 0x4, 0x6, 0x2, 0x5, 0x2, 0x80000001, 0x5, 0x6, 0x2, 0x6, 0x80, 0x6, 0xfffffffd, 0x2, 0x0, 0x0, 0x9, 0x0, 0xfffffff2, 0x6, 0x4, 0xf66, 0x0, 0x6, 0x0, 0x300000, 0x2, 0x51e, 0x8, 0x0, 0x1, 0x1, 0x7f, 0x101, 0x21957456, 0xbb22, 0x3, 0xfffffffd, 0x6c5c, 0xc8, 0x3ff, 0x87, 0x9, 0x200, 0x1, 0x784, 0x2, 0xe, 0xb288, 0xb8, 0x6, 0x1, 0x8, 0x4, 0x7, 0xfff, 0x8, 0x10001, 0x7fff, 0x6, 0x3, 0x8, 0x4, 0x2, 0x0, 0x0, 0x7, 0x8, 0x1, 0x1, 0x8, 0x80, 0x0, 0x2, 0x3, 0x8f3b, 0x100, 0xfffffffd, 0x5, 0xeb26, 0x9, 0x7f, 0x2, 0x7, 0x6, 0x0, 0x200, 0x7, 0x2, 0x7, 0x200, 0x2, 0x78, 0x1000, 0x8, 0x6, 0x80, 0x8, 0x7, 0x6daf, 0x1, 0xb, 0x0, 0x9, 0x4, 0x643e, 0x9, 0xfff, 0x4, 0x1, 0x0, 0xaa, 0x6, 0x3, 0x8, 0x10, 0x1, 0x0, 0x6, 0x1, 0x1, 0x6, 0xd4, 0x3ff, 0xffffff63, 0xea3, 0x8, 0x1, 0xa7, 0x7f, 0x7, 0x6, 0x9, 0x7, 0x7fffffff, 0x4, 0x1, 0xb66, 0x3, 0x2, 0x0, 0x8000, 0xfffffff8, 0xc, 0x6, 0x8, 0x3, 0x6, 0x1, 0x4, 0x81, 0x200, 0x5, 0x0, 0xfffffff8, 0x9, 0x7, 0xfffffff8, 0x7, 0x0, 0xfff, 0x65e, 0x90c4, 0xdd91, 0x6, 0x5, 0x8, 0x7f, 0x8, 0x0, 0x7, 0x4, 0x6, 0x4, 0x4, 0x3, 0x7, 0xb99, 0x8, 0x2, 0x2, 0x6, 0x97, 0x9, 0x61, 0x96e, 0x1, 0x7f, 0xffffffff, 0xc, 0x5, 0x6, 0x9, 0x3, 0x0, 0x2, 0x6, 0x1000, 0x4, 0x7fffffff, 0x8000, 0x0, 0x4, 0x55, 0x5, 0xfff, 0xa, 0x6, 0xe, 0x1, 0x3, 0x4, 0xc, 0x3, 0xffff0f5d, 0x9, 0x1, 0x96, 0x2, 0xfffeffff, 0xfffffffc, 0x40, 0x4, 0x101, 0x0, 0x3, 0x7, 0x7, 0x3, 0x10001, 0x2, 0x0, 0x3, 0x4, 0x4, 0xfffffffc, 0xc64b, 0x8, 0x9, 0x1, 0x8, 0x5, 0x5, 0x0, 0x8, 0x9d4b, 0x1, 0x2, 0x5, 0x7, 0x5, 0x0, 0x8, 0x7fff, 0x83bc, 0x5, 0x761a, 0x4, 0x0, 0x80e, 0x40, 0xffff3528, 0x1, 0x5, 0x8, 0x6, 0xd39, 0xffff, 0x6, 0x7, 0xc46a, 0x0, 0x6, 0x3, 0x0, 0x1000, 0x0, 0x1ff, 0xaf, 0xfffffffc, 0x3, 0x8, 0x7ff, 0x7fff, 0x9, 0x6, 0x5, 0x5, 0x6608, 0x1000, 0x9, 0x2, 0x6, 0x38, 0x7, 0xfffffc00, 0x100, 0x6, 0x169, 0x1, 0xfffffff8, 0xf, 0x0, 0x4, 0x2dca, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x8, 0x9ba, 0x5, 0x0, 0x7, 0x9, 0x3, 0xfe05, 0x1, 0x1, 0x4, 0x3, 0xe, 0x3, 0x0, 0x100, 0x7252, 0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0x5, 0xfffffffb, 0x5, 0x0, 0x7fff, 0x8, 0x2, 0x3, 0xffffffff, 0x8001, 0x9, 0x2, 0x0, 0x9, 0x4, 0x9, 0x8, 0x8, 0x53, 0xfffffff9, 0xdf, 0x7, 0x1, 0xffff, 0x9, 0x0, 0x0, 0x7, 0x2, 0x0, 0xd, 0x7fffffff, 0x5, 0x345, 0x10000, 0x9e, 0x9, 0x2e0e, 0x6, 0x80000000, 0x10, 0x1000, 0x1, 0xc, 0x7, 0x70000000, 0x6, 0x3, 0x5, 0x1, 0x10001, 0xa27, 0x8000, 0x6, 0x4, 0x9, 0x4, 0x105, 0x2, 0x3, 0x2, 0x7, 0x82e, 0x81, 0x7000000, 0x1, 0xf529, 0xd, 0x400, 0x9, 0x2b4, 0xfffffff8, 0x5, 0x9, 0xd5, 0x2, 0x7, 0x1817643b, 0x8, 0x6, 0x3, 0x5, 0x7, 0x3, 0x0, 0x4, 0x6, 0x9, 0x3, 0x200, 0xb, 0x7f, 0x8, 0x4a, 0x7, 0x10000, 0x7fffffff, 0xab, 0x71e, 0x9, 0xa, 0xfff, 0xfff, 0x1, 0x9, 0x7fff, 0x0, 0x0, 0x3, 0x7, 0xd, 0x6, 0x1, 0x3, 0x6, 0x0, 0x2, 0x7, 0x4227, 0x8, 0x5, 0x80000000, 0x3ff, 0x7, 0x100, 0x1, 0x1, 0x0, 0x20, 0x8, 0x6, 0x0, 0x7fff, 0x4, 0xf, 0x3, 0x1, 0x1, 0x40, 0xa9e7818, 0x800, 0x2, 0x0, 0x800, 0x10, 0x4, 0x401, 0xfffffffc, 0x6, 0x3, 0x6538, 0x1, 0x1, 0x0, 0x400, 0x0, 0x100, 0x28f, 0x7, 0x3, 0x3, 0x80, 0xffff543a, 0x3, 0x7, 0x5, 0xffffffff, 0x1, 0x2, 0xf, 0x9, 0x40, 0x9, 0x101, 0x9, 0x3, 0x4a8, 0x5, 0xa, 0x7ff, 0x100, 0xffffffc3, 0x9, 0x10001, 0x3, 0xffffff42, 0xa7, 0xd3, 0x81, 0x2, 0x9c6, 0x4, 0xa722, 0x2d, 0x6, 0x9, 0x1, 0x9, 0x101, 0x8, 0xffff898b, 0x3, 0x4, 0x40, 0x5, 0xc, 0x5, 0x9, 0x81, 0x8, 0x5, 0x9, 0x6, 0x4, 0x3, 0x3, 0x8, 0x8, 0x8, 0x4, 0x6, 0x8, 0x6, 0x1, 0xff, 0xffffffff, 0x1000000, 0x80000000, 0x4, 0x7, 0x1, 0x8, 0x7c1, 0xffff8001, 0xffff, 0x5, 0x80000000, 0x5, 0x1d6, 0x7, 0x8001, 0xfff, 0x4, 0x0, 0x4, 0x9, 0x1, 0x1, 0x9, 0x57c, 0x3, 0x0, 0x2, 0x10, 0x6, 0x2, 0x8000, 0xc54, 0x6, 0x2, 0x633aa6a2, 0xf0a0, 0x8, 0x8, 0x2, 0x6, 0xc, 0x1, 0x8, 0xb31, 0x80000000, 0x8, 0x593, 0x0, 0x7, 0x0, 0x5, 0x9ad, 0x2, 0x7, 0x101, 0x8, 0xb463, 0x9, 0x2, 0x6, 0x5, 0x1, 0xb, 0x5016, 0xffffffff, 0x400, 0x5, 0x7ff, 0x1499, 0x5, 0x751, 0x10, 0x0, 0x8, 0x3, 0x299e, 0x74f, 0xe, 0x1, 0x9982, 0x400, 0x9, 0x5, 0x6, 0x4, 0x4, 0x3, 0x6, 0x4e, 0x860b, 0x6, 0x4, 0x3, 0x5, 0xc30, 0xd6, 0x6, 0x4, 0x80000001, 0xc, 0x5, 0x8, 0xfdf, 0xe, 0x10db5f6e, 0x200, 0x6, 0x6, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x7fffffff, 0x81, 0x800, 0xd5, 0x7, 0x4, 0x6, 0x4, 0x42, 0x7, 0x4, 0x4, 0x0, 0x8, 0x748d, 0x4, 0xfffffffa, 0x2, 0xfff, 0x800, 0x0, 0x5, 0x7, 0x1, 0x757, 0xf701, 0x7f, 0x10001, 0x8, 0x3, 0x80000001, 0x9, 0x7fffffff, 0xbecc, 0x78, 0x8, 0x8, 0x0, 0x9, 0x0, 0x8225, 0x3cd, 0xb, 0x401, 0x3, 0x400, 0x175, 0x9a2, 0x5, 0x7, 0x10000, 0x1, 0x7, 0x7, 0x8, 0x4649, 0x401, 0x1, 0x8, 0x10001, 0x9, 0x8, 0x0, 0x5cf6, 0x0, 0xfff, 0x401, 0x3, 0xffffffff, 0x101, 0x2, 0x5, 0x0, 0x8fc, 0x81, 0x7, 0x31, 0x6, 0x2, 0x3, 0x100, 0x8, 0x72, 0x2, 0x5, 0x4, 0x3, 0x9, 0x2, 0x40, 0x0, 0xfffffc00, 0x8001, 0x6, 0x8, 0x1ff, 0xffff, 0x2, 0x8, 0x2, 0x3, 0x0, 0x5, 0x3, 0xe, 0xfffffffd, 0x6, 0x1, 0x0, 0x3, 0xffff3adc, 0x8, 0x5, 0x9, 0x48000000, 0x7, 0x8, 0x100, 0x3ff, 0x9, 0x10, 0x9, 0x0, 0x2, 0x800, 0x0, 0x800, 0x800, 0x5, 0x2, 0x55, 0xb16, 0x8, 0xfffffff7, 0x5, 0x0, 0x100, 0x8, 0x8, 0x4, 0x6, 0x1, 0x5, 0x6, 0x0, 0x6, 0x0, 0x8, 0xfffffe00, 0x2, 0xffff7fff, 0x3, 0x9, 0xd87, 0x8, 0x0, 0x4, 0x6, 0x80000000, 0x5, 0xc, 0x4, 0x1, 0x6, 0x1, 0x7, 0x3d, 0x4, 0xb, 0x873]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r5 = socket(0x28, 0x801, 0x0) unshare(0x20000400) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="bad10466edc7c4000066b91d0a000066b88f00000066ba000000000f303664f2670f09670f011a640f080f01d166b9a70900000f320f22e50f07", 0x3a}], 0x1, 0x20, &(0x7f0000000300)=[@cr4={0x1, 0x60000}, @flags={0x3, 0x6080}], 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m28.52883381s ago: executing program 6 (id=977): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000240)='f2fs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/rfcomm\x00') setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "ce163f3a02800ac4", "d44047f89c17c18a4e6a341137292b68", "f57b2ded", "ed6530948846d248"}, 0x28) recvmsg(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/202, 0xca}], 0x2, &(0x7f0000001b40)=""/202, 0xca}, 0x6102) mknod$loop(0x0, 0x6000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_acct\x00') syz_ublk_setup_io_uring(0x30d2, &(0x7f0000000140)={0x0, 0x85b, 0x20, 0x3, 0x10e, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) eventfd(0x80000000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/238, 0x22c000, 0x800, 0xe, 0x3}, 0x20) r6 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 1m27.009000437s ago: executing program 6 (id=987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000002800e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1m11.945025961s ago: executing program 35 (id=987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000002800e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 40.619349758s ago: executing program 4 (id=1492): r0 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x8041, 0x0) mknodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x80, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) prlimit64(r2, 0x7, &(0x7f00000001c0)={0x9, 0x100}, &(0x7f0000000200)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000480)={0x10, 0x0, [{0x5, 0x0, 0x400000000000004}, {0xf, 0x0, 0x9}, {0x8, 0x0, 0x3}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x8228}, {0x1, 0x0, 0x9}, {0x8, 0x0, 0x100000001}, {0x18000, 0x0, 0x5}, {0x7fffffff, 0x0, 0xcb}, {0x3, 0x0, 0x2}, {0x100, 0x0, 0x4}, {0xf, 0x0, 0x4}, {0x3, 0x0, 0x6}, {0xff, 0x0, 0x869}, {0x81, 0x0, 0x8}, {0x4000, 0x0, 0xe9}]}) open(&(0x7f00000000c0)='./file0/file0\x00', 0xc8000, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000000180)=r1) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x8041, 0x0) (async) mknodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x80, 0x8) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) (async) prlimit64(r2, 0x7, &(0x7f00000001c0)={0x9, 0x100}, &(0x7f0000000200)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000480)={0x10, 0x0, [{0x5, 0x0, 0x400000000000004}, {0xf, 0x0, 0x9}, {0x8, 0x0, 0x3}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x8228}, {0x1, 0x0, 0x9}, {0x8, 0x0, 0x100000001}, {0x18000, 0x0, 0x5}, {0x7fffffff, 0x0, 0xcb}, {0x3, 0x0, 0x2}, {0x100, 0x0, 0x4}, {0xf, 0x0, 0x4}, {0x3, 0x0, 0x6}, {0xff, 0x0, 0x869}, {0x81, 0x0, 0x8}, {0x4000, 0x0, 0xe9}]}) (async) open(&(0x7f00000000c0)='./file0/file0\x00', 0xc8000, 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r7) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000000180)=r1) (async) 40.55594834s ago: executing program 4 (id=1494): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x4, 0x4) r1 = fcntl$getown(r0, 0x9) capget(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000000c0)={0x8, 0x4, 0x8, 0x8, 0x101, 0x401}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 40.477023451s ago: executing program 4 (id=1496): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) unshare(0x22020600) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) close(0x3) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) 4.460732882s ago: executing program 1 (id=1666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0xc1ee) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) 4.342785665s ago: executing program 1 (id=1670): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 4.332629965s ago: executing program 8 (id=1577): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0fae080f20d835200000000f22d80f01ba338100001d6b0000000fb399f03831003e0f01c50f01efc4e1d45da4a2ef5300009a006000003801b805000000b95dc500000f01c1", 0x46}], 0xaaaaaaaaaaaad23, 0x16, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076001f03000000000800000008000100ffffffff08000a"], 0x20}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.330425846s ago: executing program 7 (id=1671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x81, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa5b, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffefffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) 2.382224952s ago: executing program 1 (id=1672): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000002fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.326335764s ago: executing program 7 (id=1673): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b8081e9c8966efbafc0c66ed7ae30f01c5650f01c50f01cb65d3d4baf80c66b8243d358266efbafc0c66b8a70eb7d166ef66b80000000066ba000000000f3066b9580a000066b80700000066ba000000000f0d6c800f78e62e0f2376", 0x60}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ptrace(0x10, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x7, 0x3, 0x20004, 0xe8c0, 0x80, 0x2, 0x400, 0xb, 0x20040000004, 0x2, 0x7f, 0x40, 0x3, 0x4], 0x70000, 0x160a55}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000f4a000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b8081e9c8966efbafc0c66ed7ae30f01c5650f01c50f01cb65d3d4baf80c66b8243d358266efbafc0c66b8a70eb7d166ef66b80000000066ba000000000f3066b9580a000066b80700000066ba000000000f0d6c800f78e62e0f2376", 0x60}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ptrace(0x10, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x7, 0x3, 0x20004, 0xe8c0, 0x80, 0x2, 0x400, 0xb, 0x20040000004, 0x2, 0x7f, 0x40, 0x3, 0x4], 0x70000, 0x160a55}) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000f4a000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0) (async) 2.326062284s ago: executing program 1 (id=1674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x1010, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000080)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/81, 0x51}], 0x2}, 0x259}], 0x1, 0x10000, &(0x7f0000000740)) 2.243046116s ago: executing program 8 (id=1577): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0fae080f20d835200000000f22d80f01ba338100001d6b0000000fb399f03831003e0f01c50f01efc4e1d45da4a2ef5300009a006000003801b805000000b95dc500000f01c1", 0x46}], 0xaaaaaaaaaaaad23, 0x16, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076001f03000000000800000008000100ffffffff08000a"], 0x20}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 196.906855ms ago: executing program 0 (id=1675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000074ca00000000000000000000000000000000000000000000000000000000000000000080ffffffffffffff0000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000044c00120073657169762863636d28626c6f77666973682d61736d2929d38b7b7131770d87560000000000000000000000000000000000c6b62fe90e00000000000000000000000000400000000c0008"], 0x148}}, 0x0) 193.142085ms ago: executing program 1 (id=1676): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003580)=""/4094, 0xba8}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/63, 0x37}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000002580)=""/4065, 0xff1}, {&(0x7f0000000380)=""/109}], 0x5}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x400021c, 0x40012002, 0x0) 192.829315ms ago: executing program 7 (id=1677): ioprio_set$pid(0x2, 0x0, 0x0) fsopen(&(0x7f0000000000)='ext2\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}}, 0x0) 109.385677ms ago: executing program 0 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000001020101000000002f0000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) 109.131537ms ago: executing program 1 (id=1679): unshare(0x60000600) r0 = socket(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000004, 0x10, r3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff"], 0x610) 109.016307ms ago: executing program 7 (id=1680): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 108.917537ms ago: executing program 0 (id=1681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x81, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa5b, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffefffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) 107.398227ms ago: executing program 7 (id=1682): mkdir(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400, 0x1) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x31, 0x80d, 0x70bd29, 0x25dfdbfb}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x7, "2ed2414e6ce393"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) chdir(0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) 12.89459ms ago: executing program 7 (id=1683): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='$\x00'], 0x28}}, {{&(0x7f0000001500)={0xa, 0x4e24, 0xa, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=ANY=[], 0xf8}}], 0x2, 0x0) syz_io_uring_setup(0x3409, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) close(0x3) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) 4.92559ms ago: executing program 8 (id=1577): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0fae080f20d835200000000f22d80f01ba338100001d6b0000000fb399f03831003e0f01c50f01efc4e1d45da4a2ef5300009a006000003801b805000000b95dc500000f01c1", 0x46}], 0xaaaaaaaaaaaad23, 0x16, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076001f03000000000800000008000100ffffffff08000a"], 0x20}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=1684): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000003fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): read/64, error -71 [ 139.301806][ T311] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 139.311410][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.319164][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.326871][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.332681][ T311] usb 5-1: Invalid ep0 maxpacket: 16 [ 139.334636][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.341154][ T311] usb usb5-port1: unable to enumerate USB device [ 139.350144][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.365690][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.373459][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.381119][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.388850][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.398960][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.407754][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.421810][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.431776][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.441768][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.449413][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.461758][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.479567][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.487660][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.502436][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.510152][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.518632][ T2736] device-mapper: ioctl: name not supplied when creating device [ 139.531761][ T400] usb 2-1: device descriptor read/64, error -71 [ 139.670534][ T36] audit: type=1400 audit(1788957210.180:393): avc: denied { map } for pid=2750 comm="syz.6.752" path="socket:[18810]" dev="sockfs" ino=18810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.725360][ T2753] fuse: Bad value for 'fd' [ 139.771776][ T400] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 139.911801][ T400] usb 2-1: device descriptor read/64, error -71 [ 140.161917][ T400] usb 2-1: device descriptor read/64, error -71 [ 140.271962][ T400] usb usb2-port1: attempt power cycle [ 140.321805][ T568] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 140.481787][ T568] usb 7-1: Using ep0 maxpacket: 8 [ 140.489186][ T568] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 140.501580][ T568] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 140.510917][ T568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.519085][ T568] usb 7-1: Product: Ж [ 140.523231][ T568] usb 7-1: Manufacturer: х [ 140.527800][ T568] usb 7-1: SerialNumber: о [ 140.611826][ T400] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 140.632826][ T400] usb 2-1: device descriptor read/8, error -71 [ 140.773133][ T400] usb 2-1: device descriptor read/8, error -71 [ 140.940575][ T568] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 140.948299][ T568] usb 7-1: 1:1 : unsupported sample bitwidth 253 in 170 bytes [ 140.956267][ T568] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.967530][ T568] usb 7-1: USB disconnect, device number 9 [ 140.989546][ T36] audit: type=1400 audit(1788957211.500:394): avc: denied { mounton } for pid=2763 comm="syz.4.758" path="/150/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 141.013351][ T400] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 141.021088][ T2437] udevd[2437]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.052913][ T400] usb 2-1: device descriptor read/8, error -71 [ 141.182927][ T400] usb 2-1: device descriptor read/8, error -71 [ 141.291906][ T400] usb usb2-port1: unable to enumerate USB device [ 141.462283][ T2777] fuse: Bad value for 'fd' [ 141.509761][ T2779] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 1200 [ 141.619555][ T2788] EXT4-fs (sda1): resizing filesystem from 262144 to 1132 blocks [ 141.627574][ T2788] EXT4-fs warning (device sda1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 141.847643][ T2797] netlink: 284 bytes leftover after parsing attributes in process `syz.0.770'. [ 141.868693][ T2801] syz.1.771 uses obsolete (PF_INET,SOCK_PACKET) [ 141.898503][ T2806] fuse: Unknown parameter '0x0000000000000005' [ 142.072412][ T2820] ./dev/sda1: Can't lookup blockdev [ 142.152194][ T2834] netlink: 'syz.6.781': attribute type 9 has an invalid length. [ 142.180524][ T2840] rust_binder: 2836:2840 got transaction to invalid handle 1 [ 142.188358][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.188388][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.195208][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.206087][ T36] audit: type=1400 audit(1788957212.720:395): avc: denied { create } for pid=2819 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.212774][ T2840] rust_binder: 2836:2840 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 142.234413][ T2842] fuse: Unknown parameter '0x0000000000000005' [ 142.247616][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.247644][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.254262][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.259552][ T2843] rust_binder: 2836:2843 got transaction to invalid handle 1 [ 142.261095][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.279443][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.283617][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.284192][ T2843] rust_binder: 2836:2843 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 142.306115][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.306141][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.319921][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.321005][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.327848][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.342837][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.342870][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.350184][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.356106][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.375715][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.375740][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.383026][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.391137][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.397986][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.404537][ T46] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 142.419158][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.419182][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.426096][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.433492][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.440122][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.447035][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.455193][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.462912][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.469588][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.476668][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.483643][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.490407][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.497574][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.506326][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.513374][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.519915][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.526659][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.533341][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.540040][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.546847][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.553856][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.560430][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.567397][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.574052][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.580613][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.583735][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.588277][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.596124][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 142.605101][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.611381][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.621886][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.629112][ T46] usb 5-1: Product: syz [ 142.636177][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.643687][ T46] usb 5-1: Manufacturer: syz [ 142.647078][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.653810][ T46] usb 5-1: SerialNumber: syz [ 142.657991][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.669478][ T46] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 142.679237][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.682195][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.682791][ T46] cdc_wdm 5-1:1.0: Unknown control protocol [ 142.688961][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.688997][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.709015][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.715853][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.724702][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.731347][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.738418][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.745206][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.751848][ T311] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 142.767600][ T46] rust_binder: 2836: undelivered TRANSACTION_ERROR: 29201 [ 142.781900][ T46] rust_binder: 2836: undelivered TRANSACTION_ERROR: 29201 [ 142.881814][ T311] usb 7-1: device descriptor read/64, error -71 [ 143.061796][ T46] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 143.121840][ T311] usb 7-1: device descriptor read/64, error -71 [ 143.213116][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 143.221975][ T46] usb 2-1: config 6 has an invalid interface number: 6 but max is 0 [ 143.230033][ T46] usb 2-1: config 6 has no interface number 0 [ 143.236522][ T46] usb 2-1: config 6 interface 6 altsetting 4 endpoint 0xB has invalid maxpacket 65, setting to 64 [ 143.247556][ T46] usb 2-1: config 6 interface 6 has no altsetting 0 [ 143.255845][ T46] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 143.264960][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.273208][ T46] usb 2-1: Product: syz [ 143.277408][ T46] usb 2-1: Manufacturer: syz [ 143.282094][ T46] usb 2-1: SerialNumber: syz [ 143.287938][ T2860] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 143.338367][ T2864] fuse: Unknown parameter '0x0000000000000005' [ 143.361813][ T311] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 143.401899][ T36] audit: type=1400 audit(1788957213.920:396): avc: denied { mount } for pid=2872 comm="syz.0.795" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 143.491767][ T311] usb 7-1: device descriptor read/64, error -71 [ 143.500717][ T46] usb 2-1: Found UVC 0.00 device syz (174f:8a12) [ 143.508488][ T46] usb 2-1: No valid video chain found. [ 143.517758][ T46] usb 2-1: USB disconnect, device number 39 [ 143.731805][ T311] usb 7-1: device descriptor read/64, error -71 [ 143.841976][ T311] usb usb7-port1: attempt power cycle [ 143.962393][ T36] audit: type=1400 audit(1788957214.480:397): avc: denied { lock } for pid=2879 comm="syz.0.797" path="socket:[20263]" dev="sockfs" ino=20263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.020652][ T36] audit: type=1400 audit(1788957214.530:398): avc: denied { write } for pid=2885 comm="syz.1.799" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 144.047563][ T36] audit: type=1400 audit(1788957214.560:399): avc: denied { accept } for pid=2885 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.089216][ T2891] fuse: Unknown parameter '0x0000000000000005' [ 144.181818][ T311] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 144.202804][ T311] usb 7-1: device descriptor read/8, error -71 [ 144.333309][ T311] usb 7-1: device descriptor read/8, error -71 [ 144.571817][ T311] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 144.592905][ T311] usb 7-1: device descriptor read/8, error -71 [ 144.722980][ T311] usb 7-1: device descriptor read/8, error -71 [ 144.831875][ T311] usb usb7-port1: unable to enumerate USB device [ 145.109409][ T46] usb 5-1: USB disconnect, device number 39 [ 158.878724][ T2917] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 158.934838][ T2924] fuse: Unknown parameter '0x0000000000000005' [ 158.969561][ T2930] netlink: 'syz.0.816': attribute type 8 has an invalid length. [ 159.201779][ T311] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 159.205793][ T2947] fuse: Unknown parameter '0x0000000000000005' [ 159.216057][ T31] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 159.234024][ T2949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 159.286250][ T2951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 159.352988][ T311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.365713][ T311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 159.373999][ T31] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.375866][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.386881][ T31] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.395669][ T311] usb 5-1: Product: syz [ 159.409598][ T311] usb 5-1: Manufacturer: syz [ 159.410480][ T36] audit: type=1326 audit(1788957229.930:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.0.827" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b7759e159 code=0x0 [ 159.415022][ T311] usb 5-1: SerialNumber: syz [ 159.439116][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.450884][ T31] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 159.460352][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.462002][ T311] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 159.470993][ T31] usb 7-1: config 0 descriptor?? [ 159.484669][ T311] cdc_wdm 5-1:1.0: Unknown control protocol [ 159.644037][ T2963] FAULT_INJECTION: forcing a failure. [ 159.644037][ T2963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.661073][ T2963] CPU: 0 UID: 0 PID: 2963 Comm: syz.1.828 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 159.661113][ T2963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.661128][ T2963] Call Trace: [ 159.661136][ T2963] [ 159.661146][ T2963] __dump_stack+0x21/0x30 [ 159.661198][ T2963] dump_stack_lvl+0x140/0x1c0 [ 159.661228][ T2963] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.661257][ T2963] ? _parse_integer+0x2e/0x40 [ 159.661281][ T2963] ? kstrtoull+0x13b/0x1e0 [ 159.661304][ T2963] dump_stack+0x19/0x20 [ 159.661334][ T2963] should_fail_ex+0x3c2/0x510 [ 159.661361][ T2963] should_fail+0xf/0x20 [ 159.661383][ T2963] should_fail_usercopy+0x1e/0x30 [ 159.661410][ T2963] _copy_from_user+0x20/0xa0 [ 159.661440][ T2963] ___sys_sendmsg+0x1c7/0x370 [ 159.661474][ T2963] ? __sys_sendmsg+0x260/0x260 [ 159.661502][ T2963] ? proc_fail_nth_write+0x184/0x220 [ 159.661541][ T2963] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 159.661577][ T2963] ? __fget_files+0x2bc/0x330 [ 159.661606][ T2963] __x64_sys_sendmsg+0x1be/0x2a0 [ 159.661635][ T2963] ? fput+0x1a4/0x230 [ 159.661664][ T2963] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 159.661698][ T2963] ? ksys_write+0x1f3/0x260 [ 159.661724][ T2963] ? __kasan_check_read+0x15/0x20 [ 159.661751][ T2963] x64_sys_call+0x2a4c/0x2ee0 [ 159.661771][ T2963] do_syscall_64+0x57/0xf0 [ 159.661792][ T2963] ? clear_bhb_loop+0x50/0xa0 [ 159.661821][ T2963] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.661845][ T2963] RIP: 0033:0x7f22afd9e159 [ 159.661864][ T2963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.661883][ T2963] RSP: 002b:00007f22b0ca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.661907][ T2963] RAX: ffffffffffffffda RBX: 00007f22b0025fa0 RCX: 00007f22afd9e159 [ 159.661923][ T2963] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 159.661938][ T2963] RBP: 00007f22b0ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 159.661952][ T2963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.661966][ T2963] R13: 00007f22b0026038 R14: 00007f22b0025fa0 R15: 00007ffcbc796db8 [ 159.661984][ T2963] [ 160.200824][ T2973] fuse: Unknown parameter 'fd0x0000000000000005' [ 160.265030][ T2979] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.407195][ T36] audit: type=1400 audit(1788957230.920:401): avc: denied { mounton } for pid=2984 comm="syz.1.837" path="/sys/dev" dev="proc" ino=19222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_dev_t tclass=dir permissive=1 [ 160.445588][ T2987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 160.455876][ T2987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 160.711785][ T400] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 160.814570][ T2995] fuse: Unknown parameter 'fd0x0000000000000005' [ 160.881810][ T400] usb 2-1: Using ep0 maxpacket: 32 [ 160.888407][ T400] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 160.900330][ T400] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 160.913895][ T400] usb 2-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 160.923189][ T36] audit: type=1400 audit(1788957231.430:402): avc: denied { execute } for pid=3004 comm="syz.0.846" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.944392][ T400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.952756][ T400] usb 2-1: Product: syz [ 160.957263][ T36] audit: type=1400 audit(1788957231.430:403): avc: denied { execute_no_trans } for pid=3004 comm="syz.0.846" path=2F6D656D66643A5B79FF7FB80BDB58AE5B35A990FF631F1AA9FDFAADD16D137DE1DF346621D564E7E2809F70B810F3B6FF54BFD1C88508202864656C6574656429 dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.991279][ T400] usb 2-1: Manufacturer: syz [ 160.995954][ T400] usb 2-1: SerialNumber: syz [ 161.034639][ T3014] batadv_slave_0: entered promiscuous mode [ 161.043957][ T3013] batadv_slave_0: left promiscuous mode [ 161.203428][ T2987] input: syz1 as /devices/virtual/input/input17 [ 161.214142][ T400] usb 2-1: unit 5 not found! [ 161.230299][ T400] usb 2-1: USB disconnect, device number 40 [ 161.243059][ T2988] udevd[2988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.575908][ T3017] fuse: Unknown parameter 'fd0x0000000000000005' [ 161.674196][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 161.750723][ T36] audit: type=1400 audit(1788957232.260:404): avc: denied { connect } for pid=3037 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.771089][ T36] audit: type=1400 audit(1788957232.280:405): avc: denied { bind } for pid=3037 comm="syz.0.862" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.797234][ T36] audit: type=1400 audit(1788957232.280:406): avc: denied { name_bind } for pid=3037 comm="syz.0.862" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 161.818729][ T36] audit: type=1400 audit(1788957232.290:407): avc: denied { node_bind } for pid=3037 comm="syz.0.862" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 161.858931][ T36] audit: type=1400 audit(1788957232.370:408): avc: denied { create } for pid=3045 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.882141][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 161.896179][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 161.904290][ T36] audit: type=1400 audit(1788957232.400:409): avc: denied { execmem } for pid=3045 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 161.920940][ T31] usb 7-1: USB disconnect, device number 14 [ 161.944100][ T568] usb 5-1: USB disconnect, device number 40 [ 162.131758][ T3066] netlink: 3 bytes leftover after parsing attributes in process `syz.4.873'. [ 162.411798][ T568] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 162.441811][ T311] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 162.541770][ T568] usb 7-1: device descriptor read/64, error -71 [ 162.611852][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.624529][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 162.633782][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.641972][ T311] usb 2-1: Product: syz [ 162.646494][ T311] usb 2-1: Manufacturer: syz [ 162.651379][ T311] usb 2-1: SerialNumber: syz [ 162.659875][ T311] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 162.665901][ T311] cdc_wdm 2-1:1.0: Unknown control protocol [ 162.697094][ T3106] netlink: 580 bytes leftover after parsing attributes in process `syz.0.889'. [ 162.801772][ T568] usb 7-1: device descriptor read/64, error -71 [ 162.818114][ T3122] ./dev/sda1: Can't lookup blockdev [ 163.209451][ T568] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 163.341763][ T568] usb 7-1: device descriptor read/64, error -71 [ 163.581883][ T568] usb 7-1: device descriptor read/64, error -71 [ 163.691936][ T568] usb usb7-port1: attempt power cycle [ 163.701867][ T311] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 163.841926][ T3166] netlink: 100 bytes leftover after parsing attributes in process `syz.0.914'. [ 163.853279][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.864403][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.874238][ T311] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.883366][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.892241][ T311] usb 5-1: config 0 descriptor?? [ 164.031770][ T568] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 164.052861][ T568] usb 7-1: device descriptor read/8, error -71 [ 164.098999][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.107729][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.182902][ T568] usb 7-1: device descriptor read/8, error -71 [ 164.368787][ T3168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 164.379395][ T3168] netlink: 'syz.0.915': attribute type 4 has an invalid length. [ 164.421805][ T568] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 164.448658][ T568] usb 7-1: device descriptor read/8, error -71 [ 164.517372][ T311] usb 5-1: string descriptor 0 read error: -22 [ 164.582883][ T568] usb 7-1: device descriptor read/8, error -71 [ 164.691886][ T568] usb usb7-port1: unable to enumerate USB device [ 164.722051][ T311] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input18 [ 164.738416][ T311] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input19 [ 164.759152][ T311] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input20 [ 164.801398][ T311] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input21 [ 164.827127][ T311] uclogic 0003:256C:006D.0011: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 164.920260][ T311] usb 5-1: USB disconnect, device number 41 [ 165.156484][ T10] usb 2-1: USB disconnect, device number 41 [ 165.763040][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 165.763060][ T36] audit: type=1400 audit(1788957236.280:418): avc: denied { ioctl } for pid=3253 comm="syz.6.947" path="socket:[21901]" dev="sockfs" ino=21901 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.796113][ T36] audit: type=1400 audit(1788957236.280:419): avc: denied { getopt } for pid=3253 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.817349][ T36] audit: type=1400 audit(1788957236.280:420): avc: denied { create } for pid=3253 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 165.838066][ T36] audit: type=1400 audit(1788957236.330:421): avc: denied { write } for pid=3253 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 165.921765][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 165.939674][ T3263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.951'. [ 166.082876][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.096151][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 166.105611][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.126139][ T10] usb 5-1: Product: syz [ 166.130378][ T10] usb 5-1: Manufacturer: syz [ 166.137181][ T10] usb 5-1: SerialNumber: syz [ 166.144226][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 166.158770][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 166.471793][ T568] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 166.621861][ T568] usb 7-1: Using ep0 maxpacket: 16 [ 166.628798][ T568] usb 7-1: unable to get BOS descriptor or descriptor too short [ 166.637483][ T568] usb 7-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 166.648029][ T568] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.661133][ T568] usb 7-1: config 1 interface 0 has no altsetting 0 [ 166.669514][ T568] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.678778][ T568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.687001][ T568] usb 7-1: Product: syz [ 166.691221][ T568] usb 7-1: Manufacturer: syz [ 166.696001][ T568] usb 7-1: SerialNumber: syz [ 167.351978][ T3330] EXT4-fs warning (device sda1): ext4_resize_fs:2019: can't read last block, resize aborted [ 167.439959][ T568] cdc_ether 7-1:1.0: skipping garbage [ 167.453381][ T568] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 167.474367][ T568] usb 7-1: USB disconnect, device number 19 [ 167.533058][ T36] audit: type=1400 audit(1788957238.040:422): avc: denied { getopt } for pid=3342 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.811906][ T568] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 167.961786][ T568] usb 7-1: Using ep0 maxpacket: 16 [ 167.968754][ T568] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 167.977796][ T568] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.988911][ T568] usb 7-1: config 0 has no interface number 0 [ 167.995771][ T568] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 168.006594][ T568] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 168.017161][ T568] usb 7-1: config 0 interface 98 has no altsetting 0 [ 168.026456][ T568] usb 7-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 168.036333][ T568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.044808][ T568] usb 7-1: Product: syz [ 168.049599][ T568] usb 7-1: Manufacturer: syz [ 168.054930][ T568] usb 7-1: SerialNumber: syz [ 168.063465][ T568] usb 7-1: config 0 descriptor?? [ 168.070669][ T3336] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 168.078368][ T3336] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 168.287113][ T3336] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 168.294735][ T3336] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 168.631151][ T10] usb 5-1: USB disconnect, device number 42 [ 169.019132][ T568] asix 7-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 169.034105][ T568] asix 7-1:0.98: probe with driver asix failed with error -71 [ 169.055492][ T568] usb 7-1: USB disconnect, device number 20 [ 169.066093][ T36] audit: type=1326 audit(1788957239.580:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.4.986" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a7419e159 code=0x0 [ 171.087021][ T36] audit: type=1400 audit(1788957241.600:424): avc: denied { accept } for pid=3420 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 171.601221][ T3445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.615268][ T3448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.629988][ T3445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.639103][ T3448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.771769][ T31] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 171.932861][ T31] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 171.941669][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 171.973784][ T31] usb 2-1: string descriptor 0 read error: -22 [ 171.980295][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.001737][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.021436][ T3444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.029955][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 172.230835][ T3444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.252026][ T3444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.266948][ T3444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.287322][ T3444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.299525][ T3444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.309040][ T3444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.379819][ T46] usb 2-1: USB disconnect, device number 42 [ 172.531887][ T31] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 172.681816][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 172.688620][ T31] usb 5-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 172.699890][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.708542][ T31] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 172.717958][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.726278][ T31] usb 5-1: Product: syz [ 172.731019][ T31] usb 5-1: Manufacturer: syz [ 172.735987][ T31] usb 5-1: SerialNumber: syz [ 172.746602][ T31] usb 5-1: config 0 descriptor?? [ 172.959888][ T31] usb 5-1: USB disconnect, device number 43 [ 173.241846][ T46] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 173.393172][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.406106][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 173.415699][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.425241][ T31] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 173.433113][ T46] usb 2-1: Product: syz [ 173.437362][ T46] usb 2-1: Manufacturer: syz [ 173.444729][ T46] usb 2-1: SerialNumber: syz [ 173.453998][ T46] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 173.460917][ T46] cdc_wdm 2-1:1.0: Unknown control protocol [ 173.593065][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 173.602106][ T31] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 173.611262][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 173.622139][ T31] usb 5-1: config 220 has no interface number 2 [ 173.628652][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 173.642795][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 173.649726][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 173.659924][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 173.668957][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 173.688052][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.703612][ T31] usb 5-1: Product: syz [ 173.708072][ T31] usb 5-1: Manufacturer: syz [ 173.713139][ T31] usb 5-1: SerialNumber: syz [ 173.930732][ T31] usb 5-1: selecting invalid altsetting 0 [ 173.936958][ T31] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 173.944395][ T31] usb 5-1: No valid video chain found. [ 173.957163][ T31] usb 5-1: USB disconnect, device number 44 [ 174.482322][ T3518] netlink: 'syz.0.1046': attribute type 15 has an invalid length. [ 174.499764][ T3518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 174.831735][ T31] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 174.886644][ T36] audit: type=1400 audit(1788957245.400:425): avc: denied { ioctl } for pid=3546 comm="syz.0.1058" path="socket:[25501]" dev="sockfs" ino=25501 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.938964][ T36] audit: type=1400 audit(1788957245.450:426): avc: denied { create } for pid=3550 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.991751][ T31] usb 5-1: device descriptor read/64, error -71 [ 175.181315][ T3559] overlayfs: failed to clone lowerpath [ 175.251744][ T31] usb 5-1: device descriptor read/64, error -71 [ 175.436081][ T3572] overlayfs: failed to clone upperpath [ 175.511788][ T31] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 175.652226][ T31] usb 5-1: device descriptor read/64, error -71 [ 175.891804][ T31] usb 5-1: device descriptor read/64, error -71 [ 175.958791][ T46] usb 2-1: USB disconnect, device number 43 [ 176.002023][ T31] usb usb5-port1: attempt power cycle [ 176.325731][ T36] audit: type=1400 audit(1788957246.840:427): avc: denied { setopt } for pid=3598 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.351794][ T31] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 176.393040][ T31] usb 5-1: device descriptor read/8, error -71 [ 176.522805][ T31] usb 5-1: device descriptor read/8, error -71 [ 176.624896][ T3614] netlink: 'syz.1.1087': attribute type 4 has an invalid length. [ 176.635248][ T3614] netlink: 'syz.1.1087': attribute type 4 has an invalid length. [ 176.655250][ T3614] netlink: 'syz.1.1087': attribute type 4 has an invalid length. [ 176.672619][ T3617] netlink: 'syz.1.1087': attribute type 4 has an invalid length. [ 176.787695][ T31] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 176.827168][ T31] usb 5-1: device descriptor read/8, error -71 [ 176.962876][ T31] usb 5-1: device descriptor read/8, error -71 [ 177.081932][ T31] usb usb5-port1: unable to enumerate USB device [ 177.620287][ T3628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 177.631809][ T3628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1091'. [ 178.041775][ T31] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 178.068020][ T36] audit: type=1400 audit(1788957248.580:428): avc: denied { mounton } for pid=3645 comm="syz.1.1099" path="/240/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 178.102182][ T36] audit: type=1400 audit(1788957248.610:429): avc: denied { create } for pid=3645 comm="syz.1.1099" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.134004][ T36] audit: type=1400 audit(1788957248.610:430): avc: denied { write } for pid=3645 comm="syz.1.1099" name="file0" dev="tmpfs" ino=1398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.156870][ T36] audit: type=1400 audit(1788957248.610:431): avc: denied { open } for pid=3645 comm="syz.1.1099" path="/240/file0" dev="tmpfs" ino=1398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.180076][ T36] audit: type=1400 audit(1788957248.610:432): avc: denied { cmd } for pid=3645 comm="syz.1.1099" path="/240/file0" dev="tmpfs" ino=1398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 178.222873][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.234328][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.252206][ T31] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.271730][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.278440][ T31] usb 5-1: New USB device found, idVendor=854c, idProduct=0768, bcdDevice= 0.00 [ 178.296238][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.336545][ T31] usb 5-1: config 0 descriptor?? [ 178.753658][ T31] hid-generic 0003:854C:0768.0012: hidraw1: USB HID v0.00 Device [HID 854c:0768] on usb-dummy_hcd.4-1/input0 [ 178.957601][ T3638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.972254][ T3638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.990978][ T2083] usb 5-1: USB disconnect, device number 49 [ 179.313664][ T36] audit: type=1326 audit(1788957249.830:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3667 comm="syz.1.1106" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22afd9e159 code=0x0 [ 179.684963][ T3681] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1111'. [ 180.511762][ T2083] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 180.662922][ T2083] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.677015][ T2083] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 180.689931][ T2083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.708352][ T2083] usb 2-1: Product: syz [ 180.715926][ T2083] usb 2-1: Manufacturer: syz [ 180.726215][ T2083] usb 2-1: SerialNumber: syz [ 180.741155][ T2083] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 180.754403][ T2083] cdc_wdm 2-1:1.0: Unknown control protocol [ 180.780036][ T3711] netlink: 'syz.0.1123': attribute type 32 has an invalid length. [ 180.842800][ T36] audit: type=1400 audit(1788957251.350:434): avc: denied { mounton } for pid=3716 comm="syz.4.1126" path="/proc/587/task" dev="proc" ino=28282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 181.036309][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 181.121773][ T568] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 181.261773][ T568] usb 5-1: device descriptor read/64, error -71 [ 181.511771][ T568] usb 5-1: device descriptor read/64, error -71 [ 181.692709][ T36] audit: type=1326 audit(1788957252.210:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.0.1137" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b7759e159 code=0x0 [ 181.751763][ T568] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 181.891756][ T568] usb 5-1: device descriptor read/64, error -71 [ 182.131769][ T568] usb 5-1: device descriptor read/64, error -71 [ 182.251741][ T568] usb usb5-port1: attempt power cycle [ 182.591763][ T568] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 182.622786][ T568] usb 5-1: device descriptor read/8, error -71 [ 182.752809][ T568] usb 5-1: device descriptor read/8, error -71 [ 183.011771][ T568] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 183.033241][ T568] usb 5-1: device descriptor read/8, error -71 [ 183.172929][ T568] usb 5-1: device descriptor read/8, error -71 [ 183.238895][ T311] usb 2-1: USB disconnect, device number 44 [ 183.282973][ T568] usb usb5-port1: unable to enumerate USB device [ 183.321732][ T36] audit: type=1400 audit(1788957253.830:436): avc: denied { remount } for pid=3765 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.323638][ T3771] tmpfs: Unknown parameter 'nr_inode' [ 183.347231][ T3771] tmpfs: Unknown parameter 'nr_inode' [ 183.353145][ T3771] tmpfs: Unknown parameter 'nr_inode' [ 183.358906][ T3771] tmpfs: Unknown parameter 'nr_inode' [ 184.124783][ T3806] loop9: detected capacity change from 0 to 7 [ 184.148578][ T3805] can0: slcan on ttynull. [ 184.153082][ T36] audit: type=1400 audit(1788957254.660:437): avc: denied { write } for pid=3804 comm="syz.4.1158" name="file0" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.177913][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.188649][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.197882][ C1] buffer_io_error: 10 callbacks suppressed [ 184.197904][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.302487][ T3807] loop9: detected capacity change from 7 to 0 [ 184.327411][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.336749][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.344738][ T3806] loop9: unable to read partition table [ 184.361812][ T3806] loop9: partition table beyond EOD, truncated [ 184.368911][ T3806] loop_reread_partitions: partition scan of loop9 (XV3g$r+t dԫ9$BSW?DF,CdȊ΄g)+Gzm) failed (rc=-5) [ 184.386108][ T844] bridge_slave_1: left allmulticast mode [ 184.393867][ T844] bridge_slave_1: left promiscuous mode [ 184.406635][ T844] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.415787][ T844] bridge_slave_0: left allmulticast mode [ 184.434696][ T844] bridge_slave_0: left promiscuous mode [ 184.448926][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.638423][ T844] veth1_macvtap: left promiscuous mode [ 184.644306][ T844] veth0_vlan: left promiscuous mode [ 184.653119][ T3808] can0 (unregistered): slcan off ttynull. [ 184.798078][ T36] audit: type=1400 audit(1788957255.310:438): avc: denied { read } for pid=3840 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.818997][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.826292][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.833891][ T3817] bridge_slave_0: entered allmulticast mode [ 184.841227][ T3817] bridge_slave_0: entered promiscuous mode [ 184.858808][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.873129][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.881299][ T3817] bridge_slave_1: entered allmulticast mode [ 184.892987][ T3817] bridge_slave_1: entered promiscuous mode [ 184.969920][ T36] audit: type=1400 audit(1788957255.480:439): avc: denied { write } for pid=3854 comm="syz.1.1164" laddr=fe80::12 lport=2 faddr=fe80::bb fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.019219][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.026418][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.033798][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.040879][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.099921][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.108814][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.119694][ T850] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.126849][ T850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.138337][ T845] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.145699][ T845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.191151][ T3817] veth0_vlan: entered promiscuous mode [ 185.206937][ T3817] veth1_macvtap: entered promiscuous mode [ 185.494058][ T3883] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1172'. [ 186.211803][ T2083] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 186.251904][ T311] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 186.361813][ T2083] usb 5-1: Using ep0 maxpacket: 16 [ 186.368437][ T2083] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 186.376793][ T2083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.387451][ T2083] usb 5-1: config 0 has no interface number 0 [ 186.393789][ T2083] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 186.404195][ T2083] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.414499][ T2083] usb 5-1: config 0 interface 98 has no altsetting 0 [ 186.423289][ T2083] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 186.432847][ T2083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.440881][ T2083] usb 5-1: Product: syz [ 186.445181][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.456279][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.466161][ T2083] usb 5-1: Manufacturer: syz [ 186.470829][ T2083] usb 5-1: SerialNumber: syz [ 186.475521][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.489062][ T311] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.498508][ T2083] usb 5-1: config 0 descriptor?? [ 186.504343][ T3888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.504370][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.515932][ T3888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.528372][ T311] usb 2-1: config 0 descriptor?? [ 186.562014][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 186.711762][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 186.718382][ T10] usb 8-1: config 0 has an invalid interface number: 98 but max is 0 [ 186.727678][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.735848][ T3888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.738814][ T10] usb 8-1: config 0 has no interface number 0 [ 186.750952][ T3888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.752669][ T10] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 186.769707][ T10] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.780035][ T10] usb 8-1: config 0 interface 98 has no altsetting 0 [ 186.788462][ T10] usb 8-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 186.797632][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.805790][ T10] usb 8-1: Product: syz [ 186.810141][ T10] usb 8-1: Manufacturer: syz [ 186.814850][ T10] usb 8-1: SerialNumber: syz [ 186.820660][ T10] usb 8-1: config 0 descriptor?? [ 186.826162][ T3900] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 186.833612][ T3900] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 186.956418][ T311] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 186.971942][ T311] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 187.041872][ T3900] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 187.049278][ T3900] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 187.185678][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.194369][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.257878][ T10] asix 8-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 187.270479][ T10] asix 8-1:0.98: probe with driver asix failed with error -71 [ 187.278424][ T3914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.287931][ T10] usb 8-1: USB disconnect, device number 2 [ 187.292311][ T3914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.807079][ T3888] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 187.818977][ T3888] overlayfs: missing 'lowerdir' [ 187.825799][ T2083] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 187.836251][ T2083] asix 5-1:0.98: probe with driver asix failed with error -71 [ 187.845687][ T2083] usb 5-1: USB disconnect, device number 54 [ 188.006046][ T3936] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1195'. [ 188.070647][ T36] audit: type=1400 audit(1788957258.580:440): avc: denied { create } for pid=3935 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.091782][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 188.253093][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.266129][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 188.275514][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.283952][ T10] usb 8-1: Product: syz [ 188.288151][ T10] usb 8-1: Manufacturer: syz [ 188.292825][ T10] usb 8-1: SerialNumber: syz [ 188.300011][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 188.306157][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 188.651814][ T568] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 188.803372][ T568] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 188.821730][ T568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.836493][ T568] usb 5-1: config 0 descriptor?? [ 189.032474][ T31] usb 2-1: USB disconnect, device number 45 [ 190.818371][ T2083] usb 8-1: USB disconnect, device number 3 [ 191.131827][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 191.161775][ T2083] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 191.283110][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.295987][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 191.305289][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.313446][ T31] usb 2-1: Product: syz [ 191.317830][ T31] usb 2-1: Manufacturer: syz [ 191.321867][ T2083] usb 8-1: Using ep0 maxpacket: 16 [ 191.322507][ T31] usb 2-1: SerialNumber: syz [ 191.333888][ T2083] usb 8-1: config 0 has an invalid interface number: 98 but max is 0 [ 191.336523][ T31] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 191.342254][ T2083] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.351979][ T31] cdc_wdm 2-1:1.0: Unknown control protocol [ 191.358889][ T2083] usb 8-1: config 0 has no interface number 0 [ 191.370953][ T2083] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 191.381050][ T2083] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.391188][ T2083] usb 8-1: config 0 interface 98 has no altsetting 0 [ 191.399857][ T2083] usb 8-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 191.418420][ T568] usb 5-1: Cannot set autoneg [ 191.425913][ T2083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.432219][ T568] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 191.435454][ T2083] usb 8-1: Product: syz [ 191.450663][ T568] usb 5-1: USB disconnect, device number 55 [ 191.451448][ T2083] usb 8-1: Manufacturer: syz [ 191.467899][ T2083] usb 8-1: SerialNumber: syz [ 191.473592][ T2083] usb 8-1: config 0 descriptor?? [ 191.479032][ T3978] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.486575][ T3978] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.581519][ T36] audit: type=1400 audit(1788957262.090:441): avc: denied { create } for pid=3983 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 191.698466][ T36] audit: type=1400 audit(1788957262.210:442): avc: denied { ioctl } for pid=3977 comm="syz.7.1205" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.698496][ T3978] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.698622][ T3978] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 192.145502][ T36] audit: type=1400 audit(1788957262.660:443): avc: denied { read write } for pid=3977 comm="syz.7.1205" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.170211][ T3978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.178897][ T3978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.188817][ T36] audit: type=1400 audit(1788957262.680:444): avc: denied { open } for pid=3977 comm="syz.7.1205" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.241543][ T4001] fuse: Bad value for 'fd' [ 192.248114][ T4001] fuse: Bad value for 'fd' [ 192.299752][ T4009] fuse: Bad value for 'group_id' [ 192.304926][ T4009] fuse: Bad value for 'group_id' [ 192.816504][ T3978] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 192.841550][ T3978] overlayfs: missing 'lowerdir' [ 192.855588][ T2083] asix 8-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 192.875272][ T2083] asix 8-1:0.98: probe with driver asix failed with error -71 [ 192.893550][ T2083] usb 8-1: USB disconnect, device number 4 [ 193.440574][ T4027] Falling back ldisc for ttyS3. [ 193.493778][ T4031] fuse: Unknown parameter '' [ 193.538894][ T4033] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 193.547781][ T36] audit: type=1400 audit(1788957264.050:445): avc: denied { remount } for pid=4032 comm="syz.4.1228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 193.644296][ T36] audit: type=1400 audit(1788957264.160:446): avc: denied { read write } for pid=4034 comm="syz.4.1229" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 193.665696][ T36] audit: type=1400 audit(1788957264.160:447): avc: denied { open } for pid=4034 comm="syz.4.1229" path="/245/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 193.688324][ T36] audit: type=1400 audit(1788957264.160:448): avc: denied { mounton } for pid=4034 comm="syz.4.1229" path="/245/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 193.852646][ T568] usb 2-1: USB disconnect, device number 46 [ 195.078767][ T4059] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1237'. [ 195.082291][ T4055] SELinux: ebitmap: truncated map [ 195.114563][ T4055] SELinux: failed to load policy [ 195.162305][ T4063] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1236'. [ 195.441756][ T2083] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 195.613076][ T2083] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.629569][ T4076] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 195.634360][ T2083] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 195.651284][ T2083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.655255][ T4076] overlayfs: missing 'lowerdir' [ 195.664671][ T2083] usb 5-1: Product: syz [ 195.664753][ T2083] usb 5-1: Manufacturer: syz [ 195.681780][ T2083] usb 5-1: SerialNumber: syz [ 195.697812][ T2083] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 195.708803][ T2083] cdc_wdm 5-1:1.0: Unknown control protocol [ 196.140312][ T4089] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1248'. [ 196.171734][ T36] audit: type=1400 audit(1788957266.680:449): avc: denied { setopt } for pid=4092 comm="syz.1.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.179460][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 196.223577][ T36] audit: type=1400 audit(1788957266.740:450): avc: denied { map } for pid=4094 comm="syz.7.1251" path="socket:[30271]" dev="sockfs" ino=30271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 196.259712][ T4095] netlink: 182 bytes leftover after parsing attributes in process `syz.7.1251'. [ 196.364391][ T4113] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12307 sclass=netlink_xfrm_socket pid=4113 comm=syz.0.1259 [ 196.484135][ T4125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9006 sclass=netlink_route_socket pid=4125 comm=syz.0.1263 [ 196.962148][ T4137] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 197.003625][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 197.076638][ T36] audit: type=1400 audit(1788957267.590:451): avc: denied { map } for pid=4147 comm="syz.1.1269" path="socket:[31575]" dev="sockfs" ino=31575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.181941][ T4160] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 197.189878][ T4160] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1275'. [ 197.234366][ T4162] 9pnet_fd: Insufficient options for proto=fd [ 197.242891][ T36] audit: type=1400 audit(1788957267.760:452): avc: denied { accept } for pid=4161 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.310134][ T4169] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1278'. [ 197.631777][ T568] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 197.631777][ T2083] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 197.783404][ T568] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.792194][ T568] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.802168][ T2083] usb 8-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 197.802758][ T568] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.821002][ T2083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.829615][ T2083] usb 8-1: Product: syz [ 197.830446][ T568] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 197.833967][ T2083] usb 8-1: Manufacturer: syz [ 197.833989][ T2083] usb 8-1: SerialNumber: syz [ 197.852653][ T568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.860791][ T568] usb 2-1: Product: syz [ 197.865290][ T568] usb 2-1: Manufacturer: syz [ 197.869947][ T568] usb 2-1: SerialNumber: syz [ 198.054149][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.062930][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.073607][ T2083] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 198.082851][ T568] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 198.100051][ T2083] usb 8-1: USB disconnect, device number 5 [ 198.112194][ T568] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 198.124398][ T568] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 198.143517][ T568] usb 2-1: USB disconnect, device number 47 [ 198.157167][ T3332] udevd[3332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.175591][ T10] usb 5-1: USB disconnect, device number 56 [ 198.561753][ T10] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 198.574759][ T36] audit: type=1400 audit(1788957269.090:453): avc: denied { getopt } for pid=4197 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.601775][ T36] audit: type=1400 audit(1788957269.120:454): avc: denied { accept } for pid=4197 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.682177][ T4205] mmap: syz.1.1292 (4205) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.694371][ T10] usb 5-1: device descriptor read/64, error -71 [ 198.714169][ T36] audit: type=1326 audit(1788957269.230:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4204 comm="syz.1.1292" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22afd9e159 code=0x0 [ 198.941814][ T10] usb 5-1: device descriptor read/64, error -71 [ 199.181772][ T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 199.271776][ T568] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 199.311853][ T10] usb 5-1: device descriptor read/64, error -71 [ 199.432935][ T568] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.447576][ T568] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 199.457296][ T568] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.465550][ T568] usb 8-1: Product: syz [ 199.469775][ T568] usb 8-1: Manufacturer: syz [ 199.474636][ T568] usb 8-1: SerialNumber: syz [ 199.485857][ T568] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 199.493163][ T568] cdc_wdm 8-1:1.0: Unknown control protocol [ 199.554577][ T10] usb 5-1: device descriptor read/64, error -71 [ 199.671936][ T10] usb usb5-port1: attempt power cycle [ 200.021767][ T10] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 200.052845][ T10] usb 5-1: device descriptor read/8, error -71 [ 200.182917][ T10] usb 5-1: device descriptor read/8, error -71 [ 200.421781][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 200.457081][ T10] usb 5-1: device descriptor read/8, error -71 [ 200.504912][ T4266] netlink: 'syz.0.1315': attribute type 4 has an invalid length. [ 200.592856][ T10] usb 5-1: device descriptor read/8, error -71 [ 200.593377][ T4272] ./dev/sda1: Can't lookup blockdev [ 200.657638][ T4278] FAULT_INJECTION: forcing a failure. [ 200.657638][ T4278] name failslab, interval 1, probability 0, space 0, times 0 [ 200.670433][ T4278] CPU: 0 UID: 0 PID: 4278 Comm: syz.1.1321 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 200.670561][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.670580][ T4278] Call Trace: [ 200.670591][ T4278] [ 200.670603][ T4278] __dump_stack+0x21/0x30 [ 200.670654][ T4278] dump_stack_lvl+0x140/0x1c0 [ 200.670688][ T4278] ? __cfi_dump_stack_lvl+0x10/0x10 [ 200.670723][ T4278] ? mutex_unlock+0x90/0x240 [ 200.670760][ T4278] ? pcpu_alloc_noprof+0x1440/0x1440 [ 200.670795][ T4278] dump_stack+0x19/0x20 [ 200.670831][ T4278] should_fail_ex+0x3c2/0x510 [ 200.670864][ T4278] should_failslab+0xac/0x100 [ 200.670898][ T4278] __kmalloc_cache_noprof+0x41/0x470 [ 200.670927][ T4278] ? percpu_ref_init+0xe3/0x4d0 [ 200.670960][ T4278] percpu_ref_init+0xe3/0x4d0 [ 200.670991][ T4278] ? __cfi_free_ioctx_users+0x10/0x10 [ 200.671027][ T4278] ioctx_alloc+0x22f/0x840 [ 200.671060][ T4278] __se_sys_io_setup+0x6f/0x230 [ 200.671090][ T4278] __x64_sys_io_setup+0x5f/0x80 [ 200.671120][ T4278] x64_sys_call+0x26a4/0x2ee0 [ 200.671144][ T4278] do_syscall_64+0x57/0xf0 [ 200.671166][ T4278] ? clear_bhb_loop+0x50/0xa0 [ 200.671197][ T4278] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 200.671227][ T4278] RIP: 0033:0x7f22afd9e159 [ 200.671250][ T4278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.671272][ T4278] RSP: 002b:00007f22b0ca1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 200.671301][ T4278] RAX: ffffffffffffffda RBX: 00007f22b0025fa0 RCX: 00007f22afd9e159 [ 200.671321][ T4278] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000007fff [ 200.671340][ T4278] RBP: 00007f22afe3503b R08: 0000000000000000 R09: 0000000000000000 [ 200.671358][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.671374][ T4278] R13: 00007f22b0026038 R14: 00007f22b0025fa0 R15: 00007ffcbc796db8 [ 200.671398][ T4278] [ 200.869740][ T10] usb usb5-port1: unable to enumerate USB device [ 200.884136][ T36] audit: type=1400 audit(1788957271.400:456): avc: denied { accept } for pid=4277 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 200.922621][ T4285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 201.657181][ T4327] 9pnet_fd: Insufficient options for proto=fd [ 201.791810][ T46] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 201.906179][ T4336] overlayfs: failed to resolve '/H': -2 [ 201.941816][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 201.948639][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.960165][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.970198][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 201.979528][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.997084][ T568] usb 8-1: USB disconnect, device number 6 [ 202.010371][ T46] usb 5-1: config 0 descriptor?? [ 202.429551][ T4367] kvm: kvm [4366]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 202.439163][ T4367] kvm: kvm [4366]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 202.441144][ T4317] binder: Unknown parameter 'defcontext01777777777777777777777' [ 202.468042][ T4373] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 202.478205][ T46] apple 0003:05AC:024B.0014: unknown global tag 0xe [ 202.487902][ T46] apple 0003:05AC:024B.0014: item 0 1 1 14 parsing failed [ 202.502864][ T46] apple 0003:05AC:024B.0014: parse failed [ 202.509042][ T46] apple 0003:05AC:024B.0014: probe with driver apple failed with error -22 [ 202.651763][ T311] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 202.687224][ T10] usb 5-1: USB disconnect, device number 61 [ 202.763807][ T36] audit: type=1400 audit(1788957273.280:457): avc: denied { mounton } for pid=4386 comm="syz.1.1361" path="/314/file0" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 202.763865][ T4392] overlay: ./file0 is not a directory [ 202.794534][ T4389] KVM: debugfs: duplicate directory 4389-18 [ 202.812907][ T311] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.834081][ T311] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 202.855002][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.864279][ T311] usb 8-1: Product: syz [ 202.868501][ T311] usb 8-1: Manufacturer: syz [ 202.876066][ T311] usb 8-1: SerialNumber: syz [ 202.893181][ T311] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 202.904656][ T311] cdc_wdm 8-1:1.0: Unknown control protocol [ 202.943511][ T4389] KVM: debugfs: duplicate directory 4389-40 [ 203.511938][ T568] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 203.587968][ T4417] overlayfs: failed to clone upperpath [ 203.652640][ T568] usb 5-1: device descriptor read/64, error -71 [ 203.711633][ T36] audit: type=1400 audit(1788957274.220:458): avc: denied { cmd } for pid=4426 comm="iou-wrk-4427" path="socket:[37476]" dev="sockfs" ino=37476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 203.870800][ T4443] ./dev/sda1: Can't lookup blockdev [ 203.876484][ T36] audit: type=1400 audit(1788957274.390:459): avc: denied { getopt } for pid=4441 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.901796][ T568] usb 5-1: device descriptor read/64, error -71 [ 204.121818][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.129224][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.136694][ T4449] bridge_slave_0: entered allmulticast mode [ 204.147227][ T4449] bridge_slave_0: entered promiscuous mode [ 204.153197][ T568] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 204.156316][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.168249][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.175776][ T4449] bridge_slave_1: entered allmulticast mode [ 204.183108][ T4449] bridge_slave_1: entered promiscuous mode [ 204.262267][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.269673][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.277363][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.285418][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.312633][ T568] usb 5-1: device descriptor read/64, error -71 [ 204.323645][ T852] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.331412][ T852] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.341523][ T844] bridge_slave_1: left allmulticast mode [ 204.347742][ T844] bridge_slave_1: left promiscuous mode [ 204.353795][ T844] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.362312][ T844] bridge_slave_0: left allmulticast mode [ 204.368187][ T844] bridge_slave_0: left promiscuous mode [ 204.374015][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.476703][ T852] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.483922][ T852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.492628][ T852] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.499912][ T852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.531008][ T4449] veth0_vlan: entered promiscuous mode [ 204.547338][ T4449] veth1_macvtap: entered promiscuous mode [ 204.561758][ T568] usb 5-1: device descriptor read/64, error -71 [ 204.573176][ T844] veth1_macvtap: left promiscuous mode [ 204.671991][ T568] usb usb5-port1: attempt power cycle [ 205.031925][ T568] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 205.062753][ T568] usb 5-1: device descriptor read/8, error -71 [ 205.212978][ T568] usb 5-1: device descriptor read/8, error -71 [ 205.372200][ T31] usb 8-1: USB disconnect, device number 7 [ 205.400724][ T36] audit: type=1400 audit(1788957275.910:460): avc: denied { read } for pid=4458 comm="syz.7.1382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 205.491753][ T568] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 205.512833][ T568] usb 5-1: device descriptor read/8, error -71 [ 205.642979][ T568] usb 5-1: device descriptor read/8, error -71 [ 205.751964][ T568] usb usb5-port1: unable to enumerate USB device [ 205.771798][ T311] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 205.871799][ T2083] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 205.921937][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 205.928660][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.939642][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.953029][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 205.962267][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.971030][ T311] usb 2-1: config 0 descriptor?? [ 205.978268][ T311] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 206.044100][ T2083] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 206.055198][ T2083] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 206.070669][ T2083] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 206.080242][ T2083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.088385][ T2083] usb 8-1: Product: syz [ 206.092651][ T2083] usb 8-1: Manufacturer: syz [ 206.097405][ T2083] usb 8-1: SerialNumber: syz [ 206.103407][ T4464] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 206.110741][ T4464] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 206.178828][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 206.185049][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.194469][ T311] usb 2-1: USB disconnect, device number 48 [ 206.319655][ T4464] syz.7.1383(4464): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 206.358191][ T2083] rtl8150 8-1:1.0: couldn't reset the device [ 206.364432][ T2083] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 206.380642][ T2083] usb 8-1: USB disconnect, device number 8 [ 206.432461][ T568] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 206.544991][ T4503] SELinux: Context is not valid (left unmapped). [ 206.552353][ T36] audit: type=1400 audit(1788957277.070:461): avc: denied { create } for pid=4502 comm="syz.4.1398" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 206.574667][ T36] audit: type=1400 audit(1788957277.070:462): avc: denied { associate } for pid=4502 comm="syz.4.1398" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CF [ 206.597531][ T36] audit: type=1400 audit(1788957277.070:463): avc: denied { mounton } for pid=4502 comm="syz.4.1398" path="/259/file0" dev="tmpfs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 206.598306][ T568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.622485][ T36] audit: type=1400 audit(1788957277.070:464): avc: denied { write } for pid=4502 comm="syz.4.1398" name="bus" dev="tmpfs" ino=1447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 206.657233][ T36] audit: type=1400 audit(1788957277.070:465): avc: denied { add_name } for pid=4502 comm="syz.4.1398" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 206.674354][ T568] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 206.680033][ T36] audit: type=1400 audit(1788957277.070:466): avc: denied { setattr } for pid=4502 comm="syz.4.1398" name="work" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 206.691850][ T568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.726760][ T568] usb 1-1: Product: syz [ 206.731765][ T568] usb 1-1: Manufacturer: syz [ 206.736756][ T568] usb 1-1: SerialNumber: syz [ 206.737012][ T36] audit: type=1400 audit(1788957277.070:467): avc: denied { write open } for pid=4502 comm="syz.4.1398" path=2F202864656C6574656429 dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CF [ 206.775840][ T4508] netlink: 'syz.4.1400': attribute type 15 has an invalid length. [ 206.785812][ T4508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1400'. [ 206.795612][ T568] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 206.806260][ T568] cdc_wdm 1-1:1.0: Unknown control protocol [ 207.004795][ T4527] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1408'. [ 207.015424][ T4526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.061767][ T568] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 207.211744][ T568] usb 2-1: Using ep0 maxpacket: 32 [ 207.218234][ T568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.229243][ T568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.239525][ T568] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.248675][ T568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.257645][ T568] usb 2-1: config 0 descriptor?? [ 207.262747][ T400] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 207.271400][ T568] hub 2-1:0.0: USB hub found [ 207.421726][ T400] usb 8-1: Using ep0 maxpacket: 32 [ 207.429767][ T400] usb 8-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 207.439150][ T400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.447279][ T400] usb 8-1: Product: syz [ 207.451592][ T400] usb 8-1: Manufacturer: syz [ 207.456291][ T400] usb 8-1: SerialNumber: syz [ 207.474296][ T568] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 207.668493][ T400] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 207.677283][ T400] usb 8-1: unit 1 not found! [ 207.682679][ T568] usbhid 2-1:0.0: can't add hid device: -71 [ 207.689384][ T568] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 207.707545][ T400] usb 8-1: USB disconnect, device number 9 [ 207.726884][ T568] usb 2-1: USB disconnect, device number 49 [ 208.086712][ T4546] loop7: detected capacity change from 0 to 7 [ 208.119257][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 208.129216][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 208.139849][ T4546] overlayfs: maximum fs stacking depth exceeded [ 208.334051][ T845] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.343004][ T4563] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.411738][ T568] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 208.563345][ T568] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.572350][ T568] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.583154][ T568] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.596823][ T568] usb 5-1: config 1 interface 0 has no altsetting 0 [ 208.605525][ T568] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.615294][ T568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.624012][ T568] usb 5-1: Product: syz [ 208.628457][ T568] usb 5-1: Manufacturer: syz [ 208.633451][ T568] usb 5-1: SerialNumber: syz [ 208.843020][ T568] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 208.854750][ T568] cdc_mbim 5-1:1.0: bind() failure [ 208.865363][ T568] usb 5-1: USB disconnect, device number 66 [ 209.157607][ T311] usb 1-1: USB disconnect, device number 25 [ 209.511770][ T311] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 209.641768][ T311] usb 1-1: device descriptor read/64, error -71 [ 209.741929][ T568] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 209.891749][ T311] usb 1-1: device descriptor read/64, error -71 [ 209.899390][ T568] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.912765][ T568] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 209.922280][ T568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.930533][ T568] usb 5-1: Product: syz [ 209.935521][ T568] usb 5-1: Manufacturer: syz [ 209.940358][ T568] usb 5-1: SerialNumber: syz [ 209.949655][ T568] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 209.956175][ T568] cdc_wdm 5-1:1.0: Unknown control protocol [ 210.141987][ T311] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 210.281766][ T311] usb 1-1: device descriptor read/64, error -71 [ 210.381801][ T1288] Bluetooth: hci0: command 0x1003 tx timeout [ 210.383512][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.420931][ T4599] netlink: 5224 bytes leftover after parsing attributes in process `syz.7.1432'. [ 210.531790][ T311] usb 1-1: device descriptor read/64, error -71 [ 210.642037][ T311] usb usb1-port1: attempt power cycle [ 210.681761][ T568] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 210.841779][ T568] usb 8-1: Using ep0 maxpacket: 8 [ 210.848827][ T568] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 210.859500][ T568] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.874932][ T568] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 210.884915][ T568] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.893508][ T568] usb 8-1: Product: syz [ 210.898106][ T568] usb 8-1: Manufacturer: syz [ 210.903315][ T568] usb 8-1: SerialNumber: syz [ 210.912639][ T4600] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 210.991840][ T311] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 211.012884][ T311] usb 1-1: device descriptor read/8, error -71 [ 211.124104][ T568] usblp0: Disabling reads from problematic bidirectional printer [ 211.136709][ T568] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 211.149274][ T311] usb 1-1: device descriptor read/8, error -71 [ 211.156444][ T568] usb 8-1: USB disconnect, device number 10 [ 211.164856][ T568] usblp0: removed [ 211.401779][ T311] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 211.432912][ T311] usb 1-1: device descriptor read/8, error -71 [ 211.562873][ T311] usb 1-1: device descriptor read/8, error -71 [ 211.681863][ T311] usb usb1-port1: unable to enumerate USB device [ 211.762450][ T4605] Dead loop on virtual device ip6_vti0, fix it urgently! [ 211.950357][ T4611] No source specified [ 212.479836][ T782] usb 5-1: USB disconnect, device number 67 [ 212.602092][ T4633] Dead loop on virtual device ip6_vti0, fix it urgently! [ 212.801737][ T568] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 212.962865][ T568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.976966][ T568] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 212.986433][ T568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.994946][ T568] usb 1-1: Product: syz [ 212.999284][ T568] usb 1-1: Manufacturer: syz [ 213.004260][ T568] usb 1-1: SerialNumber: syz [ 213.012002][ T568] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 213.018365][ T568] cdc_wdm 1-1:1.0: Unknown control protocol [ 213.051744][ T31] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 213.202901][ T31] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 213.210548][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.223201][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 125, changing to 7 [ 213.234859][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 25088, setting to 1024 [ 213.246156][ T4651] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz.7.1452: No space for directory leaf checksum. Please run e2fsck -D. [ 213.250598][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.262790][ T4651] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz.7.1452: Directory block failed checksum [ 213.273047][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=255 [ 213.292406][ T31] usb 5-1: Product: syz [ 213.296733][ T31] usb 5-1: Manufacturer: syz [ 213.301452][ T31] usb 5-1: SerialNumber: syz [ 213.311169][ T31] usb 5-1: config 0 descriptor?? [ 213.318345][ T31] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 213.335738][ T4653] bridge0: port 3(veth1_macvtap) entered blocking state [ 213.344994][ T4653] bridge0: port 3(veth1_macvtap) entered disabled state [ 213.352583][ T4653] veth1_macvtap: entered allmulticast mode [ 213.359649][ T4653] veth1_macvtap: left allmulticast mode [ 213.430419][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 213.430444][ T36] audit: type=1400 audit(1788957283.940:479): avc: denied { mounton } for pid=4652 comm="syz.7.1453" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.522431][ T31] usb 5-1: USB disconnect, device number 68 [ 213.536235][ T3332] udevd[3332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.899118][ T4663] netlink: 'syz.1.1456': attribute type 5 has an invalid length. [ 214.186643][ T36] audit: type=1400 audit(1788957284.700:480): avc: denied { read } for pid=4676 comm="syz.7.1462" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.210133][ T36] audit: type=1400 audit(1788957284.700:481): avc: denied { open } for pid=4676 comm="syz.7.1462" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.516163][ T36] audit: type=1400 audit(1788957285.030:482): avc: denied { write } for pid=4684 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.630675][ T4701] fuse: Unknown parameter 'd' [ 214.667073][ T36] audit: type=1400 audit(1788957285.180:483): avc: denied { ioctl } for pid=4702 comm="syz.4.1473" path="socket:[38802]" dev="sockfs" ino=38802 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 214.773992][ T4715] loop5: detected capacity change from 0 to 7 [ 214.782263][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.790370][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.799222][ T4715] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.807460][ T4715] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.816004][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.824255][ T46] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 214.827974][ T4715] loop5: unable to read partition table [ 214.836644][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.846448][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.854556][ T4715] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 214.865718][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.876279][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.884609][ T2988] Buffer I/O error on dev loop5, logical block 0, async page read [ 214.982944][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 214.990282][ T46] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.001943][ T46] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 215.005438][ T4721] netlink: 'syz.4.1479': attribute type 4 has an invalid length. [ 215.015378][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.019509][ T4721] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1479'. [ 215.043268][ T46] usb 2-1: Product: ᰁ [ 215.047553][ T46] usb 2-1: Manufacturer: 채猰餫狡喵㳼酴硷郄 [ 215.055786][ T46] usb 2-1: SerialNumber: ఇ [ 215.077220][ T36] audit: type=1400 audit(1788957285.590:484): avc: denied { setcheckreqprot } for pid=4724 comm="syz.7.1480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 215.206944][ T4743] netlink: 'syz.7.1486': attribute type 4 has an invalid length. [ 215.320487][ T36] audit: type=1400 audit(1788957285.830:485): avc: denied { mounton } for pid=4750 comm="syz.7.1489" path="/75/config" dev="configfs" ino=2471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.349558][ T36] audit: type=1400 audit(1788957285.870:486): avc: denied { create } for pid=4750 comm="syz.7.1489" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 215.378821][ T36] audit: type=1400 audit(1788957285.870:487): avc: denied { ioctl } for pid=4750 comm="syz.7.1489" path="socket:[41110]" dev="sockfs" ino=41110 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.479408][ T46] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 215.494849][ T46] usb 2-1: USB disconnect, device number 50 [ 215.507878][ T2988] udevd[2988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.533739][ T782] usb 1-1: USB disconnect, device number 30 [ 215.626541][ T36] audit: type=1400 audit(1788957286.140:488): avc: denied { read } for pid=4775 comm="syz.4.1498" name="g1" dev="configfs" ino=15830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.683448][ T568] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 215.856818][ T568] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.881789][ T568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 215.901775][ T568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.931762][ T568] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.951763][ T568] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.960995][ T568] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.973709][ T568] usb 8-1: config 0 descriptor?? [ 215.979243][ T4762] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 216.418215][ T568] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 216.443582][ T568] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 216.463252][ T568] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 216.581821][ T400] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 216.673173][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.691832][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.712818][ T782] usb 8-1: USB disconnect, device number 11 [ 216.732959][ T400] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.753150][ T400] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 216.762607][ T400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.770742][ T400] usb 2-1: Product: syz [ 216.791732][ T400] usb 2-1: Manufacturer: syz [ 216.801738][ T400] usb 2-1: SerialNumber: syz [ 216.813874][ T400] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 216.821795][ T400] cdc_wdm 2-1:1.0: Unknown control protocol [ 216.933730][ T4802] rust_binder: Failure in copy_transaction_data: EINVAL [ 216.933767][ T4802] rust_binder: 4801:4802 transaction async to 4801:0 failed EINVAL, code 0 size 0-24 [ 217.006067][ T400] rust_binder: 4801: undelivered TRANSACTION_COMPLETE [ 217.018613][ T400] rust_binder: 4801: undelivered TRANSACTION_ERROR: 29201 [ 217.144095][ T4810] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 217.153287][ T4810] overlayfs: missing 'lowerdir' [ 217.242010][ T4812] sda1: Can't mount, would change RO state [ 217.585484][ T4826] overlay: Unknown parameter 'pcr' [ 217.644544][ T4830] random: crng reseeded on system resumption [ 217.679825][ T4830] tipc: Started in network mode [ 217.684975][ T4830] tipc: Node identity 1, cluster identity 2982 [ 217.691258][ T4830] tipc: Node number set to 1 [ 218.111770][ T400] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 218.291743][ T400] usb 1-1: Using ep0 maxpacket: 8 [ 218.298254][ T400] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 218.311799][ T400] usb 1-1: config 0 has no interface number 0 [ 218.317989][ T400] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 218.351763][ T400] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid maxpacket 14129, setting to 64 [ 218.371731][ T400] usb 1-1: config 0 interface 200 has no altsetting 0 [ 218.392913][ T400] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 218.411788][ T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.419884][ T400] usb 1-1: Product: syz [ 218.424158][ T400] usb 1-1: Manufacturer: syz [ 218.428830][ T400] usb 1-1: SerialNumber: syz [ 218.440687][ T400] usb 1-1: config 0 descriptor?? [ 218.648677][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 218.648702][ T36] audit: type=1400 audit(1788957289.160:499): avc: granted { setsecparam } for pid=4837 comm="syz.0.1523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 218.674769][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.692103][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.705266][ T400] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input25 [ 218.735189][ T400] usb 1-1: USB disconnect, device number 31 [ 219.141732][ T311] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 219.350347][ T400] usb 2-1: USB disconnect, device number 51 [ 219.399357][ T36] audit: type=1400 audit(1788957289.910:500): avc: denied { create } for pid=4851 comm="syz.1.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.462911][ T311] usb 8-1: unable to get BOS descriptor or descriptor too short [ 219.481733][ T311] usb 8-1: not running at top speed; connect to a high speed hub [ 219.502640][ T311] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 219.513762][ T311] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 219.538897][ T311] usb 8-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 219.548165][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.561748][ T311] usb 8-1: Product: syz [ 219.566360][ T311] usb 8-1: Manufacturer: syz [ 219.571013][ T311] usb 8-1: SerialNumber: syz [ 219.783501][ T4846] netlink: 'syz.7.1526': attribute type 10 has an invalid length. [ 219.794490][ T311] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 219.811729][ T400] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 219.813454][ T311] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.860320][ T311] usb 8-1: USB disconnect, device number 12 [ 219.871821][ T2988] udevd[2988]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.969779][ T400] usb 2-1: device descriptor read/64, error -71 [ 220.181809][ T10] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 220.221760][ T400] usb 2-1: device descriptor read/64, error -71 [ 220.342969][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 220.354086][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.365404][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 220.376681][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 220.390911][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=049c, bcdDevice=40.00 [ 220.421861][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=23 [ 220.430303][ T10] usb 1-1: SerialNumber: syz [ 220.446447][ T10] usb 1-1: config 0 descriptor?? [ 220.452186][ T4871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.462248][ T400] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 220.472065][ T4873] fuse: Bad value for 'fd' [ 220.476643][ T36] audit: type=1400 audit(1788957290.990:501): avc: denied { mounton } for pid=4872 comm="syz.7.1535" path="/syzcgroup/cpu/syz7/cpuset.cpus" dev="cgroup" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 220.651762][ T400] usb 2-1: device descriptor read/64, error -71 [ 220.901745][ T400] usb 2-1: device descriptor read/64, error -71 [ 221.011901][ T400] usb usb2-port1: attempt power cycle [ 221.249291][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 221.256591][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 221.266207][ T10] usb 1-1: USB disconnect, device number 32 [ 221.361785][ T400] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 221.382932][ T400] usb 2-1: device descriptor read/8, error -71 [ 221.512910][ T400] usb 2-1: device descriptor read/8, error -71 [ 221.631821][ T311] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 221.761778][ T400] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 221.792873][ T400] usb 2-1: device descriptor read/8, error -71 [ 221.793016][ T311] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.823434][ T311] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 221.838455][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.851798][ T311] usb 8-1: Product: syz [ 221.856227][ T311] usb 8-1: Manufacturer: syz [ 221.865774][ T36] audit: type=1400 audit(1788957292.380:502): avc: denied { nlmsg_write } for pid=4885 comm="syz.0.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 221.872511][ T311] usb 8-1: SerialNumber: syz [ 221.889653][ T4886] 9pnet: Unknown protocol version 9 [ 221.913561][ T311] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 221.922998][ T400] usb 2-1: device descriptor read/8, error -71 [ 221.929822][ T311] cdc_wdm 8-1:1.0: Unknown control protocol [ 222.040967][ T400] usb usb2-port1: unable to enumerate USB device [ 222.064404][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 222.073667][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 222.085948][ T36] audit: type=1400 audit(1788957292.600:503): avc: denied { execute } for pid=4889 comm="syz.0.1541" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 222.441761][ T400] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 222.496935][ T4897] netlink: 'syz.1.1544': attribute type 17 has an invalid length. [ 222.591730][ T400] usb 1-1: Using ep0 maxpacket: 8 [ 222.602941][ T400] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 186, changing to 11 [ 222.621745][ T400] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.634884][ T400] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.641561][ T400] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 222.663037][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.680230][ T400] usb 1-1: config 0 descriptor?? [ 223.294423][ T400] usbhid 1-1:0.0: can't add hid device: -71 [ 223.305295][ T400] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.324536][ T400] usb 1-1: USB disconnect, device number 33 [ 224.356660][ T311] usb 8-1: USB disconnect, device number 13 [ 224.440229][ T36] audit: type=1400 audit(1788957294.950:504): avc: denied { read } for pid=4913 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.541718][ T36] audit: type=1400 audit(1788957295.050:505): avc: denied { create } for pid=4923 comm="syz.1.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 224.821769][ T311] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 224.941969][ T782] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 224.961773][ T311] usb 2-1: device descriptor read/64, error -71 [ 224.971761][ T400] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 225.092975][ T782] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.101952][ T400] usb 1-1: device descriptor read/64, error -71 [ 225.112884][ T782] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 225.122209][ T782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.130251][ T782] usb 8-1: Product: syz [ 225.134760][ T782] usb 8-1: Manufacturer: syz [ 225.139413][ T782] usb 8-1: SerialNumber: syz [ 225.155461][ T782] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 225.161431][ T782] cdc_wdm 8-1:1.0: Unknown control protocol [ 225.201754][ T311] usb 2-1: device descriptor read/64, error -71 [ 225.341753][ T400] usb 1-1: device descriptor read/64, error -71 [ 225.461786][ T311] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 225.581766][ T400] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 225.601751][ T311] usb 2-1: device descriptor read/64, error -71 [ 225.721743][ T400] usb 1-1: device descriptor read/64, error -71 [ 225.851772][ T311] usb 2-1: device descriptor read/64, error -71 [ 225.961922][ T311] usb usb2-port1: attempt power cycle [ 225.971751][ T400] usb 1-1: device descriptor read/64, error -71 [ 226.081914][ T400] usb usb1-port1: attempt power cycle [ 226.301772][ T311] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 226.322963][ T311] usb 2-1: device descriptor read/8, error -71 [ 226.421800][ T400] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 226.442952][ T400] usb 1-1: device descriptor read/8, error -71 [ 226.453237][ T311] usb 2-1: device descriptor read/8, error -71 [ 226.575158][ T400] usb 1-1: device descriptor read/8, error -71 [ 226.701770][ T311] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 226.722852][ T311] usb 2-1: device descriptor read/8, error -71 [ 226.821743][ T400] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 226.842831][ T400] usb 1-1: device descriptor read/8, error -71 [ 226.852864][ T311] usb 2-1: device descriptor read/8, error -71 [ 226.971842][ T311] usb usb2-port1: unable to enumerate USB device [ 226.989058][ T400] usb 1-1: device descriptor read/8, error -71 [ 227.111837][ T400] usb usb1-port1: unable to enumerate USB device [ 227.683957][ T46] usb 8-1: USB disconnect, device number 14 [ 227.701412][ T2988] udevd[2988]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 227.737824][ T3332] udevd[3332]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 227.865396][ T4952] input: syz1 as /devices/virtual/input/input26 [ 228.051730][ T311] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 228.077601][ T4954] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1567'. [ 228.087863][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 228.191723][ T311] usb 2-1: device descriptor read/64, error -71 [ 228.361765][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 228.441745][ T311] usb 2-1: device descriptor read/64, error -71 [ 228.513010][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.525809][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 228.535291][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.543609][ T9] usb 8-1: Product: syz [ 228.547915][ T9] usb 8-1: Manufacturer: syz [ 228.553144][ T9] usb 8-1: SerialNumber: syz [ 228.560673][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 228.567183][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 228.681743][ T311] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 228.821752][ T311] usb 2-1: device descriptor read/64, error -71 [ 229.061743][ T311] usb 2-1: device descriptor read/64, error -71 [ 229.172398][ T311] usb usb2-port1: attempt power cycle [ 229.461760][ T782] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 229.521735][ T311] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 229.543024][ T311] usb 2-1: device descriptor read/8, error -71 [ 229.642986][ T782] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 229.657796][ T782] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.667512][ T782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.675982][ T782] usb 1-1: SerialNumber: syz [ 229.682022][ T311] usb 2-1: device descriptor read/8, error -71 [ 229.690631][ T782] usb 1-1: bad CDC descriptors [ 229.891800][ T782] usb 1-1: USB disconnect, device number 38 [ 229.921781][ T311] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 229.962848][ T311] usb 2-1: device descriptor read/8, error -71 [ 230.092881][ T311] usb 2-1: device descriptor read/8, error -71 [ 230.201857][ T311] usb usb2-port1: unable to enumerate USB device [ 231.040347][ T4987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.063686][ T46] usb 8-1: USB disconnect, device number 15 [ 231.241892][ T850] veth1_macvtap: left promiscuous mode [ 231.252239][ T850] veth0_vlan: left promiscuous mode [ 231.377756][ T5003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=5003 comm=syz.7.1586 [ 231.751927][ T5022] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1593'. [ 231.781958][ T46] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 231.831833][ T311] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 231.953010][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.965881][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 231.975177][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.983455][ T46] usb 1-1: Product: syz [ 231.984248][ T311] usb 8-1: unable to get BOS descriptor or descriptor too short [ 231.987696][ T46] usb 1-1: Manufacturer: syz [ 231.987720][ T46] usb 1-1: SerialNumber: syz [ 232.000947][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 232.006910][ T311] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.011933][ T46] cdc_wdm 1-1:1.0: Unknown control protocol [ 232.033187][ T311] usb 8-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 232.042544][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 232.050670][ T311] usb 8-1: Product: syz [ 232.055006][ T311] usb 8-1: Manufacturer: syz [ 232.062634][ T311] usb 8-1: Found UVC 1.00 device syz (8086:0ad2) [ 232.262980][ T782] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 232.276953][ T782] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz1] on syz0 [ 232.277934][ T5026] udevd[5026]: open /dev/null failed: No such file or directory [ 232.568916][ T311] usb 8-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 232.579258][ T311] uvcvideo 8-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 232.589313][ T311] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 232.598618][ T311] usb 8-1: USB disconnect, device number 16 [ 233.848655][ T36] audit: type=1400 audit(1788957304.360:506): avc: denied { append } for pid=5041 comm="syz.7.1596" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 234.062625][ T36] audit: type=1400 audit(1788957304.580:507): avc: denied { setattr } for pid=5045 comm="syz.1.1597" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.088416][ T5046] netlink: 'syz.1.1597': attribute type 4 has an invalid length. [ 234.096690][ T5046] netlink: 'syz.1.1597': attribute type 2 has an invalid length. [ 234.104971][ T5046] netlink: 3613 bytes leftover after parsing attributes in process `syz.1.1597'. [ 234.499530][ T782] usb 1-1: USB disconnect, device number 39 [ 234.696468][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 234.784079][ T36] audit: type=1400 audit(1788957305.300:508): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 235.121860][ T782] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 235.273089][ T782] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.285678][ T782] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 235.294936][ T782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.302988][ T782] usb 8-1: Product: syz [ 235.307161][ T782] usb 8-1: Manufacturer: syz [ 235.311818][ T782] usb 8-1: SerialNumber: syz [ 235.319354][ T782] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 235.325362][ T782] cdc_wdm 8-1:1.0: Unknown control protocol [ 235.991844][ T782] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 236.163062][ T782] usb 2-1: config 123 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.176669][ T782] usb 2-1: config 123 interface 0 has no altsetting 0 [ 236.184033][ T782] usb 2-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 236.193538][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.443148][ T782] usb 2-1: string descriptor 0 read error: -71 [ 236.452028][ T782] usbhid 2-1:123.0: can't add hid device: -71 [ 236.461778][ T782] usbhid 2-1:123.0: probe with driver usbhid failed with error -71 [ 236.475545][ T782] usb 2-1: USB disconnect, device number 64 [ 237.061782][ T46] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 237.211732][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 237.218622][ T46] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 237.226994][ T46] usb 1-1: config 0 has no interface number 0 [ 237.234627][ T46] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 237.243764][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.252013][ T46] usb 1-1: Product: syz [ 237.256184][ T46] usb 1-1: Manufacturer: syz [ 237.260800][ T46] usb 1-1: SerialNumber: syz [ 237.267323][ T46] usb 1-1: config 0 descriptor?? [ 237.273275][ T46] smsc95xx v2.0.0 [ 237.836008][ T400] usb 8-1: USB disconnect, device number 17 [ 237.948689][ T5099] FAULT_INJECTION: forcing a failure. [ 237.948689][ T5099] name failslab, interval 1, probability 0, space 0, times 0 [ 237.962050][ T5099] CPU: 1 UID: 0 PID: 5099 Comm: syz.1.1615 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 237.962102][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.962126][ T5099] Call Trace: [ 237.962135][ T5099] [ 237.962146][ T5099] __dump_stack+0x21/0x30 [ 237.962293][ T5099] dump_stack_lvl+0x140/0x1c0 [ 237.962328][ T5099] ? __cfi_dump_stack_lvl+0x10/0x10 [ 237.962368][ T5099] dump_stack+0x19/0x20 [ 237.962402][ T5099] should_fail_ex+0x3c2/0x510 [ 237.962557][ T5099] should_failslab+0xac/0x100 [ 237.962649][ T5099] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 237.962715][ T5099] ? __d_alloc+0x42/0x8c0 [ 237.962766][ T5099] ? _raw_spin_unlock+0x45/0x60 [ 237.962852][ T5099] __d_alloc+0x42/0x8c0 [ 237.962877][ T5099] ? hashlen_string+0x58/0x120 [ 237.962934][ T5099] ? d_alloc_name+0x76/0x270 [ 237.962962][ T5099] d_alloc_name+0xb8/0x270 [ 237.962989][ T5099] ? __kasan_check_write+0x18/0x20 [ 237.963015][ T5099] ? down_write+0xee/0x2b0 [ 237.963077][ T5099] ? __cfi_d_alloc_name+0x10/0x10 [ 237.963106][ T5099] ? __d_instantiate+0x43f/0x790 [ 237.963136][ T5099] proc_setup_self+0xcb/0x280 [ 237.963217][ T5099] proc_fill_super+0x539/0x850 [ 237.963272][ T5099] get_tree_nodev+0xcb/0x170 [ 237.963320][ T5099] ? __cfi_proc_fill_super+0x10/0x10 [ 237.963351][ T5099] proc_get_tree+0x20/0x30 [ 237.963380][ T5099] vfs_get_tree+0x9e/0x290 [ 237.963408][ T5099] do_new_mount+0x251/0xb40 [ 237.963564][ T5099] ? security_capable+0x44/0x130 [ 237.963648][ T5099] path_mount+0x66a/0xff0 [ 237.963672][ T5099] ? putname+0x113/0x150 [ 237.963700][ T5099] __se_sys_mount+0x2bf/0x480 [ 237.963727][ T5099] ? __x64_sys_mount+0xf0/0xf0 [ 237.963753][ T5099] ? __kasan_check_write+0x18/0x20 [ 237.963777][ T5099] ? fpregs_restore_userregs+0x11c/0x260 [ 237.963877][ T5099] __x64_sys_mount+0xc3/0xf0 [ 237.963905][ T5099] x64_sys_call+0x2021/0x2ee0 [ 237.963931][ T5099] do_syscall_64+0x57/0xf0 [ 237.963986][ T5099] ? clear_bhb_loop+0x50/0xa0 [ 237.964079][ T5099] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.964111][ T5099] RIP: 0033:0x7f22afd9e159 [ 237.964135][ T5099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.964161][ T5099] RSP: 002b:00007f22b0ca1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.964189][ T5099] RAX: ffffffffffffffda RBX: 00007f22b0025fa0 RCX: 00007f22afd9e159 [ 237.964211][ T5099] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 237.964228][ T5099] RBP: 00007f22afe3503b R08: 0000000000000000 R09: 0000000000000000 [ 237.964244][ T5099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.964261][ T5099] R13: 00007f22b0026038 R14: 00007f22b0025fa0 R15: 00007ffcbc796db8 [ 237.964284][ T5099] [ 237.964326][ T5099] proc_fill_super: can't allocate /proc/self [ 238.088227][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.095296][ T46] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 238.152720][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.155809][ T46] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 238.513479][ T46] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 238.524612][ T46] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 238.535713][ T46] usb 1-1: USB disconnect, device number 40 [ 239.941986][ T46] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 240.092938][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.107059][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 240.116347][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.124509][ T46] usb 1-1: Product: syz [ 240.128793][ T46] usb 1-1: Manufacturer: syz [ 240.133483][ T46] usb 1-1: SerialNumber: syz [ 240.141491][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 240.147740][ T46] cdc_wdm 1-1:1.0: Unknown control protocol [ 240.963397][ T36] audit: type=1326 audit(1788957311.480:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.1.1628" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22afd9e159 code=0x0 [ 242.420723][ T36] audit: type=1400 audit(1788957312.930:510): avc: denied { accept } for pid=5147 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.670151][ T46] usb 1-1: USB disconnect, device number 41 [ 244.110237][ T36] audit: type=1400 audit(1788957314.620:511): avc: denied { write } for pid=5175 comm="syz.1.1639" path="socket:[234459]" dev="sockfs" ino=234459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 244.331757][ T46] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 244.493185][ T46] usb 8-1: config 1 has an invalid interface number: 33 but max is 1 [ 244.501431][ T46] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.512157][ T46] usb 8-1: config 1 has no interface number 1 [ 244.518423][ T46] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.529479][ T46] usb 8-1: config 1 interface 33 has no altsetting 0 [ 244.537888][ T46] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.547200][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.555368][ T46] usb 8-1: Product: syz [ 244.559827][ T46] usb 8-1: Manufacturer: syz [ 244.564688][ T46] usb 8-1: SerialNumber: syz [ 244.572886][ T46] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 244.580019][ T46] cdc_ncm 8-1:1.0: bind() failure [ 244.777101][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.786092][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.795296][ T46] usb 8-1: USB disconnect, device number 18 [ 246.111814][ T46] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 246.273237][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.286068][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 246.295523][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.303658][ T46] usb 1-1: Product: syz [ 246.307868][ T46] usb 1-1: Manufacturer: syz [ 246.312575][ T46] usb 1-1: SerialNumber: syz [ 246.320399][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 246.326557][ T46] cdc_wdm 1-1:1.0: Unknown control protocol [ 247.911810][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 248.061973][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 248.068812][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.080082][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.089964][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.099509][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.108287][ T9] usb 8-1: config 0 descriptor?? [ 248.114825][ T9] hub 8-1:0.0: USB hub found [ 248.314939][ T9] hub 8-1:0.0: 1 port detected [ 248.523405][ T9] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 248.529846][ T9] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 248.539387][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 248.546206][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 248.572265][ T9] usb 8-1: USB disconnect, device number 19 [ 248.820005][ T9] usb 1-1: USB disconnect, device number 42 [ 249.540055][ T5229] overlayfs: missing 'workdir' [ 249.591329][ T36] audit: type=1400 audit(1788957320.100:512): avc: denied { getopt } for pid=5235 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.881796][ T311] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 252.032979][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.045857][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 252.055189][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.063299][ T311] usb 1-1: Product: syz [ 252.067477][ T311] usb 1-1: Manufacturer: syz [ 252.072132][ T311] usb 1-1: SerialNumber: syz [ 252.079691][ T311] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 252.085875][ T311] cdc_wdm 1-1:1.0: Unknown control protocol [ 253.681053][ T36] audit: type=1400 audit(1788957324.190:513): avc: denied { append } for pid=5274 comm="syz.1.1674" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 253.708284][ T36] audit: type=1400 audit(1788957324.210:514): avc: denied { read } for pid=5274 comm="syz.1.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 254.578265][ T46] usb 1-1: USB disconnect, device number 43 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=1577 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 256.086389][ T36] audit: type=1400 audit(1788957326.600:515): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1536]" dev="pipefs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 256.236061][ T838] bridge_slave_1: left allmulticast mode [ 256.251743][ T838] bridge_slave_1: left promiscuous mode [ 256.257621][ T838] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.267337][ T838] bridge_slave_0: left allmulticast mode [ 256.281754][ T838] bridge_slave_0: left promiscuous mode [ 256.287794][ T838] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.301735][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 256.404709][ T838] veth1_macvtap: left promiscuous mode [ 256.410450][ T838] veth0_vlan: left promiscuous mode [ 256.703402][ T838] bridge_slave_1: left allmulticast mode [ 256.709725][ T838] bridge_slave_1: left promiscuous mode [ 256.716179][ T838] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.723916][ T838] bridge_slave_0: left allmulticast mode [ 256.730141][ T838] bridge_slave_0: left promiscuous mode [ 256.736624][ T838] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.823899][ T838] tipc: Left network mode [ 256.829358][ T838] veth1_macvtap: left promiscuous mode [ 256.835223][ T838] veth0_vlan: left promiscuous mode