last executing test programs: 2m29.904538634s ago: executing program 1 (id=463): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, 0x0) 2m29.818440725s ago: executing program 1 (id=464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000c040000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c3", 0x15}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x32}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x6, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x1, 0x9}, 0xfffffffa, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x34ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x40, 0xe, 0xb1, "2c7dcc67973a97efe81e7de111dbbb969f0409c2f981c667402e041a815740ea7532e749d878d3943281d2334975ca0cfb44c5fdbe134693c8dc998236210c1fc6bbee5b5a118ab584091e715e18d99f5e4c089954c6c5c48e6a5071a985cd36ef1a1701c31eb540f58d86ee38a5f13fb9087994ca5bf22ff2fb050e2e315ccc9e27f398b47637d9f85eac077d8d22dfa00caf6e02bb3d4b3b85b380d55ff966f407b92c7e337f990241c5777096be849e"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x1, 0x26, "1de14f2b21a21a274b059af20612d1d87a896a612cef12aa566ae1d5ccab79ece845f682d62d"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) (async) r2 = socket(0x1e, 0x4, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000002640)={0xffffffffffffffee, 0x7253, 0xffffffffffffffdf, 0x696c, 0x9, 0x6, 0x52e6ac5d, 0x8, 0x0, 0x0, 0x400000000000000d, 0x7fffffff, 0x6, 0x8000000b, 0x80000004000000, 0x9, 0xfffffffffffffffd, 0x89, 0x3, 0x8000003, 0x5, 0x3, 0x200000005, 0xfffffffffffffffe, 0x9dc6, 0x6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x1, 0x0, 0xffffffff}, 0x10) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r7, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r6, 0x201, 0x3ffffd, 0x7ffffe, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2000a004) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x5}, 0x10) sendmmsg(r2, &(0x7f0000008fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="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", 0xd67}], 0x1, &(0x7f0000006640)=ANY=[], 0x108}}], 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x40, 0x0, {{0x1d, 0x4, 0x1, 0x2, 0x74, 0x67, 0x0, 0xe, 0x4, 0x0, @private=0xa010100, @loopback, {[@ssrr={0x89, 0xb, 0xc3, [@rand_addr=0x64010101, @private=0xa010102]}, @timestamp={0x44, 0x18, 0xea, 0x0, 0x0, [0xfffffffb, 0x9, 0xfffffff9, 0x9c99, 0x8]}, @end, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x9, [{@multicast1, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x10}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0xfffffff5}, {@broadcast, 0x101}, {@private=0xa010101, 0x7}]}]}}}}}) sendto$inet(r4, &(0x7f0000000000)="b38a9efef936512656ec", 0xa, 0x20000000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @remote}, r8}, 0x14) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m28.921599415s ago: executing program 1 (id=472): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 32) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (rerun: 32) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@private=0xa010100, @remote, 0x1, 0x1, [@private=0xa010102]}, 0x14) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async, rerun: 32) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904"], 0x0) 2m28.839626306s ago: executing program 1 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close_range(r0, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f00000000c0)=""/40, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2aa202, 0x8c) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) r6 = openat$incfs(r4, &(0x7f00000000c0)='.pending_reads\x00', 0x181400, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) socket$can_bcm(0x1d, 0x2, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@redirect_dir_off}, {@userxattr}]}) 2m28.716032387s ago: executing program 1 (id=474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) r4 = socket$inet6(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, 0x0) 2m28.619635069s ago: executing program 1 (id=475): syz_usb_connect$uac1(0x3, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000086307012040000102030109026f00030183c0050904000000010100000a240177780a00020102090401000001020000090401010101020000090501091000fb028b07250108810000090402010101020000082402017f0305050724011a0801100905820930"], 0x0) 2m28.546565249s ago: executing program 32 (id=475): syz_usb_connect$uac1(0x3, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000086307012040000102030109026f00030183c0050904000000010100000a240177780a00020102090401000001020000090401010101020000090501091000fb028b07250108810000090402010101020000082402017f0305050724011a0801100905820930"], 0x0) 1m45.124896751s ago: executing program 0 (id=851): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) close(0x3) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa0d88ab23835f588, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x0, 0x7, 0x39, 0x5}, {0x1, 0x8d, 0x1, 0xfffffbff}, {0x2, 0x3, 0x7a, 0xff}, {0x5, 0x80, 0x8, 0x1}, {0x40, 0x0, 0xea, 0x8000}, {0x7, 0x1, 0x7f, 0x1}, {0x7fff, 0x2, 0x5}, {0x23f3, 0xa, 0x15, 0x1}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) 1m44.23814723s ago: executing program 0 (id=858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0xc4, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x101, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x0, 0x2, 0x36}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x3f}, @fda={0x66646185, 0x5, 0x0, 0x2a}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @exit_looper, @free_buffer={0x40086303, r2}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x60, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @free_buffer={0x40086303, r2}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 1m44.230866441s ago: executing program 0 (id=859): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002f6d59008571550810e5501020301090224000101f4c0150904c9"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x30) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x0, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xc, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x8, 0x7, 0x6, 0x0, 0xb], 0xa000, 0x304}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x3}, 0x20) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(0x3) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x3}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x9080) r5 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0x8) (async) r7 = syz_open_procfs(r5, &(0x7f0000000040)='stat\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 1m44.136612192s ago: executing program 0 (id=860): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20c002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x5, 0xffff, 0x9dff, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000180)) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x6) r5 = socket$inet(0x2, 0x6, 0x400) recvmmsg(r5, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@tipc=@id, 0x80, &(0x7f0000000200)=[{&(0x7f0000004c00)=""/154, 0x9a}], 0x1, &(0x7f0000000240)=""/27, 0x2a}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000003880)=""/4086, 0xff6}], 0x2, &(0x7f0000001500)=""/4094, 0x36e}, 0x7}, {{0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f00000026c0)=""/4096, 0x1000}, 0x8}, {{&(0x7f00000036c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000003740)=""/174, 0xae}, 0x9}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/193}], 0x0, &(0x7f0000000700)=""/25}, 0x8}], 0x4, 0x100, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r6, 0xc1443000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004f80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08002abd7000fedbdf2602000000ecff02000a00000008000b0074795343bd8272778a131aeed2bcacf934d9a6184303a49a3b177f00069b3a548a4105dc06194a15f4ee1d6abad7d0813c08f342a708a966306a53cb24ef724500000000000000001a4bd663c0ceee91895e4181e58a387db1296bb899b36ee18ac1b944d045150d3692c8b51d8a1d93e1c767724e319067b74be166aa837a49f4b07f674984cb", @ANYRES32=0x0, @ANYBLOB="050002003cd70000801f623b0800ff00"/28], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40001) ioctl$UI_DEV_CREATE(r4, 0x5501) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x181c80) syz_open_dev$loop(&(0x7f0000000240), 0x5e, 0x200) syz_pidfd_open(r7, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000080)=@req={0x7, 0x1ff, 0x8, 0x21a897a3}, 0xffffffffffffffe8) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000003840)) 1m42.947230075s ago: executing program 0 (id=868): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)=0xfffffffffffffebd) syz_usb_connect(0x0, 0x2c3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x0, r4}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400c744240039000000c74424020c000000c7442406000000000f011424b80000010066b8377a000000d80f300f300fc79d53bf00000f01c3", 0x72}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = inotify_init1(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) inotify_add_watch(r5, &(0x7f0000005780)='./file0\x00', 0x50000505) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x70) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futex(0x0, 0xb, 0x2, 0x0, &(0x7f0000006340)=0x2, 0x2) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x7fffffff, 0x0, 0x0, 0x7, 0x9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x20) 1m40.062895048s ago: executing program 0 (id=903): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000040), 0xe9c, 0x2000) r3 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB='\n', @ANYRESDEC=r2], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffa, @mcast1, 0x9c}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) 1m40.008013978s ago: executing program 33 (id=903): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000040), 0xe9c, 0x2000) r3 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB='\n', @ANYRESDEC=r2], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffa, @mcast1, 0x9c}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) 3.133556685s ago: executing program 2 (id=1841): listen(0xffffffffffffffff, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="3e65660f28900400f30f082e0fb5960800baf80c66b888ba6c8566efbafc0cb84f0def67660fd04e00f36f0f006a000fc79d0000baf80c66b83cddc88266efbafc0cb003ee0f23a7", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) getgroups(0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xee01, 0xee01]) (async) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x422, 0x0) write$uinput_user_dev(r6, &(0x7f0000000040)={'syz1\x00', {0x7, 0x0, 0x8, 0x7}, 0x20, [0xca, 0x8, 0x7, 0x1, 0x0, 0xe, 0x4, 0xfffffff8, 0x0, 0x3, 0x101, 0x94a, 0xfffffff9, 0x7ebda8a6, 0x9, 0x208, 0x6db2, 0x2, 0x0, 0x10, 0x4, 0x0, 0x5, 0x1ff, 0x81, 0xf32, 0x5a2d56e3, 0x9, 0x60e32909, 0x4, 0x99, 0x101, 0x4, 0x5, 0x7f, 0x3, 0xd75, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0xfffffff7, 0x6, 0xfffffffc, 0x6, 0xc, 0x2, 0x2, 0x4, 0x4, 0x9, 0x90d, 0x1000, 0x7, 0x1, 0x9, 0x4, 0x6, 0x4, 0x0, 0x6], [0x6, 0x3, 0x9, 0xffffff27, 0x6, 0x800, 0x3, 0xa, 0x10000, 0x40, 0xffff, 0x73, 0xe, 0x101, 0x6, 0x9, 0x1, 0x800, 0x15, 0x6, 0xf, 0x7, 0x1ff, 0x800, 0x10000, 0x3, 0x8, 0x3, 0x1, 0xec8a, 0x10, 0x5, 0x5, 0x3, 0x1, 0x3ff, 0x0, 0x6, 0x1, 0x8000, 0x2, 0x63, 0x7f, 0x6, 0x7, 0x7, 0x1, 0x9, 0x5, 0xffffff80, 0x1, 0x1, 0x0, 0x2, 0x8, 0xdd23, 0x5, 0xe, 0x4, 0x7, 0x8, 0x1, 0xffffffff, 0x3], [0x10, 0xfff, 0x7, 0x8, 0x7, 0x8, 0x9, 0x1, 0xab, 0x5, 0xa5b2, 0x1, 0x8001, 0x8, 0x2, 0x2, 0x2, 0xb, 0x1, 0x1, 0x0, 0x4, 0x1, 0x9, 0x3, 0x1b13, 0x1e, 0x1000, 0xffffffff, 0x2, 0x3, 0x7, 0xfffffff8, 0x9, 0x1, 0x400, 0x0, 0x4, 0x7, 0x4, 0xc35, 0xb826, 0x2d09, 0x3cf, 0xd, 0x7, 0x9, 0x4, 0x5, 0x3, 0x8, 0x4, 0xfffffffe, 0x8001, 0x7, 0x1, 0x0, 0x7, 0xd1, 0xc, 0x8, 0x7, 0x81, 0xfff], [0x350, 0x3, 0x8, 0x9, 0x6, 0x31c1, 0xffffffff, 0x3, 0x6, 0xe, 0x6, 0x5, 0x10001, 0x2, 0x80, 0x17f4, 0x401, 0x7, 0x40, 0xfff, 0x800, 0x1, 0x6e, 0x7, 0x81, 0xffffffbd, 0x9, 0x9, 0x400, 0x6, 0x1, 0x2, 0xfffffffb, 0x4, 0x9, 0x80, 0x7, 0x81, 0xcf, 0x200, 0x1, 0x5, 0x0, 0x4, 0x2, 0x3, 0x9, 0x80000001, 0x1ff, 0x0, 0x4, 0x0, 0xca0f, 0x0, 0x100, 0x401, 0xfffffff3, 0x8, 0x3, 0x2, 0x4, 0x1, 0x8, 0xa]}, 0x45c) (async) setgroups(0x3, &(0x7f0000005540)=[r4, 0x0, r5]) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) (rerun: 64) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x13, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000a40)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:\x14\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@iC\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\xb5\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000600)='\x00\x00\x100\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4*<.\x88\xda\xcf3=\x97\xdd\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\x00\x01\x00\x00\x00\x00\x00\x00\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00I\x1b[\xeb\xd8\x06\xfd\xe5J\x1eJ\xb6\xce!]%UR\xbb\xa7\x96') r8 = fsopen(0x0, 0x1) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) tee(r8, r8, 0xc8, 0x4) (async, rerun: 64) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (rerun: 64) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) 3.113194175s ago: executing program 2 (id=1842): setuid(0xee00) (async) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') (rerun: 32) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/238, 0xee}], 0x1, 0x4, 0x9) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x35d, 0x0, 0x2}]}) (async, rerun: 64) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0xa0, &(0x7f00000001c0)={[], [{@measure}]}) (async) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) (async, rerun: 32) execve(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)={[&(0x7f0000000300)='(&']}, 0x0) (async, rerun: 32) fcntl$setlease(r0, 0x400, 0x1) (async) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) getsockopt$inet6_mreq(r6, 0x29, 0xe, 0x0, &(0x7f0000000340)) (async, rerun: 64) io_setup(0x7, &(0x7f0000000100)) (async, rerun: 64) eventfd(0x5a21) (async) eventfd(0x3) 3.101576555s ago: executing program 2 (id=1843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) request_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) (async) request_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000170a01010000000000000000000000060c000540df0000000000000108000740000000060900010073797a30000000000c0005400000000000000002"], 0x40}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000203c683dbfc0000000000000400004a08000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32=r3], 0x1c}], 0x1, 0x0, 0x0, 0x44ee20496464b222}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32=r3], 0x1c}], 0x1, 0x0, 0x0, 0x44ee20496464b222}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0xa4c}]}) 3.044079486s ago: executing program 2 (id=1844): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000000875043fc5000000000001090224000100000000090400000903000100092108000c01222800090581030004000bfe"], 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r1, 0x9, 0x4) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000800000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffffffffffff000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000fbffffffffffffffdff905ca7c01239dba000000000000000000000000000000000000000000000002040000000004000003000000000000"], 0xb8}}, 0x2c000010) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r2], 0xb8}}, 0x2c000010) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000200)={r3, &(0x7f00000005c0)='/\x87\x02xt[\x9a1\xc7', 0x40, &(0x7f00000000c0)={@align=0x9, {0x1000, 0xfe01, 0xe, 0xe6}}, 0x88e, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6a4}) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000201010100000000000000000a0000030c0019800800010042080000300001802c00058014000300fe8000000000000000000000000000aa14000400fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESOCT, @ANYBLOB="0117937e5e876a990029bd7000fcdbdf25010000000000000009410000001400187fffffff7564703a73"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40804) (rerun: 64) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x8, 0x0, &(0x7f0000000040)) (async) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, &(0x7f0000000000)={0x54000, 0x1000}) r10 = inotify_init() inotify_add_watch(r10, &(0x7f00000003c0)='.\x00', 0x5db) (async) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r10, &(0x7f0000000040)='./file1\x00', 0x1400037e) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0x13, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000cb4fdca0560f920d54f365c5b1d43ee470bf6fc93f0808251f5500"/47], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 32) 2.569584541s ago: executing program 5 (id=1849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async, rerun: 64) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x1) (async, rerun: 64) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fchdir(r3) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"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"}) 2.460207512s ago: executing program 5 (id=1850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000040)='\x00', 0x105600, &(0x7f0000000080)={@align=0x40, {0x89, 0x0, 0x401, 0x7}}, 0x3ae, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7f1ea3f7}, {[0x7, 0xa1, 0xd8be, 0x10001]}, 0x1, 0xe2, &(0x7f0000000140)=""/226}) open_tree(r1, &(0x7f0000000380)='./file0\x00', 0x80001) 2.458622592s ago: executing program 5 (id=1851): r0 = getpgid(0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) landlock_restrict_self(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x3000, 0xa, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0x9f, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x40, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0x26000, [0x4, 0x0, 0x40000000002]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0100001200330600000000fcdbdf25e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.449048512s ago: executing program 5 (id=1855): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg$unix(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x40002120, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x3, 0x4b5e, 0x2, 0x3, 0x1cd30, 0x5, 0xf48}, 0x1c) socket(0x1e, 0x4, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) readlinkat(r3, 0x0, &(0x7f0000000840)=""/66, 0x42) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2f) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x30, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x8402, 0x33) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_MOVE(r10, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bfc000/0xb000)=nil, &(0x7f0000005000/0x3000)=nil, 0xb000, 0x3}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0xc000, 0x10000, 0x8, 0x9, 0xfb, 0x8, 0x40, 0x17, 0x0, 0x2e, 0x1, 0x6}, {0x4, 0xa000, 0x9, 0x0, 0x22, 0x2, 0x79, 0x27, 0x0, 0xb4, 0x3, 0x40}, {0x4, 0xa000, 0xa, 0x5, 0x23, 0x3, 0x0, 0x19, 0x1, 0x5, 0x4, 0x81}, {0x10000, 0x80a0000, 0x10, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0x6}, {0x11f6593269eab9dc, 0x26000, 0xd, 0x3, 0x18, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x40000, 0x0, 0xc, 0x5, 0xbd, 0x8, 0x1, 0xf7, 0xce, 0xff}, {0xeeee0000, 0x9000, 0xd, 0x7, 0x8, 0x2, 0x9, 0x6, 0x5, 0x81, 0xfd, 0x4f}, {0x100000, 0x8000000, 0xb, 0x10, 0xf, 0x6, 0x0, 0x34, 0xc0, 0xb, 0x3, 0xc1}, {0x60000, 0x30}, {0x5000, 0x6}, 0x8000003f, 0x0, 0x100000, 0x52609, 0x3, 0xd800, 0x8000c00, [0xffff, 0x9, 0x61, 0xf]}) 2.367064283s ago: executing program 2 (id=1858): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') statx(r2, 0x0, 0x7000, 0x200, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="00000000350281", 0x7}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r4, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x200, 0x2000004, 0x54, [{0x19, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x5, 0x1, "345716cde04b"}]}}}}}}}, 0x1a2) io_setup(0x1, &(0x7f00000004c0)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x20, 0x1, 0x202, r8, 0x0, 0x0, 0x8800000}]) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x5, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x83, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "76c9"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x1, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x7}, @country_functional={0x10, 0x24, 0x7, 0xf, 0x0, [0x7, 0x9, 0x1, 0x1, 0x70]}, @mbim={0xc, 0x24, 0x1b, 0xe0d, 0xb, 0xa, 0x8, 0x5, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe8, 0x3, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x59, 0x3, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x30, 0x8, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5f, 0x80, 0x2, 0x10, 0x9}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x7, [{0xa1, &(0x7f0000000240)=@string={0xa1, 0x3, "d5b6be096e83552df4652a4de059dc72048ad6c3edcbe4bfd9af0377b74ba6ebf46e7c2e836206608998ff68ad0b3da51450d14476396900371491d259628488f0efbf43e2140a2680f72841bfe4387330576038c20b66c27aaf5a4f7a3ac602fed3d299aa29fc73da0b9c03af788034eaa1c9f137733fe5be0e10fd6e2cc873a529e7098823c20dddf55728bac0d8ba0e7bfc761987615999de9bc2ebb596"}}, {0x2b, &(0x7f0000000300)=@string={0x2b, 0x3, "84e7acd1416d75bc5ffd80005e7684654b073c343a5e35fddcee993851956d30147cd7ccdcacb331f2"}}, {0xa0, &(0x7f0000000440)=@string={0xa0, 0x3, "ba15ffd3231bb0b5dea13dd51a3aa0dd2a2f22bf6e656f3b230ffed394515118844379c6f21ace727558c90ba016fd344c6f4543bf9e5c8334b5a9126e9dfbf0bae25248c6f4cd4400afec83b73b57a72fdf9ce3eaa5177991bc5574610700000085cb80bafe954e94d3a7d658a1b743ac034061555ddf7ed235870d078a584af46695f074af8f5a168606071b64dacfc572a86befd8752f65c412f79ccf"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44d}}, {0xf5, &(0x7f0000000600)=@string={0xf5, 0x3, "f43195e5c2d990fd7d957c0fdc40175463eaebfd6915b9a8f6dfe27a20efb093b23d8c2bc98778a61c0fb8e3903e22e9961e9950f9c470ec4e5ccc42155789dd242a6b1f37fd2a69f1c4f8c039b7f054552905a07a32bce675161127fa082907e24ef47c16b703ce68107232f29eb87666f30fdfac3cc583bcdc628ed307cd75e04bd8e2969a64147b8fabf2a6afd2513ab0af9313c510da8165954c443d6aae01b36b3c1345cb1733653525980a2300e7a9ae522d73c5074b382ec4aee6c01c65558abe018373ef71e2ae8a46f394949ed0a56e482c4d12702b007fbd7bae1bc513f38c201ac80a10e16ca4e3f9c7acde9366"}}, {0xb5, &(0x7f0000000700)=@string={0xb5, 0x3, "7ea8f0037710a9797ef71a1684e8cf1632260590c971c11a5b38f03442450e46a68f031a0acdfbfaa7abb0e0cbae15689479971dd1c81e8f2f96283243421935fb9071ad75a03fa7b517d997e54858449425b46dfa5904171d867fc8eeb5cf43f0fecc821984ab56ea259eb52fd54843ec7c317601c9cd9baf4e3eccf1451cc8e060ac41d8aeb1740956643b506bb6bd77ff4ac15f2d32c688b3d87223b822e74db4abea27b87a43b3362f0000000000000000"}}, {0x45, &(0x7f00000007c0)=@string={0x45, 0x3, "3cbb4f73e59233a1c2635aff0a75c5ee13527bdf7aae8129e9a52194c8328e98b5622c16121890d7d2f0e434768fa5228224057528f9f4f2cf0261c3eef563da25a78c"}}]}) 2.287440064s ago: executing program 5 (id=1860): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bfc000/0xb000)=nil, &(0x7f00004a4000/0x1000)=nil, 0xb000, 0x2}) 1.443379174s ago: executing program 5 (id=1865): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r0 = userfaultfd(0x80001) mmap(&(0x7f00002f2000/0x9000)=nil, 0x9000, 0x2000009, 0x32, 0xffffffffffffffff, 0x36881000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x40840) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x7}]}, 0x20}}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="6e4d0f6eaf6f6465733d742c35"]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 1.359130215s ago: executing program 4 (id=1866): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0106000000000000000009000000240004801300010062733021d72ff897792e4236961ac0f1e3f5e1d3c4eaafcbfd42fc13070c314b329299"], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000100000004000000000a006020", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000a609000000000000000000000000000000000000000000000000000000000000fdfffffffffffffffdff280b000000000000000000000000feffffffffffffff0000000000000000000000010000000007"], 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x240400c4) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000500)="ba210066ed0fc7290f20d86635200000000f22d866b9800000c00f326635002000000f30f7ebf3ad66b80500000066b9001000000f01d966b8010000000f01d966b80500000066b935af6ae00f01d9f390", 0x51}], 0x1, 0x10, 0x0, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r3, 0x73a1000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffe0a, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffff3, 0x402) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.299968235s ago: executing program 4 (id=1867): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'ip6_vti0\x00', 0x0, 0x0, 0x8, 0x9, 0x6, 0x2, @private1, @empty, 0x7, 0x40, 0x80000000, 0x40}}) (rerun: 64) sendto$packet(r0, &(0x7f0000000000)="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", 0x1000, 0x10, &(0x7f00000010c0)={0x11, 0xf6, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000001100)={0xffffffff, 0x11000}) (async, rerun: 64) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000001140)={0x79, 0x0, 0xa94}) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f0000001240)={0x6c4, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff1}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "02af30e14d0608d528d6d15ad30b501d113212eb8c33d4587a22ff8d4f14b906aacaa6a0ed69b608cc76a18169ddbe71bd66cdef9a4d50ca5951d3d6451742d6b0b9ac80ae56c0517ab69d3fa04856befb784aff04ac460e04e7a29917ebe609523c965c26f7462d4f37ea1563c2b2070f4021e55caed87ea2280c4339127e984f96ec9ce76f3412b161678f5fe44dc32db4984239ce0ceab3a7888c3e45c430c4c75e6765990359a1d9a57066a6b5c176a2c01d9977b29d96"}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "23fdfe78f3926164eced72b7578479795dd37a97c4f82aae926d43bbbe631557166c2129f130e8b2d6d028453f32c6915795382eed01503a514aa3de8a8291843ec8ab539a4415ff2977790ba78c896bee49852bcd2856e8f3b7059d32c90fc78198"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[$\\-$#L\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52e}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\\{\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}]}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "b0f8c966feca107268c0057fa35ca83c9f3b38903d6e3f269b9afd99c503ff793c388c614af73421c1f4edd753d6276b6a484e68fefb5093249a761d2ecea30bf0b9eb445d2367af2aef287942dcb507e9eb3df6928c4ec3d020860c917a25ae7b5dd45c503446268985892d69a3d5e2ef4a741d289895db8404dbf348ac85c32e30c059867c977ddf6e7ec3a9ecd73c3b2b6a5125e6e9b6db7a2c0aefac4b84498b9c811030a55776dc1f001693467cec6dc40a2ba1b26c4f9f40baebeed8f733d6d8d8a64f920843f14c196c36602b3f6ada3db0f8962f604aeb35523d3094d10075660fda3dde7e0ddf14"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "b06bff3008d1d3824fd6f025c0617ae6167c152b54468b37717fc1a14925ef78fe797c21df7990e8229d7638890c2db78a6665e33e7b4cc61c0578d818367939b58dca3a9b80f5c201614dcdfe8e63f5b0cfc571910fac4a8923f55026f5eb3e6487f5fa42e9b16f078cd2a120f77362b8fba28721a670b3049903025b2acb40799ebe1842bc5d5b809a6a017f6fba1de2c8f7629031b6dcfb2fcc3067b84b19e1722ccacacf94b968f50a814e997406edb58cce074b671ac433c660adc0ead0097534d606e9e1af43ee60"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '..\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69cf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '^-.7:@%}*\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[,:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "4c0528360ccfaad7db9084b223913749a4b1e99f2a4be81e0562929c06a0234ecdcca27d923f3e66ac50c39873b653da5d5c945cecbf973a8d13165205bd0ef14ad941ff30e9e335ca3adf9fb488c697b15b0ae80cfbbc1f6944b3b27e86f3be0d0528b655f52b4dff74ed8520d72c6e12e375b1d51c787fbabbdad8035782d5af43c17f5a18bc2336813f6804d723466cee2f88b48b857b4e6f0c46c200633638b699eac2ef68153e9bc58c14"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "6370711d08eed0243ea95fe5c205410679c9848239cbdd90be168c2875f553f8873da03379955c3fd03575af9823634c7b2280af18a7411f9d053f5e0a90e3ed6c6749998ce7ba707137dae7dc79d336441ee6cd79d1781b99e29e01da2c267505"}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async, rerun: 64) r4 = eventfd(0x8001) (rerun: 64) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000019c0)={0x2, r4, 0x1}) (async, rerun: 32) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001a00)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast2}}, &(0x7f0000001b00)=0xe8) (async, rerun: 64) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) r7 = fcntl$dupfd(r4, 0x406, r6) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000001b40)={0x1, r4, 0x1}) (async, rerun: 32) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 32) close_range(r9, r4, 0x2) (async, rerun: 64) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4111010, r8, 0xec95f000) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) (async) recvfrom$packet(r7, &(0x7f0000001c80)=""/146, 0x92, 0x40000000, &(0x7f0000001d40)={0x11, 0xd, r1, 0x1, 0x8, 0x6, @multicast}, 0x14) (async) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000001d80)) (async, rerun: 32) r10 = accept$packet(r0, &(0x7f0000003300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003340)=0x14) (async, rerun: 32) r11 = accept4$bt_l2cap(r7, &(0x7f0000003380)={0x1f, 0x0, @none}, &(0x7f00000033c0)=0xe, 0x80800) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000003400)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000003540)=0xe8) (async, rerun: 32) lstat(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) sendmsg$unix(r7, &(0x7f00000036c0)={&(0x7f0000001dc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000001e40)="7254ff7ef8ff08768d9b1f6006", 0xd}, {&(0x7f0000001e80)="8f5ae577cfc9657e2a08e6c197c2c00872c4dbbfdd27d1b2519461f02849e69869f06005099f949b11af93ef7c9c9905d738aa4a3b47e028f1219e29656b7a6ba7aa8fc714983542c0e1f19762c47534e890dda02e3ff3cf1fd7b3b5a9c6b8c2a418c79444f38127dac19c8446b19d362d5efae788d3c93efe70db4371f63609d5de32a8c78175d14d0cd5dbbc56d606b4cefbe0c80ae6ca2eb2f485a6aff21d71f06138d89845e6e7184ac35bae0a387eb680569bc4e4e2e6a445996cb753c308886a777a4abd77a176", 0xca}, {&(0x7f0000001f80)="d722c385305b8d76c2e90696b10b531e8d4b1f695ea513355aeae0b7f2586ec77d72f8ce17c92bbf03277e3b8c12361d0b882b5302d30d0058f2e5703beec92f4cf19d5187f236e6b444b9b7e58184d72e", 0x51}, {&(0x7f0000002000)="aa96c10557df25a7f91d51d1779251901e95a60f48a5fb81c104bf03a103f24936c6649fff56f454931a6f2378a5df25d179e33f0ca267fc1365d0e2b8611e9728b34997088d31ad3a50b8d9c1d4906686ebe5ea7600599884d14aeec3d3495cfc4ad3bb6a03ea79f19d9024f2dbf12f87b32f187e2dddf73b47", 0x7a}, {&(0x7f0000002080)="593cd1bd16d97027b8a174f48a95ffbff5252200f24e", 0x16}, {&(0x7f00000020c0)="8449a0816ba27c4f40bd71eb5b989c22214494b8fdff3f18825d8ded9e7129171b34d5f18951514c93b5d5157807d8a7016e349d4bd4032354a528630814fd5b35b1a9d5ebde1d5c279ef88c180b1749f2a6cea7da71dcafb38481b0597e1455ed638e370f3ea00fa05817e536d8193234c44579587f81226184841cf5bb62249d37ab93f11af4c60ca66d0a0526f9275feb2d090a4721af764648b4be63a875e49074f421444542343a0a4948aca58bcd70e2d5fc93a3c1d3e373e7917168badfc60e2b7802c05a3d81c78cf4857f1111092b734ee788c8ab820647861a9c93f40c181b02fb9f5e829bbe4fc7c74e", 0xef}, {&(0x7f00000021c0)="e8d2aa48654a42cdaf5e441864f6d77827a9345bb7819a3eea953642c25eca46e624c71c3fb37c9eb858732f61da209120d72af33649ee608f35b520e6fb64270ab1ade028580062b1b6de82eda3d5b362ba43fbc721944406613ba059e4434efb6c3199e855dbde1e4f28dcf0f93097ec681392c4a0b83beef92ba33c8cf763b5a688e6616495d0b4a45cf9c11fc9e6d09997e5caa18bc02a975250a542dc8f90195b6e8ded94237099c9094e7862ebfe632715cf4c03781a56b517568e", 0xbe}, {&(0x7f0000002280)="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", 0x1000}], 0x8, &(0x7f0000003640)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x1c, 0x1, 0x1, [r8, r5, r11]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x70, 0x40}, 0x1) (async, rerun: 32) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000003700), &(0x7f0000003740)=0x4) (async, rerun: 32) ioctl$int_out(r7, 0x5462, &(0x7f0000003780)) 1.299727835s ago: executing program 4 (id=1868): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfc, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x700, 0x80, 0x9, 0xfffffff1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_buf(r1, 0x0, 0x30, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.152260557s ago: executing program 3 (id=1871): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4000802) (async) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) (async) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) setresgid(0xee00, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) setgid(0x0) (async) close(r0) (async) fsync(0xffffffffffffffff) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x0, 0x0, {[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffff0000, 0x2, 0x9, 0x3]}}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000004c0)={{r3}, "b6a349782431e4aedfd5d06b8a3b12dab96d0d722fa39a80bd9000f31675cd13ef910fb41e66a03d168a21a3a9a7bc85bf2f0d79e7b9d89473e0ebcc775c92edf5e81962d196b743e808b89226f71533c452ba2723c595d73134bf23dbde2cd1211cc0036f22d234c7b6ef7b0c0c780aff662777165e2bbab58ced0b79a4770f0a005693b9915d9ddaa796aed1a36a3b83e1baab321ac9eff8d3d51d08b22b31355d6d2f7ce5913ac8f9fa09a1ea3e7fc42d3177604d60e99e2c8bb6acdad6835192aadde3a9992cd745ed25f38d547f71265c5e7d94aaf4fc14d6945f6500ef64aaa5bb2282fc67729c82587ad1385e3278f7f7d77769811ed64a98db6e68aa1b9b1760632f3bcf78e3aa3133a98ca731b6a3cc11d1fa708c35c1b607b89c04a4fe776a95d2fd6e5b743026e4b96776ea0325aae8262ca065d388d1e400532d76a6527ebc826eb84458b0da29385496b69ccfd19d78eb1325775e0326b11876dead901e22be4e42cbb2eff6f8f86748283a7b762b8b1679b073f3cfc19977f7669f59911005da9e53a953b38c7a1a4f3edf7fb5ae96970d54c96c104ee15e053bc382188d05583f7ca1bf0af27c4a1eb33033ced1145fe952fe84a38c8b8ca54460e9f7a76b5fdb8645625f3dbba888b6a429bceaed0fa2e5883656124c283003e4aa30bcb499f50573c56c77ed3a95f3f3ed326ee7df94f51738b1098cfa9e43786a23ecab26703a2a7d0aa57fe28be54cf2353729628fc7ea96c5fa6d2ac0f52765d871b5b332023bf551980abfbf8ec8e3533a464c2e6cedfcfd132f716647cbc5f45f108a5b320bf8d50e8a38d56abf39f5ff3be843976e6bfeb272560b390015f4028127cbe9f5e2e93e398cd2e3eb20c0c1bc3f0bd3cba5066bc50c56da38ef9adcccc82c03d1179d777d1e36267418414be99a4d7f3f76ca0f1e670f385742504b65d980160d5b920863142357f6eaa5dd23dd8a733cc59ae81e4d6b3b7434a2f0a349279f427a91b005968c0b6bd7ff55d32614677351db04b4cab3880c37e24d488be94a7b3708f97d88ab12be90dc4a86a391c9db91ce1fa31e70f360226a17ff21a88def20d99c470cbfcb75f0ca714d94c59dc6e02ae47c02341d8f29d6dfd0553ad4b41089534eec9ce65285e26c1ba9af47d8cf55b698f92369338405d536adbecbee4676ce4b8da4df3ec29c6bc991a8317ca4d4447634547082209d253b0b6027419f9fa73e1a87c1dccc26c5fcf2b300aaabeaa1da3e30d15b55b693bf2b9a8003f28abfd33cf75a00e3d8c1096c2dff8ca3fb9ecaab94dd79f3d5c4baa1dea52f199f0363b41dac0828dfc93779fff77510824421d9f2d1e8140c642c66a83c6232be93506776a6b6ea602e061df99b92113b2a28fcfc2b65fde8052f7179beba26dd551f04099207c1e678e455dfb3b68c85ea5882c36e95d61ee2a2c5203388e5834a69c2d2a1262ff37f77e874a61293ad6529ed5020b56c9836d0281a0aff251ee58c04b9d8474b14c4ee733bc30b0a23d67b7ff080918241970610ae230d454742f12ded165666f2edb5cba3d604a04f03c9e9d11d4962af479139cbd2af864953260219a063b757c688cad24bbe07990cd2fe0faf27b53edc782ff4eff5fb43f46099ccf9b4ae8ffce0ee97887c0105ba303983c220f442e84b649e39f861b185d7a01554166ef310acfe394c112dcb125a6fee1dc2fc2b61f00262f4d95e4ebcd0f4bddef1a9d6c9a3383973e2689e849fa742af9550c62cf63321cbb23088b9495f237144a748d19f7df1b8348536fbbc2f3d61d5580d4c51646bed0e4895e9fe7cdab9583bb441bf2d385cf823cea298d4fd46d5c81f97c89f87b620a344b3fbb5f9bbf7b5c26b5de5908e5cdb2ad3b03f8cc51029985c4fd8bdb7fa1304a05f2792ae106eccc73b97da89b5dc65ea6061214e39c07df10f5d5993f7de3c970f88b5470d14d4fcdc57d691b3da6ac5565b1fa8ca3a96281cc29f875b485be8f96ee56134092259862877cdbe4ab1dcee8403007dba84c6aa9fb986cef3cf5147d419c285bd5f0b7af4961bddcca528ba2b109874b4942e1c0d257bebb0d5092ce230cbeae9c22854a4020da0c3ff29fa01c51933a83c96f53eb83d656c2871c0960242926e11cf982433ae6faecf5364de3c9c65196b02737e2220d2d3899ab0dadc458ab52144c5505ce0fd918db6c3f14dc2ce659fe0a767699b8fb6b61e090f7bb43136f726b4c23a1ac75cce6cb0f8e05eb8e0baf2ddd6a34bb539304ad7b9d29387f7a27db12f8b73437ffd5d23229527852e506f8d5bcb626f3827cfad3303477d2c3ff5da83046b27a54366845fa86ab4a64ba425f761d6b7d2bff7ca0f3467f4defe859b5785aa927e1fd667e9ee77e376a0286a344c8513058ca30adb9a59666fa739914e76bd261ef6983b19f162253405f14545c746a12720cc2ad3cc744fcc7a1cf9ef59e48285bda7083b91578028c53a584893f808e4b85fc3c7fa79c7c3a41d848cc7343e6b2658ab44582236d5565d34375e2b102033a6f37a32530b582a1800acca344e9de5e3099ef89e42b51712462845353e4c4d5daa80d03f6ca52e4318e1db4b042d3a56c64bbe1005f762ed59d68ded4b501518cbd36a240501b25a6fce8fd7d0eb35ed79141aa7ec9443f3e21d1c9abcd869fcd9fddcee6339700f9cc5b7c3863ddac0a4aa7ad9109dc408956239240f6b583e1b7d1ba0207612a88ab685beb1e2a5703656d545908d3b4d5d590e7fbd971f7efefa98ffe5b03edbbf44be016278f0ed052b2ad41ae461b697eae16d9b63b50521f061ff77f931e1481bd77b200ced77284a7c96aee6f597de9876b52cdd6db616ee9cc661a2824b63d0155143bac0a6e4c6c778334c8a4fbd3e1395270ebc6e2dc407dddf96e0d051ca523bf7b549eed10412a7079f8746252628b5e523a711c63a6ae28704de6bb64935e5f93d75475e6f9a04e7a93b2382d11f40b82c9ffbecc88e507e17c7fb128d84fd9b1aa47af60770cf3d710326d892ef61ab5a85e5c7555aa45c0dd909443efd192b498f2cee27c0aa54031a18760661477a3d5ce4cf1f5eab0f07c378cacf7c0180ded80837fbdcd480db68ef7f2d013bf7e12c7c2908ea5c3c320bed7ce9cc52ffbbf442a193221d2e351fcb378aa72e3989479d210873a7015ad93c3a9b560913dfc93a65ca5b16a6c29d57d9aaf18f4de004b7865cb17175ac6b91ee634309334bb4d5a00465803c02caec80af552957d05dca827f202de7da851b9d33fc3ab41da7f7881e272c12e58725161810f463188274c19d78627482bc81367f0aaa3ba2cbaf4d5792ea0a4d3f36b34a413dcab29d390e59e861c88cc6bfb049055dacde844b4045ebc525d574fb3370b8941dcfc097f5295a7b28688904d3a3c63dff913e8f84bff49d5a732020318a743c6578a739adbe672c4f824633fa51526574b49322308d2f63a372f51d4e58bdc75296f6a3dca120e2d53335d8be0f05d2262ccfa69144b0d6f17f26ed0a9883892a68b7ce407d8285579e44bc91ef4e2e6c1449eb489be18344c5636f9e74bf66756b1ee4b8816a7b8cb86a270d5f68a271f2503a0e5ca142feb1fac9eafde301a053c9b2cf38044a307bde8a313fb1b7a148bd62f5ac533a1249911d067fa1989d6a23c8e8e91e9e2643c6d041ed933001508faabe3e34264869199a1aad343788a859e19ee91ef38c8c99a206c99c85f88a5881ffd6d11cae52db83fec3df2d6c684db1104723cb5b06a5c6c585acb04a67bd919c07d0611bb0aeae2bfb59ab61a6a304c9efa27ca138ded66966706e7adbc006a947c24fd58ba6c90419920b9114b07febbedeae7a6a6d07aad25558e2f611ecab4c705d53d8590e6aae71b12cac1297fbece80de4cb896b2c08b2afd3ba94a6f60028d68871b6bbc3f236c86bc8f8180aa747f18b083d2d3e1b7640444d7455e09455eb56f5a8ea550e9a60849e6f7943f8b9de74099e76b2b750e2bc95956a46f255328050471515d96eea41e9e6df6b69535495ec85ccb85c89b47767a4899244ffc461c49aa07a327ce1100508160770afaad3b4fb08fe5db668823d7ef9e6046a5af657791a525cf2f4555554da011f04b9f7346e79b7fafd934b1360d5d0377435b0e32cbcded67a0fc8ccdb7f2f146a45e3d731e52d35a5944e2d56f05c5bd9acc9e06f9221aba43a201814cf5f92a98adb9c4a56130a773eea165ff0c5d6830483ef66a17862677328a28e061605c898c5dcdd2cb131eb70426a3b9757ef89438004ebbaf6a14518277af342645d2d7759cfa5b00c1657ab7dffeb28a63a0aeb6380258c86fce3c8d73bf150f600772a1e8ccd67f95be1c18d534400bdf4cfaa5e9bf7a90f35417b4b7463d6e8c977acd0c50dd8046407daff8ad52f7b4cec9819f85b244078c3fe1f954b5d0afdbf8c7ccbeca8ffe3d5eed3603f1672a8b2ae5bcd7de505e25e56bb4cf04e31ea4e9ad6d4e2ab5a0313943c12b84a86545a1602885174f958929bfd6fdb49bfefd69b7977b36da972067b6058779abe643bb3affd724b92626d2e3da70ff4da7a4f66396383765cbd309cc5789a14a530ae57dcb720491af237e3a737c87038e8a1df0a29b52b262413b1dbe6342a0ee767e348748b08270bdc4d16e66f0586f96c2b7c5fdb5520660fbff3e8809d8927ac0202ff99aaca9f21e9bf2d7ed6e785e98555d188d05fdc55c5bfe8289c9d665eca03779b37156a0c0e6e9fea40eda601b376e70724b1c1e41435e01a59d610a0001e8780d1cb3b2c72a2f8a3e0d6c23e78a157269a3fb6b9084b94eb2cf160e8168225b641b799435a8c42da830f2c8627b7f9432f9d55c41beb51b73740871dcfeb1deaf884c8ee547d23f223b3daa9ef0288550ad1820c0902a2f86e8dbfb3375f13172ea026531780696e7e0a6e0e0e67aa0571a948caef6bbba0f5f844d545beb27ed5d24fb185f11a539b33aae9a58b4b31d743188582f6070c99a7ad1d52c236e59401a134dc7eb765633e782c4bba7a5ab93ecd9f2b7a6cd6cb6060a5350bebf2fc01c4a12fd708b8e02f32b1889f4d55acb541dd0cff1f1e43ad6b896c74bc720132c6507d674dee3ea265ff24a7e0a34d6801da4e79a937412f76ea81b861a1fdc5f6da0c8e28227fb70388f9d0c4378de723e6aa718e214a1ae1ada1f9c6e3ac96227f90433ce5e12d698a06a34f8caf9c985bd0add1439877dfd7e4c3afa35364ded010904f279f00b833ed94f8f6ef5c8ba2eddf53526d70a072c2e85dac958295802c9f4eff036b4d4c30034bbc161175152778c080e127bd1c6adbe48f0a53089f853b5c09d2e047dfab1aa05dd8d8e6e4ee98aa65d9ef8ec0ec2eddbf2a30d5b383f2d251cc887e4896c976a48f07081c9534f65123c77a2bdb482cc6ec1babfbdcd28961b145afc6df998f624fb9316166a8711c5e10de8a8e3fbf96709eec258443c78f572c4e4a94962ae8992646782b639c78fd250948489932e8cb58454ef134e8aebe3b9ba166e193b6c164d4b6cef50fc6aba663068af86a6e012c090ca6d8f06408cf0466037382964389ebe83e786cd982488b338d7e3e87a11aa9a6c9709811303f79934dcbcad3541549f205f0aba9feafa0b9527414c9c22a89fe45e583332930ae18131a0ef8eb4c3b9dccc08a7af1645363ce55b98d73b055d0a2695243900daee4d4641f132d6018238bd6f2934a59fd16cac90598e2a1c63b62118ace18b3987ec37484e791ac3cdf"}) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r5 = userfaultfd(0x80801) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) syz_usb_connect(0x2, 0x43, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c0220000606030924"], 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffe, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0xff}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.150525317s ago: executing program 3 (id=1872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000003) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x101, 0x2}, @flat=@weak_binder={0x77622a85, 0x1101, 0x2}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}], 0x50, 0x0, &(0x7f0000000540)="a7d23705154eddd14bc5953dabf2e46c17858356036057d4e1bde6c2bde76469c5c22f12e2ff7000446337da4cf7ef9d76aa3eb59ba6a6cbc58fa6c472d0f694c753b6473fe790276134339a4bb502cc"}) 1.150298937s ago: executing program 3 (id=1873): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x1e4, 0x10, 0x1, 0x70bd2a, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x0, 0x0, 0x8000000, 0x8200}, {0x0, 0x0, 0x2}, 0x0, 0xfffffffd, 0xa, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @policy={0xac, 0x7, {{@in6=@local, @in=@remote, 0x4e21, 0xb, 0x4e20, 0x0, 0xa, 0x60, 0xc0, 0xff, 0x0, 0xffffffffffffffff}, {0x6, 0xaa2, 0x7, 0x9, 0x8001, 0x4, 0x8, 0x9}, {0x7, 0xbc97, 0x9, 0xfffffffffffffffd}, 0x3, 0x6e6bb8, 0x2, 0x1, 0x1}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) setuid(0xee01) keyctl$session_to_parent(0x12) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xed) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000000c0)="02030e00", 0x4, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x1000, 0x0, 0xb2, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x3, 0x8a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa12b, 0x2, 0xa, 0x3c9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21ac, 0x8000, 0x2, 0x902c5, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0a, 0x5200, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x489, 0x0, 0x0}}, 0x0) 1.091669457s ago: executing program 3 (id=1874): futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0xfffffffd, 0x40280003, 0x2, 0x7, 0x961}) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x4, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x6, 0x0, {0x8, 0x25, 0x1, 0x85, 0x6, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x44e}}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$P9_RWSTAT(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x131801, 0x1d) renameat2(r1, &(0x7f0000000080)='.\x02\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={r1, 0x2e, {0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x6, 0x14, 0x1c, "61c4afef570f992e55103bf19491a7562f51bed35ac6e57cbd56efb7b6d30bc413c86d138d7204900fcdda26d405ac360d3b2c5699495f4cd2015fae614bbd86", "cba12b78d1adc94a8d11dc32158e81f197832e67491b38cf8addcf8cf2f3c72d8de505a74309224ee79af6136f3194709e8f2c5a9b8c7e389904e557b6d22566", "fe1d525ff76e8dd5212a72d0027206354f3766a5ec79f2e45d680351b2e13b0c", [0xff, 0x715a]}}) 1.072164338s ago: executing program 2 (id=1875): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xbfe}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x81}}}}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \x00(\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 764.283212ms ago: executing program 4 (id=1876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) setuid(0xee00) r3 = socket$inet6(0xa, 0x80002, 0x8001) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000300)=@in6={0xa, 0x4e63, 0x41d, @ipv4={'\x00', '\xff\xff', @local}, 0xcd}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x41, 0x2}}], 0x18}, 0x880) prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x859e}}, @wrmsr={0x65, 0x20, {0x40000001, 0xc}}], 0x40}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x8000000000000002, 0x5d, 0x10000, 0x27, 0xa, 0x20000000, 0x80000000010, 0x7ff, 0x8000000000000000, 0x1, 0x0, 0x3, 0x80009, 0x3], 0x0, 0x100100}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 763.994361ms ago: executing program 4 (id=1877): r0 = socket(0x2, 0x3, 0x67) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x1, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) syz_usb_connect$midi(0x2, 0x3e, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x4, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0xac, 0x2, {0x4}}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0xa1, 0x7, 0x7, {0x4}}}]}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000180)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d000100006002090400100503000100092100003601220500090581036877eea3c7837cab8638b6e716bca5a68004efe6bf636d34eec6dd8bba6584f1117c3a78861faf1aca359ba19c723d379d943730c96fb7311ff99982"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000c40)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="4001b2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x2, 0xd, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x4, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0xfffffffffffffe00) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) close_range(r9, r0, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000000), 0x4) dup3(r5, r9, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x39, 0x0}, 0x0) 274.156077ms ago: executing program 4 (id=1879): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x22203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0xc, 0xfffffffd}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x8000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="736177000000000000000000000000000000000000000000000000000000000003"], 0x58) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000400)={0x0, 0xfb, 0x10e, 0x0, 0x7, "8bf107cf7e62d6c99469b53385135c73", "a201ca61505952f74fa365415b12d32054b9014cfa5ff3be24e479487b234516ebea7f3b7d81912337d5d829c203bd353c2d4305e2c306010a86484f2fb955103b1b0640ab03a93455f1766130114f86e5230914d98b38d116f673a519c1ddcef91a0c6a47bc113326a65cb38381ef8273d62e988a451a324cfe1799491d798367827fae8b7f2b6c8d880e7cb46bd7de7482b9a7cd079d00877870c3ecef58ddd80a85e0c8efaa6b850c3016a1d4091ad77a6585be2f3b0dee1b6a47324cc6e0c7bd6fe4a7cb8ef54ffa16bca100d87d45ecbae0c3b1f54bb9259390bea07bb2c65c9906caa96603928da40bf3fba1cc5f6ffb5bbae39f1709"}, 0x10e, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x6, 0xf2, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201500200000008410e49424000010203050902e00003010100d1080b00010122301d0904000000010130000a2401021500020000000b240d4b00030000000a0009040100000102300009040101010102300017240101000000000900030000000000000005070700fb0c2402020100050003907e5d0a240202b4010000049a0a240202c9e70004049509050109ff030803060a252509000000fd030009040200000102300009040291bd010230000a24020209006600029b0a2402020104000004e110240202600010000368a62e0d3a42bc0c2402020300030003fc36a109058209400000f9070a2525090000000401001832af38"], &(0x7f0000000b00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x3c0, 0x4, 0x0, 0x5, 0x40, 0x70}, 0x1a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x280a}}, {0x4d, &(0x7f0000000c40)=ANY=[@ANYBLOB="4d036f682ce0f30b426ad93c513a32c8f96bc00b1b767cee80b5cada9f76207c215cd69650ea142003bc5413068ab949a486ea580b5093a3b422e207dcc00ea0b46b2a3df0a57ba2ba42b1ec342f866745ba19984a7392ab2f8467cf5eb544c6633e07e8b9b2a0c4e07fdaa34edf96b6faf1a4200a18b4b257e5406d84d69381baa045284495add5e29b85f81596918be7aaed187c45029f059a7eecfccda07b1c5a39b86afbc3536516ee6fc3d8b83f1ff95879b63bc97454bd"]}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x425}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600)={0x9, 0x4, 0x802, 0x100102, 0x1c, "b0ed00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="f00fab500726660fc73600100f01c4baf80c66b846d35a8066efbafc0cec0f22e5ea4bb7d8000f1f40000f0866b9810800000f320f00169600", 0x39}], 0x1, 0x1b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 67.739159ms ago: executing program 3 (id=1878): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.log\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = getpgid(0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000073000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1880): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6852][ T3593] hierarchical_memory_limit 314572800 [ 174.712246][ T3593] hierarchical_memsw_limit 9223372036854771712 [ 174.718408][ T3593] total_cache 307032064 [ 174.722589][ T3593] total_rss 4096 [ 174.726142][ T3593] total_rss_huge 0 [ 174.729852][ T3593] total_shmem 0 [ 174.733333][ T3593] total_mapped_file 0 [ 174.737335][ T3593] total_dirty 0 [ 174.740802][ T3593] total_writeback 0 [ 174.744655][ T3593] total_workingset_refault_anon 2153 [ 174.749950][ T3593] total_workingset_refault_file 0 [ 174.755011][ T3593] total_swap 2105344 [ 174.758909][ T3593] total_swapcached 8192 [ 174.763192][ T3593] total_pgpgin 273874 [ 174.767262][ T3593] total_pgpgout 199424 [ 174.771384][ T3593] total_pgfault 54400 [ 174.775444][ T3593] total_pgmajfault 335 [ 174.779528][ T3593] total_inactive_anon 0 [ 174.783750][ T3593] total_active_anon 4096 [ 174.788032][ T3593] total_inactive_file 0 [ 174.792261][ T3593] total_active_file 0 [ 174.796235][ T3593] total_unevictable 306929664 [ 174.800929][ T3593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.956,pid=3595,uid=0 [ 174.815735][ T3593] Memory cgroup out of memory: Killed process 3595 (syz.4.956) total-vm:90508kB, anon-rss:1236kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 174.915612][ T3588] syz.4.956 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 174.932964][ T3588] CPU: 0 UID: 0 PID: 3588 Comm: syz.4.956 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 174.933003][ T3588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.933016][ T3588] Call Trace: [ 174.933024][ T3588] [ 174.933032][ T3588] __dump_stack+0x21/0x30 [ 174.933069][ T3588] dump_stack_lvl+0x140/0x1c0 [ 174.933095][ T3588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 174.933122][ T3588] ? ___ratelimit+0x40e/0x5b0 [ 174.933145][ T3588] dump_stack+0x19/0x20 [ 174.933171][ T3588] dump_header+0xd6/0x490 [ 174.933195][ T3588] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 174.933224][ T3588] oom_kill_process+0x35d/0x640 [ 174.933248][ T3588] out_of_memory+0x624/0xa30 [ 174.933270][ T3588] ? __cfi_out_of_memory+0x10/0x10 [ 174.933292][ T3588] ? mutex_lock_killable+0x115/0x1d0 [ 174.933316][ T3588] ? __cfi_mutex_lock_killable+0x10/0x10 [ 174.933341][ T3588] mem_cgroup_out_of_memory+0x2c8/0x390 [ 174.933362][ T3588] ? css_next_descendant_pre+0x202/0x230 [ 174.933388][ T3588] ? drain_obj_stock+0xed0/0xed0 [ 174.933409][ T3588] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 174.933430][ T3588] try_charge_memcg+0x91c/0xe10 [ 174.933457][ T3588] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 174.933478][ T3588] ? __cfi_try_charge_memcg+0x10/0x10 [ 174.933506][ T3588] ? __alloc_pages_noprof+0x35f/0x7e0 [ 174.933534][ T3588] __mem_cgroup_charge+0xfc/0x420 [ 174.933553][ T3588] ? filemap_get_entry+0x41b/0x490 [ 174.933576][ T3588] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 174.933596][ T3588] ? do_pte_missing+0x3859/0x4410 [ 174.933621][ T3588] filemap_add_folio+0x57/0x3e0 [ 174.933643][ T3588] __filemap_get_folio+0x5f0/0xba0 [ 174.933668][ T3588] ? __cfi___filemap_get_folio+0x10/0x10 [ 174.933692][ T3588] ? inode_to_bdi+0x6d/0x100 [ 174.933727][ T3588] simple_write_begin+0x60/0x390 [ 174.933753][ T3588] generic_perform_write+0x328/0x970 [ 174.933781][ T3588] ? __cfi_generic_perform_write+0x10/0x10 [ 174.933808][ T3588] ? generic_write_checks_count+0x428/0x530 [ 174.933836][ T3588] ? file_update_time+0xa3/0x210 [ 174.933862][ T3588] __generic_file_write_iter+0xcf/0x180 [ 174.933889][ T3588] generic_file_write_iter+0x14b/0x550 [ 174.933916][ T3588] ? __cfi_generic_file_write_iter+0x10/0x10 [ 174.933942][ T3588] ? gup_must_unshare+0x1e0/0x1e0 [ 174.933968][ T3588] ? vma_is_secretmem+0x11/0x50 [ 174.933996][ T3588] ? __get_user_pages+0x2018/0x22b0 [ 174.934021][ T3588] ? __kasan_check_write+0x18/0x20 [ 174.934042][ T3588] __kernel_write_iter+0x42c/0x8a0 [ 174.934063][ T3588] ? __cfi___kernel_write_iter+0x10/0x10 [ 174.934083][ T3588] ? get_dump_page+0x165/0x220 [ 174.934108][ T3588] ? __asan_memset+0x39/0x50 [ 174.934126][ T3588] ? iov_iter_bvec+0xc0/0x180 [ 174.934148][ T3588] dump_user_range+0xb8b/0xe60 [ 174.934171][ T3588] ? __cfi_dump_user_range+0x10/0x10 [ 174.934192][ T3588] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 174.934222][ T3588] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 174.934251][ T3588] ? elf_core_dump+0x24c0/0x3960 [ 174.934276][ T3588] elf_core_dump+0x2e7e/0x3960 [ 174.934303][ T3588] ? __cfi_elf_core_dump+0x10/0x10 [ 174.934332][ T3588] ? dump_interrupted+0xf0/0xf0 [ 174.934351][ T3588] ? filp_open+0x199/0x1f0 [ 174.934376][ T3588] ? 0xffffffffff600000 [ 174.934393][ T3588] do_coredump+0x208d/0x2fe0 [ 174.934414][ T3588] ? __cfi_do_coredump+0x10/0x10 [ 174.934433][ T3588] ? asm_exc_page_fault+0x2b/0x30 [ 174.934460][ T3588] ? __kasan_slab_free+0x6a/0x80 [ 174.934483][ T3588] ? kmem_cache_free+0x1bd/0x4f0 [ 174.934503][ T3588] ? get_signal+0xa74/0x14e0 [ 174.934530][ T3588] get_signal+0x11f8/0x14e0 [ 174.934558][ T3588] arch_do_signal_or_restart+0xbc/0x760 [ 174.934578][ T3588] ? fixup_vdso_exception+0x20d/0x310 [ 174.934601][ T3588] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 174.934624][ T3588] irqentry_exit_to_user_mode+0x4d/0xb0 [ 174.934650][ T3588] irqentry_exit+0x16/0x60 [ 174.934673][ T3588] exc_page_fault+0x65/0xc0 [ 174.934695][ T3588] asm_exc_page_fault+0x2b/0x30 [ 174.934720][ T3588] RIP: 0033:0x7f9f9fc52877 [ 174.934738][ T3588] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 174.934755][ T3588] RSP: 002b:00007f9fa0bc9120 EFLAGS: 00010202 [ 174.934775][ T3588] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9f9fd9cdd9 [ 174.934789][ T3588] RDX: 00007f9fa0bc9140 RSI: 00007f9fa0bc9270 RDI: 000000000000000b [ 174.934803][ T3588] RBP: 00007f9f9fe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 174.934817][ T3588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.934830][ T3588] R13: 00007f9fa0016128 R14: 00007f9fa0016090 R15: 00007ffe44add4f8 [ 174.934848][ T3588] [ 174.934874][ T3588] memory: usage 307200kB, limit 307200kB, failcnt 17045 [ 175.397654][ T3588] memory+swap: usage 298688kB, limit 9007199254740988kB, failcnt 0 [ 175.405871][ T3588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 175.412883][ T3588] Memory cgroup stats for /syz4: [ 175.413007][ T3588] cache 301879296 [ 175.422283][ T3588] rss 0 [ 175.425277][ T3588] rss_huge 0 [ 175.428722][ T3588] shmem 0 [ 175.432002][ T3588] mapped_file 0 [ 175.435489][ T3588] dirty 0 [ 175.438432][ T3588] writeback 0 [ 175.442031][ T3588] workingset_refault_anon 2232 [ 175.446807][ T3588] workingset_refault_file 0 [ 175.451490][ T3588] swap 1642496 [ 175.455412][ T3588] swapcached 176128 [ 175.464249][ T3588] pgpgin 282512 [ 175.467988][ T3588] pgpgout 209248 [ 175.471958][ T3588] pgfault 54625 [ 175.475525][ T3588] pgmajfault 374 [ 175.479078][ T3588] inactive_anon 0 [ 175.483118][ T3588] active_anon 176128 [ 175.487018][ T3588] inactive_file 0 [ 175.490830][ T3588] active_file 0 [ 175.495042][ T3588] unevictable 302006272 [ 175.499482][ T3588] hierarchical_memory_limit 314572800 [ 175.505486][ T10] hub 6-1:0.0: activate --> -90 [ 175.510916][ T3588] hierarchical_memsw_limit 9223372036854771712 [ 175.517460][ T3588] total_cache 301879296 [ 175.521778][ T3588] total_rss 0 [ 175.525093][ T3588] total_rss_huge 0 [ 175.529156][ T3588] total_shmem 0 [ 175.542221][ T3588] total_mapped_file 0 [ 175.551588][ T3588] total_dirty 0 [ 175.555126][ T3588] total_writeback 0 [ 175.558957][ T3588] total_workingset_refault_anon 2232 [ 175.566493][ T3588] total_workingset_refault_file 0 [ 175.576839][ T3588] total_swap 1642496 [ 175.580885][ T3588] total_swapcached 176128 [ 175.585384][ T3588] total_pgpgin 282512 [ 175.589467][ T3588] total_pgpgout 209248 [ 175.593620][ T3588] total_pgfault 54625 [ 175.597702][ T3588] total_pgmajfault 374 [ 175.601813][ T3588] total_inactive_anon 0 [ 175.605978][ T3588] total_active_anon 176128 [ 175.610451][ T3588] total_inactive_file 0 [ 175.614642][ T3588] total_active_file 0 [ 175.618625][ T3588] total_unevictable 302006272 [ 175.623368][ T3588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.956,pid=3590,uid=0 [ 175.638429][ T3588] Memory cgroup out of memory: Killed process 3590 (syz.4.956) total-vm:90508kB, anon-rss:1236kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 175.706236][ T392] usb 6-1: USB disconnect, device number 10 [ 175.714005][ T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 175.811579][ T65] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 175.971548][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 175.979139][ T3587] syz.4.956 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 175.990777][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.000668][ T65] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 176.001028][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: syz.4.956 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 176.001059][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.001072][ T3587] Call Trace: [ 176.001078][ T3587] [ 176.001086][ T3587] __dump_stack+0x21/0x30 [ 176.001118][ T3587] dump_stack_lvl+0x140/0x1c0 [ 176.001144][ T3587] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.001169][ T3587] ? ___ratelimit+0x40e/0x5b0 [ 176.001190][ T3587] dump_stack+0x19/0x20 [ 176.001214][ T3587] dump_header+0xd6/0x490 [ 176.001238][ T3587] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 176.001264][ T3587] oom_kill_process+0x35d/0x640 [ 176.001286][ T3587] out_of_memory+0x624/0xa30 [ 176.001306][ T3587] ? __cfi_out_of_memory+0x10/0x10 [ 176.001326][ T3587] ? mutex_lock_killable+0x97/0x1d0 [ 176.001349][ T3587] ? __cfi_mutex_lock_killable+0x10/0x10 [ 176.001372][ T3587] mem_cgroup_out_of_memory+0x2c8/0x390 [ 176.001392][ T3587] ? css_next_descendant_pre+0x202/0x230 [ 176.001415][ T3587] ? drain_obj_stock+0xed0/0xed0 [ 176.001435][ T3587] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 176.001454][ T3587] try_charge_memcg+0x91c/0xe10 [ 176.001479][ T3587] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 176.001499][ T3587] ? __cfi_try_charge_memcg+0x10/0x10 [ 176.001528][ T3587] ? __kasan_check_read+0x15/0x20 [ 176.001547][ T3587] ? __alloc_pages_noprof+0x35f/0x7e0 [ 176.001572][ T3587] __mem_cgroup_charge+0xfc/0x420 [ 176.001590][ T3587] ? filemap_get_entry+0x41b/0x490 [ 176.001612][ T3587] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 176.001631][ T3587] filemap_add_folio+0x57/0x3e0 [ 176.001651][ T3587] __filemap_get_folio+0x5f0/0xba0 [ 176.001674][ T3587] ? __cfi___filemap_get_folio+0x10/0x10 [ 176.001695][ T3587] ? __kasan_check_write+0x18/0x20 [ 176.001713][ T3587] ? noop_dirty_folio+0x81/0xa0 [ 176.001738][ T3587] ? inode_to_bdi+0x6d/0x100 [ 176.001764][ T3587] simple_write_begin+0x60/0x390 [ 176.001789][ T3587] generic_perform_write+0x328/0x970 [ 176.001816][ T3587] ? __cfi_generic_perform_write+0x10/0x10 [ 176.001846][ T3587] ? generic_write_checks_count+0x428/0x530 [ 176.001870][ T3587] ? file_update_time+0xa3/0x210 [ 176.001895][ T3587] __generic_file_write_iter+0xcf/0x180 [ 176.001921][ T3587] generic_file_write_iter+0x14b/0x550 [ 176.001945][ T3587] ? __cfi_generic_file_write_iter+0x10/0x10 [ 176.001969][ T3587] ? gup_must_unshare+0x1e0/0x1e0 [ 176.001994][ T3587] ? vma_is_secretmem+0x11/0x50 [ 176.002020][ T3587] ? __get_user_pages+0x2018/0x22b0 [ 176.002041][ T3587] ? irqentry_exit+0x16/0x60 [ 176.002065][ T3587] ? __kasan_check_write+0x18/0x20 [ 176.002086][ T3587] __kernel_write_iter+0x42c/0x8a0 [ 176.002106][ T3587] ? __cfi___kernel_write_iter+0x10/0x10 [ 176.002125][ T3587] ? get_dump_page+0x165/0x220 [ 176.002148][ T3587] ? __asan_memset+0x39/0x50 [ 176.002166][ T3587] ? iov_iter_bvec+0xc0/0x180 [ 176.002188][ T3587] dump_user_range+0xb8b/0xe60 [ 176.002210][ T3587] ? __cfi_dump_user_range+0x10/0x10 [ 176.002230][ T3587] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 176.002259][ T3587] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 176.002287][ T3587] ? elf_core_dump+0x24c0/0x3960 [ 176.002311][ T3587] elf_core_dump+0x2e7e/0x3960 [ 176.002336][ T3587] ? __cfi_elf_core_dump+0x10/0x10 [ 176.002363][ T3587] ? dump_interrupted+0xf0/0xf0 [ 176.002381][ T3587] ? filp_open+0x199/0x1f0 [ 176.002405][ T3587] ? 0xffffffffff600000 [ 176.002421][ T3587] do_coredump+0x208d/0x2fe0 [ 176.002441][ T3587] ? __cfi_do_coredump+0x10/0x10 [ 176.002458][ T3587] ? asm_exc_page_fault+0x2b/0x30 [ 176.002483][ T3587] ? __kasan_slab_free+0x6a/0x80 [ 176.002504][ T3587] ? kmem_cache_free+0x1bd/0x4f0 [ 176.002524][ T3587] ? get_signal+0xa74/0x14e0 [ 176.002549][ T3587] get_signal+0x11f8/0x14e0 [ 176.002575][ T3587] arch_do_signal_or_restart+0xbc/0x760 [ 176.002594][ T3587] ? fixup_vdso_exception+0x20d/0x310 [ 176.002614][ T3587] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 176.002636][ T3587] irqentry_exit_to_user_mode+0x4d/0xb0 [ 176.002660][ T3587] irqentry_exit+0x16/0x60 [ 176.002681][ T3587] exc_page_fault+0x65/0xc0 [ 176.002702][ T3587] asm_exc_page_fault+0x2b/0x30 [ 176.002720][ T3587] RIP: 0033:0x7f9f9fc52877 [ 176.002737][ T3587] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 176.002753][ T3587] RSP: 002b:00007f9fa0bc9120 EFLAGS: 00010202 [ 176.002772][ T3587] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9f9fd9cdd9 [ 176.002785][ T3587] RDX: 00007f9fa0bc9140 RSI: 00007f9fa0bc9270 RDI: 000000000000000b [ 176.002798][ T3587] RBP: 00007f9f9fe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 176.002811][ T3587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.002829][ T3587] R13: 00007f9fa0016128 R14: 00007f9fa0016090 R15: 00007ffe44add4f8 [ 176.002846][ T3587] [ 176.008522][ T3587] memory: usage 307200kB, limit 307200kB, failcnt 17344 [ 176.009898][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.021634][ T3587] memory+swap: usage 309084kB, limit 9007199254740988kB, failcnt 0 [ 176.041654][ T65] usb 3-1: Product: syz [ 176.042289][ T3587] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 176.046666][ T65] usb 3-1: Manufacturer: syz [ 176.052151][ T3587] Memory cgroup stats for [ 176.057042][ T65] usb 3-1: SerialNumber: syz [ 176.060679][ T3587] /syz4: [ 176.523084][ T3587] cache 314572800 [ 176.529578][ T3587] rss 0 [ 176.532607][ T3587] rss_huge 0 [ 176.536280][ T3587] shmem 0 [ 176.539315][ T3587] mapped_file 0 [ 176.539413][ T65] usb 3-1: unit 0 not found! [ 176.542882][ T3587] dirty 0 [ 176.550360][ T3587] writeback 0 [ 176.553688][ T3587] workingset_refault_anon 2245 [ 176.558455][ T3587] workingset_refault_file 0 [ 176.562996][ T3587] swap 1929216 [ 176.566369][ T3587] swapcached 0 [ 176.569727][ T3587] pgpgin 309885 [ 176.573218][ T3587] pgpgout 233596 [ 176.576760][ T3587] pgfault 55631 [ 176.580215][ T3587] pgmajfault 383 [ 176.583792][ T3587] inactive_anon 0 [ 176.587427][ T3587] active_anon 0 [ 176.590881][ T3587] inactive_file 0 [ 176.594545][ T3587] active_file 0 [ 176.598002][ T3587] unevictable 314572800 [ 176.602190][ T3587] hierarchical_memory_limit 314572800 [ 176.607567][ T3587] hierarchical_memsw_limit 9223372036854771712 [ 176.613748][ T3587] total_cache 314572800 [ 176.617912][ T3587] total_rss 0 [ 176.621196][ T3587] total_rss_huge 0 [ 176.624982][ T3587] total_shmem 0 [ 176.628457][ T3587] total_mapped_file 0 [ 176.632772][ T3587] total_dirty 0 [ 176.636387][ T3587] total_writeback 0 [ 176.640213][ T3587] total_workingset_refault_anon 2245 [ 176.645561][ T3587] total_workingset_refault_file 0 [ 176.650599][ T3587] total_swap 1929216 [ 176.654568][ T3587] total_swapcached 0 [ 176.658477][ T3587] total_pgpgin 309885 [ 176.662541][ T3587] total_pgpgout 233596 [ 176.666620][ T3587] total_pgfault 55631 [ 176.670614][ T3587] total_pgmajfault 383 [ 176.674740][ T3587] total_inactive_anon 0 [ 176.678908][ T3587] total_active_anon 0 [ 176.683122][ T3587] total_inactive_file 0 [ 176.687456][ T3587] total_active_file 0 [ 176.691470][ T3587] total_unevictable 314572800 [ 176.696237][ T3587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.956,pid=3591,uid=0 [ 176.711084][ T3587] Memory cgroup out of memory: Killed process 3591 (syz.4.956) total-vm:90508kB, anon-rss:1236kB, file-rss:59840kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 176.731784][ T3876] fuse: Bad value for 'rootmode' [ 176.744687][ T65] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 176.764098][ T65] usb 3-1: unit 0 not found! [ 176.772770][ T65] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 176.792594][ T65] usb 3-1: unit 0 not found! [ 176.797381][ T3875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.802723][ T65] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 176.825962][ T1554] udevd[1554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.851678][ T65] usb 3-1: USB disconnect, device number 70 [ 176.867203][ T3587] syz.4.956 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 176.880536][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: syz.4.956 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 176.880576][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.880590][ T3587] Call Trace: [ 176.880597][ T3587] [ 176.880606][ T3587] __dump_stack+0x21/0x30 [ 176.880640][ T3587] dump_stack_lvl+0x140/0x1c0 [ 176.880666][ T3587] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.880693][ T3587] ? ___ratelimit+0x40e/0x5b0 [ 176.880717][ T3587] dump_stack+0x19/0x20 [ 176.880743][ T3587] dump_header+0xd6/0x490 [ 176.880767][ T3587] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 176.880795][ T3587] oom_kill_process+0x35d/0x640 [ 176.880820][ T3587] out_of_memory+0x624/0xa30 [ 176.880842][ T3587] ? __cfi_out_of_memory+0x10/0x10 [ 176.880864][ T3587] ? mutex_lock_killable+0x97/0x1d0 [ 176.880889][ T3587] ? __cfi_mutex_lock_killable+0x10/0x10 [ 176.880913][ T3587] mem_cgroup_out_of_memory+0x2c8/0x390 [ 176.880935][ T3587] ? css_next_descendant_pre+0x202/0x230 [ 176.880960][ T3587] ? drain_obj_stock+0xed0/0xed0 [ 176.880982][ T3587] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 176.881003][ T3587] try_charge_memcg+0x91c/0xe10 [ 176.881030][ T3587] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 176.881051][ T3587] ? __cfi_try_charge_memcg+0x10/0x10 [ 176.881077][ T3587] ? __kasan_check_read+0x15/0x20 [ 176.881098][ T3587] ? __alloc_pages_noprof+0x35f/0x7e0 [ 176.881127][ T3587] __mem_cgroup_charge+0xfc/0x420 [ 176.881146][ T3587] ? filemap_get_entry+0x41b/0x490 [ 176.881169][ T3587] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 176.881189][ T3587] filemap_add_folio+0x57/0x3e0 [ 176.881211][ T3587] __filemap_get_folio+0x5f0/0xba0 [ 176.881236][ T3587] ? __cfi___filemap_get_folio+0x10/0x10 [ 176.881260][ T3587] ? __kasan_check_write+0x18/0x20 [ 176.881279][ T3587] ? noop_dirty_folio+0x81/0xa0 [ 176.881306][ T3587] ? inode_to_bdi+0x6d/0x100 [ 176.881334][ T3587] simple_write_begin+0x60/0x390 [ 176.881360][ T3587] generic_perform_write+0x328/0x970 [ 176.881389][ T3587] ? __cfi_generic_perform_write+0x10/0x10 [ 176.881416][ T3587] ? generic_write_checks_count+0x428/0x530 [ 176.881442][ T3587] ? file_update_time+0xa3/0x210 [ 176.881470][ T3587] __generic_file_write_iter+0xcf/0x180 [ 176.881497][ T3587] generic_file_write_iter+0x14b/0x550 [ 176.881528][ T3587] ? __cfi_generic_file_write_iter+0x10/0x10 [ 176.881550][ T3587] ? gup_must_unshare+0x1e0/0x1e0 [ 176.881572][ T3587] ? vma_is_secretmem+0x11/0x50 [ 176.881596][ T3587] ? __get_user_pages+0x2018/0x22b0 [ 176.881617][ T3587] ? irqentry_exit+0x16/0x60 [ 176.881642][ T3587] ? __kasan_check_write+0x18/0x20 [ 176.881662][ T3587] __kernel_write_iter+0x42c/0x8a0 [ 176.881681][ T3587] ? __cfi___kernel_write_iter+0x10/0x10 [ 176.881698][ T3587] ? get_dump_page+0x165/0x220 [ 176.881722][ T3587] ? __asan_memset+0x39/0x50 [ 176.881740][ T3587] ? iov_iter_bvec+0xc0/0x180 [ 176.881761][ T3587] dump_user_range+0xb8b/0xe60 [ 176.881784][ T3587] ? __cfi_dump_user_range+0x10/0x10 [ 176.881803][ T3587] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 176.881832][ T3587] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 176.881860][ T3587] ? elf_core_dump+0x24c0/0x3960 [ 176.881883][ T3587] elf_core_dump+0x2e7e/0x3960 [ 176.881910][ T3587] ? __cfi_elf_core_dump+0x10/0x10 [ 176.881938][ T3587] ? dump_interrupted+0xf0/0xf0 [ 176.881956][ T3587] ? filp_open+0x199/0x1f0 [ 176.881981][ T3587] ? 0xffffffffff600000 [ 176.881998][ T3587] do_coredump+0x208d/0x2fe0 [ 176.882017][ T3587] ? __cfi_do_coredump+0x10/0x10 [ 176.882032][ T3587] ? asm_exc_page_fault+0x2b/0x30 [ 176.882054][ T3587] ? __kasan_slab_free+0x6a/0x80 [ 176.882075][ T3587] ? kmem_cache_free+0x1bd/0x4f0 [ 176.882096][ T3587] ? get_signal+0xa74/0x14e0 [ 176.882123][ T3587] get_signal+0x11f8/0x14e0 [ 176.882149][ T3587] arch_do_signal_or_restart+0xbc/0x760 [ 176.882170][ T3587] ? fixup_vdso_exception+0x20d/0x310 [ 176.882191][ T3587] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 176.882214][ T3587] irqentry_exit_to_user_mode+0x4d/0xb0 [ 176.882238][ T3587] irqentry_exit+0x16/0x60 [ 176.882261][ T3587] exc_page_fault+0x65/0xc0 [ 176.882283][ T3587] asm_exc_page_fault+0x2b/0x30 [ 176.882301][ T3587] RIP: 0033:0x7f9f9fc52877 [ 176.882318][ T3587] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 176.882335][ T3587] RSP: 002b:00007f9fa0bc9120 EFLAGS: 00010202 [ 176.882354][ T3587] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9f9fd9cdd9 [ 176.882368][ T3587] RDX: 00007f9fa0bc9140 RSI: 00007f9fa0bc9270 RDI: 000000000000000b [ 176.882382][ T3587] RBP: 00007f9f9fe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 176.882395][ T3587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.882408][ T3587] R13: 00007f9fa0016128 R14: 00007f9fa0016090 R15: 00007ffe44add4f8 [ 176.882426][ T3587] [ 177.356612][ T3587] memory: usage 250332kB, limit 307200kB, failcnt 18739 [ 177.363655][ T3587] memory+swap: usage 252184kB, limit 9007199254740988kB, failcnt 0 [ 177.371876][ T3587] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 177.378748][ T3587] Memory cgroup stats for /syz4: [ 177.378912][ T3587] cache 258953216 [ 177.387931][ T3587] rss 36864 [ 177.391060][ T3587] rss_huge 0 [ 177.394488][ T3587] shmem 0 [ 177.397445][ T3587] mapped_file 0 [ 177.401060][ T3587] dirty 0 [ 177.404248][ T3587] writeback 0 [ 177.407630][ T3587] workingset_refault_anon 2259 [ 177.412669][ T3587] workingset_refault_file 0 [ 177.417423][ T3587] swap 1568768 [ 177.421358][ T3587] swapcached 32768 [ 177.425480][ T3587] pgpgin 311307 [ 177.428953][ T3587] pgpgout 248587 [ 177.432921][ T3587] pgfault 55690 [ 177.436559][ T3587] pgmajfault 397 [ 177.440135][ T3587] inactive_anon 4096 [ 177.444340][ T3587] active_anon 36864 [ 177.448350][ T3587] inactive_file 0 [ 177.452191][ T3587] active_file 0 [ 177.455801][ T3587] unevictable 258887680 [ 177.460226][ T3587] hierarchical_memory_limit 314572800 [ 177.465932][ T3587] hierarchical_memsw_limit 9223372036854771712 [ 177.471583][ T310] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 177.476056][ T3587] total_cache 258953216 [ 177.483935][ T3587] total_rss 36864 [ 177.487799][ T3587] total_rss_huge 0 [ 177.491795][ T3587] total_shmem 0 [ 177.495430][ T3587] total_mapped_file 0 [ 177.499442][ T3587] total_dirty 0 [ 177.503122][ T3587] total_writeback 0 [ 177.507448][ T3587] total_workingset_refault_anon 2259 [ 177.512836][ T3587] total_workingset_refault_file 0 [ 177.525674][ T3587] total_swap 1568768 [ 177.529746][ T3587] total_swapcached 32768 [ 177.534691][ T3587] total_pgpgin 311307 [ 177.538837][ T3587] total_pgpgout 248587 [ 177.543713][ T3587] total_pgfault 55690 [ 177.547720][ T3587] total_pgmajfault 397 [ 177.552285][ T3587] total_inactive_anon 4096 [ 177.556789][ T3587] total_active_anon 36864 [ 177.561121][ T3587] total_inactive_file 0 [ 177.565388][ T3587] total_active_file 0 [ 177.569596][ T3587] total_unevictable 258887680 [ 177.574527][ T3587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.956,pid=3586,uid=0 [ 177.589390][ T3587] Memory cgroup out of memory: Killed process 3586 (syz.4.956) total-vm:90508kB, anon-rss:1364kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 177.606868][ T310] usb 6-1: device descriptor read/64, error -71 [ 177.727067][ T3588] syz.4.956 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 177.737064][ T3588] CPU: 1 UID: 0 PID: 3588 Comm: syz.4.956 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 177.737098][ T3588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.737110][ T3588] Call Trace: [ 177.737116][ T3588] [ 177.737124][ T3588] __dump_stack+0x21/0x30 [ 177.737155][ T3588] dump_stack_lvl+0x140/0x1c0 [ 177.737179][ T3588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 177.737204][ T3588] ? ___ratelimit+0x40e/0x5b0 [ 177.737226][ T3588] dump_stack+0x19/0x20 [ 177.737249][ T3588] dump_header+0xd6/0x490 [ 177.737271][ T3588] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 177.737296][ T3588] oom_kill_process+0x35d/0x640 [ 177.737318][ T3588] out_of_memory+0x624/0xa30 [ 177.737338][ T3588] ? __cfi_out_of_memory+0x10/0x10 [ 177.737357][ T3588] ? mutex_lock_killable+0x97/0x1d0 [ 177.737380][ T3588] ? __cfi_mutex_lock_killable+0x10/0x10 [ 177.737402][ T3588] mem_cgroup_out_of_memory+0x2c8/0x390 [ 177.737421][ T3588] ? css_next_descendant_pre+0x202/0x230 [ 177.737450][ T3588] ? drain_obj_stock+0xed0/0xed0 [ 177.737470][ T3588] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 177.737488][ T3588] try_charge_memcg+0x91c/0xe10 [ 177.737512][ T3588] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 177.737532][ T3588] ? __cfi_try_charge_memcg+0x10/0x10 [ 177.737555][ T3588] ? __kasan_check_read+0x15/0x20 [ 177.737574][ T3588] ? __alloc_pages_noprof+0x35f/0x7e0 [ 177.737599][ T3588] __mem_cgroup_charge+0xfc/0x420 [ 177.737616][ T3588] ? filemap_get_entry+0x41b/0x490 [ 177.737638][ T3588] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 177.737656][ T3588] filemap_add_folio+0x57/0x3e0 [ 177.737676][ T3588] __filemap_get_folio+0x5f0/0xba0 [ 177.737699][ T3588] ? __cfi___filemap_get_folio+0x10/0x10 [ 177.737719][ T3588] ? __kasan_check_write+0x18/0x20 [ 177.737736][ T3588] ? noop_dirty_folio+0x81/0xa0 [ 177.737761][ T3588] ? inode_to_bdi+0x6d/0x100 [ 177.737786][ T3588] simple_write_begin+0x60/0x390 [ 177.737810][ T3588] generic_perform_write+0x328/0x970 [ 177.737835][ T3588] ? __cfi_generic_perform_write+0x10/0x10 [ 177.737859][ T3588] ? generic_write_checks_count+0x428/0x530 [ 177.737882][ T3588] ? file_update_time+0xa3/0x210 [ 177.737906][ T3588] __generic_file_write_iter+0xcf/0x180 [ 177.737930][ T3588] generic_file_write_iter+0x14b/0x550 [ 177.737954][ T3588] ? __cfi_generic_file_write_iter+0x10/0x10 [ 177.737978][ T3588] ? gup_must_unshare+0x1e0/0x1e0 [ 177.738001][ T3588] ? vma_is_secretmem+0x11/0x50 [ 177.738026][ T3588] ? __get_user_pages+0x2018/0x22b0 [ 177.738048][ T3588] ? irqentry_exit+0x16/0x60 [ 177.738070][ T3588] ? __kasan_check_write+0x18/0x20 [ 177.738091][ T3588] __kernel_write_iter+0x42c/0x8a0 [ 177.738109][ T3588] ? __cfi___kernel_write_iter+0x10/0x10 [ 177.738127][ T3588] ? get_dump_page+0x165/0x220 [ 177.738150][ T3588] ? __asan_memset+0x39/0x50 [ 177.738166][ T3588] ? iov_iter_bvec+0xc0/0x180 [ 177.738188][ T3588] dump_user_range+0xb8b/0xe60 [ 177.738209][ T3588] ? __cfi_dump_user_range+0x10/0x10 [ 177.738227][ T3588] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 177.738255][ T3588] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 177.738281][ T3588] ? elf_core_dump+0x24c0/0x3960 [ 177.738304][ T3588] elf_core_dump+0x2e7e/0x3960 [ 177.738327][ T3588] ? __cfi_elf_core_dump+0x10/0x10 [ 177.738354][ T3588] ? dump_interrupted+0xf0/0xf0 [ 177.738371][ T3588] ? filp_open+0x199/0x1f0 [ 177.738394][ T3588] ? 0xffffffffff600000 [ 177.738409][ T3588] do_coredump+0x208d/0x2fe0 [ 177.738433][ T3588] ? __cfi_do_coredump+0x10/0x10 [ 177.738450][ T3588] ? asm_exc_page_fault+0x2b/0x30 [ 177.738474][ T3588] ? __kasan_slab_free+0x6a/0x80 [ 177.738495][ T3588] ? kmem_cache_free+0x1bd/0x4f0 [ 177.738514][ T3588] ? get_signal+0xa74/0x14e0 [ 177.738538][ T3588] get_signal+0x11f8/0x14e0 [ 177.738563][ T3588] arch_do_signal_or_restart+0xbc/0x760 [ 177.738582][ T3588] ? fixup_vdso_exception+0x20d/0x310 [ 177.738601][ T3588] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 177.738622][ T3588] irqentry_exit_to_user_mode+0x4d/0xb0 [ 177.738644][ T3588] irqentry_exit+0x16/0x60 [ 177.738665][ T3588] exc_page_fault+0x65/0xc0 [ 177.738686][ T3588] asm_exc_page_fault+0x2b/0x30 [ 177.738703][ T3588] RIP: 0033:0x7f9f9fc52877 [ 177.738720][ T3588] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 177.738736][ T3588] RSP: 002b:00007f9fa0bc9120 EFLAGS: 00010202 [ 177.738754][ T3588] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9f9fd9cdd9 [ 177.738767][ T3588] RDX: 00007f9fa0bc9140 RSI: 00007f9fa0bc9270 RDI: 000000000000000b [ 177.738781][ T3588] RBP: 00007f9f9fe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 177.738793][ T3588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.738805][ T3588] R13: 00007f9fa0016128 R14: 00007f9fa0016090 R15: 00007ffe44add4f8 [ 177.738822][ T3588] [ 177.738829][ T3588] memory: usage 307200kB, limit 307200kB, failcnt 18905 [ 178.216526][ T3588] memory+swap: usage 276672kB, limit 9007199254740988kB, failcnt 0 [ 178.224521][ T3588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 178.231385][ T3588] Memory cgroup stats for /syz4: [ 178.231615][ T3588] cache 272080896 [ 178.240198][ T3588] rss 0 [ 178.243027][ T3588] rss_huge 0 [ 178.246237][ T3588] shmem 0 [ 178.249172][ T3588] mapped_file 0 [ 178.252671][ T3588] dirty 0 [ 178.255607][ T3588] writeback 0 [ 178.258892][ T3588] workingset_refault_anon 2427 [ 178.263714][ T3588] workingset_refault_file 0 [ 178.268218][ T3588] swap 856064 [ 178.271600][ T310] usb 6-1: device descriptor read/64, error -71 [ 178.277901][ T3588] swapcached 106496 [ 178.281761][ T3588] pgpgin 329253 [ 178.285228][ T3588] pgpgout 263281 [ 178.288777][ T3588] pgfault 56456 [ 178.292287][ T3588] pgmajfault 473 [ 178.295832][ T3588] inactive_anon 0 [ 178.299459][ T3588] active_anon 106496 [ 178.303415][ T3588] inactive_file 0 [ 178.307045][ T3588] active_file 0 [ 178.310506][ T3588] unevictable 272080896 [ 178.314710][ T3588] hierarchical_memory_limit 314572800 [ 178.320082][ T3588] hierarchical_memsw_limit 9223372036854771712 [ 178.326286][ T3588] total_cache 272080896 [ 178.330441][ T3588] total_rss 0 [ 178.333770][ T3588] total_rss_huge 0 [ 178.337492][ T3588] total_shmem 0 [ 178.340954][ T3588] total_mapped_file 0 [ 178.344976][ T3588] total_dirty 0 [ 178.348441][ T3588] total_writeback 0 [ 178.352305][ T3588] total_workingset_refault_anon 2427 [ 178.357599][ T3588] total_workingset_refault_file 0 [ 178.371575][ T3588] total_swap 856064 [ 178.375439][ T3588] total_swapcached 106496 [ 178.379773][ T3588] total_pgpgin 329253 [ 178.391582][ T3588] total_pgpgout 263281 [ 178.395710][ T3588] total_pgfault 56456 [ 178.399701][ T3588] total_pgmajfault 473 [ 178.410469][ T3588] total_inactive_anon 0 [ 178.415020][ T3588] total_active_anon 106496 [ 178.429976][ T3588] total_inactive_file 0 [ 178.434440][ T3588] total_active_file 0 [ 178.438500][ T3588] total_unevictable 272080896 [ 178.443533][ T3588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.956,pid=3588,uid=0 [ 178.458646][ T3588] Memory cgroup out of memory: Killed process 3588 (syz.4.956) total-vm:90508kB, anon-rss:1364kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 178.521572][ T310] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 178.651587][ T310] usb 6-1: device descriptor read/64, error -71 [ 178.695632][ T3919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1059'. [ 178.891570][ T310] usb 6-1: device descriptor read/64, error -71 [ 179.001674][ T310] usb usb6-port1: attempt power cycle [ 179.218304][ T36] audit: type=1400 audit(2000000119.187:10786): avc: denied { nlmsg_read } for pid=3922 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.341641][ T310] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 179.362540][ T310] usb 6-1: device descriptor read/8, error -71 [ 179.374882][ T10] kernel write not supported for file /uinput (pid: 10 comm: kworker/0:1) [ 179.502857][ T310] usb 6-1: device descriptor read/8, error -71 [ 179.632098][ T31] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 179.711265][ T3950] netlink: 'syz.5.1073': attribute type 11 has an invalid length. [ 179.719241][ T3950] netlink: 'syz.5.1073': attribute type 2 has an invalid length. [ 179.783363][ T31] usb 3-1: config 9 has an invalid interface number: 62 but max is 1 [ 179.791556][ T31] usb 3-1: config 9 has an invalid interface number: 49 but max is 1 [ 179.799642][ T31] usb 3-1: config 9 has no interface number 0 [ 179.805745][ T31] usb 3-1: config 9 has no interface number 1 [ 179.811885][ T31] usb 3-1: config 9 interface 62 altsetting 8 bulk endpoint 0xF has invalid maxpacket 64 [ 179.821762][ T31] usb 3-1: config 9 interface 62 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 179.832651][ T31] usb 3-1: config 9 interface 62 has no altsetting 0 [ 179.839345][ T31] usb 3-1: config 9 interface 49 has no altsetting 0 [ 179.847421][ T31] usb 3-1: New USB device found, idVendor=03eb, idProduct=4343, bcdDevice=8d.99 [ 179.856539][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.864547][ T31] usb 3-1: Product: syz [ 179.868712][ T31] usb 3-1: Manufacturer: syz [ 179.873327][ T31] usb 3-1: SerialNumber: syz [ 179.878765][ T3948] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 180.021567][ T310] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 180.043004][ T3950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.051682][ T3950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.060330][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.069529][ T310] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 180.077356][ T310] usb 6-1: can't read configurations, error -71 [ 180.085270][ T310] usb usb6-port1: unable to enumerate USB device [ 180.096643][ T31] usb 3-1: USB disconnect, device number 71 [ 180.706371][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 181.031588][ T31] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 181.182757][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.193742][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.203520][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 181.212582][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.221477][ T31] usb 3-1: config 0 descriptor?? [ 181.352714][ T4016] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 181.361953][ T4016] overlayfs: missing 'lowerdir' [ 181.367782][ T4016] netlink: 'syz.3.1096': attribute type 22 has an invalid length. [ 181.730821][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.739412][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.748538][ T31] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 181.756122][ T31] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x7 [ 181.763919][ T31] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 181.821605][ T65] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 181.948304][ T31] cp2112 0003:10C4:EA90.001E: error requesting version [ 181.949039][ T4018] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1086'. [ 181.956672][ T31] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -32 [ 181.968836][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.981628][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 181.983712][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.990622][ T65] usb 6-1: string descriptor 0 read error: -22 [ 182.000647][ T65] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 182.009733][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.228953][ T65] usb 6-1: USB disconnect, device number 15 [ 182.971579][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 183.131955][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.142175][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.156000][ T31] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.165156][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 183.173309][ T31] usb 6-1: SerialNumber: syz [ 183.383046][ T31] usb 6-1: 0:2 : does not exist [ 183.389694][ T31] usb 6-1: USB disconnect, device number 16 [ 183.442251][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 183.452945][ T4098] /dev/loop3: Can't lookup blockdev [ 183.470628][ T4100] overlayfs: failed to clone upperpath [ 183.487816][ T4105] incfs: Can't find or create .index dir in ./file0 [ 183.494593][ T4105] incfs: mount failed -17 [ 183.805961][ T31] usb 3-1: USB disconnect, device number 72 [ 183.819700][ T4110] option changes via remount are deprecated (pid=4109 comm=syz.2.1115) [ 183.828112][ T4110] cgroup: option or name mismatch, new: 0x0 "func", old: 0x0 "" [ 183.846635][ T4112] netlink: 'syz.2.1116': attribute type 25 has an invalid length. [ 183.910662][ T4115] syzkaller1: entered promiscuous mode [ 183.916274][ T4115] syzkaller1: entered allmulticast mode [ 184.161570][ T310] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 184.312688][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.323707][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.333480][ T310] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.346312][ T310] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 184.355373][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.363993][ T310] usb 6-1: config 0 descriptor?? [ 184.771131][ T310] playstation 0003:054C:09CC.001F: unknown main item tag 0x0 [ 184.779024][ T310] playstation 0003:054C:09CC.001F: unknown main item tag 0x0 [ 184.786661][ T310] playstation 0003:054C:09CC.001F: unknown main item tag 0x0 [ 184.797827][ T310] playstation 0003:054C:09CC.001F: unknown main item tag 0x0 [ 184.805546][ T310] playstation 0003:054C:09CC.001F: item fetching failed at offset 7/9 [ 184.814102][ T310] playstation 0003:054C:09CC.001F: Parse failed [ 184.820704][ T310] playstation 0003:054C:09CC.001F: probe with driver playstation failed with error -22 [ 184.972825][ T310] usb 6-1: USB disconnect, device number 17 [ 185.473694][ T36] audit: type=1400 audit(2000000125.447:10787): avc: denied { read } for pid=4152 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.522528][ T4160] fuse: blksize only supported for fuseblk [ 185.941582][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 186.093618][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 186.102793][ T10] usb 6-1: New USB device strings: Mfr=14, Product=20, SerialNumber=0 [ 186.110981][ T10] usb 6-1: Product: syz [ 186.115220][ T10] usb 6-1: Manufacturer: syz [ 186.120441][ T10] usb 6-1: config 0 descriptor?? [ 186.126336][ T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 186.134214][ T10] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 186.301574][ T65] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 186.326612][ T4177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.335197][ T4177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.344229][ T10] usb 6-1: USB disconnect, device number 18 [ 186.350583][ T10] ftdi_sio 6-1:0.0: device disconnected [ 186.355224][ T36] audit: type=1326 audit(2000000126.327:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.1132" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 186.431602][ T65] usb 3-1: device descriptor read/64, error -71 [ 186.671577][ T65] usb 3-1: device descriptor read/64, error -71 [ 186.911601][ T65] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 187.014207][ T4207] overlayfs: failed to resolve './cgroup': -2 [ 187.051565][ T65] usb 3-1: device descriptor read/64, error -71 [ 187.101844][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 187.261553][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 187.272171][ T10] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 187.280503][ T10] usb 6-1: config 0 has no interface number 0 [ 187.290107][ T10] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 187.300997][ T65] usb 3-1: device descriptor read/64, error -71 [ 187.309083][ T10] usb 6-1: config 0 interface 196 has no altsetting 0 [ 187.317464][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 187.326816][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.336206][ T10] usb 6-1: Product: syz [ 187.340708][ T10] usb 6-1: Manufacturer: syz [ 187.345927][ T10] usb 6-1: SerialNumber: syz [ 187.351164][ T36] audit: type=1326 audit(2000000127.317:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.1150" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x0 [ 187.376338][ T10] usb 6-1: config 0 descriptor?? [ 187.381741][ T4196] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 187.411665][ T65] usb usb3-port1: attempt power cycle [ 187.674941][ T4216] devpts: called with bogus options [ 187.751571][ T65] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 187.772486][ T65] usb 3-1: device descriptor read/8, error -71 [ 187.902630][ T65] usb 3-1: device descriptor read/8, error -71 [ 188.141556][ T65] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 188.162542][ T65] usb 3-1: device descriptor read/8, error -71 [ 188.185952][ T4223] 9pnet_fd: Insufficient options for proto=fd [ 188.208918][ T36] audit: type=1400 audit(2000000128.177:10790): avc: denied { setattr } for pid=4224 comm="syz.3.1156" name="CAN_RAW" dev="sockfs" ino=28081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.292552][ T65] usb 3-1: device descriptor read/8, error -71 [ 188.402004][ T65] usb usb3-port1: unable to enumerate USB device [ 189.314159][ T36] audit: type=1400 audit(2000000129.287:10791): avc: denied { accept } for pid=4272 comm="syz.4.1174" path="socket:[28849]" dev="sockfs" ino=28849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.353262][ T4275] overlayfs: conflicting options: nfs_export=on,index=off [ 189.371009][ T4277] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 189.396389][ T4281] netlink: 'syz.4.1178': attribute type 13 has an invalid length. [ 189.400863][ T4283] incfs: Error accessing: /dev/net/tun. [ 189.409981][ T4283] incfs: mount failed -2 [ 189.414361][ T311] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 189.473345][ T4298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4298 comm=syz.4.1184 [ 189.500178][ T4303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4303 comm=syz.4.1184 [ 189.539775][ T36] audit: type=1400 audit(2000000129.507:10792): avc: denied { setopt } for pid=4308 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.601578][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 189.607933][ T311] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 189.616294][ T311] usb 3-1: config 0 has no interface number 0 [ 189.622512][ T311] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 189.632645][ T311] usb 3-1: config 0 interface 196 has no altsetting 0 [ 189.641797][ T311] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 189.651292][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.659613][ T311] usb 3-1: Product: syz [ 189.663928][ T311] usb 3-1: Manufacturer: syz [ 189.668625][ T311] usb 3-1: SerialNumber: syz [ 189.676541][ T311] usb 3-1: config 0 descriptor?? [ 189.685196][ T4271] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 189.874056][ T10] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 189.881662][ T10] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 189.900721][ T10] usb 6-1: USB disconnect, device number 19 [ 190.272477][ T4359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4359 comm=syz.4.1202 [ 190.876795][ T36] audit: type=1400 audit(2000000130.847:10793): avc: denied { create } for pid=4376 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 190.897297][ T36] audit: type=1400 audit(2000000130.847:10794): avc: denied { create } for pid=4376 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 190.918071][ T36] audit: type=1400 audit(2000000130.847:10795): avc: denied { ioctl } for pid=4376 comm="syz.4.1208" path="socket:[29044]" dev="sockfs" ino=29044 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 191.001580][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 191.151590][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 191.157930][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 222, changing to 7 [ 191.170563][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 191.179676][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.187699][ T10] usb 6-1: Product: syz [ 191.191897][ T10] usb 6-1: Manufacturer: syz [ 191.196499][ T10] usb 6-1: SerialNumber: syz [ 191.463609][ T10] usb 6-1: Fast Track Pro switching to config #2 [ 191.472883][ T10] usb 6-1: USB disconnect, device number 20 [ 192.105166][ T311] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 192.114379][ T311] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 192.124534][ T311] usb 3-1: USB disconnect, device number 77 [ 192.207894][ T4407] fuse: Bad value for 'fd' [ 192.273261][ T4410] SELinux: policydb table sizes (8,10) do not match mine (8,7) [ 192.273325][ T36] audit: type=1400 audit(2000000132.247:10796): avc: denied { load_policy } for pid=4409 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 192.281744][ T4410] SELinux: failed to load policy [ 192.340571][ T4418] fuse: Unknown parameter 'uid<00000000000000032768' [ 192.392486][ T36] audit: type=1400 audit(2000000132.367:10797): avc: denied { write } for pid=4429 comm="syz.2.1223" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.437441][ T36] audit: type=1400 audit(2000000132.407:10798): avc: denied { shutdown } for pid=4429 comm="syz.2.1223" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.459027][ T4430] kvm: pic: non byte read [ 192.463766][ T4430] kvm: pic: level sensitive irq not supported [ 192.463811][ T4430] kvm: pic: non byte read [ 192.474487][ T4430] kvm: pic: level sensitive irq not supported [ 192.474541][ T4430] kvm: pic: non byte read [ 192.485170][ T4430] kvm: pic: level sensitive irq not supported [ 192.485207][ T4430] kvm: pic: non byte read [ 192.495822][ T4430] kvm: pic: level sensitive irq not supported [ 192.495872][ T4430] kvm: pic: non byte read [ 192.506445][ T4430] kvm: pic: level sensitive irq not supported [ 192.506483][ T4430] kvm: pic: non byte read [ 192.517184][ T4430] kvm: pic: level sensitive irq not supported [ 192.517243][ T4430] kvm: pic: non byte read [ 192.527844][ T4430] kvm: pic: level sensitive irq not supported [ 192.527885][ T4430] kvm: pic: non byte read [ 192.538470][ T4430] kvm: pic: level sensitive irq not supported [ 192.538518][ T4430] kvm: pic: non byte read [ 192.681565][ T311] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 192.834004][ T311] usb 6-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 192.843189][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.851849][ T311] usb 6-1: Product: syz [ 192.856488][ T311] usb 6-1: Manufacturer: syz [ 192.861336][ T311] usb 6-1: SerialNumber: syz [ 193.072113][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.080755][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.295288][ T4451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1304 sclass=netlink_route_socket pid=4451 comm=syz.2.1230 [ 193.465570][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 193.571596][ T10] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 193.599186][ T311] usb 6-1: Can't get UAC3 power state for id 10 [ 193.612843][ T311] usb 6-1: BAAD HEADSET c_chmask mismatch [ 193.621230][ T311] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 193.633724][ T311] usb 6-1: USB disconnect, device number 21 [ 193.643423][ T1554] udevd[1554]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 193.701623][ T10] usb 3-1: device descriptor read/64, error -71 [ 193.941574][ T10] usb 3-1: device descriptor read/64, error -71 [ 194.111601][ T311] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 194.181604][ T10] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 194.265216][ T311] usb 6-1: unable to get BOS descriptor or descriptor too short [ 194.273505][ T311] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 194.281065][ T311] usb 6-1: can't read configurations, error -71 [ 194.311567][ T10] usb 3-1: device descriptor read/64, error -71 [ 194.551567][ T10] usb 3-1: device descriptor read/64, error -71 [ 194.661646][ T10] usb usb3-port1: attempt power cycle [ 195.001564][ T10] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 195.022643][ T10] usb 3-1: device descriptor read/8, error -71 [ 195.162568][ T10] usb 3-1: device descriptor read/8, error -71 [ 195.321603][ T311] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 195.401564][ T10] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 195.422594][ T10] usb 3-1: device descriptor read/8, error -71 [ 195.473444][ T311] usb 6-1: config 9 has an invalid interface number: 62 but max is 1 [ 195.481667][ T311] usb 6-1: config 9 has an invalid interface number: 49 but max is 1 [ 195.489744][ T311] usb 6-1: config 9 has no interface number 0 [ 195.495904][ T311] usb 6-1: config 9 has no interface number 1 [ 195.502034][ T311] usb 6-1: config 9 interface 62 altsetting 8 bulk endpoint 0xF has invalid maxpacket 64 [ 195.511885][ T311] usb 6-1: config 9 interface 62 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 195.522767][ T311] usb 6-1: config 9 interface 62 has no altsetting 0 [ 195.529432][ T311] usb 6-1: config 9 interface 49 has no altsetting 0 [ 195.537790][ T311] usb 6-1: New USB device found, idVendor=03eb, idProduct=4343, bcdDevice=8d.99 [ 195.546904][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.554930][ T311] usb 6-1: Product: syz [ 195.559091][ T311] usb 6-1: Manufacturer: syz [ 195.563720][ T311] usb 6-1: SerialNumber: syz [ 195.569328][ T4501] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 195.577683][ T10] usb 3-1: device descriptor read/8, error -71 [ 195.691687][ T10] usb usb3-port1: unable to enumerate USB device [ 196.507998][ T36] audit: type=1326 audit(2000000136.477:10799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fb39cdd9 code=0x7ffc0000 [ 196.536135][ T36] audit: type=1326 audit(2000000136.477:10800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fb39cdd9 code=0x7ffc0000 [ 196.568113][ T36] audit: type=1326 audit(2000000136.507:10801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fb39cdd9 code=0x7ffc0000 [ 196.597496][ T36] audit: type=1326 audit(2000000136.507:10802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fb33e159 code=0x7ffc0000 [ 196.623578][ T36] audit: type=1326 audit(2000000136.507:10803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fb33e159 code=0x7ffc0000 [ 196.649266][ T36] audit: type=1326 audit(2000000136.507:10804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fb33e159 code=0x7ffc0000 [ 196.674867][ T36] audit: type=1326 audit(2000000136.507:10805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fb39cdd9 code=0x7ffc0000 [ 196.700537][ T36] audit: type=1326 audit(2000000136.507:10806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fb33e159 code=0x7ffc0000 [ 196.726106][ T36] audit: type=1326 audit(2000000136.507:10807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fb39cdd9 code=0x7ffc0000 [ 196.752334][ T36] audit: type=1326 audit(2000000136.507:10808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.1260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fb33e159 code=0x7ffc0000 [ 197.426532][ T4586] fuse: Bad value for 'group_id' [ 197.431581][ T4586] fuse: Bad value for 'group_id' [ 197.797706][ T311] usb 6-1: USB disconnect, device number 23 [ 197.822717][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 197.973234][ T4626] futex_wake_op: syz.3.1288 tries to shift op by -1; fix this program [ 198.091627][ T9] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 198.119343][ T4630] netlink: 'syz.5.1290': attribute type 16 has an invalid length. [ 198.127262][ T4630] netlink: 'syz.5.1290': attribute type 4 has an invalid length. [ 198.135023][ T4630] netlink: 64114 bytes leftover after parsing attributes in process `syz.5.1290'. [ 198.238724][ T4643] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 198.248235][ T4643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1295'. [ 198.248784][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 198.265451][ T9] usb 3-1: config 0 has no interface number 0 [ 198.271598][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 198.279564][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 198.288680][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.296707][ T9] usb 3-1: Product: syz [ 198.300857][ T9] usb 3-1: Manufacturer: syz [ 198.305471][ T9] usb 3-1: SerialNumber: syz [ 198.313001][ T9] usb 3-1: config 0 descriptor?? [ 198.331686][ T4645] vlan0: entered promiscuous mode [ 198.336884][ T4645] vlan0: entered allmulticast mode [ 198.342098][ T4645] veth0_vlan: entered allmulticast mode [ 198.528190][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 198.544539][ T4660] page size migration: [4660 (syz.2.1300)] madvise_vma_pad_pages:333: Invalid attempt to madvise padding on MAP_SHARED vma [ 198.548051][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 198.573621][ T9] usb 3-1: USB disconnect, device number 82 [ 198.600385][ T4661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'. [ 198.611580][ T311] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 198.761558][ T311] usb 6-1: Using ep0 maxpacket: 16 [ 198.767801][ T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.778730][ T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.788513][ T311] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.801404][ T311] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.810486][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.819175][ T311] usb 6-1: config 0 descriptor?? [ 199.084316][ T4666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4666 comm=syz.3.1302 [ 199.106737][ T4668] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1303'. [ 199.279490][ T311] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 199.286835][ T311] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 199.300835][ T311] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0020/input/input38 [ 199.318365][ T311] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 199.339292][ T4676] x_tables: duplicate underflow at hook 2 [ 199.354830][ T4680] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 199.493913][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.504798][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.792217][ T4720] batadv_slave_1: entered promiscuous mode [ 199.802514][ T4719] batadv_slave_1: left promiscuous mode [ 199.811630][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 199.872140][ T4723] netlink: 'syz.3.1317': attribute type 4 has an invalid length. [ 199.879960][ T4723] netlink: 'syz.3.1317': attribute type 27 has an invalid length. [ 199.887863][ T4723] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.1317'. [ 199.961577][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 199.967738][ T9] usb 3-1: config 2 has an invalid interface number: 152 but max is 0 [ 199.976245][ T9] usb 3-1: config 2 has no interface number 0 [ 199.982383][ T9] usb 3-1: config 2 interface 152 has no altsetting 0 [ 199.990496][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 199.999647][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.007691][ T9] usb 3-1: Product: syz [ 200.011929][ T9] usb 3-1: Manufacturer: syz [ 200.016530][ T9] usb 3-1: SerialNumber: syz [ 200.023647][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 200.232431][ T9] r8152 3-1:2.152: Expected endpoints are not found [ 200.240069][ T9] r8152-cfgselector 3-1: USB disconnect, device number 83 [ 200.307018][ T4727] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1319'. [ 200.325558][ T4729] 9pnet_fd: Insufficient options for proto=fd [ 200.541555][ T9] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 201.076576][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 201.704430][ T4820] netlink: 'syz.2.1349': attribute type 11 has an invalid length. [ 201.721576][ T9] usb 6-1: device descriptor read/64, error -71 [ 201.744045][ T4820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 201.831986][ T9] usb 6-1: device reset changed ep0 maxpacket size! [ 201.838832][ T392] usb 6-1: USB disconnect, device number 24 [ 201.971566][ T392] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 202.021559][ T311] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 202.122829][ T392] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 202.139330][ T392] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 202.148527][ T392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.156573][ T392] usb 6-1: Product: syz [ 202.160834][ T392] usb 6-1: Manufacturer: syz [ 202.161564][ T311] usb 3-1: device descriptor read/64, error -71 [ 202.165464][ T392] usb 6-1: SerialNumber: syz [ 202.382281][ T36] kauditd_printk_skb: 275 callbacks suppressed [ 202.382313][ T36] audit: type=1400 audit(2000000142.347:11084): avc: denied { checkpoint_restore } for pid=4795 comm="syz.5.1341" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.411593][ T311] usb 3-1: device descriptor read/64, error -71 [ 202.412376][ T392] usb 6-1: unit 1 not found! [ 202.428486][ T392] usb 6-1: USB disconnect, device number 25 [ 202.432013][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.651650][ T311] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 202.781592][ T311] usb 3-1: device descriptor read/64, error -71 [ 202.910201][ T4845] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1358'. [ 202.969611][ T4850] /dev/loop0: Can't lookup blockdev [ 203.021606][ T311] usb 3-1: device descriptor read/64, error -71 [ 203.131636][ T311] usb usb3-port1: attempt power cycle [ 203.138742][ T4855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4855 comm=syz.4.1361 [ 203.161561][ T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 203.311564][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 203.317838][ T31] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 203.326971][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.335583][ T31] usb 6-1: config 0 descriptor?? [ 203.341853][ T31] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 203.471567][ T311] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 203.492512][ T311] usb 3-1: device descriptor read/8, error -71 [ 203.542365][ T31] usb 6-1: Detected FT232B [ 203.596476][ T4865] netlink: 484 bytes leftover after parsing attributes in process `syz.3.1364'. [ 203.622512][ T311] usb 3-1: device descriptor read/8, error -71 [ 203.863403][ T311] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 203.882506][ T311] usb 3-1: device descriptor read/8, error -71 [ 203.944643][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 203.952138][ T31] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 203.961676][ T31] usb 6-1: USB disconnect, device number 26 [ 203.968261][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 203.978266][ T31] ftdi_sio 6-1:0.0: device disconnected [ 204.012611][ T311] usb 3-1: device descriptor read/8, error -71 [ 204.121660][ T311] usb usb3-port1: unable to enumerate USB device [ 204.358939][ T4873] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1367'. [ 204.368083][ T4873] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.377557][ T4873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4873 comm=syz.3.1367 [ 204.861587][ T31] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 205.016030][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.032416][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 205.061563][ T31] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 205.090120][ T31] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 205.111559][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.119614][ T31] usb 6-1: Product: syz [ 205.138795][ T31] usb 6-1: Manufacturer: syz [ 205.151557][ T31] usb 6-1: SerialNumber: syz [ 205.366593][ T31] usb 6-1: unit 4: unexpected type 0x03 [ 205.379589][ T31] usb 6-1: unit 8 not found! [ 205.406181][ T31] usb 6-1: USB disconnect, device number 27 [ 205.722875][ T36] audit: type=1326 audit(2000000145.697:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.2.1376" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fb39cdd9 code=0x7fc00000 [ 205.741029][ T4946] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 205.748483][ T36] audit: type=1326 audit(2000000145.697:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.2.1376" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21fb39cdd9 code=0x7fc00000 [ 205.756174][ T4946] netlink: 'syz.2.1391': attribute type 21 has an invalid length. [ 205.789310][ T4946] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1391'. [ 205.854472][ T36] audit: type=1400 audit(2000000145.827:11087): avc: denied { associate } for pid=4950 comm="syz.2.1391" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.875615][ T36] audit: type=1400 audit(2000000145.827:11088): avc: denied { create } for pid=4945 comm="syz.2.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 206.091619][ T31] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 206.151592][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 206.221570][ T31] usb 3-1: device descriptor read/64, error -71 [ 206.281586][ T9] usb 6-1: device descriptor read/64, error -71 [ 206.461565][ T31] usb 3-1: device descriptor read/64, error -71 [ 206.521570][ T9] usb 6-1: device descriptor read/64, error -71 [ 206.701562][ T31] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 206.761567][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 206.831566][ T31] usb 3-1: device descriptor read/64, error -71 [ 206.891580][ T9] usb 6-1: device descriptor read/64, error -71 [ 207.081556][ T31] usb 3-1: device descriptor read/64, error -71 [ 207.131559][ T9] usb 6-1: device descriptor read/64, error -71 [ 207.191630][ T31] usb usb3-port1: attempt power cycle [ 207.241700][ T9] usb usb6-port1: attempt power cycle [ 207.490350][ T36] audit: type=1400 audit(2000000147.457:11089): avc: denied { execheap } for pid=4987 comm="syz.4.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 207.531560][ T31] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 207.552639][ T31] usb 3-1: device descriptor read/8, error -71 [ 207.565862][ T4999] mmap: syz.4.1412 (4999): VmData 29073408 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 207.581565][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 207.603071][ T9] usb 6-1: device descriptor read/8, error -71 [ 207.682647][ T31] usb 3-1: device descriptor read/8, error -71 [ 207.732583][ T9] usb 6-1: device descriptor read/8, error -71 [ 207.921549][ T31] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 207.942524][ T31] usb 3-1: device descriptor read/8, error -71 [ 207.971583][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 207.992586][ T9] usb 6-1: device descriptor read/8, error -71 [ 208.072590][ T31] usb 3-1: device descriptor read/8, error -71 [ 208.122641][ T9] usb 6-1: device descriptor read/8, error -71 [ 208.181681][ T31] usb usb3-port1: unable to enumerate USB device [ 208.231649][ T9] usb usb6-port1: unable to enumerate USB device [ 208.729706][ T5042] +$<: renamed from bridge0 (while UP) [ 209.805579][ T5078] overlayfs: failed to clone upperpath [ 209.827876][ T36] audit: type=1400 audit(2000000149.797:11090): avc: denied { connect } for pid=5086 comm="syz.4.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.865271][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'. [ 209.875469][ T36] audit: type=1400 audit(2000000149.847:11091): avc: denied { create } for pid=5089 comm="syz.4.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.392981][ T5104] /dev/loop0: Can't lookup blockdev [ 210.743455][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1451'. [ 210.791573][ T9] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 210.897233][ T5125] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 210.921889][ T9] usb 3-1: device descriptor read/64, error -71 [ 211.131568][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 211.161578][ T9] usb 3-1: device descriptor read/64, error -71 [ 211.282805][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 211.291219][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 211.302203][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 211.315264][ T10] usb 6-1: string descriptor 0 read error: -22 [ 211.321469][ T10] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 211.330557][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.401556][ T9] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 211.482514][ T5148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5148 comm=syz.4.1464 [ 211.495525][ T5148] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1464'. [ 211.531596][ T9] usb 3-1: device descriptor read/64, error -71 [ 211.742612][ T10] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 211.751933][ T10] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 211.763517][ T10] usb 6-1: USB disconnect, device number 32 [ 211.772277][ T9] usb 3-1: device descriptor read/64, error -71 [ 211.881647][ T9] usb usb3-port1: attempt power cycle [ 212.039670][ T5161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=72 sclass=netlink_tcpdiag_socket pid=5161 comm=syz.4.1470 [ 212.221568][ T9] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 212.242577][ T9] usb 3-1: device descriptor read/8, error -71 [ 212.268563][ T36] audit: type=1326 audit(2000000152.237:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.5.1472" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42cff9cdd9 code=0x0 [ 212.375800][ T9] usb 3-1: device descriptor read/8, error -71 [ 212.390996][ T36] audit: type=1400 audit(2000000152.357:11093): avc: denied { shutdown } for pid=5172 comm="syz.3.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.601562][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 212.621556][ T9] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 212.642833][ T9] usb 3-1: device descriptor read/8, error -71 [ 212.761555][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 212.768070][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.779557][ T9] usb 3-1: device descriptor read/8, error -71 [ 212.786596][ T10] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 212.796079][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.804341][ T10] usb 6-1: Product: syz [ 212.808721][ T10] usb 6-1: Manufacturer: syz [ 212.813660][ T10] usb 6-1: SerialNumber: syz [ 212.819300][ T10] usb 6-1: config 0 descriptor?? [ 212.825581][ T10] usb 6-1: bad CDC descriptors [ 212.830784][ T10] usb 6-1: unsupported MDLM descriptors [ 212.891675][ T9] usb usb3-port1: unable to enumerate USB device [ 213.597060][ T5189] IPv4: Oversized IP packet from 127.202.26.0 [ 213.618860][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.627527][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.636939][ T5193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5193 comm=syz.2.1480 [ 213.637138][ T5194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5194 comm=syz.2.1480 [ 213.961563][ T310] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 214.111571][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 214.119720][ T310] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 214.128971][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.137105][ T310] usb 3-1: Product: syz [ 214.141275][ T310] usb 3-1: Manufacturer: syz [ 214.145892][ T310] usb 3-1: SerialNumber: syz [ 214.394185][ T310] usb 3-1: selecting invalid altsetting 1 [ 214.401771][ T310] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 214.411710][ T310] usb 3-1: USB disconnect, device number 96 [ 214.417595][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.020814][ T5215] incfs: Error accessing: ./file0. [ 215.026065][ T5215] incfs: mount failed -20 [ 215.267368][ T310] usb 6-1: USB disconnect, device number 33 [ 215.293497][ T36] audit: type=1400 audit(2000000155.267:11094): avc: denied { create } for pid=5221 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 215.323794][ T5230] fuse: Bad value for 'group_id' [ 215.328815][ T5230] fuse: Bad value for 'group_id' [ 215.349006][ T5230] fuse: Bad value for 'group_id' [ 215.354747][ T5230] fuse: Bad value for 'group_id' [ 215.641549][ T310] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 215.791565][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 215.797887][ T310] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 215.806060][ T310] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 215.814271][ T310] usb 6-1: config 0 has no interface number 0 [ 215.820362][ T310] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 215.830314][ T310] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 215.841729][ T310] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 215.850812][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.858843][ T310] usb 6-1: Product: syz [ 215.863037][ T310] usb 6-1: Manufacturer: syz [ 215.867628][ T310] usb 6-1: SerialNumber: syz [ 215.873047][ T310] usb 6-1: config 0 descriptor?? [ 215.878305][ T5228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 215.885567][ T5228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 215.965421][ T5246] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 216.093851][ T5228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.101150][ T5228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.361830][ T310] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 216.372026][ T310] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 216.381768][ T310] asix 6-1:0.251: probe with driver asix failed with error -5 [ 216.482272][ T36] audit: type=1400 audit(2000000156.457:11095): avc: denied { write } for pid=5254 comm="syz.3.1499" name="file0" dev="tmpfs" ino=2485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 216.584369][ T310] usb 6-1: USB disconnect, device number 34 [ 217.260249][ T36] audit: type=1400 audit(2000000157.227:11096): avc: denied { create } for pid=5269 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.261180][ C0] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 217.280153][ T36] audit: type=1400 audit(2000000157.227:11097): avc: denied { create } for pid=5269 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.314357][ T5275] overlayfs: failed to clone upperpath [ 217.320511][ T5275] overlayfs: failed to clone upperpath [ 217.471584][ T310] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 217.564674][ T36] audit: type=1400 audit(2000000157.537:11098): avc: denied { watch } for pid=5289 comm="syz.3.1513" path="/471/file0" dev="tmpfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 217.565338][ T5290] netlink: 'syz.3.1513': attribute type 13 has an invalid length. [ 217.622608][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.633815][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.643613][ T310] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 217.652695][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.661218][ T310] usb 6-1: config 0 descriptor?? [ 217.873079][ T310] cypress 0003:04B4:DE64.0021: item fetching failed at offset 0/3 [ 217.883173][ T310] cypress 0003:04B4:DE64.0021: parse failed [ 217.889172][ T310] cypress 0003:04B4:DE64.0021: probe with driver cypress failed with error -22 [ 218.217150][ T36] audit: type=1400 audit(2000000158.187:11099): avc: denied { shutdown } for pid=5329 comm="syz.2.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.670992][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 218.679975][ T5339] bridge_slave_1: left allmulticast mode [ 218.685650][ T5339] bridge_slave_1: left promiscuous mode [ 218.691279][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.698794][ T5339] bridge_slave_0: left allmulticast mode [ 218.704488][ T5339] bridge_slave_0: left promiscuous mode [ 218.710274][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.952713][ T36] audit: type=1326 audit(2000000158.927:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.3.1525" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2d579cdd9 code=0x0 [ 219.003904][ T5348] tc_dump_action: action bad kind [ 219.728426][ T5372] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1534'. [ 219.911991][ T5400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1540'. [ 219.947286][ T5400] team_slave_1: entered promiscuous mode [ 219.953279][ T5400] team_slave_1: entered allmulticast mode [ 219.968196][ T36] audit: type=1326 audit(2000000159.937:11101): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.1542" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2d579cdd9 code=0x0 [ 220.247828][ T10] usb 6-1: USB disconnect, device number 35 [ 220.276760][ T5430] new mount options do not match the existing superblock, will be ignored [ 220.286021][ T36] audit: type=1400 audit(2000000160.257:11102): avc: denied { mount } for pid=5429 comm="syz.5.1545" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 220.317060][ T36] audit: type=1400 audit(2000000160.287:11103): avc: denied { unmount } for pid=3360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 220.623833][ T36] audit: type=1400 audit(2000000160.597:11104): avc: denied { map } for pid=5437 comm="syz.3.1548" path="socket:[32640]" dev="sockfs" ino=32640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 220.721566][ T10] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 220.746276][ T5456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5456 comm=syz.4.1554 [ 220.882703][ T10] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 220.891068][ T10] usb 6-1: config 0 has no interface number 0 [ 220.897372][ T10] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 220.908658][ T10] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.918721][ T10] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 220.930070][ T10] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 220.941759][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 220.951082][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 220.959200][ T10] usb 6-1: Product: syz [ 220.963574][ T10] usb 6-1: Manufacturer: syz [ 220.968253][ T10] usb 6-1: SerialNumber: syz [ 220.973862][ T10] usb 6-1: config 0 descriptor?? [ 220.980676][ T10] xpad 6-1:0.237: probe with driver xpad failed with error -5 [ 221.182779][ T10] usb 6-1: USB disconnect, device number 36 [ 221.377012][ T36] audit: type=1400 audit(2000000161.347:11105): avc: denied { append } for pid=5481 comm="syz.2.1562" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 221.721607][ T310] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 221.778855][ T5486] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1563'. [ 221.883410][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.898423][ T310] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.913138][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.922395][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.930654][ T310] usb 3-1: Product: syz [ 221.935332][ T310] usb 3-1: Manufacturer: syz [ 221.939958][ T310] usb 3-1: SerialNumber: syz [ 222.151574][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 222.301563][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 222.307910][ T10] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 222.316109][ T10] usb 6-1: config 0 has no interface number 0 [ 222.322259][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 222.332301][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 222.343848][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 222.353360][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.361397][ T10] usb 6-1: Product: syz [ 222.365614][ T10] usb 6-1: Manufacturer: syz [ 222.370222][ T10] usb 6-1: SerialNumber: syz [ 222.375644][ T10] usb 6-1: config 0 descriptor?? [ 222.380901][ T5493] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 222.388220][ T5493] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 222.597150][ T5493] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 222.604561][ T5493] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 222.812740][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.821399][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.017860][ T5512] netlink: 'syz.3.1573': attribute type 6 has an invalid length. [ 223.230549][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 223.240755][ T10] asix 6-1:0.34: probe with driver asix failed with error -71 [ 223.249344][ T10] usb 6-1: USB disconnect, device number 37 [ 223.757355][ T36] audit: type=1400 audit(2000000163.727:11106): avc: denied { accept } for pid=5517 comm="syz.5.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.757561][ T5518] bridge0: port 3(syz_tun) entered blocking state [ 223.783535][ T5518] bridge0: port 3(syz_tun) entered disabled state [ 223.789993][ T5518] syz_tun: entered allmulticast mode [ 223.795667][ T5518] syz_tun: entered promiscuous mode [ 223.800970][ T5518] bridge0: port 3(syz_tun) entered blocking state [ 223.807411][ T5518] bridge0: port 3(syz_tun) entered forwarding state [ 223.839866][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1578'. [ 224.048995][ T5526] overlayfs: failed to clone upperpath [ 224.101581][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 224.251561][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 224.258321][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 224.266844][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 224.279783][ T10] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 224.289534][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.297678][ T10] usb 6-1: Product: syz [ 224.302001][ T10] usb 6-1: Manufacturer: syz [ 224.306629][ T10] usb 6-1: SerialNumber: syz [ 224.390399][ T310] cdc_ncm 3-1:1.0: bind() failure [ 224.403484][ T310] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 224.411580][ T310] cdc_ncm 3-1:1.1: bind() failure [ 224.418357][ T310] usb 3-1: USB disconnect, device number 97 [ 224.484931][ T5551] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1585'. [ 224.516513][ T10] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 224.532380][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 224.716006][ T10] usb 6-1: 2:1 : can't get High Capability descriptor [ 224.853782][ T36] audit: type=1400 audit(2000000164.827:11107): avc: denied { mount } for pid=5558 comm="syz.4.1590" name="/" dev="incremental-fs" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 224.891570][ T310] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 224.918856][ T5524] incfs: Can't find or create .index dir in ./cgroup [ 224.923905][ T36] audit: type=1400 audit(2000000164.897:11108): avc: denied { setattr } for pid=5568 comm="syz.4.1594" name="PPTP" dev="sockfs" ino=34087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 224.925813][ T5524] incfs: mount failed -22 [ 224.959293][ T10] usb 6-1: USB disconnect, device number 38 [ 225.041545][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 225.047716][ T310] usb 3-1: config 1 has an invalid interface number: 225 but max is 2 [ 225.056008][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.066165][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.075086][ T310] usb 3-1: config 1 has no interface number 0 [ 225.082532][ T310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.091616][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.099590][ T310] usb 3-1: Product: syz [ 225.103774][ T310] usb 3-1: Manufacturer: syz [ 225.108383][ T310] usb 3-1: SerialNumber: syz [ 225.331646][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.340231][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.437628][ T310] usb 3-1: 225:2 : does not exist [ 225.442845][ T310] usb 3-1: unit 9 not found! [ 225.449246][ T310] usb 3-1: 4:225: cannot get min/max values for control 1 (id 4) [ 225.459184][ T310] usb 3-1: 4:225: cannot get min/max values for control 2 (id 4) [ 225.474777][ T310] usb 3-1: 4:225: cannot get min/max values for control 3 (id 4) [ 225.499214][ T310] usb 3-1: 4:225: cannot get min/max values for control 4 (id 4) [ 225.523076][ T5584] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1600'. [ 225.532609][ T5583] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1600'. [ 225.544766][ T310] usb 3-1: 4:225: cannot get min/max values for control 5 (id 4) [ 225.556419][ T310] usb 3-1: 4:225: cannot get min/max values for control 6 (id 4) [ 225.589080][ T310] usb 3-1: 4:225: cannot get min/max values for control 7 (id 4) [ 225.605615][ T5589] x_tables: duplicate entry at hook 1 [ 225.623047][ T310] usb 3-1: 4:225: cannot get min/max values for control 8 (id 4) [ 225.631583][ T5579] overlayfs: failed to resolve './bus': -2 [ 225.649522][ T310] usb 3-1: 4:225: cannot get min/max values for control 10 (id 4) [ 225.672543][ T310] usb 3-1: USB disconnect, device number 98 [ 225.819270][ T5594] fuse: Bad value for 'fd' [ 225.873023][ T5596] vlan0: entered promiscuous mode [ 225.878273][ T5596] vlan0: entered allmulticast mode [ 225.883679][ T5596] veth0_vlan: entered allmulticast mode [ 226.199808][ T36] audit: type=1400 audit(2000000166.167:11109): avc: denied { nlmsg_write } for pid=5611 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 226.220729][ T310] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 226.241581][ T31] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 226.351576][ T310] usb 6-1: device descriptor read/64, error -71 [ 226.392531][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.403522][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.413290][ T31] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 226.425646][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.434447][ T31] usb 3-1: config 0 descriptor?? [ 226.450942][ T5624] tipc: Started in network mode [ 226.455981][ T5624] tipc: Node identity 7f000001, cluster identity 4711 [ 226.463228][ T5624] tipc: Enabled bearer , priority 10 [ 226.480692][ T36] audit: type=1400 audit(2000000166.447:11110): avc: denied { create } for pid=5625 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 226.591568][ T310] usb 6-1: device descriptor read/64, error -71 [ 226.653003][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 226.663941][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.675823][ T31] usb 3-1: USB disconnect, device number 99 [ 226.792393][ T5643] sit0: entered promiscuous mode [ 226.797475][ T5643] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 226.805243][ T5643] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1622'. [ 226.831588][ T310] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 226.961569][ T310] usb 6-1: device descriptor read/64, error -71 [ 226.999705][ T5649] : renamed from vlan0 (while UP) [ 227.006417][ T5650] cgroup: none used incorrectly [ 227.061670][ T31] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 227.201541][ T310] usb 6-1: device descriptor read/64, error -71 [ 227.211555][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 227.217764][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.227918][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.237501][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 227.246586][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.254600][ T31] usb 3-1: SerialNumber: syz [ 227.261035][ T31] usb 3-1: 0:2 : does not exist [ 227.321806][ T310] usb usb6-port1: attempt power cycle [ 227.460879][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.469440][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.477976][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.486391][ T5659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.486888][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.495455][ T5659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.513428][ T31] usb 3-1: USB disconnect, device number 100 [ 227.522126][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.591574][ T65] tipc: Node number set to 2130706433 [ 227.661596][ T310] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 227.682675][ T310] usb 6-1: device descriptor read/8, error -71 [ 227.812537][ T310] usb 6-1: device descriptor read/8, error -71 [ 227.983970][ T5670] netlink: 'syz.3.1631': attribute type 5 has an invalid length. [ 227.991850][ T5670] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1631'. [ 228.051564][ T310] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 228.072581][ T310] usb 6-1: device descriptor read/8, error -71 [ 228.121694][ T5680] overlayfs: failed to clone lowerpath [ 228.127698][ T5680] overlayfs: failed to clone lowerpath [ 228.137780][ T36] audit: type=1326 audit(2000000168.107:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.4.1635" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x0 [ 228.202549][ T310] usb 6-1: device descriptor read/8, error -71 [ 228.271558][ T31] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 228.311630][ T310] usb usb6-port1: unable to enumerate USB device [ 228.422577][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.432783][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.441856][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2412, setting to 64 [ 228.453998][ T31] usb 3-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 228.463100][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.471094][ T31] usb 3-1: Product: syz [ 228.475271][ T31] usb 3-1: Manufacturer: syz [ 228.479866][ T31] usb 3-1: SerialNumber: syz [ 228.689318][ T31] usb 3-1: 0:2 : does not exist [ 228.694322][ T31] usb 3-1: unit 158 not found! [ 228.701262][ T31] usb 3-1: USB disconnect, device number 101 [ 228.912862][ T5687] incfs: Error accessing: ./bus. [ 228.912875][ T5688] incfs: Error accessing: ./bus. [ 228.912902][ T5688] incfs: mount failed -2 [ 228.917857][ T5687] incfs: mount failed -2 [ 229.151400][ T5701] /dev/loop0: Can't lookup blockdev [ 229.249266][ T5705] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1644'. [ 229.381594][ T65] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 229.501552][ T31] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 229.541568][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 229.549114][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.559644][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.570559][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.579949][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.588193][ T65] usb 6-1: Product: syz [ 229.592690][ T65] usb 6-1: Manufacturer: syz [ 229.597325][ T65] usb 6-1: SerialNumber: syz [ 229.652595][ T31] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 229.661097][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 229.671483][ T31] usb 3-1: config 220 has no interface number 2 [ 229.677794][ T31] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 229.691650][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 229.695870][ T5726] overlayfs: failed to clone upperpath [ 229.698459][ T31] usb 3-1: config 220 interface 76 has no altsetting 0 [ 229.710882][ T31] usb 3-1: config 220 interface 1 has no altsetting 0 [ 229.726152][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 229.735307][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.743679][ T31] usb 3-1: Product: syz [ 229.747856][ T31] usb 3-1: Manufacturer: syz [ 229.752586][ T31] usb 3-1: SerialNumber: syz [ 229.810432][ T65] usb 6-1: 0:2 : does not exist [ 229.817342][ T65] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 229.828304][ T65] usb 6-1: USB disconnect, device number 43 [ 229.836945][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.960425][ T31] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 229.966900][ T31] usb 3-1: No valid video chain found. [ 229.972462][ T31] usb 3-1: selecting invalid altsetting 0 [ 229.980964][ T31] usb 3-1: USB disconnect, device number 102 [ 230.233817][ T5732] overlayfs: failed to clone lowerpath [ 230.266910][ T5743] veth1: entered allmulticast mode [ 230.276503][ T5743] veth1: left allmulticast mode [ 230.355142][ T36] audit: type=1400 audit(2000000170.327:11112): avc: denied { relabelfrom } for pid=5758 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 230.375419][ T36] audit: type=1400 audit(2000000170.327:11113): avc: denied { relabelto } for pid=5758 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 230.439516][ T5762] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1664'. [ 230.721554][ T65] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 230.873014][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.881223][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 230.889717][ T65] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 230.902281][ T65] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 230.911359][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.919417][ T65] usb 3-1: Product: 㠁 [ 230.923672][ T65] usb 3-1: Manufacturer: о [ 230.928205][ T65] usb 3-1: SerialNumber: ৼ渟멎Ꮫ๕㝌㏶讶꟔嫪⼆弒ৼ㙭쀀Ｂ겠跣鉶唘壜跺饎衖씵ꃲ贠뤚뱭᮸ూ슒ྑ曆➓൤쟞ꔱꬎ䅩䁥蝵瘹닔鼲ౝ注ᄽ퉧ኽ톱Ꝧ熂딹九極䂦疧忸톋ᝋ¯촌궵窃띵Ᾰ뱵쐛䖨ﶵ炰툧䛵等Ŀ暃잛॒펋 [ 231.104181][ T36] audit: type=1400 audit(2000000171.077:11114): avc: denied { getattr } for pid=5779 comm="syz.4.1670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.150005][ T36] audit: type=1400 audit(2000000171.117:11115): avc: denied { read } for pid=5782 comm="syz.4.1671" name="file2" dev="tmpfs" ino=2140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 231.202056][ T65] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 231.220830][ T65] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 231.230995][ T65] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 231.245731][ T65] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 231.261994][ T65] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 231.295983][ T65] usb 3-1: USB disconnect, device number 103 [ 231.346510][ T1394] udevd[1394]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.407524][ T36] audit: type=1326 audit(2000000171.377:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.5.1674" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42cff9cdd9 code=0x0 [ 231.546540][ T36] audit: type=1326 audit(2000000171.517:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.5.1674" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42cff9cdd9 code=0x0 [ 231.623268][ T5813] overlayfs: failed to clone upperpath [ 231.630239][ T36] audit: type=1326 audit(2000000171.597:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.3.1676" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2d579cdd9 code=0x0 [ 231.941556][ T65] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 232.092833][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.100898][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 232.110628][ T65] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 232.119768][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.127801][ T65] usb 3-1: Product: syz [ 232.132003][ T65] usb 3-1: Manufacturer: syz [ 232.136590][ T65] usb 3-1: SerialNumber: syz [ 232.344298][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.352927][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.365875][ T65] usb 3-1: USB disconnect, device number 104 [ 232.481560][ T310] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 232.601110][ T5843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5843 comm=syz.4.1685 [ 232.601275][ T36] audit: type=1400 audit(2000000172.567:11119): avc: denied { create } for pid=5841 comm="syz.4.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 232.614097][ T5843] netlink: 'syz.4.1685': attribute type 16 has an invalid length. [ 232.652727][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.663880][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.673709][ T310] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 232.682860][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.691357][ T310] usb 6-1: config 0 descriptor?? [ 232.892445][ T36] audit: type=1400 audit(2000000172.867:11120): avc: denied { watch watch_reads } for pid=5857 comm="syz.2.1690" path="/syzcgroup/cpu/syz2/cpuset.cpus" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 232.920150][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.928876][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.938916][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.947492][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.225428][ T5878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1696'. [ 233.272607][ T5884] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1691'. [ 233.671595][ T65] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 233.675402][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.687902][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.821575][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 233.828787][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.837317][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.847531][ T65] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 233.858041][ T65] usb 3-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 233.867162][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.875229][ T65] usb 3-1: Product: syz [ 233.879485][ T65] usb 3-1: Manufacturer: syz [ 233.884444][ T65] usb 3-1: SerialNumber: syz [ 234.095344][ T65] usb 3-1: unit 2 not found! [ 234.104424][ T65] usb 3-1: USB disconnect, device number 105 [ 234.622007][ T36] audit: type=1400 audit(2000000174.597:11121): avc: denied { ioctl } for pid=5935 comm="syz.2.1713" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 234.687631][ T36] audit: type=1400 audit(2000000174.657:11122): avc: denied { execute } for pid=5941 comm="syz.2.1715" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.812039][ T36] audit: type=1400 audit(2000000174.777:11123): avc: denied { create } for pid=5950 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 235.121549][ T65] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 235.282867][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.294280][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 235.303757][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.314401][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.325710][ T65] usb 3-1: string descriptor 0 read error: -22 [ 235.331999][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.341118][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.360277][ T65] usb 3-1: 0:2 : does not exist [ 235.465014][ T5967] cgroup: Invalid name [ 235.527463][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.536062][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.080276][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1728'. [ 236.265314][ T6002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=6002 comm=syz.5.1736 [ 236.278145][ T6002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=6002 comm=syz.5.1736 [ 236.290937][ T6002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=6002 comm=syz.5.1736 [ 236.303703][ T6002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=6002 comm=syz.5.1736 [ 236.316612][ T6002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=63 sclass=netlink_tcpdiag_socket pid=6002 comm=syz.5.1736 [ 236.360042][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.372415][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.377108][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.400607][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.618941][ T65] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 236.628515][ T65] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 236.640133][ T65] usb 3-1: USB disconnect, device number 106 [ 236.913771][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.923349][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.930423][ T36] audit: type=1326 audit(2000000176.897:11124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 236.957580][ T36] audit: type=1326 audit(2000000176.897:11125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 236.983297][ T36] audit: type=1326 audit(2000000176.897:11126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.009129][ T36] audit: type=1326 audit(2000000176.897:11127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.034996][ T36] audit: type=1326 audit(2000000176.897:11128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.060496][ T36] audit: type=1326 audit(2000000176.897:11129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.086183][ T36] audit: type=1326 audit(2000000176.897:11130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.088460][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.112269][ T36] audit: type=1326 audit(2000000176.897:11131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.121137][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.161711][ T36] audit: type=1326 audit(2000000176.897:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.178875][ T6031] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1741'. [ 237.187606][ T36] audit: type=1326 audit(2000000176.897:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.4.1743" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9fd9cdd9 code=0x7fc00000 [ 237.207510][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.238402][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.259921][ T6038] overlayfs: failed to clone lowerpath [ 237.316318][ T6041] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.324347][ T6041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.331616][ T6041] IPv6: NLM_F_CREATE should be set when creating new route [ 237.338903][ T6041] IPv6: NLM_F_CREATE should be set when creating new route [ 237.354746][ T516] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.361202][ T516] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.712480][ T310] usbhid 6-1:0.0: can't add hid device: -32 [ 237.718550][ T310] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 239.391566][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 239.391566][ T786] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.651591][ T310] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 239.697923][ T6097] tipc: Started in network mode [ 239.702930][ T6097] tipc: Node identity , cluster identity 4711 [ 239.765238][ T6109] SELinux: Context ϧ is not valid (left unmapped). [ 239.773325][ T6109] overlayfs: missing 'lowerdir' [ 239.782229][ T310] usb 3-1: device descriptor read/64, error -71 [ 240.021559][ T310] usb 3-1: device descriptor read/64, error -71 [ 240.255010][ T6128] x_tables: unsorted underflow at hook 3 [ 240.281858][ T310] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 240.411547][ T310] usb 3-1: device descriptor read/64, error -71 [ 240.651554][ T310] usb 3-1: device descriptor read/64, error -71 [ 240.761656][ T310] usb usb3-port1: attempt power cycle [ 241.049400][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.058089][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.111596][ T310] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 241.137420][ T310] usb 3-1: device descriptor read/8, error -71 [ 241.304407][ T6147] fuse: Unknown parameter 'rooUmode' [ 241.318897][ T310] usb 3-1: device descriptor read/8, error -71 [ 241.561569][ T310] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 241.582709][ T310] usb 3-1: device descriptor read/8, error -71 [ 241.637273][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.647151][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.712599][ T310] usb 3-1: device descriptor read/8, error -71 [ 241.821641][ T310] usb usb3-port1: unable to enumerate USB device [ 242.166456][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.175061][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.320187][ T6162] fuseblk: Unknown parameter 'func' [ 242.336719][ T6164] overlayfs: failed to clone upperpath [ 242.434810][ T6171] netlink: 'syz.2.1795': attribute type 10 has an invalid length. [ 242.495796][ T6175] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 242.538174][ T6177] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=151552 (303104 ns) > initial count (22 ns). Using initial count to start timer. [ 242.557713][ T6177] kvm: pic: non byte write [ 243.038916][ T6207] incfs: Error accessing: ./cgroup. [ 243.044265][ T6207] incfs: mount failed -2 [ 243.049050][ T6207] 9pnet_fd: Insufficient options for proto=fd [ 243.555222][ T36] kauditd_printk_skb: 422 callbacks suppressed [ 243.555243][ T36] audit: type=1400 audit(2000000183.527:11556): avc: denied { lock } for pid=6218 comm="syz.2.1810" path="socket:[37382]" dev="sockfs" ino=37382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 243.592187][ T6221] batadv_slave_1: entered promiscuous mode [ 243.601065][ T6221] batadv_slave_1: left promiscuous mode [ 243.611282][ T6226] cannot load conntrack support for proto=3 [ 243.631049][ T6228] /dev/loop0: Can't lookup blockdev [ 252.371569][ T36] audit: type=1400 audit(2000000192.337:11557): avc: denied { create } for pid=6283 comm="syz.3.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 252.397375][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 252.434998][ T6294] cannot load conntrack support for proto=3 [ 252.442674][ T6294] SELinux: policydb magic number 0x1be45250 does not match expected magic number 0xf97cff8c [ 252.452168][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.456531][ T6294] SELinux: failed to load policy [ 252.465778][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.660715][ T6319] overlayfs: missing 'lowerdir' [ 253.007475][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.008388][ T36] audit: type=1400 audit(2000000192.977:11558): avc: denied { create } for pid=6322 comm="syz.5.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 253.016178][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.052292][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.055094][ T36] audit: type=1326 audit(2000000193.027:11559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.3.1838" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2d579cdd9 code=0x0 [ 253.061948][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.096710][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.105284][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.107054][ T6326] fuse: Bad value for 'fd' [ 253.121072][ T6326] fuse: Bad value for 'fd' [ 253.481535][ T65] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 253.633675][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.645225][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 253.656345][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.669408][ T65] usb 3-1: New USB device found, idVendor=0475, idProduct=c53f, bcdDevice= 0.00 [ 253.678716][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.693979][ T65] usb 3-1: config 0 descriptor?? [ 253.700814][ T6348] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 253.760571][ T6366] kvm: user requested TSC rate below hardware speed [ 253.767903][ T6365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3862932460 (123613838720 ns) > initial count (43219620320 ns). Using initial count to start timer. [ 253.834341][ T6368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 253.917692][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 253.954440][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 253.967079][ T65] usb 3-1: USB disconnect, device number 111 [ 253.990805][ T36] audit: type=1400 audit(2000000193.957:11560): avc: denied { getattr } for pid=6385 comm="syz.3.1856" path="socket:[38593]" dev="sockfs" ino=38593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.036992][ T6397] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1859'. [ 254.261539][ T65] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 254.412797][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 254.421200][ T65] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 254.432195][ T65] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 254.445319][ T65] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 254.454655][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.463216][ T65] usb 3-1: Product: syz [ 254.467449][ T65] usb 3-1: Manufacturer: syz [ 254.472085][ T65] usb 3-1: SerialNumber: syz [ 254.575837][ T6406] 9pnet_fd: Insufficient options for proto=fd [ 254.592662][ T36] audit: type=1400 audit(2000000194.567:11561): avc: denied { listen } for pid=6407 comm="syz.3.1864" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.679498][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.688098][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.699958][ T65] usb 3-1: Can't get UAC3 power state for id 10 [ 254.707160][ T65] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 254.716424][ T65] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 254.727480][ T65] usb 3-1: USB disconnect, device number 112 [ 255.501544][ T65] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 255.651531][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 255.657653][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.670651][ T65] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 255.679830][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.688567][ T65] usb 3-1: config 0 descriptor?? [ 255.892755][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.899830][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.907146][ T6453] bridge_slave_0: entered allmulticast mode [ 255.913474][ T6453] bridge_slave_0: entered promiscuous mode [ 255.919946][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.927052][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.934226][ T6453] bridge_slave_1: entered allmulticast mode [ 255.941775][ T6453] bridge_slave_1: entered promiscuous mode [ 256.045093][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.052218][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.059522][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.066611][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.124519][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.135055][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.145714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.152826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.162213][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.169306][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.196967][ T6453] veth0_vlan: entered promiscuous mode [ 256.208528][ T6453] veth1_macvtap: entered promiscuous mode [ 256.229842][ T36] audit: type=1400 audit(2000000196.197:11562): avc: denied { mounton } for pid=6453 comm="syz-executor" path="/root/syzkaller.8UHKc1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 256.258833][ T36] audit: type=1400 audit(2000000196.227:11563): avc: denied { mounton } for pid=6453 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 256.284807][ T36] audit: type=1400 audit(2000000196.257:11564): avc: denied { unmount } for pid=6453 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 256.305876][ T65] usb 3-1: string descriptor 0 read error: -71 [ 256.312856][ T65] uclogic 0003:5543:006E.0022: failed retrieving string descriptor #200: -71 [ 256.321843][ T65] uclogic 0003:5543:006E.0022: failed retrieving pen parameters: -71 [ 256.322225][ T480] ------------[ cut here ]------------ [ 256.330336][ T65] uclogic 0003:5543:006E.0022: failed probing pen v2 parameters: -71 [ 256.335583][ T480] WARNING: CPU: 1 PID: 480 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 256.344222][ T65] uclogic 0003:5543:006E.0022: failed probing parameters: -71 [ 256.353674][ T480] Modules linked in: [ 256.361161][ T65] uclogic 0003:5543:006E.0022: probe with driver uclogic failed with error -71 [ 256.365095][ T480] CPU: 1 UID: 0 PID: 480 Comm: kworker/u8:10 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 256.380029][ T65] usb 3-1: USB disconnect, device number 113 [ 256.385734][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.385758][ T480] Workqueue: netns cleanup_net [ 256.406667][ T480] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 256.412715][ T480] Code: e8 81 16 d3 fc 4b 83 3c 3e 00 75 19 e8 85 93 7a fc 49 81 ff f8 07 00 00 74 1b e8 77 93 7a fc 49 83 c7 08 eb c9 e8 6c 93 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 256.432392][ T480] RSP: 0018:ffffc9000f347b90 EFLAGS: 00010293 [ 256.438488][ T480] RAX: ffffffff850d2934 RBX: ffff88812f626a80 RCX: ffff888117468000 [ 256.446545][ T480] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810fa54000 [ 256.454583][ T480] RBP: ffffc9000f347bb0 R08: 0000000000000003 R09: 0000000000000004 [ 256.462621][ T480] R10: dffffc0000000000 R11: fffff52001e68f04 R12: dffffc0000000000 [ 256.470611][ T480] R13: dffffc0000000000 R14: ffff88810fa54000 R15: 0000000000000000 [ 256.478643][ T480] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 256.479640][ T36] audit: type=1400 audit(2000000196.367:11565): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1778]" dev="pipefs" ino=1778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 256.487601][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.487619][ T480] CR2: 00007fe19f385f40 CR3: 000000010d3b6000 CR4: 00000000003526b0 [ 256.487638][ T480] Call Trace: [ 256.487644][ T480] [ 256.531710][ T480] cleanup_net+0x6bd/0xc90 [ 256.536157][ T480] ? __cfi_cleanup_net+0x10/0x10 [ 256.541124][ T480] process_scheduled_works+0x7d4/0x1020 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.546753][ T480] worker_thread+0xc51/0x1370 [ 256.551462][ T480] kthread+0x2c9/0x370 [ 256.555588][ T480] ? __cfi_worker_thread+0x10/0x10 [ 256.560731][ T480] ? __cfi_kthread+0x10/0x10 [ 256.565377][ T480] ret_from_fork+0x67/0xa0 [ 256.569819][ T480] ? __cfi_kthread+0x10/0x10 [ 256.574487][ T480] ret_from_fork_asm+0x1a/0x30 [ 256.579291][ T480] [ 256.582362][ T480] ---[ end trace 0000000000000000 ]--- [ 256.675894][ T65] usb 6-1: USB disconnect, device number 44 [ 256.687362][ T480] ------------[ cut here ]------------ [ 256.692941][ T480] WARNING: CPU: 1 PID: 480 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 256.703153][ T480] Modules linked in: [ 256.707066][ T480] CPU: 1 UID: 0 PID: 480 Comm: kworker/u8:10 Tainted: G W syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 256.720328][ T480] Tainted: [W]=WARN [ 256.724222][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.734323][ T480] Workqueue: netns cleanup_net [ 256.739124][ T480] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 256.745309][ T480] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 30 93 7a fc 49 81 ff f8 07 00 00 74 1b e8 22 93 7a fc 49 83 c7 08 eb c5 e8 17 93 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 07 93 7a fc 5b 41 5c 41 5e 41 [ 256.765004][ T480] RSP: 0018:ffffc9000f347b90 EFLAGS: 00010293 [ 256.771096][ T480] RAX: ffffffff850d2989 RBX: ffff88810fa54800 RCX: ffff888117468000 [ 256.779154][ T480] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810fa54808 [ 256.787176][ T480] RBP: ffffc9000f347bb0 R08: 0000000000000003 R09: 0000000000000004 [ 256.795235][ T480] R10: dffffc0000000000 R11: fffff52001e68f04 R12: dffffc0000000000 [ 256.803241][ T480] R13: dffffc0000000000 R14: ffff88810fa54000 R15: 0000000000000008 [ 256.811228][ T480] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 256.820280][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.826909][ T480] CR2: 00007fe19f385f40 CR3: 0000000120842000 CR4: 00000000003526b0 [ 256.834950][ T480] Call Trace: [ 256.838241][ T480] [ 256.841273][ T480] cleanup_net+0x6bd/0xc90 [ 256.845788][ T480] ? __cfi_cleanup_net+0x10/0x10 [ 256.850747][ T480] process_scheduled_works+0x7d4/0x1020 [ 256.856403][ T480] worker_thread+0xc51/0x1370 [ 256.861104][ T480] kthread+0x2c9/0x370 [ 256.865266][ T480] ? __cfi_worker_thread+0x10/0x10 [ 256.870410][ T480] ? __cfi_kthread+0x10/0x10 [ 256.875049][ T480] ret_from_fork+0x67/0xa0 [ 256.879474][ T480] ? __cfi_kthread+0x10/0x10 [ 256.884157][ T480] ret_from_fork_asm+0x1a/0x30 [ 256.888938][ T480] [ 256.891987][ T480] ---[ end trace 0000000000000000 ]--- [ 256.902267][ T3530] bridge0: port 3(syz_tun) entered disabled state [ 256.913731][ T3530] syz_tun (unregistering): left allmulticast mode [ 256.920203][ T3530] syz_tun (unregistering): left promiscuous mode [ 256.926772][ T3530] bridge0: port 3(syz_tun) entered disabled state [ 256.939411][ T480] ------------[ cut here ]------------ [ 256.944934][ T480] WARNING: CPU: 0 PID: 480 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 256.951608][ T311] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 256.954441][ T480] Modules linked in: [ 256.965859][ T480] CPU: 0 UID: 0 PID: 480 Comm: kworker/u8:10 Tainted: G W syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 256.979324][ T480] Tainted: [W]=WARN [ 256.983165][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.993298][ T480] Workqueue: netns cleanup_net [ 256.998090][ T480] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 257.003686][ T480] Code: 3c 20 00 74 08 48 89 df e8 1f e0 ed fc 48 8b 3b e8 37 ef d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 e3 b7 00 cc e8 12 5d 95 fc <0f> 0b e9 b0 fd ff ff e8 06 5d 95 fc 0f 0b e9 18 fe ff ff e8 fa 5c [ 257.023334][ T480] RSP: 0018:ffffc9000f347b70 EFLAGS: 00010293 [ 257.029467][ T480] RAX: ffffffff84f25f8e RBX: ffff88812f626a80 RCX: ffff888117468000 [ 257.037478][ T480] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888117468000 [ 257.045491][ T480] RBP: ffffc9000f347b98 R08: ffffffff87d48ec7 R09: 1ffffffff0fa91d8 [ 257.053500][ T480] R10: dffffc0000000000 R11: fffffbfff0fa91d9 R12: 1ffffffff0fa8f28 [ 257.061532][ T480] R13: dffffc0000000000 R14: ffff88812f627680 R15: dffffc0000000000 [ 257.069515][ T480] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 257.078532][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.085158][ T480] CR2: 000055b5e0d4baf8 CR3: 000000010eb0c000 CR4: 00000000003526b0 [ 257.093168][ T480] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 257.101143][ T480] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 257.109158][ T480] Call Trace: [ 257.112471][ T480] [ 257.115405][ T480] xfrm_net_exit+0x31/0x80 [ 257.119834][ T480] cleanup_net+0x6bd/0xc90 [ 257.124302][ T480] ? __cfi_cleanup_net+0x10/0x10 [ 257.129247][ T480] process_scheduled_works+0x7d4/0x1020 [ 257.134859][ T480] worker_thread+0xc51/0x1370 [ 257.139553][ T480] kthread+0x2c9/0x370 [ 257.143673][ T480] ? __cfi_worker_thread+0x10/0x10 [ 257.148788][ T480] ? __cfi_kthread+0x10/0x10 [ 257.153496][ T480] ret_from_fork+0x67/0xa0 [ 257.157924][ T480] ? __cfi_kthread+0x10/0x10 [ 257.162586][ T480] ret_from_fork_asm+0x1a/0x30 [ 257.167373][ T480] [ 257.170385][ T480] ---[ end trace 0000000000000000 ]--- [ 257.176461][ T480] ------------[ cut here ]------------ [ 257.182000][ T480] WARNING: CPU: 1 PID: 480 at net/xfrm/xfrm_state.c:3223 xfrm_state_fini+0x2e2/0x310 [ 257.191536][ T480] Modules linked in: [ 257.195446][ T480] CPU: 1 UID: 0 PID: 480 Comm: kworker/u8:10 Tainted: G W syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 257.208680][ T480] Tainted: [W]=WARN [ 257.212503][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.222603][ T480] Workqueue: netns cleanup_net [ 257.227369][ T480] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 257.232998][ T480] Code: cc e8 12 5d 95 fc 0f 0b e9 b0 fd ff ff e8 06 5d 95 fc 0f 0b e9 18 fe ff ff e8 fa 5c 95 fc 0f 0b e9 8c fe ff ff e8 ee 5c 95 fc <0f> 0b e9 f9 fe ff ff e8 e2 5c 95 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 257.252700][ T480] RSP: 0018:ffffc9000f347b70 EFLAGS: 00010293 [ 257.258772][ T480] RAX: ffffffff84f25fb2 RBX: ffff88812f626a80 RCX: ffff888117468000 [ 257.266762][ T480] RDX: 0000000000000000 RSI: ffff888100adc480 RDI: ffff8881000418c0 [ 257.274758][ T480] RBP: ffffc9000f347b98 R08: 000000008aaeb791 R09: 0000000015fba19b [ 257.282754][ T480] R10: 000000000000000d R11: ffffffff8175e9a0 R12: ffff888100adcb00 [ 257.290730][ T480] R13: 1ffff11025ec4ed3 R14: 0000000000000040 R15: ffff88812f627698 [ 257.298736][ T480] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 257.307695][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.314341][ T480] CR2: 00007fe19f385f40 CR3: 000000010bf7c000 CR4: 00000000003526b0 [ 257.322353][ T480] Call Trace: [ 257.325633][ T480] [ 257.328545][ T480] xfrm_net_exit+0x31/0x80 [ 257.332979][ T480] cleanup_net+0x6bd/0xc90 [ 257.337402][ T480] ? __cfi_cleanup_net+0x10/0x10 [ 257.342369][ T480] process_scheduled_works+0x7d4/0x1020 [ 257.347918][ T480] worker_thread+0xc51/0x1370 [ 257.352618][ T480] kthread+0x2c9/0x370 [ 257.356691][ T480] ? __cfi_worker_thread+0x10/0x10 [ 257.361823][ T480] ? __cfi_kthread+0x10/0x10 [ 257.366418][ T480] ret_from_fork+0x67/0xa0 [ 257.370815][ T480] ? __cfi_kthread+0x10/0x10 [ 257.375432][ T480] ret_from_fork_asm+0x1a/0x30 [ 257.380204][ T480] [ 257.383241][ T480] ---[ end trace 0000000000000000 ]--- [ 257.388983][ T480] ------------[ cut here ]------------ [ 257.394520][ T480] WARNING: CPU: 0 PID: 480 at net/xfrm/xfrm_state.c:3225 xfrm_state_fini+0x2ee/0x310 [ 257.404035][ T480] Modules linked in: [ 257.407935][ T480] CPU: 0 UID: 0 PID: 480 Comm: kworker/u8:10 Tainted: G W syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 257.421158][ T480] Tainted: [W]=WARN [ 257.424990][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.435091][ T480] Workqueue: netns cleanup_net [ 257.439863][ T480] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 257.445434][ T480] Code: ff e8 06 5d 95 fc 0f 0b e9 18 fe ff ff e8 fa 5c 95 fc 0f 0b e9 8c fe ff ff e8 ee 5c 95 fc 0f 0b e9 f9 fe ff ff e8 e2 5c 95 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 257.465089][ T480] RSP: 0018:ffffc9000f347b70 EFLAGS: 00010293 [ 257.471149][ T480] RAX: ffffffff84f25fbe RBX: ffff88812f626a80 RCX: ffff888117468000 [ 257.479165][ T480] RDX: 0000000000000000 RSI: ffff888100adcb00 RDI: ffff8881000418c0 [ 257.487179][ T480] RBP: ffffc9000f347b98 R08: 000000004d5eb5fc R09: 000000002cea63de [ 257.495188][ T480] R10: 000000000000000d R11: ffffffff8175e9a0 R12: ffff888100adcc80 [ 257.503201][ T480] R13: 1ffff11025ec4ed2 R14: 0000000000000040 R15: ffff88812f627690 [ 257.511178][ T480] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 257.520148][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.526775][ T480] CR2: 000055b5e0d4baf8 CR3: 000000010d3b6000 CR4: 00000000003526b0 [ 257.534778][ T480] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 257.542789][ T480] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 257.550764][ T480] Call Trace: [ 257.554150][ T480] [ 257.557105][ T480] xfrm_net_exit+0x31/0x80 [ 257.561568][ T480] cleanup_net+0x6bd/0xc90 [ 257.565990][ T480] ? __cfi_cleanup_net+0x10/0x10 [ 257.570915][ T480] process_scheduled_works+0x7d4/0x1020 [ 257.576499][ T480] worker_thread+0xc51/0x1370 [ 257.581183][ T480] kthread+0x2c9/0x370 [ 257.585294][ T480] ? __cfi_worker_thread+0x10/0x10 [ 257.590410][ T480] ? __cfi_kthread+0x10/0x10 [ 257.595035][ T480] ret_from_fork+0x67/0xa0 [ 257.599456][ T480] ? __cfi_kthread+0x10/0x10 [ 257.604068][ T480] ret_from_fork_asm+0x1a/0x30 [ 257.608831][ T480] [ 257.611867][ T480] ---[ end trace 0000000000000000 ]--- [ 257.694623][ T480] bridge_slave_1: left allmulticast mode [ 257.700324][ T480] bridge_slave_1: left promiscuous mode [ 257.706004][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.713611][ T480] bridge_slave_0: left allmulticast mode [ 257.719256][ T480] bridge_slave_0: left promiscuous mode [ 257.724949][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.732746][ T480] bridge_slave_1: left allmulticast mode [ 257.738385][ T480] bridge_slave_1: left promiscuous mode [ 257.744307][ T480] +$<: port 2(bridge_slave_1) entered disabled state [ 257.751832][ T480] bridge_slave_0: left allmulticast mode [ 257.757474][ T480] bridge_slave_0: left promiscuous mode [ 257.763144][ T480] +$<: port 1(bridge_slave_0) entered disabled state [ 257.770738][ T480] bridge_slave_1: left allmulticast mode [ 257.776595][ T480] bridge_slave_1: left promiscuous mode [ 257.782291][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.789757][ T480] bridge_slave_0: left allmulticast mode [ 257.795526][ T480] bridge_slave_0: left promiscuous mode [ 257.801172][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.065231][ T480] tipc: Disabling bearer [ 258.070583][ T480] tipc: Left network mode [ 258.077315][ T480] veth1_macvtap: left promiscuous mode [ 258.083247][ T480] veth1_macvtap: left promiscuous mode [ 258.089109][ T480] veth1_macvtap: left promiscuous mode [ 258.094713][ T480] veth0_vlan: left promiscuous mode