last executing test programs: 5m45.254029789s ago: executing program 1 (id=694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x2b, {0x2b, 0x8, "1f5c1fc6f97ed14fb2414cecc9278a7946a655ef344ab21825d3e16205833b0bcd9e0a2f4cbe62e6e7"}}, &(0x7f0000000740)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "54ac6f24adbefb3c973e6620b22652675f27c6827f52534663f40d957fc68787fe627670787bffb8fa2b277bd7a14da54f328cad42d9f99bf9d95f8ca2d5af48ba4699b014f557c4914e008581e218a9b921ddb15b4e8ae40ca81450ca0533bc2378b7a4539d2cf0a9346c33bd005b252b1f212447d6e3df6a7c39c5127c75e5f3e8e05c0b89574ef7ddb20a73d2c4a20b54e4555f94cb5cf0ef89ea81c9588326b4824ffed1d291899bb09f5e2c1619bf735184f1e9ffa2200a5da7ac8d8abfbe17c3ae8a1f23452ac4db51d3"}}, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1c, 0x80, 0x6, 0x3, "056eb293", "7e7210b4"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0xf, 0x5, 0x3, 0x9, 0x4}}}, &(0x7f0000000f00)={0x84, &(0x7f00000005c0)={0x20, 0x19, 0x66, "3b825351b23ccfde9e40079b7d9dd481a5e990e75b49d3f4b8770f67fc1aa37721cabb6f9f02721d66139160975b5cc63687fc273bee152aac8440aa91b3f38dec74a60883c3c39fb95d4b03c3a6e4f0508495fe56171f3631ecf073006577ee29e9bebc1077"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000900)={0x20, 0x0, 0x4}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0xd5}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, "9393"}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000d40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, '0C'}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000ec0)={0x40, 0x21, 0x1}}) socket(0x11, 0x2, 0x0) 5m43.704225866s ago: executing program 1 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r4, 0x5423, &(0x7f0000007000)) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r3, 0xb085c000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0xf, 0x83, 0x4232, 0x0, 0x20000081, 0x9c1, 0x8001, 0x5, 0x7, 0x4dba, 0x0, 0xfffffe0000000001], 0xd000, 0x80b80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m43.594945824s ago: executing program 1 (id=701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x80, 0x4, {0x77359400}, {r9, r10/1000+10000}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x1, 0x2, 0x0, 0x0, "7cb8e9540e2eb1d5"}}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff15000e001c"], 0x4c}}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r14, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r15, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r12, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x290}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m43.501029292s ago: executing program 1 (id=703): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x503000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = userfaultfd(0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x18, r7) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) close_range(r4, r6, 0x2) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000ffb000/0x2000)=nil}) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x8000000, 0x10000}) 5m43.445550636s ago: executing program 1 (id=704): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000080)={0x1, 0x20004000000000, 0x52, &(0x7f0000000000)=""/82}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x8000}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x20}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x22, 0x6, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r4, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x1, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8}, {0x1, 0x3, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x1}, {0x0, 0x3, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0xa0, '\x00', 0x4}, {0x3, 0xf1, 0xa, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x6, 0xfa, '\x00', 0x42}]}}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x9) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2000000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x0) 5m43.415431259s ago: executing program 1 (id=708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000001800)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xd9, 0xe9a3, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x700, 0x20, 0xaa, 0x400}}) r4 = socket$inet(0x2, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000740)={@broadcast, @empty, r6}, 0xc) sendmmsg$inet(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000240)="041feac3b88f7158f43cc5dfe1e22676fe7334c39d6e9b5b7bfdddaad45d29290b2e1609aeeca1ae12f078dc51f4091a280554510ec10aca475cfe773c08f524973c15cc0a7adb7f8f14b3721aabba060246290421f5499c1141ff13eb442d9f169b88bf331909299180862c4affef54b49e3489e942", 0x76}, {&(0x7f0000000400)="94f5cde50e63a8cd58d1219c969a812146ef50ed4dcd870e5a1cc9fbc34972a272cab966e017f92a86be5e5c5852bc519c552e5c4aa0368050f92042cbddb127e3ccac1952e84d58374cdfe43c976664660fad77e61a0e6e2608758bf5bbbc218c6dad388c6ff6f4a8851eacd0b45c3fdd0c0dfe598fcfccb709c1aee15972ce5d5cf3c1b8fdf5ff4ea72ce863f3fe497a0f97860459c82f437c06173157a2e7f8661dcebcbd92715ba555e55f91aa9b7d3fd1afe44d18d9915222eeb0a15a1ff0a6c97ddbac7c4f421784c4e419ceec0d4608fca55699fe1f", 0xd9}, {&(0x7f0000000500)="4fbfcb44bb69214865215b1a4f1d57609668c7766d41841f82cc8df6d900ff6997768459955fd0582e4d30b2ab1369c3bd3bc308761b57dc51e20f0acff8b358eaf7f2d41c1fd367f5ddf2a6a5f98b5627a5f4932d63a7dc00ba20e8c0d7186a62dd277d0a6226c251cf97023273651f93ba6862f244e6cc40f90097d921d5aee41701b1ec02752e5283dd60f92a848939c39370c85d11ea0f4731c6bfa339d29454144091b6fb83685d3b4ab5100417f33652aae1e3bcdae53744c584f1cf8d1d6b47e9b298a9b079cd4ce7d82e4eebba75d75c7a3b11ca700d714d920d94e23bc35d063a92a9231597903d480fd17108", 0xf1}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000000)="8887880fca20e207ef5edc82ecc903aa841543e1", 0x14}, {&(0x7f0000001680)="a2ff3b19aa0d9f28066d7acf76e538e72c951bcdae9210e5ed580144c8110b3325c8a7afea4784f3a44631c671fba2f50f8c0d93cc2996b9bf0a14e359985b3ee53f43efdd5307b32868bbc44e3e2caf812f2aaa5800d9f92da964c7a63ee17df6ebc15393bd6f81c048e97d35e02123db25f4908ebb56f5e2fe2f628b26b1fb848d1a756ca2c9cde7b1f1edadb7d546a2889ba379028d9dbaf419c3f6902bbddd5d341734299af6f1f9bf48ebcf2cefd5a6ddf6d82afe66c91d380684f68c362bee75f544bd0d241e10e2c76ae5ed3a548360abe150657064b7ac65f9726143eb1d5b4eb77c0915906ba276", 0xec}], 0x6, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x44, 0x6, "b24ef63a"}, @timestamp_prespec={0x44, 0xc, 0x5d, 0x3, 0x7, [{@multicast1, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x9f, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@remote, 0x10000}, {@loopback, 0x6e3}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x118}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000340)=[{&(0x7f00000019c0)="c39390963e4a8da4aa8dc6a429316ee529811a1327daf73e6cf69b181dc60a9f4b979853ef820f88632e94a0bba1cb5386d8a7d70aad79efe84dbd995240fbf6c1df9e59e093b1edc760a8cd7591b5347d", 0x51}, {&(0x7f0000001a40)="46f36c5b1522f7de8d9f0205dd69bedf3cea8c519a702488e53ee69e3a5922763e5a025e4a44965c187fa89f875f68b33ca9caedfb8f214f85c472aa9f26a92fef5de006b88ee4e4e4ee58d25133b9383cb962c8f71b368b9564eea3de8a5dcfb3725df43d77894ac3766969531d8cb34a7bbb4a6308009dd73b203405a61b56191164ed41f9290c69ad7f5ca9d6ae8c014ba1022aa61ef97babf0c2d2f8e0bf8e5329b13e76013bea0fc49f09d2eb7709924115d898bc8b826aa5b58aca17862275757c19a0d283b24e4f7ec8f1eb", 0xcf}, {&(0x7f0000001b40)="2f7a9f17d8eb7d8e2ac14bb1900ab4336d2de4b2e611a9d13237f6fd7ebaac542c22c704e6a92787c3cb05b26ab0488a44d8a375a4d78de440ee1233e03d85c8300a132f014a729ff51c10f831a5df93353332bc34023a343520828c119fce5811", 0x61}], 0x3, &(0x7f0000001bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @local}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x1c, [@empty, @multicast2, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x88}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@rand_addr=0x64010100, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x5, [{@rand_addr=0x64010102, 0x8}]}, @ssrr={0x89, 0x7, 0xb0, [@remote]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x85, 0xb, "011c2a4ad0d8afcab8"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x108}}], 0x2, 0xc004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 5m43.357682643s ago: executing program 32 (id=708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000001800)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xd9, 0xe9a3, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x700, 0x20, 0xaa, 0x400}}) r4 = socket$inet(0x2, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000740)={@broadcast, @empty, r6}, 0xc) sendmmsg$inet(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000240)="041feac3b88f7158f43cc5dfe1e22676fe7334c39d6e9b5b7bfdddaad45d29290b2e1609aeeca1ae12f078dc51f4091a280554510ec10aca475cfe773c08f524973c15cc0a7adb7f8f14b3721aabba060246290421f5499c1141ff13eb442d9f169b88bf331909299180862c4affef54b49e3489e942", 0x76}, {&(0x7f0000000400)="94f5cde50e63a8cd58d1219c969a812146ef50ed4dcd870e5a1cc9fbc34972a272cab966e017f92a86be5e5c5852bc519c552e5c4aa0368050f92042cbddb127e3ccac1952e84d58374cdfe43c976664660fad77e61a0e6e2608758bf5bbbc218c6dad388c6ff6f4a8851eacd0b45c3fdd0c0dfe598fcfccb709c1aee15972ce5d5cf3c1b8fdf5ff4ea72ce863f3fe497a0f97860459c82f437c06173157a2e7f8661dcebcbd92715ba555e55f91aa9b7d3fd1afe44d18d9915222eeb0a15a1ff0a6c97ddbac7c4f421784c4e419ceec0d4608fca55699fe1f", 0xd9}, {&(0x7f0000000500)="4fbfcb44bb69214865215b1a4f1d57609668c7766d41841f82cc8df6d900ff6997768459955fd0582e4d30b2ab1369c3bd3bc308761b57dc51e20f0acff8b358eaf7f2d41c1fd367f5ddf2a6a5f98b5627a5f4932d63a7dc00ba20e8c0d7186a62dd277d0a6226c251cf97023273651f93ba6862f244e6cc40f90097d921d5aee41701b1ec02752e5283dd60f92a848939c39370c85d11ea0f4731c6bfa339d29454144091b6fb83685d3b4ab5100417f33652aae1e3bcdae53744c584f1cf8d1d6b47e9b298a9b079cd4ce7d82e4eebba75d75c7a3b11ca700d714d920d94e23bc35d063a92a9231597903d480fd17108", 0xf1}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000000)="8887880fca20e207ef5edc82ecc903aa841543e1", 0x14}, {&(0x7f0000001680)="a2ff3b19aa0d9f28066d7acf76e538e72c951bcdae9210e5ed580144c8110b3325c8a7afea4784f3a44631c671fba2f50f8c0d93cc2996b9bf0a14e359985b3ee53f43efdd5307b32868bbc44e3e2caf812f2aaa5800d9f92da964c7a63ee17df6ebc15393bd6f81c048e97d35e02123db25f4908ebb56f5e2fe2f628b26b1fb848d1a756ca2c9cde7b1f1edadb7d546a2889ba379028d9dbaf419c3f6902bbddd5d341734299af6f1f9bf48ebcf2cefd5a6ddf6d82afe66c91d380684f68c362bee75f544bd0d241e10e2c76ae5ed3a548360abe150657064b7ac65f9726143eb1d5b4eb77c0915906ba276", 0xec}], 0x6, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x44, 0x6, "b24ef63a"}, @timestamp_prespec={0x44, 0xc, 0x5d, 0x3, 0x7, [{@multicast1, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x9f, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@remote, 0x10000}, {@loopback, 0x6e3}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x118}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000340)=[{&(0x7f00000019c0)="c39390963e4a8da4aa8dc6a429316ee529811a1327daf73e6cf69b181dc60a9f4b979853ef820f88632e94a0bba1cb5386d8a7d70aad79efe84dbd995240fbf6c1df9e59e093b1edc760a8cd7591b5347d", 0x51}, {&(0x7f0000001a40)="46f36c5b1522f7de8d9f0205dd69bedf3cea8c519a702488e53ee69e3a5922763e5a025e4a44965c187fa89f875f68b33ca9caedfb8f214f85c472aa9f26a92fef5de006b88ee4e4e4ee58d25133b9383cb962c8f71b368b9564eea3de8a5dcfb3725df43d77894ac3766969531d8cb34a7bbb4a6308009dd73b203405a61b56191164ed41f9290c69ad7f5ca9d6ae8c014ba1022aa61ef97babf0c2d2f8e0bf8e5329b13e76013bea0fc49f09d2eb7709924115d898bc8b826aa5b58aca17862275757c19a0d283b24e4f7ec8f1eb", 0xcf}, {&(0x7f0000001b40)="2f7a9f17d8eb7d8e2ac14bb1900ab4336d2de4b2e611a9d13237f6fd7ebaac542c22c704e6a92787c3cb05b26ab0488a44d8a375a4d78de440ee1233e03d85c8300a132f014a729ff51c10f831a5df93353332bc34023a343520828c119fce5811", 0x61}], 0x3, &(0x7f0000001bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @local}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x1c, [@empty, @multicast2, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x88}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@rand_addr=0x64010100, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x5, [{@rand_addr=0x64010102, 0x8}]}, @ssrr={0x89, 0x7, 0xb0, [@remote]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x85, 0xb, "011c2a4ad0d8afcab8"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x108}}], 0x2, 0xc004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 2m23.361322563s ago: executing program 3 (id=2500): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x5, "a3bb"}, @main=@item_012={0x2, 0x0, 0xa, "a491"}, @local=@item_4={0x3, 0x2, 0x5, "7d74fc5c"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x0, 0x4, 0xd5, {0xd5, 0x2, "8dca9dcffcc9369cb3b4cbff6e3c11742f5876cd8ce650e180e85cb4745fd3bb7619c53e6dd949bdbe5156520e83bcf2614e6c55e9aff009b9bf462a9e118371f88f13ea17f4004e745cff63f026d2dcbecacdc89703ad071f9cd417be849cf7f42ea3fdcd102cfa81748bf71533ba514699b7461dea7b7cf8dc871f21fa5bbcb020f69b6a5d4c46e18805137f7177a19accc641080554c239a06b58f9986f2c48671bc8fd63411d1d017c03232f9789132dea79abdeb9cc3db240e23da9bd22b56ab25ad523dae998efff218753dd2d3fb715"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "6999455d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0xb49}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0x3f, "d305e6da183cd840b422e15e60dbe5b570d2363ecedd240c48ca777d0d6f32444e1f99f8d41190ad8acd5c3e5340f0d621ad63097f9ae129d6d41450694a48"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0x49, "df39f007e4e72567cfa021add1baf6d4dc9aa2f086f6c615f951741e24aa4916504032c6f5e1be996eca2f4a1385c71c520f01f5cbd40db5a11ca7ada33cfb5100e02cc0e13f67913f"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x9}}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 2m22.787505589s ago: executing program 0 (id=2503): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 47) 2m22.353132464s ago: executing program 0 (id=2505): openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000156000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m22.261302281s ago: executing program 0 (id=2506): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x90, 0x2, 0x4c}, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000003) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz1\x00', {0x5, 0xffc0, 0x8, 0xf9}, 0x2b, [0xbbab, 0x1, 0x101, 0x45a, 0x3, 0x8, 0xcc, 0x2c2, 0xdb9, 0x60, 0x0, 0x79, 0x66, 0x1, 0x8, 0x8001, 0xe21, 0xd, 0xfffffff8, 0xffffff00, 0x3, 0x7, 0x6, 0x7, 0x7, 0x6, 0x6, 0xfffffff8, 0x9, 0x5, 0xe8, 0x400, 0x10001, 0x800, 0x0, 0x1000, 0x800, 0x8, 0x400, 0x7ff, 0x1c0, 0x8, 0x6, 0x2, 0x1, 0x7, 0x8, 0x7, 0x8, 0x5, 0x7, 0x0, 0x3, 0xffffff38, 0xb, 0x1211, 0x7f, 0x9926, 0xd, 0x7, 0x800, 0xffff8000, 0x6, 0x4], [0x0, 0x2, 0x2756, 0x1, 0xffff0000, 0xf, 0xe0, 0xfe, 0x4, 0x800, 0x2, 0x5, 0x6, 0x8, 0x9, 0x5, 0x2, 0x3, 0x80, 0x2, 0x49b, 0xc, 0x0, 0xff, 0x3, 0xc7, 0x4, 0x4, 0x0, 0x3b, 0xe, 0xaa84, 0x7, 0x0, 0x600000, 0xcd, 0x6, 0x3c7, 0x2, 0x4, 0x7, 0xfffffffd, 0x4, 0x6, 0x2, 0x357, 0x8, 0x9, 0x4, 0x9, 0x0, 0x800, 0xfffffff7, 0x101, 0x10000, 0x1, 0x7fff, 0x5, 0x1, 0xb5, 0x8, 0x80, 0x80000001, 0xa], [0x1, 0xfff, 0xb, 0xffffff7d, 0x1, 0x7, 0x1f8c, 0x8, 0x4, 0x8, 0x6, 0x1, 0x93a, 0x7, 0x8, 0x8, 0x9, 0x4, 0x6, 0x1, 0x2, 0x8, 0x4, 0xf45, 0xe, 0x400, 0x1c2, 0x2, 0x1, 0x2, 0x1, 0x10, 0xbb, 0x400, 0x1, 0x6, 0x6, 0x4, 0x40, 0x8000, 0xe826, 0x4, 0x4, 0x0, 0x3dc, 0x6, 0x3, 0x1, 0xa01, 0x7, 0x7fffffff, 0x16, 0x9, 0x7, 0x9, 0x1, 0x1, 0xfffffffb, 0x1, 0x9, 0x4a, 0x0, 0x2, 0x692], [0x6ff, 0xa6, 0x101, 0x8, 0xd, 0x5, 0xffff, 0x8, 0x9, 0x800, 0xff, 0x0, 0x3, 0x7, 0x9, 0xfcf, 0x94d1, 0x0, 0x9e4, 0x1, 0x8, 0x0, 0x7309, 0x1, 0x7, 0x1, 0x2, 0x1, 0x3ff, 0x99e48011, 0x1, 0x66d, 0x63, 0x80000000, 0x7, 0x6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x4, 0x6, 0x10000, 0x4, 0xb0a4, 0x10, 0x2, 0x9, 0x8, 0xfffff006, 0x5, 0x10001, 0x169, 0x5, 0x9b, 0x7, 0x5, 0x510, 0x5, 0x6, 0x4, 0x1ff, 0x9]}, 0x45c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x84, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x6d, 0x10, 0x0, 0x1, [@nested={0x44, 0x81, 0x0, 0x1, [@generic="411a3565cd932cecf98952a2b7197956c202101ba973971bc6a191d48a92be7c13715bc05d35070c2e5dbe88393913bd", @nested={0x10, 0x2f, 0x0, 0x1, [@typed={0xc, 0x24, 0x0, 0x0, @u64=0x1}]}]}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4ae"]}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x804) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) 2m22.177925759s ago: executing program 0 (id=2507): capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ftruncate(r2, 0x4a0e876b) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000600)='(\x00') 2m22.147668031s ago: executing program 0 (id=2508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@getsadinfo={0x310, 0x23, 0x48d82bbb386e3fad, 0x70bd26, 0x25dfdbff, 0x0, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@local, 0x3c, 0x0, 0x0, 0x3500, 0x2, 0x2}, {@in6=@mcast2, @in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xff, 0x0, 0x0, 0x3506, 0x4, 0x2}, {@in=@loopback, @in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@remote, 0x32, 0x1, 0x0, 0x3504, 0x2}]}, @migrate={0x180, 0x11, [{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private0, @in6=@remote, 0x3c, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in6=@empty, @in6=@loopback, @in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x3503, 0xa, 0x2}, {@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x33, 0x3, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@empty, 0x6c, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x6c, 0x3, 0x0, 0x0, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e23, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0xa}}, @algo_aead={0x4c, 0x12, {{'authenc(cbcmac(blowfish),cbc-serpent-avx2)\x00'}}}]}, 0x310}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m21.900626981s ago: executing program 0 (id=2509): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xa888, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d", @ANYRESOCT=r6, @ANYBLOB="f76b0e0e2e706851f617006aa62a9770cc7d01a4b9d717777026", @ANYRES64=r5, @ANYRES32=r6, @ANYRESHEX=r0], 0x2e) getgid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000100)='./file0\x00') 2m21.42184788s ago: executing program 3 (id=2511): r0 = inotify_init1(0x800) sync_file_range(r0, 0x31d6afbf, 0x400010004, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x66, 0x1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x1ff) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x5, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/55, 0x37, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x105, 0x1}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 2m21.341747286s ago: executing program 3 (id=2512): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03", 0xcc}, {&(0x7f0000000800)="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", 0x20d}, {&(0x7f0000000100)="c06a2f35af048c", 0x7}], 0x3}, 0x4008810) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000180)={0x51, 0xfffe, 0x0, {0x7}, {0x0, 0x800}, @period={0x5a, 0x3, 0x5, 0x0, 0x6, {0x76d, 0x9, 0x0, 0x7}, 0x1, &(0x7f0000000040)=[0x9]}}) 2m21.223371726s ago: executing program 3 (id=2513): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000afe00003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 2m21.133349343s ago: executing program 3 (id=2514): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = userfaultfd(0x801) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/170, 0xaa}], 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) fcntl$setstatus(r3, 0x4, 0x4400) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000200)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) userfaultfd(0x801) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/170, 0xaa}], 0x1) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) (async) fcntl$setstatus(r3, 0x4, 0x4400) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000200)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) 2m21.132821533s ago: executing program 3 (id=2515): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4800) ioctl$BLKRASET(r0, 0x1262, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe6683000) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000080)={0x1, 0x20004000000000, 0x52, &(0x7f0000000000)=""/82}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f0000000200)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x23, 0x1, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket(0x22, 0x6, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807", 0x11) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r6, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x81, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x1, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8}, {0x1, 0x3, 0x6}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x1}, {0x0, 0x3, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0xa0, '\x00', 0x4}, {0x3, 0xf1, 0xa, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x3d, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x6, 0xfa, '\x00', 0x42}]}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = fcntl$getown(r2, 0x9) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x6}, &(0x7f0000000240)=""/213, 0xd5, &(0x7f0000000340)=""/171, &(0x7f0000000400)=[r8, r8], 0x2}, 0x58) sched_setscheduler(r9, 0x3, &(0x7f00000004c0)=0xa) sync() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x0) 2m13.116729052s ago: executing program 2 (id=2540): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}], 0x2, 0x0) 2m12.247707992s ago: executing program 2 (id=2545): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 24) 2m11.893666271s ago: executing program 2 (id=2548): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) 2m11.400390051s ago: executing program 2 (id=2549): socket(0x10, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 2m10.144101063s ago: executing program 2 (id=2550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYBLOB="05"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) 2m8.980281687s ago: executing program 2 (id=2551): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000080)={0x1, 0x20004000000000, 0x52, &(0x7f0000000000)=""/82}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket(0x22, 0x6, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807", 0x11) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x1, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8}, {0x1, 0x3, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x1}, {0x0, 0x3, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0xa0, '\x00', 0x4}, {0x3, 0xf1, 0xa, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x6, 0xfa, '\x00', 0x42}]}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2000000}) sync() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x13) 2m6.795085104s ago: executing program 33 (id=2509): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xa888, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d", @ANYRESOCT=r6, @ANYBLOB="f76b0e0e2e706851f617006aa62a9770cc7d01a4b9d717777026", @ANYRES64=r5, @ANYRES32=r6, @ANYRESHEX=r0], 0x2e) getgid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000100)='./file0\x00') 2m6.031256286s ago: executing program 34 (id=2515): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4800) ioctl$BLKRASET(r0, 0x1262, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe6683000) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000080)={0x1, 0x20004000000000, 0x52, &(0x7f0000000000)=""/82}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f0000000200)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x23, 0x1, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket(0x22, 0x6, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807", 0x11) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r6, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x81, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x1, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8}, {0x1, 0x3, 0x6}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x1}, {0x0, 0x3, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0xa0, '\x00', 0x4}, {0x3, 0xf1, 0xa, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x3d, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x6, 0xfa, '\x00', 0x42}]}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = fcntl$getown(r2, 0x9) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x6}, &(0x7f0000000240)=""/213, 0xd5, &(0x7f0000000340)=""/171, &(0x7f0000000400)=[r8, r8], 0x2}, 0x58) sched_setscheduler(r9, 0x3, &(0x7f00000004c0)=0xa) sync() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x0) 1m53.497335921s ago: executing program 35 (id=2551): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000080)={0x1, 0x20004000000000, 0x52, &(0x7f0000000000)=""/82}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket(0x22, 0x6, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807", 0x11) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x1, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8}, {0x1, 0x3, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x1}, {0x0, 0x3, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0xa0, '\x00', 0x4}, {0x3, 0xf1, 0xa, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x6, 0xfa, '\x00', 0x42}]}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2000000}) sync() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x13) 3.673495433s ago: executing program 7 (id=3656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff0100000000000000000000001a000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006306"], 0x13c}}, 0x0) 3.617823847s ago: executing program 7 (id=3657): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r0, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r2}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0xffffffc0, 0x6, 0x4, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.535629604s ago: executing program 4 (id=3659): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) syz_usb_connect(0x5, 0x4c, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090508061000060408082387ac33afe34107"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57788000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3.486162838s ago: executing program 7 (id=3660): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a000200000000000000000000000001a8000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000133020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000ff0000000335000000000200ffffffff00000000000000000000000000000000000000000000ffefe000000200000000000000000000000000000000ac141400000000000000000000000000000100000635000002000f00ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a0010"], 0x27c}}, 0x0) 3.381770866s ago: executing program 7 (id=3662): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x12, "518aba4d000000000000000000000000002000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3, @any, 0x3ff}, 0xe) 3.34030412s ago: executing program 7 (id=3663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x2}], 0xfffffffffffffe42, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000002280)) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a3f4300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0xfffff000, 0x0, 0x9e5e111c47e3504f) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000022c0)='./binderfs/custom0\x00', 0x0, 0x0) r6 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000080)={0x60000000}) syz_clone(0xc5003480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f00000021c0)=ANY=[@ANYBLOB="120100005938d740109717422fa0becf13b6fe7aa35b30773396000e4a7a5ce7078c660500f200e7a0b2784668fcaa7547e34d6261bcdeeed00932da68e0f7bd829c4a6900000000000000000000aea983bc98379396629375f68d7e299e8947c2b16aa608d51f13b4c50fc34b175c7be94a43c8419067a9f9140ae9b6340f0f83b6015ceeef20f59820e993487fbe92bee593b30ab79b34b510edd94325b6536e76dc6e25"], 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0x12, 0x0, &(0x7f0000000800)) close_range(r5, 0xffffffffffffffff, 0x0) 3.226886019s ago: executing program 5 (id=3664): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000113c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 3.133652327s ago: executing program 5 (id=3665): r0 = syz_open_procfs(0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe6683000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r2 = socket(0x11, 0x3, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[], 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) r5 = syz_open_dev$loop(&(0x7f00000041c0), 0x1, 0x0) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000004200)) (async) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2000000, @empty, 0x32da}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="a788fae0785666bea89a76e16e6fd49492b5b3b62282539ceba4dd2f07d13e2bb84625ec1e7a5990500297960d96", 0x2e}, {&(0x7f00000004c0)="6ab075f2307234b070b14a1552d00e2f2e827f9c60715a84da5fef97b8f11bd9a81d7a858a5949c38106295d8b5967488ae79477310dc0c048c57042cb77fc815a49b07e97ca6ee3fb539e9d827d9ecb390880251e3dab2357cd1134d798aeeb781e21deb047fb1ee4f1bc02b1e56cc84ac772e5b4aa64bc0b5eb2f5533a2ec97d6563697d1e71f1fcd74be7bec93fb701065946b01f97fbb15e824727f6465819ac2c0d85ec9ad0533ce8f33852946c709050ccabcf90d75fe7388b2ba38e096dd2a3bfa84f0f4c4be2c4153aab5eb6f566b9e04c9ad27470e449af2af6a7", 0xdf}], 0x2}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="cbb734fd29684c0d87079ec2a97087588dcb0efc1e6aea1267668d094419fe4db01f81f40ab24315ec3b78883449eb4cd086726f4ceb64d83a6758284623d825b420ec3214076b42a47f9e374a53918c1fcfbc7800", 0x55}, {&(0x7f0000000600)="4ebc10715d99162c6bdd32cb42df5d68b9fd4393a57dbd51231231aaa3c2b95fe74dd214305d3476407619286472b7f1a3ebd2288ae4b8a842f9d80bd76a4e3e9a95fc2f27dc0ba548af6e560f5c884be1d382f60734f4f79640c8bf72c6ebc945f6d21a85fc73b539607113efa278bbb83ba2558098f4ef", 0x78}, {&(0x7f0000000680)="bee01cbc2315b17ec4a3fea6d1acbe4c39fe36428181beba847a7d235137172ffe253d95a63fa160d52035f5499ff73c21315c522b50cb9ea2572965c67afc2f24776f1e4caf028037b6679e76c6bae2a63e7df4163b950d1603259154b46ec71b6beb21b3e980cd2d3beb6b6e9f6c71164c7bf23516651f9f4d3341537e4471eecaaa1401e8aa5f09e8c046c2ff547f2d294a4ee4485cec3ef4dc35769ec6620d2a3177165ad5d7ecb1200348aa6cd5b2b0cc2044b84f955dfcc4d56683003661eed5b582689f6d2d723b625073b0dcd35e7607d1bb38613537a80129e2f3d3c62320905fe48fbefb142812a53e915facb12ec89dae", 0xf6}, {&(0x7f0000000780)="e2f7e2275f9e1c7d71a298ccf5e7051fbae402710d2ee2f3962c037bec", 0x1d}, {&(0x7f00000007c0)="cafd4557f044bafe98807e6978c717d430a78aa93dd1e8833a0e31cef9d40ed0667102a11830ce9c096ae87eceded40b75fae80e1689487a073b8459f80db9759d6f47ea11992e538b882c1e0ce317d29120c850ab63df9e8a8ae229c7c48e9ff4cf8f39cacd6f0eada13ad0efd259517787880c0ab3429b5616b89c09866c", 0x7f}, {&(0x7f0000000840)="18d48d0d509e97145db54ad6663058f32ae5951fba6cbf6e466351d25d0b359d6cd3ce1cdc219e15a55aac1177dc80d4e989876f334a695917590207d7b78103c8821f2f28dd0cf0ee568dccaabecf4dd46c0715be15a58189495d27236478d27935b7703b026f6a8db0ea81c6ef7a", 0x6f}, {&(0x7f00000008c0)="9d79c681ef29933cb7c8108f03738c446be639b95ee46a9d11e984915bd6a38d065f", 0x22}, {&(0x7f0000000900)="20cc5f3cfabe1e08249f21e905915a4a26d777c4ccee93cdd9263c018a43be3f8226a1ba713454a369e9a6ff0d482997c35f9a0b76d15d744440f4a95dd32c8acd09adddc7679250b571ff68da6205dc203022cb2799afd5e918", 0x5a}, {&(0x7f0000000980)="eea16b00cc8a9b", 0x7}], 0xa, &(0x7f0000000a80)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x2c, 0xd, '\x00', [@pad1, @ra={0x5, 0x2, 0xfff8}, @calipso={0x7, 0x48, {0x2, 0x10, 0x2, 0x9, [0x4, 0x7f, 0xfffffffffffffff8, 0x1, 0xfffffffffffff144, 0xfffffffffffffffc, 0x6, 0x5]}}, @ra, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdr={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x2, 0x7c, 0x0, [@loopback, @mcast1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x41}]}}}, @hopopts={{0x270, 0x29, 0x36, {0x82, 0x4a, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0xd4, 0x89, "bf90ee38a5dbf7d4e200df559a3f4bef75f69c5bba9b3138645c6bad08378175f49c9839db5eaed1515e9d130eef29f6d9f8ff21d78a315fffa4f80c547f9b697098e9ab63eb648c52b5def58fcf5b7558ff5b92b702f779bcc3401848aa377c622a7d8a1e3bf34334fcc5b03a0ae9f473bff46786dad6d9af4fe1cad7613a8d191e284c99ce321c10"}, @jumbo={0xc2, 0x4, 0xb}, @generic={0x5d, 0xf4, "6684101f0d1aaa6491c6eb5992edd6e2578d80e9b57b404a71f14fe9407eadc00175e95c58765c5f979eda0461561e440e6efeae03b3dc768692e8e32f1d24c6881ebc43f38032ee0a0fca079b3fefcb3e7334ddd8125f6ea5c050814eee4c21ae17c3ad07ee7364e8f9d19effa0a0f7dff31306e49a4e9462c5ea46dd0e9c5ec3c037513473075272fe47a190d22eb68c7968737c3313a4bcd8fc48b462aba8c4ea85b3f5e56dc5d848148cbba3bde37a32f6390c9dc43c529509eb71d57b4ca25529dbd247b6749fd3abac554ce94e0d21f687ffe4f47b32fb1ea4cda539d8e6e15dd6118e2395dd80b50adec751bbe29662fd"}, @generic={0xbf, 0xca, "9f2a7615b9ee4393daa316702bc38ab75980911d5b77f984004ed9a53fb7cd142ec379be6508b51437ec7dfd8f2973a74a514c30aa280a3b6c20be07a8fdbe5313c2696d020f1473543e4c5abf828c6f4c215d5570bdfe1fcdf4ce82fc71be2836e8d6565312ede6e4eac0e3f30d70da1cb15e5dc32de6b128b465ebf472da55f79d8befef2bd91c19fa25c5de8e97a6cbc579e70ec4533041af7384c87cb69018a10c2a576e71065abf86b6ae9166a635bb8770ad37dfb6f975d9ceeeabc3591dbac94e7ff89d8cfde2"}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x2, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0xfe}, @pad1, @hao={0xc9, 0x10, @mcast2}, @jumbo, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x3c8}}, {{&(0x7f0000000e80)={0xa, 0x4e24, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="f9d28a12ed9e2691a50ee9e887cacfa12ac999bea2770e1f8acce874b393c469ce63b3d8c8a97bbdc653d63f795571", 0x2f}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000f00)="1664a892d9e4570d698d52c660679bb4340296eb73e9115855ac752ebc32bcec74118492dfa06bb24e829287a44cf05ee0f29edafa51a5825c2bb83697463b44666eb37170c813b3", 0x48}], 0x3, &(0x7f0000000fc0)=[@hopopts={{0x48, 0x29, 0x36, {0x2c, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x81, [0xfffffffffffffffa, 0x7fff, 0x6, 0x7f]}}, @enc_lim={0x4, 0x1, 0xa1}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x0, 0x6, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x40, 0xffff, [0x0, 0x67bc000000, 0x1000, 0x5]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x98}}, {{&(0x7f0000001080)={0xa, 0x4e20, 0xf721, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}, 0x1c, &(0x7f0000002600)=[{&(0x7f00000010c0)="f3f856b85c6029ab16ca58989a45d7b8251130bcd634566196", 0x19}, {&(0x7f0000001100)="968b26e6dd2ba6aee98534b64a85dbc3a0ccea435bd703ebc65ce2363cc416", 0x1f}, {&(0x7f0000002180)="4e8bd4b35d289db7d2b70d50f12597d5aa8391d6e19ae1de6652399f93999d769a56b15b274b634d4915e5e0959249c00dcc17c1b0d189f02f4b95be49b7387a68aaa9421af8016dcf330913bce6347f696b4ad09a7cb51aaba1a644", 0x5c}, {&(0x7f0000002200)="2ab2f9a84dcbb63aa9e1fe14e3b13d88bbf244f4e0323328f7dcefdd9492015ac4c34fc62cb67e684ad7bc673860b6ad066be884b5ac51e496906305ca915c4548e68ee1831a46b91be379891b568ffa695f29661730dd61b693fc0bef99200b29062821c7dfb7f4455bb475480e970fe11a1ff881816817bce56b12bde9894087b26052e44590a7ee2ce9bd08e91bcd487fdf58af", 0x95}, {&(0x7f00000022c0)="a1df4cb92924e2804e5b52714828d816fb37103854bd13eacf3316053ceb1fb1d42890b0805297368f587d2af0cb50eae6f7b5baca922a0303a1798925e2c10e8a7f3c20fa6498be61f47c8b3e09c7353182082fedcbb3458b40c91245f74ffb9858431d1a6c1293aaae259e06bd0f8e39ad8b4211f6adb928b2564599acaba8d884db4fba650e6941f18a8b302499a2dc694db7f04784d8911f27b5d1569867b59dcaad0548bf78013812bdaf449ed5092292692b945efd1ecce52318b6e6c8d3c632763d73af1ef709f496b3877ffa3e74f76e051ca4cd5c6fbebe0f8b3e048bd8607fa8c08a0bf922bc5a2b9f6026da44174ea995", 0xf6}, {&(0x7f00000023c0)="cfdfe6bf660f79c446ad69e1de91d73722cd48e3169b64fdf0fe254dc039fb444d39fd60d93b311c355493ec4aad0651e9270e5cf5477fdb", 0x38}, {&(0x7f0000002400)="0919eddd0e487e8e5aada18440478d1fc7ea29b529ea7ea52fd4cc464240c9c1fcbe0464a9a450538f29cf241867bfcd4588b1109316157c6f6e9507cd4f65930e4003e73d2d3ffc7fa09fedf48be62bd6ab9423547e64b26ce50f", 0x5b}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000002480)="575a7505cfaff9f99bf50499142d031a50116bf56ae874cc87cf06dcced67f8dd988f8df034943737126f6c9a6b80e68caf4dbe7d896d594e278111d953be28fa2abe9550437e062d837eaa776ae7b767cf6898c03451e2d006e140e7bee3b15df88f7d66bf003d3176598e2566be14f37727a6821bb4ca1c031a27b9b632c1c300456c3776d7b072788689f7cc5648f28d4e6cd8e2d2c11676ff6dde8fcba05fc2ecd17489f4dd732ef932725f9de2a0c6376edda8ba764d3fc34d87a52b809155378b0d51bf14d6b138774cf8a58", 0xcf}, {&(0x7f0000002580)="f9e2238533a4ed6140eb70aa97fe152a284f93981b9a30db1745ac9c4e1762ba69813ac56215fa2276d634d774b0b7516f0dbc2f161afd08021604a788ae57f386b2227dede041d9165ebbbea1a8151ee34e201f96936ad8127cc35ffd561e82dfad46", 0x63}], 0xa, &(0x7f0000003b00)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x2b, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x5, 0x26, "8954be46f614d1e1e362ebcaab1d567763beec2b2b56fd4fd177b1a7e944f41ba869cb4ea2a8"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9b9}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1a}, r4}}}, @rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x2, 0x89, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @loopback, @private1, @rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x84, 0x3, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x2, 0x2, 0x89, 0x7, [0x1000]}}]}}}, @hopopts_2292={{0x11d0, 0x29, 0x36, {0x87, 0x236, '\x00', [@generic={0x1, 0xb7, "b366e20c3c6c0f2382ed92060895fc3540977445af19669567c778f7b2acc1cf893c65dcd981349d36e49d48eee15a8b89f7ac43f525fd5b6d68ad98f77d562e02d1aae17764098b6e192754c79dc998ecff1b2e671a44695d337a6c7261e0a469ecbc11f305514a45c762738754f77e51e4293c5868bb79a517f26c685701592f714e613d6c1b8f5d117ceaaf4599252135a5f70a24555a1f8d8bd214fdc070ce4e85ee7313730288b6421a6dd517974cc5e5c6d9d9f7"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0xff, [0x9, 0x3]}}, @pad1, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x2, [0x7, 0x228879c3, 0x2]}}, @generic={0xe, 0x9c, "a8e6ffab4f5573cf7f64a5c9e70d0bc9345271b86211da54b4af715920829a30bbf6136aa3d7bb9df3f23dcc9b752b8a2713879351b9548957508f834fb1d062b1e4e4e5f10f3dd849838f12560ed8e2ed00c500e6d509c7f7a2a7094a026c0d4a65e70362d698e8540acc732d9ce24995b7191aa30e8001c281605fc46b769e589f06ff3c1cc30b8a38678659cb83c612c0fad8866d458b8d3a25f1"}, @ra={0x5, 0x2, 0x7edf}, @generic={0xf, 0x1000, "1c9112f4606133f6e6e790d2beae4097d8b4cb2c682ea848b2a38515247d6cf1bc9f9225dd5665d0f8f1e6f827b1daa6a0dd4eab0be9e6651ba181158200f360c89f16205b38f4fc765956d61f2743431a7b40b997ea2e910dfd8d9406a0464c586727c5c3506cc005604683a10c4484955c09f393b25232a152a5b6c3bba79366ce8dc78f7cdede6bbfd739bda34af55d1b2d49f09ea4f72f92150bb506514cddf0fecd0c6572f300745101032d27425a2e99a067a80d234219ea7a8f3910539869438afc5b4912efff7ebcd2456adf49a4181ff47ef67c8fb49ef965fea7b24dd029e196b2433242c066f8a1151e5048d9f51591a5b9fed14f17fc544d4643f2c6c4f5f83ea6bb421b21c86003635aa0fc357ce11d7226fc3831d5992122c7ebd0331d10926a01b16d1c2a2c17e9d448bef8c1962cb8a23c13804409a39c89ec3a0270e1b1e1f18a70fca0a20dd3085d880fe56ee0276810ea5cde8d6241b11831138c7e7db1076a04ca939c3871bab227482f591c97b7bdb993dcb5dfe0d330999b84c8b37be3d79dbbfb8bef6a8ee9a16dcc236058cd821f7e5d20493b6acce06efd87feb90b5f1c3e1dc8420587e886d7fd795cbae6c27fd9f6caeb3a330c8e800b59cabae877f6c85bd3b0bcaa84535f57f5a03305afe3f1bb886dba966a70b79fb246374b05e6052d7cb4af7715feb50dc787c2800a8b44f60af724f63336dabb16777bc3c5c9f1be069f50b2513c2cacf95a143ea49726ed3c8ea046a336b44f96842bf228bfb992355e8c9865446f391d4dae2d0c3ba584b086e26d9b5b7ef2991d99fd2eca4ea63685f799b4f53225e836d9b7a9f59e85978a4cef9a707d6f47a1d70e4fa0bc1a8dcdfa1a66e45d7bba27c563aaef1aef10082a2e59444c2585beec8fa9a4b2ba8d8f8681b07e45a76daf19968458b23dfb7f4f332d00c2c804185dce27d9f69e84638c55e60c9906e7b68fc708edb044be0e8e5eef104b9a4ee61dc04709027b020e70cf8f158213bdabfc5c3a1dac8c177b432279111beed3d47f9ec5861cae5fd36317b198baa83d573d67de1bf2ba33ce018d6813ccc273397bc2f55b8c4823323a7e25cdd74164239bbddcb04381f817f3e81c94c72907436c043e2253f832a76ee9eabc56a9cd8d01baa7c6b81e91dc10d9698f2606ec6080f1ee73334799cfd62b4790710f98521c6b4c45c7a3f47cc8e95f78eb2b638ef11bd3cbbefe89fae5edecd0ed5e8db9c8d3468176563baf95e6eb99016e0d252977d1c7194706fadd73ec5206e3523e6029a32ae9bc5d291872bbb2ee26584ea0a40681f9554ace87adbb3de631a92c806db883b88301c615a487f999178399bdf9ccd3804d7d30c84185373fa5b6e59edb7adbe5b85ae3e1a0692b9a4bc7388ed4faf518387b81092dc4e6de3f4f2ca202be43e33df79b3d2ff8209542a7f7629c841c39bbfc3955e9133f11451e2d203e41ce5257335d65460da5d8300b1e0b12b3a40c1731b4c2773c7bebbdc93b491ce72fdddc65ed3dd85aa25b09ef05d807a1acf434d3405426d71f9ded8eaee18b7d32693e3ebdc50a61214b87871316e1343e03cd43442f1a268c24e58678cd95b3f9b9fb8d29408924a11f84e3b8acf0920013abb5c848fb2a5ad31ebcbc5335b2774ccacde96878cf6b459f00ec3b8ef3f2d11f4155c2cd68eed7d75d31064a99a50690e097be221e39ad2dd2803ad00e759e4551fbe07b89e575543f49fc68e9e6c29156a75e2286d25dc563a275477f2c957347e164921faed307fae0ce132dac3314b7cbb4372e86afe358acfac9dbb5e168a184f0233c91267df836be6a8a3560f8c98a9745fa5fd95f2c3cee684744495565a32df55c90b995db077b46306030239275d63b89576abf9149da0ea204de3dafc905ef70144b99602c6cb62294662803d4cebc39a4e110270971d6e70a7b8c70793cead73963afab22d0f29278bffbe5362d4baeeeb52c28f27c0cb806f2eca2fb122b457a4aed11e57353b74b1ea488c5a1b28a5161bf7f3cae41a9e6bee599a414af08407addf21c5788d4bb96c59b0a3e224553193b664e4dda1658a38f8ac585abf20c983ae69b54815185ccdaf5e6e1cb158a53837968c0ce30032dc88c331a4b758cb5b003c4cb197268e8f39d5f5420440dd52b569b84d59426027de33f79707414b7590fd81ab34d9338e22eb629781dd5a9aa16b6308a3d0b82de2892cc1d7d39058f44ca1768432dfca43947439620f6db80cd6adb753c4998aca59ca29b226796baeb344b99518642d6d8edf8fd0f0556f290c2c9f0d35c4f636159bee1fb4aea003d4747b2a53961aeead6bf4990b0696fceb63584979f90f1afa7ad69c79aab7f68710f643c96e357d9e0d46ccda18339f2eaec1400ab80f2e5dceb79d1273eef6e60c72c741325fda35fae76d154c702f008fe8cc6d788d90aca2465ae6a399fb434e400d4cf5331b9cb4faa4c11907cf2928ce681653081a23ee10c26e8a91040cd9e73457ccefab1f4abe9b7ba2bb69c3f53bf0c43882a485f2dbc0e1ce4325d5de61e7a9bb6e215a26198aa21418ad94aa92828ecd98ade0f32b25d9229e8f3131e1970ff9dd88687b552efdaff6832ba129695d9a044869ed96244f3fdd6619c7d08216f5d507859d4d022d14aee67e6fe274e33efe35bc911348e36834e284e2c5326335419eef99eb841d4a9163c2cb08ef7ef8fc75117cb1bda4a45447649fd66e5c7c2226686e237c0315a3dc8427fb2691ad39321dfcf4481183ae3655fa00fa966d383c7b499251db23766f8df37ae36ef9f9576df4a86af34047224c1fa910486d36d103716d3536497619230409d07c6bbf62cccf6952497ffa16165e64332a00ab94644f06c5d87a7284cee0e47590362679ec6a4b32a31981ed3f3c7277aa20923348782721027584a81ab37fc771e2b41a89b4d53a4435c28262dcbfaadf4c6cf70c0db483db116a351b3e14e1d9dc8290ba0d32adea58a032dfed384ff7ecc3ea4dabe1e70191f5472e671122f24ed418ff1ca49e5d92a5ac781994bbb87161e9a84412e0937e0990459d96a5ea8127dacba161bf24664eee05395f3bcf494c80f95aeec11b5ca13ae52bf39af7e7467bf0921049e57ec457114dbd138abf1ac8019dddf4ad70bcba62f50736bf9ca35dc8595946f07b275ae3f92dce8989e8a6b3529db3618a3d2295a45923094788215bea0dd6dfee3ffd3a1957c33eb1e95d60039c436a8d0f28c4d7ae6efb292f09532bec2939c771689141a835a7e0105c74d3c7508f2338827d27f8eff037c13ee58ec31dd49c70c7e65ab0bccca4fe40df745996534bf4ebbb3144c60de76690e52cc0130e7c15670ef2726cbeb987a1db68a8ae50a5c264281bddfc888a8159ed197cc3a554b7cb15805ecade50603e3f089746b276404a471aac2389411f42dcd369fc13320d3ac23734a6afc819805610c06f6f1af96a8f3ea2acc5d381a66e9f8f2df0f8c2caf2c5be1a90dceecc194da44d6e946532c6f3b2904288e4c75914e6c15cd253419d28276a7c012b82e7a3dd769191eeea25ece89cb775ff0a2365103257c5d1a1c26c12a5af3b7de09f7f5610fc73bac425353fe97067e3f75a645badc718c36512c5c244dc33559a42e57dc74cb026ff5c0c25173fa1477e512d3ecaa0c65584921648415d2718c4a052c409574ab5a3dbf02b3d287c17cb1038c6a3164d620b4a2f646ed6a98bdaeffbe2a89d80f0e457f3780292d533641c16ab4bc7d292f1a0aa93882d1abdc9d2044a8f493a0cd27e9557c0ad827ae9e30442db7c7508b32706c58b6fe6482b408157450d8d671878d7290e732258c39d88bebac81f4dd947c77eaa8999bdcf52407690cff63fe12213f8a05974e5ede8bddbf1d01430ed4c5bbf6b11b4629d0b7c057a3f5672a8df33de11fba3ebf734596301dce07ff4237518b7e5f406f85502363b9f08f0c6ddb6070a9ce5a77e82bfc94b8fb0dadc01d248ca989b2fe5952859091e83c3265a2a0c81d17f811df3ac3c7e42741b0af889cabe9118580ad0eed0a054edf8eb38fb494198d55864aebe2993e79747efcd23b369ff11d977ceac8c3130156626e2e88e6f87f5b2eef6cc152c700ee9822600391ff2b321a837d3772a6f00650029998a93cfee49a35895121f1bb9f1f32d3f521475abd34a6e3caaa6277150c3e47bccc362d6873d5810a455b122e4761aeb33d7c7fad4243c36370f608a8375f525c3f7250ae39ae8cf142be587c1556170dec700b9a314f680048e78206e77f7e88f38bc20f73f60756818bc4c9144d003da7dda0524320804c8d22cd64b0f22c611ee8b779a7587e430372451c3f39c9bc097e77bb1b0cc36fd27dff4f3a1cfc4729b538d52890a7be9a5eb71c5605e819488930d0278c1d112de00216e30f7e126822490227b7fe1213866269fbb574ba0e87d16c5e7e404cf2617a25b6d150d0d23d1d30933ec2a4a5349f38a88fcb52d6a92dd9ff5d4748351eca70e459e5b1768c14a2172d576ae17f0b485072661ead7bae8b2f9f61c9e7969d16dcde3587c7a908d66e38334efb0f3898caae358ea937cfea167293ac941d6a2074c7982fdd6acfb6ee04ae781fee1f37c241088bde111e2d4b59f234e5d55e25a4feab9318c598ba38619496b710370e3857ebd63ff2f045c47c0b7ba75a623650a1c09125da032d8b1cac6bf80e17aaf92d6a160ab883946ecc5fe74f02d6442e617854c1a0ccd59aa7e9838dd4c00e2300d7f3f844fb61a6df50fe628fc5e1a94942ca3802c7ef436d224d2ffbe801581a610990c763b88878da61cb03166fd6d716e563dce24954897ad405ee6f27e6d4f6dd795cef1c89e5c352368d70d29e4b309470eea13fb939200e2c5c5f7b206cf5909b88119450261a616f305e9afcdf26fa373ad035d51b82fb08600a1c12af1a6c26b8c7a0535800f661fd669b06f8371b862992fdd98333e673950c0343d5ca2a2e089dea3a6c3c201f0ff46f3a5cdab1c7dcf6b863d5ab1426a1757e5878f3cdda7283cd601c2c3ef82f26434c7f14b80d6c5a631a468750d7b988a997ff55fd0da58746704f7f1d6201b74e094c89aa885b66bc42fbbda2a6a77eec9a456e65c5cd3bfd2502a7326a10daa88da288ca7fbb536f57ae36d28a2759d92faa86e9a8d9550b10c4b9b06ffc6098f4847c7ff247410a1106bbddd4111f56a8a0932063db98fe5517f94d51053da944e31c1f92b23118ac30a45db0eda9c6d78764791da0bec9cbd64b4eef2f72428a9e7e5db3e58b394b4e382de8d29959507199348209a62fb31667745d8386c0ee627feda944e95ade15fda62a00350f2bd24b0dc4b403915a21cb69043e05f05c288641b742abb51791d61da02b5844e1a07a872d76672658c59f93aac3b7525c8effbb76e349f105936a274d31c7f0f2810dbeefdd5671d5aef31b6e42dafd702f2f3368dc5b764a1ec89e0b81397a9012d767bba689b216342fa37805cd23ea46d9872a5d87735fb9985f42a21e13007979c7bc6f0018eb622add2cec5daa7bef3cacc3ab06e027bc30b2bf87a75ac55e9b873775dbb0d671ee0adfab554db720f455c12fb032a53e9b8622121360a91bd614638d13d8f7fc2f07ed75cf53101a519d7be58f0236ee237a4ad730cb5deba80e25169e13b126b00431ff416f316657fd116552fbb92eea6d62ccaa6d95e43ff94999607340a26834339bd3d45a5b67bbfb66f3bccb7a30f8c663b9265d52b822cac8d7fbdc32f3464d"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}], 0x1308}}], 0x4, 0x1) (async) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400"], 0xdd12}], 0x1}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000002c0)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) (async) mmap$usbfs(&(0x7f0000bab000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xffffffffffff6285) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.133562567s ago: executing program 5 (id=3666): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 3.104179619s ago: executing program 5 (id=3667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000200)={0xdb, 0x0, 0x5}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x68, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000340), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.22284299s ago: executing program 4 (id=3676): r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000880)={0xa, 0x4e23, 0x0, @private1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="140000000000000029000000340000000c000000000000002400000000000000290000003200000000000000010000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000014000000000000002900000008000000fdffffff00000000280000000000000029000000390000000002000900000000fc0100000000000000000000000000011400000000000000290000003e0000000100000000000000481000000000000029000000370000002106000000000000040105000100c910fe8800000000000000000000000000018000d3c21048cc1dfc8ab20ccc8aec6376d708bcc85f4a57dfbf41d876e364f2ada1402de3eb384a455f2be407e948eca88ccaf5c88d1d18f0b84cce68a2ac816b421797647fa0d52340e7a808d3b66f8dad829996d9375a8805c851ec6334f0abe780561a0d96669099bf2df38a5402a59f535053d99fbe08ca033670e223f32549784db0abce13e5c960da4144c035b6a0664ae9483d6b913506a15a5bff3a7993f707bd07469cec1ec156f33b4b08fe5086ba528bdb652fe6ae60baba2a27a03337f8681bbec5c1532823c59b8186193a8873269490627a140e88761602b4e720729594b7171536140985e06e95617a5b977c2056b923d0384181c1767977a4e879beb67ae4aff82ae9b6409ecedc80824cf545da8f9beb4186d73454cc2e8f493b63f16d2c7e31e6681edb3615128bd9e1140248b9d9f2759c37eb14a4134725b5eb25f4766820d4b648c49eb377fd9be4aabc8fdf3419f89a78f5abd3926d3e2a06e0aec29f8ffdbd6be0860fd8a119f80de24c00af7b9c90ed0510940126b3dd3efd12fcb670792df0c7ee63e72b7f839e794017a20bf070dce8bdb2da716738abcb5bd841003ab2569170302f8ec96b6ea538cc259dd1d097b810ad4e51ba4073e871fe3df8e22e2c4c6dd5f357507dda74751570f951985957ea4643067d0ec0e653d327efd9291254b0e55e8048020096fec6bc506bf0635cfdea53b04687ac9c260d83d8fa20c3d673d454a158b135c25c07611573321619e4fbe32241455a88810ee23c8d438e66eaa4ae2cbc43afb1386d43b6d843118f903a0625269843e3e2231c241ecc66363741bf096c165efe5b201b4962ad6ebac3df69a9d15df5f389addcbecc046603e10f4a6a75faf3662b05a15ed1d6344e4479bd7ae146dcf81b97450ea78098d74efc3c8df1a9a6cc1a2aec6ebd4795927470ce294216e71e1a153ae3f39978af9f2c3f88f400cf8402b56147c88c9eb9c560db170e20867c3c9e5dbf5cfec4220d1352eda50a944c88300607fb199f0f7061fb3ccf9e2d864388fa3a5a2bda9d171ffde36cc7f80824be645cf57b846d54eb5ff2774fbf07dd9bb2db11c1e49fa706e9a43600d938778b3d696b5bdb7e019a7588d9501a508022c9b53d96f8b19a6b141eabb56cee19e388f74b16b9a5699e8cce9f52d867c94ea358c05e238025f1b561bda3b89a9d05f455669f8eddafafe5a8832bccd8e30b19463218ed0d89a05fecf6c6a3cf8224981d44a339bacf0f9f94a5d8ec6192a93788c7efb16b645705965bf64924b1f48abbaade6cac7b61446143dccf9a42834ac125050b3445ec6e6a0eedd377fd4e2f327d6c8e248332997db2fae17d46a2455e04336c25c99d02f4101c03d27ceb1afa504904d4b60e3a06cae307a6483ea18034ebe18d72588c7abf6e186d9de594ebaa3613984ff291641c189353e166be9e0e4b0cf49d8479295ee6f5f7d4033884aba979f44cf558a3e4aae94b37b584209897a84854f4f1c605b3c58f65f11b1a4e96ede2f7de71912c6c9cbfc240d262215d6b6a8ac81ed4d09fe9d62d869e0e4924ba216a78a2fbe86a3fdfa820c2ef762a7501b104513e59b8ed29e044208c784831d2086dc3a132504f24de65612660d30a235f7d3c5cd7548a25ced66010cbd97e42a56a7d2b2e9fda2b48ce19a8871014a4ee3b6ab178a1db2abb5eccad6e94c0cf13af953fc704e05c24da0dfc37e46f7033cd9c0e78a6600c83e80116353881b19e8617e43bec141e6ac2f9c17ae82152d1f29c2baf71af22d035ac5ec7ca7e55fd4181cf91a78c3283d8c9878423e5b3c48f7a8565eb9c960942ad862bad05d155799b8849e462319632c294836fcc87089ee3fdad78f6717c3dbc803937a619a94f30c164333a0817602b754528340501f4c1de592575c17d279dc8dea5cbbf55e9ba962390a7c772e061b0d02dc36228531cd9fbc2a2b76ae68a2d4b51a8779c278d2a8e73086e4ca9fa5e2370f9cc3d1d8b6e569e3f6808675cac3d1a7873c2eb4bdbaeb0bc5373712e216eef59a3345acc3acee73a77303c247f4715edc453d4e4eedc4579be35d4a4fec55ca14970729b8b066ad46380bdf7529f709f3e80d26141e76407f3b6ba71c805e7a3e609a31d73da8411c613f47da4a0e7959db41654df087e0bf2a51bf6d163d3fec4426bab90bd641f8a81b30b46f3134769e55e0c2d804668e3384ea1b1ba97d2ce6f576eaba44db7df1cb02c12de8744829543a5aee0b51e3faf1dbef06b1ac4197136caf02f7ca0d8edab4bd6ac59c184f79359ddf7ed7856273bc6ab14ea9a6943cf13187d18887ccaaa650c5a4a22105880f70183e50ed96cef0622c4f399fc6b8eed93de53036e6068c448f41152f1aaafafb8dbf35d01a8dbca7d09a884033be1c01c7b9787e9d9128078452911c41cd656b5a50ec6e398f32b9aa9bd169fc8a4123da6ca6f590356611d47f72eaab63314cedc558fb2c8e2e45826a994ffbcbc2e3996718ad5ca16cb3ca18429495086cf4b13b4b059942c9c04b5b58b83d81fc7cd81e3a9c65171c8646523a31173d7ab72949dc044648faf422b63847a36826d84d3e153eccc3964d6ea3b497155873ca998b96b22a11671a7fbffda1675326f541f90d7ef755c7b86bbea70c25af3065b98bbaf24b0b633d0f9920c86137219bec993838199d5c2f1591abcefe2df585cfde04a1eaf8d3fe87c26d12baf3c7da57a7a578b17286f3f596b0d434c9c4f51c6185b1acf8bde0a71291654e56c8d09dd50b4da2845a3a822d468d9edf678e3ad225ef9ca3ac251a5088b391839af527847c531ca222077eb5234b2c755cfa1b1af39bb03fdb4858d40c46bc741a26a6c1bbd971a248e22729e1d56eb0798dde952c4fd47f938392cfb285ea41cc19e324e2ce096b9abe41aa379de58bd0da313faa1df9bf5708ec1076c13830f63b1dd680141015be14eb3caa1044d98c354e9dbd409a73d016abd8e21521572fb162ea97f7e161ebb128e909c8f2cca1177d32b837d0a6b2ddf59b9aeb22e0583c3bfb74530d7bbfd27e440fbf2e41f9f99043177bbd03a877c882be82b47508afca9b5bf67cfdba01e70c1a8676e54ea5e5a99ba06a9d619db5a1e847e7a168d7ece67f049c61b628a6332ad0ee83f4a85f656a6db16eef1b893bd3eaba9000ff5fc359f29a32f471c9bc719e4b90f3b333786213220d045e56a854fa040b4e8adf4b41d9923c745a996e0326e1a77f97d5eca1c6672e4a298caf6a25937ab241375703b9e10c8717d623dbf4434fad166acf932c4d4c25355a1304242836afab36e8254a535fc12b786efb2234697dd40076c1bc923e6b307f847c95dc07bd259c574b09f20727aa3eee7d772d8e4be0ecbde0314aab22370c7191475aef397925a7df1d4eed3d09302fdca228ad977186180fbaabf86fe288a68bb327552a4727a571d44f5341171b8d29c3eb283fa23b615d7617d41839b1e4bd71e99dea90aef32882f63245cd4c5cae1df71807125397d8ba000faeb5b1c70b8c08001fd131979d83fb1d8df4ad24fac208a015c0cd546544eb6e317c4436df3c82037b4b5ad8e12395b8f109f5177c89c3c9006afc550cfed2502d1b6d3ad3518dba880d6cd12a545ab168dc46d32d08f4fb08fd136d36a06d9d2191686ee77d87de44c49ae722afce7f5393fa8d6e30997520bab62a73d57a2ea81a0f84a5b7a64e9024a5bc40436eeb20826a6169eb4655959bcac8a72f89858aca79e16457c8f9982f15df7bf9ace56973d1340f86c32bc97aa8dfc5c8cca5e61919b6f104e32ee8b558162c1fd06a1d5b2f32c6c08cb38a68e4e4f60c582f79fcfffda24b1b1ae9a29cc3694ed7f3853122cbada03e8ab557c3572af939b9003b68e747d0fe4f54331dd7fad635cfe21cf9b18639ce0209a01459035a87a38546876bb7af47015fe06c295ae242a56018885ebd4611c0b950f4e6795bb0f756b6abdd6f642b2c90ed416b6999508878c35e980bb1d57252e762c74eebb339dcf2081abde798f5ea58b07d6fd0e3520efb5de9fd231e7b81884d0cfa44acc2cdaa4c4f77624be800000608041611ee89417812ab976f15e666014782a771a904ad31c486fd65f896cce2de82882c009d50fe45e5a7a7661002fea8fbc945c21ac396e56827cd72d6f052de1a19289dd15e7814d9257e6102e92c29d2ce5e4baa9cef9bc8a2d849d926c02feee8137fd9a8db7d74cfd9670bc6607d04b3fa0a3a91a2c403088f6803db0fa27479e666b2406b3589607e85c0ea4b2d9296de95b26ac38574ad8ef8593155963d52add8ca90d3a13f92d786b38b41b99f62b65adf11fd35d0a6e40c5168542d797f8e06b4930359fb568c324ef4851a2579a8ff3e2a9a5a1413c1e543947ef04b49f9412e8a16f2ecb697aec6b7bd25c24b3f14de53223d167f3689c6ec512e30900dadccc2c1c8d93b3b4c430c6502f6d6664f09e67c4b642941f71353473babdd68ea855b706ecd8bf86ee5aa3a197ee0154da1f5cfd5c36d85fc3abaea2158ba3899660540f51601acfe3d9d2ad6a38447c0a7e0d31dcc7f740e85a8a56c7d31a97ede04fe49870ef86dd593ff775f786d9e3a439a3fc54dc9719611a5ec76a199537e0bd5b25ad63458e2bcbad56b412fdc7fdc075c4a6c8f673b1900773d72f0ebf0d19d9a45f15119514e164ba2857217c5ba9e75ec5abdb129405ebb0877664b9c01edaad60f31995424bf7f26b3289e421d7a5b2ae9a5d0656cdc8ff05b398b1c37ec2093e225cb9567ed724ad2fd7e97a5e5cea233c7f79f32d1180804e0af3d56a1ef83384fefeacbd2da89e197546478a0312d0467dc399467ceac575edf02588e780d499ba4de861a86175f0735dc8d763e465671d2b7a62799fa52422448ffefbd08d1e9177477c7e476057d0643a254b86761f9bcfe33953eecc572c11220038eb52b955a7496f03813feeabe1c1fc98546ed079f2ab862720f7b790aff28997fe77ca3d97494ca91a5bc73a41704e14dda18590b49358ac4ee83def13af7f0d081c8cd82505742d3359bce9b88d06d663d1e3b3a40217e0533b5f54bb091381345c5b1b98789cd636ef28190ed4ec5e0b36577457463c733f90d19eaeead5303bba96f66cab08a7f16def0fbf5efbd50ce12da7f0ceafe1ad4e8abb80f6b47156189ba8b82d0fc707ace6fcfc12a8c72866734a1583ee94c5a07e85bf777c29b87a936a6d0beae9d3845469d09acb2929bdf3edf394d7665d000a035cfe38062e4ee05488a74dbe9d5296720776b3d063c4f6ba003c5a5f88473b349c9056b2df3a2be3cb953469c0543048ca78e7b67a7f722b8adbbc29c158cd960099c7e87013f5bed4964d1d15214c92b00bf0e5ced7d68ee845eb6134bee45d9b9580a075f870686a8741c3e59265486e21e15bd5ff5c7533af5c3b004ef0a9ca07729f475357c00ce3f98cd7da1543f8f5ad0fd510f3757cb3d663404f8460facb2f110c6e7be59f22f39327518d999b6e6099d604b00aa8fcb27c7f217cae1cd937a03522f3c3bcd1326a0a047007172add133701f4ad3cbd18bf4e7e119fbc1aed56281c7f098d617be0fff72a63a7971c2ed752d899c13ad4eaee871d062d4f5dd5684b1aac44716cfc148cd8f37eba5b22296bcd5947b6b8cd3eec5c89477295ab03e7c3f567bd6a02fda1bc817b2693698226b7ee7d12121f2e3642216e5260688b1439bf13ec841e9fb1cc2a5fd7fcac4ed8302139360fecc339449022ae06c173ec694dd564c332000100c2047fffffff04010b0401070102000000010014"], 0x10f8}}], 0x1, 0x20048014) 2.190366553s ago: executing program 4 (id=3677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) fcntl$notify(r1, 0x402, 0x22) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) 2.141887837s ago: executing program 5 (id=3678): socket(0x10, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) sendto(r0, &(0x7f0000000140)="da5c65bde7c4877b6f1583d675567ae34519b41f3bdecafeb0363038c8d9fc94c87b1a75f4f1829f8c3775f2a5a20bb502baa4df44eddc5423ff6cf8e89edb6671a8a522749c9905d6fc606ca998093c57272e531c61fa51f6feaaf8983890dabce73a8324d9732f0acc462df8c824378ce468d805c60a0a4957ef9e3f58723fac5fce71ce14122e4c31866c5ad798fad5df1cbc8532f3efb6aed3216bac2d6e8ced319a48ada49d2623e2847c750af041320a02a66001b96fc871", 0xbb, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 903.250757ms ago: executing program 4 (id=3686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) 813.883704ms ago: executing program 4 (id=3687): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)}, {&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000002c0)=""/153, 0x99}], 0x5, &(0x7f00000004c0)=""/66, 0x42}, 0x2}], 0x1, 0x0, 0x0) 629.279839ms ago: executing program 5 (id=3688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/232, 0xe8, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 409.903987ms ago: executing program 6 (id=3690): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000280)={0x8c0, 0x19, 0x8}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x303fc1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 337.042473ms ago: executing program 6 (id=3691): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000b80), 0x801, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 305.105006ms ago: executing program 7 (id=3692): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xba, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89801) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 237.566441ms ago: executing program 6 (id=3693): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x50) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') chdir(&(0x7f0000000100)='./bus\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 149.878878ms ago: executing program 6 (id=3694): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200007ffdaab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 136.252829ms ago: executing program 6 (id=3695): mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs\x00', 0x0, 0x105840, 0x0) epoll_create1(0x80000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x1000000, 0x0, 0x0) 96.328372ms ago: executing program 6 (id=3696): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xd2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@redirect_dir_follow}, {@userxattr}]}) syz_usb_connect$uac1(0x9, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e58f0004000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524a46a3815c7ceccead0057e157adfdd04fa5ba7fb16a1039576b8862a2f379ba8656752996cb5959d0e91c4efa5f6e62197bb39adb07fbf3c85f66fee88ede796aedf62cde301e3591b6b05d8bbebad18f97f825b6fc6", @ANYRES8=r4, @ANYRES8=r3], 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x401, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@msize={'msize', 0x3d, 0x4}}]}}) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f000000c3c0)={0x870, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) openat$cgroup_ro(r4, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, 0x0) 0s ago: executing program 4 (id=3697): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c", 0xb4}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) kernel console output (not intermixed with test programs): cess+0x3220/0x3220 [ 382.889425][ T8657] ? __kasan_check_write+0x18/0x20 [ 382.889449][ T8657] copy_process+0x538/0x3220 [ 382.889473][ T8657] ? __cfi_copy_process+0x10/0x10 [ 382.889495][ T8657] ? __kasan_check_write+0x18/0x20 [ 382.889519][ T8657] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 382.889539][ T8657] vhost_task_create+0x1d6/0x350 [ 382.889558][ T8657] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 382.889578][ T8657] ? __cfi_vhost_task_create+0x10/0x10 [ 382.889597][ T8657] ? __cfi_vhost_task_fn+0x10/0x10 [ 382.889615][ T8657] ? __kasan_check_write+0x18/0x20 [ 382.889638][ T8657] ? mutex_lock+0x92/0x1c0 [ 382.889661][ T8657] ? __cfi_mutex_lock+0x10/0x10 [ 382.889685][ T8657] ? kernel_text_address+0xa9/0xe0 [ 382.889707][ T8657] kvm_mmu_post_init_vm+0x1a6/0x310 [ 382.889731][ T8657] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 382.889755][ T8657] ? _parse_integer_limit+0x195/0x1e0 [ 382.889780][ T8657] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 382.889803][ T8657] ? kstrtoull+0x13b/0x1e0 [ 382.889825][ T8657] ? kstrtouint+0x78/0xf0 [ 382.889847][ T8657] ? ioctl_has_perm+0x1aa/0x4d0 [ 382.889868][ T8657] ? __asan_memcpy+0x5a/0x80 [ 382.889893][ T8657] ? ioctl_has_perm+0x3e0/0x4d0 [ 382.889913][ T8657] ? has_cap_mac_admin+0xd0/0xd0 [ 382.889934][ T8657] ? __kasan_check_write+0x18/0x20 [ 382.889957][ T8657] ? mutex_lock_killable+0x92/0x1c0 [ 382.889982][ T8657] ? __cfi_mutex_lock_killable+0x10/0x10 [ 382.890007][ T8657] ? proc_fail_nth_write+0x17e/0x210 [ 382.890031][ T8657] kvm_vcpu_ioctl+0x96f/0xee0 [ 382.890057][ T8657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 382.890082][ T8657] ? __cfi_vfs_write+0x10/0x10 [ 382.890108][ T8657] ? __kasan_check_write+0x18/0x20 [ 382.890132][ T8657] ? mutex_unlock+0x8b/0x240 [ 382.890155][ T8657] ? __cfi_mutex_unlock+0x10/0x10 [ 382.890179][ T8657] ? __fget_files+0x2c5/0x340 [ 382.890199][ T8657] ? __fget_files+0x2c5/0x340 [ 382.890218][ T8657] ? bpf_lsm_file_ioctl+0xd/0x20 [ 382.890241][ T8657] ? security_file_ioctl+0x34/0xd0 [ 382.890260][ T8657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 382.890285][ T8657] __se_sys_ioctl+0x132/0x1b0 [ 382.890306][ T8657] __x64_sys_ioctl+0x7f/0xa0 [ 382.890325][ T8657] x64_sys_call+0x1878/0x2ee0 [ 382.890350][ T8657] do_syscall_64+0x58/0xf0 [ 382.890384][ T8657] ? clear_bhb_loop+0x50/0xa0 [ 382.890409][ T8657] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 382.890433][ T8657] RIP: 0033:0x7f5c1e98ebe9 [ 382.890450][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.890467][ T8657] RSP: 002b:00007f5c1d3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.890488][ T8657] RAX: ffffffffffffffda RBX: 00007f5c1ebb5fa0 RCX: 00007f5c1e98ebe9 [ 382.890503][ T8657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 382.890516][ T8657] RBP: 00007f5c1d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 382.890530][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.890542][ T8657] R13: 00007f5c1ebb6038 R14: 00007f5c1ebb5fa0 R15: 00007ffc4e6bc8d8 [ 382.890560][ T8657] [ 382.890570][ T8657] syz.6.3235: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 383.335037][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.6.3235 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 383.335068][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.335090][ T8657] Call Trace: [ 383.335096][ T8657] [ 383.335102][ T8657] __dump_stack+0x21/0x30 [ 383.335128][ T8657] dump_stack_lvl+0x10c/0x190 [ 383.335148][ T8657] ? __cfi_dump_stack_lvl+0x10/0x10 [ 383.335169][ T8657] dump_stack+0x19/0x20 [ 383.335188][ T8657] warn_alloc+0x1bc/0x2a0 [ 383.335210][ T8657] ? __cfi_warn_alloc+0x10/0x10 [ 383.335230][ T8657] ? kasan_save_track+0x3e/0x80 [ 383.335248][ T8657] ? __get_vm_area_node+0x392/0x3a0 [ 383.335271][ T8657] __vmalloc_node_range_noprof+0x361/0x1420 [ 383.335298][ T8657] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 383.335321][ T8657] ? kasan_save_alloc_info+0x40/0x50 [ 383.335344][ T8657] ? arch_dup_task_struct+0x5b/0xe0 [ 383.335366][ T8657] ? __asan_memcpy+0x5a/0x80 [ 383.335387][ T8657] dup_task_struct+0x5bd/0xc50 [ 383.335405][ T8657] ? copy_process+0x538/0x3220 [ 383.335424][ T8657] ? _raw_spin_lock_irq+0x8d/0x120 [ 383.335444][ T8657] ? copy_process+0x3220/0x3220 [ 383.335463][ T8657] ? __kasan_check_write+0x18/0x20 [ 383.335485][ T8657] copy_process+0x538/0x3220 [ 383.335508][ T8657] ? __cfi_copy_process+0x10/0x10 [ 383.335529][ T8657] ? __kasan_check_write+0x18/0x20 [ 383.335551][ T8657] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 383.335569][ T8657] vhost_task_create+0x1d6/0x350 [ 383.335586][ T8657] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 383.335605][ T8657] ? __cfi_vhost_task_create+0x10/0x10 [ 383.335622][ T8657] ? __cfi_vhost_task_fn+0x10/0x10 [ 383.335638][ T8657] ? __kasan_check_write+0x18/0x20 [ 383.335660][ T8657] ? mutex_lock+0x92/0x1c0 [ 383.335681][ T8657] ? __cfi_mutex_lock+0x10/0x10 [ 383.335702][ T8657] ? kernel_text_address+0xa9/0xe0 [ 383.335723][ T8657] kvm_mmu_post_init_vm+0x1a6/0x310 [ 383.335744][ T8657] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 383.335767][ T8657] ? _parse_integer_limit+0x195/0x1e0 [ 383.335791][ T8657] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 383.335811][ T8657] ? kstrtoull+0x13b/0x1e0 [ 383.335832][ T8657] ? kstrtouint+0x78/0xf0 [ 383.335854][ T8657] ? ioctl_has_perm+0x1aa/0x4d0 [ 383.335873][ T8657] ? __asan_memcpy+0x5a/0x80 [ 383.335896][ T8657] ? ioctl_has_perm+0x3e0/0x4d0 [ 383.335915][ T8657] ? has_cap_mac_admin+0xd0/0xd0 [ 383.335933][ T8657] ? __kasan_check_write+0x18/0x20 [ 383.335955][ T8657] ? mutex_lock_killable+0x92/0x1c0 [ 383.335978][ T8657] ? __cfi_mutex_lock_killable+0x10/0x10 [ 383.336000][ T8657] ? proc_fail_nth_write+0x17e/0x210 [ 383.336023][ T8657] kvm_vcpu_ioctl+0x96f/0xee0 [ 383.336049][ T8657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 383.336074][ T8657] ? __cfi_vfs_write+0x10/0x10 [ 383.336106][ T8657] ? __kasan_check_write+0x18/0x20 [ 383.336128][ T8657] ? mutex_unlock+0x8b/0x240 [ 383.336150][ T8657] ? __cfi_mutex_unlock+0x10/0x10 [ 383.336173][ T8657] ? __fget_files+0x2c5/0x340 [ 383.336191][ T8657] ? __fget_files+0x2c5/0x340 [ 383.336209][ T8657] ? bpf_lsm_file_ioctl+0xd/0x20 [ 383.336231][ T8657] ? security_file_ioctl+0x34/0xd0 [ 383.336250][ T8657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 383.336272][ T8657] __se_sys_ioctl+0x132/0x1b0 [ 383.336290][ T8657] __x64_sys_ioctl+0x7f/0xa0 [ 383.336307][ T8657] x64_sys_call+0x1878/0x2ee0 [ 383.336330][ T8657] do_syscall_64+0x58/0xf0 [ 383.336350][ T8657] ? clear_bhb_loop+0x50/0xa0 [ 383.336376][ T8657] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 383.336400][ T8657] RIP: 0033:0x7f5c1e98ebe9 [ 383.336415][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.336432][ T8657] RSP: 002b:00007f5c1d3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.336450][ T8657] RAX: ffffffffffffffda RBX: 00007f5c1ebb5fa0 RCX: 00007f5c1e98ebe9 [ 383.336465][ T8657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 383.336478][ T8657] RBP: 00007f5c1d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 383.336490][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.336502][ T8657] R13: 00007f5c1ebb6038 R14: 00007f5c1ebb5fa0 R15: 00007ffc4e6bc8d8 [ 383.336519][ T8657] [ 383.336529][ T8657] Mem-Info: [ 383.392375][ T1080] usb 5-1: Using ep0 maxpacket: 32 [ 383.422999][ T8657] active_anon:8703 inactive_anon:196 isolated_anon:0 [ 383.422999][ T8657] active_file:24755 inactive_file:16070 isolated_file:0 [ 383.422999][ T8657] unevictable:1 dirty:459 writeback:0 [ 383.422999][ T8657] slab_reclaimable:5204 slab_unreclaimable:77030 [ 383.422999][ T8657] mapped:40724 shmem:165 pagetables:1176 [ 383.422999][ T8657] sec_pagetables:0 bounce:0 [ 383.422999][ T8657] kernel_misc_reclaimable:0 [ 383.422999][ T8657] free:1462617 free_pcp:3222 free_cma:0 [ 383.438093][ T1080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.446506][ T8657] Node 0 active_anon:34812kB inactive_anon:784kB active_file:99020kB inactive_file:64280kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:162896kB dirty:1836kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6684kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no [ 383.452749][ T1080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.479575][ T8657] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965988kB mlocked:0kB bounce:0kB free_pcp:5776kB local_pcp:4068kB free_cma:0kB [ 383.483419][ T1080] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 383.562529][ T8657] lowmem_reserve[]: [ 383.570617][ T1080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.577726][ T8657] 0 [ 383.591666][ T1080] usb 5-1: config 0 descriptor?? [ 383.646606][ T8657] 3921 [ 383.654951][ T1080] hub 5-1:0.0: USB hub found [ 383.697614][ T8657] 3921 [ 383.816195][ T8668] fuse: Bad value for 'group_id' [ 383.845870][ T8657] [ 383.855687][ T8668] fuse: Bad value for 'group_id' [ 383.898363][ T8657] Normal free:2892916kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34812kB inactive_anon:784kB active_file:99020kB inactive_file:64280kB unevictable:4kB writepending:1836kB present:5242880kB managed:4016120kB mlocked:4kB bounce:0kB free_pcp:3096kB local_pcp:1352kB free_cma:0kB [ 383.898417][ T8657] lowmem_reserve[]: 0 0 0 [ 383.898440][ T8657] DMA32: 3*4kB (M) [ 383.906890][ T1080] hub 5-1:0.0: 1 port detected [ 383.910265][ T8657] 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 3*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 384.008962][ T8657] Normal: 164*4kB (UME) 175*8kB (UME) 195*16kB (UME) 472*32kB (UME) 422*64kB (UME) 57*128kB (UME) 27*256kB (ME) 15*512kB (ME) 4*1024kB (ME) 6*2048kB (ME) 686*4096kB (M) = 2895416kB [ 384.027106][ T8657] 41185 total pagecache pages [ 384.031800][ T8657] 197 pages in swap cache [ 384.036235][ T8657] Free swap = 123724kB [ 384.040469][ T8657] Total swap = 124996kB [ 384.044715][ T8657] 2097051 pages RAM [ 384.048523][ T8657] 0 pages HighMem/MovableOnly [ 384.053222][ T8657] 351524 pages reserved [ 384.057372][ T8657] 0 pages cma reserved [ 384.063095][ T8657] Memory allocations: [ 384.067093][ T8657] 0 B 0 init/main.c:1370 func:do_initcalls [ 384.074326][ T8657] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 384.082418][ T8657] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 384.090050][ T8657] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 384.097956][ T8657] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 384.106094][ T8657] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 384.114725][ T8657] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 384.122654][ T8657] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 384.130550][ T8657] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 384.138458][ T8657] 0 B 0 init/initramfs.c:101 func:find_link [ 384.207140][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.218791][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.235650][ T45] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 384.394345][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.404544][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.413459][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 384.427670][ T45] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.436756][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.444773][ T45] usb 6-1: SerialNumber: syz [ 384.518362][ T1080] hub 5-1:0.0: activate --> -90 [ 384.655210][ T45] usb 6-1: 0:2 : does not exist [ 384.668827][ T45] usb 6-1: USB disconnect, device number 31 [ 384.708193][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 384.792592][ T8675] loop7: detected capacity change from 0 to 7 [ 384.799195][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.808364][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 384.817441][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.826610][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 384.834637][ T8675] loop7: unable to read partition table [ 384.840346][ T8675] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 384.852131][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.861344][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 384.869827][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.879033][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 384.889878][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.899095][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 384.908770][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.918042][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 384.927013][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.927214][ T1099] usb 5-1: USB disconnect, device number 117 [ 384.936187][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 385.038968][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.047682][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.516644][ T8688] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 385.542598][ T8688] overlayfs: missing 'lowerdir' [ 385.567644][ T8688] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3248'. [ 385.626352][ T8690] fuse: Bad value for 'group_id' [ 385.631384][ T8690] fuse: Bad value for 'group_id' [ 385.804990][ T8696] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 385.824458][ T8696] rust_binder: Write failure EINVAL in pid:623 [ 385.942376][ T36] kauditd_printk_skb: 445 callbacks suppressed [ 385.942396][ T36] audit: type=1400 audit(1754943460.317:29404): avc: denied { read write open } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.013382][ T36] audit: type=1400 audit(1754943460.317:29405): avc: denied { ioctl } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.040201][ T36] audit: type=1400 audit(1754943460.357:29406): avc: denied { read write } for pid=8699 comm="syz.4.3254" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 386.072397][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.081150][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.101936][ T36] audit: type=1400 audit(1754943460.357:29407): avc: denied { read write open } for pid=8699 comm="syz.4.3254" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 386.132368][ T36] audit: type=1400 audit(1754943460.357:29408): avc: denied { read } for pid=8699 comm="syz.4.3254" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 386.163998][ T8704] rust_binder: 1514: no such ref 2 [ 386.179902][ T36] audit: type=1400 audit(1754943460.357:29409): avc: denied { read open } for pid=8699 comm="syz.4.3254" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 386.222377][ T36] audit: type=1400 audit(1754943460.367:29410): avc: denied { ioctl } for pid=8699 comm="syz.4.3254" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 386.255619][ T36] audit: type=1400 audit(1754943460.447:29411): avc: denied { read write } for pid=8701 comm="syz.6.3255" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 386.295900][ T36] audit: type=1400 audit(1754943460.447:29412): avc: denied { read write open } for pid=8701 comm="syz.6.3255" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 386.335680][ T36] audit: type=1400 audit(1754943460.447:29413): avc: denied { create } for pid=8699 comm="syz.4.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 386.456313][ T8711] fuse: Bad value for 'group_id' [ 386.464925][ T8711] fuse: Bad value for 'group_id' [ 386.572372][ T457] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 386.698264][ T8717] fuse: Bad value for 'group_id' [ 386.712640][ T8717] fuse: Bad value for 'group_id' [ 386.736723][ T457] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.760526][ T457] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.782025][ T457] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 386.825946][ T457] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.844765][ T457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.874514][ T457] usb 6-1: SerialNumber: syz [ 386.989112][ T8727] /dev/nullb0: Can't lookup blockdev [ 386.995840][ T8727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1519 [ 387.088020][ T457] usb 6-1: 0:2 : does not exist [ 387.108466][ T457] usb 6-1: unit 5 not found! [ 387.124303][ T457] usb 6-1: USB disconnect, device number 32 [ 387.219270][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.235119][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.254829][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 387.382410][ T404] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 387.534296][ T404] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.544477][ T404] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.554812][ T404] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 387.563902][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 387.571922][ T404] usb 5-1: SerialNumber: syz [ 387.782986][ T404] usb 5-1: 0:2 : does not exist [ 387.792468][ T404] usb 5-1: unit 5 not found! [ 387.809034][ T404] usb 5-1: USB disconnect, device number 118 [ 387.939797][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 388.075194][ T8756] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3278'. [ 388.124827][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3277'. [ 388.140624][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3277'. [ 388.355446][ T8765] KVM: debugfs: duplicate directory 8765-5 [ 388.402388][ T457] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 388.564870][ T457] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.582401][ T457] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.604328][ T457] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 388.629033][ T457] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 388.638193][ T457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.646229][ T457] usb 6-1: SerialNumber: syz [ 388.784675][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3287'. [ 388.794568][ T8777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8777 comm=syz.4.3287 [ 388.808715][ T8777] sit0: entered promiscuous mode [ 388.815241][ T8777] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3287'. [ 388.826523][ T8777] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 388.834962][ T8777] overlayfs: missing 'lowerdir' [ 388.865905][ T457] usb 6-1: 0:2 : does not exist [ 388.870808][ T457] usb 6-1: unit 5 not found! [ 388.897733][ T457] usb 6-1: USB disconnect, device number 33 [ 388.926543][ T8781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.935139][ T8781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.989569][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 389.132406][ T404] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 389.284220][ T404] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.294342][ T404] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.304656][ T404] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 389.313926][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 389.322060][ T404] usb 5-1: SerialNumber: syz [ 389.505707][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.539808][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.552392][ T404] usb 5-1: 0:2 : does not exist [ 389.575328][ T404] usb 5-1: USB disconnect, device number 119 [ 389.625164][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 389.665939][ T8792] bpf: Bad value for 'uid' [ 390.098342][ T8807] binder: Unknown parameter 'ÿÿ' [ 390.192375][ T404] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 390.248203][ T3854] bridge0: port 3(syz_tun) entered disabled state [ 390.265440][ T3854] syz_tun (unregistering): left allmulticast mode [ 390.271954][ T3854] syz_tun (unregistering): left promiscuous mode [ 390.278347][ T3854] bridge0: port 3(syz_tun) entered disabled state [ 390.326659][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.333752][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.340811][ T8810] bridge_slave_0: entered allmulticast mode [ 390.347135][ T8810] bridge_slave_0: entered promiscuous mode [ 390.354255][ T2148] bridge_slave_1: left allmulticast mode [ 390.360010][ T2148] bridge_slave_1: left promiscuous mode [ 390.364970][ T404] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.366584][ T2148] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.376308][ T404] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.391778][ T2148] bridge_slave_0: left allmulticast mode [ 390.393825][ T404] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.397483][ T2148] bridge_slave_0: left promiscuous mode [ 390.406993][ T404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.413128][ T2148] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.420211][ T404] usb 6-1: SerialNumber: syz [ 390.475146][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.482364][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.489437][ T8810] bridge_slave_1: entered allmulticast mode [ 390.496338][ T8810] bridge_slave_1: entered promiscuous mode [ 390.537057][ T2148] veth1_macvtap: left promiscuous mode [ 390.542615][ T2148] veth0_vlan: left promiscuous mode [ 390.625292][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.632376][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.639684][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.644090][ T404] usb 6-1: 0:2 : does not exist [ 390.646731][ T8810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.653273][ T404] usb 6-1: unit 5 not found! [ 390.689497][ T404] usb 6-1: USB disconnect, device number 34 [ 390.734284][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.741701][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.749934][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 390.778235][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.785323][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.817826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.824920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.958017][ T36] kauditd_printk_skb: 666 callbacks suppressed [ 390.958033][ T36] audit: type=1400 audit(1754943465.337:30080): avc: denied { sys_module } for pid=8810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.002645][ T8826] rust_binder: 657: no such ref 0 [ 391.030779][ T36] audit: type=1400 audit(1754943465.377:30081): avc: denied { sys_module } for pid=8810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.070003][ T8810] veth0_vlan: entered promiscuous mode [ 391.098867][ T36] audit: type=1400 audit(1754943465.377:30082): avc: denied { sys_module } for pid=8810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.115894][ T8810] veth1_macvtap: entered promiscuous mode [ 391.160040][ T36] audit: type=1400 audit(1754943465.377:30083): avc: denied { sys_module } for pid=8810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.218748][ T36] audit: type=1400 audit(1754943465.377:30084): avc: denied { sys_module } for pid=8810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.225090][ T8810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.251233][ T7058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.260519][ T8810] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 [ 391.275423][ T8836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.282397][ T7058] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 391.285619][ T8836] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3308'. [ 391.345716][ T8839] fuse: Unknown parameter 'rooteode' [ 391.382783][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3302'. [ 391.414614][ T8842] rust_binder: Write failure EFAULT in pid:2 [ 391.758546][ T8864] usb usb8: usbfs: process 8864 (syz.5.3318) did not claim interface 0 before use [ 392.162389][ T404] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 392.302377][ T404] usb 6-1: device descriptor read/64, error -71 [ 392.343521][ T8870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3320'. [ 392.361702][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.396557][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.562476][ T404] usb 6-1: device descriptor read/64, error -71 [ 392.802406][ T404] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 392.942368][ T404] usb 6-1: device descriptor read/64, error -71 [ 393.036794][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.045379][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.192396][ T404] usb 6-1: device descriptor read/64, error -71 [ 393.302479][ T404] usb usb6-port1: attempt power cycle [ 393.642439][ T404] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 393.643115][ T8894] 9pnet_fd: Insufficient options for proto=fd [ 393.674893][ T404] usb 6-1: device descriptor read/8, error -71 [ 393.804340][ T404] usb 6-1: device descriptor read/8, error -71 [ 394.042416][ T404] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 394.064406][ T404] usb 6-1: device descriptor read/8, error -71 [ 394.194281][ T404] usb 6-1: device descriptor read/8, error -71 [ 394.302471][ T404] usb usb6-port1: unable to enumerate USB device [ 394.446129][ T8898] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3331'. [ 394.722563][ T8907] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 394.828839][ T8916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.850977][ T8916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.096078][ T8929] binder: Unknown parameter 'fsuuid' [ 395.157847][ T8925] FAULT_INJECTION: forcing a failure. [ 395.157847][ T8925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.171205][ T8925] CPU: 1 UID: 0 PID: 8925 Comm: syz.5.3342 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 395.171235][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.171244][ T8925] Call Trace: [ 395.171249][ T8925] [ 395.171255][ T8925] __dump_stack+0x21/0x30 [ 395.171282][ T8925] dump_stack_lvl+0x10c/0x190 [ 395.171302][ T8925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 395.171326][ T8925] dump_stack+0x19/0x20 [ 395.171343][ T8925] should_fail_ex+0x3d9/0x530 [ 395.171358][ T8925] should_fail+0xf/0x20 [ 395.171370][ T8925] should_fail_usercopy+0x1e/0x30 [ 395.171379][ T8925] copy_fpstate_to_sigframe+0x919/0xb80 [ 395.171392][ T8925] ? prepare_to_wait_event+0x410/0x450 [ 395.171404][ T8925] ? copy_fpstate_to_sigframe+0x174/0xb80 [ 395.171416][ T8925] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 395.171428][ T8925] ? timerqueue_add+0x212/0x240 [ 395.171439][ T8925] ? hrtimer_reprogram+0x34f/0x3e0 [ 395.171450][ T8925] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 395.171462][ T8925] ? fpu__alloc_mathframe+0xb8/0x160 [ 395.171474][ T8925] get_sigframe+0x58e/0x7d0 [ 395.171488][ T8925] ? __cfi_get_sigframe+0x10/0x10 [ 395.171500][ T8925] ? __kasan_check_write+0x18/0x20 [ 395.171514][ T8925] ? _raw_spin_lock+0x8c/0x120 [ 395.171525][ T8925] ? __cfi__raw_spin_lock+0x10/0x10 [ 395.171535][ T8925] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 395.171546][ T8925] x64_setup_rt_frame+0x15d/0xcc0 [ 395.171559][ T8925] ? get_signal+0x1098/0x14f0 [ 395.171571][ T8925] ? _raw_spin_unlock_irq+0x45/0x70 [ 395.171582][ T8925] ? get_signal+0x1250/0x14f0 [ 395.171594][ T8925] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 395.171607][ T8925] arch_do_signal_or_restart+0x31d/0x720 [ 395.171621][ T8925] ? fput+0x1a5/0x240 [ 395.171632][ T8925] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 395.171645][ T8925] ? ksys_read+0x1ef/0x250 [ 395.171654][ T8925] ? __kasan_check_read+0x15/0x20 [ 395.171667][ T8925] syscall_exit_to_user_mode+0x58/0xb0 [ 395.171676][ T8925] do_syscall_64+0x64/0xf0 [ 395.171687][ T8925] ? clear_bhb_loop+0x50/0xa0 [ 395.171700][ T8925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 395.171713][ T8925] RIP: 0033:0x7f9a5e18d5fa [ 395.171723][ T8925] Code: 48 83 ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 <0f> 05 48 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 [ 395.171732][ T8925] RSP: 002b:00007f9a5f08bfb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.171745][ T8925] RAX: 0000000000000000 RBX: 0000200000004200 RCX: 00007f9a5e18d5fc [ 395.171753][ T8925] RDX: 0000000000002000 RSI: 0000200000004200 RDI: 0000000000000003 [ 395.171761][ T8925] RBP: 00007f9a5f08c090 R08: 0000000000000000 R09: 0000000000000000 [ 395.171768][ T8925] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000003 [ 395.171774][ T8925] R13: 0000200000000940 R14: 00007f9a5e3b5fa0 R15: 00007ffcddb5da88 [ 395.171783][ T8925] [ 395.470699][ T8935] binder: Unknown parameter 'max' [ 395.551360][ T8940] fuse: Unknown parameter 'group_i00000000000000000000' [ 395.591210][ T8942] fuse: Unknown parameter 'group_i00000000000000000000' [ 395.874119][ T8961] rust_binder: Write failure EINVAL in pid:430 [ 395.976842][ T36] kauditd_printk_skb: 673 callbacks suppressed [ 395.976861][ T36] audit: type=1400 audit(1754943470.357:30754): avc: denied { read write } for pid=8966 comm="syz.4.3359" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 396.017570][ T8969] fuse: Unknown parameter 'group_i00000000000000000000' [ 396.024967][ T36] audit: type=1400 audit(1754943470.397:30755): avc: denied { read write } for pid=8967 comm="syz.7.3358" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 396.025309][ T8968] fuse: Unknown parameter 'group_i00000000000000000000' [ 396.057140][ T36] audit: type=1400 audit(1754943470.397:30756): avc: denied { read write open } for pid=8967 comm="syz.7.3358" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 396.082798][ T36] audit: type=1400 audit(1754943470.397:30757): avc: denied { read write open } for pid=8966 comm="syz.4.3359" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 396.110442][ T36] audit: type=1400 audit(1754943470.397:30758): avc: denied { mounton } for pid=8967 comm="syz.7.3358" path="/150/file0" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 396.134006][ T36] audit: type=1400 audit(1754943470.407:30759): avc: denied { mounton } for pid=8966 comm="syz.4.3359" path="/15/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 396.184223][ T36] audit: type=1400 audit(1754943470.487:30760): avc: denied { read write } for pid=6943 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.232373][ T36] audit: type=1400 audit(1754943470.487:30761): avc: denied { read write open } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.292465][ T36] audit: type=1400 audit(1754943470.487:30762): avc: denied { ioctl } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.334020][ T36] audit: type=1400 audit(1754943470.527:30763): avc: denied { read } for pid=8971 comm="syz.6.3360" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 396.426288][ T8985] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3365'. [ 396.505794][ T8989] rust_binder: Write failure EFAULT in pid:391 [ 396.538952][ T404] rust_binder: 8946: removing orphan mapping 0:24 [ 396.786729][ T8999] fuse: Unknown parameter 'group_i00000000000000000000' [ 397.354521][ T9016] binder: Unknown parameter 'euid>00000000000000000000' [ 397.475135][ T9020] rust_binder: Write failure EFAULT in pid:704 [ 397.491446][ T9022] fuse: Unknown parameter 'group_id00000000000000000000' [ 397.687811][ T9024] FAULT_INJECTION: forcing a failure. [ 397.687811][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.716934][ T9024] CPU: 1 UID: 0 PID: 9024 Comm: syz.6.3381 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 397.716964][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.716976][ T9024] Call Trace: [ 397.716982][ T9024] [ 397.716990][ T9024] __dump_stack+0x21/0x30 [ 397.717018][ T9024] dump_stack_lvl+0x10c/0x190 [ 397.717040][ T9024] ? __cfi_dump_stack_lvl+0x10/0x10 [ 397.717062][ T9024] ? hrtimer_reprogram+0x34f/0x3e0 [ 397.717083][ T9024] dump_stack+0x19/0x20 [ 397.717104][ T9024] should_fail_ex+0x3d9/0x530 [ 397.717129][ T9024] should_fail+0xf/0x20 [ 397.717158][ T9024] should_fail_usercopy+0x1e/0x30 [ 397.717175][ T9024] _copy_from_user+0x22/0xb0 [ 397.717196][ T9024] restore_altstack+0x9e/0x4c0 [ 397.717221][ T9024] ? __kasan_check_write+0x18/0x20 [ 397.717247][ T9024] ? __cfi_restore_altstack+0x10/0x10 [ 397.717271][ T9024] ? __set_current_blocked+0x279/0x2c0 [ 397.717296][ T9024] __ia32_sys_rt_sigreturn+0x200/0x7a0 [ 397.717322][ T9024] ? recalc_sigpending+0x16d/0x1d0 [ 397.717340][ T9024] ? _raw_spin_unlock_irq+0x45/0x70 [ 397.717361][ T9024] ? __set_current_blocked+0x279/0x2c0 [ 397.717383][ T9024] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 397.717408][ T9024] ? signal_setup_done+0x202/0x2e0 [ 397.717430][ T9024] ? arch_do_signal_or_restart+0x407/0x720 [ 397.717453][ T9024] ? fput+0x1a5/0x240 [ 397.717473][ T9024] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 397.717498][ T9024] ? ksys_read+0x1ef/0x250 [ 397.717515][ T9024] ? __kasan_check_read+0x15/0x20 [ 397.717540][ T9024] x64_sys_call+0x2c14/0x2ee0 [ 397.717565][ T9024] do_syscall_64+0x58/0xf0 [ 397.717584][ T9024] ? clear_bhb_loop+0x50/0xa0 [ 397.717606][ T9024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 397.717629][ T9024] RIP: 0033:0x7f5c1e92add9 [ 397.717643][ T9024] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 397.717658][ T9024] RSP: 002b:00007f5c1d3e2a00 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 397.717678][ T9024] RAX: ffffffffffffffda RBX: 0000200000004200 RCX: 00007f5c1e92add9 [ 397.717693][ T9024] RDX: 00007f5c1d3e2a00 RSI: 00007f5c1d3e2b30 RDI: 0000000000000021 [ 397.717706][ T9024] RBP: 00007f5c1d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 397.717717][ T9024] R10: 0000000000000003 R11: 0000000000000206 R12: 0000000000000003 [ 397.717729][ T9024] R13: 0000200000000940 R14: 00007f5c1ebb5fa0 R15: 00007ffc4e6bc8d8 [ 397.717744][ T9024] [ 398.250932][ T9047] fuse: Unknown parameter 'group_id00000000000000000000' [ 398.380775][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 398.387292][ T8822] Bluetooth: hci0: Frame reassembly failed (-84) [ 398.862581][ T9056] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3394'. [ 399.799710][ T9067] fuse: Unknown parameter 'group_id00000000000000000000' [ 399.944879][ T9072] fuse: Unknown parameter 'group_id00000000000000000000' [ 400.072024][ T404] rust_binder: 9060: removing orphan mapping 0:24 [ 400.358636][ T9085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3405'. [ 400.442401][ T8186] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 400.442427][ T942] Bluetooth: hci0: command 0x1003 tx timeout [ 400.454706][ T9052] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 400.781257][ T9088] rust_binder: Failed copying remainder into alloc: EFAULT [ 400.781280][ T9088] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 400.788612][ T9088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 400.797121][ T9088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:400 [ 400.973168][ T9096] fuse: Bad value for 'user_id' [ 400.999619][ T36] kauditd_printk_skb: 541 callbacks suppressed [ 400.999639][ T36] audit: type=1400 audit(1754943475.377:31305): avc: denied { read write } for pid=6943 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.004379][ T9096] fuse: Bad value for 'user_id' [ 401.013979][ T36] audit: type=1400 audit(1754943475.377:31306): avc: denied { read write open } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.043636][ T9098] rust_binder: Write failure EFAULT in pid:726 [ 401.142388][ T36] audit: type=1400 audit(1754943475.377:31307): avc: denied { ioctl } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.222393][ T36] audit: type=1400 audit(1754943475.417:31308): avc: denied { read } for pid=9097 comm="syz.6.3410" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.280670][ T36] audit: type=1400 audit(1754943475.417:31309): avc: denied { read open } for pid=9097 comm="syz.6.3410" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.323616][ T36] audit: type=1400 audit(1754943475.417:31310): avc: denied { ioctl } for pid=9097 comm="syz.6.3410" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.364353][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.382370][ T36] audit: type=1400 audit(1754943475.427:31311): avc: denied { read } for pid=9097 comm="syz.6.3410" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 401.422551][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.450489][ T36] audit: type=1400 audit(1754943475.427:31312): avc: denied { read open } for pid=9097 comm="syz.6.3410" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 401.475838][ T36] audit: type=1400 audit(1754943475.427:31313): avc: denied { ioctl } for pid=9097 comm="syz.6.3410" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 401.506634][ T8810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 401.534671][ T9117] fuse: Bad value for 'user_id' [ 401.539619][ T9117] fuse: Bad value for 'user_id' [ 401.546984][ T9115] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1792 sclass=netlink_xfrm_socket pid=9115 comm=syz.7.3417 [ 401.610505][ T9121] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3420'. [ 402.022778][ T9135] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 402.022808][ T9135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 402.030767][ T9135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:731 [ 402.108384][ T9139] fuse: Bad value for 'user_id' [ 402.122736][ T9139] fuse: Bad value for 'user_id' [ 402.319405][ T9145] block device autoloading is deprecated and will be removed. [ 402.468250][ T9152] rust_binder: Failed copying remainder into alloc: EFAULT [ 402.468275][ T9152] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 402.483534][ T9152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 402.501824][ T9152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:744 [ 402.535515][ T8186] Bluetooth: hci0: command tx timeout [ 402.680410][ T9159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 402.805234][ T9165] kvm: kvm [9158]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 402.820169][ T9165] kvm: kvm [9158]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 402.841983][ T9165] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 402.927385][ T9169] fuse: Bad value for 'fd' [ 403.242508][ T1080] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 403.280162][ T9178] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3442'. [ 403.321956][ T9180] rust_binder: Write failure EFAULT in pid:493 [ 403.382363][ T1080] usb 5-1: device descriptor read/64, error -71 [ 403.622392][ T45] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 403.642380][ T1080] usb 5-1: device descriptor read/64, error -71 [ 403.774266][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.784440][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.794797][ T45] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 403.804102][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 403.812088][ T45] usb 6-1: SerialNumber: syz [ 403.882399][ T1080] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 404.022397][ T1080] usb 5-1: device descriptor read/64, error -71 [ 404.022971][ T45] usb 6-1: cannot find UAC_HEADER [ 404.043452][ T45] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 404.060689][ T45] usb 6-1: USB disconnect, device number 39 [ 404.091867][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 404.272412][ T1080] usb 5-1: device descriptor read/64, error -71 [ 404.382439][ T1080] usb usb5-port1: attempt power cycle [ 404.722411][ T1080] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 404.746939][ T1080] usb 5-1: device descriptor read/8, error -71 [ 404.756154][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.764750][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.894283][ T1080] usb 5-1: device descriptor read/8, error -71 [ 405.132476][ T1080] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 405.154503][ T1080] usb 5-1: device descriptor read/8, error -71 [ 405.286460][ T1080] usb 5-1: device descriptor read/8, error -71 [ 405.387813][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.400666][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.412492][ T1080] usb usb5-port1: unable to enumerate USB device [ 406.004475][ T36] kauditd_printk_skb: 610 callbacks suppressed [ 406.004492][ T36] audit: type=1400 audit(1754943480.387:31922): avc: denied { read write } for pid=8810 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.035772][ T36] audit: type=1400 audit(1754943480.397:31923): avc: denied { read write open } for pid=8810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.067321][ T36] audit: type=1400 audit(1754943480.397:31924): avc: denied { ioctl } for pid=8810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.093622][ T36] audit: type=1400 audit(1754943480.447:31925): avc: denied { create } for pid=9212 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.140297][ T36] audit: type=1400 audit(1754943480.447:31926): avc: denied { write } for pid=9212 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.162773][ T9218] rust_binder: 97: no such ref 1 [ 406.174213][ T36] audit: type=1400 audit(1754943480.447:31927): avc: denied { nlmsg_write } for pid=9212 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.196941][ T9218] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 406.219782][ T9218] rust_binder: Write failure EINVAL in pid:97 [ 406.233412][ T36] audit: type=1400 audit(1754943480.457:31928): avc: denied { create } for pid=9212 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.262772][ T36] audit: type=1400 audit(1754943480.457:31929): avc: denied { write } for pid=9212 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.295760][ T36] audit: type=1400 audit(1754943480.477:31930): avc: denied { read write } for pid=8810 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.336790][ T36] audit: type=1400 audit(1754943480.477:31931): avc: denied { read write open } for pid=8810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.376681][ T9224] FAULT_INJECTION: forcing a failure. [ 406.376681][ T9224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 406.394119][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.6.3462 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 406.394148][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.394158][ T9224] Call Trace: [ 406.394164][ T9224] [ 406.394171][ T9224] __dump_stack+0x21/0x30 [ 406.394197][ T9224] dump_stack_lvl+0x10c/0x190 [ 406.394217][ T9224] ? __cfi_dump_stack_lvl+0x10/0x10 [ 406.394237][ T9224] ? __alloc_pages_noprof+0x7b0/0x7b0 [ 406.394258][ T9224] dump_stack+0x19/0x20 [ 406.394277][ T9224] should_fail_ex+0x3d9/0x530 [ 406.394300][ T9224] should_fail_alloc_page+0xeb/0x110 [ 406.394317][ T9224] __alloc_pages_noprof+0x19b/0x7b0 [ 406.394336][ T9224] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 406.394356][ T9224] ? __kmalloc_node_noprof+0x1b1/0x450 [ 406.394378][ T9224] ? __kvmalloc_node_noprof+0x168/0x300 [ 406.394400][ T9224] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 406.394420][ T9224] ? __kasan_slab_alloc+0x73/0x90 [ 406.394436][ T9224] ? kmem_cache_alloc_noprof+0x154/0x3a0 [ 406.394457][ T9224] ? __kvm_mmu_topup_memory_cache+0x1eb/0x860 [ 406.394479][ T9224] get_free_pages_noprof+0x14/0x40 [ 406.394499][ T9224] __kvm_mmu_topup_memory_cache+0x210/0x860 [ 406.394520][ T9224] ? mutex_unlock+0x8b/0x240 [ 406.394542][ T9224] kvm_mmu_topup_memory_cache+0x24/0x30 [ 406.394563][ T9224] kvm_mmu_load+0xd1/0x28a0 [ 406.394582][ T9224] ? kvm_hv_setup_tsc_page+0x5ee/0xa70 [ 406.394602][ T9224] ? vmx_flush_tlb_guest+0x1d3/0x3c0 [ 406.394619][ T9224] ? kvm_apic_has_interrupt+0x79b/0x7b0 [ 406.394638][ T9224] ? kvm_service_local_tlb_flush_requests+0x81/0x150 [ 406.394663][ T9224] vcpu_run+0x4bb3/0x7260 [ 406.394692][ T9224] ? signal_pending+0xc0/0xc0 [ 406.394710][ T9224] ? __kasan_check_write+0x18/0x20 [ 406.394730][ T9224] ? xfd_validate_state+0x68/0x150 [ 406.394750][ T9224] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 406.394767][ T9224] ? __kasan_check_write+0x18/0x20 [ 406.394787][ T9224] ? fpregs_mark_activate+0x69/0x160 [ 406.394804][ T9224] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 406.394821][ T9224] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 406.394837][ T9224] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 406.394859][ T9224] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 406.394878][ T9224] ? kstrtoull+0x13b/0x1e0 [ 406.394898][ T9224] ? kstrtouint+0x78/0xf0 [ 406.394918][ T9224] ? ioctl_has_perm+0x1aa/0x4d0 [ 406.394939][ T9224] ? __asan_memcpy+0x5a/0x80 [ 406.394959][ T9224] ? ioctl_has_perm+0x3e0/0x4d0 [ 406.394985][ T9224] ? has_cap_mac_admin+0xd0/0xd0 [ 406.395003][ T9224] ? __kasan_check_write+0x18/0x20 [ 406.395024][ T9224] ? mutex_lock_killable+0x92/0x1c0 [ 406.395045][ T9224] ? __cfi_mutex_lock_killable+0x10/0x10 [ 406.395071][ T9224] ? proc_fail_nth_write+0x17e/0x210 [ 406.395093][ T9224] kvm_vcpu_ioctl+0x96f/0xee0 [ 406.395115][ T9224] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 406.395137][ T9224] ? __cfi_vfs_write+0x10/0x10 [ 406.395160][ T9224] ? __kasan_check_write+0x18/0x20 [ 406.395180][ T9224] ? mutex_unlock+0x8b/0x240 [ 406.395200][ T9224] ? __cfi_mutex_unlock+0x10/0x10 [ 406.395220][ T9224] ? __fget_files+0x2c5/0x340 [ 406.395238][ T9224] ? __fget_files+0x2c5/0x340 [ 406.395254][ T9224] ? bpf_lsm_file_ioctl+0xd/0x20 [ 406.395274][ T9224] ? security_file_ioctl+0x34/0xd0 [ 406.395291][ T9224] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 406.395313][ T9224] __se_sys_ioctl+0x132/0x1b0 [ 406.395330][ T9224] __x64_sys_ioctl+0x7f/0xa0 [ 406.395346][ T9224] x64_sys_call+0x1878/0x2ee0 [ 406.395368][ T9224] do_syscall_64+0x58/0xf0 [ 406.395386][ T9224] ? clear_bhb_loop+0x50/0xa0 [ 406.395409][ T9224] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 406.395431][ T9224] RIP: 0033:0x7f5c1e98ebe9 [ 406.395446][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.395462][ T9224] RSP: 002b:00007f5c1d3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.395481][ T9224] RAX: ffffffffffffffda RBX: 00007f5c1ebb5fa0 RCX: 00007f5c1e98ebe9 [ 406.395494][ T9224] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 406.395506][ T9224] RBP: 00007f5c1d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 406.395518][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.395529][ T9224] R13: 00007f5c1ebb6038 R14: 00007f5c1ebb5fa0 R15: 00007ffc4e6bc8d8 [ 406.395543][ T9224] [ 407.000480][ T9236] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 407.324450][ T9247] netlink: 'syz.7.3468': attribute type 32 has an invalid length. [ 408.140657][ T9271] fuse: Bad value for 'fd' [ 408.580048][ T9287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 408.580084][ T9287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:445 [ 408.600745][ T9287] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 408.627172][ T9287] rust_binder: Error in use_page_slow: EBUSY [ 408.666796][ T9287] rust_binder: use_range failure EBUSY [ 408.689568][ T9287] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 408.699743][ T9287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 408.718620][ T9287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:445 [ 408.736849][ T9287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=9287 comm=syz.7.3481 [ 408.930710][ T9300] exFAT-fs (rnullb0): invalid boot record signature [ 408.937359][ T9300] exFAT-fs (rnullb0): failed to read boot sector [ 408.943759][ T9300] exFAT-fs (rnullb0): failed to recognize exfat type [ 409.467409][ T9320] fuse: Bad value for 'rootmode' [ 409.518403][ T9322] netlink: 'syz.5.3496': attribute type 4 has an invalid length. [ 409.526260][ T9322] netlink: 'syz.5.3496': attribute type 5 has an invalid length. [ 409.535008][ T9322] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3496'. [ 409.549282][ T9322] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3496'. [ 409.862374][ T2236] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 409.992388][ T2236] usb 6-1: device descriptor read/64, error -71 [ 410.232371][ T2236] usb 6-1: device descriptor read/64, error -71 [ 410.442437][ T8186] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 410.442965][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 410.472363][ T2236] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 410.602362][ T2236] usb 6-1: device descriptor read/64, error -71 [ 410.842388][ T2236] usb 6-1: device descriptor read/64, error -71 [ 410.952757][ T2236] usb usb6-port1: attempt power cycle [ 410.973425][ T9331] netlink: 'syz.4.3508': attribute type 1 has an invalid length. [ 410.981699][ T9331] netlink: 'syz.4.3508': attribute type 2 has an invalid length. [ 410.998655][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'. [ 411.014766][ T9331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9331 comm=syz.4.3508 [ 411.022761][ T36] kauditd_printk_skb: 603 callbacks suppressed [ 411.022777][ T36] audit: type=1400 audit(1754943485.407:32535): avc: denied { ioctl } for pid=9321 comm="syz.5.3496" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.058981][ T36] audit: type=1400 audit(1754943485.407:32536): avc: denied { read write } for pid=9330 comm="syz.4.3508" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 411.082695][ T36] audit: type=1400 audit(1754943485.407:32537): avc: denied { read write open } for pid=9330 comm="syz.4.3508" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 411.107624][ T36] audit: type=1400 audit(1754943485.407:32538): avc: denied { mounton } for pid=9330 comm="syz.4.3508" path="/48/file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 411.130370][ T36] audit: type=1400 audit(1754943485.417:32539): avc: denied { mount } for pid=9330 comm="syz.4.3508" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 411.157801][ T36] audit: type=1400 audit(1754943485.447:32540): avc: denied { ioctl } for pid=9321 comm="syz.5.3496" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.182881][ T36] audit: type=1400 audit(1754943485.497:32541): avc: denied { read } for pid=9332 comm="syz.6.3500" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.206190][ T36] audit: type=1400 audit(1754943485.497:32542): avc: denied { read open } for pid=9332 comm="syz.6.3500" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.230868][ T36] audit: type=1400 audit(1754943485.497:32543): avc: denied { ioctl } for pid=9332 comm="syz.6.3500" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.269856][ T36] audit: type=1400 audit(1754943485.497:32544): avc: denied { execute } for pid=9332 comm="syz.6.3500" path=2F6D656D66643A0B656DDA9952406993FE9B232AFF202864656C6574656429 dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 411.322378][ T2236] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 411.344542][ T2236] usb 6-1: device descriptor read/8, error -71 [ 411.443641][ T9341] FAULT_INJECTION: forcing a failure. [ 411.443641][ T9341] name failslab, interval 1, probability 0, space 0, times 0 [ 411.456388][ T9341] CPU: 1 UID: 0 PID: 9341 Comm: syz.4.3503 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 411.456421][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.456434][ T9341] Call Trace: [ 411.456441][ T9341] [ 411.456449][ T9341] __dump_stack+0x21/0x30 [ 411.456478][ T9341] dump_stack_lvl+0x10c/0x190 [ 411.456502][ T9341] ? __cfi_dump_stack_lvl+0x10/0x10 [ 411.456527][ T9341] dump_stack+0x19/0x20 [ 411.456549][ T9341] should_fail_ex+0x3d9/0x530 [ 411.456576][ T9341] should_failslab+0xac/0x100 [ 411.456595][ T9341] kmem_cache_alloc_noprof+0x42/0x3a0 [ 411.456620][ T9341] ? __kvm_mmu_topup_memory_cache+0x1eb/0x860 [ 411.456646][ T9341] __kvm_mmu_topup_memory_cache+0x1eb/0x860 [ 411.456672][ T9341] ? mutex_unlock+0x8b/0x240 [ 411.456697][ T9341] kvm_mmu_topup_memory_cache+0x24/0x30 [ 411.456720][ T9341] kvm_mmu_load+0x15b/0x28a0 [ 411.456744][ T9341] ? vmx_flush_tlb_guest+0x1d3/0x3c0 [ 411.456765][ T9341] ? kvm_apic_has_interrupt+0x79b/0x7b0 [ 411.456788][ T9341] ? kvm_service_local_tlb_flush_requests+0x81/0x150 [ 411.456817][ T9341] vcpu_run+0x4bb3/0x7260 [ 411.456859][ T9341] ? signal_pending+0xc0/0xc0 [ 411.456881][ T9341] ? __kasan_check_write+0x18/0x20 [ 411.456905][ T9341] ? xfd_validate_state+0x68/0x150 [ 411.456928][ T9341] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 411.456948][ T9341] ? __kasan_check_write+0x18/0x20 [ 411.456972][ T9341] ? fpregs_mark_activate+0x69/0x160 [ 411.456992][ T9341] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 411.457012][ T9341] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 411.457033][ T9341] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 411.457058][ T9341] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 411.457081][ T9341] ? kstrtoull+0x13b/0x1e0 [ 411.457105][ T9341] ? kstrtouint+0x78/0xf0 [ 411.457128][ T9341] ? ioctl_has_perm+0x1aa/0x4d0 [ 411.457149][ T9341] ? __asan_memcpy+0x5a/0x80 [ 411.457173][ T9341] ? ioctl_has_perm+0x3e0/0x4d0 [ 411.457194][ T9341] ? has_cap_mac_admin+0xd0/0xd0 [ 411.457215][ T9341] ? __kasan_check_write+0x18/0x20 [ 411.457239][ T9341] ? mutex_lock_killable+0x92/0x1c0 [ 411.457264][ T9341] ? __cfi_mutex_lock_killable+0x10/0x10 [ 411.457288][ T9341] ? proc_fail_nth_write+0x17e/0x210 [ 411.457313][ T9341] kvm_vcpu_ioctl+0x96f/0xee0 [ 411.457339][ T9341] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 411.457365][ T9341] ? __cfi_vfs_write+0x10/0x10 [ 411.457391][ T9341] ? __kasan_check_write+0x18/0x20 [ 411.457415][ T9341] ? mutex_unlock+0x8b/0x240 [ 411.457439][ T9341] ? __cfi_mutex_unlock+0x10/0x10 [ 411.457463][ T9341] ? __fget_files+0x2c5/0x340 [ 411.457483][ T9341] ? __fget_files+0x2c5/0x340 [ 411.457503][ T9341] ? bpf_lsm_file_ioctl+0xd/0x20 [ 411.457526][ T9341] ? security_file_ioctl+0x34/0xd0 [ 411.457546][ T9341] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 411.457571][ T9341] __se_sys_ioctl+0x132/0x1b0 [ 411.457591][ T9341] __x64_sys_ioctl+0x7f/0xa0 [ 411.457610][ T9341] x64_sys_call+0x1878/0x2ee0 [ 411.457635][ T9341] do_syscall_64+0x58/0xf0 [ 411.457655][ T9341] ? clear_bhb_loop+0x50/0xa0 [ 411.457681][ T9341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 411.457706][ T9341] RIP: 0033:0x7f01e618ebe9 [ 411.457723][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.457739][ T9341] RSP: 002b:00007f01e6f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.457760][ T9341] RAX: ffffffffffffffda RBX: 00007f01e63b5fa0 RCX: 00007f01e618ebe9 [ 411.457775][ T9341] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 411.457787][ T9341] RBP: 00007f01e6f87090 R08: 0000000000000000 R09: 0000000000000000 [ 411.457800][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.457813][ T9341] R13: 00007f01e63b6038 R14: 00007f01e63b5fa0 R15: 00007ffe19b4a628 [ 411.457830][ T9341] [ 411.840505][ T2236] usb 6-1: device descriptor read/8, error -71 [ 411.943320][ T9344] fuse: Bad value for 'rootmode' [ 412.082434][ T2236] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 412.170598][ T2236] usb 6-1: device descriptor read/8, error -71 [ 412.252349][ T9354] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 412.304169][ T2236] usb 6-1: device descriptor read/8, error -71 [ 412.412589][ T2236] usb usb6-port1: unable to enumerate USB device [ 412.477786][ T9358] netlink: 'syz.6.3511': attribute type 1 has an invalid length. [ 412.486337][ T9358] netlink: 'syz.6.3511': attribute type 2 has an invalid length. [ 412.502746][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3511'. [ 412.519627][ T9358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9358 comm=syz.6.3511 [ 412.638424][ T9364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 412.691383][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3513'. [ 412.952376][ T457] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 413.104247][ T457] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.114357][ T457] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.124731][ T457] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.133817][ T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.141827][ T457] usb 5-1: SerialNumber: syz [ 413.353265][ T457] usb 5-1: cannot find UAC_HEADER [ 413.361513][ T457] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 413.371280][ T457] usb 5-1: USB disconnect, device number 124 [ 413.405782][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 413.609775][ T9384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.624912][ T9384] futex_wake_op: syz.6.3523 tries to shift op by 144; fix this program [ 413.672891][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3523'. [ 413.683295][ T9384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:823 [ 413.683334][ T9384] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 413.692493][ T9384] rust_binder: Read failure Err(EFAULT) in pid:823 [ 414.023571][ T9398] rust_binder: Error while translating object. [ 414.030117][ T9398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 414.040734][ T9398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:835 [ 414.050832][ T9398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 414.112176][ T9399] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 414.182372][ T691] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 414.322666][ T691] usb 5-1: device descriptor read/64, error -71 [ 414.562383][ T691] usb 5-1: device descriptor read/64, error -71 [ 414.802389][ T691] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 414.934187][ T691] usb 5-1: device descriptor read/64, error -71 [ 415.035330][ T9407] tmpfs: Unknown parameter '±³y_EŠ8¼i'Ò>Û”ög“Ök̓å$UçUÞuŠ2¬Ÿû€ ÅxÝFï\ÑãÔûˆ3P'ü‡¤dô²ÝãË~׆ÖiRD´K*jñÂvf—ˆøñZ–vcS·8Ýý [ 415.035330][ T9407] ¤œy·È“ÃÚB–š' [ 415.079106][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.087811][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.197777][ T691] usb 5-1: device descriptor read/64, error -71 [ 415.323347][ T691] usb usb5-port1: attempt power cycle [ 415.577811][ T9421] FAULT_INJECTION: forcing a failure. [ 415.577811][ T9421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.590955][ T9421] CPU: 1 UID: 0 PID: 9421 Comm: syz.7.3537 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 415.590987][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.590997][ T9421] Call Trace: [ 415.591002][ T9421] [ 415.591007][ T9421] __dump_stack+0x21/0x30 [ 415.591025][ T9421] dump_stack_lvl+0x10c/0x190 [ 415.591037][ T9421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 415.591050][ T9421] ? restore_altstack+0x2c6/0x4c0 [ 415.591065][ T9421] dump_stack+0x19/0x20 [ 415.591076][ T9421] should_fail_ex+0x3d9/0x530 [ 415.591091][ T9421] should_fail+0xf/0x20 [ 415.591103][ T9421] should_fail_usercopy+0x1e/0x30 [ 415.591113][ T9421] _copy_from_user+0x22/0xb0 [ 415.591124][ T9421] __ia32_sys_rt_sigreturn+0x287/0x7a0 [ 415.591138][ T9421] ? recalc_sigpending+0x16d/0x1d0 [ 415.591148][ T9421] ? _raw_spin_unlock_irq+0x45/0x70 [ 415.591160][ T9421] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 415.591176][ T9421] ? __kasan_check_read+0x15/0x20 [ 415.591190][ T9421] x64_sys_call+0x2c14/0x2ee0 [ 415.591203][ T9421] do_syscall_64+0x58/0xf0 [ 415.591214][ T9421] ? clear_bhb_loop+0x50/0xa0 [ 415.591228][ T9421] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 415.591243][ T9421] RIP: 0033:0x7f0e42f2add9 [ 415.591253][ T9421] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 415.591262][ T9421] RSP: 002b:00007f0e43d90a00 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 415.591275][ T9421] RAX: ffffffffffffffda RBX: 0000200000004200 RCX: 00007f0e42f2add9 [ 415.591283][ T9421] RDX: 00007f0e43d90a00 RSI: 00007f0e43d90b30 RDI: 0000000000000021 [ 415.591290][ T9421] RBP: 00007f0e43d91090 R08: 0000000000000000 R09: 0000000000000000 [ 415.591297][ T9421] R10: 0000000000000003 R11: 0000000000000206 R12: 0000000000000003 [ 415.591304][ T9421] R13: 0000200000000940 R14: 00007f0e431b5fa0 R15: 00007ffca6350ea8 [ 415.591313][ T9421] [ 415.842387][ T691] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 415.884986][ T9426] fuse: Unknown parameter 'user_i00000000000000000000' [ 415.929191][ T691] usb 5-1: device descriptor read/8, error -71 [ 416.015094][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.023992][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.033202][ T36] kauditd_printk_skb: 491 callbacks suppressed [ 416.033218][ T36] audit: type=1400 audit(1754943490.417:33034): avc: denied { write } for pid=9424 comm="syz.6.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.076863][ T691] usb 5-1: device descriptor read/8, error -71 [ 416.082358][ T36] audit: type=1400 audit(1754943490.417:33035): avc: denied { write } for pid=9431 comm="syz.7.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.125261][ T36] audit: type=1400 audit(1754943490.427:33036): avc: denied { read write } for pid=7058 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.177415][ T36] audit: type=1400 audit(1754943490.427:33037): avc: denied { read write open } for pid=7058 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.234186][ T36] audit: type=1400 audit(1754943490.427:33038): avc: denied { ioctl } for pid=7058 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.261365][ T36] audit: type=1400 audit(1754943490.437:33039): avc: denied { read } for pid=9430 comm="syz.5.3542" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 416.262870][ T9440] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3546'. [ 416.284668][ T36] audit: type=1400 audit(1754943490.437:33040): avc: denied { read open } for pid=9430 comm="syz.5.3542" path="net:[4026532389]" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 416.316488][ T36] audit: type=1400 audit(1754943490.437:33041): avc: denied { create } for pid=9430 comm="syz.5.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 416.336694][ T36] audit: type=1400 audit(1754943490.447:33042): avc: denied { read write } for pid=9434 comm="syz.7.3544" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 416.362806][ T691] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 416.366193][ T36] audit: type=1400 audit(1754943490.447:33043): avc: denied { read write open } for pid=9434 comm="syz.7.3544" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 416.370322][ T457] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 416.414900][ T691] usb 5-1: device descriptor read/8, error -71 [ 416.516495][ T9446] fuse: Unknown parameter 'user_i00000000000000000000' [ 416.532421][ T457] usb 6-1: device descriptor read/64, error -71 [ 416.547111][ T691] usb 5-1: device descriptor read/8, error -71 [ 416.584966][ T9448] FAULT_INJECTION: forcing a failure. [ 416.584966][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 416.605645][ T9448] CPU: 0 UID: 0 PID: 9448 Comm: syz.7.3550 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 416.605675][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.605686][ T9448] Call Trace: [ 416.605693][ T9448] [ 416.605701][ T9448] __dump_stack+0x21/0x30 [ 416.605729][ T9448] dump_stack_lvl+0x10c/0x190 [ 416.605752][ T9448] ? __cfi_dump_stack_lvl+0x10/0x10 [ 416.605775][ T9448] ? pointer+0xdd0/0xdd0 [ 416.605794][ T9448] dump_stack+0x19/0x20 [ 416.605814][ T9448] should_fail_ex+0x3d9/0x530 [ 416.605839][ T9448] should_failslab+0xac/0x100 [ 416.605858][ T9448] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 416.605883][ T9448] ? sidtab_sid2str_get+0x139/0x370 [ 416.605902][ T9448] kmemdup_noprof+0x31/0x80 [ 416.605925][ T9448] sidtab_sid2str_get+0x139/0x370 [ 416.605945][ T9448] security_sid_to_context_core+0x30d/0x5d0 [ 416.605972][ T9448] security_sid_to_context+0x2e/0x50 [ 416.605997][ T9448] avc_audit_post_callback+0x107/0x780 [ 416.606022][ T9448] ? audit_log_format+0xdb/0x140 [ 416.606043][ T9448] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 416.606066][ T9448] ? __cfi_audit_log_format+0x10/0x10 [ 416.606087][ T9448] ? audit_log_untrustedstring+0xea/0x100 [ 416.606109][ T9448] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 416.606131][ T9448] common_lsm_audit+0x147a/0x1860 [ 416.606153][ T9448] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 416.606174][ T9448] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 416.606197][ T9448] ? __cfi_common_lsm_audit+0x10/0x10 [ 416.606220][ T9448] ? avc_denied+0x112/0x180 [ 416.606242][ T9448] slow_avc_audit+0x18d/0x1f0 [ 416.606264][ T9448] ? __cfi_slow_avc_audit+0x10/0x10 [ 416.606288][ T9448] ? avc_has_perm_noaudit+0x21c/0x360 [ 416.606311][ T9448] avc_has_perm+0x1cd/0x220 [ 416.606334][ T9448] ? __cfi_avc_has_perm+0x10/0x10 [ 416.606356][ T9448] ? __kasan_check_write+0x18/0x20 [ 416.606376][ T9448] ? proc_fail_nth_write+0x17e/0x210 [ 416.606398][ T9448] selinux_mmap_file+0x1f3/0x320 [ 416.606419][ T9448] ? __cfi_selinux_mmap_file+0x10/0x10 [ 416.606445][ T9448] ? vfs_write+0x8ba/0xe80 [ 416.606472][ T9448] security_mmap_file+0x2af/0x350 [ 416.606492][ T9448] vm_mmap_pgoff+0x11d/0x4e0 [ 416.606518][ T9448] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 416.606542][ T9448] ? __fget_files+0x2c5/0x340 [ 416.606562][ T9448] ksys_mmap_pgoff+0x166/0x1e0 [ 416.606587][ T9448] __x64_sys_mmap+0x121/0x140 [ 416.606612][ T9448] x64_sys_call+0x13bf/0x2ee0 [ 416.606637][ T9448] do_syscall_64+0x58/0xf0 [ 416.606657][ T9448] ? clear_bhb_loop+0x50/0xa0 [ 416.606682][ T9448] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 416.606703][ T9448] RIP: 0033:0x7f0e42f8ebe9 [ 416.606718][ T9448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.606734][ T9448] RSP: 002b:00007f0e43d91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 416.606756][ T9448] RAX: ffffffffffffffda RBX: 00007f0e431b5fa0 RCX: 00007f0e42f8ebe9 [ 416.606771][ T9448] RDX: 000000000200000b RSI: 0000000000003000 RDI: 0000200000012000 [ 416.606785][ T9448] RBP: 00007f0e43d91090 R08: 0000000000000003 R09: 0000000380000000 [ 416.606799][ T9448] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 416.606812][ T9448] R13: 00007f0e431b6038 R14: 00007f0e431b5fa0 R15: 00007ffca6350ea8 [ 416.606829][ T9448] [ 416.667147][ T691] usb usb5-port1: unable to enumerate USB device [ 417.003218][ T457] usb 6-1: device descriptor read/64, error -71 [ 417.028718][ T9465] SELinux: syz.4.3555 (9465) set checkreqprot to 1. This is no longer supported. [ 417.127883][ T9473] rust_binder: 498: no such ref 0 [ 417.228043][ T9481] fuse: Invalid gid '00000000000037777777777' [ 417.242376][ T457] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 417.294218][ T9483] syzkaller0: entered promiscuous mode [ 417.299697][ T9483] syzkaller0: entered allmulticast mode [ 417.382370][ T457] usb 6-1: device descriptor read/64, error -71 [ 417.632373][ T457] usb 6-1: device descriptor read/64, error -71 [ 417.742478][ T457] usb usb6-port1: attempt power cycle [ 417.841714][ T9506] FAULT_INJECTION: forcing a failure. [ 417.841714][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 417.854447][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.6.3570 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 417.854480][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.854493][ T9506] Call Trace: [ 417.854500][ T9506] [ 417.854508][ T9506] __dump_stack+0x21/0x30 [ 417.854536][ T9506] dump_stack_lvl+0x10c/0x190 [ 417.854557][ T9506] ? __cfi_dump_stack_lvl+0x10/0x10 [ 417.854580][ T9506] ? skb_put+0x112/0x1f0 [ 417.854601][ T9506] dump_stack+0x19/0x20 [ 417.854623][ T9506] should_fail_ex+0x3d9/0x530 [ 417.854649][ T9506] should_failslab+0xac/0x100 [ 417.854668][ T9506] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 417.854695][ T9506] ? sidtab_sid2str_get+0x139/0x370 [ 417.854715][ T9506] kmemdup_noprof+0x31/0x80 [ 417.854738][ T9506] sidtab_sid2str_get+0x139/0x370 [ 417.854757][ T9506] security_sid_to_context_core+0x30d/0x5d0 [ 417.854784][ T9506] security_sid_to_context+0x2e/0x50 [ 417.854809][ T9506] avc_audit_post_callback+0x198/0x780 [ 417.854834][ T9506] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 417.854857][ T9506] ? __cfi_audit_log_format+0x10/0x10 [ 417.854879][ T9506] ? audit_log_untrustedstring+0xea/0x100 [ 417.854902][ T9506] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 417.854925][ T9506] common_lsm_audit+0x147a/0x1860 [ 417.854947][ T9506] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 417.854969][ T9506] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 417.854992][ T9506] ? __cfi_common_lsm_audit+0x10/0x10 [ 417.855033][ T9506] ? avc_denied+0x112/0x180 [ 417.855057][ T9506] slow_avc_audit+0x18d/0x1f0 [ 417.855079][ T9506] ? __cfi_slow_avc_audit+0x10/0x10 [ 417.855102][ T9506] ? avc_has_perm_noaudit+0x21c/0x360 [ 417.855126][ T9506] avc_has_perm+0x1cd/0x220 [ 417.855150][ T9506] ? __cfi_avc_has_perm+0x10/0x10 [ 417.855172][ T9506] ? __kasan_check_write+0x18/0x20 [ 417.855196][ T9506] ? proc_fail_nth_write+0x17e/0x210 [ 417.855219][ T9506] selinux_mmap_file+0x1f3/0x320 [ 417.855240][ T9506] ? __cfi_selinux_mmap_file+0x10/0x10 [ 417.855258][ T9506] ? vfs_write+0x8ba/0xe80 [ 417.855291][ T9506] security_mmap_file+0x2af/0x350 [ 417.855311][ T9506] vm_mmap_pgoff+0x11d/0x4e0 [ 417.855336][ T9506] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 417.855360][ T9506] ? __fget_files+0x2c5/0x340 [ 417.855381][ T9506] ksys_mmap_pgoff+0x166/0x1e0 [ 417.855405][ T9506] __x64_sys_mmap+0x121/0x140 [ 417.855429][ T9506] x64_sys_call+0x13bf/0x2ee0 [ 417.855452][ T9506] do_syscall_64+0x58/0xf0 [ 417.855472][ T9506] ? clear_bhb_loop+0x50/0xa0 [ 417.855497][ T9506] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 417.855525][ T9506] RIP: 0033:0x7f5c1e98ebe9 [ 417.855542][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.855558][ T9506] RSP: 002b:00007f5c1d3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 417.855580][ T9506] RAX: ffffffffffffffda RBX: 00007f5c1ebb5fa0 RCX: 00007f5c1e98ebe9 [ 417.855595][ T9506] RDX: 000000000200000b RSI: 0000000000003000 RDI: 0000200000012000 [ 417.855609][ T9506] RBP: 00007f5c1d3e3090 R08: 0000000000000003 R09: 0000000380000000 [ 417.855623][ T9506] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 417.855635][ T9506] R13: 00007f5c1ebb6038 R14: 00007f5c1ebb5fa0 R15: 00007ffc4e6bc8d8 [ 417.855652][ T9506] [ 418.118839][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.147394][ T9516] rust_binder: inc_ref_done called when no active inc_refs [ 418.155351][ T457] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 418.161075][ T9516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 418.171358][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.189008][ T10] rust_binder: 9507: removing orphan mapping 0:1048 [ 418.199780][ T457] usb 6-1: device descriptor read/8, error -71 [ 418.257817][ T9510] FAULT_INJECTION: forcing a failure. [ 418.257817][ T9510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.271918][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: syz.4.3572 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 418.271949][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.271961][ T9510] Call Trace: [ 418.271967][ T9510] [ 418.271986][ T9510] __dump_stack+0x21/0x30 [ 418.272014][ T9510] dump_stack_lvl+0x10c/0x190 [ 418.272036][ T9510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 418.272059][ T9510] dump_stack+0x19/0x20 [ 418.272081][ T9510] should_fail_ex+0x3d9/0x530 [ 418.272106][ T9510] should_fail+0xf/0x20 [ 418.272129][ T9510] should_fail_usercopy+0x1e/0x30 [ 418.272146][ T9510] copy_fpstate_to_sigframe+0x919/0xb80 [ 418.272168][ T9510] ? prepare_to_wait_event+0x410/0x450 [ 418.272189][ T9510] ? copy_fpstate_to_sigframe+0x174/0xb80 [ 418.272210][ T9510] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 418.272233][ T9510] ? timerqueue_add+0x212/0x240 [ 418.272252][ T9510] ? hrtimer_reprogram+0x34f/0x3e0 [ 418.272272][ T9510] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 418.272293][ T9510] ? fpu__alloc_mathframe+0xb8/0x160 [ 418.272318][ T9510] get_sigframe+0x58e/0x7d0 [ 418.272342][ T9510] ? __cfi_get_sigframe+0x10/0x10 [ 418.272365][ T9510] ? __kasan_check_write+0x18/0x20 [ 418.272388][ T9510] ? _raw_spin_lock+0x8c/0x120 [ 418.272408][ T9510] ? __cfi__raw_spin_lock+0x10/0x10 [ 418.272428][ T9510] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 418.272449][ T9510] x64_setup_rt_frame+0x15d/0xcc0 [ 418.272472][ T9510] ? get_signal+0x1098/0x14f0 [ 418.272493][ T9510] ? _raw_spin_unlock_irq+0x45/0x70 [ 418.272513][ T9510] ? get_signal+0x1250/0x14f0 [ 418.272533][ T9510] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 418.272558][ T9510] arch_do_signal_or_restart+0x31d/0x720 [ 418.272583][ T9510] ? fput+0x1a5/0x240 [ 418.272603][ T9510] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 418.272626][ T9510] ? ksys_read+0x1ef/0x250 [ 418.272643][ T9510] ? __kasan_check_read+0x15/0x20 [ 418.272667][ T9510] syscall_exit_to_user_mode+0x58/0xb0 [ 418.272684][ T9510] do_syscall_64+0x64/0xf0 [ 418.272704][ T9510] ? clear_bhb_loop+0x50/0xa0 [ 418.272726][ T9510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 418.272747][ T9510] RIP: 0033:0x7f01e618d5fa [ 418.272762][ T9510] Code: 48 83 ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 <0f> 05 48 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 [ 418.272777][ T9510] RSP: 002b:00007f01e6f86fb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.272795][ T9510] RAX: 0000000000000000 RBX: 0000200000004200 RCX: 00007f01e618d5fc [ 418.272807][ T9510] RDX: 0000000000002000 RSI: 0000200000004200 RDI: 0000000000000003 [ 418.272819][ T9510] RBP: 00007f01e6f87090 R08: 0000000000000000 R09: 0000000000000000 [ 418.272830][ T9510] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000003 [ 418.272842][ T9510] R13: 0000200000000940 R14: 00007f01e63b5fa0 R15: 00007ffe19b4a628 [ 418.272859][ T9510] [ 418.684409][ T457] usb 6-1: device descriptor read/8, error -71 [ 418.690248][ T9528] tipc: Started in network mode [ 418.696733][ T9528] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 418.706331][ T9528] tipc: Enabling of bearer rejected, failed to enable media [ 418.922371][ T457] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 418.944190][ T457] usb 6-1: device descriptor read/8, error -71 [ 418.984044][ T9535] fuse: Unknown parameter 'user_id00000000000000000000' [ 419.063668][ T9539] random: crng reseeded on system resumption [ 419.073663][ T457] usb 6-1: device descriptor read/8, error -71 [ 419.142365][ T1099] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 419.192426][ T457] usb usb6-port1: unable to enumerate USB device [ 419.294250][ T1099] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.304436][ T1099] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.315158][ T1099] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 419.324324][ T1099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 419.332409][ T1099] usb 5-1: SerialNumber: syz [ 419.482357][ T457] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 419.632368][ T457] usb 6-1: Using ep0 maxpacket: 8 [ 419.639680][ T457] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 419.647812][ T457] usb 6-1: config 0 has no interface number 0 [ 419.653938][ T457] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 419.666601][ T457] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=ca.55 [ 419.675688][ T457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.683705][ T457] usb 6-1: Product: syz [ 419.687864][ T457] usb 6-1: Manufacturer: syz [ 419.692482][ T457] usb 6-1: SerialNumber: syz [ 419.698516][ T457] usb 6-1: config 0 descriptor?? [ 419.706252][ T457] gl620a 6-1:0.32: probe with driver gl620a failed with error -22 [ 419.918726][ T9542] rust_binder: Write failure EFAULT in pid:538 [ 419.920703][ T404] usb 6-1: USB disconnect, device number 48 [ 420.806839][ T9558] fuse: Bad value for 'fd' [ 420.905454][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.914034][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.992386][ T404] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 421.062808][ T36] kauditd_printk_skb: 593 callbacks suppressed [ 421.062821][ T36] audit: type=1400 audit(1754943495.447:33637): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.142348][ T404] usb 6-1: Using ep0 maxpacket: 16 [ 421.148097][ T36] audit: type=1400 audit(1754943495.527:33638): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.174021][ T36] audit: type=1400 audit(1754943495.557:33639): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.199192][ T36] audit: type=1400 audit(1754943495.557:33640): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.224204][ T36] audit: type=1400 audit(1754943495.577:33641): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.249309][ T404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.249690][ T36] audit: type=1400 audit(1754943495.607:33642): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.260281][ T404] usb 6-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 421.286659][ T36] audit: type=1400 audit(1754943495.637:33643): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.294258][ T404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.329204][ T404] usb 6-1: config 0 descriptor?? [ 421.335390][ T36] audit: type=1400 audit(1754943495.717:33644): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.337460][ T404] usbhid 6-1:0.0: can't add hid device: -22 [ 421.362386][ T36] audit: type=1400 audit(1754943495.717:33645): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.388183][ T404] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 421.395767][ T36] audit: type=1400 audit(1754943495.717:33646): avc: denied { ioctl } for pid=9553 comm="syz.5.3587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.592736][ T45] usb 6-1: USB disconnect, device number 49 [ 421.612711][ T9570] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3595'. [ 421.727876][ T1099] usb 5-1: skipping empty audio interface (v1) [ 421.755118][ T1099] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 421.779042][ T1099] usb 5-1: USB disconnect, device number 3 [ 421.843271][ T9576] fuse: Bad value for 'fd' [ 421.868342][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.083014][ T9586] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 422.093587][ T9586] pim6reg0: owner set to 0 [ 422.108774][ T9585] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 422.187182][ T9594] FAULT_INJECTION: forcing a failure. [ 422.187182][ T9594] name failslab, interval 1, probability 0, space 0, times 0 [ 422.221703][ T9594] CPU: 0 UID: 0 PID: 9594 Comm: syz.6.3605 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 422.221734][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.221745][ T9594] Call Trace: [ 422.221750][ T9594] [ 422.221758][ T9594] __dump_stack+0x21/0x30 [ 422.221784][ T9594] dump_stack_lvl+0x10c/0x190 [ 422.221806][ T9594] ? __cfi_dump_stack_lvl+0x10/0x10 [ 422.221830][ T9594] dump_stack+0x19/0x20 [ 422.221850][ T9594] should_fail_ex+0x3d9/0x530 [ 422.221876][ T9594] should_failslab+0xac/0x100 [ 422.221894][ T9594] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 422.221919][ T9594] ? dup_task_struct+0xbc/0xc50 [ 422.221939][ T9594] ? kasan_save_track+0x4f/0x80 [ 422.221954][ T9594] dup_task_struct+0xbc/0xc50 [ 422.221972][ T9594] ? __kasan_check_write+0x18/0x20 [ 422.221992][ T9594] ? _raw_spin_lock_irq+0x8d/0x120 [ 422.222010][ T9594] ? copy_process+0x3220/0x3220 [ 422.222027][ T9594] ? __kasan_check_write+0x18/0x20 [ 422.222047][ T9594] copy_process+0x538/0x3220 [ 422.222067][ T9594] ? __cfi_copy_process+0x10/0x10 [ 422.222086][ T9594] ? __kasan_check_write+0x18/0x20 [ 422.222108][ T9594] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 422.222127][ T9594] vhost_task_create+0x1d6/0x350 [ 422.222144][ T9594] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 422.222163][ T9594] ? __cfi_vhost_task_create+0x10/0x10 [ 422.222181][ T9594] ? __cfi_vhost_task_fn+0x10/0x10 [ 422.222197][ T9594] ? __kasan_check_write+0x18/0x20 [ 422.222219][ T9594] ? mutex_lock+0x92/0x1c0 [ 422.222242][ T9594] ? __cfi_mutex_lock+0x10/0x10 [ 422.222264][ T9594] ? kernel_text_address+0xa9/0xe0 [ 422.222286][ T9594] kvm_mmu_post_init_vm+0x1a6/0x310 [ 422.222314][ T9594] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 422.222336][ T9594] ? _parse_integer_limit+0x195/0x1e0 [ 422.222359][ T9594] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 422.222381][ T9594] ? kstrtoull+0x13b/0x1e0 [ 422.222402][ T9594] ? kstrtouint+0x78/0xf0 [ 422.222424][ T9594] ? ioctl_has_perm+0x1aa/0x4d0 [ 422.222444][ T9594] ? __asan_memcpy+0x5a/0x80 [ 422.222468][ T9594] ? ioctl_has_perm+0x3e0/0x4d0 [ 422.222488][ T9594] ? has_cap_mac_admin+0xd0/0xd0 [ 422.222508][ T9594] ? __kasan_check_write+0x18/0x20 [ 422.222530][ T9594] ? mutex_lock_killable+0x92/0x1c0 [ 422.222553][ T9594] ? __cfi_mutex_lock_killable+0x10/0x10 [ 422.222577][ T9594] ? proc_fail_nth_write+0x17e/0x210 [ 422.222601][ T9594] kvm_vcpu_ioctl+0x96f/0xee0 [ 422.222626][ T9594] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 422.222651][ T9594] ? __cfi_vfs_write+0x10/0x10 [ 422.222676][ T9594] ? __kasan_check_write+0x18/0x20 [ 422.222705][ T9594] ? mutex_unlock+0x8b/0x240 [ 422.222729][ T9594] ? __cfi_mutex_unlock+0x10/0x10 [ 422.222750][ T9594] ? __fget_files+0x2c5/0x340 [ 422.222770][ T9594] ? __fget_files+0x2c5/0x340 [ 422.222788][ T9594] ? bpf_lsm_file_ioctl+0xd/0x20 [ 422.222811][ T9594] ? security_file_ioctl+0x34/0xd0 [ 422.222831][ T9594] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 422.222855][ T9594] __se_sys_ioctl+0x132/0x1b0 [ 422.222875][ T9594] __x64_sys_ioctl+0x7f/0xa0 [ 422.222894][ T9594] x64_sys_call+0x1878/0x2ee0 [ 422.222918][ T9594] do_syscall_64+0x58/0xf0 [ 422.222936][ T9594] ? clear_bhb_loop+0x50/0xa0 [ 422.222962][ T9594] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 422.222985][ T9594] RIP: 0033:0x7f5c1e98ebe9 [ 422.223003][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.223019][ T9594] RSP: 002b:00007f5c1d3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.223041][ T9594] RAX: ffffffffffffffda RBX: 00007f5c1ebb5fa0 RCX: 00007f5c1e98ebe9 [ 422.223055][ T9594] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 422.223068][ T9594] RBP: 00007f5c1d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 422.223081][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.223093][ T9594] R13: 00007f5c1ebb6038 R14: 00007f5c1ebb5fa0 R15: 00007ffc4e6bc8d8 [ 422.223110][ T9594] [ 422.647954][ T9599] fuse: Bad value for 'fd' [ 422.735501][ T9605] fuse: Bad value for 'user_id' [ 422.740404][ T9605] fuse: Bad value for 'user_id' [ 422.782362][ T404] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 422.792925][ T9609] fuse: Bad value for 'user_id' [ 422.805448][ T9609] fuse: Bad value for 'user_id' [ 422.898650][ T9617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 422.935237][ T404] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 422.948900][ T9619] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3615'. [ 422.951972][ T404] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.972146][ T404] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.981355][ T404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.989397][ T404] usb 6-1: SerialNumber: syz [ 423.062406][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 423.129408][ T9626] fuse: Unknown parameter '0x0000000000000003' [ 423.170010][ T9628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.199763][ T404] usb 6-1: 0:2 : does not exist [ 423.212435][ T404] usb 6-1: unit 144 not found! [ 423.222156][ T404] usb 6-1: USB disconnect, device number 50 [ 423.230358][ T9629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:923 [ 423.232345][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 423.251511][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.263444][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 423.273262][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.283681][ T10] usb 5-1: config 0 descriptor?? [ 423.284947][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 423.291017][ T10] usbhid 5-1:0.0: can't add hid device: -22 [ 423.313641][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 423.495463][ T10] usb 5-1: USB disconnect, device number 4 [ 424.089420][ T9650] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3629'. [ 424.113262][ T9648] netlink: 'syz.4.3628': attribute type 27 has an invalid length. [ 424.174955][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.182200][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.252440][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 424.425334][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.451937][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.478889][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.497527][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.512346][ T10] usb 6-1: SerialNumber: syz [ 424.709717][ T9671] FAT-fs (rnullb0): bogus number of reserved sectors [ 424.716501][ T9671] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 424.729232][ T10] usb 6-1: 0:2 : does not exist [ 424.752458][ T10] usb 6-1: USB disconnect, device number 51 [ 424.818273][ T9673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 424.843964][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 425.068063][ T9677] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 425.141017][ T9682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 425.226212][ T9682] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 425.233659][ T9682] rust_binder: Error in use_page_slow: ESRCH [ 425.233677][ T9682] rust_binder: use_range failure ESRCH [ 425.239695][ T9682] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 425.245252][ T9682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 425.257975][ T9682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:209 [ 425.268930][ T9682] rust_binder: Error in use_page_slow: ESRCH [ 425.285717][ T9685] random: crng reseeded on system resumption [ 425.293573][ T9682] rust_binder: use_range failure ESRCH [ 425.302078][ T9682] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 425.315270][ T9682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 425.327192][ T9682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:209 [ 425.472583][ T9691] FAULT_INJECTION: forcing a failure. [ 425.472583][ T9691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.495662][ T9693] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3643'. [ 425.515365][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.5.3642 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 425.515399][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.515419][ T9691] Call Trace: [ 425.515426][ T9691] [ 425.515434][ T9691] __dump_stack+0x21/0x30 [ 425.515463][ T9691] dump_stack_lvl+0x10c/0x190 [ 425.515486][ T9691] ? __cfi_dump_stack_lvl+0x10/0x10 [ 425.515514][ T9691] dump_stack+0x19/0x20 [ 425.515535][ T9691] should_fail_ex+0x3d9/0x530 [ 425.515560][ T9691] should_fail_alloc_page+0xeb/0x110 [ 425.515581][ T9691] __alloc_pages_noprof+0x19b/0x7b0 [ 425.515608][ T9691] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 425.515630][ T9691] ? kernel_text_address+0xa9/0xe0 [ 425.515651][ T9691] ? __kernel_text_address+0x11/0x40 [ 425.515672][ T9691] ? unwind_get_return_address+0x51/0x90 [ 425.515694][ T9691] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 425.515722][ T9691] get_free_pages_noprof+0x14/0x40 [ 425.515743][ T9691] kasan_populate_vmalloc_pte+0x4c/0x170 [ 425.515769][ T9691] __apply_to_page_range+0x825/0xcb0 [ 425.515788][ T9691] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 425.515814][ T9691] ? kvm_vcpu_ioctl+0x96f/0xee0 [ 425.515839][ T9691] ? apply_to_page_range+0x60/0x60 [ 425.515858][ T9691] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 425.515883][ T9691] apply_to_page_range+0x3f/0x60 [ 425.515900][ T9691] kasan_populate_vmalloc+0x64/0x80 [ 425.515924][ T9691] alloc_vmap_area+0x1d7f/0x2500 [ 425.515948][ T9691] ? kasan_save_alloc_info+0x40/0x50 [ 425.515971][ T9691] ? vm_map_ram+0xdd0/0xdd0 [ 425.515992][ T9691] ? __get_vm_area_node+0x154/0x3a0 [ 425.516014][ T9691] ? copy_process+0x538/0x3220 [ 425.516034][ T9691] __get_vm_area_node+0x1dc/0x3a0 [ 425.516056][ T9691] __vmalloc_node_range_noprof+0x33c/0x1420 [ 425.516079][ T9691] ? copy_process+0x538/0x3220 [ 425.516103][ T9691] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 425.516126][ T9691] ? kasan_save_alloc_info+0x40/0x50 [ 425.516148][ T9691] ? arch_dup_task_struct+0x5b/0xe0 [ 425.516172][ T9691] ? __asan_memcpy+0x5a/0x80 [ 425.516197][ T9691] dup_task_struct+0x5bd/0xc50 [ 425.516216][ T9691] ? copy_process+0x538/0x3220 [ 425.516236][ T9691] ? _raw_spin_lock_irq+0x8d/0x120 [ 425.516257][ T9691] ? copy_process+0x3220/0x3220 [ 425.516277][ T9691] ? __kasan_check_write+0x18/0x20 [ 425.516301][ T9691] copy_process+0x538/0x3220 [ 425.516324][ T9691] ? __cfi_copy_process+0x10/0x10 [ 425.516344][ T9691] ? __kasan_check_write+0x18/0x20 [ 425.516368][ T9691] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 425.516388][ T9691] vhost_task_create+0x1d6/0x350 [ 425.516406][ T9691] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 425.516432][ T9691] ? __cfi_vhost_task_create+0x10/0x10 [ 425.516450][ T9691] ? __cfi_vhost_task_fn+0x10/0x10 [ 425.516467][ T9691] ? __kasan_check_write+0x18/0x20 [ 425.516490][ T9691] ? mutex_lock+0x92/0x1c0 [ 425.516513][ T9691] ? __cfi_mutex_lock+0x10/0x10 [ 425.516536][ T9691] ? kernel_text_address+0xa9/0xe0 [ 425.516558][ T9691] kvm_mmu_post_init_vm+0x1a6/0x310 [ 425.516583][ T9691] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 425.516606][ T9691] ? _parse_integer_limit+0x195/0x1e0 [ 425.516631][ T9691] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 425.516653][ T9691] ? kstrtoull+0x13b/0x1e0 [ 425.516675][ T9691] ? kstrtouint+0x78/0xf0 [ 425.516698][ T9691] ? ioctl_has_perm+0x1aa/0x4d0 [ 425.516718][ T9691] ? __asan_memcpy+0x5a/0x80 [ 425.516741][ T9691] ? ioctl_has_perm+0x3e0/0x4d0 [ 425.516761][ T9691] ? has_cap_mac_admin+0xd0/0xd0 [ 425.516781][ T9691] ? __kasan_check_write+0x18/0x20 [ 425.516804][ T9691] ? mutex_lock_killable+0x92/0x1c0 [ 425.516828][ T9691] ? __cfi_mutex_lock_killable+0x10/0x10 [ 425.516851][ T9691] ? proc_fail_nth_write+0x17e/0x210 [ 425.516875][ T9691] kvm_vcpu_ioctl+0x96f/0xee0 [ 425.516900][ T9691] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 425.516925][ T9691] ? __cfi_vfs_write+0x10/0x10 [ 425.516950][ T9691] ? __kasan_check_write+0x18/0x20 [ 425.516973][ T9691] ? mutex_unlock+0x8b/0x240 [ 425.516995][ T9691] ? __cfi_mutex_unlock+0x10/0x10 [ 425.517018][ T9691] ? __fget_files+0x2c5/0x340 [ 425.517037][ T9691] ? __fget_files+0x2c5/0x340 [ 425.517056][ T9691] ? bpf_lsm_file_ioctl+0xd/0x20 [ 425.517079][ T9691] ? security_file_ioctl+0x34/0xd0 [ 425.517098][ T9691] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 425.517122][ T9691] __se_sys_ioctl+0x132/0x1b0 [ 425.517142][ T9691] __x64_sys_ioctl+0x7f/0xa0 [ 425.517160][ T9691] x64_sys_call+0x1878/0x2ee0 [ 425.517184][ T9691] do_syscall_64+0x58/0xf0 [ 425.517203][ T9691] ? clear_bhb_loop+0x50/0xa0 [ 425.517228][ T9691] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 425.517252][ T9691] RIP: 0033:0x7f9a5e18ebe9 [ 425.517268][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.517283][ T9691] RSP: 002b:00007f9a5f08c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.517304][ T9691] RAX: ffffffffffffffda RBX: 00007f9a5e3b5fa0 RCX: 00007f9a5e18ebe9 [ 425.517318][ T9691] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 425.517329][ T9691] RBP: 00007f9a5f08c090 R08: 0000000000000000 R09: 0000000000000000 [ 425.517340][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.517351][ T9691] R13: 00007f9a5e3b6038 R14: 00007f9a5e3b5fa0 R15: 00007ffcddb5da88 [ 425.517367][ T9691] [ 425.519592][ T9691] syz.5.3642: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 426.074374][ T36] kauditd_printk_skb: 519 callbacks suppressed [ 426.074391][ T36] audit: type=1400 audit(1754943500.457:34166): avc: denied { read write } for pid=9696 comm="syz.6.3645" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 426.079991][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.080656][ T36] audit: type=1400 audit(1754943500.457:34167): avc: denied { read open } for pid=9696 comm="syz.6.3645" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 426.105845][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.5.3642 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 426.105872][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.105884][ T9691] Call Trace: [ 426.105890][ T9691] [ 426.105898][ T9691] __dump_stack+0x21/0x30 [ 426.105927][ T9691] dump_stack_lvl+0x10c/0x190 [ 426.105948][ T9691] ? __cfi_dump_stack_lvl+0x10/0x10 [ 426.105971][ T9691] ? cpuset_print_current_mems_allowed+0xcf/0xf0 [ 426.105991][ T9691] dump_stack+0x19/0x20 [ 426.106012][ T9691] warn_alloc+0x1bc/0x2a0 [ 426.106033][ T9691] ? __cfi_warn_alloc+0x10/0x10 [ 426.106053][ T9691] ? kfree+0x158/0x440 [ 426.106075][ T9691] ? copy_process+0x538/0x3220 [ 426.106094][ T9691] ? __get_vm_area_node+0x1f5/0x3a0 [ 426.106116][ T9691] __vmalloc_node_range_noprof+0x361/0x1420 [ 426.106142][ T9691] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 426.106164][ T9691] ? kasan_save_alloc_info+0x40/0x50 [ 426.106186][ T9691] ? arch_dup_task_struct+0x5b/0xe0 [ 426.106208][ T9691] ? __asan_memcpy+0x5a/0x80 [ 426.106231][ T9691] dup_task_struct+0x5bd/0xc50 [ 426.106250][ T9691] ? copy_process+0x538/0x3220 [ 426.106269][ T9691] ? _raw_spin_lock_irq+0x8d/0x120 [ 426.106289][ T9691] ? copy_process+0x3220/0x3220 [ 426.106314][ T9691] ? __kasan_check_write+0x18/0x20 [ 426.106338][ T9691] copy_process+0x538/0x3220 [ 426.106359][ T9691] ? __cfi_copy_process+0x10/0x10 [ 426.106379][ T9691] ? __kasan_check_write+0x18/0x20 [ 426.106402][ T9691] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 426.106421][ T9691] vhost_task_create+0x1d6/0x350 [ 426.106439][ T9691] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 426.106458][ T9691] ? __cfi_vhost_task_create+0x10/0x10 [ 426.106476][ T9691] ? __cfi_vhost_task_fn+0x10/0x10 [ 426.106492][ T9691] ? __kasan_check_write+0x18/0x20 [ 426.106515][ T9691] ? mutex_lock+0x92/0x1c0 [ 426.106537][ T9691] ? __cfi_mutex_lock+0x10/0x10 [ 426.106559][ T9691] ? kernel_text_address+0xa9/0xe0 [ 426.106580][ T9691] kvm_mmu_post_init_vm+0x1a6/0x310 [ 426.106604][ T9691] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 426.106626][ T9691] ? _parse_integer_limit+0x195/0x1e0 [ 426.106649][ T9691] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 426.106671][ T9691] ? kstrtoull+0x13b/0x1e0 [ 426.106692][ T9691] ? kstrtouint+0x78/0xf0 [ 426.106714][ T9691] ? ioctl_has_perm+0x1aa/0x4d0 [ 426.106734][ T9691] ? __asan_memcpy+0x5a/0x80 [ 426.106756][ T9691] ? ioctl_has_perm+0x3e0/0x4d0 [ 426.106775][ T9691] ? has_cap_mac_admin+0xd0/0xd0 [ 426.106794][ T9691] ? __kasan_check_write+0x18/0x20 [ 426.106817][ T9691] ? mutex_lock_killable+0x92/0x1c0 [ 426.106839][ T9691] ? __cfi_mutex_lock_killable+0x10/0x10 [ 426.106862][ T9691] ? proc_fail_nth_write+0x17e/0x210 [ 426.106889][ T9691] kvm_vcpu_ioctl+0x96f/0xee0 [ 426.106914][ T9691] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 426.106938][ T9691] ? __cfi_vfs_write+0x10/0x10 [ 426.106962][ T9691] ? __kasan_check_write+0x18/0x20 [ 426.106984][ T9691] ? mutex_unlock+0x8b/0x240 [ 426.107006][ T9691] ? __cfi_mutex_unlock+0x10/0x10 [ 426.107028][ T9691] ? __fget_files+0x2c5/0x340 [ 426.107048][ T9691] ? __fget_files+0x2c5/0x340 [ 426.107067][ T9691] ? bpf_lsm_file_ioctl+0xd/0x20 [ 426.107089][ T9691] ? security_file_ioctl+0x34/0xd0 [ 426.107108][ T9691] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 426.107131][ T9691] __se_sys_ioctl+0x132/0x1b0 [ 426.107150][ T9691] __x64_sys_ioctl+0x7f/0xa0 [ 426.107168][ T9691] x64_sys_call+0x1878/0x2ee0 [ 426.107191][ T9691] do_syscall_64+0x58/0xf0 [ 426.107210][ T9691] ? clear_bhb_loop+0x50/0xa0 [ 426.107234][ T9691] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 426.107257][ T9691] RIP: 0033:0x7f9a5e18ebe9 [ 426.107272][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.107287][ T9691] RSP: 002b:00007f9a5f08c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.107313][ T9691] RAX: ffffffffffffffda RBX: 00007f9a5e3b5fa0 RCX: 00007f9a5e18ebe9 [ 426.107327][ T9691] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 426.107339][ T9691] RBP: 00007f9a5f08c090 R08: 0000000000000000 R09: 0000000000000000 [ 426.107351][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.107363][ T9691] R13: 00007f9a5e3b6038 R14: 00007f9a5e3b5fa0 R15: 00007ffcddb5da88 [ 426.107379][ T9691] [ 426.107418][ T9691] Mem-Info: [ 426.171044][ T36] audit: type=1400 audit(1754943500.457:34168): avc: denied { execmem } for pid=9696 comm="syz.6.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 426.175802][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.192358][ T36] audit: type=1400 audit(1754943500.457:34169): avc: denied { read write } for pid=9696 comm="syz.6.3645" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.259056][ T9691] active_anon:8670 inactive_anon:196 isolated_anon:0 [ 426.259056][ T9691] active_file:20670 inactive_file:6472 isolated_file:0 [ 426.259056][ T9691] unevictable:1 dirty:302 writeback:0 [ 426.259056][ T9691] slab_reclaimable:5105 slab_unreclaimable:76592 [ 426.259056][ T9691] mapped:40754 shmem:165 pagetables:1077 [ 426.259056][ T9691] sec_pagetables:0 bounce:0 [ 426.259056][ T9691] kernel_misc_reclaimable:0 [ 426.259056][ T9691] free:1478667 free_pcp:1638 free_cma:0 [ 426.263895][ T36] audit: type=1400 audit(1754943500.457:34170): avc: denied { read write open } for pid=9696 comm="syz.6.3645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.283000][ T9691] Node 0 active_anon:34584kB inactive_anon:784kB active_file:82680kB inactive_file:25888kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:163016kB dirty:1208kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6692kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no [ 426.306419][ T36] audit: type=1400 audit(1754943500.457:34171): avc: denied { ioctl } for pid=9696 comm="syz.6.3645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.354419][ T9691] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965988kB mlocked:0kB bounce:0kB free_pcp:5776kB local_pcp:1708kB free_cma:0kB [ 426.357824][ T36] audit: type=1400 audit(1754943500.457:34172): avc: denied { ioctl } for pid=9696 comm="syz.6.3645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.365143][ T9691] lowmem_reserve[]: [ 426.366406][ T36] audit: type=1400 audit(1754943500.497:34173): avc: denied { read write } for pid=8810 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.372603][ T9691] 0 [ 426.375241][ T36] audit: type=1400 audit(1754943500.497:34174): avc: denied { read write open } for pid=8810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.387012][ T9702] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 426.392791][ T36] audit: type=1400 audit(1754943500.497:34175): avc: denied { ioctl } for pid=8810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.395959][ T9691] 3921 3921 [ 426.889186][ T9691] Normal free:2966392kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36556kB inactive_anon:784kB active_file:82680kB inactive_file:11300kB unevictable:4kB writepending:1220kB present:5242880kB managed:4016120kB mlocked:4kB bounce:0kB free_pcp:1652kB local_pcp:1236kB free_cma:0kB [ 426.964807][ T9691] lowmem_reserve[]: 0 0 0 [ 426.969191][ T9691] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 3*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 427.007550][ T9691] Normal: 1175*4kB (U) 918*8kB (UME) 703*16kB (UME) 980*32kB (UME) 777*64kB (UME) 165*128kB (UME) 64*256kB (UME) 31*512kB (UME) 21*1024kB (UME) 8*2048kB (UME) 676*4096kB (M) = 2964540kB [ 427.033068][ T9691] 23854 total pagecache pages [ 427.037981][ T9691] 197 pages in swap cache [ 427.048050][ T9691] Free swap = 123724kB [ 427.052218][ T9691] Total swap = 124996kB [ 427.066550][ T9691] 2097051 pages RAM [ 427.070371][ T9691] 0 pages HighMem/MovableOnly [ 427.092355][ T9691] 351524 pages reserved [ 427.096530][ T9691] 0 pages cma reserved [ 427.122822][ T9691] Memory allocations: [ 427.126830][ T9691] 0 B 0 init/main.c:1370 func:do_initcalls [ 427.162461][ T9691] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 427.170841][ T9691] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 427.196641][ T9691] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 427.211073][ T9691] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 427.229856][ T9691] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 427.258024][ T9691] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 427.284385][ T9691] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 427.302340][ T9691] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 427.311667][ T9691] 0 B 0 init/initramfs.c:101 func:find_link [ 427.354689][ T9732] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3660'. [ 427.467780][ T9735] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 427.475256][ T9738] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 427.475880][ T9738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 427.484958][ T9738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:558 [ 427.496976][ T9738] netlink: 'syz.7.3663': attribute type 4 has an invalid length. [ 427.515500][ T9738] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3663'. [ 427.552379][ T691] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 427.702363][ T691] usb 5-1: Using ep0 maxpacket: 16 [ 427.713388][ T691] usb 5-1: unable to get BOS descriptor or descriptor too short [ 427.732106][ T691] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 427.740430][ T691] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 427.750775][ T691] usb 5-1: config 13 has no interface number 0 [ 427.756996][ T691] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 427.767093][ T691] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.780221][ T691] usb 5-1: config 13 interface 50 has no altsetting 0 [ 427.789449][ T691] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 427.798535][ T691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.806661][ T691] usb 5-1: Product: syz [ 427.810958][ T691] usb 5-1: Manufacturer: syz [ 427.815670][ T691] usb 5-1: SerialNumber: syz [ 427.826228][ T9730] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 427.889041][ T9754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.064378][ T691] usb 5-1: MIDIStreaming interface descriptor not found [ 428.108067][ T691] usb 5-1: USB disconnect, device number 5 [ 428.214625][ T9764] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 428.214650][ T9764] rust_binder: Read failure Err(EFAULT) in pid:960 [ 428.216625][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 428.365276][ T9766] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 428.862379][ T9658] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 428.902372][ T2236] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 429.021485][ T9658] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.041874][ T9658] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.053999][ T9658] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.064024][ T9780] FAULT_INJECTION: forcing a failure. [ 429.064024][ T9780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.070066][ T2236] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.077140][ T9658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.088610][ T2236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.095364][ T9780] CPU: 0 UID: 0 PID: 9780 Comm: syz.6.3679 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 429.095396][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.095412][ T9780] Call Trace: [ 429.095420][ T9780] [ 429.095433][ T9780] __dump_stack+0x21/0x30 [ 429.095461][ T9780] dump_stack_lvl+0x10c/0x190 [ 429.095484][ T9780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 429.095507][ T9780] ? unwind_get_return_address+0x51/0x90 [ 429.095529][ T9780] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 429.095556][ T9780] dump_stack+0x19/0x20 [ 429.095578][ T9780] should_fail_ex+0x3d9/0x530 [ 429.095604][ T9780] should_fail+0xf/0x20 [ 429.095627][ T9780] should_fail_usercopy+0x1e/0x30 [ 429.095644][ T9780] _copy_from_user+0x22/0xb0 [ 429.095664][ T9780] ___sys_recvmsg+0x12f/0x510 [ 429.095689][ T9780] ? __sys_recvmsg+0x280/0x280 [ 429.095713][ T9780] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 429.095738][ T9780] ? selinux_file_permission+0x309/0xb30 [ 429.095760][ T9780] ? __fget_files+0x2c5/0x340 [ 429.095781][ T9780] do_recvmmsg+0x326/0x770 [ 429.095805][ T9780] ? __sys_recvmmsg+0x290/0x290 [ 429.095829][ T9780] ? __cfi_vfs_write+0x10/0x10 [ 429.095856][ T9780] ? fput+0x1a5/0x240 [ 429.095877][ T9780] __x64_sys_recvmmsg+0x191/0x240 [ 429.095901][ T9780] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 429.095925][ T9780] ? __kasan_check_read+0x15/0x20 [ 429.095950][ T9780] x64_sys_call+0x292c/0x2ee0 [ 429.095975][ T9780] do_syscall_64+0x58/0xf0 [ 429.095995][ T9780] ? clear_bhb_loop+0x50/0xa0 [ 429.096020][ T9780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 429.096044][ T9780] RIP: 0033:0x7f5c1e98ebe9 [ 429.096066][ T9780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.096082][ T9780] RSP: 002b:00007f5c1d3e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.096103][ T9780] RAX: ffffffffffffffda RBX: 00007f5c1ebb5fa0 RCX: 00007f5c1e98ebe9 [ 429.096118][ T9780] RDX: 0000000000000002 RSI: 0000200000001600 RDI: 0000000000000003 [ 429.096132][ T9780] RBP: 00007f5c1d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 429.096145][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.096158][ T9780] R13: 00007f5c1ebb6038 R14: 00007f5c1ebb5fa0 R15: 00007ffc4e6bc8d8 [ 429.096175][ T9780] [ 429.096303][ T9658] usb 5-1: SerialNumber: syz [ 429.116232][ T2236] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.325243][ T9658] usb 5-1: 0:2 : does not exist [ 429.333216][ T2236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.368470][ T2236] usb 6-1: SerialNumber: syz [ 429.370682][ T9658] usb 5-1: USB disconnect, device number 6 [ 429.451980][ T9784] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 429.493661][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 429.604985][ T2236] usb 6-1: 0:2 : does not exist [ 429.635367][ T2236] usb 6-1: USB disconnect, device number 52 [ 429.696917][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.709464][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.726597][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.734749][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 429.739235][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.772106][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.780717][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.916209][ T9794] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3686'. [ 430.238580][ T9799] rust_binder: 588: no such ref 3 [ 430.243686][ T9799] rust_binder: inc_ref_done called when no active inc_refs [ 430.369599][ T9803] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 430.474382][ T9805] random: crng reseeded on system resumption [ 430.582598][ T9810] overlay: ./file1 is not a directory [ 430.627653][ T9812] netlink: 57 bytes leftover after parsing attributes in process `syz.6.3694'. [ 430.720904][ T9816] overlayfs: conflicting options: userxattr,redirect_dir=on [ 430.922462][ T37] INFO: task syz.3.2515:6821 blocked for more than 122 seconds. [ 430.930172][ T37] Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 [ 430.937144][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.945947][ T37] task:syz.3.2515 state:D stack:0 pid:6821 tgid:6820 ppid:6435 flags:0x00004004 [ 430.956193][ T37] Call Trace: [ 430.959466][ T37] [ 430.962408][ T37] __schedule+0x1322/0x1df0 [ 430.966916][ T37] ? __sched_text_start+0x10/0x10 [ 430.971960][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 430.977544][ T37] ? mutex_unlock+0x8b/0x240 [ 430.982155][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 430.987996][ T37] schedule+0xc6/0x240 [ 430.992068][ T37] super_lock+0x150/0x300 [ 430.996432][ T37] ? user_get_super+0x350/0x350 [ 431.001285][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 431.006760][ T37] ? __kasan_check_write+0x18/0x20 [ 431.011912][ T37] iterate_supers+0x8a/0x560 [ 431.016549][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 431.022109][ T37] ksys_sync+0x95/0x160 [ 431.026418][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 431.031207][ T37] ? switch_fpu_return+0x12/0x20 [ 431.036186][ T37] __ia32_sys_sync+0x12/0x20 [ 431.040783][ T37] x64_sys_call+0x2a58/0x2ee0 [ 431.045464][ T37] do_syscall_64+0x58/0xf0 [ 431.049876][ T37] ? clear_bhb_loop+0x50/0xa0 [ 431.054556][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 431.060451][ T37] RIP: 0033:0x7fc64918ebe9 [ 431.064867][ T37] RSP: 002b:00007fc649f42038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 431.073300][ T37] RAX: ffffffffffffffda RBX: 00007fc6493b5fa0 RCX: 00007fc64918ebe9 [ 431.081259][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.089268][ T37] RBP: 00007fc6493b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 431.097247][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.105217][ T37] R13: 00007fc6493b6038 R14: 00007fc6493b5fa0 R15: 00007ffed5552668 [ 431.113188][ T37] [ 431.116909][ T37] INFO: task syz.2.2551:6907 blocked for more than 123 seconds. [ 431.120736][ T36] kauditd_printk_skb: 561 callbacks suppressed [ 431.120756][ T36] audit: type=1400 audit(1754943505.497:34737): avc: denied { read write } for pid=6924 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.154918][ T37] Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 [ 431.161814][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.170691][ T37] task:syz.2.2551 state:D stack:0 pid:6907 tgid:6906 ppid:5956 flags:0x00004004 [ 431.180962][ T36] audit: type=1400 audit(1754943505.507:34738): avc: denied { read write open } for pid=6924 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.194332][ T37] Call Trace: [ 431.206087][ T36] audit: type=1400 audit(1754943505.507:34739): avc: denied { ioctl } for pid=6924 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.211122][ T37] [ 431.237780][ T37] __schedule+0x1322/0x1df0 [ 431.242275][ T37] ? __sched_text_start+0x10/0x10 [ 431.247409][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 431.252900][ T37] ? mutex_unlock+0x8b/0x240 [ 431.257490][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 431.263318][ T37] schedule+0xc6/0x240 [ 431.267388][ T37] super_lock+0x150/0x300 [ 431.271704][ T37] ? user_get_super+0x350/0x350 [ 431.276569][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 431.282025][ T37] ? __kasan_check_write+0x18/0x20 [ 431.287152][ T37] iterate_supers+0x8a/0x560 [ 431.291744][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 431.297302][ T37] ksys_sync+0x95/0x160 [ 431.301458][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 431.306231][ T37] ? switch_fpu_return+0x12/0x20 [ 431.311169][ T37] __ia32_sys_sync+0x12/0x20 [ 431.315768][ T37] x64_sys_call+0x2a58/0x2ee0 [ 431.320451][ T37] do_syscall_64+0x58/0xf0 [ 431.324918][ T37] ? clear_bhb_loop+0x50/0xa0 [ 431.329603][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 431.335532][ T37] RIP: 0033:0x7f5b3b38ebe9 [ 431.339947][ T37] RSP: 002b:00007f5b3c2c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 431.348401][ T37] RAX: ffffffffffffffda RBX: 00007f5b3b5b5fa0 RCX: 00007f5b3b38ebe9 [ 431.351325][ T36] audit: type=1400 audit(1754943505.737:34740): avc: denied { read write } for pid=6943 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.356405][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.391228][ T37] RBP: 00007f5b3b5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 431.399963][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.404120][ T36] audit: type=1400 audit(1754943505.737:34741): avc: denied { read write open } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.408993][ T37] R13: 00007f5b3b5b6038 R14: 00007f5b3b5b5fa0 R15: 00007ffca1538c68 [ 431.441651][ T37] [ 431.445445][ T37] NMI backtrace for cpu 0 [ 431.445459][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 431.445485][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.445497][ T37] Call Trace: [ 431.445503][ T37] [ 431.445510][ T37] __dump_stack+0x21/0x30 [ 431.445538][ T37] dump_stack_lvl+0x10c/0x190 [ 431.445560][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 431.445585][ T37] dump_stack+0x19/0x20 [ 431.445606][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 431.445626][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 431.445648][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 431.445668][ T37] ? sched_show_task+0x379/0x560 [ 431.445690][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 431.445710][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.445732][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.445753][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 431.445772][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 431.445794][ T37] watchdog+0xd8f/0xed0 [ 431.445825][ T37] ? __cfi_watchdog+0x10/0x10 [ 431.445851][ T37] ? __kasan_check_read+0x15/0x20 [ 431.445875][ T37] ? __kthread_parkme+0x138/0x180 [ 431.445892][ T37] ? schedule+0xc6/0x240 [ 431.445914][ T37] kthread+0x2ca/0x370 [ 431.445932][ T37] ? __cfi_watchdog+0x10/0x10 [ 431.445954][ T37] ? __cfi_kthread+0x10/0x10 [ 431.445972][ T37] ret_from_fork+0x67/0xa0 [ 431.445994][ T37] ? __cfi_kthread+0x10/0x10 [ 431.446013][ T37] ret_from_fork_asm+0x1a/0x30 [ 431.446039][ T37] [ 431.446060][ T37] Sending NMI from CPU 0 to CPUs 1: [ 431.461435][ T36] audit: type=1400 audit(1754943505.767:34742): avc: denied { ioctl } for pid=6943 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.463693][ C1] NMI backtrace for cpu 1 [ 431.463704][ C1] CPU: 1 UID: 0 PID: 36 Comm: kauditd Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 431.463724][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.463732][ C1] RIP: 0010:format_decode+0x4f6/0x1600 [ 431.463754][ C1] Code: b6 04 10 84 c0 0f 85 f3 0a 00 00 48 8b 45 c0 4c 89 20 48 8b 45 b0 0f b6 04 10 84 c0 0f 85 e5 09 00 00 48 8b 45 a8 0f b6 04 10 <84> c0 0f 85 01 0a 00 00 48 8b 45 c0 4c 8b 38 49 bc 00 00 00 00 00 [ 431.463766][ C1] RSP: 0018:ffffc9000025f248 EFLAGS: 00000246 [ 431.463780][ C1] RAX: 0000000000000000 RBX: 00000000000000fc RCX: ffffffff000000ff [ 431.463790][ C1] RDX: dffffc0000000000 RSI: 00000000000000fc RDI: ffffc9000025f280 [ 431.463801][ C1] RBP: ffffc9000025f2b8 R08: ffff88810367df00 R09: 0000000000000005 [ 431.463812][ C1] R10: 0000000000000030 R11: 0000000000000000 R12: 0000000000000600 [ 431.463822][ C1] R13: 1ffffffff0b923e8 R14: ffffffff85c91f42 R15: 0000000000000036 [ 431.463832][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 431.463845][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.463856][ C1] CR2: 00007f9a5e384198 CR3: 0000000121920000 CR4: 00000000003526b0 [ 431.463869][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 431.463877][ C1] DR3: 00000000000000d8 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 431.463887][ C1] Call Trace: [ 431.463893][ C1] [ 431.463900][ C1] vsnprintf+0xe6/0x1aa0 [ 431.463916][ C1] sprintf+0xda/0x120 [ 431.463931][ C1] ? __cfi_sprintf+0x10/0x10 [ 431.463944][ C1] ? check_preempt_wakeup_fair+0x12e/0xae0 [ 431.463965][ C1] ? desc_read+0x202/0x3e0 [ 431.463985][ C1] info_print_prefix+0x253/0x480 [ 431.464002][ C1] ? trace_raw_output_console+0xf0/0xf0 [ 431.464019][ C1] ? _prb_read_valid+0xa7d/0xa90 [ 431.464039][ C1] record_print_text+0x155/0x430 [ 431.464060][ C1] ? prb_read_valid+0x80/0x80 [ 431.464079][ C1] ? printk_get_next_message+0x930/0x930 [ 431.464096][ C1] ? prb_read_valid+0x41/0x80 [ 431.464115][ C1] printk_get_next_message+0x273/0x930 [ 431.464132][ C1] ? __cfi_printk_get_next_message+0x10/0x10 [ 431.464148][ C1] ? prb_read_valid+0x80/0x80 [ 431.464168][ C1] ? __kasan_check_write+0x18/0x20 [ 431.464187][ C1] ? __kasan_check_read+0x15/0x20 [ 431.464206][ C1] ? __asan_memcpy+0x5a/0x80 [ 431.464223][ C1] console_flush_all+0x3a4/0xaa0 [ 431.464239][ C1] ? vprintk_store+0x989/0xed0 [ 431.464254][ C1] ? __console_rewind_all+0x170/0x170 [ 431.464270][ C1] ? __kasan_check_read+0x15/0x20 [ 431.464287][ C1] ? is_printk_cpu_sync_owner+0x39/0x50 [ 431.464305][ C1] ? is_printk_legacy_deferred+0x5c/0x70 [ 431.464323][ C1] console_unlock+0xe9/0x270 [ 431.464336][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 431.464353][ C1] ? __cfi_console_unlock+0x10/0x10 [ 431.464367][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 431.464389][ C1] ? vprintk_emit+0x528/0x640 [ 431.464403][ C1] vprintk_emit+0x27c/0x640 [ 431.464417][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 431.464432][ C1] ? __kasan_check_write+0x18/0x20 [ 431.464450][ C1] ? _raw_spin_trylock+0xaf/0x130 [ 431.464465][ C1] vprintk_default+0x2a/0x40 [ 431.464480][ C1] vprintk+0x93/0xa0 [ 431.464495][ C1] _printk+0xd0/0x120 [ 431.464509][ C1] ? __cfi__printk+0x10/0x10 [ 431.464523][ C1] kauditd_hold_skb+0x1cc/0x230 [ 431.464542][ C1] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 431.464560][ C1] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 431.464577][ C1] kauditd_send_queue+0x2c5/0x310 [ 431.464594][ C1] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 431.464610][ C1] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 431.464629][ C1] kauditd_thread+0x4f0/0x740 [ 431.464646][ C1] ? __kasan_check_write+0x18/0x20 [ 431.464664][ C1] ? __cfi_kauditd_thread+0x10/0x10 [ 431.464680][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 431.464695][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 431.464709][ C1] ? __kasan_check_read+0x15/0x20 [ 431.464727][ C1] ? schedule+0xc6/0x240 [ 431.464743][ C1] kthread+0x2ca/0x370 [ 431.464757][ C1] ? __cfi_kauditd_thread+0x10/0x10 [ 431.464774][ C1] ? __cfi_kthread+0x10/0x10 [ 431.464788][ C1] ret_from_fork+0x67/0xa0 [ 431.464806][ C1] ? __cfi_kthread+0x10/0x10 [ 431.464820][ C1] ret_from_fork_asm+0x1a/0x30 [ 431.464841][ C1] [ 432.058988][ T36] audit: type=1400 audit(1754943506.027:34743): avc: denied { read write } for pid=8810 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.083284][ T36] audit: type=1400 audit(1754943506.027:34744): avc: denied { read write open } for pid=8810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.108381][ T36] audit: type=1400 audit(1754943506.027:34745): avc: denied { ioctl } for pid=8810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.549669][ T36] audit: type=1400 audit(1754943507.927:34746): avc: denied { read write } for pid=7058 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1