last executing test programs: 26.433995844s ago: executing program 1 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x161) (async) mount(0x0, &(0x7f0000000cc0)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x4000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r1 = gettid() (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x400017e) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x1005) (async) accept$unix(r4, 0x0, 0x0) (async) close_range(r3, r0, 0x2) (async) write(r0, &(0x7f0000000d80)='10', 0x2) 26.425375774s ago: executing program 1 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./dev\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x10, 0x4) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000140)) (async) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f00000011c0)='ubifs\x00', 0x2010040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x519001, 0x10) mkdirat(r4, &(0x7f0000000240)='./mnt\x00', 0x19a) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x2000000) (async) write$tun(r4, &(0x7f00000002c0)={@void, @void, @llc={@snap={0x1, 0x1, ')', "981473", 0x809b}}}, 0x1d4c0) (async) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) bind$packet(r4, &(0x7f0000000380)={0x11, 0x1b, r5, 0x1, 0x8, 0x6, @broadcast}, 0x14) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0x9, 0x0, 0xffff, 0xfffffffd, 0x8, 0x687}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000001200)='./dev/ram0\x00', 0x2, 0x0) (async) unshare(0x2040400) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) utimensat(r7, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000003280)={0x2020}, 0x2020) 26.411517335s ago: executing program 1 (id=195): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000380)={0x1, 0x1}) (async) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000002c0)="98f0814aaf99bc003ce01d87", 0xc) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r3, &(0x7f00000004c0)='\x00'/11, 0xb) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="42f442df615b3e260f01cf4518b8007000000f01d1c4217d285800d1202e0f01c965f3420f1ecbc744240035000000c744240234865f21ff2c24", 0x3a}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000300)=0x1) (async) r10 = syz_create_resource$futex(&(0x7f00000003c0)=0x1) r11 = syz_create_resource$futex(&(0x7f0000000400)=0x1) futex(r11, 0xb, 0x1, 0x0, r10, 0x403) r12 = syz_create_resource$futex(&(0x7f0000000440)) futex(r11, 0xc, 0x1, 0x0, r12, 0x1) (async) write$tun(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="71ca53d8ebbacc80c20000018100000008060001080006"], 0x2e) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x75, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000280)={0x0, 0xd000}) clock_getres(0x4, 0x0) (async) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25.456709504s ago: executing program 1 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./trace/error_log\x00', 0x119) clock_adjtime(0xffffffd3, &(0x7f0000000180)={0x8, 0x6, 0x2, 0x8000000000000000, 0x9, 0x945, 0x652, 0xc, 0x7, 0x225c17d03, 0x10000000000162d8, 0x9a3f, 0xffff, 0xb, 0x7ffffffffffffc, 0xcc8, 0x800006, 0x2, 0x94d6, 0x3, 0x6, 0xfffffffffffffff9, 0x0, 0xffffffffffff9d04, 0x7f, 0x4}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000340)={&(0x7f0000000380)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000340)={&(0x7f0000000380)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000400)={0x0}) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) 25.450806255s ago: executing program 1 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001500000000", 0x39}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x15}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x14}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x4000, 0x0, 0xd5}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25.409585289s ago: executing program 1 (id=199): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x800, 0x9c9) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000306111c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101ffffffff000000001c"], 0x58}}], 0x1, 0x4880) r3 = socket(0x1, 0x1, 0x1) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f00000000c0), &(0x7f00000002c0)=0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3f6a, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='i', 0x1}], 0x1}}], 0x2, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x80, 0x3c30, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x800, 0x9c9) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000306111c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101ffffffff000000001c"], 0x58}}], 0x1, 0x4880) (async) socket(0x1, 0x1, 0x1) (async) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f00000000c0), &(0x7f00000002c0)=0x8) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3f6a, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='i', 0x1}], 0x1}}], 0x2, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x80, 0x3c30, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) (async) 25.287156942s ago: executing program 32 (id=199): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x800, 0x9c9) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000306111c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101ffffffff000000001c"], 0x58}}], 0x1, 0x4880) r3 = socket(0x1, 0x1, 0x1) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f00000000c0), &(0x7f00000002c0)=0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3f6a, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='i', 0x1}], 0x1}}], 0x2, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x80, 0x3c30, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x800, 0x9c9) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000306111c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101ffffffff000000001c"], 0x58}}], 0x1, 0x4880) (async) socket(0x1, 0x1, 0x1) (async) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f00000000c0), &(0x7f00000002c0)=0x8) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3f6a, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='i', 0x1}], 0x1}}], 0x2, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x80, 0x3c30, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) (async) 10.361222011s ago: executing program 4 (id=200): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xc100092e) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x64380, 0x0, 0xc}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x11d) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000006c0)='./mnt\x00') r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000bc0)={0x138, 0xfffffffffffffffe, 0x0, [{0x3, 0x10001, 0x1, 0x101, '\x00'}, {0x6, 0x2, 0xc, 0x6b96, '/dev/uinput\x00'}, {0x4, 0x0, 0x1, 0x1, '-'}, {0x0, 0x5, 0xc, 0x5, '/dev/uinput\x00'}, {0x6, 0x8, 0x8, 0x9, '&$(+]+]/'}, {0x2, 0xffffffffffff7fff, 0x5, 0x5, 'ext4\x00'}, {0x1, 0x3, 0x1, 0x7, '\x00'}, {0x1, 0xd60, 0x2, 0x5, '}-'}, {0x2, 0x9, 0x0, 0x2}]}, 0x138) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x2, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000780)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x879, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x160}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x40, 0x800, 0x7, 0x264}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x2006, 0x2, 0xe5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2009209, 0x0, 0x3, 0x2080008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803, 0x40, 0x0, 0x1000000, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x20000, 0x38e, 0x0, r4}}], 0x4, &(0x7f0000000b40)={0x2e, 0x58, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0xc8b, 0x0, 0x0}}, 0x0) 8.354722328s ago: executing program 4 (id=200): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xc100092e) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x64380, 0x0, 0xc}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x11d) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000006c0)='./mnt\x00') r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000bc0)={0x138, 0xfffffffffffffffe, 0x0, [{0x3, 0x10001, 0x1, 0x101, '\x00'}, {0x6, 0x2, 0xc, 0x6b96, '/dev/uinput\x00'}, {0x4, 0x0, 0x1, 0x1, '-'}, {0x0, 0x5, 0xc, 0x5, '/dev/uinput\x00'}, {0x6, 0x8, 0x8, 0x9, '&$(+]+]/'}, {0x2, 0xffffffffffff7fff, 0x5, 0x5, 'ext4\x00'}, {0x1, 0x3, 0x1, 0x7, '\x00'}, {0x1, 0xd60, 0x2, 0x5, '}-'}, {0x2, 0x9, 0x0, 0x2}]}, 0x138) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x2, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000780)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x879, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x160}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x40, 0x800, 0x7, 0x264}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x2006, 0x2, 0xe5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2009209, 0x0, 0x3, 0x2080008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803, 0x40, 0x0, 0x1000000, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x20000, 0x38e, 0x0, r4}}], 0x4, &(0x7f0000000b40)={0x2e, 0x58, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0xc8b, 0x0, 0x0}}, 0x0) 6.576860441s ago: executing program 0 (id=259): setresuid(0xee00, 0xee00, 0x0) setpriority(0x1, 0x0, 0xfffffffffffff000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) munmap(&(0x7f0000a17000/0x2000)=nil, 0x2000) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000680), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0xf) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) mmap(&(0x7f0000b9f000/0xa000)=nil, 0xa000, 0xb635773f06ebbeea, 0x8031, r3, 0x28f3f000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) getdents(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000800)='smaps_rollup\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2a0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x3, 0xa45, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, &(0x7f00000000c0)) r6 = syz_open_dev$ublk_chdev(&(0x7f00000005c0), 0x0, 0x240001) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000100)={0x0, 0x4faa, 0x2000, 0x3, 0x30d, 0x0, r5}, &(0x7f0000004940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a86, 0x1, 0x3, 0x2d9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdfe5, 0x6080, 0x1, 0x329, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8adb, 0x2000, 0x1, 0x38b, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd377, 0x2, 0xa, 0xa3}}], 0x4, &(0x7f0000003880)={0x2e, 0xef648f7aa2232034, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0x996, 0x0, &(0x7f0000002880)=@buf_512="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"}}, &(0x7f0000003900)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x147) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x542e, 0x0) ioctl$sock_netdev_private(r4, 0x89f9, &(0x7f0000003940)="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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) 6.488941391s ago: executing program 3 (id=262): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f00000001c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9bbf0cd269a2cc60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000", 0x2000, &(0x7f00000021c0)={&(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x3, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f0000002340)="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", 0x2000, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x78, 0x0, 0x100000000, {0x20000, 0xcb7b, 0x0, {0x5, 0x9, 0x48b, 0xa, 0x400000000000004, 0x5, 0x9, 0x8, 0x104, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000004480)='./file0\x00', 0x56000c10) ioctl$TCXONC(r0, 0x540a, 0x3) 6.39800533s ago: executing program 3 (id=264): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x144f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180), 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x234) write(r3, &(0x7f0000000000)='3', 0x4e) sendto(r3, 0x0, 0x0, 0x40840, 0x0, 0x0) close(r0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.39757261s ago: executing program 3 (id=265): syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a0401010000090401000001022000090401010101022000102401010001010000000203000000000624020102100705010540"], 0x0) unshare(0x60000600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)={0x1c, r1, 0x809, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000804) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x200]}, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r2) read$FUSE(r2, &(0x7f0000000580)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), r2) syz_usb_connect$midi(0x1, 0x101, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x249c, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x1, 0x1, 0x3, 0x50, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x6, 0x1, 0x8}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x3, 0x4, [{0x8, 0x18}, {0x1, 0x5}, {0x3, 0xb}, {0x8, 0x8}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x40, 0xe}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x2, 0x4, [{0x40, 0x79}, {0xfe, 0x5}, {0x6, 0x6}, {0x8, 0x60}], 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x0, 0x6, [{0xe4, 0x6a}, {0x1, 0x81}, {0x6, 0xb}, {0x2, 0x4}, {0x10}, {0x3, 0x61}], 0x81}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0x4, 0x5, [{0x7, 0xda}, {0x2, 0x3e}, {0x2, 0x3}, {0x5, 0xc}, {0xc, 0x6}], 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x2, 0x6, [{0xc0, 0x6}, {0x6, 0x2}, {0x9f, 0x8}, {0xda, 0x3}, {0x3, 0x3}, {0xb, 0x37}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @ms_header={0x7, 0x24, 0x1, 0x7f, 0x7}], [{{0x9, 0x5, 0xc, 0x10, 0x0, 0x2, 0xc, 0x9, {0x6, 0x25, 0x1, 0x2, "b29d"}}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xb1, 0x9, 0xff, {0xe, 0x25, 0x1, 0xa, "f3822f5849c149c25e74"}}}, {{0x9, 0x5, 0x1, 0x10, 0x28, 0xfd, 0xf7, 0xf, {0xc, 0x25, 0x1, 0x8, "b63d6d8f1351b0b5"}}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x6, 0x7, 0x2, {0x9, 0x25, 0x1, 0x5, "57a247a9c5"}}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x31, 0x5, 0xc, {0x13, 0x25, 0x1, 0xf, "c8d8d7ea19a11b0fe1f0e759b67160"}}}]}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x141, 0x9, 0x5, 0x3, 0x10, 0x2}, 0xe5, &(0x7f0000000380)={0x5, 0xf, 0xe5, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "062270723e92be22c660114edc8b23a6"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0x0, 0x6}, @generic={0xb5, 0x10, 0xa, "0bd91221f74c26cbc85683c5a788f896c2337479ffd04f296b425d9c37952523595b6cecdc2c19a5dab9284dfbbfc5962bcbf678586a46a277956c6702d808e363d6213d79c8cd64a5cc7318526e82f09bd4863d34588101a7b82bb7295f5d8a77901037d8986bca73a9a74f74091c7ec7b70a163e25af9783031f989c1bd6ff4eb69bcce854df83907675c49e09425b0b0eeaade6c742dd0adbbed0b8aba1cc9e5e663d57bfacea34cda6f8b0212fdfc59b"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x3, 0xf, 0x9b5, [0xf0]}]}, 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1009}}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x7, 0x38, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x5000000, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000002a40)={0x24, 0x0, 0x0, &(0x7f0000002a80)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x4, "aad19011"}, @global=@item_012={0x1, 0x1, 0x1, "c0"}, @global=@item_012={0x0, 0x1, 0x8}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_4={0x3, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x8, "324e26bc"}, @main=@item_4={0x3, 0x0, 0xb, "f50e16f8"}]}}, 0x0}, 0x0) sendmsg$binder_nlctrl_getfamily(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)={0x20, 0x10, 0x1, 0x0, 0x0, {}, {0xb}}, 0x20}}, 0x0) recvfrom$binder_nlctrl_getfamily(r4, &(0x7f00000026c0)={""/76, 0x0}, 0x80, 0x40, 0x0, 0x0) setsockopt$binder_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000002740)=r6, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002780)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000027c0)={0x44, 0x0, &(0x7f0000002800)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) recvfrom$binder_report(r4, &(0x7f0000002880)={""/44, 0x0}, 0x80, 0x40, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002900)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002940)={0x18, 0x0, &(0x7f0000002980)=[@increfs, @request_freeze={0x400c6313, 0x0, 0x1}]}) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f00000029c0)={r8, 0x1, 0x64}) r10 = socket(0x10, 0x803, 0x0) ioctl$SIOCGETSGCNT_IN6(r10, 0x89e1, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1}) 6.380778952s ago: executing program 4 (id=200): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xc100092e) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x64380, 0x0, 0xc}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x11d) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000006c0)='./mnt\x00') r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000bc0)={0x138, 0xfffffffffffffffe, 0x0, [{0x3, 0x10001, 0x1, 0x101, '\x00'}, {0x6, 0x2, 0xc, 0x6b96, '/dev/uinput\x00'}, {0x4, 0x0, 0x1, 0x1, '-'}, {0x0, 0x5, 0xc, 0x5, '/dev/uinput\x00'}, {0x6, 0x8, 0x8, 0x9, '&$(+]+]/'}, {0x2, 0xffffffffffff7fff, 0x5, 0x5, 'ext4\x00'}, {0x1, 0x3, 0x1, 0x7, '\x00'}, {0x1, 0xd60, 0x2, 0x5, '}-'}, {0x2, 0x9, 0x0, 0x2}]}, 0x138) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x2, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000780)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x879, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x160}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x40, 0x800, 0x7, 0x264}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x2006, 0x2, 0xe5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2009209, 0x0, 0x3, 0x2080008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803, 0x40, 0x0, 0x1000000, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x20000, 0x38e, 0x0, r4}}], 0x4, &(0x7f0000000b40)={0x2e, 0x58, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0xc8b, 0x0, 0x0}}, 0x0) 4.525993893s ago: executing program 0 (id=267): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\r\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000300)={0xfd316b1936fe868a, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x4, 0xd0, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x40, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x25, 0x30, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x16, 0x7ff}, [@cluster_info_segment={0x6, 0x20, 0x0, 0x92}, @cluster_info_segment={0x6, 0x20, 0x3, 0x98, 0xd1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff3, 0x5, 0x0, 0x29}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x10, 0x1, 0x1, {0xa, 0x25, 0x25, 0xfffffffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x800, 0x7, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xa6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0xa, 0x0, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x81, 0x5, 0x5, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x1, 0xfb, 0x7, "f5dcd6ced36ae73b06"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x5, 0x81, {0xa, 0x25, 0x25, 0x101, 0xe6, 0xfff}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x3, 0x7, 0x4, 0x10, 0x8}, 0x49, &(0x7f0000000540)={0x5, 0xf, 0x49, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x23, 0x1, 0x9, 0xf00, 0x8, [0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x7, 0xa962}, @wireless={0xb, 0x10, 0x1, 0x4, 0x94, 0x0, 0x7, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "937e91345d8ea19bbcd8c4b079870c94"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf6, 0x4, 0x7ff, 0x40}, @ptm_cap={0x3}]}, 0x6, [{0x8a, &(0x7f00000005c0)=@string={0x8a, 0x3, "7650b60934cd322351e90770bbe1d0ca0b6d368371b518de814b170fcf153255c67e921051d4b52ca0c4e4d4f5abfcf87fb1a9861d8f5f95ea00c492186e2cb2c1b3f34a9f5ca245f1838a1fd647cf4bde0875a4798800c3ec40497ae7fc77bf48ef0ce9f9ec38cabb59953749e87225ff54b49b9f7bf74fc1b2ef9c66de14723f3dc3a1badbe7a3"}}, {0xbb, &(0x7f0000000680)=@string={0xbb, 0x3, "1ef3414aca579a53cb38891b05d09bcb2506dfea2e98dfb2d55c6bb1e5a5b0bb0e5ff734e1ab1f62bc33d473b3a6f6e64db37a51ce165c3fb8b746c15f81a659a57724f36e4fedc5f9a275157834e0d1345166514447d09e13d2a76d1d871bfd2386cfc7c45cf3e4c069f659d4d1ed4e92ceea50b806367e11026eb35180a1a6c689084fa7b0665384260902e269d355b439c3af680d48f8a4b2d965dafb3d92d3230707aa610b4c85a3bc4ce831cc355bb10bfd8b2beacca3"}}, {0x91, &(0x7f0000000740)=@string={0x91, 0x3, "9b9e9c2e89c8919e5371b75e635d820992eea3fc99de0da7aae290512490123a61df1a0dc8c61ff8c75a45dfd6c3079e2541d13d910b1eaeea5cba1c0bbb43e88138266f7535a81387989ce0a20c347116e47d801c1a891df042abd5d6c84be9cebd1816afe455be6751246c774d7a788fcf0ab88df67765c178776938e1eb7d86edb7d004b33e8e3eba443c28223e"}}, {0x101, &(0x7f0000000800)=@string={0x101, 0x3, "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"}}, {0x98, &(0x7f0000000940)=@string={0x98, 0x3, "f27b51e0741f23cc68d0838efebad6213b306df81c12b3226d548db100eb9aaf0ba5e169a7029eb3c880df91146fb4ea05b669971b8e522e74e903b0bfa9966025418183935cd131f2d6b334e45e862493afda2a8485a57106f794f231a44d39db9921a2ddf465c249e88d6cea36ef7487ac89177055bd69535d01ce91f98c07c1c201e6dabb3c0902c6c6f287fd0dbad9ef48a7e1cc"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000f40)={0x14, &(0x7f0000000e80)={0x20, 0x7, 0x68, {0x68, 0x30, "c1e8914c4ce843ff2a0e39b470c55e82cdf3d2c02e4ba48d908b3e85b5bb561ffb3639c442177a6258ec391e68de75545cf76a2246d462dc13dc181e2951653b4f4f404470e5e288e7e0e815b434a0dc0c9064311ec607ac597cf29dd26448a68c001cfd14c9"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f0000001280)={0x34, &(0x7f0000000f80)={0x40, 0x3, 0xdb, "e97acd8e9f7f0176f8ae893004427c4067c912e90cdaddb61d8268fdb07caf6049dd7d47369ada5635ed729dd9f9e97c68ceb8be81f4661b3467110eea5cd721bff63926bde615b2060564592f2d73cb471cbe8b535c67e58b57c2873fd0558b1eb1674a336d7b83849cc2a4cf891ebfe3e10bcdecb5dd5258f4c82a9a00a70fce101b7f34e2754a40d4dc68b959264496cb677902855db60bb64f7ce73f48f0bab4d9e7c468bc907068f6a50e0e8d61a7f78cdc23960486f0d649f564ed26428701172212ddbfb53d203e9b6983074d37b4acb1f31cf2c6ca642e"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001100)={0x20, 0x0, 0xc1, {0xbf, "ff11a206b8958d986582343814fff722d334198dbef811bbfba5710ad925df0a537de3260587bf354d52fc54efdbf47448ec8452e1c71d44dda4dd39d4ee1e36bc889ca4144c1b572b3eb8f515eaa2b4487cb039db9b576be15ddbef26d7414ca73a025c4e3e8eed23c70e9e42b8a3add5a47dbe89a94dc9114476ca0f23048299c59a229d153443b5eaaf094853448156cc020a600bb72c10bf813dbb4cf789669868629c7a64d4758c252578c7bf48cdd281da7d109a21b6260e226dd1b2"}}, &(0x7f0000001200)={0x20, 0x1, 0x1}, &(0x7f0000001240)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$uac3(r1, &(0x7f0000000b40)={0x14, &(0x7f0000000ac0)={0x20, 0x4, 0x31, {0x31, 0x30, "9598b856e8873715b6ba2315173a318041e24941da5d2ec54acdbd309b5705f190a59f3253a35d0ea37523e5dfc3e8"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2232}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b80)={0x40, 0x8, 0xba, "3e7eb5000e1ad4603f2b7318cef3dbff0b3b11a6c8afcff06e72f706d61f50182c5850ea4aa1652b4fc62ee10154703eabfbd6bb80c35cd4ee64fbc6bfbb7f106586b67acabad05ff63801b4548aec2864ecd279adf6815b3b936cc7d5dfd740f11fee9c299f5afabfbb0ce4952b1700761dcff6e9a050b72c059da7714a4e9016de05ad53b9226da73d792bd73d5a51488a15924da07b9bcccfc0e593273280414bd44a05f29488defa9e959e6ece61f56b95c35a0df143037d"}, &(0x7f0000000c40)={0x0, 0xa, 0x1}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000cc0)={0x20, 0x81, 0x1, "0f"}, &(0x7f0000000d00)={0x20, 0x82, 0x3, "c12206"}, &(0x7f0000000d40)={0x20, 0x83, 0x1, '$'}, &(0x7f0000000d80)={0x20, 0x84, 0x1, "ec"}, &(0x7f0000000dc0)={0x20, 0x85, 0x3, "e2d546"}}) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x70, 0x51, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0x3, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x7, 0x2, {0x8, 0x25, 0x1, 0x2, 0xf, 0x6}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x403}}, {0x0, 0x0}, {0x0, 0x0}]}) 4.525569493s ago: executing program 2 (id=268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0xfefffff9, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f00000000c0)) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_REMOVE(r1, 0xc138fd04, &(0x7f0000000c40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x400, 0x0, 0x0, @by_dev={r2}}) 4.45797325s ago: executing program 2 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mkdir(&(0x7f0000000040)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/1000, 0x3e8) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000bc0)=[@rdmsr={0x66, 0x18, {0x40000099}}], 0x18}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.451799731s ago: executing program 2 (id=270): r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/transaction_report\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffd3) 4.436493152s ago: executing program 2 (id=271): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x2009, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11004, 0x8, 0x6, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0x4, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x209, 0x4, 0x182e, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0xfffffffd, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0xcf, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x100252, 0x81, 0xb, 0x100004, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0xfffffff9, 0x4, 0x4, 0x3fd, 0x66cd, 0x8, 0x8, 0x3, 0x81fc, 0x1ff, 0xffffffff]}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000440)="17000000020001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x15) getgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) setresgid(r2, r1, 0x0) setresgid(0xffffffffffffffff, r2, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000b000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x2009, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11004, 0x8, 0x6, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0x4, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x209, 0x4, 0x182e, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0xfffffffd, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0xcf, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x100252, 0x81, 0xb, 0x100004, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0xfffffff9, 0x4, 0x4, 0x3fd, 0x66cd, 0x8, 0x8, 0x3, 0x81fc, 0x1ff, 0xffffffff]}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000440)="17000000020001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x15) (async) getgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) (async) setresgid(r2, r1, 0x0) (async) setresgid(0xffffffffffffffff, r2, r2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) lgetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000b000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 4.397937016s ago: executing program 4 (id=200): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xc100092e) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x64380, 0x0, 0xc}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x11d) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000006c0)='./mnt\x00') r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000bc0)={0x138, 0xfffffffffffffffe, 0x0, [{0x3, 0x10001, 0x1, 0x101, '\x00'}, {0x6, 0x2, 0xc, 0x6b96, '/dev/uinput\x00'}, {0x4, 0x0, 0x1, 0x1, '-'}, {0x0, 0x5, 0xc, 0x5, '/dev/uinput\x00'}, {0x6, 0x8, 0x8, 0x9, '&$(+]+]/'}, {0x2, 0xffffffffffff7fff, 0x5, 0x5, 'ext4\x00'}, {0x1, 0x3, 0x1, 0x7, '\x00'}, {0x1, 0xd60, 0x2, 0x5, '}-'}, {0x2, 0x9, 0x0, 0x2}]}, 0x138) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x2, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000780)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x879, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x160}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x40, 0x800, 0x7, 0x264}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x2006, 0x2, 0xe5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2009209, 0x0, 0x3, 0x2080008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803, 0x40, 0x0, 0x1000000, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x20000, 0x38e, 0x0, r4}}], 0x4, &(0x7f0000000b40)={0x2e, 0x58, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0xc8b, 0x0, 0x0}}, 0x0) 2.447173688s ago: executing program 0 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x3, 0xf6}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x30, 0x1400, 0x0, 0x3, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x17, 0xe, 0x68, 0x4, 0x5, 0x88, 0x9, @dev={0xac, 0x14, 0x14, 0x25}, @local}}}}, 0x3e) 2.42301205s ago: executing program 2 (id=273): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, @broadcast, 0x1e, 0x19}}) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)='w', 0x1}], 0x1, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x40, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3fc}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x5, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xdc}}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180)={0x6, 0x7}, 0x2) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000440)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x996, 0x0) 2.42258013s ago: executing program 3 (id=274): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0942, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x2046, 0x1, 0x5}, {0x40000004, 0x2, 0x1, 0xfffb, 0x3, 0xffffffff, 0x8}]}) shutdown(r2, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_capability(r9, &(0x7f00000007c0), &(0x7f0000000800)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) bind$unix(r8, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x44, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000440)={0x0, 0x2, 0x4, 0xfffffffa, 0x3cb}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4707, 0x40, 0x1000000, 0x10000005, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x80, 0x0, 0x346}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bf2, 0x1, 0x4, 0x2c2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1050bf, 0x40000, 0x2, 0xfffffffe}}], 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12011001000000106a055900000000000001090224000100009008090400fe010310020009218100030122280009058103400003c1009e343cef44e5f8b57a8c9d7c9c565e7958fe2da2348f3c490edb2600000000c583dea5778daf9d28aaef48f07add051c01da730eb8529c3a0f28158183aba1d994ad5c830a2711aec99a7dbe43ccbf53d1fbcab04750062d4d2cfe014dbb3c3adc71a49f3f71e75bad9915f839b2144134d46c067079f25fd47178c57d8068e522d0dceb8be4b5e1aa12ce84f9c4011681ab16780265bdc94e0d62200f10"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000880)={{0x77359400}, {0x77359400}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 2.4222389s ago: executing program 0 (id=275): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) eventfd(0xd33) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = open(0x0, 0x60840, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f00000000c0)={0x2e, 0x4e, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2000100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffe39, &(0x7f0000000140)=@new_dev={0x2, 0x6f7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000180)=0x0) (async, rerun: 32) r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1) syz_ublk_setup_queues(r2, r3, &(0x7f00000004c0)={0x0, 0x2, 0x10000, 0xfffffffe, 0x12a}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x2, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd886, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x10, 0x1, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4a3, 0xa000, 0x1, 0x2ae}}], 0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x168) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000009c0)='./file0\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x200) 2.300455593s ago: executing program 0 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) (async) clock_settime(0xfffffffa, &(0x7f0000000140)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x181140, 0x0) syz_usb_connect$midi(0x5, 0x3e, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x18, 0x98, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0x10, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0x8c, 0x2, 0x20, 0x6d, 0xf9, 0x80, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) (async) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x7, 0xa, 0x2, 0x3]}, &(0x7f0000000280)=0x54) (async) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) openat2(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x2000, 0x20, 0x12}, 0x18) 2.242827199s ago: executing program 4 (id=200): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xc100092e) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x64380, 0x0, 0xc}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x11d) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000006c0)='./mnt\x00') r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000bc0)={0x138, 0xfffffffffffffffe, 0x0, [{0x3, 0x10001, 0x1, 0x101, '\x00'}, {0x6, 0x2, 0xc, 0x6b96, '/dev/uinput\x00'}, {0x4, 0x0, 0x1, 0x1, '-'}, {0x0, 0x5, 0xc, 0x5, '/dev/uinput\x00'}, {0x6, 0x8, 0x8, 0x9, '&$(+]+]/'}, {0x2, 0xffffffffffff7fff, 0x5, 0x5, 'ext4\x00'}, {0x1, 0x3, 0x1, 0x7, '\x00'}, {0x1, 0xd60, 0x2, 0x5, '}-'}, {0x2, 0x9, 0x0, 0x2}]}, 0x138) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x2, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000780)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x879, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x160}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x40, 0x800, 0x7, 0x264}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x2006, 0x2, 0xe5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2009209, 0x0, 0x3, 0x2080008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803, 0x40, 0x0, 0x1000000, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x20000, 0x38e, 0x0, r4}}], 0x4, &(0x7f0000000b40)={0x2e, 0x58, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0xc8b, 0x0, 0x0}}, 0x0) 193.75724ms ago: executing program 0 (id=277): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r1 = userfaultfd(0x80801) close(0x3) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) getrandom(&(0x7f0000000300)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mount(&(0x7f0000000500)=@filename='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='cpuset\x00', 0x14000, &(0x7f00000005c0)='\xfe') r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000440)={0x1f, @none}, 0x8) bind$bt_sco(r4, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="8d64f4ed3bd63f6906e984328856350fbd3d7e109316387ff14f7f15afe87c18336d819c4c2a8e7a6d94c32f16b37b9f069ff4731c1909c2eacdbb82473f5de6906f64b3629de69ae53451fa1e49cef62b6d53d45c3edff6960065d47ce7529d35d11c5e50d10b894c17ee4aba5aac029f14362cdc54aa91f5", 0x79}], 0x1) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 191.71818ms ago: executing program 2 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3) fsopen(&(0x7f00000000c0)='logfs\x00', 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000500)=0x9, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000540)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f00000005c0)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000600)={0x11, 0x0, r3}, 0x14) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x40000) accept$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c0251}) r6 = socket$inet(0x2, 0xa, 0x90f) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000140)={{0x2, 0x4e27, @multicast1}, {0x1, @remote}, 0x0, {0x2, 0x8101, @private=0xa010101}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 190.70921ms ago: executing program 3 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0xc0000, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000001780)) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000280)=@svm={0x5, 0x1, 0x1080, {0x100000, 0x44}, {"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"}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x2, 0x1ff8, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001340)=[@text64={0x40, &(0x7f0000001380)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000001400)={0x2, 0x0, @pic={0x4, 0x3, 0x5, 0x5, 0x1, 0x1, 0xc, 0x6, 0xbf, 0x0, 0xbb, 0x2, 0x71, 0xfe, 0x1, 0x9}}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000001640)={{0x8000000, 0x3000, 0x8, 0x9, 0xfb, 0x8, 0x3e, 0x17, 0x0, 0xc8, 0x19}, {0xb000, 0x50000, 0xa, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0xb, 0x0, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x1ffc, 0x1, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x2, 0xe}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x18, 0x19, 0xab, 0x7f, 0x3, 0x83, 0x8, 0x83}, {0x0, 0x0, 0xd, 0x4, 0xad, 0x8, 0x1, 0xf3, 0x8, 0x5, 0xff}, {0x3000, 0x2000, 0xf, 0x7, 0x8, 0x5, 0x9, 0xc, 0xc, 0xd, 0xff, 0x6d}, {0xffe, 0x1, 0xe, 0x5, 0xb, 0x7, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x30}, {0x100000, 0x4}, 0x80000031, 0x0, 0xeeef0000, 0x1200d, 0x4000003, 0x8000, 0x54000, [0x6800000000000000, 0x4, 0x65, 0xf]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0xc5f6b33bcb91b93f, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) fsetxattr(r1, &(0x7f0000000200)=@random={'user.', '/dev/kvm\x00'}, &(0x7f0000000240)='/dev/kvm\x00', 0x9, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000017c0)="48b801b89734000000004d9823c80f23f835080050000f23e2c744240004000000c744240200000000c74424060000000066baf80cb8580acb8def66bafc0cb800980000ef48b80a2b0000000000000f23d00f21f835000000080f23f8c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8260f01d1f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0xac}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.888635ms ago: executing program 3 (id=280): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) memfd_create(0x0, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x1, 0x177, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/375], &(0x7f0000000840)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x6, 0x10, 0x8b, 0xff, 0x2}, 0x58, &(0x7f0000000600)={0x5, 0xf, 0x58, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "e85af2425ab98d76e86f1d8996ab750c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xf3, 0x7, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2c19a6f14356c7dfaaffb1a3b25fee66"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "f1b032d996180d4cfa13cc9cf63616fa"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x4, 0x2, 0x1}]}, 0x5, [{0x72, &(0x7f0000000680)=@string={0x72, 0x3, "9faf5036a936b7b950b64adf9e18e087fda112e9a42cb0a698792d419dc1f434624a1970065b97d2f2b24eb3697d4ffe546f36013df940234cb4da424e80969d98b19b8126657681e504b0f7f3a88512c1806c9fc226e41f32fcc7aefa3b5d7b2d0dd641cab410fe101da23469bb0b44"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x425}}, {0x77, &(0x7f00000007c0)=@string={0x77, 0x3, "8da30d060f15756f8c9d04180d9db4394086de7f450629bd63f4735405575ce7cffa6aebb5a2b5d41703e9d99f15e614d73ff9e482fd74d0452b02eca156dd4f3bf0d8781ff15c6842f88b384ddeee83350a3d03ede2b1c92bf1422ddd8b8001a5cd595d85075174d49642a9118a7f27d46f3c745d"}}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000000002000"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x5001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000900)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r2, &(0x7f0000000a00)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x2c, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x18, 0x0, @wg=@cookie={0x3, 0x2, "f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e", "78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"}}}}, 0x66) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40a01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x7fffffff, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="851c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000a80)) 0s ago: executing program 4 (id=200): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xc100092e) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x64380, 0x0, 0xc}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x11d) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000006c0)='./mnt\x00') r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000bc0)={0x138, 0xfffffffffffffffe, 0x0, [{0x3, 0x10001, 0x1, 0x101, '\x00'}, {0x6, 0x2, 0xc, 0x6b96, '/dev/uinput\x00'}, {0x4, 0x0, 0x1, 0x1, '-'}, {0x0, 0x5, 0xc, 0x5, '/dev/uinput\x00'}, {0x6, 0x8, 0x8, 0x9, '&$(+]+]/'}, {0x2, 0xffffffffffff7fff, 0x5, 0x5, 'ext4\x00'}, {0x1, 0x3, 0x1, 0x7, '\x00'}, {0x1, 0xd60, 0x2, 0x5, '}-'}, {0x2, 0x9, 0x0, 0x2}]}, 0x138) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x2, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000780)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x879, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x160}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x40, 0x800, 0x7, 0x264}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x2006, 0x2, 0xe5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2009209, 0x0, 0x3, 0x2080008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803, 0x40, 0x0, 0x1000000, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x20000, 0x38e, 0x0, r4}}], 0x4, &(0x7f0000000b40)={0x2e, 0x58, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0xc8b, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 26.856333][ T36] audit: type=1400 audit(1793829385.740:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.879490][ T36] audit: type=1400 audit(1793829385.770:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.882130][ T286] cgroup: Unknown subsys name 'net' [ 26.907405][ T36] audit: type=1400 audit(1793829385.790:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.907898][ T286] cgroup: Unknown subsys name 'devices' [ 27.035021][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.041100][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.156726][ T36] audit: type=1400 audit(1793829386.040:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.180043][ T36] audit: type=1400 audit(1793829386.040:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.204842][ T36] audit: type=1400 audit(1793829386.040:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.235720][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.244618][ T36] audit: type=1400 audit(1793829386.130:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.270267][ T36] audit: type=1400 audit(1793829386.130:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.324791][ T36] audit: type=1400 audit(1793829386.210:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.350430][ T36] audit: type=1400 audit(1793829386.210:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.351201][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.244292][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.251418][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.258873][ T293] bridge_slave_0: entered allmulticast mode [ 28.265291][ T293] bridge_slave_0: entered promiscuous mode [ 28.277143][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.284238][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.291330][ T293] bridge_slave_1: entered allmulticast mode [ 28.297832][ T293] bridge_slave_1: entered promiscuous mode [ 28.333041][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.340252][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.347407][ T295] bridge_slave_0: entered allmulticast mode [ 28.353797][ T295] bridge_slave_0: entered promiscuous mode [ 28.360124][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.367402][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.374570][ T296] bridge_slave_0: entered allmulticast mode [ 28.380848][ T296] bridge_slave_0: entered promiscuous mode [ 28.395393][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.402482][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.409725][ T295] bridge_slave_1: entered allmulticast mode [ 28.416103][ T295] bridge_slave_1: entered promiscuous mode [ 28.422258][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.429411][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.436655][ T296] bridge_slave_1: entered allmulticast mode [ 28.442987][ T296] bridge_slave_1: entered promiscuous mode [ 28.464430][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.471517][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.478722][ T294] bridge_slave_0: entered allmulticast mode [ 28.485088][ T294] bridge_slave_0: entered promiscuous mode [ 28.491651][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.498757][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.505862][ T294] bridge_slave_1: entered allmulticast mode [ 28.512100][ T294] bridge_slave_1: entered promiscuous mode [ 28.661624][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.668731][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.676111][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.683171][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.704253][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.711372][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.718741][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.725912][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.746659][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.753793][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.761124][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.768232][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.798420][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.805532][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.812872][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.819918][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.848541][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.856354][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.864308][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.871569][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.879418][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.886706][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.894094][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.901290][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.916392][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.923508][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.937524][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.944623][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.952998][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.960077][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.971946][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.979015][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.987684][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.994775][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.008244][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.015340][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.044855][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.052039][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.076664][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.083766][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.098149][ T296] veth0_vlan: entered promiscuous mode [ 29.116879][ T294] veth0_vlan: entered promiscuous mode [ 29.135582][ T296] veth1_macvtap: entered promiscuous mode [ 29.154708][ T294] veth1_macvtap: entered promiscuous mode [ 29.184077][ T293] veth0_vlan: entered promiscuous mode [ 29.207452][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.226025][ T295] veth0_vlan: entered promiscuous mode [ 29.233379][ T293] veth1_macvtap: entered promiscuous mode [ 29.263797][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.264787][ T295] veth1_macvtap: entered promiscuous mode [ 29.360475][ T325] fuse: Unknown parameter 'œJö0x0000000000000003' [ 29.414334][ T314] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 29.431636][ T313] rust_binder: 312: undelivered TRANSACTION_COMPLETE [ 29.522064][ T354] FAULT_INJECTION: forcing a failure. [ 29.522064][ T354] name failslab, interval 1, probability 0, space 0, times 1 [ 29.536405][ T354] CPU: 1 UID: 0 PID: 354 Comm: syz.1.9 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 29.536435][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.536458][ T354] Call Trace: [ 29.536464][ T354] [ 29.536473][ T354] __dump_stack+0x21/0x30 [ 29.536498][ T354] dump_stack_lvl+0x140/0x1c0 [ 29.536517][ T354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.536535][ T354] ? mas_prev+0x5f/0xa0 [ 29.536562][ T354] dump_stack+0x19/0x20 [ 29.536578][ T354] should_fail_ex+0x3c2/0x510 [ 29.536608][ T354] should_failslab+0xac/0x100 [ 29.536628][ T354] kmem_cache_alloc_noprof+0x42/0x410 [ 29.536657][ T354] ? __pte_alloc+0x1ae/0x440 [ 29.536683][ T354] ? __anon_vma_prepare+0xec/0x590 [ 29.536711][ T354] __anon_vma_prepare+0xec/0x590 [ 29.536739][ T354] do_pte_missing+0x2bbf/0x4440 [ 29.536770][ T354] ? mas_store_prealloc+0xc69/0x1250 [ 29.536806][ T354] ? __cfi_mas_store_prealloc+0x10/0x10 [ 29.536831][ T354] ? pte_marker_clear+0x1b0/0x1b0 [ 29.536853][ T354] ? __vma_start_write+0x110/0x110 [ 29.536873][ T354] ? vms_complete_munmap_vmas+0x2a6/0x820 [ 29.536893][ T354] handle_mm_fault+0x1189/0x1ba0 [ 29.536914][ T354] ? __cfi_handle_mm_fault+0x10/0x10 [ 29.536935][ T354] ? __cfi_find_vma+0x10/0x10 [ 29.536962][ T354] ? vma_is_secretmem+0x11/0x50 [ 29.536984][ T354] ? check_vma_flags+0x36d/0x3a0 [ 29.537007][ T354] __get_user_pages+0x114b/0x22d0 [ 29.537041][ T354] ? populate_vma_page_range+0x220/0x220 [ 29.537062][ T354] ? down_read+0x7f/0xe0 [ 29.537088][ T354] ? __cfi_down_read+0x10/0x10 [ 29.537113][ T354] ? __cfi_do_mmap+0x10/0x10 [ 29.537141][ T354] __mm_populate+0x300/0x440 [ 29.537162][ T354] vm_mmap_pgoff+0x426/0x4b0 [ 29.537190][ T354] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 29.537217][ T354] ? xfd_validate_state+0x68/0x140 [ 29.537235][ T354] ksys_mmap_pgoff+0xfa/0x1e0 [ 29.537261][ T354] ? __kasan_check_write+0x18/0x20 [ 29.537288][ T354] __x64_sys_mmap+0x121/0x140 [ 29.537309][ T354] x64_sys_call+0x13bf/0x2ee0 [ 29.537328][ T354] do_syscall_64+0x57/0xf0 [ 29.537347][ T354] ? clear_bhb_loop+0x50/0xa0 [ 29.537372][ T354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.537397][ T354] RIP: 0033:0x7fa87559fb19 [ 29.537419][ T354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.537434][ T354] RSP: 002b:00007fa8763bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 29.537461][ T354] RAX: ffffffffffffffda RBX: 00007fa875825fa0 RCX: 00007fa87559fb19 [ 29.537476][ T354] RDX: 0000000000000002 RSI: 0000000000000007 RDI: 00007fffffffb000 [ 29.537488][ T354] RBP: 00007fa875637b70 R08: ffffffffffffffff R09: 0000000008000000 [ 29.537501][ T354] R10: bd4c341840b03bf2 R11: 0000000000000246 R12: 0000000000000000 [ 29.537513][ T354] R13: 00007fa875826038 R14: 00007fa875825fa0 R15: 00007fffde973e38 [ 29.537531][ T354] [ 29.852604][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.912881][ T367] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 29.927743][ T367] overlayfs: conflicting lowerdir path [ 29.946819][ T64] rust_binder: 312: undelivered transaction 2, process died [ 29.973314][ T369] FAULT_INJECTION: forcing a failure. [ 29.973314][ T369] name failslab, interval 1, probability 0, space 0, times 0 [ 30.002611][ T369] CPU: 0 UID: 0 PID: 369 Comm: syz.1.13 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 30.002650][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.002664][ T369] Call Trace: [ 30.002672][ T369] [ 30.002681][ T369] __dump_stack+0x21/0x30 [ 30.002712][ T369] dump_stack_lvl+0x140/0x1c0 [ 30.002733][ T369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.002767][ T369] dump_stack+0x19/0x20 [ 30.002786][ T369] should_fail_ex+0x3c2/0x510 [ 30.002822][ T369] should_failslab+0xac/0x100 [ 30.002848][ T369] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 30.002887][ T369] ? sidtab_sid2str_get+0x135/0x360 [ 30.002924][ T369] kmemdup_noprof+0x31/0x80 [ 30.002952][ T369] sidtab_sid2str_get+0x135/0x360 [ 30.002986][ T369] security_sid_to_context_core+0x30d/0x5d0 [ 30.003022][ T369] security_sid_to_context+0x2e/0x50 [ 30.003043][ T369] avc_audit_post_callback+0x117/0x790 [ 30.003062][ T369] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 30.003082][ T369] ? audit_log_untrustedstring+0xea/0x100 [ 30.003107][ T369] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 30.003125][ T369] common_lsm_audit+0x1bc/0x220 [ 30.003142][ T369] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 30.003161][ T369] ? __cfi_common_lsm_audit+0x10/0x10 [ 30.003179][ T369] slow_avc_audit+0x19f/0x220 [ 30.003196][ T369] ? __cfi_slow_avc_audit+0x10/0x10 [ 30.003215][ T369] ? avc_has_perm_noaudit+0x21f/0x360 [ 30.003234][ T369] avc_has_perm+0x1ec/0x240 [ 30.003252][ T369] ? __cfi_avc_has_perm+0x10/0x10 [ 30.003270][ T369] ? lockref_get+0x131/0x1c0 [ 30.003290][ T369] selinux_sb_kern_mount+0x173/0x200 [ 30.003312][ T369] ? __cfi_selinux_sb_kern_mount+0x10/0x10 [ 30.003334][ T369] ? __kasan_check_read+0x15/0x20 [ 30.003358][ T369] ? static_key_count+0x45/0x70 [ 30.003376][ T369] ? security_sb_set_mnt_opts+0x272/0x290 [ 30.003397][ T369] security_sb_kern_mount+0x47/0xe0 [ 30.003415][ T369] do_new_mount+0x2d9/0xb40 [ 30.003440][ T369] ? security_capable+0x44/0x130 [ 30.003458][ T369] path_mount+0x66a/0xff0 [ 30.003481][ T369] ? putname+0x113/0x150 [ 30.003498][ T369] __se_sys_mount+0x2bf/0x480 [ 30.003513][ T369] ? __x64_sys_mount+0xf0/0xf0 [ 30.003528][ T369] ? __kasan_check_write+0x18/0x20 [ 30.003551][ T369] ? fpregs_restore_userregs+0x11c/0x260 [ 30.003576][ T369] __x64_sys_mount+0xc3/0xf0 [ 30.003591][ T369] x64_sys_call+0x2021/0x2ee0 [ 30.003609][ T369] do_syscall_64+0x57/0xf0 [ 30.003625][ T369] ? clear_bhb_loop+0x50/0xa0 [ 30.003649][ T369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.003675][ T369] RIP: 0033:0x7fa87559fb19 [ 30.003690][ T369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.003704][ T369] RSP: 002b:00007fa8763bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.003722][ T369] RAX: ffffffffffffffda RBX: 00007fa875825fa0 RCX: 00007fa87559fb19 [ 30.003735][ T369] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 30.003752][ T369] RBP: 00007fa875637b70 R08: 0000000000000000 R09: 0000000000000000 [ 30.003763][ T369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.003773][ T369] R13: 00007fa875826038 R14: 00007fa875825fa0 R15: 00007fffde973e38 [ 30.003788][ T369] [ 30.122793][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.130215][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 30.232699][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.249191][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 30.283524][ T313] usb 3-1: Using ep0 maxpacket: 8 [ 30.290914][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 30.314637][ T313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.321373][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 30.353706][ T313] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 30.364235][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.393483][ T313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.416399][ T10] usb 4-1: config 0 descriptor?? [ 30.442572][ T313] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 11 [ 30.453672][ T31] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.466766][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.484513][ T31] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 30.493861][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.502458][ T313] usb 3-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 30.511983][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.520288][ T313] usb 3-1: Product: syz [ 30.532795][ T31] usb 1-1: config 0 descriptor?? [ 30.549051][ T313] usb 3-1: Manufacturer: syz [ 30.554015][ T313] usb 3-1: SerialNumber: syz [ 30.559979][ T313] usb 3-1: config 0 descriptor?? [ 30.693491][ T384] FAULT_INJECTION: forcing a failure. [ 30.693491][ T384] name failslab, interval 1, probability 0, space 0, times 0 [ 30.706851][ T384] CPU: 1 UID: 0 PID: 384 Comm: syz.1.16 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 30.706892][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.706913][ T384] Call Trace: [ 30.706921][ T384] [ 30.706931][ T384] __dump_stack+0x21/0x30 [ 30.706962][ T384] dump_stack_lvl+0x140/0x1c0 [ 30.706985][ T384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.707010][ T384] dump_stack+0x19/0x20 [ 30.707032][ T384] should_fail_ex+0x3c2/0x510 [ 30.707070][ T384] should_failslab+0xac/0x100 [ 30.707097][ T384] kmem_cache_alloc_node_noprof+0x45/0x420 [ 30.707135][ T384] ? __alloc_skb+0x10c/0x360 [ 30.707164][ T384] __alloc_skb+0x10c/0x360 [ 30.707191][ T384] __ip6_append_data+0x2b78/0x3d50 [ 30.707235][ T384] ? __cfi_raw6_getfrag+0x10/0x10 [ 30.707274][ T384] ? ip6_setup_cork+0x13a0/0x13a0 [ 30.707305][ T384] ? ip6_append_data+0x23e/0x370 [ 30.707335][ T384] ip6_append_data+0x194/0x370 [ 30.707365][ T384] ? __cfi_raw6_getfrag+0x10/0x10 [ 30.707398][ T384] rawv6_sendmsg+0x1240/0x1820 [ 30.707434][ T384] ? __cfi_avc_has_perm+0x10/0x10 [ 30.707461][ T384] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 30.707494][ T384] ? selinux_socket_sendmsg+0x281/0x380 [ 30.707527][ T384] ? check_stack_object+0x10f/0x150 [ 30.707566][ T384] ? inet_send_prepare+0x64/0x4e0 [ 30.707591][ T384] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 30.707628][ T384] inet_sendmsg+0x116/0x120 [ 30.707652][ T384] ? __cfi_inet_sendmsg+0x10/0x10 [ 30.707677][ T384] __sys_sendto+0x5d8/0x6e0 [ 30.707708][ T384] ? __cfi___sys_sendto+0x10/0x10 [ 30.707740][ T384] ? __se_sys_futex+0x13c/0x320 [ 30.707770][ T384] ? __kasan_check_write+0x18/0x20 [ 30.707806][ T384] __x64_sys_sendto+0xe9/0x100 [ 30.707837][ T384] x64_sys_call+0x2c2c/0x2ee0 [ 30.707864][ T384] do_syscall_64+0x57/0xf0 [ 30.707890][ T384] ? clear_bhb_loop+0x50/0xa0 [ 30.707924][ T384] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.707957][ T384] RIP: 0033:0x7fa87559fb19 [ 30.707978][ T384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.707998][ T384] RSP: 002b:00007fa8763bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 30.708026][ T384] RAX: ffffffffffffffda RBX: 00007fa875825fa0 RCX: 00007fa87559fb19 [ 30.708044][ T384] RDX: 000000000000fdef RSI: 0000200000002900 RDI: 0000000000000004 [ 30.708060][ T384] RBP: 00007fa875637b70 R08: 0000200000002940 R09: 0000000000000018 [ 30.708076][ T384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.708091][ T384] R13: 00007fa875826038 R14: 00007fa875825fa0 R15: 00007fffde973e38 [ 30.708112][ T384] [ 30.891162][ T386] fuse: Unknown parameter '}dÁ0x0000000000000007' [ 31.000932][ T313] usb 3-1: USB disconnect, device number 2 [ 31.105956][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 31.111960][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.115484][ T31] input: HID 04f2:1421 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F2:1421.0001/input/input4 [ 31.139549][ T10] usb 4-1: USB disconnect, device number 2 [ 31.139907][ T31] chicony 0003:04F2:1421.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 31.344951][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.356900][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.463177][ T406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=406 comm=syz.1.18 [ 31.677578][ T419] capability: warning: `syz.2.21' uses deprecated v2 capabilities in a way that may be insecure [ 31.732567][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 31.883774][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.894610][ T10] usb 2-1: config 0 has no interfaces? [ 31.902998][ T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 31.912139][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.920344][ T10] usb 2-1: Product: syz [ 31.924911][ T10] usb 2-1: Manufacturer: syz [ 31.929556][ T10] usb 2-1: SerialNumber: syz [ 31.935085][ T10] usb 2-1: config 0 descriptor?? [ 32.100542][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 32.100561][ T36] audit: type=1400 audit(1793829390.980:147): avc: denied { read } for pid=437 comm="syz.2.27" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.128320][ T36] audit: type=1400 audit(1793829390.980:148): avc: denied { open } for pid=437 comm="syz.2.27" path="net:[4026532551]" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.152795][ T10] usb 2-1: USB disconnect, device number 2 [ 32.159315][ T36] audit: type=1400 audit(1793829391.000:149): avc: denied { write } for pid=437 comm="syz.2.27" path="socket:[4678]" dev="sockfs" ino=4678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.343078][ T36] audit: type=1400 audit(1793829391.220:150): avc: denied { write } for pid=445 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.364171][ T36] audit: type=1400 audit(1793829391.230:151): avc: denied { read } for pid=445 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.452590][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.611350][ T36] audit: type=1400 audit(1793829391.490:152): avc: denied { mount } for pid=451 comm="syz.3.31" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.633470][ T36] audit: type=1400 audit(1793829391.500:153): avc: denied { search } for pid=451 comm="syz.3.31" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 32.655840][ T36] audit: type=1400 audit(1793829391.500:154): avc: denied { read write } for pid=451 comm="syz.3.31" name="dynamic_events" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.686007][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 32.696742][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 32.702703][ T36] audit: type=1400 audit(1793829391.500:155): avc: denied { open } for pid=451 comm="syz.3.31" path="/7/tracefs/dynamic_events" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.723074][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 32.739720][ T36] audit: type=1400 audit(1793829391.530:156): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.760485][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 32.782372][ T64] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 32.792945][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.802720][ T64] usb 3-1: Product: syz [ 32.807013][ T64] usb 3-1: Manufacturer: syz [ 32.811621][ T64] usb 3-1: SerialNumber: syz [ 32.817421][ T64] usb 3-1: config 0 descriptor?? [ 32.824274][ T64] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 33.034690][ T464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.043230][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.045666][ T444] usb 1-1: USB disconnect, device number 2 [ 33.052375][ T464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.066183][ T464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.078407][ T464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.087556][ T64] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 33.162593][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.195728][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 33.205704][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 33.217276][ T31] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 33.228443][ T313] usb 3-1: USB disconnect, device number 3 [ 33.238215][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.247941][ T31] usb 2-1: Product: syz [ 33.252157][ T31] usb 2-1: Manufacturer: syz [ 33.256853][ T31] usb 2-1: SerialNumber: syz [ 33.323654][ T9] usb 4-1: config index 0 descriptor too short (expected 69, got 51) [ 33.331931][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.343313][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 33.352408][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.360481][ T9] usb 4-1: Product: syz [ 33.364689][ T9] usb 4-1: Manufacturer: syz [ 33.369285][ T9] usb 4-1: SerialNumber: syz [ 33.465510][ T64] usb 2-1: USB disconnect, device number 3 [ 33.578148][ T9] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 33.593630][ T9] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 33.605307][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 33.615873][ T9] usb 4-1: USB disconnect, device number 3 [ 33.627786][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.752365][ T474] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 33.762196][ T474] netlink: 64 bytes leftover after parsing attributes in process `syz.2.38'. [ 33.771541][ T474] tipc: Started in network mode [ 33.776460][ T474] tipc: Node identity 7f000001, cluster identity 4711 [ 33.783448][ T474] tipc: New replicast peer: 127.0.0.1 [ 33.789044][ T474] tipc: Enabled bearer , priority 10 [ 33.923897][ T483] mmap: syz.0.41 (483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.177629][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.322945][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.493346][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 34.512965][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.523182][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 34.532264][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.553441][ T9] usb 1-1: Found UVC 1.00 device (046d:0825) [ 34.560458][ T9] usb 1-1: No streaming interface found for terminal 2. [ 34.732614][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.743985][ T9] usb 1-1: USB disconnect, device number 3 [ 34.792738][ T313] tipc: Node number set to 2130706433 [ 34.903031][ T31] usb 2-1: too many configurations: 231, using maximum allowed: 8 [ 34.911763][ T31] usb 2-1: config index 0 descriptor too short (expected 4257, got 161) [ 34.920266][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.930432][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.940236][ T31] usb 2-1: config index 1 descriptor too short (expected 4257, got 161) [ 34.948660][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.958799][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.968532][ T31] usb 2-1: config index 2 descriptor too short (expected 4257, got 161) [ 34.977002][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.987116][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.997205][ T31] usb 2-1: config index 3 descriptor too short (expected 4257, got 161) [ 35.005654][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.015764][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.025457][ T31] usb 2-1: config index 4 descriptor too short (expected 4257, got 161) [ 35.033857][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.044019][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.053821][ T31] usb 2-1: config index 5 descriptor too short (expected 4257, got 161) [ 35.062220][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.072379][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.083440][ T31] usb 2-1: config index 6 descriptor too short (expected 4257, got 161) [ 35.091847][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.102072][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.111890][ T31] usb 2-1: config index 7 descriptor too short (expected 4257, got 161) [ 35.120363][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.130608][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.139587][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 35.149237][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.167223][ T530] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 35.361667][ T31] usb 2-1: string descriptor 0 read error: -71 [ 35.369336][ T31] usb 2-1: Found UVC 0.00 device (046d:0825) [ 35.376429][ T31] usb 2-1: No valid video chain found. [ 35.383596][ T31] usb 2-1: USB disconnect, device number 4 [ 35.526977][ T538] ======================================================= [ 35.526977][ T538] WARNING: The mand mount option has been deprecated and [ 35.526977][ T538] and is ignored by this kernel. Remove the mand [ 35.526977][ T538] option from the mount to silence this warning. [ 35.526977][ T538] ======================================================= [ 35.795262][ T549] kvm: kvm [548]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 36.092662][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.172739][ T444] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 36.242576][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 36.249398][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.260697][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.274058][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 36.283435][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.291723][ T31] usb 1-1: SerialNumber: syz [ 36.302781][ T444] usb 3-1: device descriptor read/64, error -71 [ 36.311317][ T31] usb 1-1: 0:2 : does not exist [ 36.496116][ T587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 36.542787][ T444] usb 3-1: device descriptor read/64, error -71 [ 36.792585][ T444] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.922584][ T444] usb 3-1: device descriptor read/64, error -71 [ 37.064759][ T601] Zero length message leads to an empty skb [ 37.162593][ T444] usb 3-1: device descriptor read/64, error -71 [ 37.272672][ T444] usb usb3-port1: attempt power cycle [ 37.346247][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 37.346264][ T36] audit: type=1400 audit(1793829396.230:206): avc: denied { ioctl } for pid=605 comm="syz.1.73" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7306 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.378585][ T313] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.503950][ T31] usb 1-1: USB disconnect, device number 4 [ 37.535294][ T313] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 37.544449][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.552907][ T313] usb 4-1: Product: syz [ 37.557109][ T313] usb 4-1: Manufacturer: syz [ 37.561707][ T313] usb 4-1: SerialNumber: syz [ 37.642577][ T444] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 37.663726][ T444] usb 3-1: device descriptor read/8, error -71 [ 37.771683][ T603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.780397][ T603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.792117][ T313] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.799251][ T313] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.804312][ T444] usb 3-1: device descriptor read/8, error -71 [ 37.811799][ T313] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 37.825948][ T313] usb 4-1: USB disconnect, device number 4 [ 37.828047][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.057616][ T444] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 38.083643][ T444] usb 3-1: device descriptor read/8, error -71 [ 38.098323][ T36] audit: type=1400 audit(1793829396.980:207): avc: denied { associate } for pid=617 comm="syz.0.76" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.108024][ T618] rust_binder: Write failure EFAULT in pid:49 [ 38.127572][ T618] rust_binder: 617:618 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 38.135851][ T618] rust_binder: 617:618 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 38.175016][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.183931][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.193445][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.202389][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.211544][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.220600][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.230430][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.239626][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.244109][ T444] usb 3-1: device descriptor read/8, error -71 [ 38.249721][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.263517][ T625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.308898][ T36] audit: type=1400 audit(1793829397.190:208): avc: denied { create } for pid=641 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.350829][ T36] audit: type=1400 audit(1793829397.210:209): avc: denied { write } for pid=641 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.362961][ T444] usb usb3-port1: unable to enumerate USB device [ 38.383972][ T36] audit: type=1400 audit(1793829397.210:210): avc: denied { ioctl } for pid=641 comm="syz.3.78" path="socket:[6856]" dev="sockfs" ino=6856 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.413578][ T36] audit: type=1400 audit(1793829397.220:211): avc: denied { setopt } for pid=641 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.435659][ T36] audit: type=1400 audit(1793829397.300:212): avc: denied { getopt } for pid=649 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.530959][ T668] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 38.541109][ T36] audit: type=1400 audit(1793829397.420:213): avc: denied { relabelto } for pid=667 comm="syz.3.83" name="22" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 38.567832][ T36] audit: type=1400 audit(1793829397.420:214): avc: denied { associate } for pid=667 comm="syz.3.83" name="22" dev="tmpfs" ino=130 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 38.608275][ T626] cgroup: fork rejected by pids controller in /syz0 [ 38.609136][ T36] audit: type=1400 audit(1793829397.490:215): avc: denied { write } for pid=295 comm="syz-executor" name="22" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 38.960213][ T728] serio: Serial port ptm0 [ 39.159032][ T738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 39.171528][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 39.181208][ T738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 39.211554][ T740] ./dev/sda1: Can't lookup blockdev [ 39.462603][ T310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.613975][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.625048][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.635030][ T310] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 39.644321][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.654501][ T310] usb 3-1: config 0 descriptor?? [ 39.665577][ T754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.94'. [ 39.699193][ T756] process 'syz.3.95' launched './file0' with NULL argv: empty string added [ 39.709778][ T9] rust_binder: 755: undelivered TRANSACTION_COMPLETE [ 40.054976][ T761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 40.067375][ T310] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.078636][ T310] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.086194][ T310] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.093732][ T310] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.101179][ T310] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.109479][ T310] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 40.128343][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.285928][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.299810][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.308973][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.317095][ T31] usb 4-1: SerialNumber: syz [ 40.665572][ T742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.674237][ T742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.683329][ T310] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 40.692837][ T310] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 40.702466][ T310] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 40.703115][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.711970][ T310] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 40.728701][ T310] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 40.740026][ T310] usb 3-1: USB disconnect, device number 8 [ 40.863673][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.874777][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.887813][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.894615][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 40.903857][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.912932][ T9] usb 1-1: config 0 descriptor?? [ 40.927907][ T758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.936528][ T758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.947418][ T31] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 41.122777][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 41.128804][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 41.157083][ T9] usb 1-1: USB disconnect, device number 5 [ 41.503754][ T444] usb 4-1: USB disconnect, device number 5 [ 41.905957][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 41.957713][ T444] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 42.018352][ T832] FAULT_INJECTION: forcing a failure. [ 42.018352][ T832] name failslab, interval 1, probability 0, space 0, times 0 [ 42.031077][ T832] CPU: 1 UID: 0 PID: 832 Comm: syz.0.111 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 42.031117][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 42.031133][ T832] Call Trace: [ 42.031140][ T832] [ 42.031150][ T832] __dump_stack+0x21/0x30 [ 42.031179][ T832] dump_stack_lvl+0x140/0x1c0 [ 42.031202][ T832] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.031228][ T832] dump_stack+0x19/0x20 [ 42.031250][ T832] should_fail_ex+0x3c2/0x510 [ 42.031289][ T832] ? __register_sysctl_table+0x7c/0x1440 [ 42.031322][ T832] should_failslab+0xac/0x100 [ 42.031348][ T832] __kmalloc_noprof+0x69/0x510 [ 42.031383][ T832] ? __register_sysctl_table+0x7c/0x1440 [ 42.031416][ T832] __register_sysctl_table+0x7c/0x1440 [ 42.031447][ T832] ? kasan_save_alloc_info+0x3a/0x50 [ 42.031480][ T832] register_net_sysctl_sz+0x245/0x260 [ 42.031513][ T832] nf_log_net_init+0x5eb/0x750 [ 42.031558][ T832] ops_init+0x302/0x5d0 [ 42.031580][ T832] ? __kasan_check_write+0x18/0x20 [ 42.031613][ T832] ? rwsem_read_trylock+0x275/0x5a0 [ 42.031642][ T832] setup_net+0x227/0x9b0 [ 42.031680][ T832] ? copy_net_ns+0xa20/0xa20 [ 42.031713][ T832] ? down_read_killable+0x7f/0x100 [ 42.031746][ T832] ? __cfi_down_read_killable+0x10/0x10 [ 42.031781][ T832] copy_net_ns+0x4fc/0xa20 [ 42.031816][ T832] create_new_namespaces+0x390/0x6f0 [ 42.031841][ T832] unshare_nsproxy_namespaces+0x124/0x180 [ 42.031866][ T832] ksys_unshare+0x4f9/0x920 [ 42.031888][ T832] ? __cfi_ksys_unshare+0x10/0x10 [ 42.031908][ T832] ? __secure_computing+0xee/0x2b0 [ 42.031931][ T832] __x64_sys_unshare+0x3c/0x50 [ 42.031951][ T832] x64_sys_call+0x2998/0x2ee0 [ 42.031975][ T832] do_syscall_64+0x57/0xf0 [ 42.031997][ T832] ? clear_bhb_loop+0x50/0xa0 [ 42.032029][ T832] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.032061][ T832] RIP: 0033:0x7f22d079fb19 [ 42.032081][ T832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.032101][ T832] RSP: 002b:00007f22d16f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 42.032127][ T832] RAX: ffffffffffffffda RBX: 00007f22d0a25fa0 RCX: 00007f22d079fb19 [ 42.032146][ T832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 42.032162][ T832] RBP: 00007f22d0837b70 R08: 0000000000000000 R09: 0000000000000000 [ 42.032177][ T832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.032191][ T832] R13: 00007f22d0a26038 R14: 00007f22d0a25fa0 R15: 00007ffe297ef348 [ 42.032212][ T832] [ 42.032591][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.322584][ T313] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.355463][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 42.355481][ T36] audit: type=1400 audit(1793829401.240:253): avc: denied { nlmsg_write } for pid=851 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.384362][ T36] audit: type=1400 audit(1793829401.270:254): avc: denied { read } for pid=851 comm="syz.0.113" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.442575][ T36] audit: type=1400 audit(1793829401.270:255): avc: denied { open } for pid=851 comm="syz.0.113" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.474562][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 42.485549][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.492686][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 42.506731][ T36] audit: type=1400 audit(1793829401.300:256): avc: denied { ioctl } for pid=851 comm="syz.0.113" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.517804][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.552573][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.560645][ T9] usb 2-1: Product: syz [ 42.562696][ T313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.583219][ T313] usb 3-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 42.596636][ T313] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.601418][ T9] usb 2-1: Manufacturer: syz [ 42.611967][ T313] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 42.624388][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.631668][ T9] usb 2-1: SerialNumber: syz [ 42.632979][ T313] usb 3-1: Product: syz [ 42.648464][ T313] usb 3-1: Manufacturer: syz [ 42.662317][ T313] usb 3-1: SerialNumber: syz [ 42.675936][ T36] audit: type=1400 audit(1793829401.560:257): avc: denied { ioctl } for pid=869 comm="syz.3.116" path="uts:[4026532302]" dev="nsfs" ino=4026532302 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.909333][ T313] usb 3-1: MIDIStreaming interface descriptor not found [ 42.917786][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.934599][ T313] usb 3-1: USB disconnect, device number 9 [ 42.950679][ T36] audit: type=1400 audit(1793829401.830:258): avc: denied { ioctl } for pid=882 comm="syz.3.119" path="socket:[10570]" dev="sockfs" ino=10570 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.057844][ T820] FAULT_INJECTION: forcing a failure. [ 43.057844][ T820] name failslab, interval 1, probability 0, space 0, times 0 [ 43.076028][ T820] CPU: 0 UID: 0 PID: 820 Comm: syz.1.109 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 43.076066][ T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 43.076080][ T820] Call Trace: [ 43.076088][ T820] [ 43.076097][ T820] __dump_stack+0x21/0x30 [ 43.076125][ T820] dump_stack_lvl+0x140/0x1c0 [ 43.076147][ T820] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.076168][ T820] ? d_add+0x49/0x70 [ 43.076189][ T820] ? simple_lookup+0xc7/0x100 [ 43.076213][ T820] dump_stack+0x19/0x20 [ 43.076232][ T820] should_fail_ex+0x3c2/0x510 [ 43.076265][ T820] should_failslab+0xac/0x100 [ 43.076288][ T820] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 43.076321][ T820] ? alloc_inode+0xa9/0x270 [ 43.076344][ T820] ? lookup_one_len+0x1a1/0x300 [ 43.076367][ T820] alloc_inode+0xa9/0x270 [ 43.076390][ T820] ? __cfi_down_write+0x10/0x10 [ 43.076421][ T820] new_inode+0x25/0x1e0 [ 43.076444][ T820] rust_binderfs_create_file+0xa8/0x360 [ 43.076470][ T820] rust_binderfs_create_proc_file+0x12a/0x1a0 [ 43.076495][ T820] ? __cfi_rust_binderfs_create_proc_file+0x10/0x10 [ 43.076519][ T820] ? mutex_unlock+0x90/0x240 [ 43.076546][ T820] ? _RNvMs0_NtNtCsbuTvttuFvbr_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7context7ContextENtNtB7_9allocator8KVmallocE7reserveB1g_+0x2eb/0x3f0 [ 43.076606][ T820] _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x12ae/0x1d00 [ 43.076643][ T820] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 43.076680][ T820] ? bpf_lsm_file_open+0xd/0x20 [ 43.076705][ T820] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 43.076741][ T820] do_dentry_open+0x97f/0x1510 [ 43.076772][ T820] vfs_open+0x86/0x240 [ 43.076798][ T820] ? __cfi_vfs_open+0x10/0x10 [ 43.076825][ T820] ? may_open+0x352/0x430 [ 43.076850][ T820] path_openat+0x2c49/0x35a0 [ 43.076878][ T820] ? kasan_save_alloc_info+0x3a/0x50 [ 43.076908][ T820] ? getname+0x1b/0x30 [ 43.076928][ T820] ? x64_sys_call+0xe69/0x2ee0 [ 43.076963][ T820] ? do_syscall_64+0x57/0xf0 [ 43.076988][ T820] ? do_filp_open+0x440/0x440 [ 43.077015][ T820] do_filp_open+0x1f2/0x440 [ 43.077041][ T820] ? __cfi_do_filp_open+0x10/0x10 [ 43.077071][ T820] ? alloc_fd+0x4c1/0x570 [ 43.077094][ T820] do_sys_openat2+0x134/0x1d0 [ 43.077122][ T820] ? fput+0x1a4/0x230 [ 43.077147][ T820] ? do_sys_open+0x100/0x100 [ 43.077178][ T820] __x64_sys_openat+0x13a/0x170 [ 43.077206][ T820] x64_sys_call+0xe69/0x2ee0 [ 43.077230][ T820] do_syscall_64+0x57/0xf0 [ 43.077250][ T820] ? clear_bhb_loop+0x50/0xa0 [ 43.077281][ T820] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.077311][ T820] RIP: 0033:0x7fa87559fb19 [ 43.077330][ T820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.077349][ T820] RSP: 002b:00007fa8763bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.077373][ T820] RAX: ffffffffffffffda RBX: 00007fa875825fa0 RCX: 00007fa87559fb19 [ 43.077390][ T820] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffffffffff9c [ 43.077406][ T820] RBP: 00007fa875637b70 R08: 0000000000000000 R09: 0000000000000000 [ 43.077420][ T820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.077433][ T820] R13: 00007fa875826038 R14: 00007fa875825fa0 R15: 00007fffde973e38 [ 43.077453][ T820] [ 43.081762][ T889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.105714][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.109477][ T889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.443201][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 43.452468][ T310] usb 1-1: config 1 has no interface number 0 [ 43.458980][ T310] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 43.467828][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.470750][ T310] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 43.482662][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.495257][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.504424][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.512451][ T310] usb 1-1: Product: syz [ 43.518391][ T310] usb 1-1: Manufacturer: syz [ 43.523091][ T310] usb 1-1: SerialNumber: syz [ 43.589815][ T36] audit: type=1400 audit(1793829402.470:259): avc: denied { bind } for pid=892 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.609057][ T36] audit: type=1400 audit(1793829402.470:261): avc: denied { connect } for pid=892 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.628659][ T36] audit: type=1400 audit(1793829402.470:260): avc: denied { name_bind } for pid=892 comm="syz.3.121" src=24099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 43.649458][ T36] audit: type=1400 audit(1793829402.470:262): avc: denied { node_bind } for pid=892 comm="syz.3.121" saddr=172.20.20.170 src=24099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 43.661552][ T9] cdc_ncm 2-1:1.0: failed to get mac address [ 43.683442][ T9] cdc_ncm 2-1:1.0: bind() failure [ 43.691869][ T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 43.700276][ T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 43.711083][ T9] usb 2-1: USB disconnect, device number 5 [ 43.759235][ T900] fuse: Unknown parameter '184467440737095516150x00000000000000030177777777777777777777700000000000000000000' [ 43.931323][ T904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.939876][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.941936][ T904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.956081][ T310] cdc_ncm 1-1:1.1: bind() failure [ 44.082628][ T444] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 44.092588][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 44.099331][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.109322][ T45] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 44.118461][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.126526][ T45] usb 4-1: Product: syz [ 44.130770][ T45] usb 4-1: Manufacturer: syz [ 44.135520][ T45] usb 4-1: SerialNumber: syz [ 44.156694][ T310] usb 1-1: USB disconnect, device number 6 [ 44.244770][ T444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.255877][ T444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 44.266726][ T444] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.280692][ T444] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.289946][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.298217][ T444] usb 3-1: SerialNumber: syz [ 44.304901][ T902] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.313574][ T444] hub 3-1:1.0: bad descriptor, ignoring hub [ 44.319528][ T444] hub 3-1:1.0: probe with driver hub failed with error -5 [ 44.348817][ T45] usb 4-1: USB disconnect, device number 6 [ 44.359676][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.513826][ T902] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.632561][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.762578][ T310] usb 2-1: device descriptor read/64, error -71 [ 44.894358][ T917] FAULT_INJECTION: forcing a failure. [ 44.894358][ T917] name failslab, interval 1, probability 0, space 0, times 0 [ 44.907104][ T917] CPU: 0 UID: 0 PID: 917 Comm: syz.0.129 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 44.907133][ T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.907144][ T917] Call Trace: [ 44.907150][ T917] [ 44.907157][ T917] __dump_stack+0x21/0x30 [ 44.907177][ T917] dump_stack_lvl+0x140/0x1c0 [ 44.907195][ T917] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.907212][ T917] dump_stack+0x19/0x20 [ 44.907227][ T917] should_fail_ex+0x3c2/0x510 [ 44.907254][ T917] should_failslab+0xac/0x100 [ 44.907273][ T917] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 44.907307][ T917] ? __se_sys_fsconfig+0x5c5/0x870 [ 44.907333][ T917] ? _copy_from_user+0x87/0xa0 [ 44.907355][ T917] memdup_user_nul+0x40/0x1a0 [ 44.907378][ T917] __se_sys_fsconfig+0x5c5/0x870 [ 44.907402][ T917] ? __x64_sys_fsconfig+0xf0/0xf0 [ 44.907425][ T917] ? __kasan_check_write+0x18/0x20 [ 44.907450][ T917] ? __kasan_check_write+0x18/0x20 [ 44.907474][ T917] ? fpregs_restore_userregs+0x11c/0x260 [ 44.907498][ T917] __x64_sys_fsconfig+0xc3/0xf0 [ 44.907520][ T917] x64_sys_call+0x11bb/0x2ee0 [ 44.907538][ T917] do_syscall_64+0x57/0xf0 [ 44.907555][ T917] ? clear_bhb_loop+0x50/0xa0 [ 44.907579][ T917] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.907601][ T917] RIP: 0033:0x7f22d079fb19 [ 44.907616][ T917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.907630][ T917] RSP: 002b:00007f22d16f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 44.907647][ T917] RAX: ffffffffffffffda RBX: 00007f22d0a25fa0 RCX: 00007f22d079fb19 [ 44.907659][ T917] RDX: 0000200000002740 RSI: 0000000000000002 RDI: 0000000000000005 [ 44.907670][ T917] RBP: 00007f22d0837b70 R08: 0000000000000001 R09: 0000000000000000 [ 44.907680][ T917] R10: 0000200000002780 R11: 0000000000000246 R12: 0000000000000000 [ 44.907690][ T917] R13: 00007f22d0a26038 R14: 00007f22d0a25fa0 R15: 00007ffe297ef348 [ 44.907704][ T917] [ 45.022795][ T310] usb 2-1: device descriptor read/64, error -71 [ 45.134310][ T444] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 45.362625][ T310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.492614][ T310] usb 2-1: device descriptor read/64, error -71 [ 45.732696][ T310] usb 2-1: device descriptor read/64, error -71 [ 45.842686][ T310] usb usb2-port1: attempt power cycle [ 46.163750][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 46.192654][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.213767][ T310] usb 2-1: device descriptor read/8, error -71 [ 46.312576][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 46.319330][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.327752][ T31] usb 4-1: config 179 has no interface number 0 [ 46.334119][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 46.345256][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 46.356617][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.367861][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 46.379403][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.392711][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 46.401904][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.410307][ T310] usb 2-1: device descriptor read/8, error -71 [ 46.417398][ T935] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.629134][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 46.662546][ T310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.693677][ T310] usb 2-1: device descriptor read/8, error -71 [ 46.797325][ T939] kvm: kvm [938]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 46.805929][ T939] kvm: kvm [938]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 46.823808][ T310] usb 2-1: device descriptor read/8, error -71 [ 46.833715][ T935] netlink: 'syz.3.133': attribute type 63 has an invalid length. [ 46.850176][ T935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.133'. [ 46.932885][ T310] usb usb2-port1: unable to enumerate USB device [ 46.950430][ T310] usb 4-1: USB disconnect, device number 7 [ 46.950473][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 46.964643][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 46.972996][ T444] usb 3-1: USB disconnect, device number 10 [ 46.984236][ T310] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 47.036325][ T953] capability: warning: `syz.0.137' uses 32-bit capabilities (legacy support in use) [ 47.046083][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.050138][ T953] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 47.065019][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.072820][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.080749][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.096898][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.103616][ T952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.139'. [ 47.113337][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.121509][ T960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.139'. [ 47.132644][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.141295][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.149924][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.162988][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.170613][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.178349][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.187186][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.194855][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.216365][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.236434][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.244338][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.253251][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.260712][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.269371][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.277105][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.285130][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.292749][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.311181][ T977] overlayfs: missing 'lowerdir' [ 47.320297][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.328394][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.336413][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.344625][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.352257][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.360198][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.368019][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.376013][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.384019][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.391696][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.399657][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.407735][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.415620][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.424574][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.432251][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.440222][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.448259][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.464165][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.471822][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.479647][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.488085][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.496012][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.519665][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.527841][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.536198][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.544094][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.551616][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.559865][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.567670][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.575594][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.583354][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.590963][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.599186][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.607109][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.615246][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.625271][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.638476][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.646377][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.654336][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.662014][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.669826][ T950] overlay: filesystem on ./file0 not supported as upperdir [ 47.853345][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 47.853363][ T36] audit: type=1400 audit(1793829406.740:283): avc: denied { ioctl } for pid=1037 comm="syz.0.143" path="socket:[12325]" dev="sockfs" ino=12325 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.933902][ T1042] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 48.031910][ T36] audit: type=1400 audit(1793829406.910:284): avc: denied { cmd } for pid=1051 comm="iou-wrk-1052" path="socket:[12343]" dev="sockfs" ino=12343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.322548][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.404683][ T1068] netlink: 120 bytes leftover after parsing attributes in process `syz.0.150'. [ 48.425797][ T36] audit: type=1400 audit(1793829407.310:285): avc: denied { create } for pid=1066 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 48.457704][ T36] audit: type=1400 audit(1793829407.340:286): avc: denied { shutdown } for pid=1066 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.477659][ T36] audit: type=1400 audit(1793829407.340:287): avc: denied { read } for pid=1066 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.497118][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 48.503613][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.511918][ T31] usb 3-1: config 0 has no interface number 0 [ 48.520979][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 48.529690][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 48.539636][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.547990][ T31] usb 3-1: Product: syz [ 48.552344][ T31] usb 3-1: Manufacturer: syz [ 48.557336][ T31] usb 3-1: SerialNumber: syz [ 48.566776][ T31] usb 3-1: config 0 descriptor?? [ 48.576702][ T31] smsc75xx v1.0.0 [ 48.742567][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 48.872576][ T9] usb 4-1: device descriptor read/64, error -71 [ 49.112581][ T9] usb 4-1: device descriptor read/64, error -71 [ 49.177271][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 49.189835][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.352556][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 49.403192][ T36] audit: type=1400 audit(1793829408.290:288): avc: denied { search } for pid=1058 comm="syz.2.149" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 49.426362][ T1059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.435047][ T1059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.482575][ T9] usb 4-1: device descriptor read/64, error -71 [ 49.644469][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 49.655433][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 49.665057][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 49.674670][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 49.684083][ T31] usb 3-1: USB disconnect, device number 11 [ 49.722579][ T9] usb 4-1: device descriptor read/64, error -71 [ 49.832703][ T9] usb usb4-port1: attempt power cycle [ 50.032611][ T372] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.182596][ T372] usb 1-1: Using ep0 maxpacket: 32 [ 50.182604][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 50.196519][ T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.207453][ T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.214345][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.217301][ T372] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 50.232465][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.241237][ T372] usb 1-1: config 0 descriptor?? [ 50.331167][ T36] audit: type=1400 audit(1793829409.210:289): avc: denied { write } for pid=1080 comm="syz.1.156" name="proc" dev="binder" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.353989][ T36] audit: type=1400 audit(1793829409.240:290): avc: denied { getopt } for pid=1080 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.375539][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.412570][ T444] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 50.450375][ T36] audit: type=1400 audit(1793829409.330:291): avc: denied { ioctl } for pid=1091 comm="syz.1.159" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.475384][ T36] audit: type=1400 audit(1793829409.340:292): avc: denied { bind } for pid=1091 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.552605][ T444] usb 3-1: device descriptor read/64, error -71 [ 50.622597][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 50.643661][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.658740][ T372] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 50.773924][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.802579][ T444] usb 3-1: device descriptor read/64, error -71 [ 50.851066][ T372] usb 1-1: USB disconnect, device number 7 [ 50.892579][ T9] usb usb4-port1: unable to enumerate USB device [ 50.963420][ T1122] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 50.973732][ T1122] SELinux: failed to load policy [ 51.023629][ T1126] Mass Storage Function, version: 2009/09/11 [ 51.029853][ T1126] LUN: removable file: (no medium) [ 51.042607][ T444] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 51.172651][ T444] usb 3-1: device descriptor read/64, error -71 [ 51.412593][ T444] usb 3-1: device descriptor read/64, error -71 [ 51.505141][ T1138] FAULT_INJECTION: forcing a failure. [ 51.505141][ T1138] name failslab, interval 1, probability 0, space 0, times 0 [ 51.517879][ T1138] CPU: 1 UID: 0 PID: 1138 Comm: syz.3.173 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 51.517913][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.517925][ T1138] Call Trace: [ 51.517931][ T1138] [ 51.517939][ T1138] __dump_stack+0x21/0x30 [ 51.517959][ T1138] dump_stack_lvl+0x140/0x1c0 [ 51.517975][ T1138] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.517991][ T1138] ? __cfi_futex_wake_mark+0x10/0x10 [ 51.518023][ T1138] dump_stack+0x19/0x20 [ 51.518038][ T1138] should_fail_ex+0x3c2/0x510 [ 51.518066][ T1138] should_failslab+0xac/0x100 [ 51.518084][ T1138] __kmalloc_cache_noprof+0x41/0x470 [ 51.518110][ T1138] ? file_f_owner_allocate+0x92/0x220 [ 51.518126][ T1138] file_f_owner_allocate+0x92/0x220 [ 51.518142][ T1138] do_fcntl+0xe2e/0x1580 [ 51.518159][ T1138] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 51.518185][ T1138] ? check_fcntl_cmd+0xb0/0xb0 [ 51.518201][ T1138] ? mutex_unlock+0x90/0x240 [ 51.518226][ T1138] ? bpf_lsm_file_fcntl+0xd/0x20 [ 51.518244][ T1138] ? security_file_fcntl+0x3e/0x110 [ 51.518269][ T1138] __se_sys_fcntl+0xe4/0x180 [ 51.518285][ T1138] __x64_sys_fcntl+0x7f/0xa0 [ 51.518300][ T1138] x64_sys_call+0x1cb3/0x2ee0 [ 51.518318][ T1138] do_syscall_64+0x57/0xf0 [ 51.518335][ T1138] ? clear_bhb_loop+0x50/0xa0 [ 51.518358][ T1138] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.518381][ T1138] RIP: 0033:0x7f965199fb19 [ 51.518415][ T1138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.518434][ T1138] RSP: 002b:00007f965289f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 51.518460][ T1138] RAX: ffffffffffffffda RBX: 00007f9651c25fa0 RCX: 00007f965199fb19 [ 51.518482][ T1138] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000a [ 51.518492][ T1138] RBP: 00007f9651a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 51.518503][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.518513][ T1138] R13: 00007f9651c26038 R14: 00007f9651c25fa0 R15: 00007ffde928caf8 [ 51.518531][ T1138] [ 51.523121][ T444] usb usb3-port1: attempt power cycle [ 51.792728][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.915613][ T1148] netlink: 68 bytes leftover after parsing attributes in process `syz.3.176'. [ 51.942789][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 51.945483][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.962271][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.972482][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 51.981789][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.991669][ T9] usb 1-1: config 0 descriptor?? [ 52.001086][ T1150] netlink: 'syz.3.177': attribute type 11 has an invalid length. [ 52.072573][ T31] usb 2-1: device descriptor read/64, error -71 [ 52.072573][ T444] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 52.103605][ T444] usb 3-1: device descriptor read/8, error -71 [ 52.233555][ T444] usb 3-1: device descriptor read/8, error -71 [ 52.272585][ T372] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 52.323063][ T31] usb 2-1: device descriptor read/64, error -71 [ 52.399519][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 52.406803][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 52.413864][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 52.420913][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 52.424492][ T372] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.428196][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 52.440594][ T372] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.446166][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 52.456370][ T372] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 52.462718][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 52.472736][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.482851][ T9] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 52.502571][ T444] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.523623][ T444] usb 3-1: device descriptor read/8, error -71 [ 52.562603][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 52.607094][ T9] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 52.653674][ T444] usb 3-1: device descriptor read/8, error -71 [ 52.692553][ T31] usb 2-1: device descriptor read/64, error -71 [ 52.762709][ T444] usb usb3-port1: unable to enumerate USB device [ 52.807570][ T9] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 52.815645][ T9] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 52.829476][ T9] usb 1-1: USB disconnect, device number 8 [ 52.908005][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x2 [ 52.915642][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.923331][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.930966][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.938463][ T31] usb 2-1: device descriptor read/64, error -71 [ 52.944828][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.952230][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.959717][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.967208][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.974661][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.982089][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.989545][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 52.996995][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 53.004514][ T372] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 53.062732][ T31] usb usb2-port1: attempt power cycle [ 53.068556][ T372] hid-picolcd 0003:04D8:C002.0005: unsupported KEY_STATE report [ 53.076555][ T372] hid-picolcd 0003:04D8:C002.0005: probe with driver hid-picolcd failed with error -22 [ 53.112482][ T1153] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 53.127402][ T372] usb 4-1: USB disconnect, device number 12 [ 53.200870][ T1160] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 53.374845][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 53.374864][ T36] audit: type=1400 audit(1793829412.260:308): avc: denied { ioctl } for pid=1162 comm="syz.0.181" path="socket:[12807]" dev="sockfs" ino=12807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.381460][ T1163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'. [ 53.407446][ T31] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 53.445047][ T31] usb 2-1: device descriptor read/8, error -71 [ 53.573891][ T31] usb 2-1: device descriptor read/8, error -71 [ 53.592699][ T310] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 53.662582][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 53.743642][ T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 53.754774][ T310] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 53.767510][ T310] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 53.776659][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.784743][ T310] usb 3-1: Product: syz [ 53.788947][ T310] usb 3-1: Manufacturer: syz [ 53.793621][ T310] usb 3-1: SerialNumber: syz [ 53.822567][ T31] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 53.824278][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 53.840041][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 53.844184][ T31] usb 2-1: device descriptor read/8, error -71 [ 53.852184][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 53.865343][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.873449][ T470] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.881266][ T9] usb 1-1: Product: syz [ 53.885593][ T9] usb 1-1: Manufacturer: syz [ 53.890235][ T9] usb 1-1: SerialNumber: syz [ 53.895865][ T9] usb 1-1: config 0 descriptor?? [ 53.901195][ T1163] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 53.908522][ T1163] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 53.993607][ T31] usb 2-1: device descriptor read/8, error -71 [ 54.004743][ T310] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.016456][ T310] usb 3-1: USB disconnect, device number 16 [ 54.040643][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.059047][ T470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.071025][ T470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.081854][ T470] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 54.091021][ T470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.099819][ T470] usb 4-1: config 0 descriptor?? [ 54.112694][ T31] usb usb2-port1: unable to enumerate USB device [ 54.118150][ T1163] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 54.126361][ T1163] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 54.335661][ T1163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.344355][ T1163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.355124][ T9] Error reading MAC address [ 54.361476][ T9] usb 1-1: USB disconnect, device number 9 [ 54.522847][ T36] audit: type=1400 audit(1793829413.410:309): avc: denied { setattr } for pid=1168 comm="syz.2.183" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.544687][ T36] audit: type=1400 audit(1793829413.410:310): avc: denied { ioctl } for pid=1168 comm="syz.2.183" path="/43/tracing/events/eprobes/my_read_msr1/enable" dev="tracefs" ino=19680823 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 54.687654][ T1174] netlink: 'syz.2.185': attribute type 2 has an invalid length. [ 54.715862][ T36] audit: type=1400 audit(1793829413.600:311): avc: denied { read } for pid=1166 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.742256][ T36] audit: type=1400 audit(1793829413.620:312): avc: denied { write } for pid=1176 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.766249][ T470] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 3/7 [ 54.774437][ T470] cp2112 0003:10C4:EA90.0006: parse failed [ 54.780337][ T470] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22 [ 54.823007][ T1186] loop0: Can't mount, would change RO state [ 54.824520][ T36] audit: type=1400 audit(1793829413.702:313): avc: denied { mounton } for pid=1185 comm="syz.2.188" path="/46/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 54.859668][ T36] audit: type=1326 audit(1793829413.742:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.2.189" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdeaa59fb19 code=0x0 [ 54.911177][ T36] audit: type=1400 audit(1793829413.792:315): avc: denied { read } for pid=1188 comm="syz.2.189" dev="sockfs" ino=13118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.100327][ T36] audit: type=1400 audit(1793829413.982:316): avc: denied { write } for pid=1215 comm="syz.1.195" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.102000][ T1216] usb usb8: usbfs: process 1216 (syz.1.195) did not claim interface 0 before use [ 55.192596][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 55.342560][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 55.350432][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 55.359683][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.367921][ T9] usb 1-1: Product: syz [ 55.372176][ T9] usb 1-1: Manufacturer: syz [ 55.376834][ T9] usb 1-1: SerialNumber: syz [ 55.383281][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 55.389761][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 55.397171][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 55.403301][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 55.702639][ T45] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 55.952652][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 56.008757][ T1226] SELinux: policydb string does not match my string SE Linux [ 56.016472][ T1226] SELinux: failed to load policy [ 56.027332][ T36] audit: type=1400 audit(1793829414.912:317): avc: denied { read } for pid=293 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 56.100670][ T13] bridge_slave_1: left allmulticast mode [ 56.112590][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 56.112609][ T13] bridge_slave_1: left promiscuous mode [ 56.122256][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.125779][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 56.141978][ T13] bridge_slave_0: left allmulticast mode [ 56.147786][ T13] bridge_slave_0: left promiscuous mode [ 56.153762][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.172566][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 56.179258][ T9] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 56.202551][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.211412][ T9] usb 3-1: config 0 descriptor?? [ 56.235046][ T1231] netlink: 140 bytes leftover after parsing attributes in process `syz.0.201'. [ 56.275473][ T13] veth1_macvtap: left promiscuous mode [ 56.282732][ T13] veth0_vlan: left promiscuous mode [ 56.620738][ T1235] netlink: 'syz.0.202': attribute type 17 has an invalid length. [ 56.635626][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.652551][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.667382][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.683322][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.690878][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.712910][ T310] usb 4-1: USB disconnect, device number 13 [ 56.719496][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.733004][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.743555][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.752310][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.760100][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.767847][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.777547][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.790282][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.807567][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.825529][ T9] smartjoyplus 0003:0925:0005.0007: unknown main item tag 0x0 [ 56.834616][ T9] smartjoyplus 0003:0925:0005.0007: hidraw0: USB HID v0.06 Device [HID 0925:0005] on usb-dummy_hcd.2-1/input0 [ 56.857704][ T9] smartjoyplus 0003:0925:0005.0007: no output reports found [ 56.863140][ T1255] udevd[1255]: open /dev/null failed: No such file or directory [ 56.872261][ T9] usb 3-1: USB disconnect, device number 17 [ 57.182577][ T310] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 57.312574][ T310] usb 4-1: device descriptor read/64, error -71 [ 57.552604][ T310] usb 4-1: device descriptor read/64, error -71 [ 57.571657][ T1272] support for cryptoloop has been removed. Use dm-crypt instead. [ 57.592633][ T388] udevd[388]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 57.618672][ T1275] fuse: Bad value for 'user_id' [ 57.625673][ T1279] netlink: 'syz.2.209': attribute type 12 has an invalid length. [ 57.633589][ T1275] fuse: Bad value for 'user_id' [ 57.641973][ T1279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 57.802599][ T310] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 57.932646][ T310] usb 4-1: device descriptor read/64, error -71 [ 58.172602][ T310] usb 4-1: device descriptor read/64, error -71 [ 58.283038][ T310] usb usb4-port1: attempt power cycle [ 58.622648][ T310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 58.644664][ T310] usb 4-1: device descriptor read/8, error -71 [ 58.774052][ T310] usb 4-1: device descriptor read/8, error -71 [ 59.022591][ T310] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 59.051869][ T310] usb 4-1: device descriptor read/8, error -71 [ 59.183815][ T310] usb 4-1: device descriptor read/8, error -71 [ 59.232642][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 59.292801][ T310] usb usb4-port1: unable to enumerate USB device [ 59.383674][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.393854][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.407579][ T31] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 0.09 [ 59.416681][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.424724][ T31] usb 3-1: SerialNumber: syz [ 59.431032][ T31] usb-storage 3-1:1.0: USB Mass Storage device detected [ 59.655357][ T31] usb 3-1: USB disconnect, device number 18 [ 59.841157][ T1301] netlink: 116 bytes leftover after parsing attributes in process `syz.0.217'. [ 59.910007][ T1301] FAULT_INJECTION: forcing a failure. [ 59.910007][ T1301] name failslab, interval 1, probability 0, space 0, times 0 [ 59.922826][ T1301] CPU: 1 UID: 0 PID: 1301 Comm: syz.0.217 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 59.922861][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.922878][ T1301] Call Trace: [ 59.922885][ T1301] [ 59.922896][ T1301] __dump_stack+0x21/0x30 [ 59.922926][ T1301] dump_stack_lvl+0x140/0x1c0 [ 59.922949][ T1301] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.922974][ T1301] dump_stack+0x19/0x20 [ 59.922995][ T1301] should_fail_ex+0x3c2/0x510 [ 59.923032][ T1301] should_failslab+0xac/0x100 [ 59.923058][ T1301] __kmalloc_cache_noprof+0x41/0x470 [ 59.923092][ T1301] ? kernfs_fop_open+0x716/0xd50 [ 59.923123][ T1301] ? seq_open+0xaa/0x1d0 [ 59.923149][ T1301] kernfs_fop_open+0x716/0xd50 [ 59.923192][ T1301] ? __cfi_kernfs_fop_open+0x10/0x10 [ 59.923222][ T1301] do_dentry_open+0x97f/0x1510 [ 59.923254][ T1301] vfs_open+0x86/0x240 [ 59.923279][ T1301] ? __cfi_vfs_open+0x10/0x10 [ 59.923306][ T1301] ? may_open+0x352/0x430 [ 59.923333][ T1301] path_openat+0x2c49/0x35a0 [ 59.923363][ T1301] ? kasan_save_alloc_info+0x3a/0x50 [ 59.923395][ T1301] ? getname+0x1b/0x30 [ 59.923415][ T1301] ? x64_sys_call+0xe69/0x2ee0 [ 59.923440][ T1301] ? do_syscall_64+0x57/0xf0 [ 59.923467][ T1301] ? do_filp_open+0x440/0x440 [ 59.923497][ T1301] do_filp_open+0x1f2/0x440 [ 59.923526][ T1301] ? __cfi_do_filp_open+0x10/0x10 [ 59.923558][ T1301] ? alloc_fd+0x4c1/0x570 [ 59.923583][ T1301] do_sys_openat2+0x134/0x1d0 [ 59.923615][ T1301] ? do_sys_open+0x100/0x100 [ 59.923647][ T1301] __x64_sys_openat+0x13a/0x170 [ 59.923678][ T1301] x64_sys_call+0xe69/0x2ee0 [ 59.923704][ T1301] do_syscall_64+0x57/0xf0 [ 59.923729][ T1301] ? clear_bhb_loop+0x50/0xa0 [ 59.923761][ T1301] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.923794][ T1301] RIP: 0033:0x7f22d079fb19 [ 59.923815][ T1301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.923836][ T1301] RSP: 002b:00007f22d16f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 59.923862][ T1301] RAX: ffffffffffffffda RBX: 00007f22d0a25fa0 RCX: 00007f22d079fb19 [ 59.923881][ T1301] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 59.923898][ T1301] RBP: 00007f22d0837b70 R08: 0000000000000000 R09: 0000000000000000 [ 59.923915][ T1301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.923931][ T1301] R13: 00007f22d0a26038 R14: 00007f22d0a25fa0 R15: 00007ffe297ef348 [ 59.923952][ T1301] [ 60.372653][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 60.522614][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 60.529141][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.537666][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 2 [ 60.547504][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.557215][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 60.568381][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 60.578336][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 60.588019][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 60.599259][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 60.608349][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.616431][ T9] usb 4-1: Product: syz [ 60.620630][ T9] usb 4-1: Manufacturer: syz [ 60.625297][ T9] usb 4-1: SerialNumber: syz [ 60.630534][ T9] usb 4-1: config 0 descriptor?? [ 60.635885][ T1306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.643197][ T1306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.662335][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.851169][ T9] usb 4-1: USB disconnect, device number 18 [ 61.054880][ T1311] FAULT_INJECTION: forcing a failure. [ 61.054880][ T1311] name failslab, interval 1, probability 0, space 0, times 0 [ 61.092552][ T1311] CPU: 0 UID: 0 PID: 1311 Comm: syz.0.219 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 61.092599][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.092626][ T1311] Call Trace: [ 61.092640][ T1311] [ 61.092650][ T1311] __dump_stack+0x21/0x30 [ 61.092683][ T1311] dump_stack_lvl+0x140/0x1c0 [ 61.092709][ T1311] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.092735][ T1311] ? do_futex+0x32a/0x510 [ 61.092765][ T1311] dump_stack+0x19/0x20 [ 61.092788][ T1311] should_fail_ex+0x3c2/0x510 [ 61.092829][ T1311] should_failslab+0xac/0x100 [ 61.092858][ T1311] kmem_cache_alloc_noprof+0x42/0x410 [ 61.092897][ T1311] ? from_kgid_munged+0x197/0x6e0 [ 61.092922][ T1311] ? prepare_creds+0x47/0x6b0 [ 61.092955][ T1311] ? __cfi_make_kgid+0x10/0x10 [ 61.092980][ T1311] prepare_creds+0x47/0x6b0 [ 61.093014][ T1311] __sys_setfsgid+0xda/0x3d0 [ 61.093053][ T1311] __x64_sys_setfsgid+0x3b/0x50 [ 61.093092][ T1311] x64_sys_call+0x2674/0x2ee0 [ 61.093119][ T1311] do_syscall_64+0x57/0xf0 [ 61.093148][ T1311] ? clear_bhb_loop+0x50/0xa0 [ 61.093183][ T1311] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.093214][ T1311] RIP: 0033:0x7f22d079fb19 [ 61.093233][ T1311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.093255][ T1311] RSP: 002b:00007f22d16f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 61.093283][ T1311] RAX: ffffffffffffffda RBX: 00007f22d0a25fa0 RCX: 00007f22d079fb19 [ 61.093303][ T1311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 61.093319][ T1311] RBP: 00007f22d0837b70 R08: 0000000000000000 R09: 0000000000000000 [ 61.093335][ T1311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.093350][ T1311] R13: 00007f22d0a26038 R14: 00007f22d0a25fa0 R15: 00007ffe297ef348 [ 61.093371][ T1311] [ 61.336470][ T1322] fuse: Unknown parameter 'rootUode' [ 61.361669][ T1324] netlink: 5 bytes leftover after parsing attributes in process `syz.2.225'. [ 61.371108][ T1315] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 62.572636][ T64] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 62.722634][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 62.729038][ T64] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 62.740639][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 62.751552][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1297, setting to 1024 [ 62.764140][ T64] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 62.773736][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.781735][ T64] usb 3-1: Product: syz [ 62.785958][ T64] usb 3-1: Manufacturer: syz [ 62.790581][ T64] usb 3-1: SerialNumber: syz [ 62.795916][ T64] usb 3-1: config 0 descriptor?? [ 62.801210][ T1331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.010312][ T64] usb 3-1: USB disconnect, device number 19 [ 63.702623][ T470] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 63.832582][ T470] usb 4-1: device descriptor read/64, error -71 [ 64.072644][ T470] usb 4-1: device descriptor read/64, error -71 [ 64.312645][ T470] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 64.442592][ T470] usb 4-1: device descriptor read/64, error -71 [ 64.682633][ T470] usb 4-1: device descriptor read/64, error -71 [ 64.727665][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 64.727685][ T36] audit: type=1326 audit(1793829423.612:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.0.234" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22d079fb19 code=0x0 [ 64.792712][ T470] usb usb4-port1: attempt power cycle [ 64.811343][ T36] audit: type=1400 audit(1793829423.692:330): avc: denied { setattr } for pid=1358 comm="syz.2.236" name="/" dev="incremental-fs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.988112][ T1364] FAULT_INJECTION: forcing a failure. [ 64.988112][ T1364] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.001259][ T1364] CPU: 0 UID: 0 PID: 1364 Comm: syz.2.238 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 65.001296][ T1364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.001312][ T1364] Call Trace: [ 65.001318][ T1364] [ 65.001327][ T1364] __dump_stack+0x21/0x30 [ 65.001355][ T1364] dump_stack_lvl+0x140/0x1c0 [ 65.001377][ T1364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.001401][ T1364] dump_stack+0x19/0x20 [ 65.001422][ T1364] should_fail_ex+0x3c2/0x510 [ 65.001457][ T1364] should_fail+0xf/0x20 [ 65.001476][ T1364] should_fail_usercopy+0x1e/0x30 [ 65.001499][ T1364] copy_page_from_iter_atomic+0x34b/0x1780 [ 65.001530][ T1364] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 65.001558][ T1364] ? inode_to_bdi+0x6d/0x100 [ 65.001588][ T1364] ? __kasan_check_read+0x15/0x20 [ 65.001621][ T1364] generic_perform_write+0x588/0x970 [ 65.001650][ T1364] ? inode_update_timestamps+0x4d1/0x6e0 [ 65.001682][ T1364] ? __cfi_generic_perform_write+0x10/0x10 [ 65.001709][ T1364] ? generic_write_checks_count+0x426/0x540 [ 65.001737][ T1364] ? mnt_get_write_access_file+0x1af/0x3b0 [ 65.001778][ T1364] ? mnt_put_write_access_file+0xc2/0x100 [ 65.001806][ T1364] ? file_update_time+0x1de/0x210 [ 65.001835][ T1364] shmem_file_write_iter+0x105/0x130 [ 65.001862][ T1364] vfs_write+0x765/0xfd0 [ 65.001896][ T1364] ? __cfi_vfs_write+0x10/0x10 [ 65.001927][ T1364] ? __cfi_mutex_lock+0x10/0x10 [ 65.001978][ T1364] ksys_write+0x145/0x260 [ 65.001998][ T1364] ? __cfi_ksys_write+0x10/0x10 [ 65.002019][ T1364] ? __kasan_check_write+0x18/0x20 [ 65.002051][ T1364] ? fpregs_restore_userregs+0x11c/0x260 [ 65.002085][ T1364] __x64_sys_write+0x7f/0x90 [ 65.002105][ T1364] x64_sys_call+0x271c/0x2ee0 [ 65.002131][ T1364] do_syscall_64+0x57/0xf0 [ 65.002154][ T1364] ? clear_bhb_loop+0x50/0xa0 [ 65.002186][ T1364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.002224][ T1364] RIP: 0033:0x7fdeaa59fb19 [ 65.002244][ T1364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.002264][ T1364] RSP: 002b:00007fdeab3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.002289][ T1364] RAX: ffffffffffffffda RBX: 00007fdeaa825fa0 RCX: 00007fdeaa59fb19 [ 65.002307][ T1364] RDX: 000000003af4701e RSI: 0000200000000040 RDI: 0000000000000003 [ 65.002323][ T1364] RBP: 00007fdeaa637b70 R08: 0000000000000000 R09: 0000000000000000 [ 65.002338][ T1364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.002352][ T1364] R13: 00007fdeaa826038 R14: 00007fdeaa825fa0 R15: 00007ffd9fd6a2d8 [ 65.002373][ T1364] [ 65.322583][ T470] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 65.343613][ T470] usb 4-1: device descriptor read/8, error -71 [ 65.473586][ T470] usb 4-1: device descriptor read/8, error -71 [ 65.712594][ T470] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 65.733823][ T470] usb 4-1: device descriptor read/8, error -71 [ 65.863794][ T470] usb 4-1: device descriptor read/8, error -71 [ 65.972702][ T470] usb usb4-port1: unable to enumerate USB device [ 66.522598][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 66.672572][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 66.678920][ T45] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.689955][ T45] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.699784][ T45] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.712610][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 66.719241][ T45] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 66.728320][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.737173][ T45] usb 3-1: config 0 descriptor?? [ 67.145123][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.152615][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.160066][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.167506][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.174945][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.182337][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.189809][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.197266][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.204717][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.212134][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.219614][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.227279][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.234748][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.242176][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.249643][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.257127][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.264675][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.272090][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.279534][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.286993][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.294434][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.301845][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.309288][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.316721][ T45] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 67.324377][ T45] hid-generic 0003:1B1C:1B3E.0008: failed to start in urb: -90 [ 67.332686][ T45] hid-generic 0003:1B1C:1B3E.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 67.346080][ T45] usb 3-1: USB disconnect, device number 20 [ 67.354487][ T1375] udevd[1375]: open /dev/null failed: No such file or directory [ 67.832652][ T470] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 67.984259][ T470] usb 4-1: unable to get BOS descriptor or descriptor too short [ 67.992769][ T470] usb 4-1: config 1 has an invalid interface number: 156 but max is 2 [ 68.000971][ T470] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.011156][ T470] usb 4-1: config 1 has no interface number 2 [ 68.017465][ T470] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 68.028332][ T470] usb 4-1: config 1 interface 1 has no altsetting 0 [ 68.036355][ T470] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 68.045465][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.053516][ T470] usb 4-1: Product: syz [ 68.057674][ T470] usb 4-1: Manufacturer: syz [ 68.062286][ T470] usb 4-1: SerialNumber: syz [ 68.270523][ T470] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 68.278466][ T470] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 68.285732][ T470] usb 4-1: 1:1 : unsupported format bits 0x7b6c0006 [ 68.292361][ T470] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 68.301927][ T470] usb 4-1: selecting invalid altsetting 0 [ 68.307895][ T470] usb 4-1: selecting invalid altsetting 0 [ 68.313699][ T470] usb 4-1: unit 2 not found! [ 68.318311][ T470] usb 4-1: unit 236 not found! [ 68.327856][ T470] usb 4-1: USB disconnect, device number 23 [ 68.337684][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.123187][ T36] audit: type=1400 audit(1793829428.012:331): avc: denied { read } for pid=1386 comm="syz.3.244" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.181999][ T36] audit: type=1400 audit(1793829428.012:332): avc: denied { open } for pid=1386 comm="syz.3.244" path="/60/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.232553][ T36] audit: type=1400 audit(1793829428.042:333): avc: denied { ioctl } for pid=1386 comm="syz.3.244" path="/60/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.284428][ T36] audit: type=1400 audit(1793829428.042:334): avc: denied { create } for pid=1389 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.332552][ T36] audit: type=1400 audit(1793829428.212:335): avc: denied { setopt } for pid=1394 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.059360][ T36] audit: type=1400 audit(1793829429.942:336): avc: granted { setsecparam } for pid=1410 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 71.282655][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 71.434075][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.442595][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 71.453571][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 71.466858][ T45] usb 4-1: language id specifier not provided by device, defaulting to English [ 71.477041][ T45] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 71.486256][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.494317][ T45] usb 4-1: Product: syz [ 71.498483][ T45] usb 4-1: Manufacturer: syz [ 71.503173][ T45] usb 4-1: SerialNumber: syz [ 71.713571][ T45] usb 4-1: unit 4: unexpected type 0x03 [ 71.719796][ T45] usb 4-1: unit 0 not found! [ 71.724473][ T45] usb 4-1: unit 8 not found! [ 71.732394][ T45] usb 4-1: USB disconnect, device number 24 [ 71.744222][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.830199][ T1426] /dev/loop0: Can't lookup blockdev [ 72.849205][ T1426] /dev/loop0: Can't lookup blockdev [ 72.878397][ T36] audit: type=1400 audit(1793829431.762:337): avc: denied { setopt } for pid=1427 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.900300][ T1424] FAULT_INJECTION: forcing a failure. [ 72.900300][ T1424] name failslab, interval 1, probability 0, space 0, times 0 [ 72.923910][ T36] audit: type=1400 audit(1793829431.802:338): avc: denied { bind } for pid=1427 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.947088][ T1424] CPU: 0 UID: 0 PID: 1424 Comm: syz.3.256 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 72.947129][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.947144][ T1424] Call Trace: [ 72.947152][ T1424] [ 72.947161][ T1424] __dump_stack+0x21/0x30 [ 72.947188][ T1424] dump_stack_lvl+0x140/0x1c0 [ 72.947209][ T1424] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.947232][ T1424] dump_stack+0x19/0x20 [ 72.947252][ T1424] should_fail_ex+0x3c2/0x510 [ 72.947286][ T1424] should_failslab+0xac/0x100 [ 72.947311][ T1424] __kmalloc_cache_noprof+0x41/0x470 [ 72.947361][ T1424] ? kvm_dev_ioctl+0x8d7/0x14c0 [ 72.947387][ T1424] kvm_dev_ioctl+0x8d7/0x14c0 [ 72.947411][ T1424] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 72.947435][ T1424] ? bpf_lsm_file_ioctl+0xd/0x20 [ 72.947459][ T1424] ? security_file_ioctl+0x3e/0x110 [ 72.947493][ T1424] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 72.947515][ T1424] __se_sys_ioctl+0x123/0x1b0 [ 72.947540][ T1424] __x64_sys_ioctl+0x7f/0xa0 [ 72.947563][ T1424] x64_sys_call+0x1878/0x2ee0 [ 72.947588][ T1424] do_syscall_64+0x57/0xf0 [ 72.947611][ T1424] ? clear_bhb_loop+0x50/0xa0 [ 72.947641][ T1424] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.947671][ T1424] RIP: 0033:0x7f965199fb19 [ 72.947691][ T1424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.947711][ T1424] RSP: 002b:00007f965289f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.947735][ T1424] RAX: ffffffffffffffda RBX: 00007f9651c25fa0 RCX: 00007f965199fb19 [ 72.947752][ T1424] RDX: 000000000000003b RSI: 000000000000ae01 RDI: 0000000000000006 [ 72.947767][ T1424] RBP: 00007f9651a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 72.947782][ T1424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.947796][ T1424] R13: 00007f9651c26038 R14: 00007f9651c25fa0 R15: 00007ffde928caf8 [ 72.947816][ T1424] [ 73.161409][ T36] audit: type=1400 audit(1793829432.042:339): avc: denied { mounton } for pid=1422 comm="syz.3.256" path="/65/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 73.212704][ T45] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 73.363986][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 73.376745][ T45] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 73.386107][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.394203][ T45] usb 3-1: Product: syz [ 73.398405][ T45] usb 3-1: Manufacturer: syz [ 73.403079][ T45] usb 3-1: SerialNumber: syz [ 73.716580][ T1440] can0: slcan on ptm0. [ 73.734619][ T45] usb 3-1: Can't get UAC3 power state for id 10 [ 73.744304][ T1421] can0 (unregistered): slcan off ptm0. [ 73.752565][ T45] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 73.789186][ T45] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 73.801302][ T45] usb 3-1: USB disconnect, device number 21 [ 73.820766][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.949462][ T36] audit: type=1400 audit(1793829433.832:340): avc: denied { mount } for pid=1467 comm="syz.2.260" name="/" dev="ramfs" ino=14312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.977123][ T36] audit: type=1400 audit(1793829433.862:341): avc: denied { execute } for pid=1467 comm="syz.2.260" name="file0" dev="ramfs" ino=14319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 75.000232][ T36] audit: type=1400 audit(1793829433.862:342): avc: denied { execute_no_trans } for pid=1467 comm="syz.2.260" path="/file0" dev="ramfs" ino=14319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 75.160315][ T1484] kvm: pic: non byte read [ 75.164793][ T1484] kvm: pic: non byte read [ 75.169284][ T1484] kvm: pic: non byte read [ 75.332602][ T64] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 75.493841][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.504049][ T64] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 75.514957][ T64] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 75.524054][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.534738][ T64] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 75.752240][ T36] audit: type=1400 audit(1793829434.632:343): avc: denied { read write } for pid=1481 comm="syz.3.265" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.775407][ T36] audit: type=1400 audit(1793829434.632:344): avc: denied { open } for pid=1481 comm="syz.3.265" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.809834][ T1486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.818479][ T1486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.832101][ T1486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.840745][ T1486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.849935][ T1486] rust_binder: 1481:1486 got reply transaction with no transaction stack [ 75.858533][ T1486] rust_binder: 1481:1486 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1556 [ 78.113396][ T64] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 78.113399][ T1165] rust_binder: 1481: undelivered TRANSACTION_ERROR: 29201 [ 78.126995][ T64] usb 4-1: USB disconnect, device number 25 [ 78.132348][ T45] rust_binder: 1481: undelivered freeze notification, 0000000000000001 [ 78.145682][ T45] rust_binder: 1481: undelivered freeze notification, 0000000000000001 [ 78.155300][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.086312][ T1510] syz.3.274 (1510): attempted to duplicate a private mapping with mremap. This is not supported. [ 79.110861][ T1513] netlink: 'syz.2.273': attribute type 2 has an invalid length. [ 79.111772][ T1515] overlayfs: failed to clone upperpath [ 79.132468][ T1516] overlayfs: failed to clone upperpath [ 79.492575][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 79.642576][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 79.648892][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 79.655609][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 79.664805][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.673908][ T45] usb 4-1: config 0 descriptor?? [ 79.881184][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 79.887764][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 79.896673][ T45] usb 4-1: USB disconnect, device number 26 [ 81.391836][ T1529] syz.2.278 uses obsolete (PF_INET,SOCK_PACKET) [ 81.416272][ T1529] kvm: pic: level sensitive irq not supported [ 81.416414][ T1529] kvm: pic: non byte write SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=200 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 81.572560][ T36] audit: type=1400 audit(1793829440.452:345): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1627]" dev="pipefs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 81.702601][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 81.774304][ T690] bridge_slave_1: left allmulticast mode [ 81.779997][ T690] bridge_slave_1: left promiscuous mode [ 81.785728][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.793600][ T690] bridge_slave_0: left allmulticast mode [ 81.799289][ T690] bridge_slave_0: left promiscuous mode [ 81.804988][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.935035][ T690] tipc: Disabling bearer [ 81.940487][ T690] tipc: Left network mode [ 81.946216][ T690] veth1_macvtap: left promiscuous mode [ 81.951727][ T690] veth0_vlan: left promiscuous mode [ 82.174920][ T690] bridge_slave_1: left allmulticast mode [ 82.180602][ T690] bridge_slave_1: left promiscuous mode [ 82.186321][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.193989][ T690] bridge_slave_0: left allmulticast mode [ 82.199643][ T690] bridge_slave_0: left promiscuous mode [ 82.205443][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.213320][ T690] bridge_slave_1: left allmulticast mode [ 82.218973][ T690] bridge_slave_1: left promiscuous mode [ 82.224711][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.232256][ T690] bridge_slave_0: left allmulticast mode [ 82.238046][ T690] bridge_slave_0: left promiscuous mode [ 82.243776][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.376822][ T690] veth1_macvtap: left promiscuous mode [ 82.382361][ T690] veth0_vlan: left promiscuous mode [ 82.388014][ T690] veth1_macvtap: left promiscuous mode [ 82.393569][ T690] veth0_vlan: left promiscuous mode